» install my phone support.exe
Overview
Analysis
File Details
Downloads (1)

install my phone support.exe

Install My Phone Support

Consumer Software International

The application install my phone support.exe, “My Phone Support Setup ” by Consumer Software International has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup and installation application and has been known to bundle potentially unwanted software. The file has been seen being downloaded from www.myphonesupport.com.

File name:

Publisher:

ConsumerSoft (signed by Consumer Software International)

Product:

Install My Phone Support

Description:

My Phone Support Setup

Version:

2.1

MD5:

95aa230aee09e68f11dbe3de1936a388

SHA-1:

5df3e188467d2e09aab070c3243843c80f3502eb

SHA-256:

2561679c7830458a4c192a86c9a1f6ba00ed1ceb2d31eda5a31f18fd806e4ca6

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

11/2/2024 7:18:37 PM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

Win32.Generic

16.4.27.23

File size:

2.7 MB (2,802,600 bytes)

Product version:

2.1

ConsumerSoft 2016

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\users\{user}\downloads\install my phone support.exe

Digital Signature

Signed by:

Consumer Software International

Authority:

Symantec Corporation

Valid from:

5/19/2015 8:00:00 PM

Valid to:

8/18/2018 7:59:59 PM

Subject:

CN=Consumer Software International, O=Consumer Software International, L=New York, S=New York, C=US

Issuer:

CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:

2CF16C88C3C669D56D734397B2364901

File PE Metadata

Compilation timestamp:

7/9/2014 3:58:13 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

49152:yucIHJHhxK25jfN7G4A8DKr6zfl/ETDhEKgjHer+JOwnKHPPPVX1VPyapOUZUFOk:XcIpHP5lU6zflsgj8K2HPN1F7pOUeFOk

Entry address:

0x113BC

Entry point:

55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 2C, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 16, D8, FF, FF, E8, 65, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 2B, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 50, 86... 
[+]

Entropy:

7.9752

Developed / compiled with:

Microsoft Visual C++

Code size:

63.5 KB (65,024 bytes)

The file install my phone support.exe has been seen being distributed by the following URL.

http://www.myphonesupport.com/d/2.1/.../Install My Phone Support.exe

Remove install my phone support.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.