home

WSwitch.exe

Wireless Switch Utility

Panasonic Corporation

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘WSwitch’.
Publisher:
Panasonic Corporation  (signed and verified)

Product:
Wireless Switch Utility

Version:
4, 4, 1100, 0

MD5:
a97d66f5271eedad500b6bd34eedc360

SHA-1:
739d73f587f1f853c4328a61acac67952fafb993

SHA-256:
2b16e4fbee6aaa8ffaec66341a3e2b8c5a4fca3828bc9ccbea53d2aa7eb88787

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 12:45:39 PM UTC  (today)

File size:
1.3 MB (1,331,584 bytes)

Product version:
V4.04L11 M00

Copyright:
(C) Panasonic Corporation 2005-2010

Trademarks:
Panasonic

Original file name:
WSwitch.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\panasonic\wswitch\wswitch.exe

Digital Signature
Signed by:
Panasonic Corporation

Authority:
VeriSign, Inc.

Valid from:
10/5/2009 5:00:00 PM

Valid to:
10/10/2010 4:59:59 PM

Subject:
CN=Panasonic Corporation, OU="IT Products Division, Systems Business Group", OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Panasonic Corporation, L=Moriguchi, S=Osaka, C=JP

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3C6A54211F69F9836ECEA2EF3719DEBB

File PE Metadata
Compilation timestamp:
3/18/2010 10:01:53 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
24576:EEumDNlSCBXnCyOMG+omx6T4tIqBLHQWsVOHngv7k361iBL5wJjknZgBTRZv4U2H:EpGDfnoTmxRtIqBLHQWsVOHngv7k3612

Entry address:
0x509FC

Entry point:
48, 83, EC, 28, E8, 3B, E8, 00, 00, 48, 83, C4, 28, E9, 16, FE, FF, FF, CC, CC, 85, C9, 74, 30, 53, 48, 83, EC, 30, 48, 8B, 44, 24, 68, 4D, 8B, D1, 44, 8B, 4C, 24, 60, 4D, 8B, D8, 48, 8B, DA, 4D, 8B, C2, 49, 8B, D3, 48, 8B, CB, 48, 89, 44, 24, 20, E8, 79, 35, 00, 00, 48, 83, C4, 30, 5B, C3, CC, CC, CC, 40, 53, 48, 83, EC, 30, 48, 8B, D9, B9, 0E, 00, 00, 00, E8, C9, EA, 00, 00, 90, 48, 8B, 43, 08, 48, 85, C0, 74, 44, 48, 8B, 0D, E4, C9, 05, 00, 48, 89, 4C, 24, 20, 48, 8D, 15, D0, C9, 05, 00, 48, 85, C9, 74...
 
[+]

Entropy:
6.6814

Code size:
478.5 KB (489,984 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
WSwitch

Command:
C:\Program Files\panasonic\wswitch\wswitch.exe


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.