» ucp.exe
Overview
Analysis
File Details
Behaviors (1)

ucp.exe

Ultra Core Protector

The application ucp.exe by Ultra Core Protector has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is the uninstaller utility registered in the Windows Control Panel for the program Ultra Core Protector.

File name:

ucp.exe

Publisher:

Ultra Core Protector (signed and verified)

Product:

Ultra Core Protector

Version:

8.4

MD5:

21835ed04f2f68c85eebfc8dedfd4fe8

SHA-1:

e513347cf6d3bdc23219e53aef0d94e02c238917

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

12/26/2024 6:18:58 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.UltraCor (M)

16.3.24.22

File size:

822.1 KB (841,864 bytes)

Product version:

8.4.0.0

Original file name:

ucp.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\counter-strike 1.6 lh 2013\ucp.exe

Digital Signature

Signed by:

Ultra Core Protector

Authority:

Ultra Core Protector

Valid from:

2/19/2014 10:23:56 PM

Valid to:

1/1/2040 4:59:59 AM

Subject:

CN=Endi, OU=http://ucp-anticheat.org, E=support@ucp-anticheat.org, O=Ultra Core Protector, C=RU

Issuer:

CN=Endi, OU=http://ucp-anticheat.org, E=support@ucp-anticheat.org, O=Ultra Core Protector, C=RU

Serial number:

361CF8756746879744BD2E8434D33368

File PE Metadata

Compilation timestamp:

11/29/2014 8:29:19 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

5.12

CTPH (ssdeep):

12288:6iiEl65ggb9VLmPm6e055FhbXoTP8qnpNIt7JLoYuSm3ceQ3Dmx5Cr:6iT6ggHau6T/FxFEWt7NLuSMceAqM

Entry address:

0x34A7320

Entry point:

68, BD, A5, C8, A2, E9, 44, F9, F5, FF, 18, 92, C1, 03, 25, 62, BF, CA, B3, F0, 9A, 1F, 7D, F3, 86, 26, 1E, EB, F6, EB, AE, 48, 74, EA, 29, F4, 20, 15, 14, B9, 35, 33, 0E, CF, 2E, 48, 59, 4E, CF, E2, C8, CF, DC, DE, 8B, 8E, 5E, 59, F5, 37, E4, 91, 8E, 8F, 51, 55, F8, 26, C3, C6, 9A, 1E, 41, C6, CC, 39, 59, 13, 2C, 8C, 0D, 30, FB, 48, 4B, E1, 27, 2F, CE, 0E, AB, CB, F5, 43, 4B, 57, DD, DC, F9, C5, AE, C0, 36, 81, ED, 34, 2D, 16, 92, 19, 1D, B3, 6A, 68, AA, 24, 62, BF, 87, FA, BE, E1, A2, B0, F4, A7, E9, 6E... 
[+]

Entropy:

7.9739 (probably packed)

Code size:

353 KB (361,472 bytes)

Program Uninstaller

Program name:

Ultra Core Protector

Display version:

8.4

Uninstall string:

D:\Program Files\Counter-Strike 1.6 LH 2013\ucp.exe ###

Remove ucp.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.