Overview

overview

8

Static

static

3

Юрич �...37.exe

windows11-21h2-x64

8

Analysis

  • max time kernel
    303s
  • max time network
    292s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240412-en
  • resource tags

    arch:x64arch:x86image:win11-20240412-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    24/04/2024, 17:00

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Юрич лох_Installer1337.exe

  • Size

    507.9MB

  • MD5

    7d55ddc6f290159b18164ad03c0fc2e6

  • SHA1

    932d94cea968e2150689bd1b72ab58c6ebfb366f

  • SHA256

    7718bdc8b99522e2c42840661fcfb1b91f24166bf158fde9652f500a48e5d97b

  • SHA512

    93c763f0876f3b3d91db458b00fb9751b39753bbf4f76cfcbb517b5ef0c439ce2348f3d3f026383bb91a0749bce9d66e178c00b331b7a8e21c375d29cb19c871

  • SSDEEP

    12582912:fl9dtnPJKNPA9BcVtYJrNDQBuf1ymIG7ZhD+NaPe0f:flhP+BIrNDmutymx1ANoeO

Score
8/10
discoveryevasionpersistence

Malware Config

Signatures

  • Modifies Windows Firewall 2 TTPs 2 IoCs
    evasion
  • .NET Reactor proctector 2 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Executes dropped EXE 53 IoCs
  • Loads dropped DLL 64 IoCs
  • Registers COM server for autorun 1 TTPs 17 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops desktop.ini file(s) 2 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Enumerates system info in registry 2 TTPs 6 IoCs
  • Gathers system information 1 TTPs 2 IoCs

    Runs systeminfo.exe.

