Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

1, 0, 0, 0 50.00%
1, 0, 0, 0 50.00%
(Note, ZTE CORPORATION publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

Parent process
Child process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
LookupAccountSidW, RegCreateKeyExW, GetTokenInformation, GetUserNameW, OpenProcessToken, RegCloseKey, RegNotifyChangeKeyValue, RegOpenKeyExW, RegOpenKeyW, RegQueryValueExW, RegSetValueExW
capturecrash.dll
start_capture_carsh
dbus-1.dll
dbus_connection_send_with_reply_and_block, dbus_connection_send, dbus_bus_release_name, dbus_message_set_no_reply, dbus_message_is_method_call, dbus_message_get_args, dbus_message_iter_init_append, dbus_bus_add_match, dbus_message_iter_append_basic, dbus_message_iter_init, dbus_bus_request_name, dbus_message_iter_get_arg_type, dbus_connection_unref, dbus_message_new_signal, dbus_bus_get, dbus_connection_flush, dbus_message_append_args, dbus_error_free, dbus_connection_setup_with_g_main, dbus_connection_register_object_path, dbus_message_unref, dbus_connection_set_exit_on_disconnect, dbus_message_append_args_valist, dbus_message_new_method_call, dbus_message_new_method_return, dbus_message_is_signal, dbus_error_is_set, dbus_message_iter_next, dbus_message_set_auto_start, dbus_set_error_from_message, dbus_message_iter_get_basic, dbus_connection_add_filter, dbus_error_init
itapi.dll
TelTapiCommonCloseServer, TelTapiControlSetLed, TelTapiControlSetFunctionality, TelTapiInit, TelTapiCommonCheckInitStatus, TelTapiGetDBusConnection, TelTapiRegisterClass
kernel32.dll
InterlockedExchange, InterlockedCompareExchange, GetStartupInfoA, CreateProcessW, OutputDebugStringA, GetModuleFileNameW, WideCharToMultiByte, CloseHandle, GetDiskFreeSpaceExW, WaitForMultipleObjects, CreateEventW, ResetEvent, Sleep, GetLogicalDrives, GetCurrentProcess, WaitForSingleObject, GetDriveTypeW, GetLastError, FreeLibrary, GetModuleHandleW, LoadLibraryW, GetProcAddress, GetCommState, WriteFile, SetCommState, SetCommTimeouts, ReadFile, CreateFileW, GetOverlappedResult, CancelIo, PurgeComm, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, OpenProcess, TerminateProcess, SetEvent, GetVersionExW, MultiByteToWideChar
libconfig.dll
SetValueToXmlFile, SetValueToIniFile, tapi_gconf_get_int, GetValueFromXmlFile, SetPropToXmlFile
libctlsvr.dll
ctlsvr_init_config_file, ctlsvr_get_usb_voice_port_from_conf, ctlsvr_get_modem_dev_from_conf, ctlsvr_get_ndis_port_from_conf, ctlsvr_get_at_port_from_conf, ctlsvr_get_diag_port_from_conf, ctrlsvr_disable_filter_server, ctlsvr_set_config_item_string
libglib-2.0-0-vs8.dll
g_strdup, g_io_channel_write_chars, g_malloc0, g_source_set_callback, g_error_free, g_io_channel_win32_new_fd, g_io_channel_read, g_source_remove, g_thread_join, g_io_channel_set_encoding, g_io_add_watch, g_thread_functions_for_glib_use, g_io_channel_set_buffered, g_utf8_to_utf16, g_strdup_vprintf, g_fopen, g_locale_to_utf8, g_main_loop_quit, g_key_file_new, g_strfreev, g_key_file_get_integer, g_print, g_key_file_get_keys, g_key_file_free, g_main_loop_run, g_key_file_get_string, g_utf8_validate, g_key_file_load_from_file, g_get_current_time, g_main_loop_new, g_utf16_to_utf8, g_clear_error, g_timeout_add, g_log, g_list_free, g_strdup_printf, g_usleep, g_get_current_dir_utf8, g_list_append, g_file_test_utf8, g_io_channel_flush, g_io_channel_unref, g_thread_create_full, g_threads_got_initialized, g_free, g_main_context_find_source_by_id
libgobject-2.0-0-vs8.dll
g_type_init
libgthread-2.0-0-vs8.dll
g_thread_init
libxml2.dll
xmlFreeDoc, xmlNodeListGetString, xmlNodeGetContent, xmlReadFile, xmlDocGetRootElement, xmlStrcmp, xmlFree, xmlGetProp
msvcp90.dll
DllMain
msvcr90.dll
DllMain
psapi.dll
EnumProcesses, GetModuleBaseNameW
shell32.dll
ShellExecuteW
user32.dll
DestroyWindow, GetMessageW, LoadCursorW, TranslateMessage, RegisterClassExW, CreateWindowExW, DefWindowProcW, DispatchMessageW, PostMessageW, FindWindowW

mcserver.exe

ZTE data card monitor program by ZTE CORPORATION (Signed)

Remove mcserver.exe
Version:   1, 0, 0, 0
MD5:   5062f694a2ec8607aea053482ade9383
SHA1:   db3fea4e44aacdfeba896c25497c8c4f2866c38e
SHA256:   b90301cc171c4fa3f0abe314c091d57f949bf1e3e9b3a52fdf7e071f105965bd

Overview

mcserver.exe executes as a process with the local user's privileges usually within the context of Windows Explorer. During installation, it (or a shortcut) is added to the user's startup folder which is designed to automatically launch when the user logs into Windows. The file is digitally signed by ZTE CORPORATION which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:mcserver.exe
Publisher:ZTE
Product name:ZTE data card monitor program
Typical file path:C:\Program Files\t-mobile\internetmanager_z\bin\mcserver.exe
File version:1, 0, 0, 0
Size:59.27 KB (60,688 bytes)
Certificate
Issued to:ZTE CORPORATION
Authority (CA):VeriSign
Effective date:Friday, March 9, 2012
Expiration date:Sunday, April 26, 2015
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 9.0
.NET CLR:No
More details

BehaviorsBehaviors

User start menu folder
Shortcut pointer placed in '%appdata%\Microsoft\Windows\Start Menu'
  • Shortcut to 'mcserver.exe'

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00001930%
0.028634%
Kernel CPU:0.00000827%
0.013761%
User CPU:0.00001103%
0.014873%
Kernel CPU time:936,006 ms/min
100,923,805ms/min
Memory
Private memory:5.32 MB
21.59 MB
Private (maximum):9.25 MB
Private (minimum):6.49 MB
Non-paged memory:5.32 MB
21.59 MB
Virtual memory:89.65 MB
140.96 MB
Virtual memory (peak):92.15 MB
169.69 MB
Working set:9.25 MB
18.61 MB
Working set (peak):9.25 MB
37.95 MB
Resource allocations
Threads:14
12
Handles:187
600
GUI GDI count:4
103
GUI GDI peak:6
142
GUI USER count:4
49
GUI USER peak:4
71

BehaviorsProcess properties

Integrety level:Undefined
Platform:64-bit
Command line:"C:\Program Files\congstar\internet-manager\bin\mcserver.exe"
Owner:User
Parent process:explorer.exe (Windows Explorer by Microsoft Corporation)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows Vista Home Basic 50.00%
Windows 7 Professional 50.00%

Distribution by countryDistribution by country

Poland installs about 50.00% of ZTE data card monitor program.
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE