Malware Analysis Report

2024-11-30 06:26

Sample ID 240612-rhyraa1glq
Target BlueStacks10Installer_10.41.210.1001_native_c60745bef2840a6297522126c047af08_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe
SHA256 52ed4671a31c8529f2ba3027e25080c842d09f0517fe64e844f93d619cb4dd26
Tags
discovery evasion execution persistence spyware stealer
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

52ed4671a31c8529f2ba3027e25080c842d09f0517fe64e844f93d619cb4dd26

Threat Level: Likely malicious

The file BlueStacks10Installer_10.41.210.1001_native_c60745bef2840a6297522126c047af08_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe was found to be: Likely malicious.

Malicious Activity Summary

discovery evasion execution persistence spyware stealer

Stops running service(s)

Reads user/profile data of web browsers

Adds Run key to start application

Modifies Windows Firewall

Downloads MZ/PE file

Checks computer location settings

Drops file in Windows directory

Checks installed software on the system

Launches sc.exe

Executes dropped EXE

Drops file in Program Files directory

Loads dropped DLL

Enumerates physical storage devices

Suspicious use of SendNotifyMessage

Suspicious use of WriteProcessMemory

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of FindShellTrayWindow

Enumerates processes with tasklist

Modifies registry class

Modifies system certificate store

Suspicious behavior: AddClipboardFormatListener

Checks processor information in registry

Suspicious behavior: EnumeratesProcesses

Suspicious behavior: MapViewOfSection

Suspicious behavior: LoadsDriver

Suspicious behavior: RenamesItself

Suspicious use of SetWindowsHookEx

Modifies Internet Explorer settings

Suspicious use of AdjustPrivilegeToken

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-12 14:12

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-12 14:12

Reported

2024-06-12 14:42

Platform

win10-20240404-es

Max time kernel

1799s

Max time network

1794s

Command Line

"C:\Users\Admin\AppData\Local\Temp\BlueStacks10Installer_10.41.210.1001_native_c60745bef2840a6297522126c047af08_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe"

Signatures

Stops running service(s)

evasion execution

Reads user/profile data of web browsers

spyware stealer

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000\Software\Microsoft\Windows\CurrentVersion\Run\electron.app.BlueStacks Services = "C:\\Users\\Admin\\AppData\\Local\\Programs\\bluestacks-services\\BlueStacksServices.exe --hidden" C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A

Downloads MZ/PE file

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\BlueStacks X\BlueStacks X.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\BlueStacks X\BlueStacksWeb.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\BlueStacks X\BlueStacksWeb.exe N/A

