Flash 7 Detected in scan but can't find on computer

InsightIDR Event Sources
1

I have several machines that IVM is detecting Flash version 7 on but I don’t see that in the Add/Remove programs list of installed applications.
What would trigger this detection and how do I fix it?

One example:

Status: Vulnerable Version
Key: C:\Windows\syswow64\Macromed\Flash
Proof: Vulnerable OS: Microsoft Windows 7 Professional Edition SP1

Vulnerable software installed: Adobe Flash 7.0.19.0 (C:\Windows\syswow64\Macromed\Flash)

2

Looks like the check is looking in the directory for .ocx files from Flash installs.
Depending on the version, it may be Flash.ocx, or Flash9.ocx, etc.
Right-clicking and viewing details shows the version.

After deleting Flash.ocx, the next scan did not list that device as having Flash 7 installed.

3

Thanks this is helpful.

4

Just to add to this, I’ve also been completely removing C:\Windows\syswow64\Macromed which seems to help in some instances.