  • Modifies registry class 64 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: LoadsDriver 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 54 IoCs
  • Suspicious use of SendNotifyMessage 26 IoCs
  • Suspicious use of SetWindowsHookEx 10 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence
  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Users\Admin\AppData\Local\Temp\Юрич лох_Installer1337.exe
    "C:\Users\Admin\AppData\Local\Temp\Юрич лох_Installer1337.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2932
    • C:\Users\Admin\AppData\Local\Temp\RarSFX0\BlueStacksInstaller.exe
      "C:\Users\Admin\AppData\Local\Temp\RarSFX0\BlueStacksInstaller.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:3644
      • C:\Windows\SYSTEM32\cmd.exe
        "cmd" /c dir "C:\Users\Admin\AppData\Local\Temp\RarSFX0\" /s
        3⤵
          PID:4396
        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\7zr.exe
          "C:\Users\Admin\AppData\Local\Temp\RarSFX0\7zr.exe" x "C:\Users\Admin\AppData\Local\Temp\RarSFX0\CommonInstallUtils.zip" -o"C:\Users\Admin\AppData\Local\Temp\RarSFX0\" -aoa
          3⤵
          • Executes dropped EXE
          • Suspicious use of AdjustPrivilegeToken
          PID:3816
        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\HD-ForceGPU.exe
          "C:\Users\Admin\AppData\Local\Temp\RarSFX0\HD-ForceGPU.exe" 1
          3⤵
          • Executes dropped EXE
          PID:2812
        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\HD-GLCheck.exe
          "C:\Users\Admin\AppData\Local\Temp\RarSFX0\HD-GLCheck.exe" 1 1
          3⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:3972
        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\HD-GLCheck.exe
          "C:\Users\Admin\AppData\Local\Temp\RarSFX0\HD-GLCheck.exe" 1 2
          3⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:2272
        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\HD-GLCheck.exe
          "C:\Users\Admin\AppData\Local\Temp\RarSFX0\HD-GLCheck.exe" 4 1
          3⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:1352
        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\HD-CheckCpu.exe
          "C:\Users\Admin\AppData\Local\Temp\RarSFX0\HD-CheckCpu.exe"
          3⤵
          • Executes dropped EXE
          PID:280
        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\HD-GLCheck.exe
          "C:\Users\Admin\AppData\Local\Temp\RarSFX0\HD-GLCheck.exe" 1 1
          3⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:5068
        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\HD-GLCheck.exe
          "C:\Users\Admin\AppData\Local\Temp\RarSFX0\HD-GLCheck.exe" 4 1
          3⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious use of SetWindowsHookEx
          PID:1460
        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\HD-GLCheck.exe
          "C:\Users\Admin\AppData\Local\Temp\RarSFX0\HD-GLCheck.exe" 1 2
          3⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:3892
        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\HD-GLCheck.exe
          "C:\Users\Admin\AppData\Local\Temp\RarSFX0\HD-GLCheck.exe" 4 2
          3⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:1836
        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\7zr.exe
          "C:\Users\Admin\AppData\Local\Temp\RarSFX0\7zr.exe" x "C:\Users\Admin\AppData\Local\Temp\RarSFX0\PF.zip" -o"C:\Program Files\BlueStacks" -aoa
          3⤵
          • Executes dropped EXE
          • Drops file in Program Files directory
          • Suspicious use of AdjustPrivilegeToken
          PID:3012
        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\HD-GLCheck.exe
          "C:\Users\Admin\AppData\Local\Temp\RarSFX0\\HD-GLCheck.exe" 2
          3⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:2884
        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\HD-GLCheck.exe
          "C:\Users\Admin\AppData\Local\Temp\RarSFX0\\HD-GLCheck.exe" 3
          3⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious use of SetWindowsHookEx
          PID:4320
        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\HD-GLCheck.exe
          "C:\Users\Admin\AppData\Local\Temp\RarSFX0\\HD-GLCheck.exe" 1
          3⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:436
        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\7zr.exe
          "C:\Users\Admin\AppData\Local\Temp\RarSFX0\7zr.exe" x "C:\Users\Admin\AppData\Local\Temp\RarSFX0\PD.zip" -o"C:\ProgramData\BlueStacks" -aoa
          3⤵
          • Executes dropped EXE
          • Drops desktop.ini file(s)
          • Suspicious use of AdjustPrivilegeToken
          PID:2168
        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\7zr.exe
          "C:\Users\Admin\AppData\Local\Temp\RarSFX0\7zr.exe" x "C:\Users\Admin\AppData\Local\Temp\RarSFX0\CefData.zip" -o"C:\ProgramData\BlueStacks\CefData" -aoa
          3⤵
          • Executes dropped EXE
          • Suspicious use of AdjustPrivilegeToken
          PID:4908
        • C:\Windows\SYSTEM32\netsh.exe
          "netsh.exe" advfirewall firewall delete rule name="BlueStacks Service"
          3⤵
          • Modifies Windows Firewall
          PID:2076
        • C:\Windows\SYSTEM32\netsh.exe
          "netsh.exe" advfirewall firewall add rule name="BlueStacks Service" dir=in action=allow program="C:\Program Files\BlueStacks\HD-Player.exe" enable=yes
          3⤵
          • Modifies Windows Firewall
          PID:864
        • C:\Windows\SYSTEM32\netsh.exe
          "netsh.exe" http add urlacl url=http://*:2861/ User=\"Everyone"
          3⤵
            PID:1968
          • C:\Windows\SYSTEM32\netsh.exe
            "netsh.exe" http add urlacl url=http://*:2862/ User=\"Everyone"
            3⤵
              PID:4832
            • C:\Windows\SYSTEM32\netsh.exe
              "netsh.exe" http add urlacl url=http://*:2863/ User=\"Everyone"
              3⤵
                PID:2920
              • C:\Windows\SYSTEM32\netsh.exe
                "netsh.exe" http add urlacl url=http://*:2864/ User=\"Everyone"
                3⤵
                  PID:2196
                • C:\Windows\SYSTEM32\netsh.exe
                  "netsh.exe" http add urlacl url=http://*:2865/ User=\"Everyone"
                  3⤵
                    PID:3972
                  • C:\Windows\SYSTEM32\netsh.exe
                    "netsh.exe" http add urlacl url=http://*:2866/ User=\"Everyone"
                    3⤵
                      PID:1360
                    • C:\Windows\SYSTEM32\netsh.exe
                      "netsh.exe" http add urlacl url=http://*:2867/ User=\"Everyone"
                      3⤵
                        PID:3172
                      • C:\Windows\SYSTEM32\netsh.exe
                        "netsh.exe" http add urlacl url=http://*:2868/ User=\"Everyone"
                        3⤵
                          PID:2284
                        • C:\Windows\SYSTEM32\netsh.exe
                          "netsh.exe" http add urlacl url=http://*:2869/ User=\"Everyone"
                          3⤵
                            PID:5020
                          • C:\Windows\SYSTEM32\netsh.exe
                            "netsh.exe" http add urlacl url=http://*:2870/ User=\"Everyone"
                            3⤵
                              PID:4616
                            • C:\Windows\SYSTEM32\netsh.exe
                              "netsh.exe" http add urlacl url=http://*:2871/ User=\"Everyone"
                              3⤵
                                PID:1016
                              • C:\Windows\SYSTEM32\netsh.exe
                                "netsh.exe" http add urlacl url=http://*:2872/ User=\"Everyone"
                                3⤵
                                  PID:3968
                                • C:\Windows\SYSTEM32\netsh.exe
                                  "netsh.exe" http add urlacl url=http://*:2873/ User=\"Everyone"
                                  3⤵
                                    PID:5004
                                  • C:\Windows\SYSTEM32\netsh.exe
                                    "netsh.exe" http add urlacl url=http://*:2874/ User=\"Everyone"
                                    3⤵
                                      PID:4972
                                    • C:\Windows\SYSTEM32\netsh.exe
                                      "netsh.exe" http add urlacl url=http://*:2875/ User=\"Everyone"
                                      3⤵
                                        PID:4360
                                      • C:\Windows\SYSTEM32\netsh.exe
                                        "netsh.exe" http add urlacl url=http://*:2876/ User=\"Everyone"
                                        3⤵
                                          PID:5116
                                        • C:\Windows\SYSTEM32\netsh.exe
                                          "netsh.exe" http add urlacl url=http://*:2877/ User=\"Everyone"
                                          3⤵
                                            PID:3560
                                          • C:\Windows\SYSTEM32\netsh.exe
                                            "netsh.exe" http add urlacl url=http://*:2878/ User=\"Everyone"
                                            3⤵
                                              PID:4588
                                            • C:\Windows\SYSTEM32\netsh.exe
                                              "netsh.exe" http add urlacl url=http://*:2879/ User=\"Everyone"
                                              3⤵
                                                PID:1460
                                              • C:\Windows\SYSTEM32\netsh.exe
                                                "netsh.exe" http add urlacl url=http://*:2880/ User=\"Everyone"
                                                3⤵
                                                  PID:4184
                                                • C:\Windows\SYSTEM32\netsh.exe
                                                  "netsh.exe" http add urlacl url=http://*:2881/ User=\"Everyone"
                                                  3⤵
                                                    PID:4864
                                                  • C:\Windows\SYSTEM32\netsh.exe
                                                    "netsh.exe" http add urlacl url=http://*:2882/ User=\"Everyone"
                                                    3⤵
                                                      PID:4204
                                                    • C:\Windows\SYSTEM32\netsh.exe
                                                      "netsh.exe" http add urlacl url=http://*:2883/ User=\"Everyone"
                                                      3⤵
                                                        PID:668
                                                      • C:\Windows\SYSTEM32\netsh.exe
                                                        "netsh.exe" http add urlacl url=http://*:2884/ User=\"Everyone"
                                                        3⤵
                                                          PID:2412
                                                        • C:\Windows\SYSTEM32\netsh.exe
                                                          "netsh.exe" http add urlacl url=http://*:2885/ User=\"Everyone"
                                                          3⤵
                                                            PID:2920
                                                          • C:\Windows\SYSTEM32\netsh.exe
                                                            "netsh.exe" http add urlacl url=http://*:2886/ User=\"Everyone"
                                                            3⤵
                                                              PID:4076
                                                            • C:\Windows\SYSTEM32\netsh.exe
                                                              "netsh.exe" http add urlacl url=http://*:2887/ User=\"Everyone"
                                                              3⤵
                                                                PID:1548
                                                              • C:\Windows\SYSTEM32\netsh.exe
                                                                "netsh.exe" http add urlacl url=http://*:2888/ User=\"Everyone"
                                                                3⤵
                                                                  PID:1476
                                                                • C:\Windows\SYSTEM32\netsh.exe
                                                                  "netsh.exe" http add urlacl url=http://*:2889/ User=\"Everyone"
                                                                  3⤵
                                                                    PID:3108
                                                                  • C:\Windows\SYSTEM32\netsh.exe
                                                                    "netsh.exe" http add urlacl url=http://*:2890/ User=\"Everyone"
                                                                    3⤵
                                                                      PID:3544
                                                                    • C:\Windows\SYSTEM32\netsh.exe
                                                                      "netsh.exe" http add urlacl url=http://*:2891/ User=\"Everyone"
                                                                      3⤵
                                                                        PID:3960
                                                                      • C:\Windows\SYSTEM32\netsh.exe
                                                                        "netsh.exe" http add urlacl url=http://*:2892/ User=\"Everyone"
                                                                        3⤵
                                                                          PID:5040
                                                                        • C:\Windows\SYSTEM32\netsh.exe
                                                                          "netsh.exe" http add urlacl url=http://*:2893/ User=\"Everyone"
                                                                          3⤵
                                                                            PID:5024
                                                                          • C:\Windows\SYSTEM32\netsh.exe
                                                                            "netsh.exe" http add urlacl url=http://*:2894/ User=\"Everyone"
                                                                            3⤵
                                                                              PID:5064
                                                                            • C:\Windows\SYSTEM32\netsh.exe
                                                                              "netsh.exe" http add urlacl url=http://*:2895/ User=\"Everyone"
                                                                              3⤵
                                                                                PID:3572
                                                                              • C:\Windows\SYSTEM32\netsh.exe
                                                                                "netsh.exe" http add urlacl url=http://*:2896/ User=\"Everyone"
                                                                                3⤵
                                                                                  PID:3372
                                                                                • C:\Windows\SYSTEM32\netsh.exe
                                                                                  "netsh.exe" http add urlacl url=http://*:2897/ User=\"Everyone"
                                                                                  3⤵
                                                                                    PID:4668
                                                                                  • C:\Windows\SYSTEM32\netsh.exe
                                                                                    "netsh.exe" http add urlacl url=http://*:2898/ User=\"Everyone"
                                                                                    3⤵
                                                                                      PID:2808
                                                                                    • C:\Windows\SYSTEM32\netsh.exe
                                                                                      "netsh.exe" http add urlacl url=http://*:2899/ User=\"Everyone"
                                                                                      3⤵
                                                                                        PID:692
                                                                                      • C:\Windows\SYSTEM32\netsh.exe
                                                                                        "netsh.exe" http add urlacl url=http://*:2900/ User=\"Everyone"
                                                                                        3⤵
                                                                                          PID:4044
                                                                                        • C:\Windows\SYSTEM32\netsh.exe
                                                                                          "netsh.exe" http add urlacl url=http://*:2901/ User=\"Everyone"
                                                                                          3⤵
                                                                                            PID:3172
                                                                                          • C:\Windows\SYSTEM32\netsh.exe
                                                                                            "netsh.exe" http add urlacl url=http://*:2902/ User=\"Everyone"
                                                                                            3⤵
                                                                                              PID:3012
                                                                                            • C:\Windows\SYSTEM32\netsh.exe
                                                                                              "netsh.exe" http add urlacl url=http://*:2903/ User=\"Everyone"
                                                                                              3⤵
                                                                                                PID:4424
                                                                                              • C:\Windows\SYSTEM32\netsh.exe
                                                                                                "netsh.exe" http add urlacl url=http://*:2904/ User=\"Everyone"
                                                                                                3⤵
                                                                                                  PID:4212
                                                                                                • C:\Windows\SYSTEM32\netsh.exe
                                                                                                  "netsh.exe" http add urlacl url=http://*:2905/ User=\"Everyone"
                                                                                                  3⤵
                                                                                                    PID:3232
                                                                                                  • C:\Windows\SYSTEM32\netsh.exe
                                                                                                    "netsh.exe" http add urlacl url=http://*:2906/ User=\"Everyone"
                                                                                                    3⤵
                                                                                                      PID:4984
                                                                                                    • C:\Windows\SYSTEM32\netsh.exe
                                                                                                      "netsh.exe" http add urlacl url=http://*:2907/ User=\"Everyone"
                                                                                                      3⤵
                                                                                                        PID:1576
                                                                                                      • C:\Windows\SYSTEM32\netsh.exe
                                                                                                        "netsh.exe" http add urlacl url=http://*:2908/ User=\"Everyone"
                                                                                                        3⤵
                                                                                                          PID:2736
                                                                                                        • C:\Windows\SYSTEM32\netsh.exe
                                                                                                          "netsh.exe" http add urlacl url=http://*:2909/ User=\"Everyone"
                                                                                                          3⤵
                                                                                                            PID:4040
                                                                                                          • C:\Windows\SYSTEM32\netsh.exe
                                                                                                            "netsh.exe" http add urlacl url=http://*:2910/ User=\"Everyone"
                                                                                                            3⤵
                                                                                                              PID:4656
                                                                                                            • C:\Windows\SYSTEM32\netsh.exe
                                                                                                              "netsh.exe" http add urlacl url=http://*:2911/ User=\"Everyone"
                                                                                                              3⤵
                                                                                                                PID:4516
                                                                                                              • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                "netsh.exe" http add urlacl url=http://*:2912/ User=\"Everyone"
                                                                                                                3⤵
                                                                                                                  PID:2236
                                                                                                                • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                  "netsh.exe" http add urlacl url=http://*:2913/ User=\"Everyone"
                                                                                                                  3⤵
                                                                                                                    PID:3308
                                                                                                                  • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                    "netsh.exe" http add urlacl url=http://*:2914/ User=\"Everyone"
                                                                                                                    3⤵
                                                                                                                      PID:3536
                                                                                                                    • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                      "netsh.exe" http add urlacl url=http://*:2915/ User=\"Everyone"
                                                                                                                      3⤵
                                                                                                                        PID:2756
                                                                                                                      • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                        "netsh.exe" http add urlacl url=http://*:2916/ User=\"Everyone"
                                                                                                                        3⤵
                                                                                                                          PID:3792
                                                                                                                        • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                          "netsh.exe" http add urlacl url=http://*:2917/ User=\"Everyone"
                                                                                                                          3⤵
                                                                                                                            PID:4108
                                                                                                                          • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                            "netsh.exe" http add urlacl url=http://*:2918/ User=\"Everyone"
                                                                                                                            3⤵
                                                                                                                              PID:2880
                                                                                                                            • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                              "netsh.exe" http add urlacl url=http://*:2919/ User=\"Everyone"
                                                                                                                              3⤵
                                                                                                                                PID:3992
                                                                                                                              • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                                "netsh.exe" http add urlacl url=http://*:2920/ User=\"Everyone"
                                                                                                                                3⤵
                                                                                                                                  PID:4284
                                                                                                                                • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                                  "netsh.exe" http add urlacl url=http://*:2921/ User=\"Everyone"
                                                                                                                                  3⤵
                                                                                                                                    PID:1848
                                                                                                                                  • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                                    "netsh.exe" http add urlacl url=http://*:2922/ User=\"Everyone"
                                                                                                                                    3⤵
                                                                                                                                      PID:5000
                                                                                                                                    • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                                      "netsh.exe" http add urlacl url=http://*:2923/ User=\"Everyone"
                                                                                                                                      3⤵
                                                                                                                                        PID:3540
                                                                                                                                      • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                                        "netsh.exe" http add urlacl url=http://*:2924/ User=\"Everyone"
                                                                                                                                        3⤵
                                                                                                                                          PID:4760
                                                                                                                                        • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                                          "netsh.exe" http add urlacl url=http://*:2925/ User=\"Everyone"
                                                                                                                                          3⤵
                                                                                                                                            PID:2884
                                                                                                                                          • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                                            "netsh.exe" http add urlacl url=http://*:2926/ User=\"Everyone"
                                                                                                                                            3⤵
                                                                                                                                              PID:4364
                                                                                                                                            • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                                              "netsh.exe" http add urlacl url=http://*:2927/ User=\"Everyone"
                                                                                                                                              3⤵
                                                                                                                                                PID:2548
                                                                                                                                              • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                                                "netsh.exe" http add urlacl url=http://*:2928/ User=\"Everyone"
                                                                                                                                                3⤵
                                                                                                                                                  PID:1448
                                                                                                                                                • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                                                  "netsh.exe" http add urlacl url=http://*:2929/ User=\"Everyone"
                                                                                                                                                  3⤵
                                                                                                                                                    PID:1564
                                                                                                                                                  • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                                                    "netsh.exe" http add urlacl url=http://*:2930/ User=\"Everyone"
                                                                                                                                                    3⤵
                                                                                                                                                      PID:4048
                                                                                                                                                    • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                                                      "netsh.exe" http add urlacl url=http://*:2931/ User=\"Everyone"
                                                                                                                                                      3⤵
                                                                                                                                                        PID:1148
                                                                                                                                                      • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                                                        "netsh.exe" http add urlacl url=http://*:2932/ User=\"Everyone"
                                                                                                                                                        3⤵
                                                                                                                                                          PID:3468
                                                                                                                                                        • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                                                          "netsh.exe" http add urlacl url=http://*:2933/ User=\"Everyone"
                                                                                                                                                          3⤵
                                                                                                                                                            PID:3916
                                                                                                                                                          • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                                                            "netsh.exe" http add urlacl url=http://*:2934/ User=\"Everyone"
                                                                                                                                                            3⤵
                                                                                                                                                              PID:5064
                                                                                                                                                            • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                                                              "netsh.exe" http add urlacl url=http://*:2935/ User=\"Everyone"
                                                                                                                                                              3⤵
                                                                                                                                                                PID:2808
                                                                                                                                                              • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                                                                "netsh.exe" http add urlacl url=http://*:2936/ User=\"Everyone"
                                                                                                                                                                3⤵
                                                                                                                                                                  PID:3992
                                                                                                                                                                • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                                                                  "netsh.exe" http add urlacl url=http://*:2937/ User=\"Everyone"
                                                                                                                                                                  3⤵
                                                                                                                                                                    PID:1296
                                                                                                                                                                  • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                                                                    "netsh.exe" http add urlacl url=http://*:2938/ User=\"Everyone"
                                                                                                                                                                    3⤵
                                                                                                                                                                      PID:4572
                                                                                                                                                                    • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                                                                      "netsh.exe" http add urlacl url=http://*:2939/ User=\"Everyone"
                                                                                                                                                                      3⤵
                                                                                                                                                                        PID:3860
                                                                                                                                                                      • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                                                                        "netsh.exe" http add urlacl url=http://*:2940/ User=\"Everyone"
                                                                                                                                                                        3⤵
                                                                                                                                                                          PID:4948
                                                                                                                                                                        • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                                                                          "netsh.exe" http add urlacl url=http://*:2941/ User=\"Everyone"
                                                                                                                                                                          3⤵
                                                                                                                                                                            PID:1028
                                                                                                                                                                          • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                                                                            "netsh.exe" http add urlacl url=http://*:2942/ User=\"Everyone"
                                                                                                                                                                            3⤵
                                                                                                                                                                              PID:1580
                                                                                                                                                                            • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                                                                              "netsh.exe" http add urlacl url=http://*:2943/ User=\"Everyone"
                                                                                                                                                                              3⤵
                                                                                                                                                                                PID:1088
                                                                                                                                                                              • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                                                                                "netsh.exe" http add urlacl url=http://*:2944/ User=\"Everyone"
                                                                                                                                                                                3⤵
                                                                                                                                                                                  PID:2752
                                                                                                                                                                                • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                                                                                  "netsh.exe" http add urlacl url=http://*:2945/ User=\"Everyone"
                                                                                                                                                                                  3⤵
                                                                                                                                                                                    PID:2928
                                                                                                                                                                                  • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                                                                                    "netsh.exe" http add urlacl url=http://*:2946/ User=\"Everyone"
                                                                                                                                                                                    3⤵
                                                                                                                                                                                      PID:8
                                                                                                                                                                                    • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                                                                                      "netsh.exe" http add urlacl url=http://*:2947/ User=\"Everyone"
                                                                                                                                                                                      3⤵
                                                                                                                                                                                        PID:1772
                                                                                                                                                                                      • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                                                                                        "netsh.exe" http add urlacl url=http://*:2948/ User=\"Everyone"
                                                                                                                                                                                        3⤵
                                                                                                                                                                                          PID:4220
                                                                                                                                                                                        • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                                                                                          "netsh.exe" http add urlacl url=http://*:2949/ User=\"Everyone"
                                                                                                                                                                                          3⤵
                                                                                                                                                                                            PID:4424
                                                                                                                                                                                          • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                                                                                            "netsh.exe" http add urlacl url=http://*:2950/ User=\"Everyone"
                                                                                                                                                                                            3⤵
                                                                                                                                                                                              PID:3268
                                                                                                                                                                                            • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                                                                                              "netsh.exe" http add urlacl url=http://*:2951/ User=\"Everyone"
                                                                                                                                                                                              3⤵
                                                                                                                                                                                                PID:3208
                                                                                                                                                                                              • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                                                                                                "netsh.exe" http add urlacl url=http://*:2952/ User=\"Everyone"
                                                                                                                                                                                                3⤵
                                                                                                                                                                                                  PID:4376
                                                                                                                                                                                                • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                                                                                                  "netsh.exe" http add urlacl url=http://*:2953/ User=\"Everyone"
                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                    PID:5012
                                                                                                                                                                                                  • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                                                                                                    "netsh.exe" http add urlacl url=http://*:2954/ User=\"Everyone"
                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                      PID:4888
                                                                                                                                                                                                    • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                                                                                                      "netsh.exe" http add urlacl url=http://*:2955/ User=\"Everyone"
                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                        PID:1040
                                                                                                                                                                                                      • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                                                                                                        "netsh.exe" http add urlacl url=http://*:2956/ User=\"Everyone"
                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                          PID:1268
                                                                                                                                                                                                        • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                                                                                                          "netsh.exe" http add urlacl url=http://*:2957/ User=\"Everyone"
                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                            PID:2524
                                                                                                                                                                                                          • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                                                                                                            "netsh.exe" http add urlacl url=http://*:2958/ User=\"Everyone"
                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                              PID:4480
                                                                                                                                                                                                            • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                                                                                                              "netsh.exe" http add urlacl url=http://*:2959/ User=\"Everyone"
                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                PID:1792
                                                                                                                                                                                                              • C:\Windows\SYSTEM32\netsh.exe
                                                                                                                                                                                                                "netsh.exe" http add urlacl url=http://*:2960/ User=\"Everyone"
                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                  PID:2336
                                                                                                                                                                                                                • C:\Program Files\BlueStacks\HD-ComRegistrar.exe
                                                                                                                                                                                                                  "C:\Program Files\BlueStacks\HD-ComRegistrar.exe" -unreg
                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                  • Executes dropped EXE
                                                                                                                                                                                                                  • Loads dropped DLL
