Should I block it?

No, this file is 100% safe to run.

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
DuplicateToken, DuplicateTokenEx, CreateRestrictedToken, SetThreadToken, ConvertStringSidToSidW, GetLengthSid, SetTokenInformation, ConvertStringSecurityDescriptorToSecurityDescriptorW, CheckTokenMembership, CreateWellKnownSid, CopySid, LookupPrivilegeValueW, EqualSid, RegSetValueExA, GetSecurityDescriptorSacl, RevertToSelf, RegDisablePredefinedCache, RegSetValueExW, RegOpenKeyExA, RegQueryValueExA, RegCreateKeyExA, RegOpenKeyExW, RegQueryValueExW, RegCloseKey, GetSecurityInfo, SetEntriesInAclW, SetSecurityInfo, FreeSid, AllocateAndInitializeSid, CreateProcessAsUserW, GetTokenInformation, OpenProcessToken, ConvertSidToStringSidW, RegQueryInfoKeyW, RegEnumKeyExW, RegCreateKeyExW
comdlg32.dll
CommDlgExtendedError, GetOpenFileNameW, GetSaveFileNameW
crypt32.dll
CertCreateCertificateContext, CertVerifySubjectCertificateContext, CertGetCertificateChain, CertFindCertificateInStore, CertEnumCertificatesInStore, CertFreeCertificateChain, CertOpenStore, CertFreeCertificateContext, CertAddStoreToCollection, CertVerifyRevocation, CertCloseStore, CertAddCertificateContextToStore, CertVerifyCertificateChainPolicy, CryptGetMessageCertificates, CryptVerifyMessageSignature, CertCompareCertificate
gdi32.dll
GetTextAlign, GetTextColor, CreateFontIndirectW, RemoveFontResourceW, CreateScalableFontResourceW, GetFontData, PlayEnhMetaFile, SetEnhMetaFileBits, CreateICW, GetCurrentObject, GetObjectW, GetEnhMetaFileBits, GetBkMode, CreateRectRgn, CombineRgn, CreateEnhMetaFileW, SetPolyFillMode, DeleteEnhMetaFile, GetObjectType, CloseEnhMetaFile, GetClipBox, SelectObject, DeleteDC, CreateDCW, DeleteObject, GetStretchBltMode, GetPolyFillMode, GetMiterLimit, AddFontResourceW, ExtEscape, CreateCompatibleBitmap, SetDIBits, Escape, CreateDCA, ResetDCW, SetWorldTransform, GetDeviceCaps, EndDoc, EndPage, StartPage, AbortDoc, GetRgnBox, StartDocW, GetEnhMetaFileHeader, GetDIBits, GetWorldTransform, EnumEnhMetaFile, PlayEnhMetaFileRecord, ModifyWorldTransform
imm32.dll
ImmGetOpenStatus, ImmCreateContext
kernel32.dll
DllMain
mpr.dll
WNetAddConnection2W, WNetGetResourceInformationW, WNetGetUniversalNameW
ole32.dll
CoUnmarshalInterface, CoInitialize, CreateBindCtx, CoInitializeEx, GetHGlobalFromStream, CoMarshalInterface, CreateStreamOnHGlobal, StringFromCLSID, MkParseDisplayName, CoTaskMemFree, CoTaskMemAlloc, CoCreateInstance, CoUninitialize, ReleaseStgMedium
psapi.dll
GetMappedFileNameW, GetProcessImageFileNameW
secur32.dll
FreeContextBuffer, FreeCredentialsHandle, DeleteSecurityContext, ApplyControlToken, EncryptMessage, DecryptMessage, AcquireCredentialsHandleA, InitializeSecurityContextA, QueryContextAttributesA, QueryCredentialsAttributesA
shell32.dll
