Should I block it?

No, this file is 100% safe to run.

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
DuplicateToken, DuplicateTokenEx, CreateRestrictedToken, SetThreadToken, ConvertStringSidToSidW, GetLengthSid, SetTokenInformation, ConvertStringSecurityDescriptorToSecurityDescriptorW, CheckTokenMembership, CreateWellKnownSid, CopySid, LookupPrivilegeValueW, EqualSid, RegSetValueExA, GetSecurityDescriptorSacl, RevertToSelf, RegDisablePredefinedCache, RegSetValueExW, RegOpenKeyExA, RegQueryValueExA, RegCreateKeyExA, RegOpenKeyExW, RegQueryValueExW, RegCloseKey, GetSecurityInfo, SetEntriesInAclW, SetSecurityInfo, FreeSid, AllocateAndInitializeSid, CreateProcessAsUserW, GetTokenInformation, OpenProcessToken, ConvertSidToStringSidW, RegQueryInfoKeyW, RegEnumKeyExW, RegCreateKeyExW
comdlg32.dll
CommDlgExtendedError, GetOpenFileNameW, GetSaveFileNameW
crypt32.dll
CertCreateCertificateContext, CertVerifySubjectCertificateContext, CertGetCertificateChain, CertFindCertificateInStore, CertEnumCertificatesInStore, CertFreeCertificateChain, CertOpenStore, CertFreeCertificateContext, CertAddStoreToCollection, CertVerifyRevocation, CertCloseStore, CertAddCertificateContextToStore, CertVerifyCertificateChainPolicy, CryptGetMessageCertificates, CryptVerifyMessageSignature, CertCompareCertificate
gdi32.dll
GetTextAlign, GetTextColor, CreateFontIndirectW, RemoveFontResourceW, CreateScalableFontResourceW, GetFontData, PlayEnhMetaFile, SetEnhMetaFileBits, CreateICW, GetCurrentObject, GetObjectW, GetEnhMetaFileBits, GetBkMode, CreateRectRgn, CombineRgn, CreateEnhMetaFileW, SetPolyFillMode, DeleteEnhMetaFile, GetObjectType, CloseEnhMetaFile, GetClipBox, SelectObject, DeleteDC, CreateDCW, DeleteObject, GetStretchBltMode, GetPolyFillMode, GetMiterLimit, AddFontResourceW, ExtEscape, CreateCompatibleBitmap, SetDIBits, Escape, CreateDCA, ResetDCW, SetWorldTransform, GetDeviceCaps, EndDoc, EndPage, StartPage, AbortDoc, GetRgnBox, StartDocW, GetEnhMetaFileHeader, GetDIBits, GetWorldTransform, EnumEnhMetaFile, PlayEnhMetaFileRecord, ModifyWorldTransform
imm32.dll
ImmGetOpenStatus, ImmCreateContext
kernel32.dll
DllMain
mpr.dll
WNetAddConnection2W, WNetGetResourceInformationW, WNetGetUniversalNameW
ole32.dll
CoUnmarshalInterface, CoInitialize, CreateBindCtx, CoInitializeEx, GetHGlobalFromStream, CoMarshalInterface, CreateStreamOnHGlobal, StringFromCLSID, MkParseDisplayName, CoTaskMemFree, CoTaskMemAlloc, CoCreateInstance, CoUninitialize, ReleaseStgMedium
psapi.dll
GetMappedFileNameW, GetProcessImageFileNameW
secur32.dll
FreeContextBuffer, FreeCredentialsHandle, DeleteSecurityContext, ApplyControlToken, EncryptMessage, DecryptMessage, AcquireCredentialsHandleA, InitializeSecurityContextA, QueryContextAttributesA, QueryCredentialsAttributesA
shell32.dll
