home

is_flocx.exe

Adobe Flash Player Plugin

Adobe Systems Incorporated

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is installed with multiple programs including Adobe Flash Player 11 ActiveX. The file has been seen being downloaded from campus.tecsup.edu.pe and multiple other hosts.
Publisher:
Adobe Systems Incorporated  (signed and verified)

Product:
Adobe® Flash® Player Plugin

Description:
Adobe® Flash® Player Plugin Installer

Version:
1.0.20

MD5:
51f26c0051e97a91145971fe5bc632ff

SHA-1:
770db9ad471ffd4357358bc16ff0bb6c98d71e5d

SHA-256:
a4ea3bd92f7ef5dc1e82f211214aaf8fd99ca31102b8c83f73b5f4cd7004ef96

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 8:02:06 PM UTC  (today)

File size:
1.8 MB (1,878,888 bytes)

Product version:
10.0.22.87

Copyright:
Copyright © 1996-2009 Adobe Systems Incorporated and its licensors. All Rights Reserved.

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\windows\is_flocx.exe

Digital Signature
Signed by:
Adobe Systems Incorporated

Authority:
VeriSign, Inc.

Valid from:
10/24/2008 9:00:00 AM

Valid to:
12/11/2009 8:59:59 AM

Subject:
CN=Adobe Systems Incorporated, OU=Information Systems, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Adobe Systems Incorporated, L=San Jose, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
7657F9CBCAC1EA9504838E3ED9355D2D

File PE Metadata
Compilation timestamp:
1/14/2007 3:28:14 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:4TJvTlo5teGg9M9sS2wtG9zxuF/Vdl0g9uU+:4TJvTlouGg9QsAtG90/VdA1

Entry address:
0x36F2

Entry point:
81, EC, 7C, 01, 00, 00, 53, 55, 56, 33, F6, 57, 89, 74, 24, 18, BB, 10, A7, 40, 00, C6, 44, 24, 10, 20, FF, 15, 30, 80, 40, 00, 56, FF, 15, 7C, 82, 40, 00, A3, D0, 6B, 42, 00, 56, 8D, 44, 24, 30, 68, 60, 01, 00, 00, 50, 56, 68, B8, 14, 42, 00, FF, 15, 58, 81, 40, 00, 68, 34, A8, 40, 00, 68, 20, 63, 42, 00, E8, 72, 29, 00, 00, BD, 00, D4, 42, 00, 55, 68, 00, 04, 00, 00, FF, 15, B8, 80, 40, 00, E8, 64, FF, FF, FF, 85, C0, 75, 24, 68, FB, 03, 00, 00, 55, FF, 15, B4, 80, 40, 00, 68, 2C, A8, 40, 00, 55, E8, 5D...
 
[+]

Entropy:
7.9897

Packer / compiler:
Nullsoft install system v2.x

Code size:
24.5 KB (25,088 bytes)

The file is_flocx.exe has been discovered within the following programs.

Adobe Flash Player 11 ActiveX  by Adobe Systems Incorporated
The Adobe Flash Player is freeware software for viewing multimedia, executing Rich Internet Applications, and streaming video and audio, content created on the Adobe Flash platform. Flash Player can run from a web browser (as a browser plug-in) or on supported mobile devices.
www.adobe.com
4% remove it
Adobe Flash Player 11 Plugin  by Adobe Systems Incorporated
Publisher's description - “Adobe Flash Player 11 drives innovation for rich, engaging digital experiences with new features for cross-platform browser-based viewing of expressive rich internet applications, content, and videos across devices.”
5% remove it
Adobe Flash Player 16 ActiveX  by Adobe Systems Incorporated
6% remove it
Adobe Flash Player 18 ActiveX  by Adobe Systems Incorporated
9% remove it
Adobe Flash Player 18 NPAPI  by Adobe Systems Incorporated
3% remove it
Atari Classics Evolved-Asteroids  by Atari, Inc.
www.atari.com
About 5% of users remove it
Atari Classics Evolved-Breakout  by Atari, Inc.
About 6% of users remove it
Atari Classics Evolved-Centipede  by Atari, Inc.
About 2% of users remove it
Atari Classics Evolved-Lunar Lander  by Atari, Inc.
About 1% of users remove it
IET for ATE  by Beta Air
About 6% of users remove it
 
Latest 20 of 15 programs
Powered by Should I Remove It?

The file is_flocx.exe has been seen being distributed by the following 10 URLs.

http://campus.tecsup.edu.pe/file/campus/.../install_flash_player.exe

http://www.tutorabc.com/.../flash_player.exe

http://spore.okis.ru/file/.../install_flash_player.exe

http://grecco.cba.pl/install_flash_player.exe

https://portal.edupage.org/.../flashplayer10r22_87_win.exe

http://dl.commentcamarche.net/es.kioskea.net/download/.../install_flash_player.exe

http://e-learning.telkom.co.id/file.php/.../install_flash_player.exe

http://download.empireofsports.com/.../install_flash_player_10.exe

http://dl.cdn.chip.eu/downloads/.../install_flash_player_RO.exe

http://fpdownload.macromedia.com/get/flashplayer/.../install_flash_player.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.