» flash32_25_0_0_127.ocx
Overview
Analysis
File Details
Behaviors (1)
Programs (8)

flash32_25_0_0_127.ocx

Shockwave Flash

Adobe Systems Incorporated

This is installed with multiple programs including Adobe Flash Player 26 NPAPI and Adobe Flash Player 25 ActiveX.

File name:

flash32_25_0_0_127.ocx

Publisher:

Adobe Systems, Inc. (signed by Adobe Systems Incorporated)

Product:

Shockwave Flash

Description:

Adobe Flash Player 25.0 r0

Version:

25,0,0,127

MD5:

8c65b4957f8f640474615cd8c270ed93

SHA-1:

c91fc170a2025e841b0a3bf3b140366ca205bce2

SHA-256:

32598da7fc78043a2dd6bf8066e6ba0fbfe14faf8270f1ae34403e640d8af76d

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/23/2024 8:17:49 AM UTC (today)

File size:

20 MB (20,990,040 bytes)

Product version:

25,0,0,127

Trademarks:

Adobe Flash Player

Original file name:

Flash.ocx

File type:

OLE control extension (Win32 OCX)

Language:

English (United States)

Common path:

C:\Windows\System32\macromed\flash\flash32_25_0_0_127.ocx

Digital Signature

Signed by:

Adobe Systems Incorporated

Authority:

Symantec Corporation

Valid from:

5/14/2015 3:00:00 AM

Valid to:

5/8/2017 2:59:59 AM

Subject:

CN=Adobe Systems Incorporated, OU=Flash Player, O=Adobe Systems Incorporated, L=San Jose, S=California, C=US, SERIALNUMBER=2748129, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=Delaware, OID.1.3.6.1.4.1.311.60.2.1.3=US

Issuer:

CN=Symantec Class 3 Extended Validation Code Signing CA - G2, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:

4EA1E89E15EA4FFA937984D88F545FBA

Registration

CLSIDs:

{D27CDB6E-AE6D-11cf-96B8-444553540000}, {D27CDB70-AE6D-11cf-96B8-444553540000}

ProgIDs:

ShockwaveFlash.ShockwaveFlash.25, FlashFactory.FlashFactory.1

COM registered:

Yes

File PE Metadata

Compilation timestamp:

3/1/2017 12:11:19 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

Entry address:

0xA22631

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 02, 47, 01, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 6A, 10, 68, E8, B1, 15, 11, E8, 60, EA, FF, FF, 8B, 5D, 08, 85, DB, 75, 0E, FF, 75, 0C, E8, 12, DD, FF, FF, 59, E9, CC, 01, 00, 00, 8B, 75, 0C, 85, F6, 75, 0C, 53, E8, 30, B8, FF, FF, 59, E9, B7, 01, 00, 00, 83, 3D, 38, C3, 39, 11, 03, 0F, 85, 93, 01, 00, 00, 33, FF, 89, 7D, E4, 83, FE, E0, 0F, 87, 8A, 01, 00, 00, 6A, 04, E8, 6F, 93, 00, 00, 59, 89, 7D, FC, 53, E8, 98... 
[+]

Entropy:

7.0144

Code size:

13.6 MB (14,285,824 bytes)

Internet Explorer ActiveX Object

CLSID:

{D27CDB6E-AE6D-11CF-96B8-444553540000}

CLSID name:

Shockwave Flash Object

The file flash32_25_0_0_127.ocx has been discovered within the following programs.

Adobe Flash Player 24 NPAPI by Adobe Systems Incorporated

www.adobe.com

12% remove it

Adobe Flash Player 24 PPAPI by Adobe Systems Incorporated

3% remove it

Adobe Flash Player 25 ActiveX by Adobe Systems Incorporated

9% remove it

Adobe Flash Player 25 NPAPI by Adobe Systems Incorporated

8% remove it

Adobe Flash Player 25 PPAPI by Adobe Systems Incorporated

6% remove it

Adobe Flash Player 26 NPAPI by Adobe Systems Incorporated

5% remove it

Adobe Flash Player 27 NPAPI by Adobe Systems Incorporated

6% remove it

Adobe Flash Player 28 PPAPI by Adobe Systems Incorporated

11% remove it

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.