home

Flash.ocx

Shockwave Flash

Microsoft Corporation

The Adobe Flash Player for Internet Explorer allows IE to render Flash objects. While this ActiveX controls is developed and published by Adobe, Microsoft authenticode signs the library.
Publisher:
Adobe Systems, Inc.  (signed by Microsoft Corporation)

Product:
Shockwave Flash

Description:
Adobe Flash Player 11.6 r602

Version:
11,6,602,180

MD5:
7c3df157b103b828bf8d48e986d64617

SHA-1:
ea3195d1bc3ce8a41450545d5a5a684c73e530b0

SHA-256:
09948ce5f96af36394efdb8074ac6d232bb3e81112aa642f16efe48988469455

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/26/2024 7:53:08 PM UTC  (today)

File size:
13.8 MB (14,486,360 bytes)

Product version:
11,6,602,180

Copyright:
Adobe® Flash® Player. Copyright © 1996 Adobe Systems Incorporated. All Rights Reserved. Adobe and Flash are either trademarks or registered trademarks

Trademarks:
Adobe Flash Player

Original file name:
Flash.ocx

File type:
OLE control extension (Win64 OCX)

Language:
English (United States)

Common path:
C:\Windows\System32\macromed\flash\flash.ocx

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
5/14/2012 2:48:53 PM

Valid to:
8/14/2013 2:58:53 PM

Subject:
CN=Microsoft Windows 3rd party Component, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Windows Third Party Component CA 2012, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
61032F5E000000000006

Registration
CLSIDs:
{D27CDB6E-AE6D-11cf-96B8-444553540000}, {D27CDB70-AE6D-11cf-96B8-444553540000}

ProgIDs:
ShockwaveFlash.ShockwaveFlash.11, FlashFactory.FlashFactory.1

COM registered:
Yes

File PE Metadata
Compilation timestamp:
3/1/2013 10:41:08 AM

OS version:
6.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
393216:VKselrGLWUETaaTRNVU1/qfPJDaq7IY7tEpVrBD:felcJD

Entry address:
0x91FBC0

Entry point:
48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, 8F, EA, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, 03, 00, 00, 00, CC, CC, CC, 48, 8B, C4, 48, 89, 58, 20, 4C, 89, 40, 18, 89, 50, 10, 48, 89, 48, 08, 56, 57, 41, 56, 48, 83, EC, 50, 49, 8B, F0, 8B, DA, 4C, 8B, F1, BA, 01, 00, 00, 00, 89, 50, B8, 85, DB, 75, 0F, 39, 1D, 84, EB, 4B, 00, 75, 07, 33, C0, E9, D2, 00, 00, 00, 8D, 43, FF...
 
[+]

Entropy:
6.5835

Code size:
10.2 MB (10,721,280 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.