SHFileOperationW, ShellExecuteExW, ShellExecuteW, SHGetFolderPathW, SHBrowseForFolderW, SHGetPathFromIDListW, SHGetFolderPathA, SHCreateDirectoryExW, CommandLineToArgvW
shlwapi.dll
PathIsDirectoryW, AssocQueryStringW, UrlCanonicalizeW, PathCanonicalizeW, PathIsRelativeW, PathFindExtensionW, PathFileExistsA, PathAppendW, PathAddBackslashW, PathRemoveFileSpecW, PathCreateFromUrlW, UrlIsW, PathIsURLW, PathFileExistsW
urlmon.dll
CoInternetParseUrl
user32.dll
GetDesktopWindow, GetThreadDesktop, GetProcessWindowStation, UserHandleGrantAccess, CloseWindowStation, CreateWindowStationW, CreateDesktopW, GetUserObjectInformationW, GetWindow, EnumWindows, LoadCursorW, LoadIconW, IsWindowEnabled, CloseWindow, GetAsyncKeyState, SetForegroundWindow, SetCursor, GetClientRect, MapWindowPoints, MonitorFromWindow, GetParent, GetTopWindow, ScreenToClient, SetCursorPos, ClientToScreen, GetWindowRect, EnumThreadWindows, GetActiveWindow, GetClipboardFormatNameA, GetClipboardData, GetPropW, GetDC, OpenClipboard, CloseClipboard, EmptyClipboard, SetClipboardData, IsClipboardFormatAvailable, EnumClipboardFormats, CountClipboardFormats, WaitMessage, GetClipboardSequenceNumber, GetClipboardOwner, GetPriorityClipboardFormat, GetOpenClipboardWindow, ChangeClipboardChain, GetClipboardViewer, SetClipboardViewer, RegisterClipboardFormatW, RegisterClipboardFormatA, DestroyWindow, RemovePropW, SetWindowsHookExW, GetQueueStatus, PeekMessageW, UnhookWindowsHookEx, AllowSetForegroundWindow, GetClassNameW, GetKeyState, UnregisterClassW, PostQuitMessage, CallMsgFilterW, TranslateMessage, DispatchMessageW, FindWindowExW, MsgWaitForMultipleObjectsEx, GetWindowThreadProcessId, AttachThreadInput, SetActiveWindow, SetFocus, GetFocus, EnableWindow, PostMessageW, IsWindowVisible, UpdateWindow, ShowWindow, CreateWindowExW, CloseDesktop, OpenInputDesktop, SetThreadDesktop, SetProcessWindowStation, SetWindowLongW, WaitForInputIdle, GetForegroundWindow, GetAncestor, SetTimer, KillTimer, MsgWaitForMultipleObjects, MessageBoxW, SetPropW, GetClassNameA, CallNextHookEx, DestroyIcon, InvalidateRect, GetUpdateRect, GetWindowLongW, SendMessageW, ValidateRect, RedrawWindow, IsWindow, GetClipboardFormatNameW, CallWindowProcW, DefWindowProcW, RegisterClassExW, RegisterWindowMessageW, WindowFromPoint, GetCursorPos, ReleaseDC, SetWindowPos
wininet.dll
InternetQueryDataAvailable, InternetWriteFile, HttpEndRequestA, InternetQueryOptionA, InternetErrorDlg, InternetSetOptionA, HttpAddRequestHeadersA, HttpSendRequestExA, InternetOpenA, InternetConnectA, HttpOpenRequestA, HttpSendRequestA, InternetCloseHandle, InternetReadFile, HttpQueryInfoA
winmm.dll
timeEndPeriod, timeGetTime, timeBeginPeriod
winspool.drv
EnumPrintersW, DocumentPropertiesW, GetPrinterW, ClosePrinter, SetPrinterW, DeviceCapabilitiesW, OpenPrinterW, EnumPrintersA

