home

ucpro.exe

UniColor Pro

EIZO Corporation

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘UniColor Pro’.
Publisher:
EIZO Corporation  (signed and verified)

Product:
UniColor Pro

Description:
Color Vision Deficiency Simulation Software

Version:
1.5.1.2

MD5:
62316349b92071f6afc9063e5de03983

SHA-1:
248d81c3911e0198fa51193e44af015e47b30612

SHA-256:
bda5656288f7efeb1a9d46a3df3eb48545fea921bc245670c0d65d596cb2cae8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/5/2024 2:40:13 PM UTC  (today)

File size:
4.2 MB (4,420,416 bytes)

Product version:
1.5.1.2

Copyright:
Copyright (C) 2006-2014 EIZO Corporation, All rights reserved.

Original file name:
ucpro.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\eizo\unicolor pro\ucpro.exe

Digital Signature
Signed by:
EIZO Corporation

Authority:
VeriSign, Inc.

Valid from:
3/10/2014 8:00:00 AM

Valid to:
4/12/2015 7:59:59 AM

Subject:
CN=EIZO Corporation, OU=General Affair, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=EIZO Corporation, L=Hakusan-shi, S=Ishikawa, C=JP

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
061EBBB2E558C85FCBFF62E1B84DC53B

File PE Metadata
Compilation timestamp:
5/9/2014 1:14:43 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
98304:WKUbMV6Tt02vHRKprGnKk+DwYg61a1v0ypZFn/t/X/wy3cRs7D78NIS:WKU4V6SFnDB1kv0ypZF1/X/wy3cRs7DW

Entry address:
0x11006B

Entry point:
E8, DE, C8, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 53, 8B, 5D, 08, 83, FB, E0, 77, 6F, 56, 57, 83, 3D, 48, A5, 58, 00, 00, 75, 18, E8, 3E, B0, 00, 00, 6A, 1E, E8, 88, AE, 00, 00, 68, FF, 00, 00, 00, E8, C2, F3, FF, FF, 59, 59, 85, DB, 74, 04, 8B, C3, EB, 03, 33, C0, 40, 50, 6A, 00, FF, 35, 48, A5, 58, 00, FF, 15, 94, 53, 53, 00, 8B, F8, 85, FF, 75, 26, 6A, 0C, 5E, 39, 05, 58, B1, 58, 00, 74, 0D, 53, E8, 59, AC, 00, 00, 59, 85, C0, 75, A9, EB, 07, E8, 5B, 06, 00, 00, 89, 30, E8, 54, 06, 00, 00, 89...
 
[+]

Entropy:
5.7216

Code size:
1.2 MB (1,260,032 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
UniColor Pro

Command:
"C:\Program Files\eizo\unicolor pro\ucpro.exe"


Scan ucpro.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.