home

HamsterArc.exe

Hamster Free Archiver

HAMSTERSOFT LLC

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘HFALoader’.
Publisher:
Hamster Soft  (signed by HAMSTERSOFT LLC)

Product:
Hamster Free Archiver

Version:
3.0.0.85

MD5:
39c1c2a8f063633c8b036bd27f0eb9cc

SHA-1:
31f275b74741651b44720a953a5ce6d01b4f9055

SHA-256:
8a178c9365a366dc91885a8a410f26953c3b114543385ab77abf68f74c944e95

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 9:21:42 PM UTC  (today)

File size:
4.1 MB (4,337,744 bytes)

Product version:
3.0.0.85

Copyright:
GNU GPL 3.0

Original file name:
HamsterArc.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\hamster soft\hamster free zip archiver\hamsterarc.exe

Digital Signature
Signed by:
HAMSTERSOFT LLC

Authority:
COMODO CA Limited

Valid from:
2/4/2014 1:00:00 AM

Valid to:
2/5/2015 12:59:59 AM

Subject:
CN=HAMSTERSOFT LLC, O=HAMSTERSOFT LLC, STREET="Derbenevskaya naberezhnaya, 7, building 14", L=Moscow, S=Moscow, PostalCode=115114, C=RU

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00CD14B0F34CA33834885CA15C01ED1126

File PE Metadata
Compilation timestamp:
12/3/2014 7:38:12 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
49152:I/tMlgrdao/kG/GKvJs31JG4a64oFdEkS2MmAm/tRzpGGXZzG1R:PFoYtda64jkcm/tR1G

Entry address:
0x155581

Entry point:
E8, 44, 04, 00, 00, E9, 1C, FD, FF, FF, CC, FF, 25, BC, D7, 76, 00, FF, 25, C0, D7, 76, 00, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, E8, 95, 76, 00, 89, 0D, E4, 95, 76, 00, 89, 15, E0, 95, 76, 00, 89, 1D, DC, 95, 76, 00, 89, 35, D8, 95, 76, 00, 89, 3D, D4, 95, 76, 00, 66, 8C, 15, 00, 96, 76, 00, 66, 8C, 0D, F4, 95, 76, 00, 66, 8C, 1D, D0, 95, 76, 00, 66, 8C, 05, CC, 95, 76, 00, 66, 8C, 25, C8, 95, 76, 00, 66, 8C, 2D, C4, 95, 76, 00, 9C, 8F, 05, F8, 95, 76, 00, 8B, 45, 00, A3, EC, 95, 76, 00, 8B, 45...
 
[+]

Code size:
1.5 MB (1,594,368 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
HFALoader

Command:
C:\Program Files\hamster soft\hamster free zip archiver\hamsterarc.exe -loader


Scan HamsterArc.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.