home

btmshell.dll

Motorola Bluetooth

Motorola Solutions Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘BTMTrayAgent’.
Publisher:
Motorola Solutions, Inc.  (signed by Motorola Solutions Inc.)

Product:
Motorola Bluetooth

Description:
Bluetooth Shell Extension

Version:
4,0,4,324

MD5:
ef99f4ec981dad7db866e9783e0ccb8a

SHA-1:
93eecaae166d86aeb0b45a226a97d2b8b13a5aa9

SHA-256:
5d70c3f2d4984f54a02aaa01c7d015df422e9db429fc81527a0625ca51796cee

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 4:18:07 AM UTC  (today)

File size:
32.3 MB (33,909,808 bytes)

Product version:
4,0,4,324

Copyright:
Copyright 2011 Motorola Solutions, Inc. All rights reserved.

Original file name:
btmshell.dll

File type:
Dynamic link library (Win64 DLL)

Language:
English (United States)

Common path:
C:\Program Files\motorola\bluetooth\btmshell.dll

Digital Signature
Signed by:
Motorola Solutions Inc.

Authority:
VeriSign, Inc.

Valid from:
1/24/2011 3:30:00 AM

Valid to:
1/25/2012 3:29:59 AM

Subject:
CN=Motorola Solutions Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Motorola Solutions Inc., L=Schaumburg, S=Illinois, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
2D4F0643F6723E656A91E71622D531D0

Registration
CLSIDs:
{05EC7A45-AB9A-4e9f-83D9-1DBD055649B1}, {0A7D34C2-E9DA-48A1-9E34-0CDFC2DE3B44}, {0D92F3FA-02A3-485e-A3BB-E94FEF29D45F}, {15F7A019-417A-4067-A2A9-D3B50D2DF8F2}, {2A8BBFB0-2ADC-4DDC-BCBB-F694A6192904}, {2FCCC6EF-938E-49e3-B56F-BB6FDADC963F}

ProgIDs:
BTMShell.BTFTPQueryInfo.1, BTMShell.SendToContextMenu.1, BTMShell.BTServiceFolder.1, BTMShell.BTDeviceExtractIcon.1, BTMShell.BTBackupClient.1, BTMShell.BTFTPContextMenu.1, BTMShell.BTFTPExtractIcon.1, ThumbnailGeneration.BTThumbnailEncode.1

COM registered:
Yes

File PE Metadata
Compilation timestamp:
7/19/2011 8:12:59 PM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
8.0

Entry address:
0x1829F0

Entry point:
48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 83, FA, 01, 49, 8B, F8, 8B, DA, 48, 8B, F1, 75, 05, E8, AF, 6D, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, 83, FE, FF, FF, CC, CC, CC, E9, 1B, 11, 00, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 48, 89, 5C, 24, 08, 57, 48, 83, EC, 20, 48, 8D, 05, DF, 4C, B9, 00, 8B, DA, 48, 8B, F9, 48, 89, 01, E8, 22, 6E, 00, 00, F6, C3, 01, 74, 08, 48, 8B, CF, E8, C5, FF, FF, FF, 48, 8B, C7, 48, 8B...
 
[+]

Entropy:
7.0235

Code size:
1.6 MB (1,690,624 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
BTMTrayAgent

Command:
rundll32.exe "C:\Program Files\motorola\bluetooth\btmshell.dll",trayapp


Scan btmshell.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.