home

premiumav.exe

PremiumAV Antivirus

MAYA SOFTWARE TECHNOLOGIES

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘PremiumAV’.
Publisher:
MAYA SOFTWARE TECHNOLOGIES  (signed and verified)

Product:
PremiumAV Antivirus

Description:
PremiumAV Antivirus is an effective antivirus!

Version:
1.1.47.84

MD5:
2fb5a7ec1414300ef319fcfdf1a7955a

SHA-1:
7cc611d6de4a3ec0eba4dc7cff4bf42a631c356b

SHA-256:
4cd9da396c60ca1cc81630d7ec032b46056149c5c17801ae2cc22e26dfc50b69

Scanner detections:
2 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/16/2024 4:14:18 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Agent.558080.A
7.11.30.172

ESET NOD32
Win32/PremiumAV.A potentially unwanted application
7.0.302.0

File size:
8.3 MB (8,740,064 bytes)

Product version:
1.1.47

Copyright:
Maya Software Technologies

Trademarks:
Maya Software Technologies

Original file name:
PremiumAV Antivirus

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\maya software\premium anti-virus\premiumav.exe

Digital Signature
Signed by:
MAYA SOFTWARE TECHNOLOGIES

Authority:
DigiCert Inc

Valid from:
6/24/2013 5:30:00 AM

Valid to:
7/2/2014 5:30:00 PM

Subject:
CN=MAYA SOFTWARE TECHNOLOGIES, O=MAYA SOFTWARE TECHNOLOGIES, L=New Delhi, S=Delhi, C=IN

Issuer:
CN=DigiCert High Assurance Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0CDAA1388DAB51BC7D834A249DDF7998

File PE Metadata
Compilation timestamp:
6/20/1992 3:52:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:TVrs8zL46qJ6YRBj4Rsiiai7AFfb/Itu:TRrA6YRBj4Jbqu

Entry address:
0x1000

Entry point:
68, 01, 40, CE, 00, E8, 01, 00, 00, 00, C3, C3, 95, BA, 57, 9D, C1, 80, 3E, 34, 20, 39, 89, 01, 26, FD, A5, 7C, 9C, 3E, 91, E2, D1, B6, 7B, B3, 4D, 9D, CC, CE, 18, DE, E5, B5, E0, C3, 3F, 31, A2, 6A, 51, B3, 42, 86, B7, 76, 1B, DC, 8A, 67, 3E, 3D, 8F, 9F, 87, F9, 79, 86, 95, AC, 86, A5, 34, 99, 4A, 0C, 4A, 7C, 3F, 5E, 6D, 72, E4, 2D, F6, E7, 1F, 56, 85, A7, 0D, 60, 05, 70, FB, FF, 49, 30, 9A, CA, D4, 2D, E3, AD, 78, 0B, 89, A1, 5C, 50, CD, F7, 07, D5, 27, ED, 1A, DE, AB, 60, 05, D1, 30, 1E, 46, 97, 41, 09...
 
[+]

Entropy:
4.1646

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
842 KB (862,208 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
PremiumAV

Command:
C:\Program Files\maya software\premium anti-virus\premiumav.exe


Scan premiumav.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.