home

MPCProtectService.exe

MPC Cleaner

DotCash Limited

The application MPCProtectService.exe, “MPC Protect Service” by DotCash Limited has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. It runs as a windows Service named “MPC Core Protect Service”. This file is typically installed with the program MPC Cleaner by DotCash Limited which is a potentially unwanted software program.
Publisher:
DotC United Inc  (signed by DotCash Limited)

Product:
MPC Cleaner

Description:
MPC Protect Service

Version:
4, 3, 13364, 0822

MD5:
b019da269ff7be80fb31cabbc28ba58c

SHA-1:
8d4a066d7f20e81b0f8dc64dfc25dac7179b18b7

SHA-256:
378db5614daf5a3026d01aef32cf1e1dd1e47755afc53386e2d006db1fc25401

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
12/25/2024 5:43:49 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.DotC.MPC (L)
17.3.12.16

File size:
347.5 KB (355,808 bytes)

Product version:
4, 3, 13364, 0822

Copyright:
Copyright (c) 2016 DotC United Inc.

Original file name:
MPCProtectService.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\mpc cleaner\mpcprotectservice.exe

Digital Signature
Signed by:
DotCash Limited

Authority:
VeriSign, Inc.

Valid from:
1/7/2015 1:00:00 AM

Valid to:
12/30/2016 12:59:59 AM

Subject:
CN=DotCash Limited, OU=IT, O=DotCash Limited, L=Hong Kong, S=Hong Kong, C=HK

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
1C04DCC9BE35C558422BAFEF34984975

File PE Metadata
Compilation timestamp:
8/22/2016 12:36:12 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

Entry address:
0x19A98

Entry point:
E8, 31, 05, 00, 00, E9, D8, FC, FF, FF, FF, 25, 98, D3, 41, 00, FF, 25, 94, D3, 41, 00, FF, 25, 90, D3, 41, 00, FF, 25, 8C, D3, 41, 00, FF, 25, 88, D3, 41, 00, FF, 25, 84, D3, 41, 00, FF, 25, 80, D3, 41, 00, FF, 25, 7C, D3, 41, 00, FF, 25, 78, D3, 41, 00, FF, 25, 74, D3, 41, 00, FF, 25, 70, D3, 41, 00, FF, 25, 6C, D3, 41, 00, FF, 25, 68, D3, 41, 00, FF, 25, 64, D3, 41, 00, FF, 25, 60, D3, 41, 00, FF, 25, 5C, D3, 41, 00, FF, 25, 58, D3, 41, 00, FF, 25, 54, D3, 41, 00, FF, 25, 50, D3, 41, 00, FF, 25, 4C, D3...
 
[+]

Code size:
112 KB (114,688 bytes)

Service
Display name:
MPC Core Protect Service

Service name:
MPCProtectService

Description:
The Core Protect Service for MPC

Type:
Win32OwnProcess, InteractiveProcess


The file MPCProtectService.exe has been discovered within the following program.

MPC Cleaner  by DotCash Limited
www.mpc.solution
66% remove it
 
Powered by Should I Remove It?

Remove MPCProtectService.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.