» KerishDoctor.exe
Overview
Analysis
File Details
Programs (1)

KerishDoctor.exe

Kerish Doctor

OOO AMA

This is installed with Kerish Doctor 2012.

File name:

KerishDoctor.exe

Publisher:

Kerish Products (signed by OOO AMA)

Product:

Kerish Doctor

Version:

4.50

MD5:

05458a61227f2589c8fc4d920226e8c4

SHA-1:

1dd0b950d482f92fa41918f26a22dd4c7f9d54b8

SHA-256:

30f2195c84d8f09334e073e5b716e937489463f76e4241169f2df63c78fa5a05

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/19/2024 6:34:10 AM UTC (today)

File size:

2.2 MB (2,352,616 bytes)

Product version:

4.50

Trademarks:

Original file name:

KerishDoctor.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\ProgramData\kerish products\kerish doctor\update\kerishdoctor.exe

Digital Signature

Signed by:

OOO AMA

Authority:

Thawte, Inc.

Valid from:

7/31/2012 3:00:00 AM

Valid to:

8/1/2013 2:59:59 AM

Subject:

CN=OOO AMA, OU=it, O=OOO AMA, L=Voronegh, S=Voroneghskaya oblast, C=RU

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

5FC6B3B8D216CFEF94FEFBDBC8BE144D

File PE Metadata

Compilation timestamp:

6/1/2013 7:23:47 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

49152:M+slqNsB0UlvdQuYPH+aXNtXXTyP2GwaKfMMErgfje+mEqbbS:B2qSRLseStXXTyP2GwaMrvAu

Entry address:

0xF941

Entry point:

55, 8B, EC, 83, C4, F0, B8, 00, 10, 40, 00, E8, 01, 00, 00, 00, 9A, 83, C4, 10, 8B, E5, 5D, E9, FB, BC, 82, 00, 93, 61, 0A, B2, 07, 14, F4, 27, D0, D5, 4F, 95, 22, 7A, 33, 4D, 74, 3A, 2A, 30, 66, A9, A1, 1A, CD, 51, D6, 3A, 13, BA, 80, 72, 4D, 81, B9, 85, 11, AD, F1, 50, A0, 27, 60, 71, 0B, C9, 52, 44, AB, 1C, 15, 99, AB, 30, 5C, F3, 88, 35, 57, 5E, 84, 43, 5A, B4, 8F, C7, 83, 19, 07, F3, 95, 07, 1E, CC, DF, 23, C5, 70, 5F, 40, B0, 65, D5, 03, 80, 8B, 71, E3, 4E, 70, 71, 2A, 6A, 54, CE, BA, 1C, 9F, 3A, EE... 
[+]

Developed / compiled with:

Microsoft Visual C++

Code size:

3.9 MB (4,100,096 bytes)

The file KerishDoctor.exe has been discovered within the following program.

Kerish Doctor 2012 by Kerish Products

Publisher's description - “Application performs thorough and safe cleanup by removing junk files and outdated cache from your PC, which significantly boosting its performance. Smart Update system regularly updates the software database which is improved by our experts.”

www.kerish.org

22% remove it

Scan KerishDoctor.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.