» Ultra Core Protector
Digital Signature
Analysis
Files (22)
Downloads (12)
Distribution (6)
Related (69)

Ultra Core Protector

Publisher Information

Ultra Core Protector is a software publisher located in Russia*. A majority of the programs developed by the company can be classified as adware or other potentially unwanted programs. Thre are 13 additional code signing certificates issued to this publisher.

Authority:

Valid from:

12/12/2012 4:44:42 PM

Valid to:

1/1/2040 1:59:59 AM

Subject:

CN=Endi, OU=http://ucp-anticheat.org, E=support@ucp-anticheat.org, O=Ultra Core Protector, C=RU

Issuer:

CN=Endi, OU=http://ucp-anticheat.org, E=support@ucp-anticheat.org, O=Ultra Core Protector, C=RU

Serial number:

e0177238f19b3fb5462942142e1145b1

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.UltraCoreProtector (M), PUP.UltraCoreProtector.Installer (M), PUP.UltraCor.Installer (M), PUP.UltraCor (M), PUP (M)

100.00%

Bkav FE

W32.Clodc68.Trojan, HW32.Packed, W32.HfsAutoA

45.45%

Trend Micro House Call

TROJ_GEN.F47V1206, TROJ_GEN.F47V1105

36.36%

Vba32 AntiVirus

BScope.Trojan.Diple

27.27%

ViRobot

Trojan.Win32.S.Agent.812680[h]

18.18%

IKARUS anti.virus

Win32.Heur

18.18%

Kaspersky

not-a-virus:HEUR:AdWare.Win32.SearchProtect

18.18%

Baidu Antivirus

Adware.Win32.SearchProtect

18.18%

F-Prot

W32/Virut.AI!Generic

18.18%

Panda Antivirus

Trj/dtcontx.I

13.64%

1 / 68 (Malware)

ucp.exe (Ultra Core Protector) (ab0fc75dc4c1d25d15606ce4df8ba6d6)

1 / 68 (Malware)

ucp.exe (Ultra Core Protector) (f62d16c13cbca35e7579fb49c576b52f)

1 / 68 (Malware)

ucp.exe (Ultra Core Protector) (cd5af5fd74ec26ee80c98cb1ca2c7362)

1 / 68 (Malware)

ucpsetup.exe (b1f988547d3c26030f0f19d92b63b188)

1 / 68 (Malware)

ucp.exe (Ultra Core Protector) (5fb1c0716253f9a822c021b622295617)

1 / 68 (PUP)

ucp.exe (Ultra Core Protector) (02546fcffc73d3ef53aa66decbe92099)

1 / 68 (PUP)

1930fd6d29a74a38be7eb39fbaf66207771a7528 (e19e5ec7a0be6f814a52a376f6cf5d66)

1 / 68 (PUP)

ucp.exe (Ultra Core Protector) (228c49df2f6945d8aff40ac2a00da51f)

1 / 68 (PUP)

24_15_ucpsetup.exe (04d4a4830112c164a69a48caef071811)

9 / 68 (PUP)

ucp.exe (Ultra Core Protector) (9c528a87b9cd44dc1f3f00d2730f273d)

1 / 68 (PUP)

установить ucp.exe (bf7e35bd47c329f883141037a0e45d97)

1 / 68 (PUP)

ucpsetup.exe (be57095b212a5e0b61a478091b05cefb)

1 / 68 (PUP)

ucp.cmd (Ultra Core Protector) (6a9867c8ac3417fe7302f6594fa2f65a)

9 / 68 (PUP)

ucp.exe (Ultra Core Protector) (39d5f25c04d288a3e204524a047906e5)

9 / 68 (PUP)

ucp.exe (Ultra Core Protector) (39d5f25c04d288a3e204524a047906e5)

9 / 68 (PUP)

ucp.exe (Ultra Core Protector) (47e2fbe0f63ef35eae603903e42ce126)

