home

duet.exe

Duet Display

Kairos Technologies, Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Duet Display’.
Publisher:
Kairos Technologies, Inc.  (signed and verified)

Product:
Duet Display

Version:
1.2.4

MD5:
adde5bb283c0e31b2f260c63c4616dc2

SHA-1:
aa8569d95fd1c41222e2575dc897adb730ce2326

SHA-256:
18c11311587627c53b47d70d6bea502e0aa7ddb24dbe873d33e373dea2c8f2ba

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
12/28/2024 2:45:11 AM UTC  (today)

Scan engine
Detection
Engine version

F-Secure
was aborted [F-Secure Aquarius]
5.15.154

File size:
2 MB (2,064,808 bytes)

Product version:
1.2.4

Copyright:
Copyright © 2015

Original file name:
duet.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\kairos\duet display\duet.exe

Digital Signature
Signed by:
Kairos Technologies, Inc.

Authority:
DigiCert Inc

Valid from:
4/22/2015 6:00:00 PM

Valid to:
4/26/2018 6:00:00 AM

Subject:
CN="Kairos Technologies, Inc.", O="Kairos Technologies, Inc.", L=Miami, S=Florida, C=US, PostalCode=33131, STREET=325 S Biscayne Blvd, STREET=UPH 17, SERIALNUMBER=P15000001077, OID.1.3.6.1.4.1.311.60.2.1.2=Florida, OID.1.3.6.1.4.1.311.60.2.1.3=US, OID.2.5.4.15=Private Organization

Issuer:
CN=DigiCert EV Code Signing CA (SHA2), OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
09F6D17ADBD7197A188DC6E64D8998D7

File PE Metadata
Compilation timestamp:
11/7/2015 7:43:46 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
48.0

.NET CLR dependent:
Yes

Entry address:
0x19A78E

Entry point:
FF, 25, 00, 20, 40, 00, D5, 78, E9, 3D, D5, 78, E9, 3D, D5, 78, E9, 3D, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, DD, 24, C6, 3E, DD, 24, C6, 3E, DD, 24, C6, 3E, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, A8, C6, 4B, 3E, A8, C6, 4B, 3E, A8, C6, 4B, 3E, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.7273

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
1.6 MB (1,673,216 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Duet Display

Command:
C:\Program Files\kairos\duet display\duet.exe


Scan duet.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.