home

Ultra Core Protector

Publisher Information

Ultra Core Protector is a software publisher located in Russia*. Thre are 13 additional code signing certificates issued to this publisher.
Authority:
Ultra Core Protector

Valid from:
5/27/2012 5:17:48 PM

Valid to:
1/1/2040 4:59:59 AM

Subject:
CN=Endi, OU=http://ucp-anticheat.org, E=support@ucp-anticheat.org, O=Ultra Core Protector, C=RU

Issuer:
CN=Endi, OU=http://ucp-anticheat.org, E=support@ucp-anticheat.org, O=Ultra Core Protector, C=RU

Serial number:
658b0e503c7ecc8e4e8c4729411dead4

Scanner detections:
Detections  (90% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.UltraCoreProtector.Installer (M), PUP.UltraCoreProtector (M), PUP.UltraCor (M), PUP (M)
90.00%

Trend Micro House Call
TROJ_GEN.F47V1206, TROJ_GEN.F47V0716, TROJ_GEN.F47V1105
40.00%

Bkav FE
HW32.TsCabk, HW32.Packed
30.00%

IKARUS anti.virus
Virus.Win32.Heur
20.00%

Vba32 AntiVirus
BScope.Trojan.Diple
20.00%

Kaspersky
not-a-virus:HEUR:AdWare.Win32.SearchProtect
20.00%

Baidu Antivirus
Adware.Win32.SearchProtect
20.00%

F-Prot
W32/Virut.AI!Generic
20.00%

Comodo Security
ApplicUnsaf.Win32.Renos.~FAT
10.00%

Rising Antivirus
PE:Malware.XPACK/RDM!5.1
10.00%

1 / 68      (Malware)
ultra-core-protector-7.7.exe  (7cc21cefac1d535ab51ba46f508725b1)

1 / 68      (Malware)
ucpsetup.exe  (bdb1cc513cbb4e2b321e69a520ea6e72)

1 / 68      (PUP)
ucp.cmd (Ultra Core Protector)  (d177f158240e55af5c92d995e6b9469f)

1 / 68      (PUP)
ucp.exe (Ultra Core Protector)  (fbf25e5bb61b549fd3145bd36805169c)

9 / 68      (PUP)
ucp.exe (Ultra Core Protector)  (41455319156f3ce847834e905c940322)

1 / 68      (PUP)
ucpsetup.exe  (bbf454e159d43bf8f5616651b9b4487b)

8 / 68      (false positives)
ucp.exe (Ultra Core Protector)  (85fe3430fe095d66abf6d14979df2ba5)

2 / 68      (PUP)
ucp.exe (Ultra Core Protector)  (67ba9ae37678bdcb80115b4219445c4f)

4 / 68      (PUP)
ucp.exe (Ultra Core Protector)  (a69cef1e829d0cde82c4bccc504d1f33)

2 / 68      (PUP)
ucpsetup.exe  (419cd256f6dc8969abb41da19522ddb3)

Downloads URLs for files signed by Ultra Core Protector.

1 / 68      (PUP)
http://download.dodear.com/.../ucpsetup.exe  (bbf454e159d43bf8f5616651b9b4487b)

1 / 68      (PUP)
http://cs.dodear.com/downloads/files/.../ucpsetup.exe  (bbf454e159d43bf8f5616651b9b4487b)

1 / 68      (PUP)
http://ucp-anticheat.ru/.../ucpsetup.exe  (bbf454e159d43bf8f5616651b9b4487b)

2 / 68      (PUP)
http://ucp-anticheat.ru/.../ucpsetup.exe  (419cd256f6dc8969abb41da19522ddb3)

The following websites host and distribute files published by Ultra Core Protector.

cs.dodear.com

download.dodear.com

ucp-anticheat.ru

The certificates below are also signed by Ultra Core Protector.

18D47DB069E1FB8141F219E01AED3E81  (Apr 08, 2015 to Jan 01, 2040)

0227BF34C6CA4A8F419530419D77F261  (Sep 06, 2015 to Jan 01, 2040)

0F59E490B94F50A141A65A6F99721A6E  (Jun 13, 2011 to Jan 01, 2040)

361CF8756746879744BD2E8434D33368  (Feb 19, 2014 to Jan 01, 2040)

24D5B9DD5EA2D8BC4B1D2CE275A89FE0  (Sep 24, 2012 to Jan 01, 2040)

71C2C9FA6981A9BC45EFDF419FA14E47  (Aug 05, 2015 to Jan 01, 2040)

96D3CD7CF8EB75A442B936C2AEC2E920  (Aug 12, 2011 to Jan 01, 2040)

629D252EF480F9B3420833BF4CD29145  (Jun 13, 2011 to Jan 01, 2040)

A5CC776A4DCAB6BD45CE90687187E73A  (Sep 15, 2011 to Jan 01, 2040)

A868985F7D0588AD411E5E63C7EAD090  (Jun 26, 2010 to Dec 31, 2039)

10 of 13 code signing certificates issued

The following publishers (by Authenticode signature organization name) are related.

BitTorrent Inc

Webcellence Ltd.

TeamSpeak Systems GmbH

GRETECH

DivX, Inc.

Foxit Software Company

Viber Media Inc.

Bluestack Systems, Inc.

VideoLAN

Nullsoft Inc.

* Note, the details and description above are based on the code signing digital signature issued to Ultra Core Protector by Ultra Core Protector on May 27, 2012 with the serial number '658b0e503c7ecc8e4e8c4729411dead4'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.