Checks installed software on the system

discovery

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files\BlueStacks_nxt\BstkTypeLib.dll C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\7zr.exe N/A
File opened for modification C:\Program Files\BlueStacks_nxt\mediaservice C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\7zr.exe N/A
File opened for modification C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\en-US.pak C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\7zr.exe N/A
File opened for modification C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\bg.pak C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\7zr.exe N/A
File opened for modification C:\Program Files (x86)\BlueStacks X\resources\icudtl.dat C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
File opened for modification C:\Program Files\BlueStacks_nxt\QtQuick\Controls\Tab.qml C:\Users\Admin\AppData\Local\Temp\7zS444D342A\7zr.exe N/A
File created C:\Program Files\BlueStacks_nxt\QtWebChannel\declarative_webchannel.dll C:\Users\Admin\AppData\Local\Temp\7zS444D342A\7zr.exe N/A
File created C:\Program Files\BlueStacks_nxt\HD-DataManager.exe C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\7zr.exe N/A
File opened for modification C:\Program Files\BlueStacks_nxt\AdbWinApi.dll C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\7zr.exe N/A
File opened for modification C:\Program Files (x86)\BlueStacks X\cef\locales\ja.pak C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
File opened for modification C:\Program Files (x86)\BlueStacks X\image\MyGames\back_hover.svg C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
File created C:\Program Files (x86)\BlueStacks X\resources\qtwebengine_resources.pak C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
File opened for modification C:\Program Files\BlueStacks_nxt\QtQuick\Controls\TabView.qml C:\Users\Admin\AppData\Local\Temp\7zS444D342A\7zr.exe N/A
File opened for modification C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\vi.pak C:\Users\Admin\AppData\Local\Temp\7zS444D342A\7zr.exe N/A
File created C:\Program Files (x86)\BlueStacks X\plugins\codec\libspudec_plugin.dll C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
File opened for modification C:\Program Files\BlueStacks_nxt\d3dcompiler_47.dll C:\Users\Admin\AppData\Local\Temp\7zS444D342A\7zr.exe N/A
File opened for modification C:\Program Files\BlueStacks_nxt\HD-MultiInstanceManager.exe C:\Users\Admin\AppData\Local\Temp\7zS444D342A\7zr.exe N/A
File opened for modification C:\Program Files (x86)\BlueStacks X\image\Search\loading.svg C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
File opened for modification C:\Program Files (x86)\BlueStacks X\translations\qt_cs.qm C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
File created C:\Program Files (x86)\BlueStacks X\plugins\codec\libschroedinger_plugin.dll C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
File created C:\Program Files\BlueStacks_nxt\Qt5Positioning.dll C:\Users\Admin\AppData\Local\Temp\7zS444D342A\7zr.exe N/A
File created C:\Program Files\BlueStacks_nxt\QtQuick\Controls\qtquickcontrolsplugin.dll C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\7zr.exe N/A
File created C:\Program Files\BlueStacks_nxt\msvcp140_atomic_wait.dll C:\Users\Admin\AppData\Local\Temp\7zS444D342A\7zr.exe N/A
File created C:\Program Files\BlueStacks_nxt\QtWebChannel\qmldir C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\7zr.exe N/A
File opened for modification C:\Program Files (x86)\BlueStacks X\plugins\audio_filter\libspatializer_plugin.dll C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
File opened for modification C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\ml.pak C:\Users\Admin\AppData\Local\Temp\7zS444D342A\7zr.exe N/A
File created C:\Program Files\BlueStacks_nxt\Assets\installer_bg_blurred.png C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\7zr.exe N/A
File created C:\Program Files\BlueStacks_nxt\Newtonsoft.Json.dll C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\7zr.exe N/A
File opened for modification C:\Program Files\BlueStacks_nxt\Assets\BlueStacks.ico C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\7zr.exe N/A
File created C:\Program Files (x86)\BlueStacks X\plugins\audio_mixer\libfloat_mixer_plugin.dll C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
File opened for modification C:\Program Files (x86)\BlueStacks X\plugins\video_filter\libanaglyph_plugin.dll C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
File opened for modification C:\Program Files\BlueStacks_nxt\msvcp140_atomic_wait.dll C:\Users\Admin\AppData\Local\Temp\7zS444D342A\7zr.exe N/A
File created C:\Program Files\BlueStacks_nxt\QtGraphicalEffects\DropShadow.qml C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\7zr.exe N/A
File opened for modification C:\Program Files\BlueStacks_nxt\QtQuick\Layouts C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\7zr.exe N/A
File created C:\Program Files (x86)\BlueStacks X\image\MyGames\no_game_bg.png C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
File created C:\Program Files\BlueStacks_nxt\QtQuick\Controls\Private\StackView.js C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\7zr.exe N/A
File created C:\Program Files (x86)\BlueStacks X\plugins\access\libdvdread_plugin.dll C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
File opened for modification C:\Program Files (x86)\BlueStacks X\plugins\mux\libmux_asf_plugin.dll C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
File opened for modification C:\Program Files (x86)\BlueStacks X\plugins\video_chroma\libyuy2_i420_plugin.dll C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
File opened for modification C:\Program Files\BlueStacks_nxt\QtQuick.2 C:\Users\Admin\AppData\Local\Temp\7zS444D342A\7zr.exe N/A
File created C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\en-US.pak C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\7zr.exe N/A
File created C:\Program Files\BlueStacks_nxt\QtQuick\Controls\Private\CalendarUtils.js C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\7zr.exe N/A
File opened for modification C:\Program Files (x86)\BlueStacks X\image\MyGames\Shadow_under_those_cards.png C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
File created C:\Program Files (x86)\BlueStacks X\image\Search\mini_and.svg C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
