» Switch.exe
Overview
Analysis
File Details
Programs (1)

Switch.exe

Egress Software Technologies Ltd

This is installed with Egress Switch Reader.

File name:

Switch.exe

Publisher:

Egress (signed by Egress Software Technologies Ltd)

Description:

Switch Reader

Version:

3.0.7166

MD5:

9336bae30abdcb4a232a44a49f84f5b9

SHA-1:

7822db9d16dd5f60411e67129ca466472f11eb56

SHA-256:

d1c94b7608ceb7a9020ccdb231fd97933ad4b661bf06b506249973f5986d2144

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/20/2024 1:48:18 AM UTC (today)

File size:

845.1 KB (865,368 bytes)

Product version:

3.0.7166

Original file name:

Switch.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\local\apps\2.0\d07k12ay.r1j\ng52g40m.2j3\swit..tion_df82fafce98a5053_0003.0000_f7b98e473f219686\switch.exe

Digital Signature

Signed by:

Egress Software Technologies Ltd

Authority:

Thawte, Inc.

Valid from:

3/2/2011 12:00:00 AM

Valid to:

4/1/2013 12:59:59 AM

Subject:

CN=Egress Software Technologies Ltd, OU=Product Operations, O=Egress Software Technologies Ltd, L=London, S=London, C=GB

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

6F264B97F47117887D12A0FA2DBFF825

File PE Metadata

Compilation timestamp:

4/19/2012 4:28:32 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

12288:KEaKSgTVCK2YMQJTmqktK13TPJhnozaUF53U6z2PQTfiM+qVqBNURIUco1Xbvdz/:3SWwKLMItko1DPIzB4U2k+8sjoNvdOs

Entry address:

0x2FE5F0

Entry point:

60, BE, 00, 80, 63, 00, 8D, BE, 00, 90, DC, FF, 57, 89, E5, 8D, 9C, 24, 80, C1, FF, FF, 31, C0, 50, 39, DC, 75, FB, 46, 46, 53, 68, 8A, C2, 2F, 00, 57, 83, C3, 04, 53, 68, E7, 65, 0C, 00, 56, 83, C3, 04, 53, 50, C7, 03, 03, 00, 02, 00, 90, 90, 90, 90, 90, 55, 57, 56, 53, 83, EC, 7C, 8B, 94, 24, 90, 00, 00, 00, C7, 44, 24, 74, 00, 00, 00, 00, C6, 44, 24, 73, 00, 8B, AC, 24, 9C, 00, 00, 00, 8D, 42, 04, 89, 44, 24, 78, B8, 01, 00, 00, 00, 0F, B6, 4A, 02, 89, C3, D3, E3, 89, D9, 49, 89, 4C, 24, 6C, 0F, B6, 4A... 
[+]

Entropy:

7.9184 (probably packed)

Code size:

800 KB (819,200 bytes)

The file Switch.exe has been discovered within the following program.

Egress Switch Reader by Egress Software Technologies Ltd.

switch.egress.com/support

About 1% of users remove it

Scan Switch.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.