home

Mobility_xg_client_11.00_Win8-10_x64_release.exe

NetMotion Mobility

NetMotion Wireless, Inc.

This is a setup and installation application. The file has been seen being downloaded from na31.salesforce.com.
Publisher:
NetMotion Wireless, Inc.  (signed and verified)

Product:
NetMotion Mobility

Description:
NetMotion Mobility Setup

Version:
11.0.14681.0

MD5:
6b0734c97704d98cf4b17fe8d45f0d56

SHA-1:
2bdffbb4cbb1efc626182603788b1297dcc7e517

SHA-256:
e6efec138fa622301792c17527a5d3fff265c55f22a7ede05c8fa75d604e623f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 9:32:57 AM UTC  (today)

File size:
12.3 MB (12,934,632 bytes)

Product version:
11.0.14681.0

Copyright:
(c) 2016 NetMotion Wireless, Inc. All rights reserved. (c) Outercurve Foundation.

Original file name:
Mobility_xg_client_11.00_Win8-10_x64_release.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\mobility_xg_client_11.00_win8-10_x64_release.exe

Digital Signature
Signed by:
NetMotion Wireless, Inc.

Authority:
Symantec Corporation

Valid from:
5/8/2016 7:00:00 PM

Valid to:
5/9/2019 6:59:59 PM

Subject:
CN="NetMotion Wireless, Inc.", OU=R&D, O="NetMotion Wireless, Inc.", L=Seattle, S=Washington, C=US

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
3F0F3549FB57AFD016FC7B8ACFA73AFB

File PE Metadata
Compilation timestamp:
6/28/2016 12:18:52 PM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
14.0

CTPH (ssdeep):
196608:T0C6urSVdsT9rTM19BTsEAMUqjfIzroU94Cn7IrGVyVkpZR0aio4XeRxJdwXcpRU:QCrSyHyBTspMUqjfIzncCVHZxiRyQ3PD

Entry address:
0xB0A9

Entry point:
E8, 87, 07, 00, 00, E9, 4E, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 80, F9, 40, 73, 15, 80, F9, 20, 73, 06, 0F, A5, C2, D3, E0, C3, 8B, D0, 33, C0, 80, E1, 1F, D3, E2, C3, 33, C0, 33, D2, C3, CC, 51, 8D, 4C, 24, 04, 2B, C8, 1B, C0, F7, D0, 23, C8, 8B, C4, 25, 00, F0, FF, FF, 3B, C8, F2, 72, 0B, 8B, C1, 59, 94, 8B, 00, 89, 04, 24, F2, C3, 2D, 00, 10, 00, 00, 85, 00, EB, E7, CC, CC, CC, 8B, 44, 24, 08, 8B, 4C, 24, 10, 0B, C8, 8B, 4C, 24, 0C, 75, 09, 8B, 44, 24, 04, F7, E1, C2, 10, 00...
 
[+]

Entropy:
7.9003  (probably packed)

Code size:
276.5 KB (283,136 bytes)

The file Mobility_xg_client_11.00_Win8-10_x64_release.exe has been seen being distributed by the following URL.

https://na31.salesforce.com/sfc/servlet.shepherd/version/.../06837000000FiJ9AAK

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.