FlashUtil_ActiveX.dll
Adobe Flash Player Helper 32.0 r0 file version info
Library on Windows 2 known copies with hashes
Is it the real FlashUtil_ActiveX.dll?
Original name
FlashUtil.dll in the file’s header: a renamed copy still carries itInstalled in
C:\Windows\system32\Macromed\Flash\C:\Windows\SysWOW64\Macromed\Flash\Signed byMicrosoft Windows Third Party Application Component
ProductFlash Player Helper, Adobe
DescriptionAdobe Flash Player Helper 32.0 r0
2 known copies
32,0,0,387 · C:\Windows\system32\Macromed\Flash\FlashUtil_ActiveX.dll · signed by Microsoft Windows Third Party Application Component
305530e34fa45b0d7d77e22c6bc57d8c4afde53d6302dac0dd0e78a9133fee4832,0,0,387 · C:\Windows\SysWOW64\Macromed\Flash\FlashUtil_ActiveX.dll · signed by Microsoft Windows Third Party Application Component
e780fdf7cea89dcab5f3aa7898d73a4ccd883632ec5c41fe545d750d45d305d2From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.