File created C:\Program Files\BlueStacks_nxt\Assets\close_red.png C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\7zr.exe N/A
File opened for modification C:\Program Files (x86)\BlueStacks X\plugins\video_filter\libinvert_plugin.dll C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
File opened for modification C:\Program Files (x86)\BlueStacks X\Qt5SerialPort.dll C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
File created C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\uk.pak C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\7zr.exe N/A
File created C:\Program Files\BlueStacks_nxt\brotlicommon.dll C:\Users\Admin\AppData\Local\Temp\7zS444D342A\7zr.exe N/A
File opened for modification C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\7zr.exe N/A
File created C:\Program Files (x86)\BlueStacks X\plugins\video_filter\libadjust_plugin.dll C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
File created C:\Program Files\BlueStacks_nxt\QtGraphicalEffects\qtgraphicaleffectsplugin.dll C:\Users\Admin\AppData\Local\Temp\7zS444D342A\7zr.exe N/A
File created C:\Program Files\BlueStacks_nxt\QtQuick\Controls\Private\SystemPaletteSingleton.qml C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\7zr.exe N/A
File opened for modification C:\Program Files (x86)\BlueStacks X\7z.dll C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
File created C:\Program Files (x86)\BlueStacks X\plugins\video_chroma\libi420_rgb_plugin.dll C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
File created C:\Program Files\BlueStacks_nxt\HD-EnableHyperV.exe C:\Users\Admin\AppData\Local\Temp\7zS444D342A\7zr.exe N/A
File opened for modification C:\Program Files\BlueStacks_nxt\HD-Vdes-Service.dll C:\Users\Admin\AppData\Local\Temp\7zS444D342A\7zr.exe N/A
File created C:\Program Files\BlueStacks_nxt\ffmpeg_command_template.txt C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\7zr.exe N/A
File opened for modification C:\Program Files (x86)\BlueStacks X\cef\locales\el.pak C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
File opened for modification C:\Program Files\BlueStacks_nxt\Assets\close_red_hover.png C:\Users\Admin\AppData\Local\Temp\7zS444D342A\7zr.exe N/A
File opened for modification C:\Program Files\BlueStacks_nxt\Qt5WebChannel.dll C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\7zr.exe N/A
File created C:\Program Files\BlueStacks_nxt\QtGraphicalEffects\private\FastInnerShadow.qmlc C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\7zr.exe N/A
File created C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\lv.pak C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\7zr.exe N/A
File created C:\Program Files (x86)\BlueStacks X\cef\locales\kn.pak C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
File opened for modification C:\Windows\Debug\ESE.TXT C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\HD-CheckCpu.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\HD-CheckCpu.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSC0E2B3B8\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSC0E2B3B8\HD-CheckCpu.exe N/A
N/A N/A C:\ProgramData\BlueStacksServicesSetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
N/A N/A C:\Program Files (x86)\BlueStacks X\BlueStacks X.exe N/A
N/A N/A C:\Program Files (x86)\BlueStacks X\BlueStacksWeb.exe N/A
N/A N/A C:\Program Files (x86)\BlueStacks X\BlueStacksWeb.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacks X\BlueStacks-Installer_5.21.210.1023_amd64_native.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS444D342A\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS444D342A\7zr.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS444D342A\7zr.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS444D342A\HD-ForceGPU.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS444D342A\HD-GLCheck.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS444D342A\HD-GLCheck.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS444D342A\HD-GLCheck.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS444D342A\HD-GLCheck.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS444D342A\HD-GLCheck.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS444D342A\HD-GLCheck.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS444D342A\HD-CheckCpu.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS444D342A\7zr.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS444D342A\HD-GLCheck.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS444D342A\HD-GLCheck.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS444D342A\HD-GLCheck.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS444D342A\7zr.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS444D342A\7zr.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS444D342A\7zr.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS444D342A\HD-CheckCpu.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS444D342A\7zr.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacks X\BlueStacks-Installer_5.21.210.1023_amd64_native.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\7zr.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\7zr.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\HD-ForceGPU.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\HD-GLCheck.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\HD-GLCheck.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\HD-GLCheck.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\HD-GLCheck.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\HD-GLCheck.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\HD-GLCheck.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\HD-CheckCpu.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\7zr.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\HD-GLCheck.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\HD-GLCheck.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\HD-GLCheck.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\7zr.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\7zr.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\7zr.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\HD-CheckCpu.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\7zr.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacks X\BlueStacks-Installer_5.21.210.1023_amd64_native.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\7zr.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\7zr.exe N/A

