home

uplayinstaller.exe

Uplay 15.0.2 installer

Ubisoft Entertainment Sweden AB

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is installed with Far Cry Primal. The file has been seen being downloaded from t.news.ubisoft.com and multiple other hosts.
Publisher:
Ubisoft  (signed by Ubisoft Entertainment Sweden AB)

Product:
Uplay 15.0.2 installer

Description:
Ubisoft Uplay Installer

Version:
15.0.2.4624

MD5:
183d6827e58318255c26f1c0a134444e

SHA-1:
e2a2d14093a5c6ab7780adbb414d31fe25fcf35a

SHA-256:
9819bf2b67464acc236dd1ab1bee239b486ddcd5873884ce3b80ec2488aabe04

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 7:11:17 AM UTC  (today)

File size:
62.6 MB (65,655,872 bytes)

Product version:
15.0.2.4624

Copyright:
Ubisoft

Trademarks:
Ubisoft, Uplay

Original file name:
Uplay Installer.exe

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\uplayinstaller.exe

Digital Signature
Signed by:
Ubisoft Entertainment Sweden AB

Authority:
VeriSign, Inc.

Valid from:
2/22/2013 5:30:00 AM

Valid to:
2/23/2016 5:29:59 AM

Subject:
CN=Ubisoft Entertainment Sweden AB, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Ubisoft Entertainment Sweden AB, L=Malmo, S=., C=SE

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
77172F388285426F99600D5DD28407

File PE Metadata
Compilation timestamp:
2/25/2012 12:50:04 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
786432:84YuHxKKgNuO6vMPDdz5v1KftpGpwBd5of/TaJc+yX5DNChAAisaKiFDnm7aud7d:84NAKXtvMPDl5UNHoXKgJtCKlm7audp

Entry address:
0x38AF

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 68, A2, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 90, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 90, 40, 00, 55, FF, 15, C0, 92, 40, 00, 6A, 08, A3, 98, EB, 47, 00, E8, 36, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, EA, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 64, A2, 40, 00, FF, 15, 84, 91, 40, 00, 68, 4C, A2, 40, 00, 68, A0, 6A, 47, 00, E8, 18, 27, 00, 00, FF, 15, B0, 90, 40, 00, 50, BF, A0, F0, 4C, 00, 57, E8, 06, 27, 00, 00...
 
[+]

Entropy:
7.9970

Packer / compiler:
Nullsoft install system v2.x

Code size:
29 KB (29,696 bytes)

The file uplayinstaller.exe has been discovered within the following program.

Far Cry Primal  by Ubisoft
far-cry.ubisoft.com/primal
12% remove it
 
Powered by Should I Remove It?

The file uplayinstaller.exe has been seen being distributed by the following 14 URLs.

https://t.news.ubisoft.com/.../?id=h4a017922,e64a77d,e74abf4

http://lb.cdn.m6web.fr/d/c/a/237412a0d911e06fc83f5a7e1b03e644/56d239c1/soft/.../uplay_15-0-2-4624_fr_424009.exe

http://lb.cdn.m6web.fr/d/c/a/a2888ff58d41ca39f0a895e5aa645b7e/56dd9904/soft/.../uplay_15-0-2-4624_fr_424009.exe

http://lb.cdn.m6web.fr/d/c/a/5ed9280357459e60ee5786b6998b1f36/56d3c54f/soft/.../uplay_15-0-2-4624_fr_424009.exe

http://uplay.softonic.com.br/download-tracker?th=1/.../TggCZ7 FjWrOzpE0ZMP595hVzT2sE2l8F8t0rF47aMwAvW3UuDn2tYtqCKpwfp4lNsBV51qJEtmBM9SOboRDewuQTNEDrIw3yGjfakXSGvFTeAS6j35ikg==

http://lb.cdn.m6web.fr/d/c/a/37d44c50aa3f792404a0c625a7bf4c81/56cbe833/soft/.../uplay_15-0-2-4624_fr_424009.exe

http://lb.cdn.m6web.fr/d/c/a/592ac73b336e214285ed7f5830abb050/56d07d96/soft/.../uplay_15-0-2-4624_fr_424009.exe

http://lb.cdn.m6web.fr/d/c/a/e9161c5ccad703e260fce17219e5a5c4/56d77b10/soft/.../uplay_15-0-2-4624_fr_424009.exe

http://lb.cdn.m6web.fr/d/c/a/2ef5e6dd3be3844359822643c615580f/56c42618/soft/.../uplay_15-0-2-4624_fr_424009.exe

http://uplay.en.softonic.com/download-tracker?th=1/.../TggCZ7 FjWrOzpE0ZMP595hVzT2sE2l8F8t0rF47aMwAvW3UuDn2tYtqCKpwfp4lNsBV51qJEtmBM9SOboRDewuQTNEDrIw3yGjfakXSGvFTeAS6j35ikg==

http://ubi.li/sjp3e

http://static3.cdn.ubi.com/orbit/.../UplayInstaller.exe

https://ubistatic3-a.akamaihd.net/orbit/.../UplayInstaller.exe

http://ubi.li/4vxt9

Scan uplayinstaller.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.