home

csrbthftpserver.exe

Bluetooth FTP Server

CSR India Pvt Ltd

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘CSRFTP’.
Publisher:
CSR, plc  (signed by CSR India Pvt Ltd)

Product:
Bluetooth FTP Server

Version:
5.0.17 built by: WinDDK

MD5:
31db2fba219d7a7513bd0a8d0320c5c6

SHA-1:
e31c085e8a2e3ec54b1f33209f9b20ab74e191ac

SHA-256:
d2339b15e90ba143e33d56bf13e3222b18589f28679c3329bf9e32bd30c5d995

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 7:15:17 PM UTC  (today)

File size:
323.9 KB (331,680 bytes)

Product version:
5.0.17

Copyright:
Copyright © 2008 CSR, plc

Original file name:
CSRBthFtpServer

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\csr\bluetooth feature pack 5.0\csrbthftpserver.exe

Digital Signature
Signed by:
CSR India Pvt Ltd

Authority:
VeriSign, Inc.

Valid from:
12/7/2009 7:00:00 AM

Valid to:
12/8/2010 6:59:59 AM

Subject:
CN=CSR India Pvt Ltd, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=CSR India Pvt Ltd, L=Bangalore, S=Karnataka, C=IN

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
38EED1486977921E312D019F3AF904AC

File PE Metadata
Compilation timestamp:
6/22/2010 6:58:38 PM

OS version:
6.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
6144:RVQnubalVuV3iBukfbwGMBEATm0tLAb2kyaauvmmIsYm+ITH+BMAR:RVQuMuVykkfdMOATm0hq2Ave0Ym+5MAR

Entry address:
0xF01F

Entry point:
E8, C7, 2F, 00, 00, E9, 12, FE, FF, FF, CC, CC, CC, CC, CC, E9, 19, 0B, 00, 00, CC, CC, CC, CC, CC, 55, 8B, EC, 56, 8B, 75, 14, 57, 33, FF, 3B, F7, 75, 04, 33, C0, EB, 65, 39, 7D, 08, 75, 1B, E8, E6, 33, 00, 00, 6A, 16, 5E, 89, 30, 57, 57, 57, 57, 57, E8, 88, 17, 00, 00, 83, C4, 14, 8B, C6, EB, 45, 39, 7D, 10, 74, 16, 39, 75, 0C, 72, 11, 56, FF, 75, 10, FF, 75, 08, E8, 10, 30, 00, 00, 83, C4, 0C, EB, C1, FF, 75, 0C, 57, FF, 75, 08, E8, 3F, 0F, 00, 00, 83, C4, 0C, 39, 7D, 10, 74, B6, 39, 75, 0C, 73, 0E, E8...
 
[+]

Code size:
297 KB (304,128 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
CSRFTP

Command:
C:\Program Files\csr\bluetooth feature pack 5.0\csrbthftpserver.exe


The file csrbthftpserver.exe has been discovered within the following program.

Bluetooth Feature Pack 5.0  by CSR Plc.
www.Bluetooth.org
About 4% of users remove it
 
Powered by Should I Remove It?

Scan csrbthftpserver.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.