Overview

overview

10

Static

static

3

21434ba1af...18.exe

windows7-x64

10

21434ba1af...18.exe

windows10-2004-x64

10

AmazonGamesSetup.exe

windows7-x64

6

AmazonGamesSetup.exe

windows10-2004-x64

6

LIXVoWXPPCyc5Jy.exe

windows7-x64

10

LIXVoWXPPCyc5Jy.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    149s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    03/07/2024, 05:42

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    AmazonGamesSetup.exe
  • Size 1.8MB
  • Sample240703-gefq7azelg
  • SHA256 1a99f1054e51fe86416c59e5c526d69776fdabd7bb9831dbaab8582322121c7a
  • MD5 SHA1 SHA512 SSDEEP
Score
6/10
discovery

Malware Config

Signatures

  • Downloads MZ/PE file
  • Checks computer location settings 2 TTPs 5 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Executes dropped EXE 9 IoCs
  • Loads dropped DLL 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 18 IoCs
  • Modifies system certificate store 2 TTPs 12 IoCs
    evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 15 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\AmazonGamesSetup.exe
    "C:\Users\Admin\AppData\Local\Temp\AmazonGamesSetup.exe"
    1⤵
    • Loads dropped DLL
    • Modifies system certificate store
    • Suspicious use of WriteProcessMemory
    PID:2804
    • C:\Users\Admin\AppData\Local\Amazon Games\App\Amazon Games.exe
      "C:\Users\Admin\AppData\Local\Amazon Games\App\Amazon Games.exe" " /channelId=87d38116-4cbf-4af0-a371-a5b498975346"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of WriteProcessMemory
      PID:1664
      • C:\Users\Admin\AppData\Local\Amazon Games\App\Amazon Games Services\Amazon Games Services.exe
        "C:\Users\Admin\AppData\Local\Amazon Games\App\Amazon Games Services\Amazon Games Services.exe" "/appIpcName=AgsLaunch-App-Pipe-1664-1" "/coreProcessIpc=CoreProcess-Desktop-1664-1" " /channelId=87d38116-4cbf-4af0-a371-a5b498975346"
        3⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Loads dropped DLL
        • Modifies registry class
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        PID:2044
      • C:\Users\Admin\AppData\Local\Amazon Games\App\Amazon Games UI\Amazon Games UI.exe
        "C:\Users\Admin\AppData\Local\Amazon Games\App\Amazon Games UI\Amazon Games UI.exe" "--appIpcName=AgsLaunch-App-Pipe-1664-1"
        3⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of WriteProcessMemory
        PID:2332
        • C:\Users\Admin\AppData\Local\Amazon Games\App\Amazon Games UI\Amazon Games UI.exe
          "C:\Users\Admin\AppData\Local\Amazon Games\App\Amazon Games UI\Amazon Games UI.exe" --type=gpu-process --field-trial-handle=1020,18259364782131143274,14291645683734929291,131072 --disable-features=SpareRendererForSitePerProcess --enable-gpu-rasterization --gpu-preferences=KAAAAAAAAADgAAAwAAAAAAAAYAAAAAAAEAAAAAAAAAAAAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAFAAAAEAAAAAAAAAAAAAAABgAAABAAAAAAAAAAAQAAAAUAAAAQAAAAAAAAAAEAAAAGAAAA --service-request-channel-token=996633530453286117 --mojo-platform-channel-handle=1032 --ignored=" --type=renderer " /prefetch:2
          4⤵
          • Executes dropped EXE
          PID:2132
        • C:\Users\Admin\AppData\Local\Amazon Games\App\Amazon Games UI\Amazon Games UI.exe
          "C:\Users\Admin\AppData\Local\Amazon Games\App\Amazon Games UI\Amazon Games UI.exe" --type=utility --field-trial-handle=1020,18259364782131143274,14291645683734929291,131072 --disable-features=SpareRendererForSitePerProcess --lang=en-US --service-sandbox-type=network --standard-schemes=sonic --secure-schemes=sonic --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --service-request-channel-token=9231588390363730714 --mojo-platform-channel-handle=1424 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Suspicious behavior: EnumeratesProcesses
          PID:1936
