home

AmazonCloudDriveSetup.exe

Amazon Cloud Drive Setup

Amazon Services LLC

This is a setup and installation application. The file has been seen being downloaded from swvgdtt-gateway.amazon.com and multiple other hosts.
Publisher:
Amazon  (signed by Amazon Services LLC)

Product:
Amazon Cloud Drive Setup

Version:
3.1.2.13

MD5:
2057e3ff65629aa3c357796eb7d05859

SHA-1:
23f108684544af58c99c628c78840cfbe6362fa6

SHA-256:
db99e3db98943709c275971e3c98e897475bd3c9fa06cdb585b8068b1f349e81

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/24/2024 10:28:21 PM UTC  (today)

File size:
847.3 KB (867,648 bytes)

Product version:
3cfb46a9

Copyright:
Copyright © 2015

Original file name:
AmazonCloudDriveSetup.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\amazonclouddrivesetup.exe

Digital Signature
Signed by:
Amazon Services LLC

Authority:
VeriSign, Inc.

Valid from:
1/8/2014 7:00:00 PM

Valid to:
3/31/2016 7:59:59 PM

Subject:
CN=Amazon Services LLC, OU=Digital ID Class 3 - Microsoft Software Validation v2, OU=Software Services, O=Amazon Services LLC, L=Seattle, S=Washington, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
636E2CDA3E0D98E0593E7AB598913D1D

File PE Metadata
Compilation timestamp:
12/10/2015 11:13:48 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:EFO8mghmecP0EhqW9yp7Ee8iR0b0gV7jVKniLx4BMWGFzPNVMeFVG0gTO8mghme8:Zg470wqYyp7Eex0h7uiF46FzxfRg4R1

Entry address:
0xC03DE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 04, 00, 03, 00, 00, 00, 30, 00, 00, 80, 0E, 00, 00, 00, C0, 00, 00, 80, 10, 00, 00, 00, F0, 00, 00, 80, 18, 00, 00, 00, 20, 01, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 04, 00, 01, 00, 00, 00, 60, 00, 00, 80, 02, 00, 00, 00, 78, 00, 00, 80, 03, 00, 00, 00, 90, 00, 00, 80, 04, 00, 00, 00, A8, 00...
 
[+]

Entropy:
7.6873

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
761 KB (779,264 bytes)

The file AmazonCloudDriveSetup.exe has been seen being distributed by the following 6 URLs.

https://swvgdtt-gateway.amazon.com//gateway/stream/thin/win/93e10cfe-1790-49d8-b70b-1ebd59f398c2/Amazon_Cloud_Drive_Desktop_PC_Downloader/.../Amazon_Cloud_Drive_Desktop_PC_Downloader.exe

https://swvgdtt-gateway.amazon.com//gateway/stream/thin/win/d1e1c3ab-0006-4048-a255-e1df3e316bf5/Amazon_Cloud_Drive_Desktop_PC_Downloader/.../Amazon_Cloud_Drive_Desktop_PC_Downloader.exe

https://content-na.drive.amazonaws.com/cdproxy/.../giyx5QJzGQ-r7fInwuV9w4H_vIwFlsjFFkNgoFhszRwLAYspN?download=true

https://swvgdtt-gateway.amazon.com//gateway/stream/thin/win/573f118b-a702-419f-b1e7-a21cbd9567ea/Amazon_Cloud_Drive_Desktop_PC_Downloader/.../Amazon_Cloud_Drive_Desktop_PC_Downloader.exe

https://d29x207vrinatv.cloudfront.net/Downloader/.../AmazonCloudDriveSetup.exe

https://d29x207vrinatv.cloudfront.net/.../AmazonCloudDriveSetup.exe

Scan AmazonCloudDriveSetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.