Launches sc.exe

Description Indicator Process Target
N/A N/A C:\Windows\system32\sc.exe N/A
N/A N/A C:\Windows\system32\sc.exe N/A
N/A N/A C:\Windows\system32\sc.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A

Enumerates physical storage devices

Checks processor information in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Users\Admin\AppData\Local\Temp\7zS444D342A\BlueStacksInstaller.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Users\Admin\AppData\Local\Temp\7zS444D342A\BlueStacksInstaller.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\BlueStacksInstaller.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\BlueStacksInstaller.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\BlueStacks X\BlueStacks X.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files (x86)\BlueStacks X\BlueStacks X.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\BlueStacksInstaller.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\BlueStacksInstaller.exe N/A
Key queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\BlueStacks X\BlueStacks X.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ C:\Program Files (x86)\BlueStacks X\BlueStacks X.exe N/A

Enumerates processes with tasklist

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A N/A N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000\Software\Microsoft\Internet Explorer\Main C:\Windows\system32\browser_broker.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000\Software\Microsoft\Internet Explorer\Main C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\BlueStacksX\shell\open C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\IETld\LowMic C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\CIStatusTimestamp = 1086ff5cd3bcda01 C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Settings\Cache\History\CachePrefix = "Visited:" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Explorer\Main\OperationalData = "1" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\Total C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Recovery\Active\{31B497CF-8D8A-48D4-8D03-41B3EE09F414} = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Recovery\PendingRecovery\ReadingStorePending = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\Wow64-DeviceId = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation\CVListXMLVersionLow = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Settings\Cache\History\CacheLimit = "1" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\HistoryJournalCertificate C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Internet Settings\Cache\History\CachePrefix = "Visited:" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Internet Explorer\Main C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation\IECompatVersionLow = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\ACGStatus\ACGPolicyState = "8" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\History\CachePrefix = "Visited:" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\bluestacks.com\ = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\BlueStacksX\shell\open\ C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\VersionLow = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation\CVListXMLVersionHigh = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\Revision = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Settings\Cache\Cookies\CacheLimit = "1" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\bluestacks.com\NumberOfSubdo = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\bluestacks.com\Total = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\DXFeatureLevel = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\Wow64-VersionHigh = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\bluestacks.com C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\bluestacks.com\NumberOfSubdo = "1" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Protected - It is a violation of Windows Policy to modif = "1" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Settings\Cache\Content\CacheLimit = "256000" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\Total\ = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Protected - It is a violation of Windows Policy to modif C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\Content\CachePrefix C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\BlueStacksX C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\DummyPath\dummySetting = "1" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation\LowMic C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\VendorId = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\BlueStacksX\shell\ C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Recovery\PendingRecovery\Active = "1" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Internet Settings\PrivacyAdvanced = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\006\ACGStatus C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\006\ACGStatus\DynamicCodePolicy = 00000000 C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\CIStatus\CIPolicyState = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Privacy C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\BlueStacksX\DefaultIcon C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\Wow64-SubSysId = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Settings\Cache\Content C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\bstsrvs\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\bluestacks-services\\BlueStacksServices.exe\" \"%1\"" C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Internet Settings\Zones\3 C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Internet Settings\Zones\3\{AEBA21FA-782A-4A90-978D-B7216 = 1a3761592352350c7a5f20172f1e1a190e2b017313371312141a152a C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\CIStatusTimestamp = cdf9ed5cd3bcda01 C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\CIStatus C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\ACGStatus C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Settings\Cache C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\support.bluestacks.com\ = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Recovery\PendingDelete\C:\Users\Admin\AppData\Local\Pack = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\bstsrvs C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\EnablementState = "1" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A

