home

premiumav.exe

PremiumAV Antivirus

MAYA SOFTWARE TECHNOLOGIES

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘PremiumAV’.
Publisher:
MAYA SOFTWARE TECHNOLOGIES  (signed and verified)

Product:
PremiumAV Antivirus

Description:
PremiumAV Antivirus is an effective antivirus!

Version:
1.1.54.109

MD5:
e8cca08bdc1a1d1de59b54eed1cda140

SHA-1:
bfd40586f08e90e345437800d79393874070ac62

SHA-256:
38efd00114c963e522f08af8f7217552f104be12b9bbb22a84187df0c7b0baea

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 8:31:51 PM UTC  (today)

File size:
6.7 MB (7,003,552 bytes)

Product version:
1.1.54

Copyright:
Maya Software Technologies

Trademarks:
Maya Software Technologies

Original file name:
PremiumAV Antivirus

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\maya software\premium anti-virus\premiumav.exe

Digital Signature
Signed by:
MAYA SOFTWARE TECHNOLOGIES

Authority:
DigiCert Inc

Valid from:
6/24/2013 5:30:00 AM

Valid to:
7/2/2014 5:30:00 PM

Subject:
CN=MAYA SOFTWARE TECHNOLOGIES, O=MAYA SOFTWARE TECHNOLOGIES, L=New Delhi, S=Delhi, C=IN

Issuer:
CN=DigiCert High Assurance Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0CDAA1388DAB51BC7D834A249DDF7998

File PE Metadata
Compilation timestamp:
6/20/1992 3:52:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:5EQ7vcHmycxc63gavnBMOLP4juhuk6qJ3YRuNlyZZ/0QA:uQDcGyQ/3gavnbMqB3YRuNleZE

Entry address:
0x1000

Entry point:
68, 01, 90, B6, 00, E8, 01, 00, 00, 00, C3, C3, 40, C9, F3, EE, 51, 6E, BB, E5, 3E, F0, 38, D1, BF, B6, 05, FC, DB, C6, 16, 6F, 85, 00, 5D, 10, 7D, EF, 6A, 73, EA, C8, C2, C2, 15, CD, 98, 9C, B5, BE, 1D, 52, C4, C0, D3, F9, 10, BF, F0, 34, 32, 99, 52, D6, F2, 02, CB, 8F, 85, A5, E8, 42, C5, A6, E0, 2B, 1C, 61, E8, 5A, 8A, 65, 67, BC, EB, C5, C4, 23, ED, D2, 28, 26, 07, C6, 62, FE, 5C, 35, 58, E7, 1E, B2, BE, A8, 17, 06, 9C, A0, BB, DB, E5, 81, 04, F1, FB, A0, 26, 2A, 3A, 48, A1, EC, C8, 8D, 6A, 7E, FF, E7...
 
[+]

Entropy:
4.5474

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
1.2 MB (1,239,552 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
PremiumAV

Command:
C:\Program Files\maya software\premium anti-virus\premiumav.exe


Scan premiumav.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.