» ucp.exe
Overview
Analysis
File Details
Behaviors (1)

ucp.exe

Ultra Core Protector

The executable ucp.exe has been detected as malware by 1 anti-virus scanner.

File name:

ucp.exe

Publisher:

Ultra Core Protector (signed and verified)

Product:

Ultra Core Protector

Version:

8.3

MD5:

ba25e8e7173507471b12d2b152ce8a0e

SHA-1:

019028d5f351b8f8fc2fae622d566be97e4938f9

SHA-256:

45c86b4d626e8d8d7adbaf7f0603f0a7404aa5ea339e9914d24f831d586edd94

Scanner detections:

1 / 68

Status:

Malware

Analysis date:

12/26/2024 6:26:57 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP (M)

17.2.20.20

File size:

890.1 KB (911,496 bytes)

Product version:

8.3.2.0

Original file name:

ucp.exe

File type:

Executable application (Win32 EXE)

Digital Signature

Signed by:

Ultra Core Protector

Authority:

Ultra Core Protector

Valid from:

2/19/2014 7:23:56 PM

Valid to:

1/1/2040 1:59:59 AM

Subject:

CN=Endi, OU=http://ucp-anticheat.org, E=support@ucp-anticheat.org, O=Ultra Core Protector, C=RU

Issuer:

CN=Endi, OU=http://ucp-anticheat.org, E=support@ucp-anticheat.org, O=Ultra Core Protector, C=RU

Serial number:

361CF8756746879744BD2E8434D33368

File PE Metadata

Compilation timestamp:

4/26/2014 4:33:33 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

5.12

Entry address:

0x34278D6

Entry point:

E9, EF, FB, FE, FF, FF, B4, C7, 09, 63, CD, 37, B6, FC, 6D, 79, 84, A4, DF, ED, C0, 10, BD, E5, D2, 06, AD, 8F, 74, 09, AC, 49, F0, 44, 74, 0F, B0, A6, B3, BC, 80, 2F, B8, AE, 9F, C6, 1E, C2, EC, DC, AE, 7D, 38, 65, 6D, 5D, 2F, D3, 6E, 9A, FE, 84, C3, E5, 01, 4C, C9, 28, 6F, 61, A6, 5C, B0, 3E, 17, CF, DC, 50, 6E, 28, 61, 60, 10, 2C, CD, 18, 62, 5F, E6, 8C, 83, 58, 4D, 79, 3F, DC, 1F, A1, 1D, 51, 9D, 08, F4, 40, 28, 35, 32, D3, 9F, E0, 6F, C4, CB, E1, 88, 03, 59, 2C, F0, 1D, 24, F9, 5D, 65, A0, 6C, 76, FE... 
[+]

Packer / compiler:

Xtreme-Protector v1.05

Code size:

276 KB (282,624 bytes)

Windows Firewall Allowed Program

Name:

ultra core protector

Remove ucp.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.