        • C:\Users\Admin\AppData\Local\Amazon Games\App\Amazon Games UI\Amazon Games UI.exe
          "C:\Users\Admin\AppData\Local\Amazon Games\App\Amazon Games UI\Amazon Games UI.exe" --type=renderer --field-trial-handle=1020,18259364782131143274,14291645683734929291,131072 --disable-features=SpareRendererForSitePerProcess --lang=en-US --standard-schemes=sonic --secure-schemes=sonic --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --app-user-model-id=Amazon.AmazonGamesApp --app-path="C:\Users\Admin\AppData\Local\Amazon Games\App\Amazon Games UI\resources\app.asar" --enable-experimental-web-platform-features --no-sandbox --no-zygote --preload="C:\Users\Admin\AppData\Local\Amazon Games\App\Amazon Games UI\resources\app.asar\preload.js" --background-color=#000 --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --service-request-channel-token=1176364511797248632 --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1668 /prefetch:1
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Suspicious behavior: EnumeratesProcesses
          PID:1880
        • C:\Users\Admin\AppData\Local\Amazon Games\App\Amazon Games UI\Amazon Games UI.exe
          "C:\Users\Admin\AppData\Local\Amazon Games\App\Amazon Games UI\Amazon Games UI.exe" --type=renderer --field-trial-handle=1020,18259364782131143274,14291645683734929291,131072 --disable-features=SpareRendererForSitePerProcess --lang=en-US --standard-schemes=sonic --secure-schemes=sonic --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --app-user-model-id=Amazon.AmazonGamesApp --app-path="C:\Users\Admin\AppData\Local\Amazon Games\App\Amazon Games UI\resources\app.asar" --enable-experimental-web-platform-features --no-sandbox --no-zygote --preload="C:\Users\Admin\AppData\Local\Amazon Games\App\Amazon Games UI\resources\app.asar\preload.js" --background-color=#000 --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --service-request-channel-token=4611706300489442804 --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1816 /prefetch:1
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Suspicious behavior: EnumeratesProcesses
          PID:2636
        • C:\Users\Admin\AppData\Local\Amazon Games\App\Amazon Games UI\Amazon Games UI.exe
          "C:\Users\Admin\AppData\Local\Amazon Games\App\Amazon Games UI\Amazon Games UI.exe" --type=gpu-process --field-trial-handle=1020,18259364782131143274,14291645683734929291,131072 --disable-features=SpareRendererForSitePerProcess --enable-gpu-rasterization --gpu-preferences=KAAAAAAAAADgAAAwAAAAAAAAYAAAAAAAEAAAAAAAAAAAAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAFAAAAEAAAAAAAAAAAAAAABgAAABAAAAAAAAAAAQAAAAUAAAAQAAAAAAAAAAEAAAAGAAAA --use-gl=swiftshader-webgl --service-request-channel-token=632278421001797710 --mojo-platform-channel-handle=1032 --ignored=" --type=renderer " /prefetch:2
          4⤵
          • Executes dropped EXE
          PID:2172
        • C:\Users\Admin\AppData\Local\Amazon Games\App\Amazon Games UI\Amazon Games UI.exe
          "C:\Users\Admin\AppData\Local\Amazon Games\App\Amazon Games UI\Amazon Games UI.exe" --type=renderer --field-trial-handle=1020,18259364782131143274,14291645683734929291,131072 --disable-features=SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-US --standard-schemes=sonic --secure-schemes=sonic --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --app-user-model-id=Amazon.AmazonGamesApp --app-path="C:\Users\Admin\AppData\Local\Amazon Games\App\Amazon Games UI\resources\app.asar" --no-sandbox --no-zygote --context-isolation --background-color=#fff --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --service-request-channel-token=6146074084904742019 --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1696 /prefetch:1
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Suspicious behavior: EnumeratesProcesses
          PID:892