4 / 68 (PUP)

ucp.exe (Ultra Core Protector) (8dd165cd6796dc2b62230962b0fef630)

4 / 68 (PUP)

ucp.exe (Ultra Core Protector) (d2093660967c24210d85a64d1e5c2629)

3 / 68 (PUP)

ucp.exe (Ultra Core Protector) (14bb260f2b50f11b81c71514c94a1a48)

3 / 68 (PUP)

ucp.exe (Ultra Core Protector) (293fa2e3e7cf6e7514144cbc1469cde2)

12 / 68 (PUP)

jinjill.exe (6e965088f9851481276cd0a4b8fdeed7)

1 / 68 (PUP)

ucp.exe (Ultra Core Protector) (99e58bbf15401f828fde396b98201f37)

Downloads URLs for files signed by Ultra Core Protector.

12 / 68 (PUP)

https://downloader.disk.yandex.ua/disk/25d0ea3f372d570f9790e71ca083bf02a78fab8b2bc5b0347800d7fc478390b1/589356d2/Ws9mxsL2E47oV04G7vFIZsVASQbfXBIZTQZ3UByVzFQloGSorY6TIrydLzFJgj1cuWKhM4GxoVkwu4iPmqjOnQ==?uid=0&filename=UCP 8.1.exe&disposition=attachment&hash=HVg9eJOmWzQKfuqHIWi bT1ZrLa/.../x-msdownload&fsize=2117768&hid=7c5142dd9fa1d5d2a731919dea17065e&media_type=executable&tknv=v2 (6e965088f9851481276cd0a4b8fdeed7)

1 / 68 (PUP)

http://download1502.mediafire.com/hjxcrndxziwg/.../ucp_v80.exe (04d4a4830112c164a69a48caef071811)

12 / 68 (PUP)

https://docs.google.com/a/.../uc?authuser=0&id=0B9v_PyYi6PbDVFYwQmVhTFdKLVU&export=download (jinjill.exe)

1 / 68 (PUP)

https://downloader.disk.yandex.ua/disk/3ce25aa3093d8fbf562f450f0a33eaae4741c7f60e6379f76e9168effb6d9ecb/57376d25/_heP7OGMU-UxCB57CPOG-Czx709S3HQJKYUIbr1bTXKw_2-FuXD9rE08Ya3mZiyQbSENVMCndsL5MaHg_GAGTg==?uid=0&filename=UCP 7.9 version.exe&disposition=attachment&hash=hR2WZtKgW/.../x-msdownload&fsize=2034312&hid=c54441c982f1d2359e1d31ff90aff267&media_type=executable&tknv=v2 (bf7e35bd47c329f883141037a0e45d97)

12 / 68 (PUP)

https://downloader.disk.yandex.ua/disk/78404b1043cfebce9f7d043c4b037a58516b6598458e547d7951be23cbeaa33f/5737adae/.../x-msdownload&fsize=2117768&hid=7c5142dd9fa1d5d2a731919dea17065e&media_type=executable&tknv=v2 (6e965088f9851481276cd0a4b8fdeed7)

12 / 68 (PUP)

https://zima39g.storage.yandex.net/rdisk/e37215bc9382593d71df9f8b587989d7d54baab15b3390bac9b9d7a4ca0876d0/56d9f1dc/Ws9mxsL2E47oV04G7vFIZsVASQbfXBIZTQZ3UByVzFQloGSorY6TIrydLzFJgj1cuWKhM4GxoVkwu4iPmqjOnQ==?uid=0&filename=UCP 8.1.exe&disposition=attachment&hash=HVg9eJOmWzQKfuqHIWi bT1ZrLa/.../x-msdownload&fsize=2117768&hid=7c5142dd9fa1d5d2a731919dea17065e&media_type=executable&tknv=v2&rtoken=Ae3tXlxmrsLB&force_default=no&ycrid=na-f68451510f46a1a96858fcb30ac80240-downloader4e (6e965088f9851481276cd0a4b8fdeed7)

