home

mps_msg.dll

Consumer Software International

The module mps_msg.dll by Consumer Software International has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program My Phone Support by Consumer Software International.
Publisher:
Consumer Software International  (signed and verified)

MD5:
41b689172f7588b0b3ea0f38c4d8b02e

SHA-1:
b1fd2798aab6c45fb485855ba99f3db8e2783fe6

SHA-256:
6f855545e2324830cd9472ab0f0f6cdc979c85fde34cb58ded455e962c5921a7

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
12/25/2024 6:08:21 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Win32.Generic
16.6.6.0

File size:
8.4 MB (8,799,232 bytes)

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\consumersoft\my phone support\mps_msg.dll

Digital Signature
Signed by:
Consumer Software International

Authority:
Symantec Corporation

Valid from:
5/19/2015 5:00:00 PM

Valid to:
8/18/2018 4:59:59 PM

Subject:
CN=Consumer Software International, O=Consumer Software International, L=New York, S=New York, C=US

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
2CF16C88C3C669D56D734397B2364901

File PE Metadata
Compilation timestamp:
5/31/2016 12:42:01 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
98304:RLzOjUly6HWjQX+bz0PnOAz5SJmIuVOHf1U:RejUZ2ja+knOAzwIJgN

Entry address:
0x339453

Entry point:
E9, 28, 4E, 4A, 00, E9, 13, 8B, 06, 00, E9, 7E, E9, 38, 00, E9, 59, 09, 32, 00, E9, 94, CE, 3B, 00, E9, AF, FF, 33, 00, E9, 9A, 44, 27, 00, E9, B5, CB, 11, 00, E9, A0, AA, 1A, 00, E9, 2B, 8A, 57, 00, E9, 66, 17, 51, 00, E9, 41, 6F, 2B, 00, E9, 0C, FA, 3C, 00, E9, D7, 4E, 23, 00, E9, 32, B9, 0E, 00, E9, FD, FC, 25, 00, E9, 58, E2, 14, 00, E9, A5, D8, 5A, 00, E9, 1E, 49, 08, 00, E9, 79, 39, 52, 00, E9, 44, C4, 44, 00, E9, CF, A3, 1D, 00, E9, EA, D8, 1C, 00, E9, 85, 93, 09, 00, E9, 00, 5A, 2D, 00, E9, FB, 87...
 
[+]

Entropy:
5.7579

Developed / compiled with:
Microsoft Visual C++ 8.0 (Debug)

Code size:
6.6 MB (6,896,128 bytes)

The file mps_msg.dll has been discovered within the following program.

My Phone Support  by Consumer Software International
www.myphonesupport.com
About 8% of users remove it
 
Powered by Should I Remove It?

Remove mps_msg.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.