SHFileOperationW, ShellExecuteExW, ShellExecuteW, SHGetFolderPathW, SHBrowseForFolderW, SHGetPathFromIDListW, SHGetFolderPathA, SHCreateDirectoryExW, CommandLineToArgvW
shlwapi.dll
PathIsDirectoryW, AssocQueryStringW, UrlCanonicalizeW, PathCanonicalizeW, PathIsRelativeW, PathFindExtensionW, PathFileExistsA, PathAppendW, PathAddBackslashW, PathRemoveFileSpecW, PathCreateFromUrlW, UrlIsW, PathIsURLW, PathFileExistsW
urlmon.dll
CoInternetParseUrl
user32.dll
GetDesktopWindow, GetThreadDesktop, GetProcessWindowStation, UserHandleGrantAccess, CloseWindowStation, CreateWindowStationW, CreateDesktopW, GetUserObjectInformationW, GetWindow, EnumWindows, LoadCursorW, LoadIconW, IsWindowEnabled, CloseWindow, GetAsyncKeyState, SetForegroundWindow, SetCursor, GetClientRect, MapWindowPoints, MonitorFromWindow, GetParent, GetTopWindow, ScreenToClient, SetCursorPos, ClientToScreen, GetWindowRect, EnumThreadWindows, GetActiveWindow, GetClipboardFormatNameA, GetClipboardData, GetPropW, GetDC, OpenClipboard, CloseClipboard, EmptyClipboard, SetClipboardData, IsClipboardFormatAvailable, EnumClipboardFormats, CountClipboardFormats, WaitMessage, GetClipboardSequenceNumber, GetClipboardOwner, GetPriorityClipboardFormat, GetOpenClipboardWindow, ChangeClipboardChain, GetClipboardViewer, SetClipboardViewer, RegisterClipboardFormatW, RegisterClipboardFormatA, DestroyWindow, RemovePropW, SetWindowsHookExW, GetQueueStatus, PeekMessageW, UnhookWindowsHookEx, AllowSetForegroundWindow, GetClassNameW, GetKeyState, UnregisterClassW, PostQuitMessage, CallMsgFilterW, TranslateMessage, DispatchMessageW, FindWindowExW, MsgWaitForMultipleObjectsEx, GetWindowThreadProcessId, AttachThreadInput, SetActiveWindow, SetFocus, GetFocus, EnableWindow, PostMessageW, IsWindowVisible, UpdateWindow, ShowWindow, CreateWindowExW, CloseDesktop, OpenInputDesktop, SetThreadDesktop, SetProcessWindowStation, SetWindowLongW, WaitForInputIdle, GetForegroundWindow, GetAncestor, SetTimer, KillTimer, MsgWaitForMultipleObjects, MessageBoxW, SetPropW, GetClassNameA, CallNextHookEx, DestroyIcon, InvalidateRect, GetUpdateRect, GetWindowLongW, SendMessageW, ValidateRect, RedrawWindow, IsWindow, GetClipboardFormatNameW, CallWindowProcW, DefWindowProcW, RegisterClassExW, RegisterWindowMessageW, WindowFromPoint, GetCursorPos, ReleaseDC, SetWindowPos
wininet.dll
InternetQueryDataAvailable, InternetWriteFile, HttpEndRequestA, InternetQueryOptionA, InternetErrorDlg, InternetSetOptionA, HttpAddRequestHeadersA, HttpSendRequestExA, InternetOpenA, InternetConnectA, HttpOpenRequestA, HttpSendRequestA, InternetCloseHandle, InternetReadFile, HttpQueryInfoA
winmm.dll
timeEndPeriod, timeGetTime, timeBeginPeriod
winspool.drv
EnumPrintersW, DocumentPropertiesW, GetPrinterW, ClosePrinter, SetPrinterW, DeviceCapabilitiesW, OpenPrinterW, EnumPrintersA