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        94308059B57B3142E455B38A6EB92015
        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 342B
        • SHA256 4495dbdd5d3b492cee5aec4edf0ace3d35176d751ce2cfd069360d576684970d
        • MD5 SHA1 SHA512
        Submit Download

        94308059B57B3142E455B38A6EB92015
        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 342B
        • SHA256 7e68d0716f9b23599d4e5a614c6ace22495e9e5864f15d9c7109d4dd8d7bf33f
        • MD5 SHA1 SHA512
        Submit Download

        94308059B57B3142E455B38A6EB92015
        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 342B
        • SHA256 8c952c4bcc2ab119359d74a1d12c0633cd4325817c8b0606453d372415ca713d
        • MD5 SHA1 SHA512
        Submit Download

        94308059B57B3142E455B38A6EB92015
        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 342B
        • SHA256 10ee6cae4b615fe50a81a2c4315990a052fea84aaef6ec0fc1d7dd69edd44617
        • MD5 SHA1 SHA512
        Submit Download

        System.Private.CoreLib.dll
        • Path C:\Users\Admin\AppData\Local\Amazon Games\App\Amazon Games Services\System.Private.CoreLib.dll
        • Size 8.2MB
        • SHA256 5064262dc838d4fdd458a70312f6945f56e153519fa4d6808b34738018753625
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        minimal-981e9cdf8f1733c5922e.css
        • Path C:\Users\Admin\AppData\Local\Amazon Games\App\Amazon Games UI\resources\static\public\core\minimal-981e9cdf8f1733c5922e.css
        • Size 334KB
        • SHA256 577281d9bbccbef71522e3f9f930ebf0d91fb26c0459f75172910cc43e25a2b4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        version
        • Path C:\Users\Admin\AppData\Local\Amazon Games\App\config\version
        • Size 40B
        • SHA256 c5a98d833029251f42563562041e0841ebe586f47b99d34e17de7f4c9286665e
        • MD5 SHA1 SHA512
        Submit Download

        CURRENT
        • Path C:\Users\Admin\AppData\Local\Amazon Games\Data\Electron\Session Storage\CURRENT
        • Size 16B
        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
        • MD5 SHA1 SHA512
        Submit Download

        MANIFEST-000001
        • Path C:\Users\Admin\AppData\Local\Amazon Games\Data\Electron\Session Storage\MANIFEST-000001
        • Size 41B
        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
        • MD5 SHA1 SHA512
        Submit Download

        CommonData.sqlite
        • Path C:\Users\Admin\AppData\Local\Amazon Games\Data\Games\Sql\CommonData.sqlite
        • Size 28KB
        • SHA256 0e67f05bbffde815066f3a357ffb082dd33b94cc37478baa4da7b0a401009c06
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ElectronMain-2024-07-03-05-45-11.log
        • Path C:\Users\Admin\AppData\Local\Amazon Games\Data\Logs\ElectronMain\ElectronMain-2024-07-03-05-45-11.log
        • Size 818B
        • SHA256 1e16190f0d3f4c1c3885d0b0b110868407d97bc40fecfd872ed79ea9aaea1c83
        • MD5 SHA1 SHA512
        Submit Download