                                                                                                                                                                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                  • Suspicious use of AdjustPrivilegeToken
                                                                                                                                                                                                                  PID:4864
                                                                                                                                                                                                                • C:\Program Files\BlueStacks\HD-ComRegistrar.exe
                                                                                                                                                                                                                  "C:\Program Files\BlueStacks\HD-ComRegistrar.exe" -reg
                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                  • Executes dropped EXE
                                                                                                                                                                                                                  • Loads dropped DLL
                                                                                                                                                                                                                  • Registers COM server for autorun
                                                                                                                                                                                                                  • Modifies registry class
                                                                                                                                                                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                  • Suspicious use of AdjustPrivilegeToken
                                                                                                                                                                                                                  PID:2236
                                                                                                                                                                                                            • C:\ProgramData\BlueStacks\Client\Bluestacks.exe
                                                                                                                                                                                                              "C:\ProgramData\BlueStacks\Client\Bluestacks.exe"
                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                              • Executes dropped EXE
                                                                                                                                                                                                              • Loads dropped DLL
                                                                                                                                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                              • Suspicious use of AdjustPrivilegeToken
                                                                                                                                                                                                              • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                              PID:2088
                                                                                                                                                                                                              • C:\Program Files\BlueStacks\HD-Player.exe
                                                                                                                                                                                                                "C:\Program Files\BlueStacks\HD-Player.exe" Android -h
                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                • Loads dropped DLL
                                                                                                                                                                                                                • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                • Suspicious use of AdjustPrivilegeToken
                                                                                                                                                                                                                • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                PID:4616
                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://t.me/+OSK1WzQG8_5hZTUy
                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                  • Enumerates system info in registry
                                                                                                                                                                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                                                                                                                                                  • Suspicious use of FindShellTrayWindow
                                                                                                                                                                                                                  • Suspicious use of SendNotifyMessage
                                                                                                                                                                                                                  PID:2988
                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x120,0x124,0x128,0xfc,0x12c,0x7fface843cb8,0x7fface843cc8,0x7fface843cd8
                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                      PID:4004
                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2056,5089528984552966617,13721606690435017333,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=2052 /prefetch:2
                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                        PID:924
                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2056,5089528984552966617,13721606690435017333,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2108 /prefetch:3
                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                        PID:360
                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2056,5089528984552966617,13721606690435017333,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2544 /prefetch:8
                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                          PID:1416
                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,5089528984552966617,13721606690435017333,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3212 /prefetch:1
                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                            PID:2784
                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,5089528984552966617,13721606690435017333,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3252 /prefetch:1
                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                              PID:1452
                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,5089528984552966617,13721606690435017333,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5012 /prefetch:1
                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                PID:6024
                                                                                                                                                                                                                            • C:\Program Files\BlueStacks\HD-Agent.exe
                                                                                                                                                                                                                              "C:\Program Files\BlueStacks\HD-Agent.exe"
                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                              • Executes dropped EXE
                                                                                                                                                                                                                              • Suspicious behavior: AddClipboardFormatListener
                                                                                                                                                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                              • Suspicious use of AdjustPrivilegeToken
                                                                                                                                                                                                                              • Suspicious use of FindShellTrayWindow
                                                                                                                                                                                                                              • Suspicious use of SendNotifyMessage
                                                                                                                                                                                                                              PID:1092
                                                                                                                                                                                                                            • C:\Program Files\BlueStacks\HD-LogCollector.exe
                                                                                                                                                                                                                              "C:\Program Files\BlueStacks\HD-LogCollector.exe" -boot
                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                              • Executes dropped EXE
                                                                                                                                                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                              • Suspicious use of AdjustPrivilegeToken
                                                                                                                                                                                                                              PID:5612
                                                                                                                                                                                                                              • C:\Program Files\BlueStacks\HD-Adb.exe
                                                                                                                                                                                                                                "C:\Program Files\BlueStacks\HD-Adb.exe" "connect" "127.0.0.1:5555"
                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                                PID:5776
                                                                                                                                                                                                                                • C:\Program Files\BlueStacks\HD-Adb.exe
                                                                                                                                                                                                                                  adb -P 5037 fork-server server --reply-fd 596
                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                  • Executes dropped EXE
                                                                                                                                                                                                                                  PID:3916
                                                                                                                                                                                                                              • C:\Program Files\BlueStacks\HD-Adb.exe
                                                                                                                                                                                                                                "C:\Program Files\BlueStacks\HD-Adb.exe" "-s" "127.0.0.1:5555" "shell" "bugreport"
                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                                PID:5300
                                                                                                                                                                                                                              • C:\Program Files\BlueStacks\HD-Adb.exe
                                                                                                                                                                                                                                "C:\Program Files\BlueStacks\HD-Adb.exe" kill-server
                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                                PID:6120
                                                                                                                                                                                                                              • C:\Program Files\BlueStacks\HD-Adb.exe
                                                                                                                                                                                                                                "C:\Program Files\BlueStacks\HD-Adb.exe" start-server
                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                                PID:5364
                                                                                                                                                                                                                                • C:\Program Files\BlueStacks\HD-Adb.exe
                                                                                                                                                                                                                                  adb -P 5037 fork-server server --reply-fd 592
                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                  • Executes dropped EXE
                                                                                                                                                                                                                                  PID:1460
                                                                                                                                                                                                                              • C:\Program Files\BlueStacks\HD-Adb.exe
                                                                                                                                                                                                                                "C:\Program Files\BlueStacks\HD-Adb.exe" "connect" "127.0.0.1:5555"
                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                                PID:4656
                                                                                                                                                                                                                              • C:\Program Files\BlueStacks\HD-Adb.exe
                                                                                                                                                                                                                                "C:\Program Files\BlueStacks\HD-Adb.exe" "-s" "127.0.0.1:5555" "shell" "dumpstate"
                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                                PID:2592
                                                                                                                                                                                                                              • C:\Program Files\BlueStacks\HD-Adb.exe
                                                                                                                                                                                                                                "C:\Program Files\BlueStacks\HD-Adb.exe" "-s" "127.0.0.1:5555" "pull" "/data/downloads/.config_user.db" "C:\Users\Admin\AppData\Local\Temp\2teh140o.4v0\.config_user.db"
                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                                PID:5716
                                                                                                                                                                                                                              • C:\Program Files\BlueStacks\HD-Adb.exe
                                                                                                                                                                                                                                "C:\Program Files\BlueStacks\HD-Adb.exe" "-s" "127.0.0.1:5555" "pull" "/data/downloads/.config.db" "C:\Users\Admin\AppData\Local\Temp\2teh140o.4v0\.config.db"
                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                                PID:5792
                                                                                                                                                                                                                              • C:\Program Files\BlueStacks\HD-Adb.exe
                                                                                                                                                                                                                                "C:\Program Files\BlueStacks\HD-Adb.exe" "-s" "127.0.0.1:5555" "pull" "/data/downloads/config.db" "C:\Users\Admin\AppData\Local\Temp\2teh140o.4v0\config.db"
                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                                PID:428
                                                                                                                                                                                                                              • C:\Windows\SYSTEM32\reg.exe
                                                                                                                                                                                                                                "reg.exe" EXPORT HKLM\Software\BlueStacks "C:\Users\Admin\AppData\Local\Temp\2teh140o.4v0\RegHKLM.txt"
                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                  PID:1436
                                                                                                                                                                                                                                • C:\Windows\SYSTEM32\reg.exe
                                                                                                                                                                                                                                  "reg.exe" EXPORT HKLM\System\CurrentControlSet\services\BlueStacksDrv "C:\Users\Admin\AppData\Local\Temp\2teh140o.4v0\RegBstkDrv.txt"
                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                    PID:1388
                                                                                                                                                                                                                                  • C:\Windows\SYSTEM32\cmd.exe
                                                                                                                                                                                                                                    "cmd" /c dir "C:\Program Files\BlueStacks\" /s
                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                      PID:2456
                                                                                                                                                                                                                                    • C:\Windows\SYSTEM32\cmd.exe
                                                                                                                                                                                                                                      "cmd" /c dir "C:\ProgramData\BlueStacks\Engine\" /s
                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                        PID:1864
                                                                                                                                                                                                                                      • C:\Windows\SYSTEM32\SystemInfo.exe
                                                                                                                                                                                                                                        "SystemInfo"
                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                        • Gathers system information
                                                                                                                                                                                                                                        PID:6036
                                                                                                                                                                                                                                        • C:\Windows\System32\Conhost.exe
                                                                                                                                                                                                                                          \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                            PID:6024
                                                                                                                                                                                                                                        • C:\Program Files\BlueStacks\7zr.exe
                                                                                                                                                                                                                                          "C:\Program Files\BlueStacks\7zr.exe" a archive.zip -m0=LZMA:a=2 *
                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                                                                                                          PID:1020
                                                                                                                                                                                                                                    • C:\ProgramData\BlueStacks\Client\Bluestacks.exe
                                                                                                                                                                                                                                      "C:\ProgramData\BlueStacks\Client\Bluestacks.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --disable-smooth-scrolling --no-sandbox --service-pipe-token=18860E2DFE9BB3FFB97E2620C28A0209 --lang=en-US --lang=en-US --log-file="C:\ProgramData\BlueStacks\Client\debug.log" --log-severity=verbose --user-agent="Mozilla/5.0(Windows NT 6.2; Win64; x64) AppleWebKit/537.36(KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36Bluestacks/" --enable-system-flash --ppapi-flash-path="C:\ProgramData\BlueStacks\CefData\pepflashplayer.dll" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553 --disable-accelerated-video-decode --disable-gpu-compositing --service-request-channel-token=18860E2DFE9BB3FFB97E2620C28A0209 --renderer-client-id=2 --mojo-platform-channel-handle=2004 /prefetch:1
                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                                                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                      • Suspicious use of AdjustPrivilegeToken
                                                                                                                                                                                                                                      PID:1788
                                                                                                                                                                                                                                  • C:\Program Files\BlueStacks\BstkSVC.exe
                                                                                                                                                                                                                                    "C:\Program Files\BlueStacks\BstkSVC.exe" -Embedding
                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                    • Executes dropped EXE
                                                                                                                                                                                                                                    • Loads dropped DLL
                                                                                                                                                                                                                                    PID:5076
                                                                                                                                                                                                                                  • C:\Windows\System32\CompPkgSrv.exe
                                                                                                                                                                                                                                    C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                      PID:5176
                                                                                                                                                                                                                                    • C:\Windows\System32\CompPkgSrv.exe
                                                                                                                                                                                                                                      C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                        PID:5324
                                                                                                                                                                                                                                      • C:\Windows\system32\wbem\WmiApSrv.exe
                                                                                                                                                                                                                                        C:\Windows\system32\wbem\WmiApSrv.exe
                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                          PID:4040
                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Client\Bluestacks.exe
                                                                                                                                                                                                                                          "C:\ProgramData\BlueStacks\Client\Bluestacks.exe"
                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                                                                                                          • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                          PID:5588
                                                                                                                                                                                                                                          • C:\Program Files\BlueStacks\HD-Player.exe
                                                                                                                                                                                                                                            "C:\Program Files\BlueStacks\HD-Player.exe" Android -h
                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                                                                            • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                            PID:5824
                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://t.me/+OSK1WzQG8_5hZTUy
                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                              • Enumerates system info in registry
                                                                                                                                                                                                                                              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                                                                                                                                                                              • Suspicious use of FindShellTrayWindow
                                                                                                                                                                                                                                              • Suspicious use of SendNotifyMessage
                                                                                                                                                                                                                                              PID:6116
                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7fface843cb8,0x7fface843cc8,0x7fface843cd8
                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                  PID:5304
                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1992,2927719964185223827,15280353711303162757,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=2004 /prefetch:2
                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                    PID:1268
                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1992,2927719964185223827,15280353711303162757,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 /prefetch:3
                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                      PID:2924
                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1992,2927719964185223827,15280353711303162757,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2808 /prefetch:8
                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                        PID:5872
                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,2927719964185223827,15280353711303162757,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3344 /prefetch:1
                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                          PID:764
                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,2927719964185223827,15280353711303162757,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3368 /prefetch:1
                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                            PID:596
                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,2927719964185223827,15280353711303162757,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4984 /prefetch:1
                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                              PID:2980
                                                                                                                                                                                                                                                          • C:\Program Files\BlueStacks\HD-Agent.exe
                                                                                                                                                                                                                                                            "C:\Program Files\BlueStacks\HD-Agent.exe"
                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                                                                                            PID:5528
                                                                                                                                                                                                                                                          • C:\Program Files\BlueStacks\HD-LogCollector.exe
                                                                                                                                                                                                                                                            "C:\Program Files\BlueStacks\HD-LogCollector.exe" -boot
                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                                                                                            PID:5972
                                                                                                                                                                                                                                                            • C:\Program Files\BlueStacks\HD-Adb.exe
                                                                                                                                                                                                                                                              "C:\Program Files\BlueStacks\HD-Adb.exe" "connect" "127.0.0.1:5555"
                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                              • Executes dropped EXE
                                                                                                                                                                                                                                                              PID:5688
                                                                                                                                                                                                                                                            • C:\Program Files\BlueStacks\HD-Adb.exe
                                                                                                                                                                                                                                                              "C:\Program Files\BlueStacks\HD-Adb.exe" "-s" "127.0.0.1:5555" "shell" "bugreport"
                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                              • Executes dropped EXE
                                                                                                                                                                                                                                                              PID:6432
                                                                                                                                                                                                                                                            • C:\Program Files\BlueStacks\HD-Adb.exe
                                                                                                                                                                                                                                                              "C:\Program Files\BlueStacks\HD-Adb.exe" kill-server
                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                              • Executes dropped EXE
                                                                                                                                                                                                                                                              PID:6520
                                                                                                                                                                                                                                                            • C:\Program Files\BlueStacks\HD-Adb.exe
                                                                                                                                                                                                                                                              "C:\Program Files\BlueStacks\HD-Adb.exe" start-server
                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                              • Executes dropped EXE
                                                                                                                                                                                                                                                              PID:6572
                                                                                                                                                                                                                                                              • C:\Program Files\BlueStacks\HD-Adb.exe
                                                                                                                                                                                                                                                                adb -P 5037 fork-server server --reply-fd 568
                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                                                                PID:6648
                                                                                                                                                                                                                                                            • C:\Program Files\BlueStacks\HD-Adb.exe
                                                                                                                                                                                                                                                              "C:\Program Files\BlueStacks\HD-Adb.exe" "connect" "127.0.0.1:5555"
                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                              • Executes dropped EXE
                                                                                                                                                                                                                                                              PID:6708
                                                                                                                                                                                                                                                            • C:\Program Files\BlueStacks\HD-Adb.exe
                                                                                                                                                                                                                                                              "C:\Program Files\BlueStacks\HD-Adb.exe" "-s" "127.0.0.1:5555" "shell" "dumpstate"
                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                              • Executes dropped EXE
                                                                                                                                                                                                                                                              PID:6760
                                                                                                                                                                                                                                                            • C:\Program Files\BlueStacks\HD-Adb.exe
                                                                                                                                                                                                                                                              "C:\Program Files\BlueStacks\HD-Adb.exe" "-s" "127.0.0.1:5555" "pull" "/data/downloads/.config_user.db" "C:\Users\Admin\AppData\Local\Temp\fuq52mq0.0d1\.config_user.db"
                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                              • Executes dropped EXE
                                                                                                                                                                                                                                                              PID:6820
                                                                                                                                                                                                                                                            • C:\Program Files\BlueStacks\HD-Adb.exe
                                                                                                                                                                                                                                                              "C:\Program Files\BlueStacks\HD-Adb.exe" "-s" "127.0.0.1:5555" "pull" "/data/downloads/.config.db" "C:\Users\Admin\AppData\Local\Temp\fuq52mq0.0d1\.config.db"
                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                              • Executes dropped EXE
                                                                                                                                                                                                                                                              PID:6872
                                                                                                                                                                                                                                                            • C:\Program Files\BlueStacks\HD-Adb.exe
                                                                                                                                                                                                                                                              "C:\Program Files\BlueStacks\HD-Adb.exe" "-s" "127.0.0.1:5555" "pull" "/data/downloads/config.db" "C:\Users\Admin\AppData\Local\Temp\fuq52mq0.0d1\config.db"
                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                              • Executes dropped EXE
                                                                                                                                                                                                                                                              PID:6916
                                                                                                                                                                                                                                                            • C:\Windows\SYSTEM32\reg.exe
                                                                                                                                                                                                                                                              "reg.exe" EXPORT HKLM\Software\BlueStacks "C:\Users\Admin\AppData\Local\Temp\fuq52mq0.0d1\RegHKLM.txt"
                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                PID:7104
                                                                                                                                                                                                                                                              • C:\Windows\SYSTEM32\reg.exe
                                                                                                                                                                                                                                                                "reg.exe" EXPORT HKLM\System\CurrentControlSet\services\BlueStacksDrv "C:\Users\Admin\AppData\Local\Temp\fuq52mq0.0d1\RegBstkDrv.txt"
                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                  PID:764
                                                                                                                                                                                                                                                                  • C:\Windows\System32\Conhost.exe
                                                                                                                                                                                                                                                                    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                      PID:4656
                                                                                                                                                                                                                                                                  • C:\Windows\SYSTEM32\cmd.exe
                                                                                                                                                                                                                                                                    "cmd" /c dir "C:\Program Files\BlueStacks\" /s
                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                      PID:5820
                                                                                                                                                                                                                                                                    • C:\Windows\SYSTEM32\cmd.exe
                                                                                                                                                                                                                                                                      "cmd" /c dir "C:\ProgramData\BlueStacks\Engine\" /s
                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                        PID:2792
                                                                                                                                                                                                                                                                        • C:\Windows\System32\Conhost.exe
                                                                                                                                                                                                                                                                          \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                            PID:1020
                                                                                                                                                                                                                                                                        • C:\Windows\SYSTEM32\SystemInfo.exe
                                                                                                                                                                                                                                                                          "SystemInfo"
                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                          • Gathers system information
                                                                                                                                                                                                                                                                          PID:6156
                                                                                                                                                                                                                                                                        • C:\Program Files\BlueStacks\7zr.exe
                                                                                                                                                                                                                                                                          "C:\Program Files\BlueStacks\7zr.exe" a archive.zip -m0=LZMA:a=2 *
                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                                                                                                                                          PID:4420
                                                                                                                                                                                                                                                                    • C:\ProgramData\BlueStacks\Client\Bluestacks.exe
                                                                                                                                                                                                                                                                      "C:\ProgramData\BlueStacks\Client\Bluestacks.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --disable-smooth-scrolling --no-sandbox --service-pipe-token=CB0492FBF3CB093ABF92C5F710A7AE4A --lang=en-US --lang=en-US --log-file="C:\ProgramData\BlueStacks\Client\debug.log" --log-severity=verbose --user-agent="Mozilla/5.0(Windows NT 6.2; Win64; x64) AppleWebKit/537.36(KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36Bluestacks/" --enable-system-flash --ppapi-flash-path="C:\ProgramData\BlueStacks\CefData\pepflashplayer.dll" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553 --disable-accelerated-video-decode --disable-gpu-compositing --service-request-channel-token=CB0492FBF3CB093ABF92C5F710A7AE4A --renderer-client-id=2 --mojo-platform-channel-handle=2000 /prefetch:1
                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                                                                                                                                      PID:1352
                                                                                                                                                                                                                                                                  • C:\Windows\System32\CompPkgSrv.exe
                                                                                                                                                                                                                                                                    C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                      PID:248
                                                                                                                                                                                                                                                                    • C:\Windows\System32\CompPkgSrv.exe
                                                                                                                                                                                                                                                                      C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                        PID:5828
                                                                                                                                                                                                                                                                      • C:\Windows\system32\wbem\WmiApSrv.exe
                                                                                                                                                                                                                                                                        C:\Windows\system32\wbem\WmiApSrv.exe
                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                          PID:7048

