Should I block it?
No, this file is 100% safe to run.
Additional versions
| 1, 0, 0, 1 |
50.00% |
|
| 1, 0, 0, 1 |
12.50% |
|
| 1, 0, 0, 1 |
12.50% |
|
| 1, 0, 0, 1 |
25.00% |
|
(Note, OOO Kango publishes each variation of this file with the same version, but the hashes are unique.)
Relationships
lightshot.exe
Starter Module by OOO Kango (Signed)
| Version: | 1, 0, 0, 1 |
| MD5: | 67b5eb53db13017d843a4dab4752c4f2 |
| SHA1: | 4e3898b8217815485480c155277dd3a3e78f122e |
Overview
lightshot.exe is set to be run when the PC boots and the user logs into Windows (added to the Run registry key for the current user). The file is digitally signed by OOO Kango which was issued by the VeriSign certificate authority (CA).
Details
| File name: | lightshot.exe |
| Product name: | Starter Module |
| Typical file path: | C:\users\user\appdata\local\skillbrains\lightshot\lightshot.exe |
| Original name: | Starter.exe |
| File version: | 1, 0, 0, 1 |
| Size: | 221.28 KB (226,592 bytes) |
| Build date: | 10/17/2009 5:36 PM |
| Certificate |
| Issued to: | OOO Kango |
| Authority (CA): | VeriSign |
| Effective date: | Monday, October 29, 2012 |
| Expiration date: | Wednesday, October 30, 2013 |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Behaviors
Startup files (user) run
Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'LightShot' → C:\users\user\appdata\Local\Skillbrains\lightshot\LightShot.exe FlagC: uninsdeletevalue
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Ultimate |
37.50% |
|
| Windows 8 |
25.00% |
|
| Windows Vista Home Premium |
25.00% |
|
| Windows 7 Home Premium |
12.50% |
|
Distribution by country
United States installs about 50.00% of Starter Module.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Acer |
40.00% |
|
| Dell |
40.00% |
|
| Sony |
20.00% |
|
