home

hzrTray.exe

hzrTray

Orbitech

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Hazard Shield’. This is installed with Hazard Shield.
Publisher:
Orbitech  (signed and verified)

Product:
hzrTray

Description:
Hazard Shield tray icon

Version:
2.2.0.392

MD5:
b63a4bc526224bac85fe959b3aa81063

SHA-1:
08133fe723c742d0784c133901c02e0d9a5ddbb0

SHA-256:
835b4876a9f0bc0f1c7a7c2d01feded28d8f879f28e9b4e27758f07987b3cd0d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 3:18:21 AM UTC  (today)

File size:
42.6 KB (43,648 bytes)

Product version:
2.2.0.392

Copyright:
Copyright © Orbitech 2010

Original file name:
hzrTray.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\hazard shield\hzrtray.exe

Digital Signature
Signed by:
Orbitech

Authority:
GlobalSign nv-sa

Valid from:
8/2/2010 7:03:08 AM

Valid to:
8/3/2011 7:03:02 AM

Subject:
E=support@orbitech.org, CN=Orbitech, O=Orbitech, C=US

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
0100000000012A33356909

File PE Metadata
Compilation timestamp:
10/20/2010 1:28:49 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
768:onxc+NkYSyoCnyHJPUXgv2dVcKg46n6QWvqC+/4XkO:ou+Nc/CnyHJP0gv2dCKgVUqC+MkO

Entry address:
0xA07A

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.6425

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
32.5 KB (33,280 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Hazard Shield

Command:
C:\Program Files\hazard shield\hzrtray.exe \run


The file hzrTray.exe has been discovered within the following program.

Hazard Shield  by Orbitum
About 1% of users remove it
 
Powered by Should I Remove It?

Scan hzrTray.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.