» ImageUploader4_5.ocx
Overview
Analysis
File Details
Behaviors (1)

ImageUploader4_5.ocx

Facebook Photo Uploader 4

Facebook, Inc.

File name:

Publisher:

Facebook, Inc. (signed and verified)

Product:

Facebook Photo Uploader 4

Version:

4, 5, 57, 2

MD5:

af52969832631a3645156fcca5db75a9

SHA-1:

ba52e7eb44f67883f3b6769077f6f3cda3e86350

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/19/2024 1:25:52 AM UTC (today)

File size:

2.5 MB (2,672,136 bytes)

Product version:

4, 5, 57, 2

Original file name:

ImageUploader4_5.ocx

File type:

OLE control extension (Win32 OCX)

Language:

English (United States)

Common path:

C:\windows\downloaded Program Files\imageuploader4_5.ocx

Digital Signature

Signed by:

Facebook, Inc.

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

10/8/2006 8:00:00 PM

Valid to:

10/14/2008 7:59:59 PM

Subject:

CN="Facebook, Inc.", OU=SECURE APPLICATION DEVELOPMENT, O="Facebook, Inc.", L=Palo Alto, S=California, C=US

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

539FC6023B3C56C8D4A7C7581395AF3E

Registration

CLSIDs:

{376ABB76-CA04-40aa-BD92-0852C83733B8}, {3C47C579-D33B-481F-B580-85924756719A}, {4175EB98-7785-4f5a-8D0E-52697C87571A}, {9A2EF86C-7C49-4956-B3AA-F6A24912BD0D}, {A33745AB-1CA5-4e3f-9DA3-63BFEB5F7849}, {D6E7CFB5-C074-4d1c-B647-663D1A8D96BF}

ProgIDs:

Facebook.PaneItems.4.1, Facebook.UploadPane.4.1, Facebook.Thumbnail.4.1, Facebook.UploadItems.4.1, Facebook.ShellCombo.4.1, Facebook.FacebookPhotoUploader4.5.1

COM registered:

Yes

File PE Metadata

Compilation timestamp:

3/20/2008 9:06:22 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

7.10

CTPH (ssdeep):

49152:UoLMhyYkVFMKj6iezabuxMNhd5TMHSjgUwl:UPyY+jEfaNhd5TMHD

Entry address:

0x181FDA

Entry point:

6A, 0C, 68, 68, 25, 1F, 10, E8, 8A, 3E, 00, 00, 33, C0, 40, 89, 45, E4, 8B, 75, 0C, 33, FF, 3B, F7, 75, 0C, 39, 3D, 44, AC, 23, 10, 0F, 84, B3, 00, 00, 00, 89, 7D, FC, 3B, F0, 74, 05, 83, FE, 02, 75, 31, A1, 58, 13, 24, 10, 3B, C7, 74, 0C, FF, 75, 10, 56, FF, 75, 08, FF, D0, 89, 45, E4, 39, 7D, E4, 0F, 84, 85, 00, 00, 00, FF, 75, 10, 56, FF, 75, 08, E8, 22, FE, FF, FF, 89, 45, E4, 3B, C7, 74, 72, 8B, 5D, 10, 53, 56, FF, 75, 08, E8, 35, 63, EA, FF, 89, 45, E4, 83, FE, 01, 75, 0E, 3B, C7, 75, 0A, 53, 57, FF... 
[+]

Entropy:

6.3514

Developed / compiled with:

Microsoft Visual C++ v7.1

Code size:

1.7 MB (1,757,184 bytes)

ActiveX Install

Name:

{D6E7CFB5-C074-4D1C-B647-663D1A8D96BF}

Scan ImageUploader4_5.ocx - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.