» FunshionUpgrade.exe
Overview
Analysis
File Details
Programs (1)

FunshionUpgrade.exe

FunshionUpgrade Module

Beijing Funshion Online Technologies Ltd.

This is installed with Funshion.

File name:

FunshionUpgrade.exe

Publisher:

Funshion Online Technologies Ltd. (signed by Beijing Funshion Online Technologies Ltd.)

Product:

FunshionUpgrade Module

Version:

1, 0, 0, 1

MD5:

ebdd11d2fb62d2b9d168086d14a9ec8d

SHA-1:

0061672dda631c94da384ca14a3e0d5a4dc7dd09

SHA-256:

00aff41529b6623086bacc7762c66e636aeabf3678da50187133a95de8c07297

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 8:16:15 PM UTC (today)

File size:

864.7 KB (885,488 bytes)

Product version:

1, 0, 0, 1

Original file name:

FunshionUpgrade.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\funshion online\funshion\funshionupgrade.exe

Digital Signature

Signed by:

Beijing Funshion Online Technologies Ltd.

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

7/22/2009 7:00:00 PM

Valid to:

8/2/2010 6:59:59 PM

Subject:

CN=Beijing Funshion Online Technologies Ltd., OU=SECURE APPLICATION DEVELOPMENT, O=Beijing Funshion Online Technologies Ltd., L=Beijing, S=Beijing, C=CN

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

33B9C76EEF8B9227E8320F4A2F831A27

File PE Metadata

Compilation timestamp:

6/4/2010 3:05:03 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

12288:oTd3Elk6TgPA6YTRCklrsm5mZuRuctL8ATamqmOZ0YAVzr+7:sd3EtKYCm5Q0L+mqpOY4G7

Entry address:

0x622A8

Entry point:

E8, 5A, 28, 01, 00, E9, 17, FE, FF, FF, 55, 8B, EC, 83, EC, 10, 56, 8B, 75, 08, 57, 33, FF, 3B, F7, 89, 7D, FC, 75, 1E, E8, 2C, 60, 00, 00, 6A, 16, 5E, 57, 57, 57, 57, 57, 89, 30, E8, 36, ED, FF, FF, 83, C4, 14, 8B, C6, E9, 06, 02, 00, 00, 6A, 24, 68, FF, 00, 00, 00, 56, E8, 5F, ED, FF, FF, 8B, 45, 0C, 83, C4, 0C, 3B, C7, 74, CB, 8B, 08, 8B, 40, 04, 3B, C7, 89, 4D, F0, 89, 45, F4, 7F, 12, 7C, 04, 3B, CF, 73, 0C, E8, E2, 5F, 00, 00, 6A, 16, 5E, 89, 30, EB, C1, 83, F8, 07, 7C, 0A, 7F, A3, 81, F9, FF, 6F, 40... 
[+]

Entropy:

6.5144

Code size:

620 KB (634,880 bytes)

The file FunshionUpgrade.exe has been discovered within the following program.

Funshion by Funshion

Funshion is a Chinese peer-to-peer streaming video network software. It provides TV programs and movies on demand stably and smoothly to broadband users. Funshion uses P2P-streaming technology and supports high-volume traffic.

www.Funshion.com

About 1% of users remove it

Scan FunshionUpgrade.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.