home

ucp.exe

Ultra Core Protector

Ultra Core Protector

The application ucp.exe by Ultra Core Protector has been detected as a potentially unwanted program by 9 anti-malware scanners. This particular feature is designed to hijack the browser in an attempt to prevent other resources from modify the browser's search and home pages.
Publisher:
Ultra Core Protector  (signed and verified)

Product:
Ultra Core Protector

Version:
6.7

MD5:
d727b35ece9200f4deb191587e4e37f8

SHA-1:
256c7a9b8cbdabee3a708df32f487b6af564ddc9

SHA-256:
7e1299afe483bcb0c4aa0587117d95de2e8c368159a1557652cbfebd212ab2c4

Scanner detections:
9 / 68

Status:
Potentially unwanted

Analysis date:
5/2/2024 1:18:18 AM UTC  (today)

Scan engine
Detection
Engine version

Baidu Antivirus
Adware.Win32.SearchProtect
4.0.3.16215

Bkav FE
HW32.Packed
1.3.0.7237

F-Prot
W32/Virut.AI!Generic
v6.4.7.1.166

IKARUS anti.virus
Win32.Heur
t3scan.1.9.5.0

Kaspersky
not-a-virus:HEUR:AdWare.Win32.SearchProtect
14.0.0.659

Reason Heuristics
PUP.UltraCoreProtector (M)
16.2.15.5

Trend Micro House Call
TROJ_GEN.F47V1105
7.2.46

Vba32 AntiVirus
BScope.Trojan.Diple
3.12.22.2

ViRobot
Trojan.Win32.S.Agent.812680[h]
2014.3.20.0

File size:
581.7 KB (595,624 bytes)

Product version:
6.7.0.0

Copyright:
Copyright © 2008-2011, Written by Endi

Original file name:
ucp.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\steam\steamapps\abe311311\counter-strike\ucp.exe

Digital Signature
Signed by:
Ultra Core Protector

Authority:
Ultra Core Protector

Valid from:
7/2/2010 2:20:34 PM

Valid to:
12/31/2039 9:59:59 PM

Subject:
CN=Endi, OU=http://ucp-anticheat.org, E=support@ucp-anticheat.org, O=Ultra Core Protector, C=RU

Issuer:
CN=Endi, OU=http://ucp-anticheat.org, E=support@ucp-anticheat.org, O=Ultra Core Protector, C=RU

Serial number:
D042281A9BEBA8A747DC1E5650531704

File PE Metadata
Compilation timestamp:
3/22/2011 3:32:32 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.12

CTPH (ssdeep):
12288:ECXteZqnSKdv/3pe1uzBtNzxD1cwgqXKO6HVkkOs2FuV+D:Lte4ZvRGGZrZ61kkpSTD

Entry address:
0x33B8393

Entry point:
60, 60, E9, 8B, DE, 06, 00, C6, 04, 24, 31, 87, 44, 24, 30, E9, 72, E5, 06, 00, C6, C6, 87, 9A, B2, 32, 3F, 96, 8D, F2, 78, 41, 87, 76, B3, 10, 84, CD, 7B, 7B, 7B, 34, 54, 9D, 29, D6, E9, A4, E9, A3, C8, 83, B8, 11, 74, 48, 30, 5D, C7, B5, DA, 56, 3E, E9, 41, 0B, 61, EE, BC, 72, 08, 71, 83, 9A, F2, B7, DF, 43, D5, 78, FA, 78, 76, 48, 0A, 64, 95, 84, 3B, 2C, 07, F2, CA, 1E, 5E, 07, FD, 24, 9C, 6A, A1, E2, 18, BA, 50, 06, 3E, 22, 3B, 4C, 3A, E0, 66, 93, DA, A2, BE, 61, D0, 18, 89, BE, 70, 28, 7D, 5A, 59, D0...
 
[+]

Code size:
52.2 MB (54,779,904 bytes)

Remove ucp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.