home

58760038671067488658ddd627a05efca45a7933

BloodstrikeClient

XCLOUD GAME CO., LIMITED

It is installed within the Mozilla Firefox web browser as part of an addin/plugin.
Publisher:
XCLOUD GAME CO., LIMITED  (signed and verified)

Product:
BloodstrikeClient

Version:
1, 0, 0, 1

MD5:
ee161634778c0827776423c253c5f14b

SHA-1:
ad0b94bc7fa066208c0e89d2c572ff6a3af65c38

SHA-256:
5671db7524437e9b5ffb8fb2c627bfebc319a6077ec2365800f069857da3acca

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 10:31:23 AM UTC  (today)

File size:
39.5 MB (41,381,045 bytes)

Product version:
1, 0, 0, 1

Copyright:
Copyright (C) 2015

Original file name:
BloodstrikeClient.exe

Language:
Brazilian Portuguese

Common path:
C:\users\{user}\appdata\local\mozilla\firefox\profiles\{user}.default\cache2\entries\58760038671067488658ddd627a05efca45a7933

Digital Signature
Signed by:
XCLOUD GAME CO., LIMITED

Authority:
WoSign CA Limited

Valid from:
11/3/2015 2:34:59 AM

Valid to:
12/3/2016 2:34:59 AM

Subject:
CN="XCLOUD GAME CO., LIMITED", O="XCLOUD GAME CO., LIMITED", L=Hong Kong, S=Hong Kong, C=CN

Issuer:
CN=WoSign Class 3 Code Signing CA G2, O=WoSign CA Limited, C=CN

Serial number:
5FD7A3D96F2160417275688A2DC3799C

File PE Metadata
Compilation timestamp:
7/29/2016 12:45:57 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

Entry address:
0x146872

Entry point:
E8, CD, 6C, 01, 00, E9, 89, FE, FF, FF, 6A, 0C, 68, 58, F6, 5C, 00, E8, 58, C8, 00, 00, 33, DB, 89, 5D, E4, 33, C0, 8B, 7D, 08, 3B, FB, 0F, 95, C0, 3B, C3, 75, 14, E8, 3F, 21, 00, 00, C7, 00, 16, 00, 00, 00, E8, 75, C0, 00, 00, 33, C0, EB, 79, 33, C0, 8B, 75, 0C, 3B, F3, 0F, 95, C0, 3B, C3, 74, DE, 33, C0, 38, 1E, 0F, 95, C0, 3B, C3, 74, D3, E8, 43, 12, 01, 00, 89, 45, 08, 3B, C3, 75, 0D, E8, 06, 21, 00, 00, C7, 00, 18, 00, 00, 00, EB, CA, 89, 5D, FC, 38, 1F, 75, 20, E8, F2, 20, 00, 00, C7, 00, 16, 00, 00...
 
[+]

Code size:
1.6 MB (1,685,504 bytes)

Scan 58760038671067488658ddd627a05efca45a7933 - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.