Security Research
PremiumAV Private Limited does its own malware analysis and detection engineering in India. This work produces and maintains the detection content used by PremiumAV Total Security and PremiumAV Enterprise. This page describes what that work involves today, how samples are handled, and how to report a security issue.
Malware analysis
We examine suspicious Windows files, including samples obtained from public threat-intelligence sources, in isolated environments to understand how they behave and how to detect them reliably.
Lab setup
Analysis runs only on dedicated, isolated machines and virtual machines that are separate from office and production systems. Virtual machines are reverted to known-clean snapshots after each analysis session. Networking is disabled, or tightly controlled and sinkholed, while samples are analysed. We never analyse samples on personal or customer machines.
Sample sources
Samples come from public research feeds such as abuse.ch MalwareBazaar, ThreatFox and URLhaus, and from suspicious files that customers voluntarily submit for detection. The EICAR test file is used for product testing.
Sample handling
Samples are stored only in password-protected, encrypted archives on access-restricted storage. They are never executed outside the lab and never redistributed. They are kept only as long as needed to build detections, then deleted; hashes and indicators of compromise (IOCs) are retained. Customer submissions are handled under our Privacy Policy and the Digital Personal Data Protection (DPDP) Act, 2023.
Detection rules
From that analysis we write signature-based and hash-based detection rules. New rules are checked before they are included in a definitions release.
Automated definitions pipeline
An automated pipeline collects indicators from public threat-intelligence feeds such as abuse.ch MalwareBazaar, ThreatFox and URLhaus, converts them into detection definitions and publishes definition updates to installed PremiumAV products.
Driver and real-time protection testing
PremiumAV real-time protection uses our own Windows file-system filter driver. We test the driver and real-time scanning on clean virtual machines before releases.
Safe testing with EICAR
For functional checks and demonstrations we use the industry-standard EICAR anti-malware test file, a harmless file that security products detect by design, instead of live malware. You can use the EICAR file (eicar.org) to confirm that real-time protection is active on your PC.
Who does this work
Research is done in-house by PremiumAV's engineering team, led by Founder & Director Sanjay Garg (about the founder).
Responsible use
We analyse malware solely to build and test detection and protection for our own products. We never create, deploy or distribute malware, and never use samples against any system or person.
How protection works today
PremiumAV protection is signature-based detection plus behaviour monitoring and real-time scanning. Our threat cloud lookup is in final testing. We do not claim independent lab certifications or rankings on this page.
Vulnerability disclosure
If you believe you have found a vulnerability in our website or software, please report it to security@premiumav.in with enough detail for us to reproduce it.
When testing, please do not access, modify or delete data that is not yours, and do not run denial-of-service or social-engineering tests.
We will acknowledge reports and keep the reporter informed. If email to that address fails, you can use support@premiumav.in. Our contact details are also published in security.txt.
Report a detection issue
To report a suspected false positive or a missed detection, email support@premiumav.in.