        ElectronMain-2024-07-03-05-45-11.log
        • Path C:\Users\Admin\AppData\Local\Amazon Games\Data\Logs\ElectronMain\ElectronMain-2024-07-03-05-45-11.log
        • Size 4KB
        • SHA256 c2a799ecd281f301fe97dbc7ef1f5292526c77e6160031eff5bba5341b4f565d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Install_2024-07-03_05-42_0.log
        • Path C:\Users\Admin\AppData\Local\Amazon Games\Data\Logs\Native\Install_2024-07-03_05-42_0.log
        • Size 648KB
        • SHA256 e72a544d8505e66569e9a31e3b8bafb196db45563dee46852240c42d485aa391
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Cab1289.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\Cab1289.tmp
        • Size 70KB
        • SHA256 b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Tar12CB.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\Tar12CB.tmp
        • Size 181KB
        • SHA256 8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Amazon Games Services.dll
        • Path \Users\Admin\AppData\Local\Amazon Games\App\Amazon Games Services\Amazon Games Services.dll
        • Size 289KB
        • SHA256 e19a9367128f32949f564dc56616d4634ad76906a38df14aa54e071a16edddbd
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Amazon Games Services.exe
        • Path \Users\Admin\AppData\Local\Amazon Games\App\Amazon Games Services\Amazon Games Services.exe
        • Size 164KB
        • SHA256 8fd08ad4c69a69de51c4cb636ca793b60d9008eb27fa3ee8fae2685dab082d4b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        System.Runtime.dll
        • Path \Users\Admin\AppData\Local\Amazon Games\App\Amazon Games Services\System.Runtime.dll
        • Size 42KB
        • SHA256 36764292c645fbbc92c31ecb3338f26093ac0f7e69f5c8f9b817b7b6f9f49ce2
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-file-l1-2-0.dll
        • Path \Users\Admin\AppData\Local\Amazon Games\App\Amazon Games Services\api-ms-win-core-file-l1-2-0.dll
        • Size 11KB
        • SHA256 94285b076bc56f70b600340cb8e462fa860745a4e259a01a5faf200365b626eb
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-file-l2-1-0.dll
        • Path \Users\Admin\AppData\Local\Amazon Games\App\Amazon Games Services\api-ms-win-core-file-l2-1-0.dll
        • Size 11KB
        • SHA256 7ec7ff7c30d637a2b2bdf202befc401d9840bd38aaf10633c7cbf03aaed80ba3
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-localization-l1-2-0.dll
        • Path \Users\Admin\AppData\Local\Amazon Games\App\Amazon Games Services\api-ms-win-core-localization-l1-2-0.dll
        • Size 14KB
        • SHA256 2f0973102f1d2e78158e80b0eea8a5f63085cb3088624227bc89c337dcea96d3
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-processthreads-l1-1-1.dll
        • Path \Users\Admin\AppData\Local\Amazon Games\App\Amazon Games Services\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 11KB
        • SHA256 7f1a83c6b5d0a856ea8c7952fd4c637a9ac7e663a620571afdcec7af6c68a960
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-synch-l1-2-0.dll
        • Path \Users\Admin\AppData\Local\Amazon Games\App\Amazon Games Services\api-ms-win-core-synch-l1-2-0.dll
        • Size 11KB
        • SHA256 3f61c83e3dcbe7f03195efcbabd9fd1ca75ee6359828e45733a53cc1fb1183f6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-timezone-l1-1-0.dll
        • Path \Users\Admin\AppData\Local\Amazon Games\App\Amazon Games Services\api-ms-win-core-timezone-l1-1-0.dll
        • Size 11KB
        • SHA256 ed383bc5365e2d9ff18c0867d4e2f8682ced6e45b0875b55cfcfb7bc87e6b301
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-convert-l1-1-0.dll
        • Path \Users\Admin\AppData\Local\Amazon Games\App\Amazon Games Services\api-ms-win-crt-convert-l1-1-0.dll
        • Size 15KB
        • SHA256 3d205605ed371704d2de5fa0511fb4ad2f791c81e5781ed3c4464881efd8523b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-filesystem-l1-1-0.dll
        • Path \Users\Admin\AppData\Local\Amazon Games\App\Amazon Games Services\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 13KB
        • SHA256 0ebae37459eb25ef518c47c454e6af81b076d0fdc5fed1674806551259435584
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-heap-l1-1-0.dll
