home

ucp.exe

Ultra Core Protector

Ultra Core Protector

The executable ucp.exe has been detected as malware by 1 anti-virus scanner.
Publisher:
Ultra Core Protector  (signed and verified)

Product:
Ultra Core Protector

Version:
8.3

MD5:
2e49ca21a4ecda0b1c0c4967f6011945

SHA-1:
c2fc477cdc19728f6aeca168d23faa296acce44f

SHA-256:
c6adeaf1c5c925d6f35541f99aa81b79e5076b8091a58d0223bce4714101d806

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
5/7/2024 2:03:13 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP (M)
16.12.7.12

File size:
836.1 KB (856,200 bytes)

Product version:
8.3.1.0

Copyright:
Copyright © 2008-2014, Written by Endi

Original file name:
ucp.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\css34\ucp.exe

Digital Signature
Signed by:
Ultra Core Protector

Authority:
Ultra Core Protector

Valid from:
2/19/2014 8:23:56 PM

Valid to:
1/1/2040 2:59:59 AM

Subject:
CN=Endi, OU=http://ucp-anticheat.org, E=support@ucp-anticheat.org, O=Ultra Core Protector, C=RU

Issuer:
CN=Endi, OU=http://ucp-anticheat.org, E=support@ucp-anticheat.org, O=Ultra Core Protector, C=RU

Serial number:
361CF8756746879744BD2E8434D33368

File PE Metadata
Compilation timestamp:
4/15/2014 4:18:50 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.12

Entry address:
0x34B0760

Entry point:
60, 9C, C6, 44, 24, 20, 7E, C7, 44, 24, 20, 94, C7, D6, 22, 66, 89, 2C, 24, E8, 3D, 32, F4, FF, 60, C7, 44, 24, 20, AE, FD, 77, 03, 66, 89, 4C, 24, 08, 9C, FF, 30, 8F, 44, 24, 20, 60, FF, 74, 24, 40, C2, 44, 00, 9C, 89, 5C, 24, 24, 0F, 9B, C0, C7, 44, 24, 20, 0B, 00, 00, 00, E9, AD, A0, 00, 00, 69, E9, E8, 39, 8A, 6D, 4D, 57, E5, 96, 67, 98, 16, 76, 08, D8, 7A, A3, 2D, A5, 25, 2D, 28, 51, 2E, 9E, F8, 40, D6, E7, D0, 48, 96, B7, 95, 2E, C8, F5, A4, B1, 88, D7, 3F, EA, 98, 4D, 6E, 51, 18, 88, 79, 5E, EF, 4E...
 
[+]

Code size:
275.5 KB (282,112 bytes)

Windows Firewall Allowed Program
Name:
3


Remove ucp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.