flashplayerplugin_11_5_502_149.exe

Shockwave Flash by Adobe Systems Incorporated (Signed)

Remove flashplayerplugin_11_5_502_149.exe
Version:   11,5,502,149
MD5:   476fd5f12c0ff32cdf0a179320fcb726
SHA1:   ae68ed25e995d855d6fec47cc27b48525f9e5d4b
SHA256:   9b2a6d0576b9ae9c9cbb1ce1e4836ec24b2a63a33c739c50eccc8c058d8943b1

Overview

flashplayerplugin_11_5_502_149.exe executes as a process with the local user's privileges typically within the context of its parent plugin-container.exe (Firefox by Mozilla Corporation). It is installed with a couple of know programs including Adobe Flash Player 11 ActiveX published by Adobe Systems Incorporated, Adobe Flash Player 11 Plugin from Adobe Systems Incorporated and Adobe Flash Player 11 Plugin by Adobe Systems Incorporated. The file is digitally signed by Adobe Systems Incorporated which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:flashplayerplugin_11_5_502_149.exe
Publisher:Adobe Systems, Inc.
Product name:Shockwave Flash
Description:Adobe Flash Player 11.5 r502
Typical file path:C:\windows\syswow64\macromed\flash\flashplayerplugin_11_5_502_149.exe
Original name:SAFlashPlayer.exe
File version:11,5,502,149
Size:1.72 MB (1,808,240 bytes)
Certificate
Issued to:Adobe Systems Incorporated
Authority (CA):VeriSign
Effective date:Sunday, September 23, 2012
Expiration date:Thursday, October 1, 2015
Digital DNA
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
Adobe Systems Incorporated
4% remove
The Adobe Flash Player is freeware software for viewing multimedia, executing Rich Internet Applications, and streaming video and audio, content created on the Adobe Flash platform. Flash Player can run from a web browser (as a browser plug-in) or on supported mobile devices. Adobe Flash Player 11 is available in three flavors: "ActiveX", "Plug-in" and "Projector". The "ActiveX" version is an ActiveX control for use in Internet Explorer...
Adobe Systems Incorporated
5% remove
The Adobe Flash Player is freeware software for viewing multimedia, executing Rich Internet Applications, and streaming video and audio, content created on the Adobe Flash platform. Adobe Flash Player 11 is available in three flavors: "ActiveX", "Plug-in" and "Projector". The "ActiveX" version is an ActiveX control for use in Internet Explorer and any other Windows applications that supports ActiveX technology. The "plug-in" version is ...
Adobe Systems Incorporated
5% remove
Adobe Flash Player 10 ActiveX is software for viewing multimedia, Rich Internet Applications, and streaming video and audio, on a computer web browser. Flash Player runs SWF files that can be created by the Adobe Flash authoring tool, by Adobe Flex or by a number of other Macromedia and third party tools. Flash Player is freely available as a plugin for recent versions of web browsers (such as Internet Explorer, Mozilla Firefox, Opera, ...
Adobe Systems Incorporated
6% remove
Adobe Flash Player 9 ActiveX is software for viewing multimedia, Rich Internet Applications, and streaming video and audio, on a computer web browser. Flash Player runs SWF files that can be created by the Adobe Flash authoring tool, by Adobe Flex or by a number of other Macromedia and third party tools. Flash Player is freely available as a plugin for recent versions of web browsers (such as Internet Explorer, Mozilla Firefox, Opera, a...
Adobe Systems Incorporated
9% remove
The Adobe Flash Player ActiveX is software for viewing multimedia, Rich Internet Applications, and streaming video and audio, on a computer web browser. Flash Player runs SWF files that can be created by the Adobe Flash authoring tool, by Adobe Flex or by a number of other Macromedia and third party tools. Flash Player is freely available as a plugin for recent versions of web browsers (such as Internet Explorer, Mozilla Firefox, Opera,...
