home

uplay_r1_loader64.dll

Ubisoft Entertainment Sweden AB

This is installed with multiple programs including Watch Dogs Deluxe Edition and Watch_Dogs. The file has been seen being downloaded from pt.fix4dll.com and multiple other hosts.
Publisher:
Ubisoft Entertainment Sweden AB  (signed and verified)

MD5:
01734cba8fb0849fb285cb18ae90994c

SHA-1:
75708c6215304376d497498a18ac467b58dfe168

SHA-256:
4325ffde93c453f68e5b13cfd225d90359fcf73331c65f23894128cea6dcd116

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
9/22/2024 3:50:26 AM UTC  (today)

File size:
515.8 KB (528,184 bytes)

File type:
Dynamic link library (Win64 DLL)

Digital Signature
Signed by:
Ubisoft Entertainment Sweden AB

Authority:
VeriSign, Inc.

Valid from:
2/22/2013 8:00:00 AM

Valid to:
2/23/2016 7:59:59 AM

Subject:
CN=Ubisoft Entertainment Sweden AB, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Ubisoft Entertainment Sweden AB, L=Malmo, S=., C=SE

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
77172F388285426F99600D5DD28407

File PE Metadata
Compilation timestamp:
4/17/2014 4:42:49 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
10.0

CTPH (ssdeep):
6144:4YfSzERVtJB6KXm0TWtpU8A0QNxcUPKhNa9OuiMp39aPXc2IF2wz65v8mJdVv9:vIE7jAKXmH8NxcXU/p3PF2uil9

Entry address:
0x14CD0

Entry point:
48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, 0B, 76, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, A7, FE, FF, FF, CC, CC, CC, 48, 83, 61, 08, 00, 48, 8D, 05, CC, D6, 04, 00, C6, 41, 10, 00, 48, 89, 01, 48, 8B, C1, C3, CC, 48, 8D, 05, B9, D6, 04, 00, 48, 89, 01, 48, 8B, 02, C6, 41, 10, 00, 48, 89, 41, 08, 48, 8B, C1, C3, CC, CC, CC, 48, 83, 79, 08, 00, 48, 8D, 05, A8, D6, 04, 00...
 
[+]

Entropy:
5.6123

Code size:
374.5 KB (383,488 bytes)

The file uplay_r1_loader64.dll has been discovered within the following programs.

Assassin's Creed Rogue  by Ubisoft
support.ubi.com
6% remove it
Dark Souls Prepare to Die Edition  by NAMCO BANDAI Games
Publisher's description - “Dark Souls is the new action role-playing game from the developers who brought you Demon’s Souls, FromSoftware. Dark Souls will have many familiar features: A dark fantasy universe, tense dungeon crawling, fearsome enemy encounters and unique online interactions.”
www.namcobandaigames.com
10% remove it
Far Cry 4  by R.G. Mechanics
tapochek.net
11% remove it
Ubisoft Game Launcher  by Ubisoft
The Ubisoft Game Launcher used to run UBISOFT games.
www.ubi.com
22% remove it
Uplay  by Ubisoft
Uplay is a digital distribution, digital rights management, multiplayer and communications service created by Ubisoft to provide an experience similar to the achievements/trophies offered by various other game companies.
4% remove it
Watch Dogs
About 4% of users remove it
Watch Dogs Deluxe Edition  by Ubisoft
watchdogs.ubi.com/watchdogs/en-gb/home/index.aspx
6% remove it
Watch Dogs EaSyCrAcK  by ScRuU, Inc.
www.gamehunt.co.za
About 3% of users remove it
Watch_Dogs  by Ubisoft
Publisher's description - “You play as Aiden Pearce, a brilliant hacker and former thug, whose criminal past led to a violent family tragedy. While seeking justice for those events, you'll monitor and hack those around you by manipulating the ctOS from the palm of your hand.”
watchdogs.ubi.com
12% remove it
 
Powered by Should I Remove It?

The file uplay_r1_loader64.dll has been seen being distributed by the following 5 URLs.

http://pt.fix4dll.com/.../?file=uplay_r1_loader64.dll&md5=01734CBA8FB0849FB285CB18AE90994C

https://onedrive.live.com/download.aspx?cid=02847D94F621C896&authKey=!AHiJctf2ja3PCYQ&resid=2847D94F621C896!127063&ithint=.dll

https://onedrive.live.com/.../19inlQrTCn8=9&ithint=.dll

about:internet

http://s6956.chomikuj.pl/File.aspx?e=iFCYdWsOtkL-zPnrkkt5u55O7mM03q1Hsgvft14bepfSI6DGLPPwJoAQ1WdjhuTUFJZJg50uWaMZaYdOHcA8D7kqGk1VpGm56WJRD0oNkBQjdvGJEih2CmZMl_Q5YJz6Q6SBAp8sexZmdRX1u10PkA&pv=2

Scan uplay_r1_loader64.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.