» premiumav.exe
Overview
Analysis
File Details
Behaviors (1)

premiumav.exe

PremiumAV Antivirus

MAYA SOFTWARE TECHNOLOGIES

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘PremiumAV’.

File name:

premiumav.exe

Publisher:

MAYA SOFTWARE TECHNOLOGIES (signed and verified)

Product:

PremiumAV Antivirus

Description:

PremiumAV Antivirus is an effective antivirus!

Version:

1.1.40.68

MD5:

118c11bd45e4267e35bab2b0a7358046

SHA-1:

351ec507b410d568f1d8071f628c38eca44a1eeb

SHA-256:

f2e47c666abde6713109cdf21543a160c4e628c22b79aab71e232f87e4f0c6ed

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 5:11:17 AM UTC (today)

File size:

7.7 MB (8,052,832 bytes)

Product version:

1.1

Maya Software Technologies

Trademarks:

Maya Software Technologies

Original file name:

PremiumAV Antivirus

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\maya software\premium anti-virus\premiumav.exe

Digital Signature

Signed by:

MAYA SOFTWARE TECHNOLOGIES

Authority:

DigiCert Inc

Valid from:

6/23/2013 5:00:00 PM

Valid to:

7/2/2014 5:00:00 AM

Subject:

CN=MAYA SOFTWARE TECHNOLOGIES, O=MAYA SOFTWARE TECHNOLOGIES, L=New Delhi, S=Delhi, C=IN

Issuer:

CN=DigiCert High Assurance Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:

0CDAA1388DAB51BC7D834A249DDF7998

File PE Metadata

Compilation timestamp:

6/19/1992 3:22:17 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:xwIPuwTcp6q7Y/j4Rsiiai7AFfbXtXTUI:xnwVY/j4Jb9jr

Entry address:

0x1000

Entry point:

68, 01, 50, C3, 00, E8, 01, 00, 00, 00, C3, C3, 1B, D3, 9B, 52, 7A, A1, 95, 72, C1, 06, 8F, F9, 82, DF, 91, ED, 86, 82, 67, 86, E5, 12, 31, DA, 36, 4F, 4A, F1, F8, C6, 18, 7C, 85, 25, 91, 42, 65, CA, F9, 3A, 49, C1, 19, 99, 0B, 5F, 0E, 4B, 02, B6, 14, C0, 03, 87, 19, FE, C1, 19, 1C, DE, 67, A0, F8, 6B, B6, D9, A0, 7A, 1F, F2, 27, 2E, DF, CD, AB, DC, 5B, CB, FF, 78, A7, 5E, 7C, 4F, F3, DE, 06, 9E, 8B, 53, 72, 6B, C2, 28, C3, EF, 8F, 19, 2B, 0D, 80, 56, A6, E5, 22, 01, 00, C6, 96, 98, B6, 2D, BF, 63, 06, E0... 
[+]

Entropy:

4.1888

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

808 KB (827,392 bytes)

Startup File (All Users Run)

Registry location:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

PremiumAV

Command:

C:\Program Files\maya software\premium anti-virus\premiumav.exe

Scan premiumav.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.