ziships.exe

Zillya Internet Security

ALLIT Service, LLC.

It runs as a separate (within the context of its own process) windows Service named “Zillya Internet Security Hips antivirus service”.
Publisher:
ALLIT Service, LLC.  (signed and verified)

Product:
Zillya Internet Security

Description:
Antivirus Hips Service

Version:
3,0,1708,0

MD5:
85fb80e73fbcf4d0cb682b94d48d6eb6

SHA-1:
06cf98e4e4f6176dab2a7d0bff4f5a79848f16b1

SHA-256:
ce46a0ff4efa0eabcf12a673d27425a5ba4f9387edd7b94990a866d89aa1a3c9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/2/2024 1:43:04 PM UTC  (today)

File size:
1.8 MB (1,888,784 bytes)

Product version:
3,0,1708,0

Copyright:
ALLIT Service, LLC.

Original file name:
AVHips.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\zillya internet security\ziships.exe

Digital Signature
Authority:
COMODO CA Limited

Valid from:
7/23/2015 3:00:00 AM

Valid to:
7/23/2016 2:59:59 AM

Subject:
CN="ALLIT Service, LLC.", O="ALLIT Service, LLC.", STREET="Avtozavodskaya, 54/19", L=Kyiv, S=Kyivska, PostalCode=04114, C=UA

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00AF2C6A74C06580EE78DA3F0A9EC6FECC

File PE Metadata
Compilation timestamp:
6/22/2016 3:48:08 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
12.0

CTPH (ssdeep):
49152:/kLjkiUckW0nr0DK2zOQ1wceaPLZfdo1aRj:/kLjkiUckW0nr0e2zEZab

Entry address:
0xAC3A5

Entry point:
E8, 5E, 04, 00, 00, E9, 91, FE, FF, FF, CC, FF, 25, 4C, D6, 53, 00, FF, 25, 50, D6, 53, 00, FF, 25, 14, D7, 53, 00, FF, 25, 18, D7, 53, 00, FF, 25, 20, D7, 53, 00, FF, 25, 30, D7, 53, 00, FF, 25, 34, D7, 53, 00, FF, 25, 38, D7, 53, 00, FF, 25, 3C, D7, 53, 00, FF, 25, 40, D7, 53, 00, FF, 25, 50, D7, 53, 00, FF, 25, 54, D7, 53, 00, FF, 25, 58, D7, 53, 00, FF, 25, 5C, D7, 53, 00, FF, 25, 60, D7, 53, 00, CC, CC, CC, CC, CC, CC, 55, 8B, EC, FF, 75, 14, FF, 75, 10, FF, 75, 0C, FF, 75, 08, 68, AC, BC, 4A, 00, 68...
 
[+]

Code size:
1.2 MB (1,291,264 bytes)

Service
Display name:
Zillya Internet Security Hips antivirus service

Service name:
ZISHipsSvc3

Description:
Zillya Internet Security

Type:
Win32OwnProcess


Scan ziships.exe - Powered by Reason Core Security