Versions

3.1.7.3042	3.45%
2.2.4.3048	17.24%
2.2.4.3048	13.79%
2.2.4.3048	3.45%
2.2.3.3047	3.45%
2.1.9.3043	13.79%
2.1.8.3042	20.69%
2.1.7.3041	10.34%
2.1.6.3040	3.45%
2.1.2.3036	10.34%

Warning 8 antivirus scanners has detected malware in various versions of ares.exe.

There are 10 versions of ares.exe in the wild, the latest version being 3.1.7.3042. ares.exe is run as a standard windows process with the logged in user's account privileges. The process displays a GUI (graphical user interface) which allows the user to interact with it as well as displays a notification icon in the taskbar. By adding a startup entry to the run registry key, the file will be executed when the user logs into Windows. The average file size is about 1.8 MB. The programs Ares 2.2.4, Ares 2.2.5 and Ares 2.1.9 have been observed as installing specific variations of ares.exe. During the process's lifecycle, the typical CPU resource utilization is about 0.0068% including both foreground and background operations, the average private memory consumption is about 14.06 MB with the maximum memory reaching around 17.06 MB. Addionally, typically read and write I/O disk operations is about 590 Bytes per minute for reads and 402 Bytes per minute for writes.

ares.exe is the main user interface process for the Ares p2p program.

Based on 40+ industry antivirus scanners, 8 of them detected the following malware.