» ucp.exe
Overview
Analysis
File Details

ucp.exe

Ultra Core Protector

The application ucp.exe by Ultra Core Protector has been detected as a potentially unwanted program by 4 anti-malware scanners.

File name:

ucp.exe

Publisher:

Ultra Core Protector (signed and verified)

Product:

Ultra Core Protector

Version:

8.1

MD5:

d2093660967c24210d85a64d1e5c2629

SHA-1:

9f86565f123638cbc3962c65b02f486b8dc49267

SHA-256:

7655f67d126f31dd73b95886af27d3e5d24fbaa7f0179e753e203169867f83c0

Scanner detections:

4 / 68

Status:

Potentially unwanted

Analysis date:

12/25/2024 5:39:37 PM UTC (today)

Scan engine

Detection

Engine version

Bkav FE

HW32.Packed

1.3.0.6379

Reason Heuristics

PUP.UltraCoreProtector (M)

15.8.24.17

Trend Micro House Call

TROJ_GEN.F47V1105

7.2.204

Vba32 AntiVirus

BScope.Trojan.Diple

3.12.22.2

File size:

797.1 KB (816,264 bytes)

Product version:

8.1.0.0

Original file name:

ucp.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\counter strike 1.6 cpl pro\ucp.exe

Digital Signature

Signed by:

Ultra Core Protector

Authority:

Ultra Core Protector

Valid from:

12/12/2012 8:44:42 PM

Valid to:

1/1/2040 5:59:59 AM

Subject:

CN=Endi, OU=http://ucp-anticheat.org, E=support@ucp-anticheat.org, O=Ultra Core Protector, C=RU

Issuer:

CN=Endi, OU=http://ucp-anticheat.org, E=support@ucp-anticheat.org, O=Ultra Core Protector, C=RU

Serial number:

E0177238F19B3FB5462942142E1145B1

File PE Metadata

Compilation timestamp:

10/12/2013 4:29:30 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

5.12

CTPH (ssdeep):

24576:qpAVa2QfEjijCblJR54sIeTBfglVB6QtMbA1WO:EA/QfEjjxJR54sIeF/QaO

Entry address:

0x34960AC

Entry point:

E9, 9C, B0, FF, FF, F9, 66, 0F, A3, E3, F6, C5, 02, 09, C9, 68, D1, E6, F1, D5, E9, A7, 7A, FF, FF, 40, EC, 1E, DF, 6C, 90, AE, 94, 5E, 74, 10, 28, 40, 82, D4, 05, 37, 50, 61, 11, C3, 04, 5A, A7, F8, E1, 98, 7E, 18, 6D, 8C, D8, 20, F1, A8, CF, 03, BD, AB, 35, A6, B4, C1, D2, 71, A6, 82, 1A, 32, 90, E0, 13, 4D, C2, 48, 95, 0A, E9, CC, 0C, D4, C5, 64, 05, D8, A0, 0A, 81, B7, D8, 74, A3, 31, 30, 20, AE, 94, 0B, B5, C8, AE, 65, A1, DB, E5, 73, D8, 9A, B6, 53, 3F, 9D, 96, 4C, 0C, E2, EC, FA, E7, C0, 97, 85, EA... 
[+]

Packer / compiler:

tElock 0.99 - 1.0 private

Code size:

342 KB (350,208 bytes)

Remove ucp.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.