GridinSoft Threat Intelligence

MPC.exe threat report

Detected as Trojan.Heur! File reputation report
MD5 7572a313c77be9f3e8ea3dc6f09b9be3
Latest seen 2024-03-09 23:01:15 (2 years ago)
First seen 2024-03-09 23:01:15 (2 years ago)
Size 65 MB
Product MPC

GridinSoft Anti-Malware detection

Detected by GridinSoft before you download

The current ThreatInfo record shows this exact file hash detected as Trojan.Heur!. Download GridinSoft Anti-Malware to scan the device, confirm whether this file is present, and remove the detected object if it is found.

Detection name
Trojan.Heur!
Recommended action
Scan and remove
Last analysis
2024-03-09 23:01:15 (2 years ago)
File hash
7572a313c77be9f3e8ea3dc6f09b9be3
Download Anti-Malware

Why it matters

Why GridinSoft flags this file

Detection

GridinSoft identifies the sample as Trojan.Heur!, part of the Trojan threat category.

Category context

Malware disguised as legitimate software or delivered through deceptive packaging. Related Trojan reports help compare this file with nearby detections, publishers, and hashes.

Timeline

First seen 2024-03-09 23:01:15 (2 years ago); latest analysis 2024-03-09 23:01:15 (2 years ago).

Publisher context

Product metadata: MPC.

Digital signature

Signed by inMusic Brands, Inc.. The signature is reported as valid, but signed files can still be bundled or abused.

Observed locations

ThreatInfo has seen this file in user or system paths listed below. Unexpected locations increase the need for local verification.

Recommended action

What to do next

  1. Compare the MD5 above with the file found on the device.
  2. Check whether the file appears in the observed locations or under one of the alternate names.
  3. Run GridinSoft Anti-Malware to confirm the detection and remove the file if it is present. Review the Trojan category for related samples and common context.

MPC.exe is a Windows file recorded in the ThreatInfo database. It is associated with MPC. The current detection status is Trojan.Heur!, based on the latest analysis from 2024-03-09 23:01:15 (2 years ago). ThreatInfo groups this verdict with Trojan reports for broader family-level investigation.

If MPC.exe appears on your computer unexpectedly, treat it as suspicious. Check its location, digital signature, and recent system changes before allowing it to run. A full anti-malware scan is recommended when this file is detected as Trojan.Heur!.

Product Name: MPC
MD5: 7572a313c77be9f3e8ea3dc6f09b9be3
Size: 65 MB
First Published: 2024-03-09 23:01:15 (2 years ago)
Latest Published: 2024-03-09 23:01:15 (2 years ago)
Status: Trojan.Heur! (on last analysis)
Analysis Date: 2024-03-09 23:01:15 (2 years ago)
MPC.exe detection screenshot

The screenshot is a visual record of a GridinSoft Anti-Malware detection for this sample. Use the hash and metadata above as the primary identifiers when comparing the file on your system.

Signed By: inMusic Brands, Inc.
Status: Valid

The signature on MPC.exe is reported as valid. A valid signature helps confirm publisher identity, but it does not automatically make the file safe if the installer was bundled, abused, or downloaded from an untrusted source.

%programfiles%\akai pro

ThreatInfo has observed MPC.exe in the locations listed above. Files found in temporary folders, user profile folders, startup locations, or unusual application directories should be reviewed more carefully than files installed under a known program directory.

Windows 10 100.0%

The most common operating system signal for MPC.exe is Windows 10 with 100.0% of observed hits. If your system differs from the common profile, check whether the file was introduced by a specific installer, archive, or removable device.

MPC.exe is identified as pe for 64-bit systems. The subsystem is Windows GUI. PE header values are useful for triage, especially when they do not match the expected publisher, product, or release timeline.

Format pe
Architecture 64-bit
Subsystem Windows GUI
Entry point 0x039f9e90
Image base 0x0000000140000000

PE Sections:

Sections 17
Raw data 68878336

Section layout highlights raw-size concentration, repeated names, packer markers, and hashes that can be compared across related samples.

.text 29209088 bytes · 42.4% of section data
Large raw data
MD5 85a454dc0536e711e8559000d7aaacae
RT_CODE 2560 bytes · 0.0% of section data
Uncommon name
MD5 8db4902757e6bb8585c1a0130bd9cefa
.rdata 25042432 bytes · 36.4% of section data
Large raw data
MD5 85a8459ebac02aec71e221762538cd9f
.data 2873856 bytes · 4.2% of section data
MD5 83ce768b46bd6415d5f4da521fabcf3e
.pdata 1516544 bytes · 2.2% of section data
MD5 254f695558be90a9322498d04b75fabf
.msvcjmc 1059328 bytes · 1.5% of section data
Uncommon name
MD5 e223972d2489ddecd5aa8a02f1552e01
CPADinfo 512 bytes · 0.0% of section data
Uncommon name
MD5 86bb68e9b7b55f631dbb92f7b4f8c32e
_RDATA 20992 bytes · 0.0% of section data
Uncommon name
MD5 63922201c7e9c61a34eb68a86a8b65dd
.rsrc 350720 bytes · 0.5% of section data
MD5 c7b61d2895d5fc98b69503ad93798557
.text001 4608 bytes · 0.0% of section data
Uncommon name
MD5 00da7fd44650201c370430a9e753950a
.rdata01 3072 bytes · 0.0% of section data
Uncommon name
MD5 d38e412ecb3f597edd44939dcae051ad
.data001 512 bytes · 0.0% of section data
Uncommon name
MD5 076edbd1b7f3d19e197d9381dc83be03
.pdata01 512 bytes · 0.0% of section data
Uncommon name
MD5 6904a603825ec34c5ba11e7ed38070ef
.rsrc001 1536 bytes · 0.0% of section data
Uncommon name
MD5 e28513174b4fa670e881239a61cff705
.reloc 512 bytes · 0.0% of section data
MD5 8b89226f4bf92a356e2cca7518d42b82
.proxy 1389568 bytes · 2.0% of section data
Uncommon name
MD5 52ba9700eafcca01853e743a96ec4f51
.guard 7401984 bytes · 10.7% of section data
Large raw data Uncommon name
MD5 cdd96930a96b75ba93a2db6e74cb2a36

PE section names and hashes can reveal packing, injected resources, or unusual build artifacts. Sections with uncommon names, very large raw data, or hashes that differ from a trusted copy deserve additional review.

Report conclusion

GridinSoft detects this file as Trojan.Heur!

This report identifies MPC.exe by MD5 7572a313c77be9f3e8ea3dc6f09b9be3. It is part of the Trojan report group. If the same file is present on your device, scan the system and remove the detected object after confirming the hash and location.

Download GridinSoft Anti-Malware Scan the device and confirm whether this exact hash is present. Check this hash on VirusTotal

Recommended next steps

  • Compare the local file MD5 with 7572a313c77be9f3e8ea3dc6f09b9be3.
  • Check the file path, publisher, and signature against the details in this report.
  • Run a GridinSoft scan and remove the object if the same hash is found. Use the Trojan category to compare similar reports.