home

nomtray.exe

Mobility

NetMotion Wireless Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘nomtray’. This is installed with NetMotion Mobility XE Client.
Publisher:
NetMotion Wireless, Inc.  (signed by NetMotion Wireless Inc.)

Product:
Mobility

Description:
NetMotion Tray Icon

Version:
8.50.8103

MD5:
26fc829d806a5ad762aa737290c3e77c

SHA-1:
b17fbb7a0c344114ff6fe932b4995cb1a271b20b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/5/2024 4:11:30 PM UTC  (today)

File size:
340.6 KB (348,824 bytes)

Product version:
8.50.8103

Copyright:
Copyright © 1999-2008 NetMotion Wireless, Inc.

Trademarks:
NetMotion is a registered trademark of NetMotion Wireless, Inc.

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\netmotion client\nomtray.exe

Digital Signature
Signed by:
NetMotion Wireless Inc.

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
9/11/2008 5:00:00 PM

Valid to:
5/10/2010 4:59:59 PM

Subject:
CN=NetMotion Wireless Inc., OU=DEVELOPMENT SERVICES, O=NetMotion Wireless Inc., L=Seattle, S=Washington, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
5CFF5071079458B8E5103A2DEF8E0B20

File PE Metadata
Compilation timestamp:
11/20/2008 5:25:44 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:VN/VjEP9O0nKGz6uHnfkvZ1alKGz2oHg:VjAvAoHg

Entry address:
0xEEC1

Entry point:
E8, 1A, 05, 00, 00, E9, 36, FD, FF, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 18, 71, 41, 00, 89, 0D, 14, 71, 41, 00, 89, 15, 10, 71, 41, 00, 89, 1D, 0C, 71, 41, 00, 89, 35, 08, 71, 41, 00, 89, 3D, 04, 71, 41, 00, 66, 8C, 15, 30, 71, 41, 00, 66, 8C, 0D, 24, 71, 41, 00, 66, 8C, 1D, 00, 71, 41, 00, 66, 8C, 05, FC, 70, 41, 00, 66, 8C, 25, F8, 70, 41, 00, 66, 8C, 2D, F4, 70, 41, 00, 9C, 8F, 05, 28, 71, 41, 00, 8B, 45, 00, A3, 1C, 71, 41, 00, 8B, 45, 04, A3, 20, 71, 41, 00, 8D, 45, 08, A3, 2C, 71, 41, 00, 8B...
 
[+]

Entropy:
4.6992

Code size:
60 KB (61,440 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
nomtray

Command:
C:\Program Files\netmotion client\nomtray.exe


The file nomtray.exe has been discovered within the following program.

NetMotion Mobility XE Client  by NetMotion Wireless, Inc.
www.netmotionwireless.com
About 5% of users remove it
 
Powered by Should I Remove It?

Scan nomtray.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.