home

rockwell.ocx

getPlus+

Rockwell Automation

This is installed with Rockwell Automation Download Manager.
Publisher:
NOS Microsystems Ltd.  (signed by Rockwell Automation)

Product:
getPlus+(R)

Version:
2,0,7,38

MD5:
76eb97df57b334eacc1e37f374288ece

SHA-1:
e453a5f8b53818eec5a58a8112524bc9c49e2304

SHA-256:
f920bda0c853fdf7eab1b5c37e9e08cdfb810fd8fe0e0b73b5863a3d8ef77669

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/2/2024 8:46:54 PM UTC  (today)

File size:
48.4 KB (49,552 bytes)

Product version:
2,0,7,38

Copyright:
Copyright (C) 2013 by NOS Microsystems Ltd.

File type:
OLE control extension (Win32 OCX)

Language:
English (United States)

Common path:
C:\windows\downloaded Program Files\rockwell.ocx

Digital Signature
Signed by:
Rockwell Automation

Authority:
VeriSign, Inc.

Valid from:
8/20/2014 5:00:00 PM

Valid to:
8/27/2015 4:59:59 PM

Subject:
CN=Rockwell Automation, OU=HQIT, O=Rockwell Automation, L=Milwaukee, S=Wisconsin, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
20189AAEA5E76AB67EAC3E48EED81DB7

File PE Metadata
Compilation timestamp:
9/12/2012 3:22:04 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.12

CTPH (ssdeep):
768:LG/P2OQlWa++36TejsU+1WIG76LtgDRDrSe+AxUGuLLA27qc7K7b:vvj7oU+mNrSjAxtuLmxn

Entry address:
0x19FB8

Entry point:
55, 53, 57, 56, E8, 00, 00, 00, 00, 5B, 8B, FB, 81, EF, 09, 00, 00, 00, 57, 81, EB, BB, 08, 00, 00, 8D, 93, 00, F0, BF, FF, B9, 06, 87, 00, 00, 2B, D9, 8B, C3, 81, EB, 00, 00, 01, 00, 81, EB, 00, 10, 00, 00, 8B, AB, C0, 00, 00, 00, 03, EB, 4D, 80, 7D, 00, CC, 74, F9, 83, ED, 03, 66, 81, 7D, FE, FF, 25, 75, 08, 01, 55, 00, 83, ED, 06, EB, F0, 01, 94, 01, 68, 05, 00, 00, 01, 94, 01, D6, 05, 00, 00, 01, 94, 01, FC, 06, 00, 00, 01, 94, 01, 9C, 08, 00, 00, 50, 51, B8, 51, 02, 4C, 00, 50, 6A, 40, E8, 97, 00, 00...
 
[+]

Entropy:
7.7404  (probably packed)

Code size:
36.8 KB (37,638 bytes)

ActiveX Install
Name:
{FFAD8DA9-ED41-494D-AC8E-63D861D0A733}


The file rockwell.ocx has been discovered within the following programs.

Rockwell Automation Download Manager  by NOS Microsystems Ltd.
Publisher's description - “The download manager can be installed via ActiveX control (Internet Explorer) or XPI (Firefox). In addition, the download manager can be installed via Java or exe. Note that you will need administrative privileges to install the download manager on your computer.”
www.nosltd.com
30% remove it
 
Powered by Should I Remove It?

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.