Modifies system certificate store

evasion spyware trojan
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A C:\Program Files (x86)\BlueStacks X\BlueStacks X.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 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 C:\Program Files (x86)\BlueStacks X\BlueStacks X.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 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 C:\Program Files (x86)\BlueStacks X\BlueStacks X.exe N/A

Suspicious behavior: AddClipboardFormatListener

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\BlueStacks X\BlueStacks X.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSC0E2B3B8\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSC0E2B3B8\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSC0E2B3B8\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSC0E2B3B8\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSC0E2B3B8\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSC0E2B3B8\BlueStacksInstaller.exe N/A
N/A N/A C:\ProgramData\BlueStacksServicesSetup.exe N/A
N/A N/A C:\ProgramData\BlueStacksServicesSetup.exe N/A
N/A N/A C:\Windows\SysWOW64\tasklist.exe N/A
N/A N/A C:\Windows\SysWOW64\tasklist.exe N/A
N/A N/A C:\Program Files (x86)\BlueStacks X\BlueStacksWeb.exe N/A
N/A N/A C:\Program Files (x86)\BlueStacks X\BlueStacksWeb.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS444D342A\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS444D342A\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS444D342A\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS444D342A\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS444D342A\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS444D342A\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS444D342A\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS444D342A\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
N/A N/A C:\Program Files (x86)\BlueStacks X\BlueStacks X.exe N/A
N/A N/A C:\Program Files (x86)\BlueStacks X\BlueStacks X.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\Bootstrapper.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\BlueStacks X\BlueStacks X.exe N/A

Suspicious behavior: LoadsDriver

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Suspicious behavior: RenamesItself

