home

duet.exe

DuetDisplay

Kairos Technologies, Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Duet Display’.
Publisher:
Kairos Technologies, Inc.  (signed and verified)

Product:
DuetDisplay

Version:
0.8.7

MD5:
ef4795ab57870fb446522a932d2a821c

SHA-1:
c12ebc294a10733804b86eb52b23ae2bcd381a98

SHA-256:
afa9f6215fe923ffe5a4cebbfdf43f698be5d20308c4f4e4b9aa8115995aacd3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/28/2024 3:06:49 AM UTC  (today)

File size:
1.8 MB (1,876,208 bytes)

Product version:
0.8.7

Copyright:
Copyright © 2015

Original file name:
duet.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\kairos\duet display\duet.exe

Digital Signature
Signed by:
Kairos Technologies, Inc.

Authority:
DigiCert Inc

Valid from:
4/23/2015 8:00:00 AM

Valid to:
4/26/2018 8:00:00 PM

Subject:
CN="Kairos Technologies, Inc.", O="Kairos Technologies, Inc.", L=Miami, S=Florida, C=US, PostalCode=33131, STREET=325 S Biscayne Blvd, STREET=UPH 17, SERIALNUMBER=P15000001077, OID.1.3.6.1.4.1.311.60.2.1.2=Florida, OID.1.3.6.1.4.1.311.60.2.1.3=US, OID.2.5.4.15=Private Organization

Issuer:
CN=DigiCert EV Code Signing CA (SHA2), OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
09F6D17ADBD7197A188DC6E64D8998D7

File PE Metadata
Compilation timestamp:
5/25/2015 11:35:47 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

Entry address:
0x16EE7E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.7872

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
1.4 MB (1,495,040 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Duet Display

Command:
C:\Program Files\kairos\duet display\duet.exe


Scan duet.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.