home

UlanManager.exe

Ulan Manager (Standard)

China Financial Certification Authority Co.Ltd

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘UlanService_Standard’.
Publisher:
CFCA  (signed by China Financial Certification Authority Co.Ltd)

Product:
Ulan Manager (Standard)

Description:
Ulan Manager

Version:
4.0.0.5

MD5:
4b7db6a107e07855334a071f10ba4365

SHA-1:
5e3507ea412e14ec1307d6f990771e2014525674

SHA-256:
08214837b2f25cff97b958f8bfdbfd670359f107d46644d9cfc413823c8a2836

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/16/2024 12:53:43 AM UTC  (today)

File size:
1.2 MB (1,243,616 bytes)

Product version:
4.0.0.5

Copyright:
(c) CFCA. All rights reserved.

Original file name:
UlanManager.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\cfca\ulanservice.standard\ulanmanager.exe

Digital Signature
Signed by:
China Financial Certification Authority Co.Ltd

Authority:
Symantec Corporation

Valid from:
4/7/2016 8:00:00 AM

Valid to:
2/25/2017 7:59:59 AM

Subject:
CN=China Financial Certification Authority Co.Ltd, OU=IT Department, O=China Financial Certification Authority Co.Ltd, L=Beijing, S=Bejing, C=CN

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
6B93D3D5F17942BAA4FC271C09F741DD

File PE Metadata
Compilation timestamp:
11/1/2016 6:41:50 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

Entry address:
0xA6936

Entry point:
E8, C3, 4F, 01, 00, E9, 79, FE, FF, FF, 68, 10, 61, 4A, 00, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, 18, 27, 50, 00, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, 8B, FF, 55, 8B, EC, 8B, 55, 0C, 56, 8B, 75, 08, 57, 0F, B6, 06, 8D, 48, BF, 46, 83, F9, 19, 77, 03, 83, C0, 20, 0F...
 
[+]

Entropy:
6.6087

Code size:
860.5 KB (881,152 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
UlanService_Standard

Command:
C:\Program Files\cfca\ulanservice.standard\ulanmanager.exe


Scan UlanManager.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.