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\BlueStacksInstaller.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\BlueStacksInstaller.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\7zSC0E2B3B8\BlueStacksInstaller.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\tasklist.exe N/A
Token: SeSecurityPrivilege N/A C:\ProgramData\BlueStacksServicesSetup.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\tasklist.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\tasklist.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\tasklist.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\tasklist.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\tasklist.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\tasklist.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\tasklist.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\tasklist.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\tasklist.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\tasklist.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\tasklist.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\tasklist.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1040 wrote to memory of 2512 N/A C:\Users\Admin\AppData\Local\Temp\BlueStacks10Installer_10.41.210.1001_native_c60745bef2840a6297522126c047af08_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\BlueStacksInstaller.exe
PID 1040 wrote to memory of 2512 N/A C:\Users\Admin\AppData\Local\Temp\BlueStacks10Installer_10.41.210.1001_native_c60745bef2840a6297522126c047af08_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\BlueStacksInstaller.exe
PID 2512 wrote to memory of 1444 N/A C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\BlueStacksInstaller.exe C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\HD-CheckCpu.exe
PID 2512 wrote to memory of 1444 N/A C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\BlueStacksInstaller.exe C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\HD-CheckCpu.exe
PID 2512 wrote to memory of 1444 N/A C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\BlueStacksInstaller.exe C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\HD-CheckCpu.exe
PID 2512 wrote to memory of 1224 N/A C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\BlueStacksInstaller.exe C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\HD-CheckCpu.exe
PID 2512 wrote to memory of 1224 N/A C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\BlueStacksInstaller.exe C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\HD-CheckCpu.exe
PID 2512 wrote to memory of 1224 N/A C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\BlueStacksInstaller.exe C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\HD-CheckCpu.exe
PID 2512 wrote to memory of 3176 N/A C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\BlueStacksInstaller.exe C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe
PID 2512 wrote to memory of 3176 N/A C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\BlueStacksInstaller.exe C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe
PID 2512 wrote to memory of 3176 N/A C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\BlueStacksInstaller.exe C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe
PID 3176 wrote to memory of 5212 N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe C:\Windows\SysWOW64\WScript.exe
PID 3176 wrote to memory of 5212 N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe C:\Windows\SysWOW64\WScript.exe
PID 3176 wrote to memory of 5212 N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe C:\Windows\SysWOW64\WScript.exe
PID 5212 wrote to memory of 1220 N/A C:\Windows\SysWOW64\WScript.exe C:\Windows\SysWOW64\cmd.exe
PID 5212 wrote to memory of 1220 N/A C:\Windows\SysWOW64\WScript.exe C:\Windows\SysWOW64\cmd.exe
PID 5212 wrote to memory of 1220 N/A C:\Windows\SysWOW64\WScript.exe C:\Windows\SysWOW64\cmd.exe
PID 1220 wrote to memory of 4180 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 1220 wrote to memory of 4180 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 1220 wrote to memory of 4180 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 1220 wrote to memory of 1756 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 1220 wrote to memory of 1756 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 1220 wrote to memory of 1756 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 1220 wrote to memory of 4692 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 1220 wrote to memory of 4692 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 1220 wrote to memory of 4692 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 1220 wrote to memory of 512 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 1220 wrote to memory of 512 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 1220 wrote to memory of 512 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 2512 wrote to memory of 3596 N/A C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\BlueStacksInstaller.exe C:\Users\Admin\AppData\Local\BlueStacksSetup\BlueStacks10Installer_10.41.210.1001_native_c60745bef2840a6297522126c047af08_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe
PID 2512 wrote to memory of 3596 N/A C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\BlueStacksInstaller.exe C:\Users\Admin\AppData\Local\BlueStacksSetup\BlueStacks10Installer_10.41.210.1001_native_c60745bef2840a6297522126c047af08_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe
PID 2512 wrote to memory of 3596 N/A C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\BlueStacksInstaller.exe C:\Users\Admin\AppData\Local\BlueStacksSetup\BlueStacks10Installer_10.41.210.1001_native_c60745bef2840a6297522126c047af08_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe
PID 3596 wrote to memory of 5856 N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BlueStacks10Installer_10.41.210.1001_native_c60745bef2840a6297522126c047af08_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe C:\Users\Admin\AppData\Local\Temp\7zSC0E2B3B8\BlueStacksInstaller.exe
PID 3596 wrote to memory of 5856 N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BlueStacks10Installer_10.41.210.1001_native_c60745bef2840a6297522126c047af08_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe C:\Users\Admin\AppData\Local\Temp\7zSC0E2B3B8\BlueStacksInstaller.exe
PID 5856 wrote to memory of 6720 N/A C:\Users\Admin\AppData\Local\Temp\7zSC0E2B3B8\BlueStacksInstaller.exe C:\Users\Admin\AppData\Local\Temp\7zSC0E2B3B8\HD-CheckCpu.exe
PID 5856 wrote to memory of 6720 N/A C:\Users\Admin\AppData\Local\Temp\7zSC0E2B3B8\BlueStacksInstaller.exe C:\Users\Admin\AppData\Local\Temp\7zSC0E2B3B8\HD-CheckCpu.exe
PID 5856 wrote to memory of 6720 N/A C:\Users\Admin\AppData\Local\Temp\7zSC0E2B3B8\BlueStacksInstaller.exe C:\Users\Admin\AppData\Local\Temp\7zSC0E2B3B8\HD-CheckCpu.exe
PID 6820 wrote to memory of 6912 N/A C:\ProgramData\BlueStacksServicesSetup.exe C:\Windows\SysWOW64\cmd.exe
PID 6820 wrote to memory of 6912 N/A C:\ProgramData\BlueStacksServicesSetup.exe C:\Windows\SysWOW64\cmd.exe
PID 6820 wrote to memory of 6912 N/A C:\ProgramData\BlueStacksServicesSetup.exe C:\Windows\SysWOW64\cmd.exe
PID 6912 wrote to memory of 6896 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\tasklist.exe
PID 6912 wrote to memory of 6896 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\tasklist.exe
PID 6912 wrote to memory of 6896 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\tasklist.exe
PID 6912 wrote to memory of 6908 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\find.exe
PID 6912 wrote to memory of 6908 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\find.exe
PID 6912 wrote to memory of 6908 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\find.exe
PID 7596 wrote to memory of 8896 N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe C:\Windows\system32\cscript.exe
PID 7596 wrote to memory of 8896 N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe C:\Windows\system32\cscript.exe
PID 7596 wrote to memory of 8956 N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe
PID 7596 wrote to memory of 8956 N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe
PID 7596 wrote to memory of 8956 N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe
PID 7596 wrote to memory of 8956 N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe
PID 7596 wrote to memory of 8956 N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe
PID 7596 wrote to memory of 8956 N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe
PID 7596 wrote to memory of 8956 N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe
PID 7596 wrote to memory of 8956 N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe
PID 7596 wrote to memory of 8956 N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe
PID 7596 wrote to memory of 8956 N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe
PID 7596 wrote to memory of 8956 N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe
PID 7596 wrote to memory of 8956 N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe
PID 7596 wrote to memory of 8956 N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe
PID 7596 wrote to memory of 8956 N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe
PID 7596 wrote to memory of 8956 N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe
PID 7596 wrote to memory of 8956 N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe

