» ucp.exe
Overview
Analysis
File Details

ucp.exe

Ultra Core Protector

The application ucp.exe by Ultra Core Protector has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat.

File name:

ucp.exe

Publisher:

Ultra Core Protector (signed and verified)

Product:

Ultra Core Protector

Version:

8.5

MD5:

e2badc5c0e01e664fb4df6faf01e5084

SHA-1:

1ed0667299d9108c39da28d88cc9cafa078e732c

SHA-256:

d11d1a5b3d2f0c5f07bec1fd3bcd7a5b859376ee72a70e203177f896460e6f85

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

11/15/2024 8:03:47 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.UltraCor (M)

16.6.23.19

File size:

979.1 KB (1,002,632 bytes)

Product version:

8.5.0.0

Original file name:

ucp.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\local\temp\{random}.tmp\magic-ucp.8.5\counter-strike-1.6\ucp.exe

Digital Signature

Signed by:

Ultra Core Protector

Authority:

Ultra Core Protector

Valid from:

9/6/2015 7:18:17 AM

Valid to:

1/1/2040 12:59:59 AM

Subject:

CN=Endi, OU=http://ucp-anticheat.org, E=support@ucp-anticheat.org, O=Ultra Core Protector, C=RU

Issuer:

CN=Endi, OU=http://ucp-anticheat.org, E=support@ucp-anticheat.org, O=Ultra Core Protector, C=RU

Serial number:

0227BF34C6CA4A8F419530419D77F261

File PE Metadata

Compilation timestamp:

9/6/2015 8:11:29 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

5.12

CTPH (ssdeep):

24576:sow0RmWRy+D0hZ1yNZjzgSDcLxlmT+54jmYihS:XjRDRKyngSDcmTA4rihS

Entry address:

0x3515772

Entry point:

E8, 50, EB, FF, FF, 60, C7, 44, 24, 40, 7B, A3, 82, F2, E8, B4, E3, F3, FF, 77, 04, C5, CE, 7B, C4, 8C, C9, C4, 71, A3, C1, 7A, 57, 53, A1, 16, E3, 87, B5, 5A, 47, 5C, 49, 5A, 47, 75, 78, 15, 75, 1C, 86, B0, 9C, 6B, 7C, 79, 61, F5, 08, 1E, B1, C3, B0, D9, D4, 32, 82, 95, 32, 84, C2, 5D, 0A, 40, 4E, 69, 26, 58, F5, 41, 9F, 12, 80, F4, A1, D0, E3, DF, 4D, 15, 3B, 86, 9B, 90, 93, D9, 03, 85, AF, F4, 62, 6C, 17, 0D, 7C, 79, 9A, 08, 7C, EA, 46, 51, 2E, 2F, 22, 1F, 13, 91, 57, 3B, F7, 11, 0E, 23, 20, D7, A6, 24... 
[+]

Code size:

362 KB (370,688 bytes)

Remove ucp.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.