Folks, let's not guess and make spooky assertions about security questions. That's not helpful.
There is a helper utility that handles automatic updates, and now, as we reach the end of life for Flash Player, is encouraging you to uninstall before the last possible day. We really want to drive the population down so that people are discovering and resolving issues now, instead of over the holidays, when nobody will be around to help.
Anyone can name a file anything, so filenames are absolutely useless in terms of determining legitimacy or safety.
There's a super straight-forward, authoritative way to answer the "is this file legit?" question. It's called Code Signing. https://en.wikipedia.org/wiki/Code_signing
Code signing provides an authoritative, cryptographically secure way to determine who created a particular binary (a.k.a non-repudiation), and validating a code signature inherently confirms that the copy you have is a bit-for-bit match for the one that was signed and shipped by the author.
On Mac, you can verify the code signing certificate on that file from the terminal. There's a decent guide here:
https://osxdaily.com/2016/03/14/verify-code-sign-apps-mac-os-x/
Here's what a legit copy looks like on my machine. Depending on the version you have installed, the hash values might change, but it should be signed by Adobe Inc. or Adobe Systems Incorporated on older versions that pre-date the company's recent name change.
Here's what it looks like on my machine:
labuser@labmachine: codesign -dv --verbose=4 /Applications/Utilities/Adobe\ Flash\ Player\ Install\ Manager.app
Executable=/Applications/Utilities/Adobe Flash Player Install Manager.app/Contents/MacOS/Adobe Flash Player Install Manager
Identifier=com.adobe.flashplayer.installmanager
Format=app bundle with Mach-O thin (x86_64)
CodeDirectory v=20500 size=26736 flags=0x10000(runtime) hashes=828+3 location=embedded
VersionPlatform=1
VersionMin=656896
VersionSDK=658432
Hash type=sha256 size=32
CandidateCDHash sha1=8a85333379797e7c7f8d0bcea944c9af3c66463a
CandidateCDHashFull sha1=8a85333379797e7c7f8d0bcea944c9af3c66463a
CandidateCDHash sha256=b78bd51408eb14f45139668267c7f33964b0c989
CandidateCDHashFull sha256=b78bd51408eb14f45139668267c7f33964b0c98956f6c603ffc716e000751245
Hash choices=sha1,sha256
CMSDigest=16b80531633926d611b265ce5da199cbb715306812f17ccb88896169800410a5
CMSDigestType=2
Page size=4096
CDHash=b78bd51408eb14f45139668267c7f33964b0c989
Signature size=9071
Authority=Developer ID Application: Adobe Inc. (JQ525L2MZD)
Authority=Developer ID Certification Authority
Authority=Apple Root CA
Timestamp=Oct 29, 2020 at 11:27:07 AM
Info.plist entries=21
TeamIdentifier=JQ525L2MZD
Runtime Version=10.12.0
Sealed Resources version=2 rules=13 files=37
Internal requirements count=1 size=180
There's an insane amount of controls over how code gets signed at Adobe -- as you can imagine, signing keys are the keys to the kingdom, and are tightly guarded, with mediated access where everything is logged and audited -- and there are revocation and expiration mechanisms that ensure that if the keys were ever stolen, we could invalidate everything signed with them to prevent someone from publishing content that indicates that it's legitimate and from us.
To wrap this up, in all likelihood, everything is fine. Check the code signing certificate. If it's from Adobe, it's good. If you want to uninstall it, uninstall Flash Player. Safari already dropped support for it, Flash Player will stop loading content from the open web at the end of the year, and all other browsers will remove plug-in support required to run Flash around the same time.
Uninstall Flash Player - Mac:
https://helpx.adobe.com/flash-player/kb/uninstall-flash-player-mac-os.html
AdChoices