home

HamsterArc.exe

Hamster Lite Archiver

Hamster Soft

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘HFALoader’.
Publisher:
Hamster Soft  (signed and verified)

Product:
Hamster Lite Archiver

Version:
2.0.1.8

MD5:
1fa32c5951cddee7a48494acaed4f6ed

SHA-1:
e82109dbd0fb1c08c6c242cf88aa288d8cbd2aaa

SHA-256:
68029fb37a82ac08bb1ba017364d0f0c6fe7feaa125bb14a87da20663ab5c6a6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/16/2024 1:30:59 PM UTC  (today)

File size:
9.3 MB (9,776,624 bytes)

Product version:
2.0.1.8

Copyright:
GNU GPL 3.0

Original file name:
HamsterArc.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\hamster soft\hamster free archiver\hamsterarc.exe

Digital Signature
Signed by:
Hamster Soft

Authority:
Thawte, Inc.

Valid from:
5/27/2012 3:00:00 AM

Valid to:
6/5/2014 2:59:59 AM

Subject:
CN=Hamster Soft, O=Hamster Soft, L=Moscow, S=Moscow, C=RU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
68D81D33A7DD45054B84A615AE0FDAF5

File PE Metadata
Compilation timestamp:
6/17/2013 1:13:35 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
196608:dGamzcUs3YQcEbMaiDp5trh+UqRQ7lRVFdAJsv6tWKFdu9Cypf1Y:dCrtN+UqiTAJsv6tWKFdu9Cypu

Entry address:
0x557603

Entry point:
E8, CB, 05, 00, 00, E9, 63, FD, FF, FF, CC, CC, CC, 53, 8B, 44, 24, 14, 0B, C0, 75, 18, 8B, 4C, 24, 10, 8B, 44, 24, 0C, 33, D2, F7, F1, 8B, 44, 24, 08, F7, F1, 8B, C2, 33, D2, EB, 50, 8B, C8, 8B, 5C, 24, 10, 8B, 54, 24, 0C, 8B, 44, 24, 08, D1, E9, D1, DB, D1, EA, D1, D8, 0B, C9, 75, F4, F7, F3, 8B, C8, F7, 64, 24, 14, 91, F7, 64, 24, 10, 03, D1, 72, 0E, 3B, 54, 24, 0C, 77, 08, 72, 0E, 3B, 44, 24, 08, 76, 08, 2B, 44, 24, 10, 1B, 54, 24, 14, 2B, 44, 24, 08, 1B, 54, 24, 0C, F7, DA, F7, D8, 83, DA, 00, 5B, C2...
 
[+]

Entropy:
6.6703

Code size:
5.9 MB (6,163,968 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
HFALoader

Command:
C:\Program Files\hamster soft\hamster free archiver\hamsterarc.exe -loader


Scan HamsterArc.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.