                                                                                                                                                                                                                                                                        Network

                                                                                                                                                                                                                                                                        MITRE ATT&CK Enterprise v15

                                                                                                                                                                                                                                                                        Replay Monitor

                                                                                                                                                                                                                                                                        Loading Replay Monitor...

                                                                                                                                                                                                                                                                        Downloads

                                                                                                                                                                                                                                                                        • C:\Program Files\BlueStacks\BlueStacks.ico
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          344KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          63251c717d9bc1e5fc6370671f38eedc

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          887b3e52ee48f304bc8626a7b296e4b163379c64

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          5947201ed9206281d8e6e8b46bf562c78d3c9ee1dd74c0792df18eacad04eae6

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          2ce0f02da6fe4f921755c8090c6df216515d2de97723b5b62555beffa9b1e0f0298bb03bcbf68b775953b0f3f716f33915773237bd099daeedadefc32060a64b

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\CefData\Cache\CURRENT
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          16B

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          46295cac801e5d4857d09837238a6394

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          44e0fa1b517dbf802b18faf0785eeea6ac51594b

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\CefData\Cache\MANIFEST-000001
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          41B

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          5af87dfd673ba2115e2fcf5cfdb727ab

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          d5b5bbf396dc291274584ef71f444f420b6056f1

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\CefData\locales\bg.pak.info
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          378KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          86abbe39a0ffe4e221c459d98a409765

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          7ffa8bea41bb8c7b8f958681ec097556320d5482

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          81aca701fd815152b02b60d814f5df72db4a70f43475b8bc97aa1af5851f4652

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          66b6a6f8e7f7d857a353244d372b684886830e902cf81678dfd2b8977f1007af0596e94d27e27c930309cf12b14cf1f1af0f292e7da305c58a44f9dde0e5aab0

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Client\Assets\State_canvas_active.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          4KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          f2737f2d7642219398a511e00f2823a8

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          890feadb31915381fe8c959011a4fad8842e0bbf

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          d9e4c1b2d4d0fda42ca2eca37351a84ad5dc4e22e405644c5e8865b96db43ad0

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          6710261ad2b704de2fe9fcd0a2a569639b180dbd90a7838c40d5d9f1b94adf114f98ccadcc80841a16dcd3b3412bef7e353111c5a1ca20df38c8a03ed87c52ef

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Client\Assets\bgpcheckbox_hover.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          176B

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          86852b8d52fcab9b23e5ecd2345cb28b

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          902805a9080bf9a2dff8ea69d228ca8216853407

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          c0f7f6b9b95a5463258916afd1337e2ca49a8c69a20e843c629db8065a00e68b

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          476a90a0714701702ccc59ac0b1555d7a75f7665e6067422fcf389195f625ca5b308627059c0dbb786565a773ce643737923456b176a5e77f210173248d19585

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Client\Assets\check_box_checked.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          3KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          02ba2274e7ec8e9eaf586a1c85850df7

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          29dc336722e9265a693cbb228be22f3ea066ba7e

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          5d4d7849cc1f74c2e717582ba878fc67e4c7b207e215cdf57469460c29486c4e

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          3e0e1626e46738bccbafd18f307e6ddaa2c348573ff2cf920dddad4f4f5787c7ac9138fa9bbee814b49faca3f64aaf05eb029be5923459d71a22a421ad348e38

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Client\Assets\close_themedisabled.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          447B

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          b09525b48c0023f893d6b64d06add4b1

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          10ecd439ea04e02eefe17f6c110d0c0a78a1db21

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          caa2a8fe9b282939a21b86f8f61fb0c9452222cc3409f06cbb0dcc45613aca8e

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          c6f5a7014c24133eb576708ca17d15becf2b45ec278b3f94e5275e47c78cf0f2eb8bb1a17d277d1a665039f38f2e25faf830e275f426b0a94c6a3da096b6204f

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Client\Assets\collapse_click.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          362B

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          68c072e8aabe82847a71e16e67f385c7

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          807cbda180a12fe8bca35121f0de5caa0f3478c5

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          b03e51a5c7efd136df2abb5d3951cbd6b23d94fffc49c6b874d26d92b33bda3f

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          c28b324636524b2759b60224cd47f8048cc0d34b5b0419154e13c328121209d2ff249b2f5f9a5c3a8259a90f814758a2e6923ad3a5382af91b2c993b2f46e71d

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Client\Assets\community_macro_hover.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          878B

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          dd0e78fe679c83de3615d528e94c8349

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          cba3ea57dff18be49b4e7a06877bbe7df4f9b526

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          10251657ccbf320a64f1459df0958dde2b795d074dfdf56e163559691440267b

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          e4fe351eacd447070eb6457f945aa330c56e7a04ded5b5ce2562827ef15d7cce6b566d0d64759c457089868e5a66ab0b68e18859d63d574efbe58a9de4979bec

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Client\Assets\delete_icon.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          327B

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          401e09c16308cec53665b47cfec88d04

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          9f74de57ba786221cbcd9219199c769754103ff2

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          428007be308e2ede2e18d5533fd1e7dcef22956972c5a6a2061a816c3a9f24ea

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          51a81aeb8f2a906ccb8a15cc6341d790d2dacf08ce078f14de2c30e931c1463a6b05bfe0fb86e1401188923f15c64cc5cac9b4c43b5fe382ef4f625ab5bec9f4

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Client\Assets\download_hover.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          264B

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          815f05c30ece71a90419755e9febca06

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          761dc1a275dd5ede73e660b3150459ffd65a405c

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          a469c4b81805e3a890a1f574fe0a6cd9941a46ee2efeb64fd53461362f0a94a6

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          e832954f9505e49ff931b11166e1d77d3e921d0606974f66db39b5e25d539b9ca2700463e766ebda0cf0dacfe67d1c336125cb1864bc55a44263447bb2cc79b6

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Client\Assets\duplicate_hover.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          2KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          3bdf1a56f7553f5ab655e4920333a361

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          5100ad8b1e54ef5eaa485382a5ffeffb818d1b8b

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          7adb8b5b1d59047f9789256467ff1bd2b0dcc484d9405e632fe55d8ab436963a

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          08ff42dcf1bb2ba402fed928042a62caaa938f0f2f739e67b1826794d46306a257f43540cac316fddbe19ba30c8012bee1fbe6daf568bf252fbff83ef816341a

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Client\Assets\exit_close_hover.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          447B

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          811b8372e36c83b5afa8881cfefe1693

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          dd30b446490a9db7e9089816ba92560c4a76b12f

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          5674b440c16fd138d6a5b9bee0adf1399bdea98e15c3fec32cb90b6be3487748

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          f7d5cc6b97ddd98035ee023a2736b45e3de5e77f42f97132f9d4585d03203338c2f625f6016294a747ba3f98e6e2c2b79711b9b2c8851be0bb7db8479e6734a5

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Client\Assets\expand_hover.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          408B

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          9a792a44d59738e73eb43cb8090da07a

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          8e52d33293856d25ef412cd151b646f8dd4c3adb

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          13c1f6191a0dc09ae3d664d6db525ad2b5c2fbe908b9ac6893fd4ec8a6d47ce7

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          85bd62ba7044e438f678cb1a2d81e1d622c27e89a16a1c5bb90a5c51884b524bf1004245d6398178e375ea9d4db946f7de158b1ebcf6811a8d9989121bfb11c7

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Client\Assets\guidance_controls_hover.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          2KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          cc34b35a8b4dd5ef545bd30cd55bd6da

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          7a636e9b961fada70e48ef985409a79c787eb809

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          7752a271921f6282d566d90092303e0243ae2614fdc5a5a04f2b1c6a2f8e063a

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          2aed893696979e94b0d429f83195a5f1ee5f1cf5e054d76ade8c94690331933d0a3553029a2bf2d51e54200120972abb62c612d8483601f4bdd612ec3cb5078a

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Client\Assets\macro_delete_hover.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          332B

