amazonclouddrivesetup.exe

Amazon Services LLC

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from swvgdtt-gateway-eu.amazon.com and multiple other hosts.
Publisher:
Amazon Services LLC  (signed and verified)

MD5:
af532c783ce749220d1db26daad1f5e7

SHA-1:
889e34cdd7729b64756543003326c40579b925f5

SHA-256:
6be8c31e2cd6a289447004447b1047e3fd0fed9493cedf4c1825b3b5d1417c90

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 6:39:10 PM UTC  (today)

File size:
2.3 MB (2,388,680 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\amazonclouddrivesetup.exe

Digital Signature
Authority:
VeriSign, Inc.

Valid from:
1/8/2014 7:00:00 PM

Valid to:
3/31/2016 7:59:59 PM

Subject:
CN=Amazon Services LLC, OU=Digital ID Class 3 - Microsoft Software Validation v2, OU=Software Services, O=Amazon Services LLC, L=Seattle, S=Washington, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
636E2CDA3E0D98E0593E7AB598913D1D

File PE Metadata
Compilation timestamp:
7/14/2013 4:09:32 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:bQREfZNtI5UWhVWy3lZwldR6b4kNFFLxNLLrLNYSrRtvcykd:bQRetI5pVWy3LwPgNFFLzL1RRcya

Entry address:
0x3250

Entry point:
81, EC, 84, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 89, 5C, 24, 20, C6, 44, 24, 14, 20, FF, 15, 34, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 8C, 72, 40, 00, 6A, 08, A3, D8, 27, 7A, 00, E8, 8B, 2D, 00, 00, A3, 24, 27, 7A, 00, 53, 8D, 44, 24, 38, 68, 60, 01, 00, 00, 50, 53, 68, E0, DC, 79, 00, FF, 15, 64, 71, 40, 00, 68, E4, 91, 40, 00, 68, 20, 1F, 7A, 00, E8, 35, 2A, 00, 00, FF, 15, B0, 70, 40, 00, BD, 00, 80, 7A, 00, 50, 55, E8, 23, 2A...
 
[+]

Entropy:
7.9863

Packer / compiler:
Nullsoft install system v2.x

Code size:
23.5 KB (24,064 bytes)

The file amazonclouddrivesetup.exe has been discovered within the following program.

MyHarmony  by Logitech Inc.
3% remove it
 
Powered by Should I Remove It?

The file amazonclouddrivesetup.exe has been seen being distributed by the following 27 URLs.

https://swvgdtt-gateway-eu.amazon.com//gateway/stream/thin/win/5131ef25-a3da-4051-88bf-3df8f4cb347e/Amazon_Drive_Desktop_Downloader/.../Amazon_Drive_Desktop_Downloader.exe

http://swvgdtt-gateway-eu.amazon.com//gateway/stream/thin/win/e70c80e2-e349-4730-a77b-91eb9ada4bc2/Amazon_Cloud_Drive_Desktop_PC_Downloader/.../Amazon_Cloud_Drive_Desktop_PC_Downloader.exe

https://swvgdtt-gateway-eu.amazon.com//gateway/stream/thin/win/3b52ae58-de9f-47d6-bce8-dc4ef71dbd43/Amazon_Cloud_Drive_Desktop_PC_Downloader/.../Amazon_Cloud_Drive_Desktop_PC_Downloader.exe

https://swvgdtt-gateway.amazon.com//gateway/stream/thin/win/18d6ab7b-3c9f-41db-8567-ab6d8086e238/Amazon_Cloud_Drive_Desktop_PC_Downloader/.../Amazon_Cloud_Drive_Desktop_PC_Downloader.exe

https://swvgdtt-gateway-eu.amazon.com//gateway/stream/thin/win/4ecdf31e-eea8-4c32-9e96-0d2f5f92208e/Amazon_Drive_Desktop_Downloader/.../Amazon_Drive_Desktop_Downloader.exe

https://swvgdtt-gateway-eu.amazon.com//gateway/stream/thin/win/f671fd58-657c-4221-ba39-12ca639de04a/Amazon_Drive_Desktop_Downloader/.../Amazon_Drive_Desktop_Downloader.exe

http://swvgdtt-gateway.amazon.com//gateway/stream/thin/win/b223a397-10ad-47d2-b328-071d81983b96/Amazon_Cloud_Drive_Desktop_Downloader/.../Amazon_Cloud_Drive_Desktop_Downloader.exe

Scan amazonclouddrivesetup.exe - Powered by Reason Core Security