» easytthr.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

easytthr.exe

EasyTether

Polyclef Software

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘EasyTether’. This is installed with EasyTether.

File name:

easytthr.exe

Publisher:

Mobile Stream (signed by Polyclef Software)

Product:

EasyTether

Description:

EasyTether Tray

Version:

1.1.9.3

MD5:

669f65e3ac6cb0941880212a3a15c4e2

SHA-1:

a6e827b2e0441d183160fca1d30b174abd8e3f8e

SHA-256:

22ba0834f89949fdd03ad7e11295011b7bf4a92266f99c0df5fecea3ecb97c43

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/18/2024 12:29:00 PM UTC (today)

File size:

46.3 KB (47,432 bytes)

Product version:

1.1.9.3

Original file name:

easytthr.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\mobile stream\easytether\easytthr.exe

Digital Signature

Signed by:

Polyclef Software

Authority:

VeriSign, Inc.

Valid from:

2/23/2010 9:00:00 AM

Valid to:

2/24/2011 8:59:59 AM

Subject:

CN=Polyclef Software, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Polyclef Software, L=Lafayette, S=Louisiana, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

24139E012C380FD27A43B56E7406E252

File PE Metadata

Compilation timestamp:

8/30/2010 1:31:26 AM

OS version:

6.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

768:vd1Eqsg2uJ3R8n1iw5AdByh2jSPPeWzd1U9DEkEoemflELjbC5O:vrEkPA18DSPPeW0DirC5O

Entry address:

0x6F17

Entry point:

E8, 25, 07, 00, 00, E9, 4D, FD, FF, FF, CC, CC, CC, CC, CC, FF, 25, 54, 12, 00, 01, CC, CC, CC, CC, CC, CC, FF, 25, 4C, 12, 00, 01, CC, CC, CC, CC, CC, CC, FF, 25, 44, 12, 00, 01, CC, CC, CC, CC, CC, CC, CC, CC, 68, 9E, 6F, 00, 01, 64, A1, 00, 00, 00, 00, 50, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, 8B, 45, F8, 89, 65, E8, 50, 8B, 45, FC, C7, 45, FC, FF, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5E, 5B, C9, 51... 
[+]

Entropy:

6.3310

Code size:

31 KB (31,744 bytes)

Startup File (User Run)

Registry location:

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

EasyTether

Command:

"C:\Program Files\mobile stream\easytether\easytthr.exe"

The file easytthr.exe has been discovered within the following program.

EasyTether by Mobile Stream

www.mobile-stream.com/easytether/drivers.html

About 9% of users remove it

Scan easytthr.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.