home

mpc_3.2.9124.0113.exe

MPCSetup

DotC United Inc

The application mpc_3.2.9124.0113.exe, “MPC Setup Application” has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a self-extracting archive and installer, however the file is not signed with an authenticode signature from a trusted source. The file has been seen being downloaded from download.mpc.am.
Publisher:
DotC United Inc

Product:
MPCSetup

Description:
MPC Setup Application

Version:
3.2.9124.0113

MD5:
391318c09ec661f9c455ece8a554e797

SHA-1:
bbc17965335760ed080b97b662a8bff1a9765a19

SHA-256:
2d00620b9e7b80943c35a67c73d0e01224a4825367d921b692599db4aed881fe

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/5/2024 9:44:31 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.MPC.Optional.Installer.Meta (M)
16.4.8.16

File size:
11.2 MB (11,738,912 bytes)

Product version:
3, 2, 9124, 0113

Copyright:
Copyright (C) 2015 DotC United Inc. All Rights Reserved

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\mpc_3.2.9124.0113.exe

File PE Metadata
Compilation timestamp:
8/23/2012 9:31:47 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
196608:914CliEZohgdX7bu2DUCxP5LViidZxpGbsE6J/ZrvMs30Tj5idknDm7AcZ:91CC+EUCxP5LVieGi/ZrITj5rnDm8cZ

Entry address:
0x371A

Entry point:
0F, B6, DA, 0F, AF, FD, 51, 57, 8D, 15, E1, E7, CC, 37, 75, 07, 0F, AF, DD, B7, 1E, 14, B3, 0F, B7, C5, 8D, 1D, 57, 37, C7, EC, 0F, B6, F3, 81, ED, DD, 2C, 0F, 00, FE, CB, 81, C5, F7, 31, 0E, 00, 81, E9, E3, 2E, A0, C4, 69, D1, E9, 9D, 8A, 2C, 87, DD, 1D, C2, C7, CE, D5, 80, E9, 58, 8D, 05, 54, 16, A2, FC, 69, FB, 66, 5C, FB, 42, E8, 28, 00, 00, 00, EB, 01, F2, 87, C5, 88, FA, F2, B2, F9, FF, CD, 6A, 00, 5E, 77, 02, 8A, E2, 0B, F3, 0F, BF, C2, 85, D1, FF, CB, 8D, 2D, 28, EA, A8, AB, 2B, CE, B4, 7D, 0C, 39...
 
[+]

Code size:
26 KB (26,624 bytes)

The file mpc_3.2.9124.0113.exe has been seen being distributed by the following URL.

http://download.mpc.am/mpc/.../MPC_3.2.9124.0113.exe

Remove mpc_3.2.9124.0113.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.