» ucp.exe
Overview
Analysis
File Details
Behaviors (1)

ucp.exe

Ultra Core Protector

The application ucp.exe by Ultra Core Protector has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is the uninstaller utility registered in the Windows Control Panel for the program Ultra Core Protector.

File name:

ucp.exe

Publisher:

Ultra Core Protector (signed and verified)

Product:

Ultra Core Protector

Version:

8.0

MD5:

228c49df2f6945d8aff40ac2a00da51f

SHA-1:

22c9cb20883ed8628be3692939a3ce029e8b5ed2

SHA-256:

6f203657a76ead61bbfc88e1c978a7b85a816c8a935cce22ec793ec7bceb39a3

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

11/15/2024 5:04:41 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.UltraCor (M)

16.3.23.3

File size:

796.1 KB (815,240 bytes)

Product version:

8.0.0.0

Original file name:

ucp.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\zarnica.org.ua\counter-strike source\ucp.exe

Digital Signature

Signed by:

Ultra Core Protector

Authority:

Ultra Core Protector

Valid from:

12/12/2012 4:44:42 PM

Valid to:

1/1/2040 1:59:59 AM

Subject:

CN=Endi, OU=http://ucp-anticheat.org, E=support@ucp-anticheat.org, O=Ultra Core Protector, C=RU

Issuer:

CN=Endi, OU=http://ucp-anticheat.org, E=support@ucp-anticheat.org, O=Ultra Core Protector, C=RU

Serial number:

E0177238F19B3FB5462942142E1145B1

File PE Metadata

Compilation timestamp:

7/16/2013 6:23:49 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

5.12

CTPH (ssdeep):

12288:M8gZRgE7KrE34pahiNgMB5q/8EZLId6Z0qrmXM9PzHcv72r3eBADaHUB0QEW0MCc:MNRdWEG9gAkkEZL5qAY7G3eeCUB000w

Entry address:

0x34A643B

Entry point:

E9, 67, 54, 00, 00, 4E, 21, 41, 26, C5, D0, 6D, 7A, 87, 27, FD, 77, 4E, 42, B9, F1, 8C, 48, E6, F1, AE, B2, 6E, 1B, 62, 41, 1E, 4D, 50, 9C, 5C, 5C, 9A, 72, 3A, 28, 46, 54, 94, A8, 87, 92, 64, B9, C4, F4, 11, CC, 29, 0E, E2, 80, 9A, D6, E1, 81, 14, FA, 6F, E5, D6, D4, DF, FE, 7D, EE, 8C, 99, 18, 5D, 5B, FC, 3B, FF, 3E, 4D, 6B, 76, 06, E4, EF, DD, 60, 6B, 17, 26, AA, 3A, 0A, 39, 84, 3D, C2, FA, CF, 3A, 68, 9A, 7C, E2, CF, 41, 25, 07, 4F, CE, FB, B9, 10, D0, D2, EB, F6, 1D, C6, 37, B5, C0, 5E, DF, 14, 29, BB... 
[+]

Packer / compiler:

Xtreme-Protector v1.05

Code size:

302 KB (309,248 bytes)

Program Uninstaller

Program name:

Ultra Core Protector

Display version:

8.0

Uninstall string:

C:\Program Files\Zarnica.org.ua\Counter-Strike Source\ucp.exe ###

Remove ucp.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.