» ucp.exe
Overview
Analysis
File Details
Behaviors (1)

ucp.exe

Ultra Core Protector

The application ucp.exe by Ultra Core Protector has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat.

File name:

ucp.exe

Publisher:

Ultra Core Protector (signed and verified)

Product:

Ultra Core Protector

Version:

6.2

MD5:

0b6646d725ab24110a0c70de4c0737db

SHA-1:

188b564d586082b659cbc3b2bd40a3310e4367c7

SHA-256:

b4d05191afd1ab27ba3e5e522eeef1c9ab968b1721e8fa7da0b458b0ddbc8422

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

11/15/2024 8:27:16 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.UltraCor (M)

16.7.13.17

File size:

614.2 KB (628,896 bytes)

Product version:

6.2.0.0

Original file name:

ucp.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\counter-strike 1.6\ucp.exe

Digital Signature

Signed by:

Ultra Core Protector

Authority:

Ultra Core Protector

Valid from:

6/26/2010 3:39:04 AM

Valid to:

12/31/2039 8:59:59 PM

Subject:

CN=UCP, OU=http://ucp-anticheat.org, E=support@ucp-anticheat.org, O=Ultra Core Protector, C=RU

Issuer:

CN=UCP, OU=http://ucp-anticheat.org, E=support@ucp-anticheat.org, O=Ultra Core Protector, C=RU

Serial number:

A868985F7D0588AD411E5E63C7EAD090

File PE Metadata

Compilation timestamp:

7/1/2010 2:51:03 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

5.12

CTPH (ssdeep):

12288:pCNj0B+mKUrJ4OLJdmu7qu7/Was9tZGmHHNsRsL/RzAxDghMbfKZeFwx2I:qVUrJ4mJdm4xXs9tZHHHNGsD2hliZ6wH

Entry address:

0x33CAEB7

Entry point:

53, C7, 04, 24, 69, 8D, 3F, 42, 9C, C7, 04, 24, 8F, 3E, E5, 7B, 9C, 8D, 64, 24, 04, E9, 54, FC, 08, 00, 6F, 5B, 78, CF, A1, DB, 54, A0, 47, 9E, B2, E9, 02, 15, 32, 55, 7A, A1, D8, 59, D0, EF, 52, F9, F8, F8, D4, DD, 10, 07, 1A, 4F, 4D, AC, 8E, 28, D3, 9C, 52, 16, 5C, 38, FD, 5E, CF, 50, 3D, F5, 40, D9, 6C, DC, 60, F0, 6C, 4C, 33, 2A, 74, 18, E9, C5, 5C, 71, C6, AB, 8B, DD, D0, 47, 9C, 02, B7, 39, 68, 05, 2B, 79, 1C, 55, 72, C8, 3B, 35, EE, FF, 50, E3, 20, A8, C3, 10, 99, A3, B2, DF, 7A, AB, 47, D2, A9, 11... 
[+]

Code size:

52.4 MB (54,903,296 bytes)

Windows Firewall Allowed Program

Name:

ultra core protector

Remove ucp.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.