home

ares.exe

Ares p2p for windows

Ares Development Group

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘ares’.
Publisher:
Ares Development Group

Product:
Ares p2p for windows

Version:
2.2.3.3047

MD5:
9596086ce0539866c136772f34791d82

SHA-1:
47093b2b7b21b266c561848f4fff934229985682

SHA-256:
f902d8e1768fc2df901ab73e97004aaee63d7609bd3471e61fb531d8097b2707

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
1/2/2026 10:11:50 AM UTC  (today)

Scan engine
Detection
Engine version

Comodo Security
Heur.Suspicious
16713

File size:
2.9 MB (3,005,952 bytes)

Product version:
2.1

Copyright:
GPL product

Trademarks:
Ares Development Team

Original file name:
ares.exe

File type:
Executable application (Win32 EXE)

Language:
English (United Kingdom)

Common path:
C:\Program Files\ares\ares.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:itHBRQJQdCZ4U6P/hZ2a6bdDmthx4bW7vAPQ1xo3eLR0o0BvSfrxITo:ithRQJQBBOa6bdDccK7wQ1xo3ER0o0lQ

Entry address:
0x266B24

Entry point:
55, 8B, EC, B9, 04, 00, 00, 00, 6A, 00, 6A, 00, 49, 75, F9, 51, 53, 56, 57, B8, F4, 62, 66, 00, E8, 57, 07, DA, FF, 33, C0, 55, 68, 36, 6E, 66, 00, 64, FF, 30, 64, 89, 20, A1, 20, FB, 66, 00, C6, 00, 01, 8D, 45, EC, E8, D5, F6, FF, FF, 8B, 4D, EC, B8, E4, B0, 67, 00, BA, 50, 6E, 66, 00, E8, 2F, E3, D9, FF, A1, E4, B0, 67, 00, E8, D9, E4, D9, FF, 8B, D8, 53, 6A, 00, 68, 00, 00, 10, 00, E8, EE, 0C, DA, FF, A3, E0, B0, 67, 00, 83, 3D, E0, B0, 67, 00, 00, 0F, 84, 92, 01, 00, 00, A1, E0, B0, 67, 00, 50, E8, 99...
 
[+]

Entropy:
6.7312

Developed / compiled with:
Microsoft Visual C++

Code size:
2.4 MB (2,514,944 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
ares

Command:
"C:\Program Files\ares\ares.exe" -h


Scan ares.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.