home

vaniwriter.exe

Vani Writer

MAYA SOFTWARE TECHNOLOGIES

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘VaniWriter’.
Publisher:
Software Solutions  (signed by MAYA SOFTWARE TECHNOLOGIES)

Product:
Vani Writer

Description:
Vani Writer 1.0 Powered by NHM Writer 1.5.1.1

Version:
1.0.0.1

MD5:
b93b4ab7c71a580e5c039b1af04f7d61

SHA-1:
24fb4295e97b7fdf4256aab2ac5c0cdc00779490

SHA-256:
341f81b5140fe6317d2847291fc7c7c677368135597d1c52a52cf52292b94541

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 7:35:05 PM UTC  (today)

File size:
878.9 KB (900,000 bytes)

Product version:
1.0

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
MAYA SOFTWARE TECHNOLOGIES

Authority:
DigiCert Inc

Valid from:
6/24/2013 5:30:00 AM

Valid to:
7/2/2014 5:30:00 PM

Subject:
CN=MAYA SOFTWARE TECHNOLOGIES, O=MAYA SOFTWARE TECHNOLOGIES, L=New Delhi, S=Delhi, C=IN

Issuer:
CN=DigiCert High Assurance Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0CDAA1388DAB51BC7D834A249DDF7998

File PE Metadata
Compilation timestamp:
11/11/2013 12:27:40 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:i+5IvW50AV1QDcb4j0ctFJDc2d2lBd9mZcjZZWt9lC:iWMDAVmDckwcnJA2d2lBdgZyZyq

Entry address:
0x1000

Entry point:
68, 01, 40, 59, 00, E8, 01, 00, 00, 00, C3, C3, D9, EB, 23, B9, 51, 98, FA, 92, 9C, 91, 8C, 13, A4, 47, 9F, AA, ED, 29, 9F, 05, 81, EC, B7, FD, 44, 69, 97, 69, F6, C9, FF, F8, 8F, 0E, 04, B7, 07, E2, 42, 02, 9A, 69, B4, 8B, 0F, 4D, 7E, DE, 57, FA, 8F, 11, 04, 8D, F7, 2B, 0E, 2A, BE, 90, EF, 8B, A8, 95, F7, 04, C6, 24, C0, 07, F3, E2, 9D, C9, 48, 3F, A3, FE, 91, 1C, D3, C8, 99, 39, D5, 83, EA, 74, 49, F6, 84, F5, FD, 5D, 16, 89, 9D, AB, 64, 2D, 01, 1B, 43, 12, 07, 96, FD, 54, 0A, 7D, 36, BC, 42, 31, 16, 89...
 
[+]

Entropy:
7.7153

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
1.1 MB (1,184,768 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
VaniWriter

Command:
C:\akrutinext\vaniwriter.exe


Scan vaniwriter.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.