home

bloodstrike.exe

BloodstrikeClient

XCLOUD GAME CO., LIMITED

This is a setup program which is used to install the application. The file has been seen being downloaded from abgx360.xecuter.com and multiple other hosts.
Publisher:
XCLOUD GAME CO., LIMITED  (signed and verified)

Product:
BloodstrikeClient

Version:
1, 0, 0, 1

MD5:
96375516a551c82f92c4e9d242150ed2

SHA-1:
cb90843cdde43d25b57cfec19f22e2e77eab63cb

SHA-256:
ed92b7f30c489b61e2a0c7ebe58e7b2e97c105ed948e89bf5f898b84336731d5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 3:47:40 AM UTC  (today)

File size:
38.3 MB (40,181,536 bytes)

Product version:
1, 0, 0, 1

Copyright:
Copyright (C) 2015

Original file name:
BloodstrikeClient.exe

File type:
Executable application (Win32 EXE)

Language:
Portuguese (Brazil)

Common path:
C:\users\{user}\downloads\bloodstrike.exe

Digital Signature
Signed by:
XCLOUD GAME CO., LIMITED

Authority:
WoSign CA Limited

Valid from:
11/3/2015 8:34:59 AM

Valid to:
12/3/2016 8:34:59 AM

Subject:
CN="XCLOUD GAME CO., LIMITED", O="XCLOUD GAME CO., LIMITED", L=Hong Kong, S=Hong Kong, C=CN

Issuer:
CN=WoSign Class 3 Code Signing CA G2, O=WoSign CA Limited, C=CN

Serial number:
5FD7A3D96F2160417275688A2DC3799C

File PE Metadata
Compilation timestamp:
12/14/2015 10:02:56 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
786432:Oq5SgNPbSN8JvoW/uM+94g/a0IRH3jRcp1QAbcRqVCrTsCAgxuzjPjuDTL+1y+q:OpMeY/w9f/a0IpRcp1nbcoaTsp4u37mD

Entry address:
0xA5539

Entry point:
E8, CD, EA, 00, 00, E9, 89, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 8B, 54, 24, 0C, 8B, 4C, 24, 04, 85, D2, 74, 69, 33, C0, 8A, 44, 24, 08, 84, C0, 75, 16, 81, FA, 80, 00, 00, 00, 72, 0E, 83, 3D, 40, 22, 50, 00, 00, 74, 05, E9, 2A, EB, 00, 00, 57, 8B, F9, 83, FA, 04, 72, 31, F7, D9, 83, E1, 03, 74, 0C, 2B, D1, 88, 07, 83, C7, 01, 83, E9, 01, 75, F6, 8B, C8, C1, E0, 08, 03, C1, 8B, C8, C1, E0, 10, 03, C1, 8B, CA, 83, E2, 03, C1, E9, 02, 74, 06, F3, AB, 85, D2, 74, 0A, 88, 07, 83, C7...
 
[+]

Code size:
787.5 KB (806,400 bytes)

The file bloodstrike.exe has been seen being distributed by the following 23 URLs.

http://abgx360.xecuter.com/.../abgx360_v1.0.6_setup.exe

http://l.facebook.com/l.php?u=http://br-bloodstrikeclient.xcloudgame.com/brazil/s3/.../bloodstrike.exe&h=vAQG7I144&s=1

http://download622.mediafire.com/223qqffh5axg/.../bloodstrike (2).exe

http://static.gc.my.com/ArmoredWarfareMycomLoaderA_de.exe

http://dc625.4shared.com/download/.../bloodstrike2016.exe

http://us.media.z8games.com/core/.../interaction.php?bannerid=71

http://dc724.4shared.com/download/.../bloodstrike.exe

q=http://goo.gl/2Aun3g&redir_token=gpwbC_KhhYu7w3UusK-qAmuq1dN8MTQ0NTEyNDg0NEAxNDQ1MDM4NDQ0

q=http://br.util.xcloudgame.com/bloodstrikeUtil/.../downminclient.php&redir_token=XbqHG0tOdH1AWbQIDwiWtr2fm0B8MTQ1NDMzOTc4OUAxNDU0MjUzMzg5

https://br-util.xcloudgame.com/bloodstrikeUtil/.../downminclient.php

https://mega.nz/temporary/.../E5YU1KRZ

http://cs.playnet.lt/.../Counter-Strike_1.6_Setup.exe

http://www55.zippyshare.com/d/TAhgKGfm/.../BLOOD STRIKE.exe

http://dc729.4shared.com/download/.../bloodstrike.exe

http://lnkr.us/get?sourceId=5&uid=49459x206xakam1&format=go&host=ratexchange.net&out=http://br.util.xcloudgame.com/bloodstrikeUtil/client/downminclient.php&ref=http://br-bloodstrikeclient.xcloudgame.com/brazil/.../lobby.php?cdn=1&time=1454269080&u=MTRmMFdUQnE3c1NocXp3OG15VDBIV0FKUlNvU3Q0V2I2bVpvOGJPTmtaUVhVSUJaRklpOTdtTVc5aWdI&cm=1&flag=eda58edec28b17be69557204f96238fd&uid=1004387047&gameNickName=1635469093380128&current_currency=BRL&meLocale=pt-br&serverid=999&fbid=1635469093380128&fbSource=facebook_login_from_website&JUMP=&Mename=&Fbemail=&actions=&timecheck=MGRiNklnVExiVHpVcy8vOWZrQW4rclc4bEQ1bCtYd3A5ZHRDWnRpTzJha1I3amRLS04wWQ&miniclient=

http://goo.gl/IyJPDV

http://lnkr.us/get?sourceId=5&uid=50313x1031x&format=go&host=icontent.us&out=http://br.util.xcloudgame.com/bloodstrikeUtil/client/downminclient.php&ref=http://br-bloodstrikeclient.xcloudgame.com/brazil/.../lobby.php?cdn=1&time=1452535996&u=M2JiMnpic1gxVjhqWXk1cFNXQVFRT0FnOGZ2U3I3Uk9vd2xOR09jTmtadjBkUlVXcVFCOXkrK2lhdThU&cm=1&flag=60b6eb652347a6a547afdb520c38c4f5&uid=1002748187&gameNickName=1664282647127830&current_currency=BRL&meLocale=pt-br&serverid=999&fbid=1664282647127830&fbSource=bookmark&JUMP=&Mename=&Fbemail=&actions=&timecheck=1452536020&miniclient=

http://br-bloodstrikeclient.xcloudgame.com/brazil/s3/.../bloodstrike.exe

http://br.util.xcloudgame.com/bloodstrikeUtil/.../downminclient.php?channel=FBAD_minc_0011

https://d11uyk2dpzfhbx.cloudfront.net/brazil/s3/.../bloodstrike.exe

http://br.util.xcloudgame.com/bloodstrikeUtil/.../downminclient.php?&channel=FBAD_minc_0011

http://br.util.xcloudgame.com/bloodstrikeUtil/.../downminclient.php?channel=none

http://br.util.xcloudgame.com/bloodstrikeUtil/.../downminclient.php

Scan bloodstrike.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.