        • Path \Users\Admin\AppData\Local\Amazon Games\App\Amazon Games Services\api-ms-win-crt-heap-l1-1-0.dll
        • Size 12KB
        • SHA256 f989de398e969df49c108ef53f5e152eb35f7a7d0e19974aa9f24a995e5c9e11
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-locale-l1-1-0.dll
        • Path \Users\Admin\AppData\Local\Amazon Games\App\Amazon Games Services\api-ms-win-crt-locale-l1-1-0.dll
        • Size 11KB
        • SHA256 f7cb5d3347d5a13b8bcce06821ba75043fce87f298131e23155753b56a48297e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-math-l1-1-0.dll
        • Path \Users\Admin\AppData\Local\Amazon Games\App\Amazon Games Services\api-ms-win-crt-math-l1-1-0.dll
        • Size 21KB
        • SHA256 5e40b97f5e5a1577bf30e91dfacc0e74e1cffb6c2beb270777cc0a5db065947f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-runtime-l1-1-0.dll
        • Path \Users\Admin\AppData\Local\Amazon Games\App\Amazon Games Services\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 16KB
        • SHA256 f0e0d8b65a8cf88355a7c2fd401cee5ff4bcb7965a888f4361ad14a054517fd7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-stdio-l1-1-0.dll
        • Path \Users\Admin\AppData\Local\Amazon Games\App\Amazon Games Services\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 17KB
        • SHA256 eec15efdf7caa058cb7f721a1c4e5d3f1c97039c4b6bfe2b32f789e10756106f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-string-l1-1-0.dll
        • Path \Users\Admin\AppData\Local\Amazon Games\App\Amazon Games Services\api-ms-win-crt-string-l1-1-0.dll
        • Size 17KB
        • SHA256 c8138031537a27fd364f359d48db88485c4a0d668ed2983ff5f6edf0bffcd91f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-time-l1-1-0.dll
        • Path \Users\Admin\AppData\Local\Amazon Games\App\Amazon Games Services\api-ms-win-crt-time-l1-1-0.dll
        • Size 13KB
        • SHA256 62886805ad32f151b6230358e1da74db1bfc8adbfdc316fda111cb8431a733d8
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-utility-l1-1-0.dll
        • Path \Users\Admin\AppData\Local\Amazon Games\App\Amazon Games Services\api-ms-win-crt-utility-l1-1-0.dll
        • Size 11KB
        • SHA256 4e71c955de0a9e71ecd6749d73f6f07364bea34c125a61261a9efe2b76ba98e5
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        clrjit.dll
        • Path \Users\Admin\AppData\Local\Amazon Games\App\Amazon Games Services\clrjit.dll
        • Size 1.0MB
        • SHA256 ce9037b6998a8171cb53cfa3725cc9bddd95ceba7fe4f9fd9fb43ac667ce4601
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        coreclr.dll
        • Path \Users\Admin\AppData\Local\Amazon Games\App\Amazon Games Services\coreclr.dll
        • Size 4.0MB
        • SHA256 ab0ee337d10c8225134603f1dc5f70631fc7a3dc49500e254efca7c60b145f67
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        hostfxr.dll
        • Path \Users\Admin\AppData\Local\Amazon Games\App\Amazon Games Services\hostfxr.dll
        • Size 248KB
        • SHA256 50a853d23c8d2832da1183abd20ae446585cebcd902858f3bd0181fa4bf3c6b6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        hostpolicy.dll
        • Path \Users\Admin\AppData\Local\Amazon Games\App\Amazon Games Services\hostpolicy.dll
        • Size 249KB
        • SHA256 4f3934c1bcac7827078702d9ef21ecd4af5652595a115bc578d026bb03b60bd8
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ucrtbase.dll
        • Path \Users\Admin\AppData\Local\Amazon Games\App\Amazon Games Services\ucrtbase.dll
        • Size 1.1MB
        • SHA256 1f1ce96469c20279003cf9ec59f452febed2dd7f6e6c055ae8019216105c8f3b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ffmpeg.dll
        • Path \Users\Admin\AppData\Local\Amazon Games\App\Amazon Games UI\ffmpeg.dll
        • Size 1.9MB
        • SHA256 7d0ea22c750c6df0872a9cf76b55a62e197db1bdd6ead8ed967d627a84255994
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Amazon Games.exe
        • Path \Users\Admin\AppData\Local\Amazon Games\App\Amazon Games.exe
        • Size 1.7MB
        • SHA256 25a9fa08338f0e155ef7ff25fc5470d8bd6c9c002326111e0fc2216709a777cd
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        memory/2132-1904-0x0000000000690000-0x0000000000691000-memory.dmp
        Download