Adobe Systems Incorporated
3% remove
Adobe Flash Player 10 Plugin is software for viewing multimedia, Rich Internet Applications, and streaming video and audio, on a computer web browser. Flash Player runs SWF files that can be created by the Adobe Flash authoring tool, by Adobe Flex or by a number of other Macromedia and third party tools. Flash Player is freely available as a plugin for recent versions of web browsers (such as Internet Explorer, Mozilla Firefox, Opera, a...
Adobe Systems Incorporated
3% remove
The Adobe Flash Player is software for viewing multimedia, Rich Internet Applications, and streaming video and audio, on a computer web browser. Flash Player runs SWF files that can be created by the Adobe Flash authoring tool, by Adobe Flex or by a number of other Macromedia and third party tools. Flash Player is freely available as a plugin for recent versions of web browsers (such as Internet Explorer, Mozilla Firefox, Opera, and Saf...
Adobe Systems Incorporated
7% remove
Adobe Flash is a multimedia platform used to add animation, video, and interactivity to web pages. Flash is frequently used for advertisements, games and flash animations for broadcast. The Adobe Flash Player is software for viewing multimedia, Rich Internet Applications, and streaming video and audio, on a computer web browser or on supported mobile devices. Flash Player is freely available as a plugin for recent versions of web brows...
Adobe Systems Incorporated
12% remove
Cross-platform plugin plays animations, videos and sound files in .SWF format. Adobe® Flash® Player is a lightweight browser plug-in and rich Internet application runtime that delivers consistent and engaging user experiences.
Adobe Systems Incorporated
11% remove
Adobe® Flash® Player 12 drives innovation for rich, engaging digital experiences with new features for cross-platform browser-based viewing of expressive rich internet applications, content, and videos across devices. This beta release provides access to the Flash Player 12 runtime for Mac OS and Windows desktop environments. We are moving to a rapid beta release cycle using "Background Update". We encourage you to subscribe so you can ...
Adobe Systems Incorporated
3% remove
Adobe® Flash® Player 13 drives innovation for rich, engaging digital experiences with new features for cross-platform browser-based viewing of expressive rich internet applications, content, and videos across devices. This beta release provides access to the Flash Player 13 runtime for Mac OS and Windows desktop environments.
Adobe Systems Incorporated
8% remove
Cross-platform plugin plays animations, videos and sound files in .SWF format.
Adobe Systems Incorporated
3% remove
Cross-platform plugin plays animations, videos and sound files in .SWF format.
Adobe Systems Incorporated
4% remove
Cross-platform plugin plays animations, videos and sound files in .SWF format.
Adobe Systems Incorporated
4% remove
Cross-platform plugin plays animations, videos and sound files in .SWF format.
Adobe Systems Incorporated
11% remove
Adobe Flash Player is the standard for delivering high-impact, rich Web content. Designs, animation, and application user interfaces are deployed immediately across all browsers and platforms, attracting and engaging users with a rich Web experience.
Adobe Systems Incorporated
8% remove
Adobe Systems Incorporated
6% remove
Adobe Systems Incorporated
6% remove
Adobe Systems Incorporated
8% remove

