home

premiumav.exe

PremiumAV Antivirus

MAYA SOFTWARE TECHNOLOGIES

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘PremiumAV’.
Publisher:
MAYA SOFTWARE TECHNOLOGIES  (signed and verified)

Product:
PremiumAV Antivirus

Description:
PremiumAV Antivirus is an effective antivirus!

Version:
1.1.63.119

MD5:
16b6acdedd683def80784741262c7307

SHA-1:
34add27c895b3f7c4f496eec97ff8f6440391414

SHA-256:
8fba596a586514f8cef115f1df97514e4b6d46098204811b985b60fd2ed10ff5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/16/2024 8:20:01 PM UTC  (today)

File size:
6.7 MB (7,026,592 bytes)

Product version:
1.1.63

Copyright:
Maya Software Technologies

Trademarks:
Maya Software Technologies

Original file name:
PremiumAV Antivirus

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\maya software\premium anti-virus\premiumav.exe

Digital Signature
Signed by:
MAYA SOFTWARE TECHNOLOGIES

Authority:
DigiCert Inc

Valid from:
6/23/2013 5:00:00 PM

Valid to:
7/2/2014 5:00:00 AM

Subject:
CN=MAYA SOFTWARE TECHNOLOGIES, O=MAYA SOFTWARE TECHNOLOGIES, L=New Delhi, S=Delhi, C=IN

Issuer:
CN=DigiCert High Assurance Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0CDAA1388DAB51BC7D834A249DDF7998

File PE Metadata
Compilation timestamp:
6/19/1992 3:22:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:iowr+XtuE1GpvPP6Uhxk6qJyVRBp4yZZRqc:iDrDE1GpvPP6smyVRBp4eZcc

Entry address:
0x1000

Entry point:
68, 01, 80, B7, 00, E8, 01, 00, 00, 00, C3, C3, B0, C2, F9, 5F, 57, DA, 45, 63, 2D, 38, B9, 55, 13, F7, B0, 02, B1, B7, 56, A8, 04, A4, 14, 59, 2F, 8E, 99, B4, 00, 58, 0D, 70, 5F, 95, 94, EF, 9A, 6C, 73, B9, 31, 97, F1, AA, 89, 09, A1, 61, 26, 8F, 50, 88, 3B, 22, F8, EA, 42, 91, D6, 7D, 88, 90, F8, 0E, 88, F6, C6, 01, 5C, ED, B8, 0D, 72, 21, 33, 1C, 30, EF, 7B, E4, A7, 48, CD, 67, B3, 8C, A7, DA, 70, 44, 5F, 03, A3, 3B, 21, E6, C1, 35, BE, 39, 4F, 50, 3B, 86, D5, 55, 8F, 7D, D2, 9D, 98, 3A, 9B, BB, 2A, AA...
 
[+]

Entropy:
4.5656

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
1.2 MB (1,289,728 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
PremiumAV

Command:
C:\Program Files\maya software\premium anti-virus\premiumav.exe


Scan premiumav.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.