» ucp.exe
Overview
Analysis
File Details

ucp.exe

Ultra Core Protector

The application ucp.exe by Ultra Core Protector has been detected as a potentially unwanted program by 4 anti-malware scanners.

File name:

ucp.exe

Publisher:

Ultra Core Protector (signed and verified)

Product:

Ultra Core Protector

Version:

7.6

MD5:

a69cef1e829d0cde82c4bccc504d1f33

SHA-1:

867458def40ff766509136b7b72b2eca13b5981a

SHA-256:

010f60f9659a557f7714f657fc7d3117da4876cc8b2d0275217f987d6e5c61cc

Scanner detections:

4 / 68

Status:

Potentially unwanted

Analysis date:

11/15/2024 6:53:30 AM UTC (today)

Scan engine

Detection

Engine version

Bkav FE

HW32.TsCabk

1.3.0.4959

Reason Heuristics

PUP.UltraCoreProtector (M)

15.8.24.17

Rising Antivirus

PE:Malware.XPACK/RDM!5.1

23.00.65.14510

Trend Micro House Call

TROJ_GEN.F47V1206

7.2.132

File size:

1.7 MB (1,832,648 bytes)

Product version:

7.6.0.0

Original file name:

ucp.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Digital Signature

Signed by:

Ultra Core Protector

Authority:

Ultra Core Protector

Valid from:

5/27/2012 3:47:48 PM

Valid to:

1/1/2040 3:29:59 AM

Subject:

CN=Endi, OU=http://ucp-anticheat.org, E=support@ucp-anticheat.org, O=Ultra Core Protector, C=RU

Issuer:

CN=Endi, OU=http://ucp-anticheat.org, E=support@ucp-anticheat.org, O=Ultra Core Protector, C=RU

Serial number:

658B0E503C7ECC8E4E8C4729411DEAD4

File PE Metadata

Compilation timestamp:

7/24/2012 2:50:45 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

5.12

CTPH (ssdeep):

24576:Ew9knXXlQgUB/HkH6v8FO/X1jZxbrfOrq0aXIWMi/eYpFwJLOWo39pIlIX1CpzIM:EhnXXPaEQNjH32rqAQyav37IAUIcHF

Entry address:

0xB2E297

Entry point:

9C, 88, 1C, 24, C7, 04, 24, 63, A5, 41, E6, 50, 54, C7, 44, 24, 04, 21, 61, 0C, 66, 60, 53, 8D, 64, 24, 28, E9, C6, 65, 1B, 00, 8D, 64, 24, 04, 0F, 87, 71, DE, FF, FF, F5, 69, D2, 0A, 00, 00, 00, F9, F8, F8, 38, EC, 01, C2, 60, 8D, 64, 24, 20, E9, F7, CE, FF, FF, 9C, 9C, C7, 44, 24, 24, 51, AA, DC, 80, 66, 89, 4C, 24, 04, 9C, 88, 3C, 24, 89, 3C, 24, 8D, 64, 24, 28, E9, C4, 54, 1B, 00, 8D, 64, 24, 08, E8, A6, DF, 06, 00, E9, 59, 58, 07, 00, 89, C3, 60, 58, E9, 12, 50, 00, 00, E9, 4F, B6, 06, 00, F9, E9, 28... 
[+]

Entropy:

7.9957 (probably packed)

Code size:

91.5 KB (93,696 bytes)

Remove ucp.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.