home

uplay_r1_loader64.dll

MD5:
014dff2519df6c29282f3f3357f25e59

SHA-1:
d63764c86cb164590573caae70d6f3409738e7d1

SHA-256:
9983766ba985b39e57eb6436d701330be15aff09d4985c63875a4c7789d07ef8

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
5/9/2024 8:32:56 AM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
HW64.packed
1.3.0.4959

File size:
497.5 KB (509,440 bytes)

File type:
Dynamic link library (Win64 DLL)

Common path:
C:\Program Files\far cry 4\bin\uplay_r1_loader64.dll

File PE Metadata
Compilation timestamp:
11/15/2014 2:55:44 PM

OS version:
1.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
1.71

CTPH (ssdeep):
6144:ggCkyOzV1Phql34s8+Ti80LJOSDTNfRQ21wcc0gRZ1P3a:VCkhzPOose8qbQ216/S

Entry address:
0x7DD08

Entry point:
E9, A8, AE, FC, FF, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, A6, F5, 07, 00, 01, 00, 00, 00, 5C, 00, 00, 00, 59, 00, 00, 00, 38, DD, 07, 00, 5A, DF, 07, 00, A8, DE, 07, 00, 00, 10, 00, 00, 41, 10, 00, 00, 64, 10, 00, 00, 05, 10, 00, 00, 6E, 10, 00, 00, 73, 10, 00, 00, 78, 10, 00, 00, 7D, 10, 00, 00, 82, 10, 00, 00, 87, 10, 00, 00, 8C, 10, 00, 00, 91, 10, 00, 00, 0A, 10, 00, 00, 96, 10, 00, 00, 9B, 10, 00, 00, A0, 10, 00, 00, A5, 10, 00, 00, AA, 10, 00, 00, 46, 10, 00, 00, 4B, 10, 00, 00...
 
[+]

Entropy:
7.8124

Packer / compiler:
Xtreme-Protector v1.05

Code size:
6 KB (6,144 bytes)

The file uplay_r1_loader64.dll has been discovered within the following programs.

Assassin's Creed Rogue  by Ubisoft
support.ubi.com
6% remove it
Assassin's Creed Unity  by Ubisoft
assassinscreed.ubi.com
8% remove it
Far Cry 4  by R.G. Mechanics
tapochek.net
11% remove it
Uplay  by Ubisoft
Uplay is a digital distribution, digital rights management, multiplayer and communications service created by Ubisoft to provide an experience similar to the achievements/trophies offered by various other game companies.
www.ubi.com
4% remove it
 
Powered by Should I Remove It?

The file uplay_r1_loader64.dll has been seen being distributed by the following 12 URLs.

http://s7540.chomikuj.pl/File.aspx?e=6uloEOxvKARgD0U01nGoBDEFRvmH1-JcNWIT-ADhJlB0U1HCtjoFxi9ZX6gb-6ZCG-4p3kybeKOziZkkJXC7OlM8fO9aF8W502j_U7VixmgR4zQLNfYthPRNJASMpjxh7w3g9ROwRFbiTAXNJvYUlA&pv=2

http://download693.mediafire.com/bx33608fa2pg/.../uplay_r1_loader64.dll

http://s7540.chomikuj.pl/File.aspx?e=6uloEOxvKARgD0U01nGoBHVddxDEWchJ-GSQWx_OiVt9HPHqESDtfyMBKmiJ7I4G41pTF6KvOdr_v3pqyUenX1ukSXN6FreTydJOkaNYwpJmT0_evrRimiM86FQujcCJ4laHctjZo_UJlEdSf9bqTw&pv=2

http://s5.picofile.com/d/8152327076/.../uplay_r1_loader64.dll

http://online.b1.org/rest/online/download/ACU by Mr.PHANTOM.rar/ACU by Mr.PHANTOM/.../UPlay_R1_Loader64.dll

http://s5.picofile.com/d/.../uplay_r1_loader64.dll

http://s5.picofile.com/d/.../uplay_r1_loader64.dll

http://s7540.chomikuj.pl/File.aspx?e=6uloEOxvKARgD0U01nGoBHVddxDEWchJ-GSQWx_OiVt881baz8-ncRn_XazZkKT2uhbP6pI70lckflp0i8ITtndNoS5fT89_OCoFy5a3vqfDfAeg1sHCLDytUZ7PcrTKponS0pHP45mI4TKl7YclnQ&pv=2

http://s7540.chomikuj.pl/File.aspx?e=6uloEOxvKARgD0U01nGoBAStZYUlgTI0xSzl3lM0pDRyGbg0xU2sWLhhfPJ__lILa466-qmAZf4M5WoPf-X9xibir2l7nEHgqJWofTo5nW_a__XWqbjf4MmKyG9pH4XXcdqePQFNKz8KvCsK4TP2hw&pv=2

http://s7540.chomikuj.pl/File.aspx?e=6uloEOxvKARgD0U01nGoBHVddxDEWchJ-GSQWx_OiVtGwbhSIId-7zGhBepFfr1NpzDh12Vyuou18urkVs9R1AThYJP2253GPjQP-NLNyUtSiYkuKs4Def2l6y9V08MJHj9oB5vwJdS7_Th9P0F1uw&pv=2

http://s7540.chomikuj.pl/File.aspx?e=6uloEOxvKARgD0U01nGoBDEFRvmH1-JcNWIT-ADhJlA9FCQXHu8St8PgTgJYlrJCCMF9ixayCGkMaAJ_per6NfmwohfRV0kHdwi9DDJZxrEsnAoc6K0Yybn5XmgEFMQjgmglEy_wF-EO-WKez8Cxyg&pv=2

https://mega.co.nz/temporary/.../PNNjCA5R

Scan uplay_r1_loader64.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.