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          c6baed75b85d538498c0c5b6a8b6ccb3

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          a8bda4785bd9bfe0f19fe3123af93b0ebebbfe97

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          f1e184b859ed98e24bc88afc22dd34056f227b5e4bb89d020243f4d0b89c0f1c

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          7cc2685903e1366201771c46a0459a4f041be6a986928f7147ec351541d53d4881da2ebc81459095f9412e2ce7abbd2c39259d7894c448396ad6d86fab735593

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Client\Assets\new_hover.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          231B

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          b6a41a0a4749aa39a636799b4ef6fd80

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          5a12435c76d064dabed61c8e637f794f1ff7e3e9

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          9810a9b84034e55ce699fd199bbd5ac7577f6f00c6d31e75587827f6d4ef1f3a

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          d7679841679488c4e9fbd2bf19f5b221eed876f8af3dda5b4dec2cd380a6fc06f9b4327287dde536002d1cf0e8edfff1137c382b6dd0ea1f75989bd0b3902a72

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Client\Assets\play_title_bar_hover.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          426B

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          8e5aa751addb481df985d4f825a7aa51

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          56e0c64dc343c8d2c345be4db3eaadafbf90c5ac

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          629f979db00cffa4db1e09b2e75ec28b493c534218759a6be0c0777239887540

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          bb6b2609b3fd689e466e834a39675f77f248b3a67c011eaed58c28ff8d929c3e36bf264d728255fe0c01c735ec0d3707a99212d40a11b573558104a3d434f9e6

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Client\Assets\radio_selected_hover.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          577B

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          47ff3e4cc15b8c4a07e3ceb6cb619b62

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          0318e54c613b8ff00f54d843e90ef88310c1a96f

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          4786cfb7c98edcf01d6b670abf19c50891d56a4de87b96a5e17be142b1af666a

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          0212bd7f6cee390d3bc221a22189b75407fa660a0951c7f768645bf97e7b61ee86fa9b1de6f546ff1151560dcb3b071db8c14a7b08b0e771b539a817b31b154e

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Client\Assets\sidebar_back_hover.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          3KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          d0d1fdfe23a4b21105f136f16615cc12

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          384d5b4e63068aa93d7996b0d0331f4622a3b7f7

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          f8fd09e927c3e45ddb8f3aacbbab410fcbeecd823046e79a23b4345fbd61f6ef

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          0e716720481fe31d26081c6ab84e9bbfadf921829916454f50e66c9dee4e055058283b08d3c64ede98223cd7ca42ff204cb3cc1bad66802d103a26f9c55c00e1

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Client\Assets\sidebar_gamepad.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          416B

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          b4920dbfe069354c44c1b181e3e2532b

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          d2623a63a3f3d9560f4fdc712395c59be0cb115c

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          df42b2067d58699704e63de1def5461d9b925f8d55c308c74fc428ccad8b33d4

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          7b66d1f0d2b86f959f04cd2e96d5afea6f4fd2dd3c57341e29c24af949dc22d374382425fbacfc56ca7ff94d709244d3ed3d79f12693c47c849bb246e14869d7

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Client\Assets\sidebar_overlay_click.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          3KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          560f217a0e8d0a61281eecf2a160bb8e

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          23b2dec69a178fc32c6a481bb4251312ec2a0622

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          33545e2a207b6e61d42f670b9d2dd8bf72435b97f526f03ab629dbd92f2a1951

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          bc271158b416669af011bc2259f0bf749f18f2e1a6017bd8f1e6dd92e881fa505d154a67823c76df94b25ad7b454db7922c441ecffa641be0e9c11448c05fced

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Client\Assets\sidebar_overlay_inactive_hover.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          3KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          a1cd96fdc5254246059f022c56d7f0b1

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          c3a4bc9ade8dcb1a0a686dd492cb2e6ac20e0b3d

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          d0e5589c25a2499940e833300c38e7d9fb696d1f554bd79a097154a9ae8ae064

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          13fe04a090b28e7fc9398b561243e44d542707324c5968b24d0829a9bb1ad77b38c3cf253efd7a500f8161542c568d3a04877d28bc1a81a73fdbb388bbde47e2

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Client\Assets\sidebar_video_capture_active_hover.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          669B

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          add11927be4ed2f7926e558a337bc57e

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          bc41132fe54f1422d9937f5fdebe723cca966499

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          b9cafac81124c06389f5d1f68f63137fffc5126502e30ef91995bb3a85a5130e

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          23fe6e9fe176a61b14e9f908d72d57e42136df2ad03723e022ebd710414f11b8deb9e58e49c14018d8f9743a07e92dc619fc9af696182955df7e4b8dd9199557

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Client\Assets\sidebar_volume_muted.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          675B

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          ac900934a86f30e61711782c4ef36f7f

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          bdfc594aacab0d0c77e812394ea95c1a5912eb06

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          869f94a90af5cfa54e63a58b5a6a1166ae2b698dc94ec34ea817071b1c9cceec

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          1aab61d67257cdf444a44019636034ccee98a6795f89bf583b8d847c8dec77e6812cb7b86697c86b2aa30e2c6b311d5e1ddb3ac31d20c9b7aa2555b21029891c

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Client\Assets\sidebar_volume_popup_click.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          828B

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          d5d82af94f84658f8711258812cedb98

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          6f6bc31cf822ca1ac46b0d80bb1a33f55c3bb75c

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          ffbb23a92e46bc255c7b7125e7ed1118b658022e67c4068d6cd4e15ebfa65aee

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          6f723a8da0fad777e6300159e656f1935bbc2a39755d00c2eae1198c3858e6cfe9d84bb71261753a5a85c03a0c9931e79294315814e2bf9e83752d2bb00b2cba

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Client\Assets\stop_recording_hover.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          243B

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          358e8660f22df5d09f1e95783ed954fa

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          bf648ef342afef644d0e1853f41765ce1a440ca8

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          d2166287318755817648cf3bdbef4036034a7ffe6ae3233a59a39eb238ae0245

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          e78905af44a5a418d11101d69df6a3602d261130f8b6b89c046fbeb52f3d1e2c3fc9140a4b8862708523cd48fa6c266e0bf3552ea1163b68dc08fd56750d5faf

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Client\Assets\stop_title_bar.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          255B

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          b04a33e0f839e242a8f19ff8c8b4739c

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          b8eeec5ecaed1e0277df0f7c3cc20553fbeb50c0

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          57a4ffdeaa6823c3d8f16faa5ec4730c28e3d9ff9c210f17acd23a6e8fd66198

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          b4354506ad42583e49d57caaa75014f47e1ef25ec0c51ec6bd6f0a6cee3404f0f3ac9d850a1e123d8361df7417d9feb31bcb14a9dedfe84b4a97a81c8bca1e60

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Client\Assets\suggested_icon_border_click.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          2KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          c0220fe8de167d5ed194508305051aa3

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          e0da276affd90c1c8ada0ab3a77ee7510f41b9a8

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          30672ccefed0369381ef3044e9e509515e95e336a1eddbcd8df41e6df1e75c1c

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          504fcba3172b59217ba72d436c2a9acc280f9f983b3c6025d02fb7d6822e14f7b4f51968450eac8a55c7ae7aba4cca32d328883f3a40278d54b9227b41d4ff40

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Client\Assets\sync_titlebar_icon.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          858B

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          489a3e37a23b36c1342a0225820295a3

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          c0df77a0cfb9591ff73e126abba422f1279434ad

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          102058b5560d0b1d3d7628ad89b5fbfa07905b8e1cbda142ca674482ff44eaa9

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          479dc1b7f48c263708d33c31b068ae6f78cb7a15cf98a03f936b23a4efabb7e2c21a26c538bf7b4253c936b6e265c0c0381d8ae8a9348a800c34ce1224a95a92

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Client\Assets\unchecked_gray_hover.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          176B

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          62d7f14c26608f8392537d68f43dece1

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          add4f30e7c3af4f7622e6bc55d960db612f3bb0a

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          a631e26bd5b6ea19c8c65b766a056c92ba8a47e1483768dcf12b05293c9a7a0d

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          e41210a78e6076954f75a2f73c0f7628e8604a09ecbb1d2ee0972741d4ef1d814b366828977c02944736b03ed116bc559a2ae47ddb7cbc6f4e54578c8263edf4

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Client\Assets\volume_switch_on_max.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          1KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          7079ce677003a2609651623ffc395a3a

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          a8c172ec2d96eab53f6375839d14ee9a6b9c5d13

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          ca51bda8932f92a18e16fb8034f1caa5b45c8170f44cc221fccb4d53a93263c7

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          95d52c1050a201f103b1d57d6a6f01b6d7fe70042d9d07cd38b5241c841e17ea883feffa5ae166331aafd14f9ff42ae4bc610edebd152aa2eeffa2480450e8fc

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Client\Assets\zoom_canvas.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          25KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          422ea917894608edd7e04e4b1c48e1cc

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          8b11143856348fde0b0944083040881463e8b1e9

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          a3de7fc3bb3120c169ce97258a5e1088e169b6d039e5de69f1dfae1a278987a5

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          bd5fd40315b321f2ae2fe4782b1155e75d7ae38d2497e72798a1a18873dcc00c6e6741e74ade787bbce967aaf7b0e8a42821cb124980dfc2fdba99eb08aa39b3

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Engine\UserData\Gadget\req_trans.json
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          2B

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          99914b932bd37a50b983c5e7c90ae93b

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Engine\UserData\Gadget\req_trans.json
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          772KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          786934352bdac35045065ce33dc24e5b

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          f2ac6c6d821025046b8d6df7e8c7b4ecfb85c6cd

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          d675cea0c29a947fa39e3938c02bf94780c46058b1ec05774e45fdf079366614

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          777873b56370a31d0dd4d8fdcd70fa68d7f64a38842b0b4b30285080e42a0d5bf57cb2e9d75c9c1a48cb2ad8838113044b1df52ef6fbdf5cd71b24d6b4a7e5ef

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Engine\UserData\Gadget\requirements.json
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          4B

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          fdaf133263369980df600fd06ce738ec

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          a0b6262ba8cbcec6ff4deaf819c552474b6f8f2f

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          5cada29124805d8e0454dc5b67225bbf87075cffd53418e9c56f674708220e2c

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          890f0df02a824ef9c2cb3c7f9e63ce74846524d8a6c6ad0c6e17237fae087548fc40cde6c54dcd1e4b780c0f05930a6c0ef042b8036f076a0983bf5259fb6056

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Engine\UserData\Gadget\requirements.json
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          3.9MB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          f7fa048e0959d8355ec3f805036a80a5

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          d67e799e3ba57b1d43f19dd75f278790fa3850e6

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          f9da6cbd3c89f750193cc4191eb41a7fbc2df20f173787ec93b19576b6c1e209

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          25ec7a158fcfff0b5c4b8e88d8de0744fa9a2ce86b07ae61db0a0107aa35901353fb5dea9e63fc4c2b115aaf2a207f3fb324d40632d535a66ecce74cbf50f2a4

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Engine\UserData\InputMapper\com.diandian.legendofhonourkr.cfg
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          10KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          d5f51f3556e6592bf4419a7c0aa2da0f

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          c54b69931b886598f1a16b433b885b00e8b8af23

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          a6e96edbae293953272a98c1ed9a9dbf7da42a94d99e511e9f5ab93dda2d068d

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          6c790ef6543cb08fc1d27a1302058d2c4f8385cbca653227fe0f4d77e2a64d3f8a320010cf128e8f0a7ca32de83ad9c387d7d426adc26af1fb911d467b8266a5

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Engine\UserData\InputMapper\com.ea.gp.simsmobile.cfg
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          2KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          390c619d4e0d624360c253556d9b10a9

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          da0d73147fe03f7618785115520318663f25ef93

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          6aad8ed62ca50c98bd95f67dbe20f1797f9a3a6f70e2c3c85d01723cd1a10da4

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          5c84dd8610a901a2c45e026ebc3457368ce279d647123f8cb986090f168306958e2e56f51fa6f1e89678c9b6e07c52a4f2113a101eb578e288d73d099a69e3fc

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Engine\UserData\InputMapper\com.garena.game.kgtw.cfg
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          32KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          91f47bf05da9e03f616e7164988019bb

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          81ccbb739123f4a0984d8968989036efe27e1739

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          7a8bd825781732091842b27685ae6b68f954535ed9732c8c8624b1245edc24e3

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          2a9894d90c5a13bf58d0189c0f0b5470a9ebc6d2108e0fbc5adcf1b79fda557f40f23ff43ea0bf4380a6dcc538018082cf5fd05fc2e62c64eeefdd813dbe81c3

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Engine\UserData\InputMapper\com.heroesofchaos.ggplay.koramgame.eu.cfg
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          5KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          0328ee723d179d503149dce44edb4cca

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          3e1b6fcb4f31aa8df63bfb59400c69bc8ebe9674

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          2262df9f6c0f25fe9fa97575c73f30ae96a8c1e9db79d8172a225f0522e5ab1c

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          688e3979595460fa844905452e4fca7a8a61230be1d71bada89da1a51e465fe6e14132381fba230c0a4b7d97c1f816b40bd2c8f19965e4f46466e61016bea3ce

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Engine\UserData\InputMapper\com.igg.castleclash_fr.cfg
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          2KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          9346c5858c1e1ce56cd918e9cc2831aa

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          ecaa89358e7f8a8f21ab7bbe2cfeaffff564346b

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          d417b9c7b8f304665c97f89a6a87f7a4624c9a3068ccc64065fdbeb7598d2ab8

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          3e83f64522c5ea2ffde8de5a93fc9b0083bf69c99d39fee6020edf7b0939647566903ceb82fb33a665e25f7d40b1434b100cf876a3248baa82d55e2b8aba8d13

