home

aipswitch.exe

aipswitch

IT Arenduse OU

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘EstEID AIP switch’. This is installed with ID-kaart.
Publisher:
IT Systems  (signed by IT Arenduse OU)

Product:
aipswitch

Description:
AIPSWITCH utility

Version:
1, 0, 39, 0

MD5:
d37f921c883bf6b3e8a9fdfd4745caec

SHA-1:
0593b4eb3cb316e91ae93ddd97eef5a6748cadb6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/20/2024 8:28:01 AM UTC  (today)

File size:
44.9 KB (45,984 bytes)

Product version:
1, 0, 0, 0

Copyright:
Copyright © 2004

Original file name:
aipswitch.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\it arendus\id-kaart\aipswitch.exe

Digital Signature
Signed by:
IT Arenduse OU

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
11/22/2004 3:11:07 PM

Valid to:
11/20/2005 6:01:17 PM

Subject:
CN=IT Arenduse OU, OU=Secure Application Development, O=IT Arenduse OU, L=Tallinn, S=Harju, C=EE

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
20A6DE

File PE Metadata
Compilation timestamp:
5/10/2005 10:01:07 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
384:XxGkikR+U+7o0FOCBs7zlX82LIat3zlJypPFpJdmENl4xLhXcleG:XokHRvUoU5ol7ZzQPFdPNl4xLu4G

Entry address:
0x1370

Entry point:
55, 8B, EC, 6A, FF, 68, D0, 50, 40, 00, 68, 3C, 20, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 4C, 50, 40, 00, 33, D2, 8A, D4, 89, 15, 70, 87, 40, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 6C, 87, 40, 00, C1, E1, 08, 03, CA, 89, 0D, 68, 87, 40, 00, C1, E8, 10, A3, 64, 87, 40, 00, 33, F6, 56, E8, 16, 0B, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, E1, 07, 00, 00, FF, 15, 20, 50, 40, 00, A3, 78, 8C, 40, 00, E8...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
16 KB (16,384 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
EstEID AIP switch

Command:
"C:\Program Files\it arendus\id-kaart\aipswitch.exe" 1


The file aipswitch.exe has been discovered within the following programs.

ID-kaart  by IT Arendus
About 7% of users remove it
 
Powered by Should I Remove It?

Scan aipswitch.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.