shmobile.exe
by Mitel/ShoreTel
Communication
Summary
SH Mobile - ShoreTel mobile connectivity component.
shmobile.exe is the 1146th most commonly executed Windows program in EchoTrail's dataset, observed 1,484 times across enterprise environments. It typically runs from C:\Program Files (x86)\Riverbed\Steelhead Mobile and it is most often launched by runonce.exe.
1146th
most commonly executed Windows program
1,484
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Program Files (x86)\Riverbed\Steelhead Mobile100%
Top Hashes (SHA256)
- 6cfa29fab9c7d712e6d9b112209f7d5ef00200cb3eb73edf41b5fbfcc1b5f88a97.98%
- db2498f0aac771eaba0336f4c354e729a5ea1d2b99b8474a7adbde786dd398902.02%
Process Ancestry
Top Grandparents
- explorer.exe99.86%
- msiexec.exe0.14%
Top Parents
- runonce.exe99.87%
- msiexec.exe0.13%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about shmobile.exe
Rocky answers questions about shmobile.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.