GameShadow.exe
GameShadow
GameShadow Limited
The executable GameShadow.exe, “GameShadow® Main Program” has been detected as malware by 6 anti-virus scanners. It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘GameShadow’.
Publisher:
GameShadow Ltd (signed by GameShadow Limited)
Description:
GameShadow® Main Program
MD5:
6d39b139ea38da1e6d4d307b80c0fabb
SHA-1:
f9285fe149409da63657222b2f3bbd006444a515
SHA-256:
2875806bf52544ae72fc35d8c646837c7bd8a100100769739268506687d9fbf9
Scanner detections:
6 / 68
Analysis date:
4/25/2024 8:00:19 AM UTC (today)
Scan engine
Detection
Engine version
avast!
Win32:Crypt-SKC [Trj]
160518-2
AVG
Win32/Neshta.A
2015.0.4568
Dr.Web
Win32.HLLP.Neshta
9.0.1.05190
F-Prot
W32/Neshta.A!Generic
4.6.5.141
McAfee
Virus.W32/HLLP.41472
18.0.204.0
Microsoft Security Essentials
Threat.Undefined
1.223.654.0
File size:
895.3 KB (916,760 bytes)
Copyright:
© Copyright GameShadow Ltd 2003-8
Original file name:
GameShadow.exe
File type:
Executable application (Win32 EXE)
Common path:
C:\Program Files\gameshadow\gameshadow.exe
Authority:
The USERTRUST Network
Valid from:
11/18/2009 5:00:00 AM
Valid to:
11/19/2010 4:59:59 AM
Subject:
CN=GameShadow Limited, O=GameShadow Limited, STREET=The Granary, STREET=Over Norton Park, L=Over Norton, S=Oxfordshire, PostalCode=OX7 5PX, C=GB
Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US
Serial number:
100B758E96CD7971FF98038122510700
Compilation timestamp:
8/4/2010 10:19:24 PM
CTPH (ssdeep):
12288:S61g0mGbxI1HOPe2QcUFuMnFDZSrZroDht88N88S88N88:S61g0mGb+FuMnFDZrht88N88S88N88
Code size:
612 KB (626,688 bytes)
Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Command:
C:\Program Files\gameshadow\gameshadow.exe \q