Ec2LaunchSettings.exe
- File Path:
C:\ProgramData\Amazon\EC2-Windows\Launch\Settings\Ec2LaunchSettings.exe
- Description: Ec2Launch.Settings
Screenshot
Hashes
| Type |
Hash |
| MD5 |
94A250AB6712481C1B5892201141F30F |
| SHA1 |
5493148A66924414BA9392FD386EB6A132962605 |
| SHA256 |
9D3EDE0982AA8D6DBC229DC9B16A7D0F5508F17E6AA0C7060B01D3731242A0BF |
| SHA384 |
35FFA736C26B8E7199BDEADDE61C7DDA98FB22903E465C16BBE48752791B801F36E689B68119FAE0E43147DA2FC100BE |
| SHA512 |
4E739D88F623FFE058E3A83E2E0A2FB6F84B06D2C35CC3066C0EE041C094279D00208547FD16BFED220E43A6E1C6DDF57C380414FE2A50B85B098C38C918C9FA |
| SSDEEP |
768:tryexlvbR9EgDpXz73kQfCFX2MpOOdDUkoMYKAnkyYc5tuTV7KYhJ2pdUf2hu:sexlvbR9NDpD73kNXvpOOdDUcWbCTV7d |
Runtime Data
Window Title:
Ec2 Launch Settings
Open Handles:
| Path |
Type |
| (R-D) C:\ProgramData\Amazon\EC2-Windows\Launch\Settings\Newtonsoft.Json.dll |
File |
| (R-D) C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll |
File |
| (R-D) C:\Windows\System32\en-US\msctfui.dll.mui |
File |
| (RW-) C:\Users\user\Documents |
File |
| ...\Cor_SxSPublic_IPCBlock |
Section |
| \BaseNamedObjects__ComCatalogCache__ |
Section |
| \BaseNamedObjects\Cor_Private_IPCBlock_v4_6424 |
Section |
| \BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 |
Section |
| \BaseNamedObjects\NLS_CodePage_437_3_2_0_0 |
Section |
| \RPC Control\DSEC1918 |
Section |
| \Sessions\2\BaseNamedObjects\1918HWNDInterface:7b0b2a |
Section |
| \Sessions\2\BaseNamedObjects\windows_shell_global_counters |
Section |
| \Sessions\2\Windows\Theme4283305886 |
Section |
| \Windows\Theme1956823608 |
Section |
Loaded Modules:
| Path |
| C:\ProgramData\Amazon\EC2-Windows\Launch\Settings\Ec2LaunchSettings.exe |
| C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll |
| C:\Windows\System32\ADVAPI32.dll |
| C:\Windows\System32\bcryptPrimitives.dll |
| C:\Windows\System32\combase.dll |
| C:\Windows\System32\GDI32.dll |
| C:\Windows\System32\gdi32full.dll |
| C:\Windows\System32\KERNEL32.dll |
| C:\Windows\System32\KERNELBASE.dll |
| C:\Windows\SYSTEM32\MSCOREE.DLL |
| C:\Windows\System32\msvcp_win.dll |
| C:\Windows\System32\msvcrt.dll |
| C:\Windows\SYSTEM32\ntdll.dll |
| C:\Windows\System32\RPCRT4.dll |
| C:\Windows\System32\sechost.dll |
| C:\Windows\System32\SHLWAPI.dll |
| C:\Windows\System32\ucrtbase.dll |
Signature
- Status: Signature verified.
- Serial:
2F83C35B5136353D68CE9EB669FD1B0B
- Thumbprint:
4BAD227329ADEF18F215B6475FB7948E1629B505
- Issuer: CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US
- Subject: CN=Amazon.com Services LLC, OU=Software Services, O=Amazon.com Services LLC, L=Seattle, S=Washington, C=US
- Original Filename: Ec2LaunchSettings.exe
- Product Name: Ec2Launch.Settings
- Company Name: Amazon.com
- File Version: 1.0.0.0
- Product Version: 1.0.0.0
- Language: Language Neutral
- Legal Copyright: Copyright Amazon.com 2016
File Similarity (ssdeep match)
MIT License. Copyright (c) 2020-2021 Strontic.