home

gfsdk_shadowlib.win64.dll

MD5:
d043c98ed424f6770ea800e77efcf561

SHA-1:
98110c694b87d2ff5475d257f2f82096ed9e80c7

SHA-256:
82dc1d6e9bc0b2aa8aba2541194fdc48d652c4647a319eedb96e7ff659b88e32

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
9/22/2024 11:18:35 AM UTC  (today)

File size:
3.5 MB (3,640,320 bytes)

File type:
Dynamic link library (Win64 DLL)

Common path:
C:\Program Files\rockstar games\grand theft auto v\gfsdk_shadowlib.win64.dll

File PE Metadata
Compilation timestamp:
3/27/2015 1:15:54 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:8lucz1CfC+C4+9TBf7jxgxiyWQxxEnVC7umGn/m7mRmIn6mXmP:o

Entry address:
0xCF10

Entry point:
48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, F7, 64, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, A7, FE, FF, FF, CC, CC, CC, 48, 85, C9, 74, 37, 53, 48, 83, EC, 20, 4C, 8B, C1, 48, 8B, 0D, 84, AA, 36, 00, 33, D2, FF, 15, F4, C0, 00, 00, 85, C0, 75, 17, E8, 2B, 1A, 00, 00, 48, 8B, D8, FF, 15, DA, C0, 00, 00, 8B, C8, E8, D3, 19, 00, 00, 89, 03, 48, 83, C4, 20, 5B, C3, CC, CC, CC...
 
[+]

Code size:
94 KB (96,256 bytes)

The file gfsdk_shadowlib.win64.dll has been discovered within the following programs.

Grand Theft Auto V  by Rockstar Games
www.RockstarGames.com
About 1% of users remove it
LSPD First Response  by G17 Media
www.lcpdfr.com
About 7% of users remove it
RAGE Multiplayer  by RAGE Multiplayer Team
rage.mp
About 5% of users remove it
 
Powered by Should I Remove It?

The file gfsdk_shadowlib.win64.dll has been seen being distributed by the following 7 URLs.

http://dla.uloz.to/Ps;Hs;fid=72737467;cid=1967509378;rid=1353467262;up=0;uip=88.102.34.227;tm=1441460286;ut=f;aff=uloz.to;did=uloz-to;He;ch=e602022c6697510b28588adf87693f72;Pe/.../gfsdk-shadowlib-win64-dll?bD&c=1967509378&De

http://s6.uplod.ir:182/d/.../GFSDK_ShadowLib.win64.dll

http://dc754.4shared.com/download/.../GFSDK_ShadowLibwin64.dll?tsid=20160715-080214-1bf5becc&sbsr=628632b871874da6c213324c5e9eb48297c&lgfp=2000

http://dosya.co/.../GFSDK_ShadowLib.win64.dll.html

http://my-files.ru/Save/.../GFSDK_ShadowLib.win64.dll

about:internet

https://doc-08-04-docs.googleusercontent.com/docs/securesc/1o1nv94o1vq1f2da3c37505n866kta6t/3j8k3gcblg1jkptvgsrlgislluqe0k5h/1429048800000/.../16907218247425792920/0B1_MTsTzjVFOc2tLVmV0V3ZEdTQ?e=download

Scan gfsdk_shadowlib.win64.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.