flashplayerplugin_11_6_602_105.exe

Shockwave Flash by Adobe Systems Incorporated (Signed)

Remove flashplayerplugin_11_6_602_105.exe
Version:   11,6,602,105
MD5:   ce7f06844a052765f2ab8722b3d55307
SHA1:   84cf6023e455bd480374171fb28c8a7653b31a91

Overview

flashplayerplugin_11_6_602_105.exe executes as a process with the local user's privileges typically within the context of its parent plugin-container.exe (Aurora by Mozilla Corporation). It is installed with a couple of know programs including Adobe Flash Player 11 ActiveX published by Adobe Systems Incorporated, Adobe Flash Player 11 Plugin from Adobe Systems Incorporated and Adobe Flash Player 11 Plugin by Adobe Systems Incorporated. The file is digitally signed by Adobe Systems Incorporated which was issued by the VeriSign certificate authority (CA). This particular version is usually found on Windows 7 Ultimate (6.1.7601.65536).

DetailsDetails

File name:flashplayerplugin_11_6_602_105.exe
Publisher:Adobe Systems, Inc.
Product name:Shockwave Flash
Description:Adobe Flash Player 11.6 r602
Typical file path:C:\Windows\System32\macromed\flash\flashplayerplugin_11_6_602_105.exe
Original name:SAFlashPlayer.exe
File version:11,6,602,105
Size:1.73 MB (1,818,040 bytes)
Certificate
Issued to:Adobe Systems Incorporated
Authority (CA):VeriSign
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
Adobe Systems Incorporated
4% remove
The Adobe Flash Player is freeware software for viewing multimedia, executing Rich Internet Applications, and streaming video and audio, content created on the Adobe Flash platform. Flash Player can run from a web browser (as a browser plug-in) or on supported mobile devices. Adobe Flash Player 11 is available in three flavors: "ActiveX", "Plug-in" and "Projector". The "ActiveX" version is an ActiveX control for use in Internet Explorer...
Adobe Systems Incorporated
5% remove
The Adobe Flash Player is freeware software for viewing multimedia, executing Rich Internet Applications, and streaming video and audio, content created on the Adobe Flash platform. Adobe Flash Player 11 is available in three flavors: "ActiveX", "Plug-in" and "Projector". The "ActiveX" version is an ActiveX control for use in Internet Explorer and any other Windows applications that supports ActiveX technology. The "plug-in" version is ...
Adobe Systems Incorporated
3% remove
Adobe Flash Player 10 Plugin is software for viewing multimedia, Rich Internet Applications, and streaming video and audio, on a computer web browser. Flash Player runs SWF files that can be created by the Adobe Flash authoring tool, by Adobe Flex or by a number of other Macromedia and third party tools. Flash Player is freely available as a plugin for recent versions of web browsers (such as Internet Explorer, Mozilla Firefox, Opera, a...
Adobe Systems Incorporated
9% remove
The Adobe Flash Player ActiveX is software for viewing multimedia, Rich Internet Applications, and streaming video and audio, on a computer web browser. Flash Player runs SWF files that can be created by the Adobe Flash authoring tool, by Adobe Flex or by a number of other Macromedia and third party tools. Flash Player is freely available as a plugin for recent versions of web browsers (such as Internet Explorer, Mozilla Firefox, Opera,...
Adobe Systems Incorporated
5% remove
Adobe Flash Player 10 ActiveX is software for viewing multimedia, Rich Internet Applications, and streaming video and audio, on a computer web browser. Flash Player runs SWF files that can be created by the Adobe Flash authoring tool, by Adobe Flex or by a number of other Macromedia and third party tools. Flash Player is freely available as a plugin for recent versions of web browsers (such as Internet Explorer, Mozilla Firefox, Opera, ...
Adobe Systems Incorporated
11% remove
Adobe® Flash® Player 12 drives innovation for rich, engaging digital experiences with new features for cross-platform browser-based viewing of expressive rich internet applications, content, and videos across devices. This beta release provides access to the Flash Player 12 runtime for Mac OS and Windows desktop environments. We are moving to a rapid beta release cycle using "Background Update". We encourage you to subscribe so you can ...
Adobe Systems Incorporated
12% remove
Cross-platform plugin plays animations, videos and sound files in .SWF format. Adobe® Flash® Player is a lightweight browser plug-in and rich Internet application runtime that delivers consistent and engaging user experiences.
Adobe Systems Incorporated
8% remove
Cross-platform plugin plays animations, videos and sound files in .SWF format.
Adobe Systems Incorporated
3% remove
Adobe® Flash® Player 13 drives innovation for rich, engaging digital experiences with new features for cross-platform browser-based viewing of expressive rich internet applications, content, and videos across devices. This beta release provides access to the Flash Player 13 runtime for Mac OS and Windows desktop environments.
Network connections
  • [TCP] qfpgameservermad05b.miniclip.com (77.73.37.13:4000)

