home

smartswitch_pc.exe

Smart Switch

Samsung Electronics CO., LTD.

This is a setup and installation application. The file has been seen being downloaded from s6392.chomikuj.pl and multiple other hosts.
Publisher:
Samsung Electronics CO., LTD.  (signed and verified)

Product:
Smart Switch

Description:
Smart Switch PC Installer 4.0

Version:
4.0.15082.16

MD5:
f63abdee686f7e5b13b38dab03bc0abe

SHA-1:
3949e437f5d809a7303f8369063b95bc7db6dc4a

SHA-256:
db7c3b65c7b67170e76f94ba7656bdc0c362cdf1640095ca65514de1e1adfd40

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 9:27:50 AM UTC  (today)

File size:
37.8 MB (39,661,176 bytes)

Product version:
4.0.15082.16

Copyright:
Samsung Electronic Ltd.

Original file name:
InstallShield Setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\programs\smartswitch_pc.exe

Digital Signature
Signed by:
Samsung Electronics CO., LTD.

Authority:
VeriSign, Inc.

Valid from:
10/29/2013 12:00:00 AM

Valid to:
1/27/2017 11:59:59 PM

Subject:
CN="Samsung Electronics CO., LTD.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Samsung Electronics CO., LTD.", L=Suwon, S=Kyungki-Do, C=KR

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
209BDBEAF16C06F5544AB9A1BFD32C38

File PE Metadata
Compilation timestamp:
5/30/2013 6:06:01 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
786432:mHgdlpvo4kOpKgBske1fnOy6Y/6HGoCir44OjxbylxZN:mHgdc4kOJBde1fnOTHt9kpkV

Entry address:
0x6B0CB

Entry point:
E8, 6E, 27, 01, 00, E9, 79, FE, FF, FF, 85, C0, 74, 0D, 33, C9, 85, C0, 0F, 9F, C1, 8D, 4C, 09, FF, 8B, C1, C3, 0F, B6, 00, 0F, B6, 09, 2B, C1, 74, 0D, 33, C9, 85, C0, 0F, 9F, C1, 8D, 4C, 09, FF, 8B, C1, C3, 66, 8B, 06, 66, 3B, 01, 74, 35, 0F, B6, 11, 0F, B6, C0, 2B, C2, 74, 11, 33, D2, 85, C0, 0F, 9F, C2, 8D, 54, 12, FF, 8B, C2, 85, C0, 75, 1C, 0F, B6, 46, 01, 0F, B6, 49, 01, 2B, C1, 74, 10, 33, C9, 85, C0, 0F, 9F, C1, 8D, 4C, 09, FF, 8B, C1, C3, 33, C0, C3, 8B, 06, 3B, 01, 74, 6F, 0F, B6, 11, 0F, B6, C0...
 
[+]

Entropy:
7.9935  (probably packed)

Code size:
699 KB (715,776 bytes)

The file smartswitch_pc.exe has been seen being distributed by the following 16 URLs.

http://s6392.chomikuj.pl/File.aspx?e=OjGL_eltZQU_5nNxDYbJ7N8RPgV8-_pkHIR6upbMVcPUMuhTrGLmOD5JNjgQmzZsnOefy0BpzagFWTMikAIOypbwv2EI0EC1ouikpnD_2I27HlB3ZQDnqATTlxfvGkye8LFPEz1JBl9UPpaRgyRTtn_wpS1GpcMivShh9jfq4tlF_4rFbQtJX5yQAuE3Qi6u&pv=2

http://www.techspot.com/downloads/downloadnow/.../?evp=15a8dfaed7b1bc97abbebbff9c9b4b89&file=1

http://s6392.chomikuj.pl/File.aspx?e=OjGL_eltZQU_5nNxDYbJ7N8RPgV8-_pkHIR6upbMVcPy_ZpSNDDqR6YlEieR48V1DnF0SKb6cL0Se0fFbamjbuX_uj90bmYUvsbTrv0rCBa32LDtta1ISSSFJOWyvvB537zy9346LF1AR-gNRGtuAJsuQW1gSDHUboqxMHNRkgX2EqrnKmRlsbK3MDGsYQw0&pv=2

http://s6392.chomikuj.pl/File.aspx?e=OjGL_eltZQU_5nNxDYbJ7N8RPgV8-_pkHIR6upbMVcPAgmfM6buRhUHfYNfIhC6r9_0TJxstUVbjTDdBN60ZDeIVXYtz30afSD4nPWcyDdSVtRXftdq2825c9ZyiN5pn9COv_bgJyegALfjHkeOjdJGj2v6ttIIUUiALflKrFSaG1kEjGT3xbDeUVQenkQ3O&pv=2

http://s6392.chomikuj.pl/File.aspx?e=OjGL_eltZQU_5nNxDYbJ7Fi2d0SqUwIy5KqPDllibGvTEBTKQ14nKushwU1Aspjs35EolKwMwu1Dm60Y4x-LhaSR9JT9HsfMRMkVbhjeawDm1bBr0WY8pU1tg48ry9x4Qc5btJfBF0kZPYrPy8yRr-a9UMN0YO67BE1SwFtKuHY&pv=2

http://www.techspot.com/downloads/downloadnow/.../?evp=689d2c2725621b3ca235313f1a6f57a5&file=1

http://www.techspot.com/downloads/downloadnow/.../?evp=3589aea352ea3d647eb267168f709d7b&file=1

http://www.techspot.com/downloads/downloadnow/.../?evp=50845ffe77992335e14f14b9a723edb0&file=1

http://www.techspot.com/downloads/downloadnow/.../?evp=a1b247afed591b796eea3b8a89487fdb&file=1

http://www.techspot.com/downloads/downloadnow/.../?evp=68eac321e56025b4ef9474ae20051f96&file=1

http://www.techspot.com/downloads/downloadnow/.../?evp=fe0bf7a1b03ace65ad41b363ce3f067e&file=1

http://www.techspot.com/downloads/downloadnow/.../?evp=f571a106bd4c618e2f30969a36f74601&file=1

http://www.samsung.com/us/.../smart-switch-pc_4_0_15064_11.exe

http://downloadcenter.samsung.com/content/SW/201508/.../Smart_Switch_PC_4.0.15082_16.exe

http://org.downloadcenter.samsung.com/.../ContentsFile.aspx?CDSite=COMMON&CttFileID=6206061

http://www.samsung.com/us/smart-switch/assets/.../SmartSwitch_PC.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.