home

Ultra.EXE

Ultra Application

Product:
Ultra Application

Description:
Ultra MFC Application

Version:
1, 0, 0, 1

MD5:
4b1984624975acde8052edc94105e13f

SHA-1:
5eccac2cd94e0c79674f3643fe1d1d772833b1b4

SHA-256:
f6498f9497923340dbc8306f1b21a88bfb4b67202b9e56afb05abab61f90810d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/9/2024 12:51:14 PM UTC  (today)

File size:
1.3 MB (1,397,760 bytes)

Product version:
1, 0, 0, 1

Copyright:
Copyright (C) 1903

Original file name:
Ultra.EXE

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\ultra.exe

File PE Metadata
Compilation timestamp:
6/5/2003 12:55:21 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
12288:YaeCcVNofthGp/rSM3jwGDWe50eElzk8sXLbjJEzzJ03NeSdVQFa8tAz6GtTvhvz:zD7tkrSMTVWe54U1EzzJ6eGip+KPy0F

Entry address:
0x1F500

Entry point:
55, 8B, EC, 6A, FF, 68, 48, 80, 51, 00, 68, DC, 36, 42, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, C4, A4, 53, 56, 57, 89, 65, E8, FF, 15, 10, 28, 54, 00, A3, 24, DF, 53, 00, A1, 24, DF, 53, 00, C1, E8, 08, 25, FF, 00, 00, 00, A3, 30, DF, 53, 00, 8B, 0D, 24, DF, 53, 00, 81, E1, FF, 00, 00, 00, 89, 0D, 2C, DF, 53, 00, 8B, 15, 2C, DF, 53, 00, C1, E2, 08, 03, 15, 30, DF, 53, 00, 89, 15, 28, DF, 53, 00, A1, 24, DF, 53, 00, C1, E8, 10, 25, FF, FF, 00, 00, A3, 24, DF, 53, 00, E8, BF, A5, 00...
 
[+]

Entropy:
5.5851

Developed / compiled with:
Microsoft Visual C++

Code size:
1.1 MB (1,104,384 bytes)

The file Ultra.EXE has been seen being distributed by the following URL.

https://sasulca-archive29e.mail.yandex.net/rdisk/edab5c99b346a18b977225da5ae4e483/544d280d/.../x-msdownload&fsize=1397760&hid=f090376ce69d000c20f6b1a6cf015f4b&media_type=executable&rtoken=c259eb15bb36b5e92ceb03d1a47401bb&rtimestamp=544cefcd&force_default=no

Scan Ultra.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.