home

athbttray.exe

Bluetooth Software

Atheros Communications Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘AthBtTray’.
Publisher:
Atheros Commnucations  (signed by Atheros Communications Inc.)

Product:
Bluetooth Software

Description:
Bluetooth Tray

Version:
7.2.0.45

MD5:
09400198f42b533769b64fdcc3cf6abf

SHA-1:
51c34a3b2437c482bafdfc70d2f3a6f0e4bb3dae

SHA-256:
f04cf7a4d27c2acc76eaf33c95db486c38b88926926af6cd9a95e809f97aae09

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/20/2024 2:58:47 AM UTC  (today)

File size:
295.2 KB (302,240 bytes)

Product version:
7.2.0.45

Copyright:
Copyright (c) 2001-2010 Atheros Communications, Inc. All rights reserved.

Original file name:
AthBtTray.exe.mui

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\bluetooth suite\athbttray.exe

Digital Signature
Signed by:
Atheros Communications Inc.

Authority:
VeriSign, Inc.

Valid from:
3/30/2010 7:00:00 AM

Valid to:
4/1/2013 6:59:59 AM

Subject:
CN=Atheros Communications Inc., OU=SPE, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Atheros Communications Inc., L=Sunnyvale, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
709771C02A395029A68C5FBDB0E867FD

File PE Metadata
Compilation timestamp:
11/25/2010 7:23:05 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:VCWVx29nCrMQGPjog3juMsFOp7mfwEPZ/sBWL:Zv29CMQG/uMsSEPKWL

Entry address:
0x1A6FB

Entry point:
E8, E0, 04, 00, 00, E9, 3A, FD, FF, FF, 3B, 0D, 28, B0, 42, 00, 75, 02, F3, C3, E9, 60, 05, 00, 00, 53, 8A, 5C, 24, 08, F6, C3, 02, 56, 8B, F1, 74, 24, 57, 68, A8, AD, 41, 00, 8D, 7E, FC, FF, 37, 6A, 0C, 56, E8, 50, 01, 00, 00, F6, C3, 01, 74, 07, 57, E8, D5, F4, FF, FF, 59, 8B, C7, 5F, EB, 13, E8, 5E, 06, 00, 00, F6, C3, 01, 74, 07, 56, E8, BF, F4, FF, FF, 59, 8B, C6, 5E, 5B, C2, 04, 00, 6A, 14, 68, 28, 5E, 42, 00, E8, CF, 03, 00, 00, FF, 35, 18, C9, 42, 00, 8B, 35, EC, F7, 41, 00, FF, D6, 59, 89, 45, E4...
 
[+]

Entropy:
5.7974

Code size:
120 KB (122,880 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
AthBtTray

Command:
"C:\Program Files\bluetooth suite\athbttray.exe"


Scan athbttray.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.