home

Wellphone2.exe

Nokia Internet Modem

SmartCom

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Nokia Internet Modem’. This is installed with Nokia Internet Modem.
Publisher:
SmartCom  (signed and verified)

Product:
Nokia Internet Modem

Version:
3.8.90.40

MD5:
103b4facf5c84c48a79a9ea60d9280b8

SHA-1:
07aa329c87ae006bcb407ea295758366261e0f61

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 5:07:08 PM UTC  (today)

File size:
1.9 MB (1,958,552 bytes)

Product version:
3.8.90.40

Copyright:
Copyright 2005-2008 SmartCom

Trademarks:
WellPhone XT

Original file name:
Wellphone2.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\nokia\nokia internet modem\wellphone2.exe

Digital Signature
Signed by:
SmartCom

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
3/24/2009 2:00:00 AM

Valid to:
3/24/2010 1:59:59 AM

Subject:
CN=SmartCom, OU=SECURE APPLICATION DEVELOPMENT, O=SmartCom, L=SOPHIA ANTIPOLIS, S=Provence Alpes Cote d'Azur, C=FR

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
3DE2636255B516AC3C3B5A357D36604A

File PE Metadata
Compilation timestamp:
8/12/2009 6:10:23 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:dQFWN3IbnKrsXcko1E+AAWrvoZkcNbClR9m7Me8af7ecN9+AvQ0djkQptpZEzM8P:dcPKrs5F174N+9Lr0djvptYATyqk

Entry address:
0x1D5DFE

Entry point:
FF, 25, 00, 20, 00, 11, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
1.8 MB (1,916,928 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Nokia Internet Modem

Command:
"C:\Program Files\nokia\nokia internet modem\wellphone2.exe" \background


The file Wellphone2.exe has been discovered within the following program.

Nokia Internet Modem  by SmartCom
About 5% of users remove it
 
Powered by Should I Remove It?

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.