home

helpTray.exe

Bluetooth Software

Atheros Communications Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘AtherosBtXpStack’.
Publisher:
Atheros Communications  (signed by Atheros Communications Inc.)

Product:
Bluetooth Software

Description:
BT help Tray

Version:
6.4.4.3

MD5:
67aee5c6b937fba5a5a7f268e313d873

SHA-1:
e232efdc100c5fa12e1c57d072ce23f22fc2a304

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 8:09:15 AM UTC  (today)

File size:
55.2 KB (56,480 bytes)

Product version:
6.4.4.3

Copyright:
Copyright (c) 2001-2010 Atheros Communications, Inc. All rights reserved.

Original file name:
helpTray.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\atheros\bluetooth suite\helptray.exe

Digital Signature
Signed by:
Atheros Communications Inc.

Authority:
VeriSign, Inc.

Valid from:
3/30/2010 8:00:00 AM

Valid to:
4/1/2013 7:59:59 AM

Subject:
CN=Atheros Communications Inc., OU=SPE, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Atheros Communications Inc., L=Sunnyvale, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
709771C02A395029A68C5FBDB0E867FD

File PE Metadata
Compilation timestamp:
4/23/2010 2:02:37 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
768:tsQzQrQKkfE14mxkMONZBb6Qy0siFCvJ4V7wmdUm1a8k/xWhbCLx:+o2QKUuOvB+MFCvJgZP1axxWxCLx

Entry address:
0x2719

Entry point:
E8, 72, 04, 00, 00, E9, 36, FD, FF, FF, 6A, 14, 68, 60, 43, 40, 00, E8, B9, 03, 00, 00, FF, 35, 64, 55, 40, 00, 8B, 35, A4, 32, 40, 00, FF, D6, 59, 89, 45, E4, 83, F8, FF, 75, 0C, FF, 75, 08, FF, 15, A8, 32, 40, 00, 59, EB, 67, 6A, 08, E8, D7, 04, 00, 00, 59, 83, 65, FC, 00, FF, 35, 64, 55, 40, 00, FF, D6, 89, 45, E4, FF, 35, 60, 55, 40, 00, FF, D6, 59, 59, 89, 45, E0, 8D, 45, E0, 50, 8D, 45, E4, 50, FF, 75, 08, 8B, 35, BC, 32, 40, 00, FF, D6, 59, 50, E8, 9A, 04, 00, 00, 89, 45, DC, FF, 75, E4, FF, D6, A3...
 
[+]

Entropy:
5.6820

Code size:
8 KB (8,192 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
AtherosBtXpStack

Command:
"C:\Program Files\atheros\bluetooth suite\helptray.exe"


Scan helpTray.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.