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Engine\UserData\InputMapper\com.igg.castleclash_pt.cfg
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          2KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          55597330ce6c2225b7cc1294158dc3ce

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          f308a5ada00e3d62e713e1b872663842fa97e6f6

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          a024e38ee01bd842a02a26b515c0f7f0a0495ffeddb8eba5b150a2e9e28f5917

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          f903ad3d6b26536aba872397b554960913bc71432c46fd1814dd4c9f8d1a4602e50f02f096ef00b49fde0487a6cad6370e97f842adfa055f12d626e26723db2d

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Engine\UserData\InputMapper\com.lilithgame.hgame.gp.tw.cfg
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          11KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          0d3922c2c6bca783f1bb35363e947477

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          9766239138fe896c88d0e82b8864c625b3519813

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          2e42d2440ee55a29bf69229006c62593a00a0e476656607bf0804bb2440acd0d

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          0f876f662673c473f03a486c014be87ca0b261985a0d836775778783125b742610f30729cd2fa60b6fbf70de8f2063c66c4e162c9b1e0894cf514465f23bf9bb

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Engine\UserData\InputMapper\com.miHoYo.bh3tw.cfg
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          8KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          80464c1dc6cdbbd96b434fc98c6b3f79

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          3180e61de5b6a4c0441d1a44f8e47625096165e7

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          38b3e985ced7021182d65ea8b0f027924fe5cf1f1fa0fa648fdcaf1fee29b929

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          612e8c11ea515dfa3ee5dd6eef7bd9fdbd29b082d23cbf9e5b2bf200f5b9cc21ae416e2d46091d1ace6e5cb4b29ea6ab99b1523a020255253127ae8342c18a1b

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Engine\UserData\InputMapper\com.tencent.tmgp.kr.codm.cfg
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          140KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          a43256aa943aad85b37a68a2890835e1

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          f53e5e1e3200addb558645a5cd7e8627893a1da9

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          b440b45fcb1a44bec2c5dffdd0afaf4cf9aa4f7c1a12021b3212312288d29fff

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          8bcd1105414f5fd91c79cc9a7d50238a5ab382a33dbeb0bf94428fc7335e20a64ea694642fb1fd63236923f1a07d2edf4c37279602adf87789be8cfab0456267

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Engine\UserData\InputMapper\com.tencent.tmgp.sskkr.cfg
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          11KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          6b158d56f8714987a8fcacc66f184d75

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          4f9f0fadd1590978edd81b71748d62dc0745e253

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          a0497961c46426106d8f027c7576029b018c6efc58effbc40866e56952a56be4

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          e0f73a1481d19ab0c104a3408ef766ce66786d77c84eede4eb0d6b512fec3989156d2c5ccba2585a5f9228251e32f2f1e7892e29d8e10cc41da7bd9653357460

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Engine\UserData\InputMapper\com.tinyco.familyguy.cfg
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          2KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          4d35806934f0d246822e3efdb2cbb49d

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          580b93f0c59fed4c166793d0f9166b26c9e31e12

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          9e07436abb891b22fe6b05bed5f072eb540603111a29fa548df40ee40378fb5c

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          7054d8729cb340de6bb212e573c13f12531fbe9f6e776841af3d7b36b7fb7c342fe953ef815918c9aa9b07bac614b688bd1d9e87a937026e0e56f60d44df8007

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Engine\UserData\InputMapper\com.vng.pubgmobile.cfg
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          68KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          5f991cd4e3e10f300a705ae3dfeaea3d

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          02b39cdd57b7e984fda4b5e81e32c4542219abd8

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          12f20a6d9fd993e332f776fbad981681799c8120d2b2f84c1aabfa7b0b520bd8

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          a8d964c0643b6606b7867144bac71e3f2f8dae7bb98eafda81f5bc35d19c80b2b53606fa4c01a0294f14b5b1075e89d64a5354e645914a90bee38837b5a1559f

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\ProgramData\BlueStacks\Logs\BlueStacksUsers.log
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          24KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          843ddf6c2b804520afafe286ab6eec48

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          77aa811f9a60d61d32a50a9c89ed8a04412a9ad0

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          1ef8b1a2d3e2e4cc1ee76c7c3785cb915df323640823c980d3f7c2f90cfd1000

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          3cf06383493e20735a50d50c69a42e7bdaab4508540344b03e9b171dad17aa9d6233240343498e1f26149bd60ccc1656b6369fa399f74b3d4c6bab5040b9ecbb

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Bluestacks\BlueStacks-Installer_2024-4-25_4-8-53.log
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          74KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          cdbf2fbe012289fe0d5eefa2a7e907c7

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          47092cdb2cf862051905cc74fd0fee1686981ec8

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          4ac70f4d0000e03117aa342b7b2b451c16f94901fc3e69b63ab19e7b5fcae1d3

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          0c076c9c253ab9ae8db3e7862ab7b7ff0eaf69a92ca32a368f99a3f2342aa594dd4f64808cf81c929de07e38ce305a4115a9b5c2850ff8ded0e50a11505e095c

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\22cb6047-813a-4e60-af38-c5a69428e893.tmp
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          11KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          c5d308d02b7cc9b19b36bf389bc546da

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          e4673817200624bf0e1a9f5c3614cf556a542c00

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          6a0ecf6badfe9f6088cbbd5d9f950ea8f045303bd1b21b99e2d1abbec4a511d1

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          721be9f84d0a8542eab2194b797d3cf17901088ff1755a25f247f5456ff6eca9e4d8daaa11188ef7dd89a3fec995605ab17a3ce5925d1460926e3c3dffbe995c

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          152B

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          493e7e14aceba0ff1c0720920cccc4a2

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          468f39cefbcf14a04388b72d4f02552649bf3101

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          a0dd32ed60115f661a4ca537472e0d4e230ff844d56a3db766299cf4cd817842

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          e16c748e4513ea10bf7124cef7b50dc5f3a1802205af9228e0c33fdbf3c24286739db08db4b813079ed7cc36be43d7457f4c26f00ae3126a2fafd77d2696107a

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          152B

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          57e5c5a9236321d336e2c8ce1eeff844

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          8fd4288af72ba3f7a0ecc5583a9265723fefc096

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          ae6496cf397848bf3139858deaf567e3df991bab5a7704a0fa7aae95474872d7

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          bc3f24afe6ce0494022d8201a01a60239ac5cfee54e0650a337036817056424b418cb636d58d07e5034dffe2226906202b56509e4cc07562c0b60f618c420080

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          152B

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          b9c67273f20a0b1e5436576a8e6a4b73

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          9f35a0d67f0e09db38757aa7e5e8549f23384e5b

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          c21d760acd28a13642e4c19ddc04b8aa2f379239c1cebe7d96dbd32d878396c1

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          2578ddeb8385482172fce48cf8f101a8d9ff036aeb0d75cca1874e748d7b8b1804e5f8a337f2cd7ef1233bfacba3e5b4cb4926cd8fe7c4ae2fa6f758d2584001

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          152B

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          223cbb21570960be224deb5337232496

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          967ba0a55f8fe0e8443c92ee50ec2e4c624ea127

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          33957f627633e2ebe632242ab43326ff0c50f760e0e9b1f6d42142696dd0fea4

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          dba9c56e451e157c64a7d55a520184eae57ecf7cd77837d08b8e21106a5b74aa73fccbf21296918c41389e5f369f6b16fc100128ab79307818003ce4a6c2ff28

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          72B

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          df5ee1d2b28580e6ac5da60226f71242

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          c36a0d6d63f04a84761c4d689315d626fdf274be

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          465a0e07d1dfc7c54539fa1fe5594923d9f981e6c70b39e58af3a4ddbfbaeffa

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          29312b10d8648db00231c2fcc2f71a62214fc0b1822e796cf7694e2f42a5aac877380d6257f585e9c12bee7e6ddfcf7c519a28da87dff7d2012380cbfb28517d

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          72B

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          3a6f55c8d72d01ad779d985e89ca17c9

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          8147bc07560b90d49fb6e5fa73b85c883cd243eb

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          09ae5f54729feea4259fedfe964306dac3768f9dd8e5bc7c34a55a111fd44b3f

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          2c624b615da0fb17b007903a1e130b191b6daf48a7ae2016eea20db2bdf6fd9aeb96f224dd6e37cc9164193b5fc421114b9802a0ad373cd4f58f51b5f478f682

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_1
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          264KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          f50f89a0a91564d0b8a211f8921aa7de

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          112403a17dd69d5b9018b8cede023cb3b54eab7d

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          442B

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          5fac87845843b873b090eaf75f32cec0

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          a22bdfdddc63d328f70a1db7625dde9b7368f265

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          e51183173906f3de66bf254a0394838640f72d2927919ac2e5caafbb855cd639

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          8ec145ef76d0fbaeb3dc494b287613404cc8b0de7962644567632120b9609e5fab356557228c54a12fbaec93afd554525348a7a4a03361f4ab4f29c49e68f0cf

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          5KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          c5912659878931085067e87af718439a

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          4600206a8aac82958ee7f50686f5c2dad7c81c94

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          dc02969b0c85cc15aa51fba2a6c8dd4fbd79f738e42656de7a1a5e453ac150cf

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          99eb3fa48c85de05a5ab872ea341cdfccb62782b3e8dfd7630ff545da9f0e6d341803f681bd6a6476cef3a4d4db903a3a253beccf3fd3b323d6613c7b8287406

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          6KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          018d9337dbcdcb7f4de899813289e28b

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          243ea6d5efa4f1523406d03493f51d9e40661f6a

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          d28e7c7c2a9cda13657e13d1d5695bd33c55b2e0dffb1f73236dd7c783593a3f

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          108842598129b40614c563fa4d3255ca7742c540dc46ddaa84438b2075bef7b7d9d91e610f1277d95ee39e1419e90e81dd4b35561ec4e179a032d3a7820253cf

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          6KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          2a654f49817a0fd06f2b379b3845466c

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          c75006f7f5c563942c019bd566a3bf44f6912cc3

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          81f92766ba10ab9e3c64d21597652e1f87915b20a90fd8aa730f9e89170baf29

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          d9196bd4c19252b8ccc92df113737dbaa5fe07e487105e4be227df0b4e50b2f47eaf7d09393b04e0c1f68cba23f87d936466b63d6a1ac3d1b9ad3c365893712d

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          6KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          dd086aae21d3583dafc3c70fe1b55817

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          d426212053792738841917127049d3d98c87c36d

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          ce4e5ea728eb0f4643cbd3bc1c2a9727618415a6f837ec00484f8529f8665cd0

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          08c7edf433777b60ef235d03c6ab9a3f39b44a63504c909013d6810b3c1f86b1f787229dcfd56051d00aba7623455610aacb892da9389e6f8a21a54dfc8470b6

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          538B

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          16aa7c1da806c4bcd3b33d3ec3b98c42

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          f31af886341c1d7beb70b4c9cc40c86578d51045

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          366a0b1b8d5bfec08140eba1f35ebeb39c5972465d0242a406a7c345586d1378

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          b89d3f1891272a4d82b1ea295c297bd42f6adeece864fb44ee9233ba105fca470981b64a86ecee6234d0dde14e98ed7fac0d1aa112117cf73e42c91a7349611b

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          11KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          6f3ba4cc95270665be349ec893e333fa

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          a6a81526a48c22914523ef6b98edce2d8e690c1b

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          9b6bc39786d92a44c76bb49529353b1695f455f5363744e6b78af8c6cc49e8bc

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          e823fd21548289f2eecd2686853969a43f58c7bf3bc08fc4ba150593644394a99929b117477d8102a24bf5d1fa7db16f1d608520ed75222fd38c12ad204e893d

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\REGBC70.tmp
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          23KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          329612d9186de352723e6410a5c60f2a

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          61b2b5d736c3ba73a299e3b6e899a738669142d2

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          fab951798d3a9c2f9136e67b91141f267f725fd6b8d2e9006466ac5826be1108

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          065a086ccba48151f2c0b86e84e48da0b5895a8fc57045eb5787e8b462592a392914f899f229c0f9b7fee89d5959b190e64d046496f7d82fb4f33e7e24c93f68

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\REGBCCE.tmp
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          2KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          c82c8e2e7edc2c2559c4b4947d6b2958

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          c6babc0306ac15f5662839d9977235deee10be78

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          1968c31518807c8077114cdcd9ca440a7b51984fb9d1381dbd602daa31f4f917

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          6f5eeedcffcb259113f455078bdfa2353203efa681cef2d8d37f2eaf1c1fb46ea66085f7d5eba4839c66bc10cae56cd95228ebe9e54bfbd9aa0b38554577941a

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\7zr.exe
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          722KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          43141e85e7c36e31b52b22ab94d5e574

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          cfd7079a9b268d84b856dc668edbb9ab9ef35312

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          ea308c76a2f927b160a143d94072b0dce232e04b751f0c6432a94e05164e716d

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          9119ae7500aa5cccf26a0f18fd8454245347e3c01dabba56a93dbaaab86535e62b1357170758f3b3445b8359e7dd5d37737318a5d8a6047c499d32d5b64126fc

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\Assets\backicon.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          15KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          7ff5dc8270b5fa7ef6c4a1420bd67a7f

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          b224300372feaa97d882ca2552b227c0f2ef4e3e

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          fa64884054171515e97b78aaa1aad1ec5baa9d1daf9c682e0b3fb4a41a9cb1c1

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          f0d5a842a01b99f189f3d46ab59d2c388a974951b042b25bbce54a15f5a3f386984d19cfca22ba1440eebd79260066a37dfeff6cb0d1332fca136add14488eef

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\Assets\checked_gray.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          538B

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          ce144d2aab3bf213af693d4e18f87a59

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          df59dc3dbba88bdc5ffc25f2e5e7b73ac3de5afa

