home

PSUAMain.exe

Panda Cloud Antivirus

Panda Security S.L

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘PSUAMain’.
Publisher:
Panda Security, S.L.  (signed by Panda Security S.L)

Product:
Panda Cloud Antivirus

Description:
PSUAMain

Version:
4.0.0.619

MD5:
318b2dc873f46a7e12fa60dc937e76bf

SHA-1:
38baac52e1b3c583fa056811a3c98250da3b0a42

SHA-256:
07d2dcc069d3013f3f00d50455def6f30f0e7de213fb89befe964e63d764e8e7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 5:00:09 AM UTC  (today)

File size:
35.3 KB (36,136 bytes)

Product version:
1.0.0.0

Copyright:
© Panda 2014

Original file name:
PSUAMain.exe

File type:
Executable application (Win32 EXE)

Language:
Spanish (Spain, International Sort)

Common path:
C:\Program Files\panda security\panda cloud antivirus\psuamain.exe

Digital Signature
Signed by:
Panda Security S.L

Authority:
VeriSign, Inc.

Valid from:
4/21/2013 8:00:00 PM

Valid to:
5/22/2014 7:59:59 PM

Subject:
CN=Panda Security S.L, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Panda Security S.L, L=Bilbao, S=Bizkaia, C=ES

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3821038D3CD5E9A7C353DE7900639C73

File PE Metadata
Compilation timestamp:
2/12/2014 11:03:47 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
768:vXoBaI4VAF0ZjydFBWEXbO0QthMl7qTPR6:I0od6+O1hMl7m6

Entry address:
0x4984

Entry point:
E8, 7B, 05, 00, 00, E9, 6B, FD, FF, FF, FF, 25, FC, 60, 40, 00, FF, 25, 00, 61, 40, 00, 8B, FF, 55, 8B, EC, FF, 75, 14, FF, 75, 10, FF, 75, 0C, FF, 75, 08, 68, 41, 46, 40, 00, 68, 4C, 80, 40, 00, E8, E6, 05, 00, 00, 83, C4, 18, 5D, C3, CC, 51, 8D, 4C, 24, 08, 2B, C8, 83, E1, 0F, 03, C1, 1B, C9, 0B, C1, 59, E9, DA, 05, 00, 00, 51, 8D, 4C, 24, 08, 2B, C8, 83, E1, 07, 03, C1, 1B, C9, 0B, C1, 59, E9, C4, 05, 00, 00, FF, 25, 04, 61, 40, 00, 6A, 14, 68, 98, 67, 40, 00, E8, 82, 04, 00, 00, FF, 35, 80, 84, 40, 00...
 
[+]

Entropy:
6.5717

Code size:
17 KB (17,408 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
PSUAMain

Command:
"C:\Program Files\panda security\panda cloud antivirus\psuamain.exe" \launchsystray


Scan PSUAMain.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.