» ucp.exe
Overview
Analysis
File Details

ucp.exe

Ultra Core Protector

The application ucp.exe by Ultra Core Protector has been detected as a potentially unwanted program by 2 anti-malware scanners.

File name:

ucp.exe

Publisher:

Ultra Core Protector (signed and verified)

Product:

Ultra Core Protector

Version:

7.6

MD5:

67ba9ae37678bdcb80115b4219445c4f

SHA-1:

cc8b45c97f4111110850ab2d2c757d9ac8ab1eb1

SHA-256:

7ff57bb681dfa2d75f87a34a6052d18c09b20793f0f5cee27131a86a4bb5e3f2

Scanner detections:

2 / 68

Status:

Potentially unwanted

Analysis date:

11/15/2024 6:19:37 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.UltraCoreProtector (M)

15.8.24.17

Trend Micro House Call

TROJ_GEN.F47V0716

7.2.181

File size:

573.2 KB (586,952 bytes)

Product version:

7.6.0.0

Original file name:

ucp.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\longhorn\counter-strike 1.6 pro\ucp.exe

Digital Signature

Signed by:

Ultra Core Protector

Authority:

Ultra Core Protector

Valid from:

5/27/2012 1:17:48 PM

Valid to:

12/31/2039 11:59:59 PM

Subject:

CN=Endi, OU=http://ucp-anticheat.org, E=support@ucp-anticheat.org, O=Ultra Core Protector, C=RU

Issuer:

CN=Endi, OU=http://ucp-anticheat.org, E=support@ucp-anticheat.org, O=Ultra Core Protector, C=RU

Serial number:

658B0E503C7ECC8E4E8C4729411DEAD4

File PE Metadata

Compilation timestamp:

5/28/2012 5:17:26 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

5.12

CTPH (ssdeep):

12288:pILWc+ifuPnqw3fHhNRr/wFNCsKsHW+Yd2++SXm9bTG7cxWZC3:pIic+iG/9fJjwFMs3HW+PjSv7cx3

Entry address:

0x33AE2AF

Entry point:

E8, 48, 5A, 00, 00, 02, 3A, 1E, E7, D7, 43, A6, 6E, 0A, D6, 76, 36, FE, D2, 82, 2B, D4, 0F, B3, EB, CB, F3, 6E, 16, 58, 1C, 54, 2D, 0F, 5D, B8, 74, AF, 53, 33, 03, BB, 63, 07, DF, A3, 0F, DC, 9D, 3A, DF, 78, 19, D2, 0A, 4B, B6, 20, 3A, 74, BF, D6, D7, 42, B4, 7E, AB, F3, 31, 84, 4D, 2C, B9, 85, 45, E8, 0D, F0, AC, 75, 2F, 9B, 63, FB, F4, E4, 01, C1, 84, AE, 91, 4D, 16, 33, F7, 63, 32, 6B, C3, 8D, B7, D5, 43, FF, 94, 58, 83, B2, 20, E8, 7E, 9F, 37, F4, D4, A8, FA, 21, 10, F0, AC, 6D, 92, 75, 3C, 10, 0C, E2... 
[+]

Entropy:

7.9749 (probably packed)

Code size:

226 KB (231,424 bytes)

Remove ucp.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.