» zillya.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

zillya.exe

Zillya Antivirus

ALLIT Service, LLC.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Zillya Antivirus’. This is installed with Zillya! Antivirus.

File name:

zillya.exe

Publisher:

ALLIT Service, LLC. (signed and verified)

Product:

Zillya Antivirus

Version:

1,1,3450,0

MD5:

b972602e3aaadb5afe5cca9bfbf2d45d

SHA-1:

1a48f1b5d3bc663bade4b88f59f296d25f5d9a8b

SHA-256:

e8116684d848d822df862f131ced1dbdbc4aa5613c2d138948f5d50d33d32c16

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/24/2024 11:07:07 AM UTC (today)

File size:

3.7 MB (3,845,184 bytes)

Product version:

1,1,3450,0

Original file name:

Zillya Antivirus

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\zillya antivirus\zillya.exe

Digital Signature

Signed by:

ALLIT Service, LLC.

Authority:

COMODO CA Limited

Valid from:

3/27/2012 7:00:00 AM

Valid to:

3/28/2013 6:59:59 AM

Subject:

CN="ALLIT Service, LLC.", O="ALLIT Service, LLC.", STREET="Observatornaya st., 23, apt. 17", L=Kyiv, S=Kyivska, PostalCode=04053, C=UA

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00E9D861160C589429EB68D473EBC277B1

File PE Metadata

Compilation timestamp:

1/17/2013 10:35:19 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

49152:nowxiX5l/lPO0jpxrZKIbtrFCPIlQM5zzjj1Je5B5FwwwwdHz:oBpl/lPzjBFCPzkJezwwwwdHz

Entry address:

0x2469AD

Entry point:

E8, F2, 06, 00, 00, E9, 35, FD, FF, FF, CC, FF, 25, A0, 7F, 69, 00, CC, CC, 57, 56, 55, 33, FF, 33, ED, 8B, 44, 24, 14, 0B, C0, 7D, 15, 47, 45, 8B, 54, 24, 10, F7, D8, F7, DA, 83, D8, 00, 89, 44, 24, 14, 89, 54, 24, 10, 8B, 44, 24, 1C, 0B, C0, 7D, 14, 47, 8B, 54, 24, 18, F7, D8, F7, DA, 83, D8, 00, 89, 44, 24, 1C, 89, 54, 24, 18, 0B, C0, 75, 28, 8B, 4C, 24, 18, 8B, 44, 24, 14, 33, D2, F7, F1, 8B, D8, 8B, 44, 24, 10, F7, F1, 8B, F0, 8B, C3, F7, 64, 24, 18, 8B, C8, 8B, C6, F7, 64, 24, 18, 03, D1, EB, 47, 8B... 
[+]

Code size:

2.6 MB (2,711,552 bytes)

Startup File (All Users Run)

Registry location:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

Zillya Antivirus

Command:

"C:\Program Files\zillya antivirus\zillya.exe" \min

The file zillya.exe has been discovered within the following programs.

Zillya! Antivirus by ALLIT Service, LLC.

Publisher's description - “Files check system in real time for the detection of viruses and other malicious programs that try to penetrate the computer. Heuristic analyzer identifies new viruses even if records for its detection are not present in the database.”

25% remove it

Scan zillya.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.