home

AirDisplay.exe

Air Display Support

Avatron Software, Inc

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Air Display Support’.
Publisher:
Avatron Software, Inc  (signed and verified)

Product:
Air Display Support

Version:
1.2.1

MD5:
532046c074104e41b64deca39ed9e48f

SHA-1:
b77df5cd780b15398208d4286f5164d34cfaa15b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 2:10:12 PM UTC  (today)

File size:
1.9 MB (1,970,032 bytes)

Product version:
1.2.1

Copyright:
Copyright © 2010 Avatron Software, Inc

Original file name:
AirDisplay.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\avatron\air display\airdisplay.exe

Digital Signature
Signed by:
Avatron Software, Inc

Authority:
GlobalSign nv-sa

Valid from:
8/2/2010 1:34:50 PM

Valid to:
8/2/2013 1:34:47 PM

Subject:
CN="Avatron Software, Inc", OU="Avatron Software, Inc", O="Avatron Software, Inc", L=Portland, S=OR, C=US

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
0100000000012A342E246E

File PE Metadata
Compilation timestamp:
10/7/2010 4:23:06 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
49152:MW1fTI1WicckvZhW1NJ6lvPD4xevkNv1lYxBSxI:Mc8cnZhxlHDYvlYxg2

Entry address:
0x25B8D

Entry point:
E8, 7C, 34, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, A0, F7, 45, 00, 89, 0D, 9C, F7, 45, 00, 89, 15, 98, F7, 45, 00, 89, 1D, 94, F7, 45, 00, 89, 35, 90, F7, 45, 00, 89, 3D, 8C, F7, 45, 00, 66, 8C, 15, B8, F7, 45, 00, 66, 8C, 0D, AC, F7, 45, 00, 66, 8C, 1D, 88, F7, 45, 00, 66, 8C, 05, 84, F7, 45, 00, 66, 8C, 25, 80, F7, 45, 00, 66, 8C, 2D, 7C, F7, 45, 00, 9C, 8F, 05, B0, F7, 45, 00, 8B, 45, 00, A3, A4, F7, 45, 00, 8B, 45, 04, A3, A8, F7, 45, 00, 8D, 45, 08, A3, B4, F7, 45...
 
[+]

Entropy:
7.8505  (probably packed)

Code size:
285.5 KB (292,352 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Air Display Support

Command:
"C:\Program Files\avatron\air display\airdisplay.exe"


Scan AirDisplay.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.