» ucp.exe
Overview
Analysis
File Details

ucp.exe

Ultra Core Protector

The application ucp.exe by Ultra Core Protector has been detected as a potentially unwanted program by 9 anti-malware scanners. This particular feature is designed to hijack the browser in an attempt to prevent other resources from modify the browser's search and home pages.

File name:

ucp.exe

Publisher:

Ultra Core Protector (signed and verified)

Product:

Ultra Core Protector

Version:

7.6

MD5:

41455319156f3ce847834e905c940322

SHA-1:

675924193863c79ad2151916a1a211450ab5a3ac

SHA-256:

9703e28a7afa8f0c28bbfc884342cb30ecfed7a88e41c3c461970be2bb76ac90

Scanner detections:

9 / 68

Status:

Potentially unwanted

Analysis date:

11/15/2024 6:23:03 AM UTC (today)

Scan engine

Detection

Engine version

Baidu Antivirus

Adware.Win32.SearchProtect

4.0.3.16218

Bkav FE

HW32.Packed

1.3.0.7237

F-Prot

W32/Virut.AI!Generic

v6.4.7.1.166

IKARUS anti.virus

Win32.Heur

t3scan.1.9.5.0

Kaspersky

not-a-virus:HEUR:AdWare.Win32.SearchProtect

14.0.0.642

Reason Heuristics

PUP.UltraCoreProtector (M)

16.2.18.16

Trend Micro House Call

TROJ_GEN.F47V1105

7.2.49

Vba32 AntiVirus

BScope.Trojan.Diple

3.12.22.2

ViRobot

Trojan.Win32.S.Agent.812680[h]

2014.3.20.0

File size:

598.2 KB (612,552 bytes)

Product version:

7.6.0.0

Original file name:

ucp.exe

File type:

Executable application (Win32 EXE)

Digital Signature

Signed by:

Ultra Core Protector

Authority:

Ultra Core Protector

Valid from:

5/27/2012 4:17:48 PM

Valid to:

1/1/2040 2:59:59 AM

Subject:

CN=Endi, OU=http://ucp-anticheat.org, E=support@ucp-anticheat.org, O=Ultra Core Protector, C=RU

Issuer:

CN=Endi, OU=http://ucp-anticheat.org, E=support@ucp-anticheat.org, O=Ultra Core Protector, C=RU

Serial number:

658B0E503C7ECC8E4E8C4729411DEAD4

File PE Metadata

Compilation timestamp:

6/10/2012 11:45:55 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

5.12

CTPH (ssdeep):

12288:XCiu9NIz8OM0mXHogRMlNsJWv7rHp2Mu5t2+yu1DRcSveMozAXWoNpEO+3CB:3uo3psH/RMlyMrHp+e+yNSveMEAS4

Entry address:

0x342A1AC

Entry point:

E8, 9B, 10, 00, 00, 01, D0, 68, F3, BC, 57, C4, E9, F4, 82, FF, FF, 8A, 45, FE, E9, 38, B6, FF, FF, 87, 49, 3D, 07, 0C, 58, 1D, AF, 4C, F9, 95, 6A, CD, 07, 41, 18, DB, D8, 59, F1, 98, F0, A9, F6, 3B, 1F, BE, B0, 0B, D2, 10, 84, B5, EF, DC, 9B, B8, 8E, 7D, 63, D1, 6E, 44, 9F, B8, F9, 19, A3, 60, 54, 3D, FB, C6, 5F, 2F, D6, 23, 5C, 22, E6, 4D, F9, 8D, 68, 62, 58, 1C, 22, 2B, 3D, B0, 55, A3, D5, 2F, 5B, A3, 72, 93, A5, 60, 31, BA, D1, 5C, F1, 5D, BC, E8, 4E, 4C, 85, F7, 73, 75, 59, 44, 89, C6, 5F, 2F, ED, F2... 
[+]

Code size:

280.5 KB (287,232 bytes)

Remove ucp.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.