  • ResourcesResource utilization

    (Note: statistics below are averages based on a minimum sample size of 200 unique participants)
    Averages
     
    CPU
    Total CPU:0.18545700%
    0.028634%
    Kernel CPU:0.09684450%
    0.013761%
    User CPU:0.08861250%
    0.014873%
    Kernel CPU time:14,859 ms/min
    100,923,805ms/min
    Context switches:1,100/sec
    284/sec
    Memory
    Private memory:36.83 MB
    21.59 MB
    Private (maximum):42.54 MB
    Private (minimum):27.94 MB
    Non-paged memory:36.83 MB
    21.59 MB
    Virtual memory:132.54 MB
    140.96 MB
    Virtual memory (peak):134.57 MB
    169.69 MB
    Working set:42.47 MB
    18.61 MB
    Working set (peak):43.8 MB
    37.95 MB
    Resource allocations
    Threads:16
    12
    Handles:280
    600
    GUI GDI count:15
    103
    GUI GDI peak:20
    142
    GUI USER count:18
    49
    GUI USER peak:18
    71

    BehaviorsProcess properties

    Integrety level:Low
    Platform:32-bit
    Command lines:
    • "C:\Windows\System32\macromed\flash\flashplayerplugin_11_6_602_105.exe" --channel=3344.001df29c.564685144 --proxy-stub-channel=flash5256.61220dc8.6589 --plugin-path="C:\Windows\System32\macromed\flash\npswf32_11_6_602_105.dll" --host-npapi-version=27 --type=renderer
    • "C:\Windows\System32\macromed\flash\flashplayerplugin_11_6_602_105.exe" --proxy-stub-channel=flash5256.61220dc8.6589 --host-broker-channel=flash5256.61220dc8.8333 --host-pid=5256 --host-npapi-version=27 --plugin-path="C:\Windows\System32\macromed\flash\npswf32_11_6_602_105.dll"
    Owner:User
    Parent processes:

    ResourcesThreads

    Averages
     
    FlashPlayerPlugin_11_6_602_105.exe (main module)
    Total CPU:10.21042344%
    0.272967%
    Kernel CPU:2.71915056%
    0.107585%
    User CPU:7.49127288%
    0.165382%
    CPU cycles:250,477,392/sec
    5,741,424/sec
    Context switches:319/sec
    79/sec
    Memory:1.75 MB
    1.16 MB
    npswf32_11_6_602_105.dll (Shockwave Flash by Adobe Systems)
    Total CPU:0.85736463%
    Kernel CPU:0.02882976%
    User CPU:0.82853486%
    CPU cycles:23,694,557/sec
    Context switches:153/sec
    Memory:15 MB
    ntdll.dll
    Total CPU:0.05644896%
    Kernel CPU:0.03540779%
    User CPU:0.02104117%
    CPU cycles:3,543,742/sec
    Context switches:166/sec
    Memory:1.23 MB

    Windows OS versionsDistribution by Windows OS

    OS versiondistribution
    Windows 7 Ultimate 100.00%

    OEM distributionDistribution by PC manufacturer

    PC Manufacturerdistribution
    Lenovo 100.00%
    Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

    Download it for FREE