12 / 68 (PUP)

http://cs06.superfiles.me/f/086187126072097209005134220067195168227225101166015146/1454607082/43940699/0/.../UCP_8.1-spaces.ru.exe (6e965088f9851481276cd0a4b8fdeed7)

12 / 68 (PUP)

http://ucp-anticheat.ru/.../ucpsetup.exe (6e965088f9851481276cd0a4b8fdeed7)

12 / 68 (PUP)

https://downloader.disk.yandex.ua/disk/ff8662e4505d1062f7be8523b83a91647b627c436c44cc285510f32a56b08e79/568004e9/.../x-msdownload&fsize=2117768&hid=7c5142dd9fa1d5d2a731919dea17065e&media_type=executable&tknv=v2 (6e965088f9851481276cd0a4b8fdeed7)

12 / 68 (PUP)

http://download1230.mediafire.com/2b75umob61lg/.../ucpsetup8.1.exe (6e965088f9851481276cd0a4b8fdeed7)

12 / 68 (PUP)

http://ex-cyber.com/uploads/.../ucpsetup8.1.exe (6e965088f9851481276cd0a4b8fdeed7)

12 / 68 (PUP)

http://download1230.mediafire.com/7tp49doveiyg/.../ucpsetup8.1.exe (6e965088f9851481276cd0a4b8fdeed7)

Distribution

The following websites host and distribute files published by Ultra Core Protector.

ex-cyber.com

downloader.disk.yandex.ua

cs06.superfiles.me

zima39g.storage.yandex.net

download1230.mediafire.com

ucp-anticheat.ru

The certificates below are also signed by Ultra Core Protector.

18D47DB069E1FB8141F219E01AED3E81 (Apr 08, 2015 to Jan 01, 2040)

0227BF34C6CA4A8F419530419D77F261 (Sep 06, 2015 to Jan 01, 2040)

0F59E490B94F50A141A65A6F99721A6E (Jun 13, 2011 to Jan 01, 2040)

361CF8756746879744BD2E8434D33368 (Feb 19, 2014 to Jan 01, 2040)

24D5B9DD5EA2D8BC4B1D2CE275A89FE0 (Sep 24, 2012 to Jan 01, 2040)

71C2C9FA6981A9BC45EFDF419FA14E47 (Aug 05, 2015 to Jan 01, 2040)

96D3CD7CF8EB75A442B936C2AEC2E920 (Aug 12, 2011 to Jan 01, 2040)

629D252EF480F9B3420833BF4CD29145 (Jun 13, 2011 to Jan 01, 2040)

A5CC776A4DCAB6BD45CE90687187E73A (Sep 15, 2011 to Jan 01, 2040)

658B0E503C7ECC8E4E8C4729411DEAD4 (May 27, 2012 to Jan 01, 2040)

10 of 13 code signing certificates issued

The following publishers (by Authenticode signature organization name) are related.

YANDEX LLC

Alcohol Soft

Cheat Engine

Shenzhen Thinksky Technology Co.,Ltd

Artem Izmaylov

ZJMedia Digital Technology Ltd.

ved priy pandey

Irfan Skiljan

Beijing Stone Age Network Technology Limited Company

Smith Micro Software, Inc.

Bluestack Systems, Inc.

Sony Creative Software Inc

ezvid, inc.

Free Time Co., Ltd.

Beepa Pty Ltd

MetaQuotes Software Corp.

Shenzhen Saikeware Technology Co., Ltd.

Bergarius Limited

Noriyuki Miyazaki

TechSmith Corporation

Cal-Comp Electronics & Communications

30 of 69 publishers

* Note, the details and description above are based on the code signing digital signature issued to Ultra Core Protector by Ultra Core Protector on December 12, 2012 with the serial number 'e0177238f19b3fb5462942142e1145b1'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.