home

Doppelganger.exe

Doppelganger

Salty Brine Software

Publisher:
Salty Brine Software  (signed and verified)

Product:
Doppelganger

Version:
1.00.0003

MD5:
f4741da96c21eb34ae74b9d40a5573bf

SHA-1:
af4e3ec7856a0a5b1f243ee2da9f2cd7fafad263

SHA-256:
d1afbef748a8d0032f477114e5352a5b48b123925a176ef8f5abf375389f4038

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 11:54:38 PM UTC  (a few moments ago)

File size:
1 MB (1,099,848 bytes)

Product version:
1.00.0003

Original file name:
Doppelganger.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\doppelganger\doppelganger.exe

Digital Signature
Signed by:
Salty Brine Software

Authority:
COMODO CA Limited

Valid from:
6/25/2012 8:00:00 PM

Valid to:
6/26/2014 7:59:59 PM

Subject:
CN=Salty Brine Software, O=Salty Brine Software, STREET=PO Box 353326, L=Palm Coast, S=FL, PostalCode=32135, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
7E7AC7B0E8AB4143BEF7B77CFCA4D72C

File PE Metadata
Compilation timestamp:
6/27/2012 2:19:02 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:nh4htuXJKdjC0nFA8mBaxAxbmDD0SgBnsbpmbKYQ+A:nktuXcZ2TMfaVVQ+A

Entry address:
0x654ED5

Entry point:
E8, 3B, FF, FF, FF, 05, 10, 16, 00, 00, FF, E0, E8, 2F, FF, FF, FF, 05, EC, 05, 00, 00, FF, E0, E8, 04, 00, 00, 00, FF, FF, FF, FF, 5E, C3, 00, 86, DA, 8D, 91, C7, D9, 9B, 8C, 66, 05, C2, 0A, F4, A5, D4, 57, 10, A0, 47, DB, 5D, 49, AE, 5E, D9, EE, 5B, 19, A2, 3D, B6, F7, C9, F5, A7, E9, F2, 5E, D6, 1D, 4C, 83, C5, 3B, 29, C0, 99, 71, A9, 8D, B0, 74, BB, 16, 6A, 47, 4E, 3D, 86, DE, AD, 8D, 68, 26, 10, 3C, 84, 4B, 24, 10, 58, FA, C1, 16, E7, F5, 47, E2, C4, E6, 8C, AA, 67, AB, 64, 76, 7C, 75, BA, 11, 68, C7...
 
[+]

Entropy:
7.9057  (probably packed)

Code size:
5 MB (5,259,264 bytes)

Scan Doppelganger.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.