Processes

C:\Users\Admin\AppData\Local\Temp\BlueStacks10Installer_10.41.210.1001_native_c60745bef2840a6297522126c047af08_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe

"C:\Users\Admin\AppData\Local\Temp\BlueStacks10Installer_10.41.210.1001_native_c60745bef2840a6297522126c047af08_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe"

C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\BlueStacksInstaller.exe

"C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\BlueStacksInstaller.exe"

C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\HD-CheckCpu.exe

"C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\HD-CheckCpu.exe" --cmd checkHypervEnabled

C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\HD-CheckCpu.exe

"C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\HD-CheckCpu.exe" --cmd checkSSE4

C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe

"C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.210.1023_nxt.exe" -s

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\Program Files (x86)\BlueStacks X\green.vbs"

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c green.bat

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall delete rule name="BlueStacksWeb"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall delete rule name="Cloud Game"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall add rule name="BlueStacksWeb" dir=in action=allow program="C:\Program Files (x86)\BlueStacks X\BlueStacksWeb.exe"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall add rule name="Cloud Game" dir=in action=allow program="C:\Program Files (x86)\BlueStacks X\Cloud Game.exe"

C:\Users\Admin\AppData\Local\BlueStacksSetup\BlueStacks10Installer_10.41.210.1001_native_c60745bef2840a6297522126c047af08_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe

"C:\Users\Admin\AppData\Local\BlueStacksSetup\BlueStacks10Installer_10.41.210.1001_native_c60745bef2840a6297522126c047af08_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe" -versionMachineID=d9eaf7ba-4c63-4c2e-bbe3-73777168c2e0 -machineID=bedf8780-326b-4932-b095-3f6c7a7b59d0 -pddir="C:\ProgramData\BlueStacks_nxt" -defaultImageName=Pie64 -imageToLaunch=Pie64 -isSSE4Available=1 -appToLaunch=bsx -bsxVersion=10.41.210.1001 -country=US -skipBinaryShortcuts -isWalletFeatureEnabled

C:\Users\Admin\AppData\Local\Temp\7zSC0E2B3B8\BlueStacksInstaller.exe

"C:\Users\Admin\AppData\Local\Temp\7zSC0E2B3B8\BlueStacksInstaller.exe" -versionMachineID=d9eaf7ba-4c63-4c2e-bbe3-73777168c2e0 -machineID=bedf8780-326b-4932-b095-3f6c7a7b59d0 -pddir="C:\ProgramData\BlueStacks_nxt" -defaultImageName=Pie64 -imageToLaunch=Pie64 -isSSE4Available=1 -appToLaunch=bsx -bsxVersion=10.41.210.1001 -country=US -skipBinaryShortcuts -isWalletFeatureEnabled

C:\Users\Admin\AppData\Local\Temp\7zSC0E2B3B8\HD-CheckCpu.exe

"C:\Users\Admin\AppData\Local\Temp\7zSC0E2B3B8\HD-CheckCpu.exe" --cmd checkHypervEnabled

C:\ProgramData\BlueStacksServicesSetup.exe

"C:\ProgramData\BlueStacksServicesSetup.exe"

C:\Windows\SysWOW64\cmd.exe

cmd /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq BlueStacksServices.exe" | find "BlueStacksServices.exe"

C:\Windows\SysWOW64\tasklist.exe

tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq BlueStacksServices.exe"

C:\Windows\SysWOW64\find.exe

find "BlueStacksServices.exe"

C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe

"C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe" --hidden --initialLaunch

