Versions

8.0.0.226	1.72%
8.0.0.224	1.72%
8.0.0.224	1.72%
8.0.0.222	1.72%
8.0.0.220	22.41%
8.0.0.220	17.24%
8.0.0.218	1.72%
8.0.0.216	5.17%
8.0.0.214	1.72%
8.0.0.212	6.90%
8.0.0.210	1.72%
8.0.0.209	1.72%
8.0.0.208	1.72%
8.0.0.206	15.52%
8.0.0.206	6.90%
8.0.0.206	1.72%
8.0.0.204	1.72%
8.0.0.202	1.72%
8.0.0.200	5.17%

There are 19 versions of btvstack.exe in the wild, the latest version being 8.0.0.226. btvstack.exe is run as a standard windows process with the logged in user's account privileges. During installation, a run registry key for all users is added that will cause the program to run each time any user logs on to Windows. In order execute the program with adminsitrator rights and prevent a UAC prompt, the program will add a job to the Windows Task Scheduler that will automtaiclaly start it when a user logs on. The average file size is about 126.23 KB. The file is a digitally signed and issued to Qualcomm Atheros by VeriSign. The programs Qualcomm Atheros Bluetooth Suite (64), Bluetooth Win7 Suite (64) and Qualcomm Atheros WLAN and Bluetooth Client Installation Program have been observed as installing specific variations of btvstack.exe. The executable is a .NET framework assembly utilizing the CLR. During the process's lifecycle, the typical CPU resource utilization is about 0.0020% including both foreground and background operations, the average private memory consumption is about 21.5 MB with the maximum memory reaching around 22.46 MB. Addionally, typically read and write I/O disk operations is about 1.04 KB per minute for reads and 3 Bytes per minute for writes.

Extension Core is part of the Qualcomm Atheros Bluetooth software suite that manages installed devices with the integrated combo WLAN and Bluetooth chips.