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          d8e502fab00b0c6f06ba6abede6922ab3b423fe6f2d2f56941dabc887b229ad3

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          0f930edd485a0d49ef157f6cc8856609c087c91b77845adeb5cc8c8a80ebc7ec5416df351ffa1af780caad884dbb49dcc778b0b30de6fb7c85ffef22d7220ebe

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\Assets\checked_gray_hover.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          412B

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          ea22933e94c7ab813b639627f2b38286

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          c5358c5cb7fb1a0744c775f8148c2376928fb509

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          d7c79677d2ef897fa0ad1efc90e916c46da29f571208f78f24505603b7165c20

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          ba447a1aedec49419e2b4a8de85c6047886f1a5ebb94f1c45e205a3780c6826f412a3892e97115b35e43839f43e346f3c72ffbf0c57d57f6d26b360ae61b3964

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\Assets\close_red.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          15KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          93216b2f9d66d423b3e1311c0573332d

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          5efaebec5f20f91f164f80d1e36f98c9ddaff805

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          d0b6d143642d356b40c47459a996131a344cade6bb86158f1b74693426b09bfb

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          922a7292de627c5e637818556d25d9842a88e89f2b198885835925679500dfd44a1e25ce79e521e63c4f84a6b0bd6bf98e46143ad8cee80ecdbaf3d3bc0f3a32

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\Assets\close_red_click.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          15KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          6db7460b73a6641c7621d0a6203a0a90

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          d39b488b96f3e5b5fe93ee3eecb6d28bb5b03cf3

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          d5a7e6fc5e92e0b29a4f65625030447f3379b4e3ac4bed051a0646a7932ce0cd

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          a0e6911853f51d73605e8f1a61442391fad25ff7b50a3f84d140d510fd98e262c971f130fb8a237a63704b8162c24b8440a5f235f51a5c343389f64e67c1c852

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\Assets\close_red_hover.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          15KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          5ceab43aa527bc146f9453a1586ddf03

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          88ffb3cadccb54d4be3aabf31cf4d64210b5f553

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          7c625ae4668cc03e37e4ffc478b87eace06b49b77e71e3209f431c23d98acdd0

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          8a5c81c048fb7d02b246ed23a098ae5f95cdf6f4ca58fd3d30e4fe3001c933444310ca6391096cfaeed86b13f568236f84df4ea9a3d205c0677e31025616f19e

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\Assets\custom.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          17KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          03b17f0b1c067826b0fcc6746cced2cb

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          e07e4434e10df4d6c81b55fceb6eca2281362477

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          fbece8bb5f4dfa55dcfbf41151b10608af807b9477e99acf0940954a11e68f7b

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          67c78ec01e20e9c8d9cdbba665bb2fd2bb150356f30b88d3d400bbdb0ae92010f5d7bcb683dcf6f895722a9151d8e669d8bef913eb6e728ba56bb02f264573b2

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\Assets\error_icon.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          1KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          dab2c4538a83422b5deae0e0de9b7a30

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          78c2ab2271aa4020df1e0289bc3c1ba9a43fd424

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          666ad4fe456216ddc06618967846ed31f81d8db5be97da6531842c0667352b89

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          24cb30a68ce117ba16edd1e94c7d066343eb265c874cd55467db2f913c01b9d776b2ad846e3414cd820c0ba10d93f132aea27739d16165b6e9dd5fbc8890bfdc

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\Assets\exit_close.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          670B

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          26eb04b9e0105a7b121ea9c6601bbf2a

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          efc08370d90c8173df8d8c4b122d2bb64c07ccd8

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          7aaef329ba9fa052791d1a09f127551289641ea743baba171de55faa30ec1157

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          9df3c723314d11a6b4ce0577eb61488061f2f96a9746a944eb6a4ee8c0c4d29131231a1b20988ef5454b79f9475b43d62c710839ecc0a9c98324f977cab6db68

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\Assets\installer_bg.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          34KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          08d091faf58df0ea8218d7e08140bbeb

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          38ebf2763bd2082635a5971c4302021ecaddc0d1

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          7e5f6998d34d56aeca87f676c12a42c6c4362ae16a753dc567aae00e253b0817

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          5cfede2ea2ade7bbc4b63475af5eb52f78af567fa7096a2ead396056271b8745df4dc6e11e4328151ce59ab74c6c48fd49cd13e30f7f4b86c566757e310fd5e8

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\Assets\installer_bg_blurred.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          136KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          d82c6055a02e78fa13d4982e0f598e44

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          06f62a453dd3243376c49eb9e1a60366457051cd

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          f71e583152244cce5af3f9c211a9b98f2f7e5a7ed0561cca30a8e4924c3beace

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          787a64c68555d274498a461009c6e2c504902a91a81f72d866abe79385b61f8ae6d07c85f6356c5e341ba0902a05683d1f8974690744cac6d43bc0b025af20e6

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\Assets\installer_logo.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          6KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          4cc6586c249ae201501c07fe5354b23b

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          8fda8ef400f0bc25fd19cf4aa13469141befa3d8

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          06f6630b150cca4ab3a00b663bfb6b0fe0c53309d434036c5ef16b3fe01304ed

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          65ce7392ad4519ca51edafb5e25d60f0b0d2d37f7f8afe0394aa0594e63c38d331cd3c63aea149419dedabdc836f10cb1e9cc468c2d40afbb9e94a344a20fa83

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\Assets\installer_minimize.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          113B

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          38b539a1e4229738e5c196eedb4eb225

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          f027b08dce77c47aaed75a28a2fce218ff8c936c

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          a064f417e3c2b8f3121a14bbded268b2cdf635706880b7006f931de31476bbc2

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          2ce433689a94fae454ef65e0e9ec33657b89718bbb5a038bf32950f6d68722803922f3a427278bad432395a1716523e589463fcce4279dc2a895fd77434821cc

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\Assets\minimize_progress.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          212B

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          1504b80f2a6f2d3fefc305da54a2a6c2

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          432a9d89ebc2f693836d3c2f0743ea5d2077848d

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          2f62d4e8c643051093f907058dddc78cc525147d9c4f4a0d78b4d0e5c90979f6

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          675db04baf3199c8d94af30a1f1c252830a56a90f633c3a72aa9841738b04242902a5e7c56dd792626338e8b7eabc1f359514bb3a2e62bc36c16919e196cfd94

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\Assets\powered_by_bs.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          9KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          7a2e5c21140aa8269c2aafd207f5dbaa

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          4e0d9e7e1b09e67eba10100d73dc51623517821e

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          3d2afe5236ec813d9e8063bc43eb34b88c2155784e1bce19c6a533c32767af35

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          63f512559f2068a9702c7c527c126f6017cd8d1d16af52e41b884aa9a64ff4294a57243ec78c3a416f70fb6178a79877d68345357725ff92c935709a2ef8adde

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\Assets\setpath.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          15KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          b2e7f40179744c74fded932e829cb12a

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          a0059ab8158a497d2cf583a292b13f87326ec3f0

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          5bbb2f41f9f3a805986c3c88a639bcc22d90067d4b8de9f1e21e3cf9e5c1766b

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          b95b7ebdb4a74639276eaa5c055fd8d9431e2f58a5f7c57303f7cf22e8b599f6f2a7852074cf71b19b49eb31cc9bf2509aedf41d608981d116e49a00030c797c

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\Assets\unchecked_gray.png
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          192B

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          e50df2a0768f7fc4c3fe8d784564fea3

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          d1fc4db50fe8e534019eb7ce70a61fd4c954621a

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          671f26795b12008fbea1943143f660095f3dca5d925f67d765e2352fd7ee2396

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          c87a8308a73b17cbdd179737631fb1ba7fdaeb65e82263f6617727519b70a81266bb695867b9e599c1306ee2cf0de525452f77ce367ca89bf870ea3ae7189998

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\BlueStacksInstaller.exe
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          509KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          c34db13d64a8fbb9803064ff8433b787

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          64fd3991c6d4ffd5a54d406c7aec5be758c6d0bf

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          b7febee5fd2a6165a872ccbd0af0cd06dcdf46d1d0a888a23b49c30547303c05

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          8548eef055f83cc2c81ffe1f5923620ca1574c0ca68f8a830e1e6e4328ae054905237b34f57558c56d9b19a36a05b8e7e78bab83e52471345ab28646f0c4d6b4

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\BlueStacksInstaller.exe.config
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          392B

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          ca0a329097316832e4a6ea5d870c9268

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          4a36b93361d3dc9df9b00313f2c2b394be9e1e72

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          4b7df915d706af6459c38d75b09c5e14f951842ae0678078400f204ad1c7a7c2

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          51f9a874e84f130be4fa29fcc4bc934105318234b5dd9ceedaf569e3f0e6b38e29f3bec056044724476ae24295a510b16d8a737b994fd6f1268609defa315271

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\CommonInstallUtils.zip
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          7.0MB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          06b09b4574417bac80e82f3dd24310d0

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          29788fd574050c9377b7ba2ee763f2dbb4d4f176

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          3c63c2d90c6e47cbf77832f6835429a929e286ede8943cf780c9cbc1d87e7548

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          d307e31cc165024fdb9b4daba5c8d8d978782a7158ea8156511f60cfa5c8620fc0fb6a8edcf828d925da7dfd58ae53a2cf6b5d7c383a1cdfc3f389402383b085

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\HD-CheckCpu.exe
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          133KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          fe2bd5b8dacbb0e6509ab71640979a12

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          1ca2c7713c0dc75e0fb071d068e7f898a5c90085

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          746aef1025c7cdf9eae0d9e55362d0230a8e877f0d6749ae39c53d730287eb36

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          0cd4300a71af6489fa85ee4701d583cb73f1ffc41a850b4245b0c73a892000a754548c91e84c2cde01808c1913f4bfa0e7b2263da7af297163d11e7409d2a832

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\HD-Common.dll
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          1.3MB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          bcef6f0d1d1e1b186d27382f80149684

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          fe1a704f589249c7e40855a9f66cc091d14e1555

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          f83bcf2d585ac3d146ad6c151abb9624c4901df5af3037f8078fe3ce19e74f94

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          e84d2795a7739dbd83a573b145145752c920fb4e2a872b35cf770d39a91086771cb6ccf58c1ba0ec22376476a4ec9468bb417a71243a330eb35af5e24b6adb31

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\HD-ForceGPU.exe
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          713KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          06271a67622c305414e2912367ad3833

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          48849f7d2e4faf4912ab1bc85b06c9dc37868004

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          4ee39e254853313529820a89827dc834a513553ecdd30089a75ac43eb450ba4c

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          3de2b1778e5ed0ef734458f689ae5e9abe27b55ff18fd6078af7d01861d33865173ca436cb7855c735e835f8a7de9e9f00825be10fd1b1c1e8a19b7420293415

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\HD-GLCheck.exe
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          558KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          c78a3944298e3774b8cf68befa68ada0

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          93651a7b2a02e8008990faf469c18b9f1c279e02

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          506c0bb3f3f053a031848181cae65f78014e2e62cc238ecc354c8f46451bf043

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          2669134fbf8a3d38ef5405095b915ad6340b3e232c514d594f0c1a6b548dd2c220e1df4b51bc83894e5ca1a69d619879f8f6c665aab26297f85b916aed94a83d

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\HD-Handle.exe
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          407KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          b2347b57ae73d52ee509d2037bf10f83

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          7d3d45d2995e1520d7c93ebf5aef7c799e2800ca

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          5d9c352b0544df6502da7d24d704765e63251adc9c19c0d293edd4450d5f6204

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          adda7b69ba17bf85f06fb1cc665f2bb4aea0b6144875a505f07304d99f8cfd88549c152b60d8f81cf5e418651f1e8fb28af5638a4316da110fc6c6037d5cf53e

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\HD-Opengl-Native.dll
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          2.9MB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          352c348cca992839df143ffacb5d2a01

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          ba07e8b76cf13cf79aadc9d124b5c8705bb0dc0e

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          6a9c41fa70280c4180ec53639aa4f73bd85b130c580f1e4e386c7e18a9959b92

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          a646b7ab80b09732c28d175ce4172c0d3a4ab8e60e1459de5b670c53de901d3749ceedc7182b888571d6abe5fcabeb85961f97161b35959d2245d69789dbc2f5

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\Locales\i18n.en-US.txt
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          101KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          0ba9263f892310301363fec526b19f5e

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          26f1dd1e0e06d8861ac60b699e967809f05cf821

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          03c4c500c6b2d2f32dbfd388b5931452ead65d2a1955cd9c5194f2c564d8aad6

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          05c65834004338ecb7d16a2a98a92ec27f50ab606b5b3580c72835653ade46ff7e4f4c99262f91272a77fa9f5a2be34b251fbd4248dd6934d66182467537c8cd

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\Newtonsoft.Json.dll
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          493KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          9d1e29238495601eb8302705eaf3db27

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          f62b1f5899cb0dba74d2483d280da6a4c5f91e12

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          c3f8ca505fd994202402cb0cded9f705909f71977bc7c3be9c6305c69c55d1d1

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          9f8494ecca8f6dc2065c2b2d959f5fd5b23309bbe9d4f11e6ff9b1b6e7232bfef6523fd58da927d0cfb3f2b7ce5bef131e04b2c67e55302ef256fd72580505a4

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\Oem.cfg
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          816B

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          e28c53401ec95bc9b75f43ae0dcddf96

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          cf11b03a25c5ce082f24f8832beca3994a501720

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          8d5d794dcc24bf8535fded17a82b8dad7396c327fae176387b5f43a4db1d5988

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          cd314ab721e57411ffcfdf0bf3678818a8590694a1be55e6dd7d0b5f6ec19908c7a034dc82f9a802d3e44a12af34ef8f8cbae68cc8b293d95a588bb92be7df31

