zavaux.exe

ALLIT Service, LLC.

It runs as a separate (within the context of its own process) windows Service named “Zillya! Auxiliary Service”.
Publisher:
ALLIT Service, LLC.  (signed and verified)

MD5:
5e76627e79df5c197362294528feaa2b

SHA-1:
f0e71b890c4233fa35b7f7605c2429e86aa7ea21

SHA-256:
6d025b43567957089adb7717e322e74ddfedd5f2c0a29daaab12b9bc39373dd7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 10:15:13 PM UTC  (today)

File size:
1.2 MB (1,246,528 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\zillya antivirus\zavaux.exe

Digital Signature
Authority:
VeriSign, Inc.

Valid from:
3/26/2010 3:00:00 AM

Valid to:
3/27/2011 3:59:59 AM

Subject:
CN="ALLIT Service, LLC.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="ALLIT Service, LLC.", L=Kyiv, S=Kyivska, C=UA

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3A8B218626196C9BA07195B44F2843F7

File PE Metadata
Compilation timestamp:
4/9/2010 4:09:04 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

CTPH (ssdeep):
24576:JPwQoGc+7wtvtWADaPVGFl1dr0RnTY/6BlU7NhjT8FK9Q7j:lw8WGPVG31dIRnfihjT598j

Entry address:
0x90A75

Entry point:
E8, 7A, 09, 00, 00, E9, 9E, FD, FF, FF, CC, FF, 25, 58, 76, 4F, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 8B, 44, 24, 08, 8B, 4C, 24, 10, 0B, C8, 8B, 4C, 24, 0C, 75, 09, 8B, 44, 24, 04, F7, E1, C2, 10, 00, 53, F7, E1, 8B, D8, 8B, 44, 24, 08, F7, 64, 24, 14, 03, D8, 8B, 44, 24, 08, F7, E1, 03, D3, 5B, C2, 10, 00, FF, 25, 5C, 76, 4F, 00, FF, 25, 60, 76, 4F, 00, FF, 25, 64, 76, 4F, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 57, 56, 53, 33, FF, 8B, 44, 24, 14, 0B, C0, 7D, 14, 47, 8B, 54, 24, 10, F7, D8, F7...
 
[+]

Code size:
984 KB (1,007,616 bytes)

Service
Display name:
Zillya! Auxiliary Service

Service name:
ZillyaAVAuxSvc

Type:
Win32OwnProcess

Group:
SchedulerGroup


Scan zavaux.exe - Powered by Reason Core Security