home

free-facebook-security_Setup_recommendation_de-DE.exe

Free Facebook Security

Immanitas Entertainment GmbH

The application free-facebook-security_Setup_recommendation_de-DE.exe by Immanitas Entertainment GmbH has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is the uninstaller utility registered in the Windows Control Panel for the program Free Facebook Security by Bucksheesoft Ltd.. This file is typically installed with the program Free Facebook Security by Bucksheesoft Ltd..
Publisher:
Bucksheesoft Ltd.  (signed by Immanitas Entertainment GmbH)

Product:
Free Facebook Security

Version:
1.0.0.0

MD5:
e0af90d597fedf79851eebf07de5eafe

SHA-1:
b38caa833899bb6533ed96ee0f5cdcff4e9837f6

SHA-256:
ffe988b16b12a81d3baa8163944c1dd1a1d39288ab484e323b37d95b7d577746

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
11/15/2024 3:17:32 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP (M)
17.3.16.2

File size:
420.3 KB (430,336 bytes)

Product version:
1.0.0.0

Copyright:
Copyright (c) Bucksheesoft Ltd.. All rights reserved.

Original file name:
free-facebook-security_Setup_recommendation_de-DE.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\ProgramData\package cache\{4676c717-da66-4675-8714-7957f15cb496}\free-facebook-security_setup_recommendation_de-de.exe

Digital Signature
Signed by:
Immanitas Entertainment GmbH

Authority:
COMODO CA Limited

Valid from:
4/12/2013 2:00:00 AM

Valid to:
4/13/2014 1:59:59 AM

Subject:
CN=Immanitas Entertainment GmbH, O=Immanitas Entertainment GmbH, STREET=Ahornstrasse 14a, L=Velten, S=Brandenburg, PostalCode=16727, C=DE

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00C313F4D5A67152C438F618A43B60448D

File PE Metadata
Compilation timestamp:
9/3/2012 3:44:40 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

Entry address:
0x474B

Entry point:
E8, AC, 14, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 45, 08, 8B, 00, 81, 38, 63, 73, 6D, E0, 75, 2A, 83, 78, 10, 03, 75, 24, 8B, 40, 14, 3D, 20, 05, 93, 19, 74, 15, 3D, 21, 05, 93, 19, 74, 0E, 3D, 22, 05, 93, 19, 74, 07, 3D, 00, 40, 99, 01, 75, 05, E8, 01, 15, 00, 00, 33, C0, 5D, C2, 04, 00, 68, 55, 47, 40, 00, FF, 15, 7C, 11, 40, 00, 33, C0, C3, 8B, FF, 55, 8B, EC, 57, BF, E8, 03, 00, 00, 57, FF, 15, 84, 11, 40, 00, FF, 75, 08, FF, 15, 80, 11, 40, 00, 81, C7, E8, 03, 00, 00, 81, FF, 60, EA, 00...
 
[+]

Code size:
311.5 KB (318,976 bytes)

Program Uninstaller
Program name:
Free Facebook Security

Display publisher:
Bucksheesoft Ltd.

Display version:
1.0.0.0

Uninstall string:
"C:\ProgramData\Package Cache\{4676c717-da66-4675-8714-7957f15cb496}\free-facebook-security_Setup_recommendation_de-DE.exe" /uninstall


The file free-facebook-security_Setup_recommendation_de-DE.exe has been discovered within the following program.

Free Facebook Security  by Bucksheesoft Ltd.
About 8% of users remove it
 
Powered by Should I Remove It?

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.