home

myphonesupport.exe

MyPhoneSupport

Consumer Software International

The application myphonesupport.exe by Consumer Software International has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘My Phone Support Notification’. This file is typically installed with the program My Phone Support by Consumer Software International.
Publisher:
ConsumerSoft  (signed by Consumer Software International)

Product:
MyPhoneSupport

Version:
2.2.1.1

MD5:
3e192f8a83815ad873fe80dffaf202cf

SHA-1:
6839ad6ac6f7e3a8b09326225f6ac69a1fcf4a90

SHA-256:
e04acd9f951481af05d6c37e20e2a4b2f510bc1c793603417011d11383e52224

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
12/25/2024 6:11:40 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Win32.Generic
16.6.5.0

File size:
1 MB (1,061,888 bytes)

Product version:
2.1

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\consumersoft\my phone support\myphonesupport.exe

Digital Signature
Signed by:
Consumer Software International

Authority:
Symantec Corporation

Valid from:
5/19/2015 7:00:00 PM

Valid to:
8/18/2018 6:59:59 PM

Subject:
CN=Consumer Software International, O=Consumer Software International, L=New York, S=New York, C=US

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
2CF16C88C3C669D56D734397B2364901

File PE Metadata
Compilation timestamp:
5/31/2016 2:37:22 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:ixGTPlOmv4dqDWC5UIzcv1ViY8BRlmr08NM/lIvTXbpc2ifBZ888888888888W8u:cGpvvmqDWC57cvW3vH0zrNM94zuQ

Entry address:
0x9D9BC

Entry point:
55, 8B, EC, 83, C4, E4, 53, 56, 33, C0, 89, 45, E4, 89, 45, E8, 89, 45, EC, B8, 04, C9, 49, 00, E8, 97, A5, F6, FF, 8B, 35, AC, 09, 4A, 00, 33, C0, 55, 68, 3C, DB, 49, 00, 64, FF, 30, 64, 89, 20, 68, 4C, DB, 49, 00, 68, 6C, DB, 49, 00, E8, AC, B0, F6, FF, 8B, D8, 53, E8, AC, B2, F6, FF, 85, C0, 74, 5B, E8, A3, 59, F6, FF, 85, C0, 7E, 37, 8D, 55, EC, B8, 01, 00, 00, 00, E8, F2, 59, F6, FF, 8B, 45, EC, BA, 9C, DB, 49, 00, E8, 41, 85, F6, FF, 75, 1B, 6A, 00, 6A, 00, A1, 18, 0B, 4A, 00, 8B, 00, 50, 68, FF, FF...
 
[+]

Entropy:
6.8027

Developed / compiled with:
Microsoft Visual C++

Code size:
626 KB (641,024 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
My Phone Support Notification

Command:
C:\Program Files\consumersoft\my phone support\myphonesupport.exe


The file myphonesupport.exe has been discovered within the following program.

My Phone Support  by Consumer Software International
www.myphonesupport.com
About 8% of users remove it
 
Powered by Should I Remove It?

Remove myphonesupport.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.