home

grooveshark-dlm_Setup_portale_en-US.exe

Grooveshark Music Downloader

Immanitas Entertainment GmbH

The application grooveshark-dlm_Setup_portale_en-US.exe by Immanitas Entertainment GmbH has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is the uninstaller utility registered in the Windows Control Panel for the program Grooveshark Music Downloader by Privative. This file is typically installed with the program Grooveshark Music Downloader by Privative.
Publisher:
Privative  (signed by Immanitas Entertainment GmbH)

Product:
Grooveshark Music Downloader

Version:
1.0.0.0

MD5:
61e03624fcaf3eb4393ff12055501564

SHA-1:
ac9bfad361c04a9cdcbdb037899806a0e35d02a3

SHA-256:
5f5be760ed79da88b65abfe2ece972b0788800693d569be3f215b23a0ad34339

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
12/25/2024 1:03:41 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP (M)
16.12.11.7

File size:
420 KB (430,072 bytes)

Product version:
1.0.0.0

Copyright:
Copyright (c) Privative. All rights reserved.

Original file name:
grooveshark-dlm_Setup_portale_en-US.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\ProgramData\package cache\{10ee076f-f150-4c09-a876-66d7a9dbeeec}\grooveshark-dlm_setup_portale_en-us.exe

Digital Signature
Signed by:
Immanitas Entertainment GmbH

Authority:
COMODO CA Limited

Valid from:
4/11/2013 9:00:00 PM

Valid to:
4/12/2014 8:59:59 PM

Subject:
CN=Immanitas Entertainment GmbH, O=Immanitas Entertainment GmbH, STREET=Ahornstrasse 14a, L=Velten, S=Brandenburg, PostalCode=16727, C=DE

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00C313F4D5A67152C438F618A43B60448D

File PE Metadata
Compilation timestamp:
12/24/2012 6:43:11 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

Entry address:
0x25D1C

Entry point:
E8, 1E, 1F, 00, 00, E9, 89, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 8B, 54, 24, 0C, 8B, 4C, 24, 04, 85, D2, 74, 69, 33, C0, 8A, 44, 24, 08, 84, C0, 75, 16, 81, FA, 80, 00, 00, 00, 72, 0E, 83, 3D, E8, 3E, 45, 00, 00, 74, 05, E9, 7E, 1F, 00, 00, 57, 8B, F9, 83, FA, 04, 72, 31, F7, D9, 83, E1, 03, 74, 0C, 2B, D1, 88, 07, 83, C7, 01, 83, E9, 01, 75, F6, 8B, C8, C1, E0, 08, 03, C1, 8B, C8, C1, E0, 10, 03, C1, 8B, CA, 83, E2, 03, C1, E9, 02, 74, 06, F3, AB, 85, D2, 74, 0A, 88, 07, 83, C7, 01, 83, EA...
 
[+]

Code size:
218 KB (223,232 bytes)

Program Uninstaller
Program name:
Grooveshark Music Downloader

Display publisher:
Privative

Display version:
1.0.0.0

Uninstall string:
"C:\ProgramData\Package Cache\{10ee076f-f150-4c09-a876-66d7a9dbeeec}\grooveshark-dlm_Setup_portale_en-US.exe" /uninstall


The file grooveshark-dlm_Setup_portale_en-US.exe has been discovered within the following program.

Grooveshark Music Downloader  by Privative
About 8% of users remove it
 
Powered by Should I Remove It?

Remove grooveshark-dlm_Setup_portale_en-US.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.