» obexsrv.exe
Overview
Analysis
File Details
Behaviors (1)

obexsrv.exe

Intel PROSet\Wireless Bluetooth

Motorola Solutions Inc.

It runs as a separate (within the context of its own process) windows Service named “Bluetooth OBEX Service”.

File name:

obexsrv.exe

Publisher:

Motorola Solutions, Inc. (signed by Motorola Solutions Inc.)

Product:

Intel PROSet\Wireless Bluetooth

Description:

Bluetooth OBEX Service

Version:

17.0.1401.0428

MD5:

e1e0d2c9b1570137bc9e5645023565af

SHA-1:

6fb5b03158fa41b0152559d1e8a03b9e76b81e75

SHA-256:

4aa7ceb0a7f5cad7f0ddd6561a26d220e9f15db231355572ee247eb4a4f6e5fe

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/27/2024 4:04:38 AM UTC (today)

File size:

1.1 MB (1,161,592 bytes)

Product version:

17.0.1401.0428

Original file name:

obexsrv.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\intel\bluetooth\obexsrv.exe

Digital Signature

Signed by:

Motorola Solutions Inc.

Authority:

VeriSign, Inc.

Valid from:

12/6/2012 7:00:00 PM

Valid to:

3/8/2015 7:59:59 PM

Subject:

CN=Motorola Solutions Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Motorola Solutions Inc., L=Schaumburg, S=Illinois, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

0E4B18ABAE5203692365ADA2A6452929

File PE Metadata

Compilation timestamp:

1/13/2014 1:04:58 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

24576:4deANZITlj+q0nt8rugVTvuxh2ifUlFsw7l5tb/4:iXNEItYRvuxhbfwFz7nt0

Entry address:

0x77068

Entry point:

C7, C0, B1, 5A, B1, 08, C7, C3, C7, 41, 03, 21, C7, C7, AF, 5E, 42, 4A, C7, C2, C6, 1D, 3D, 0D, C7, C1, 81, 60, 80, 38, C7, C6, CC, 57, 60, 28, C7, C5, 6E, 3E, 5A, 20, 03, 86, 48, 18, E7, D7, 03, AE, 54, 18, E7, D7, 81, C5, 4D, 38, 73, 62, 81, F1, 84, 47, A9, 4B, 03, F6, 03, F3, 81, F5, 99, 51, 14, 59, 33, 95, FA, DC, D2, 6A, 03, ED, 33, C5, C1, C7, 08, C1, C0, 1D, 03, FB, 81, C6, 33, 06, D0, 7F, 33, DE, 03, DF, 33, 87, 37, 7F, E5, 9C, 03, D1, 81, C2, FF, 4B, 97, 65, 81, C7, 9C, 0E, FE, 5D, C1, C1, 0D, C1... 
[+]

Entropy:

7.4963

Service

Display name:

Bluetooth OBEX Service

Description:

Provides Bluetooth File Transfer Protocol support.

Type:

Win32OwnProcess

Depends on:

RPCSS

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.