home

ucsync.exe

Enterprise Connect 10.3.1

Open Text Corporation

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘OpenText Enterprise Connect Scheduler’.
Publisher:
Open Text Corporation  (signed and verified)

Product:
Enterprise Connect 10.3.1

Description:
UCSync

Version:
10.3.1.110

MD5:
b54b7a51177dd55e803038426b88f33e

SHA-1:
3b622d660ab4961085de8e95b0871e1a5da923ce

SHA-256:
18064888a4c550b6d9f78d52bee6d249f9c9d60911c36fa6c1e78562f9b4a153

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/27/2024 1:40:54 AM UTC  (today)

File size:
135.3 KB (138,568 bytes)

Product version:
10.3.1

Copyright:
Copyright © 2013 Open Text Corporation

Trademarks:
Copyright © 2013 Open Text Corporation

Original file name:
ucsync.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\opentext\enterprise connect\ucsync.exe

Digital Signature
Signed by:
Open Text Corporation

Authority:
VeriSign, Inc.

Valid from:
8/23/2011 7:00:00 PM

Valid to:
8/23/2014 6:59:59 PM

Subject:
CN=Open Text Corporation, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Open Text Corporation, L=Waterloo, S=Ontario, C=CA

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
705FAF6DCA363B9ED3373073EAE41456

File PE Metadata
Compilation timestamp:
9/4/2013 8:59:02 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:odrYkNqLY2J2YwIuj9ijy2XGnkBr/9UDQGNS8kXyxv3DEIa3HMPT7tD:MMOYUj9iW22nWl8s8kXyFEX3MPTN

Entry address:
0x4EFE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.6355

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
12 KB (12,288 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
OpenText Enterprise Connect Scheduler

Command:
"C:\Program Files\opentext\enterprise connect\ucsync.exe"


Scan ucsync.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.