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.01182474%
0.028634%
Kernel CPU:0.00465340%
0.013761%
User CPU:0.00717134%
0.014873%
Kernel CPU time:846,712 ms/min
100,923,805ms/min
CPU cycles:555,920/sec
17,470,203/sec
Context switches:377/sec
284/sec
Memory
Private memory:17.54 MB
21.59 MB
Private (maximum):27.43 MB
Private (minimum):8.87 MB
Non-paged memory:17.54 MB
21.59 MB
Virtual memory:129.99 MB
140.96 MB
Virtual memory (peak):150.18 MB
169.69 MB
Working set:16.68 MB
18.61 MB
Working set (peak):32.67 MB
37.95 MB
Page faults:61,162/min
2,039/min
I/O
I/O read transfer:4.11 MB/sec
1.02 MB/min
I/O read operations:6,748/sec
343/min
I/O write transfer:947.56 KB/sec
274.99 KB/min
I/O write operations:6,877/sec
227/min
I/O other transfer:35.12 KB/sec
448.09 KB/min
I/O other operations:1,407/sec
1,671/min
Resource allocations
Threads:11
12
Handles:269
600
GUI GDI count:17
103
GUI GDI peak:16
142
GUI USER count:23
49
GUI USER peak:24
71

BehaviorsProcess properties

Integrety level:Medium
Platform:32-bit
Command lines:
  • "C:\Windows\System32\macromed\flash\flashplayerplugin_11_5_502_149.exe" --proxy-stub-channel=flash4172.65e0bd48.41 --host-broker-channel=flash4172.65e0bd48.18467 --host-pid=4172 --host-npapi-version=22 --plugin-path="C:\Windows\System32\macromed\flash\npswf32_11_5_502_149.dll"
  • "C:\Windows\System32\macromed\flash\flashplayerplugin_11_5_502_149.exe" --channel=1988.0021f458.294309865 --proxy-stub-channel=flash4172.65e0bd48.41 --plugin-path="C:\Windows\System32\macromed\flash\npswf32_11_5_502_149.dll" --host-npapi-version=22 --type=renderer
  • "C:\Windows\System32\macromed\flash\flashplayerplugin_11_5_502_149.exe" --channel=5640.0018f464.360013130 --proxy-stub-channel=flash380.5db573d8.41 --plugin-path="C:\Windows\System32\macromed\flash\npswf32_11_5_502_149.dll" --host-npapi-version=27 --type=renderer
  • "C:\Windows\System32\macromed\flash\flashplayerplugin_11_5_502_149.exe" --proxy-stub-channel=flash380.5db573d8.41 --host-broker-channel=flash380.5db573d8.18467 --host-pid=380 --host-npapi-version=27 --plugin-path="C:\Windows\System32\macromed\flash\npswf32_11_5_502_149.dll"
  • "C:\Windows\System32\macromed\flash\flashplayerplugin_11_5_502_149.exe" --proxy-stub-channel=flash5216.5950ffd0.41 --host-broker-channel=flash5216.5950ffd0.18467 --host-pid=5216 --host-npapi-version=27 --plugin-path="C:\Windows\System32\macromed\flash\npswf32_11_5_502_149.dll"
  • "C:\Windows\System32\macromed\flash\flashplayerplugin_11_5_502_149.exe" --channel=5332.0021f88c.1512363952 --proxy-stub-channel=flash5216.5950ffd0.41 --plugin-path="C:\Windows\System32\macromed\flash\npswf32_11_5_502_149.dll" --host-npapi-version=27 --type=renderer
  • "C:\Windows\System32\macromed\flash\flashplayerplugin_11_5_502_149.exe" --proxy-stub-channel=flash4228.1034ffd0.41 --host-broker-channel=flash4228.1034ffd0.18467 --host-pid=4228 --host-npapi-version=27 --plugin-path="C:\Windows\System32\macromed\flash\npswf32_11_5_502_149.dll"
  • (18 more)
Owner:User
Parent processes:

ResourcesThreads

Averages
 
FlashPlayerPlugin_11_5_502_149.exe (main module)
Total CPU:0.52430148%
0.272967%
Kernel CPU:0.15407049%
0.107585%
User CPU:0.37023098%
0.165382%
CPU cycles:15,959,584/sec
5,741,424/sec
Context switches:54/sec
79/sec
Memory:1.74 MB
1.16 MB
ntdll.dll
Total CPU:0.07868957%
Kernel CPU:0.03965932%
User CPU:0.03903025%
CPU cycles:5,201,500/sec
Context switches:113/sec
Memory:1.66 MB
npswf32_11_5_502_149.dll (Shockwave Flash by Adobe Systems)
Total CPU:0.03818114%
Kernel CPU:0.01769740%
User CPU:0.02048374%
CPU cycles:1,708,383/sec
Context switches:14/sec
Memory:14.89 MB
wow64.dll
Total CPU:0.03065214%
Kernel CPU:0.02554345%
User CPU:0.00510869%
CPU cycles:649,736/sec
Context switches:2/sec
Memory:276 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Ultimate 23.53%
Windows 8 Pro 23.53%
Windows 7 Home Premium 17.65%
Windows Vista Ultimate 11.76%
Windows 8 Pro with Media Center 11.76%
Windows 7 Professional 11.76%

Distribution by countryDistribution by country

United States installs about 29.41% of Shockwave Flash.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 20.00%
Toshiba 20.00%
ASUS 20.00%
Hewlett-Packard 20.00%
Acer 10.00%
GIGABYTE 10.00%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE