PC_Doctor.exe

Hauberk PC Doctor

Worldwide Communications SIA

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Hauberk PC Doctor’.
Publisher:
Hauberk Software  (signed by Worldwide Communications SIA)

Product:
Hauberk PC Doctor

Version:
2.5.1.5

MD5:
3c8c09c374c106a487f344d10ef1d48e

SHA-1:
1840a238c0b674cf0aa526547b77918b76e7cb30

SHA-256:
918e144f62323c667c966bc51db45aa58d72cfe7dbafb06f2ad2bb2bf75544ee

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/13/2025 10:12:06 PM UTC  (today)

File size:
1.5 MB (1,524,096 bytes)

Product version:
2.5.1.5

Copyright:
Copyright © Hauberk Software

Original file name:
PC_Doctor.exe

File type:
Executable application (Win32 EXE)

Digital Signature
Authority:
VeriSign, Inc.

Valid from:
1/27/2012 3:00:00 AM

Valid to:
1/27/2013 2:59:59 AM

Subject:
CN=Worldwide Communications SIA, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Worldwide Communications SIA, L=Riga, S=Riga, C=LV

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
09489B1DD575B81F4C075E972C33E00E

File PE Metadata
Compilation timestamp:
11/12/2012 1:10:24 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
24576:oOQDbJau7LBx7uEM6ZZ6anKgoPBGZRzWVo32DvkXXK3yr+I6FySFJtoTei8C4Bqm:oDLBx7uEM6Z4anYGZFYo32DGKbISztoQ

Entry address:
0x15ACBE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
1.3 MB (1,412,608 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Hauberk PC Doctor

Command:
C:\windows.old.001\Program Files\hauberk software\hauberk pc doctor\pc_doctor.exe


Scan PC_Doctor.exe - Powered by Reason Core Security