home

ShdTray.exe

Eazy Fix

EAZ Solution, Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Shield’.
Publisher:
EAZ Solution, Inc.  (signed and verified)

Product:
Eazy Fix

Description:
Shield Tray

Version:
10.12

MD5:
d7aab5092b272a3aef261762d4a9f5bb

SHA-1:
e21068ec8e6190aa03b4451363d5bbfec0d30a8d

SHA-256:
132fc5ef560b2a4f78e445364f9d7e7fcabdf1326d48240e90d7f12cf9f72407

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/2/2024 10:14:09 AM UTC  (today)

File size:
100 KB (102,360 bytes)

Product version:
10.12

Copyright:
Copyright (C) EAZ Solution, Inc. All rights reserved.

Original file name:
ShdTray.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\shield\shdtray.exe

Digital Signature
Signed by:
EAZ Solution, Inc.

Authority:
DigiCert Inc

Valid from:
1/21/2016 6:00:00 PM

Valid to:
2/7/2018 6:00:00 AM

Subject:
CN="EAZ Solution, Inc.", O="EAZ Solution, Inc.", L=McKinney, S=Texas, C=US

Issuer:
CN=DigiCert High Assurance Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0890B559B7AACB033EDE77D2B2584AFA

File PE Metadata
Compilation timestamp:
12/20/2016 9:08:59 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
9.0

Entry address:
0x3F24

Entry point:
48, 83, EC, 28, E8, D7, 03, 00, 00, 48, 83, C4, 28, E9, FA, FC, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 66, 66, 0F, 1F, 84, 00, 00, 00, 00, 00, 48, 3B, 0D, D9, 80, 00, 00, 75, 11, 48, C1, C1, 10, 66, F7, C1, FF, FF, 75, 02, F3, C3, 48, C1, C9, 10, E9, 49, 04, 00, 00, CC, 48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 8B, F2, 48, 8B, D9, F6, C2, 02, 74, 2A, 44, 8B, 41, F8, 4C, 8D, 0D, 8C, 05, 00, 00, BA, 18, 00, 00, 00, E8, 52, 01, 00, 00, 40, F6, C6, 01, 74, 09...
 
[+]

Entropy:
5.9760

Code size:
16.5 KB (16,896 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Shield

Command:
"C:\Program Files\shield\shdtray.exe"


Scan ShdTray.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.