home

smartswitchpc_4.1.16021_15.exe

Smart Switch

Samsung Electronics CO., LTD.

This is a setup and installation application. The file has been seen being downloaded from indir.gezginler.net and multiple other hosts.
Publisher:
Samsung Electronics CO., LTD.  (signed and verified)

Product:
Smart Switch

Description:
Smart Switch PC Installer 4.0

Version:
4.1.16021.15

MD5:
5423edf62d353b6f85869b867ec7a296

SHA-1:
64d2bfa11f68e794fb1511cdc1ca4b265eb60c21

SHA-256:
fdac060e3c5da1274164090e85e45277276689c5d61e69b89c2945a999ff02d7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/10/2024 3:22:46 PM UTC  (today)

File size:
36.1 MB (37,856,912 bytes)

Product version:
4.1.16021.15

Copyright:
Samsung Electronic Ltd.

Original file name:
InstallShield Setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\roaming\samsung\smart switch pc\tempfiles\smartswitchpc_4.1.16021_15.exe

Digital Signature
Signed by:
Samsung Electronics CO., LTD.

Authority:
Symantec Corporation

Valid from:
12/31/2015 1:00:00 AM

Valid to:
1/28/2017 12:59:59 AM

Subject:
CN="Samsung Electronics CO., LTD.", O="Samsung Electronics CO., LTD.", L=Suwon, S=Kyungki-Do, C=KR

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
26181CEDF2C113E16AC74820DF7A38A3

File PE Metadata
Compilation timestamp:
5/30/2013 7:06:01 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
786432:eHLHo4L88YBTOTE+m15bNocUDnMUvQvjOo8gogtcDnDCO:eHE4L880TOg+m15ZKHvQL98goAO

Entry address:
0x6B0CB

Entry point:
E8, 6E, 27, 01, 00, E9, 79, FE, FF, FF, 85, C0, 74, 0D, 33, C9, 85, C0, 0F, 9F, C1, 8D, 4C, 09, FF, 8B, C1, C3, 0F, B6, 00, 0F, B6, 09, 2B, C1, 74, 0D, 33, C9, 85, C0, 0F, 9F, C1, 8D, 4C, 09, FF, 8B, C1, C3, 66, 8B, 06, 66, 3B, 01, 74, 35, 0F, B6, 11, 0F, B6, C0, 2B, C2, 74, 11, 33, D2, 85, C0, 0F, 9F, C2, 8D, 54, 12, FF, 8B, C2, 85, C0, 75, 1C, 0F, B6, 46, 01, 0F, B6, 49, 01, 2B, C1, 74, 10, 33, C9, 85, C0, 0F, 9F, C1, 8D, 4C, 09, FF, 8B, C1, C3, 33, C0, C3, 8B, 06, 3B, 01, 74, 6F, 0F, B6, 11, 0F, B6, C0...
 
[+]

Code size:
699 KB (715,776 bytes)

The file smartswitchpc_4.1.16021_15.exe has been seen being distributed by the following 22 URLs.

http://indir.gezginler.net/i/33618/.../

http://indir.gezginler.net/i/33618/.../

http://indir.gezginler.net/i/33618/.../

http://indir.gezginler.net/i/33618/.../

http://indir.gezginler.net/i/33618/.../

http://indir.gezginler.net/i/33618/.../

http://indir.gezginler.net/i/33618/.../

http://ftp-stahuj.centrum.cz/dl/76806aa10aa617806357057c0058f7f8/57afe9ab/stahuj/download/software/secured/s/samsung-smart-switch/.../Smart_Switch_PC_Setup.exe

http://indir.gezginler.net/i/33618/.../

http://indir.gezginler.net/i/33618/.../

http://share2.earthlinktele.com/download.aspx?file=55485024&sig=MjcvMDkvMjAxNiAyMjozMjowMg==

http://indir.gezginler.net/i/33618/.../

http://dl-sh-ctc-2.pchome.net/05/.../Smart_Switch_PC_Setup4.1.16021.15.exe

http://indir.gezginler.net/i/33618/.../

http://indir.gezginler.net/i/33618/.../

http://ftp-stahuj.centrum.cz/dl/2617466de40d42368c8d3eaee488f305/576fec0e/stahuj/download/software/secured/s/samsung-smart-switch/.../Smart_Switch_PC_Setup.exe

http://data2.stiahnut.sk/downloadFile.php?n=c2Ftc3VuZy1zbWFydC1zd2l0Y2hfNC4xLjE2MDIxLjE1LmV4ZQ==&s=pil41s8jht0siuop7v2rq87d77&r=d890ee4299b1d39ea68a02a0d94081bb

http://www.majorgeeks.com/index.php?ct=files&action=download&

https://doc-0k-5s-docs.googleusercontent.com/docs/securesc/1f624f15glkvggok2660d2sbu8lnk3d6/mcdobc5383tr6t0vojin1h9ir2ic0u2q/1455876000000/.../00925623452183107546/0BwoBD6fX2qnFUU5jYjdheHZ1Y3M?e=download

http://www.samsung.com/us/smart-switch/assets/.../Smart Switch PC_Setup.exe

http://downloadcenter.samsung.com/content/SW/201602/.../Smart_Switch_PC_Setup.exe

http://org.downloadcenter.samsung.com/.../ContentsFile.aspx?CDSite=COMMON&CttFileID=6408335

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.