home

FunshionService.exe

Funshion Network Transport Service

Beijing Funshion Online Technologies Ltd.

Publisher:
Funshion Online Technologies Ltd.  (signed by Beijing Funshion Online Technologies Ltd.)

Product:
Funshion Network Transport Service

Version:
2.8.6.68Beta

MD5:
aeb0c6a478aae375dd8434aa5712713f

SHA-1:
19dc6e8a2ad8db35488785ca544d7d89906ca123

SHA-256:
561d3d6accb27ac5a0d7d1b88578a6e0f0b4e7d17fde29327f54850ed2f74d8b

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
11/5/2024 5:45:12 AM UTC  (today)

Scan engine
Detection
Engine version

Malwarebytes
PUP.Funshion
v2017.02.22.05

File size:
3.1 MB (3,276,936 bytes)

Product version:
2.8.6.68Beta

Copyright:
Copyright 2005-2011 Funshion Online Tech. Ltd.

Original file name:
FunshionService.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\funshion online\2.8.6.68\funshionservice.exe

Digital Signature
Signed by:
Beijing Funshion Online Technologies Ltd.

Authority:
Thawte, Inc.

Valid from:
7/23/2012 8:00:00 AM

Valid to:
8/3/2014 7:59:59 AM

Subject:
CN=Beijing Funshion Online Technologies Ltd., OU=SECURE APPLICATION DEVELOPMENT, O=Beijing Funshion Online Technologies Ltd., L=Beijing, S=Beijing, C=CN

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
7269EBE2996A280CC40DE7D2A71B088D

File PE Metadata
Compilation timestamp:
10/25/2013 3:39:45 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

Entry address:
0x134BAC

Entry point:
E8, 0E, BB, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 5D, E9, 91, 15, 00, 00, 8B, FF, 55, 8B, EC, 5D, E9, EA, FF, FF, FF, 6A, 14, 68, 30, 24, 6D, 00, E8, F8, B8, 00, 00, 83, 65, FC, 00, FF, 4D, 10, 78, 3A, 8B, 4D, 08, 2B, 4D, 0C, 89, 4D, 08, FF, 55, 14, EB, ED, 8B, 45, EC, 89, 45, E4, 8B, 45, E4, 8B, 00, 89, 45, E0, 8B, 45, E0, 81, 38, 63, 73, 6D, E0, 74, 0B, C7, 45, DC, 00, 00, 00, 00, 8B, 45, DC, C3, E8, 42, BB, 00, 00, 8B, 65, E8, C7, 45, FC, FE, FF, FF, FF, E8, EE, B8, 00, 00, C2, 10, 00, 6A, 0C...
 
[+]

Entropy:
6.1929

Code size:
2.4 MB (2,546,176 bytes)

Windows Firewall Allowed Program
Name:
funshionservicetcp


Scan FunshionService.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.