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\ThemeFile
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          76KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          2c37ca07b22531b1a1c426d3f99db3e5

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          24b6d837f5da64012cf494e84643c877a5dd1e01

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          62ea0350dfbad36652d489f5a5131e71111ca916df351a7d1854cf2d80b57a94

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          1ebc2c9c9d363b1579ea26922b84a61ff3af0a9c94a31cff8092b3be6e78ae86d74c95b5e65466d43957ed7dc9eaec5e36dc1629a1cbcef5db3e706b64110095

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\d3dcompiler_47.dll
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          4.0MB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          898b3b792574a266c0f60a87244deac5

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          af5f4d815d21f2272ce64a7b414086a6e7eb599a

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          6bf1b5cd6cf5316493a2419ea7ecff44de39c71f226cb1b0dbe18e940f3bc988

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          e1ae86e56a1e6f7d0b00d33667e01afea6b1a65013f9247a2a48ed118a31ed01ab1c51881c246378bcd58e6584143d7b81806783cef96c6251a23ca4049cecfb

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\libEGL.dll
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          419KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          51c2434d38b74d68d1295828c21fbb40

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          defa928b1028634e61d4dd78dd02f59bc8123dfd

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          b404662338286fc6264bb4101ddce0ebd7a88f7b39eb373439c381ebd67a3ba3

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          75d2282291fc06dc3344785e5a51efbd6629109e7ab7b8a2e2e89c95112b0dbd3f53426e315e5442832f5e700b252c94ccab4791f899f9d19152cb0b815d9a70

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\libEGL_translator.dll
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          3.0MB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          4f14531ad3008bf6ee33afbb846a76d3

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          537aed4cfc3e3afbe7b01538f34d1d75d1d7f4fa

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          a9cc471f90189af0a17d0a57a6561032d327301c034c2f61984bf4bcdc9879ec

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          1b0050f06ce597a43cc660e585117c7190e074a1dc9d2bc57ba3bf8a423800dc906dfd7d198bba6e8ed08e7419767b45fed4a0e33eb979c260fef886b01bf62f

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\libGLES_CM_translator.dll
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          3.0MB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          302cfd63ebfa88ca319563e464a666e8

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          05b78b8430afbf4bc2529021165a05a201d102e6

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          19ad5cb28a64811d5aba3470720e0978481c6653fcc2c8eed6b99c0a6e939582

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          b76ff9e9a7e98c3937e86df7e6f316d89fc1977ac27c4eb97b32f79314cb6e4c1db9eb039cba17d87dc09790f47f8e5d75fda622512bf89d9407283ab6330929

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\libGLES_V2_translator.dll
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          4.3MB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          5208ed8d93dd4b0b432e1f25011527c5

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          44f14ec9d4b44adc52989211496a6bb7037c7af6

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          41a8be227d804b43efb8c8bd6a7312a51a56a32c773eb8d074f89899ed629bfe

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          40ea4c8f2ff56a4adc9de1fd84d11f5e90a2ac8e86277a25b2d039923eeaa6ad2f70c315d33962bf876d33f00c9ca4ed28a31271919b344a3355de7e72ae6c07

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\libGLESv2.dll
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          3.9MB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          ac2415fff75a384b842bcd11045baafe

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          a6177666e90e8ecc0b7034ecf6d06b11f2672184

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          f12eb3c5fea2ef4c5946a622ae4b6e7b4c5020c6e34893711a14a2ec3813659a

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          9a47948e0c172270e7a7d74a4319180735f84fae2af66feaa6393a227b46a4f50e5c258427cf21b17d8653e8714823d025173b16cc6f4b062d17b3e7f853401b

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\libOpenglRender.dll
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          2.7MB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          0f15d259540544fc370bf97754b060f0

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          56a636527f15d52a8c40c4b20f8e80a3c2c47ad4

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          f1ff438178338c947c89720dc498cd69809bf64edec3c92af8eb41044a4f759d

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          2c06709f6406347c662ce3af6366dfa76a30320f5ca28c8d35c5e347333a9c166c95727e8e2cfb445ea866fdbb1d4158df93f20d8b7d63b342c00049b54139e5

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\shortcuts.json
                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          3KB

                                                                                                                                                                                                                                                                          MD5

                                                                                                                                                                                                                                                                          dbdee1157721201cb02d131c878227e3

                                                                                                                                                                                                                                                                          SHA1

                                                                                                                                                                                                                                                                          761e007629624f0c34c54a0b23712b080828ec46

                                                                                                                                                                                                                                                                          SHA256

                                                                                                                                                                                                                                                                          09b0b9493c99f9e265a7c9918670796a939516d55da6f77ff89889d1a95ba672

                                                                                                                                                                                                                                                                          SHA512

                                                                                                                                                                                                                                                                          9347a9f97a060574e709890aada7d46f89b0a52bdb57904ff4c556ae7acae36446f00547d82b2456b4f7f0fed2bf2d1da380233a8eebecd0f7b7d9a8159f89a9

                                                                                                                                                                                                                                                                          Download Submit

                                                                                                                                                                                                                                                                        • memory/428-5375-0x0000000000400000-0x0000000000F3E000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          11.2MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/1092-5178-0x0000000000460000-0x00000000004E0000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          512KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/1092-5185-0x00007FFAD6340000-0x00007FFAD6E02000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          10.8MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/1092-5194-0x00000000027E0000-0x00000000027F0000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          64KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/1092-5191-0x00000000027E0000-0x00000000027F0000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          64KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/1092-5357-0x00007FFAD6340000-0x00007FFAD6E02000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          10.8MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/1460-5390-0x0000000000400000-0x0000000000F3E000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          11.2MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/1460-5551-0x0000000000400000-0x0000000000F3E000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          11.2MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/1460-5413-0x0000000000400000-0x0000000000F3E000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          11.2MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/1460-5563-0x0000000000400000-0x0000000000F3E000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          11.2MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/1788-5335-0x000000001B720000-0x000000001B730000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          64KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/1788-5216-0x000000001B720000-0x000000001B730000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          64KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/1788-5202-0x0000000002AB0000-0x0000000002AB1000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          4KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/1788-5203-0x0000000002AE0000-0x0000000002AE1000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          4KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/1788-5358-0x00007FFAD6340000-0x00007FFAD6E02000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          10.8MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/1788-5361-0x000000001C0F0000-0x000000002219F000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          96.7MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/1788-5190-0x00007FFAD6340000-0x00007FFAD6E02000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          10.8MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/2088-5146-0x0000000002F00000-0x0000000002F01000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          4KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/2088-5359-0x00000000226C0000-0x000000002876F000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          96.7MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/2088-5147-0x000000001B980000-0x000000001B990000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          64KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/2088-5172-0x000000002B8E0000-0x000000002B8F4000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          80KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/2088-5174-0x000000001B980000-0x000000001B990000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          64KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/2088-5177-0x000000002B890000-0x000000002B8A2000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          72KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/2088-5227-0x000000001B980000-0x000000001B990000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          64KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/2088-5184-0x0000000021EE0000-0x0000000021EE8000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          32KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/2088-5159-0x000000001B980000-0x000000001B990000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          64KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/2088-5158-0x000000001B980000-0x000000001B990000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          64KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/2088-5140-0x00000000009B0000-0x0000000000E06000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          4.3MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/2088-5141-0x00007FFAD6340000-0x00007FFAD6E02000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          10.8MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/2088-5224-0x000000001B980000-0x000000001B990000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          64KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/2088-5356-0x00000000226C0000-0x000000002876F000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          96.7MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/2088-5200-0x000000001B980000-0x000000001B990000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          64KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/2088-5166-0x00007FFAD6340000-0x00007FFAD6E02000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          10.8MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/2088-5152-0x000000001CE30000-0x000000001CEB0000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          512KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/2088-5151-0x000000001BCC0000-0x000000001BCDC000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          112KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/2088-5143-0x0000000002ED0000-0x0000000002ED1000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          4KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/2088-5145-0x000000001C270000-0x000000001C3F4000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          1.5MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/2088-5142-0x000000001B980000-0x000000001B990000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          64KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/2088-5144-0x000000001BD10000-0x000000001BDD2000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          776KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/2236-5090-0x00007FFAD6360000-0x00007FFAD6E22000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          10.8MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/2236-5088-0x00007FFAD6360000-0x00007FFAD6E22000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          10.8MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/2592-5371-0x0000000000400000-0x0000000000F3E000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          11.2MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/2928-5082-0x00007FFAF694C000-0x00007FFAF694D000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          4KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/3644-180-0x000000001EE40000-0x000000001EE78000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          224KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/3644-533-0x000000001BDC0000-0x000000001BDD0000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          64KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/3644-179-0x000000001C3E0000-0x000000001C3E8000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          32KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/3644-164-0x000000001BDC0000-0x000000001BDD0000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          64KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/3644-5100-0x00007FFAD6360000-0x00007FFAD6E22000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          10.8MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/3644-538-0x000000001BDC0000-0x000000001BDD0000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          64KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/3644-178-0x000000001BDC0000-0x000000001BDD0000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          64KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/3644-181-0x000000001EE00000-0x000000001EE0E000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          56KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/3644-534-0x000000001BDC0000-0x000000001BDD0000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          64KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/3644-535-0x000000001BDC0000-0x000000001BDD0000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          64KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/3644-195-0x000000001FAC0000-0x000000001FAE2000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          136KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/3644-162-0x000000001B8D0000-0x000000001BA20000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          1.3MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/3644-183-0x000000001F890000-0x000000001F910000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          512KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/3644-165-0x000000001C400000-0x000000001C928000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          5.2MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/3644-159-0x0000000000AB0000-0x0000000000B34000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          528KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/3644-160-0x00007FFAD6360000-0x00007FFAD6E22000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          10.8MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/3644-194-0x000000001FA80000-0x000000001FA88000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          32KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/3644-532-0x00007FFAD6360000-0x00007FFAD6E22000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          10.8MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/3916-5367-0x0000000000400000-0x0000000000F3E000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          11.2MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/4616-5201-0x00007FFAD6340000-0x00007FFAD6E02000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          10.8MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/4616-5150-0x0000000000C80000-0x0000000000D24000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          656KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/4616-5153-0x00000000015F0000-0x0000000001600000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          64KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/4616-5154-0x000000001C6A0000-0x000000001C6EC000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          304KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/4616-5149-0x00007FFAD6340000-0x00007FFAD6E02000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          10.8MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/4616-5332-0x00007FFAD6340000-0x00007FFAD6E02000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          10.8MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/4616-5165-0x00000000015F0000-0x0000000001600000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          64KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/4616-5167-0x00000000015F0000-0x0000000001600000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          64KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/4616-5331-0x0000000067D80000-0x0000000067E8A000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          1.0MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/4656-5369-0x0000000000400000-0x0000000000F3E000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          11.2MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/4864-5084-0x00007FFAD6360000-0x00007FFAD6E22000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          10.8MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/4864-5083-0x00000000005E0000-0x00000000005EA000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          40KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/4864-5087-0x00007FFAD6360000-0x00007FFAD6E22000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          10.8MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/5300-5364-0x0000000000400000-0x0000000000F3E000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          11.2MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/5364-5368-0x0000000000400000-0x0000000000F3E000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          11.2MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/5588-5625-0x00000000237D0000-0x000000002987F000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          96.7MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/5588-5619-0x00000000237D0000-0x000000002987F000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          96.7MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/5588-5614-0x00000000237D0000-0x000000002987F000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          96.7MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/5588-5606-0x00000000237D0000-0x000000002987F000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          96.7MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/5588-5622-0x00000000237D0000-0x000000002987F000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          96.7MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/5588-5628-0x00000000237D0000-0x000000002987F000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          96.7MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/5588-5626-0x00000000237D0000-0x000000002987F000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          96.7MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/5588-5568-0x00000000237D0000-0x000000002987F000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          96.7MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/5612-5217-0x0000000000BE0000-0x0000000000C54000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          464KB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/5612-5218-0x00007FFAD6340000-0x00007FFAD6E02000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          10.8MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/5688-5520-0x0000000000400000-0x0000000000F3E000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          11.2MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/5716-5373-0x0000000000400000-0x0000000000F3E000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          11.2MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/5776-5362-0x0000000000400000-0x0000000000F3E000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          11.2MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/5792-5374-0x0000000000400000-0x0000000000F3E000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          11.2MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/5824-5547-0x0000000067D80000-0x0000000067E8A000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          1.0MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/6120-5366-0x0000000000400000-0x0000000000F3E000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          11.2MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/6432-5560-0x0000000000400000-0x0000000000F3E000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          11.2MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/6520-5562-0x0000000000400000-0x0000000000F3E000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          11.2MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/6572-5569-0x0000000000400000-0x0000000000F3E000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          11.2MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/6648-5590-0x0000000000400000-0x0000000000F3E000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          11.2MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/6648-5633-0x0000000000400000-0x0000000000F3E000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          11.2MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/6648-5618-0x0000000000400000-0x0000000000F3E000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          11.2MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/6648-5627-0x0000000000400000-0x0000000000F3E000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          11.2MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/6648-5624-0x0000000000400000-0x0000000000F3E000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          11.2MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/6708-5570-0x0000000000400000-0x0000000000F3E000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          11.2MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/6760-5571-0x0000000000400000-0x0000000000F3E000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          11.2MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/6820-5573-0x0000000000400000-0x0000000000F3E000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          11.2MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/6872-5574-0x0000000000400000-0x0000000000F3E000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          11.2MB

                                                                                                                                                                                                                                                                          Download

                                                                                                                                                                                                                                                                        • memory/6916-5575-0x0000000000400000-0x0000000000F3E000-memory.dmp

                                                                                                                                                                                                                                                                          Filesize

                                                                                                                                                                                                                                                                          11.2MB

                                                                                                                                                                                                                                                                          Download