home

KerishDoctor.exe

Kerish Doctor

OOO AMA

Publisher:
Kerish Products  (signed by OOO AMA)

Product:
Kerish Doctor

Version:
4.50

MD5:
2577ab9c04474145fa0178badb5a0132

SHA-1:
ab5cb5b529a1ce4bea5daa78035df28511fd3560

SHA-256:
b43af96cabc9be0740a6a1598d362fc2b1b3215233ed7cddc33bde6f55d62f58

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/29/2024 7:12:18 PM UTC  (today)

File size:
2.3 MB (2,393,576 bytes)

Product version:
4.50

Copyright:
Kerish Products 2005-2013. All Rights reserved.

Trademarks:
Kerish Products 2005-2013. All Rights reserved.

Original file name:
KerishDoctor.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\ProgramData\kerish products\kerish doctor\binary\kerishdoctor.exe

Digital Signature
Signed by:
OOO AMA

Authority:
Thawte, Inc.

Valid from:
8/5/2013 3:00:00 AM

Valid to:
9/5/2014 2:59:59 AM

Subject:
CN=OOO AMA, OU=IT, O=OOO AMA, L=Voronegh, S="Voroneghskaya oblast ", C=RU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
1F3C11346254E097A2EA8B7C9A505E85

File PE Metadata
Compilation timestamp:
8/19/2013 9:59:01 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:vXUlLj3iX1KCWREYEDurEftCTyP2GwaFWh2iFxpROL8IUSQBSHX7zk/z:oX3iX1KZofMTyP2GwaF52xpcLLkSHXkb

Entry address:
0x6DD48

Entry point:
55, 8B, EC, 83, C4, F0, B8, 00, 10, 40, 00, E8, 01, 00, 00, 00, 9A, 83, C4, 10, 8B, E5, 5D, E9, BC, BC, 7F, 00, D9, BF, 4E, 7E, AF, 86, A7, 3E, E1, 1D, 05, BC, 5B, AD, 19, BE, F1, 69, 3E, 72, 81, 2B, 34, DE, 23, 23, 79, 6B, BB, C1, 17, 0C, 35, 6B, 15, E1, 72, C4, F1, 9C, 2F, F6, FF, 66, F4, 3F, 73, A7, 69, B8, 44, 0E, 49, F0, 85, 36, 6D, BA, 7F, 8A, DF, 22, 56, 47, 75, 68, 70, 07, B8, C0, 0B, 23, 69, DD, DD, CF, 41, 02, BA, 72, 70, 38, 9E, 3B, 98, 7C, 81, 3D, AA, DC, 2B, 2C, C3, 29, BA, 77, A4, B7, 97, 21...
 
[+]

Entropy:
7.8888

Developed / compiled with:
Microsoft Visual C++

Code size:
4.1 MB (4,251,648 bytes)

Scan KerishDoctor.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.