home

airtyper.exe

Media Contact LLC

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from c.gametop.com.
Publisher:
Media Contact LLC

Description:
Air Typer Setup

MD5:
fd31e883cf4482e1976f45cbf65f979f

SHA-1:
9967c841edba3954edda015b4c3b2dd9f001f0a7

SHA-256:
c4cf4205a7ecb29d68843c1d8ea482dfc145eaaa8c3718b1c336ae37c2fc8ada

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 6:55:26 AM UTC  (today)

File size:
2.2 MB (2,333,466 bytes)

Copyright:
Copyright (C) Media Contact LLC

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
English (United States)

Common path:
C:\users\{user}\downloads\airtyper.exe

File PE Metadata
Compilation timestamp:
6/19/1992 3:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:nGarYsVmkf4DEb7w+Qv/CrNJ+7Xu93IIotcJ42a66bLkZdUbFD7:Ga9Vm9mM+mCrNJ+7+34cHaR2dU5v

Entry address:
0x98BC

Entry point:
0F, AF, D7, 52, 68, 87, 52, D5, 00, 0F, AF, C5, C7, C6, 70, C7, B5, BF, 0F, BF, D9, 03, FD, B4, 80, 0F, BF, DF, 88, CB, 81, E0, 2F, 58, 84, A3, 3B, C8, 8A, ED, 88, FD, 81, E0, 3A, 59, 7A, 0C, 0F, BE, D3, F7, C7, 9D, D8, A7, FE, C6, C6, 0A, 88, ED, 1A, DD, F2, 8B, EB, E8, 3B, 00, 00, 00, F7, C7, C8, D8, 42, EE, 88, F2, 0F, AF, F3, 8D, 15, 5F, 8B, E0, 71, 8A, EC, BB, CC, A6, 52, 7F, B6, E6, 88, DE, 57, 8D, 2D, 5E, B1, 77, B2, 86, CE, 58, 84, EB, 46, 2B, E8, 0F, B7, D5, 0F, B6, F5, 50, 84, DC, 88, E9, 8A, F0...
 
[+]

Entropy:
7.9957  (probably packed)

Code size:
36 KB (36,864 bytes)

The file airtyper.exe has been seen being distributed by the following URL.

http://c.gametop.com/.../AirTyper.exe

Scan airtyper.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.