home

switchsetup.exe

Switch

NCH Software

This is a setup and installation application. This file is installed with the program Switch Sound File Converter. The file has been seen being downloaded from www.filebuzz.com and multiple other hosts.
Publisher:
NCH Software  (signed and verified)

Product:
Switch

Description:
Switch Sound File Converter

Version:
4.60

MD5:
5d2d463f5e53987b0b356eecdbbc37d9

SHA-1:
85f83cb71ce7c04bd710ccaaaa4b60d749c476fb

SHA-256:
0dd2cdb6f3f8abc7049c111a5820251c161fa20d26e6d080df51fd1914d5f1cc

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/27/2024 1:38:48 AM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/Bundled.Toolbar.Google (variant)
8.9601

File size:
639.6 KB (654,912 bytes)

Copyright:
NCH Software

File type:
Executable application (Win32 EXE)

Language:
English (Australia)

Common path:
C:\users\{user}\downloads\switchsetup.exe

Digital Signature
Signed by:
NCH Software

Authority:
Thawte, Inc.

Valid from:
5/20/2013 2:00:00 AM

Valid to:
8/8/2015 1:59:59 AM

Subject:
CN=NCH Software, O=NCH Software, L=Canberra, S=Australian Capital Territory, C=AU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
6A560820FA3E9AD8E5411734B1D40AD5

File PE Metadata
Compilation timestamp:
12/10/2013 6:05:55 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
12288:mdTTeLmLN0k9aoy0fgrR7Ds4mHlycdxkh4bXMqG+Gywy0DhTuPI9acQRbbD+v/Vw:0T2kuwgrRfq4wOhI5GPFTBsbbP+v/Vw

Entry address:
0x21D8

Entry point:
55, 8B, EC, 83, E4, F8, 81, EC, FC, 16, 00, 00, 53, 56, 57, E8, 03, FF, FF, FF, 33, DB, 3B, C3, 89, 44, 24, 14, 0F, 85, DF, 03, 00, 00, 6A, 06, 53, FF, 15, 88, 10, 40, 00, FF, 15, 4C, 10, 40, 00, 68, 6C, 14, 40, 00, 8B, F0, E8, CB, 03, 00, 00, 85, C0, 74, 10, 68, 7C, 14, 40, 00, 68, 80, 14, 40, 00, FF, 15, 00, 10, 40, 00, 68, 90, 14, 40, 00, 8B, C6, E8, AB, 03, 00, 00, 3B, C3, 74, 49, 83, C0, 0E, EB, 08, 66, 83, F9, 20, 75, 0A, 40, 40, 0F, B7, 08, 66, 3B, CB, 75, F0, 0F, B7, 08, 33, F6, 66, 3B, CB, 74, 20...
 
[+]

Developed / compiled with:
Microsoft Visual C++

The file switchsetup.exe has been discovered within the following program.

Switch Sound File Converter  by NCH Software
Publisher's description - “Switch Sound File Converter is a professional audio file converter for Windows. It can convert mp3, wav or wma audio file formats and more to the audio file format of your choice. Switch Plus audio file converter is very easy to use.”
www.nchsoftware.com
25% remove it
 
Powered by Should I Remove It?

The file switchsetup.exe has been seen being distributed by the following 5 URLs.

http://www.filebuzz.com/.../download.php?id=111444

http://www.magix.info/.../switch-sound-file-converter.update.131093.html?action=downloaddirect&swid=25586

http://global-shared-files-l3.softonic.com/85f/83c/.../file?nvb=20140809223407&nva=20140810103507&token=05c2e05ed6facb948dd60&id_file=42598&channel=WEB&instance=softonic_en&type=PROGRAM&fdh=no&SD_used=0&filename=switchsetup.exe

http://global-shared-files-l3.softonic.com/85f/83c/.../file?nvb=20140721204640&nva=20140722084740&token=0e60e0cafcc650848e858&id_file=42598&channel=WEB&instance=softonic_nl&type=PROGRAM&fdh=no&SD_used=0&filename=switchsetup.exe

http://www.nch.com.au/.../switchsetup.exe

Scan switchsetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.