C:\Windows\system32\cscript.exe

cscript.exe

C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe

"C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\bluestacks-services" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1404 --field-trial-handle=1592,i,15117155858831184089,14251078412914070169,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2

\??\c:\windows\system32\cscript.exe

c:\windows\system32\cscript.exe //Nologo C:\Users\Admin\AppData\Local\Programs\bluestacks-services\resources\regedit\vbs\regList.wsf A HKCU\SOFTWARE\BlueStacksServices

C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe

"C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\bluestacks-services" --mojo-platform-channel-handle=1428 --field-trial-handle=1592,i,15117155858831184089,14251078412914070169,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8

\??\c:\windows\system32\cscript.exe

c:\windows\system32\cscript.exe //Nologo C:\Users\Admin\AppData\Local\Programs\bluestacks-services\resources\regedit\vbs\regList.wsf A HKCU\SOFTWARE\BlueStacksServices

\??\c:\windows\system32\cscript.exe

c:\windows\system32\cscript.exe //Nologo C:\Users\Admin\AppData\Local\Programs\bluestacks-services\resources\regedit\vbs\regPutValue.wsf A

\??\c:\windows\system32\cscript.exe

c:\windows\system32\cscript.exe //Nologo C:\Users\Admin\AppData\Local\Programs\bluestacks-services\resources\regedit\vbs\regPutValue.wsf A

\??\c:\windows\system32\cscript.exe

c:\windows\system32\cscript.exe //Nologo C:\Users\Admin\AppData\Local\Programs\bluestacks-services\resources\regedit\vbs\regList.wsf A "HKCU\SOFTWARE\BlueStacks X"

C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe

"C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\bluestacks-services" --app-user-model-id=com.bluestacks.services --app-path="C:\Users\Admin\AppData\Local\Programs\bluestacks-services\resources\app.asar" --enable-sandbox --first-renderer-process --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2484 --field-trial-handle=1592,i,15117155858831184089,14251078412914070169,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

\??\c:\windows\system32\cscript.exe

c:\windows\system32\cscript.exe //Nologo C:\Users\Admin\AppData\Local\Programs\bluestacks-services\resources\regedit\vbs\regList.wsf A "HKCU\SOFTWARE\BlueStacks X"

\??\c:\windows\system32\cscript.exe

c:\windows\system32\cscript.exe //Nologo C:\Users\Admin\AppData\Local\Programs\bluestacks-services\resources\regedit\vbs\regList.wsf A "HKCU\SOFTWARE\BlueStacks X"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

\??\c:\windows\system32\cscript.exe

c:\windows\system32\cscript.exe //Nologo C:\Users\Admin\AppData\Local\Programs\bluestacks-services\resources\regedit\vbs\regList.wsf A HKLM\SOFTWARE\BlueStacks_nxt

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Program Files (x86)\BlueStacks X\BlueStacks X.exe

"C:\Program Files (x86)\BlueStacks X\BlueStacks X.exe"

C:\Program Files (x86)\BlueStacks X\BlueStacksWeb.exe

BlueStacksWeb.exe --type=renderer --disable-speech-api --enable-threaded-compositing --enable-features=AllowContentInitiatedDataUrlNavigations,NetworkServiceInProcess,TracingServiceInProcess --disable-features=BackgroundFetch,ConsolidatedMovementXY,DnsOverHttpsUpgrade,InstalledApp,MojoVideoCapture,PictureInPicture,SmsReceiver,UseSkiaRenderer,WebPayments,WebUSB --lang=es --webengine-schemes=qrc:sLV --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=3 --mojo-platform-channel-handle=3656 /prefetch:1

C:\Program Files (x86)\BlueStacks X\BlueStacksWeb.exe

BlueStacksWeb.exe --type=renderer --disable-speech-api --enable-threaded-compositing --enable-features=AllowContentInitiatedDataUrlNavigations,NetworkServiceInProcess,TracingServiceInProcess --disable-features=BackgroundFetch,ConsolidatedMovementXY,DnsOverHttpsUpgrade,InstalledApp,MojoVideoCapture,PictureInPicture,SmsReceiver,UseSkiaRenderer,WebPayments,WebUSB --lang=es --webengine-schemes=qrc:sLV --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=3712 /prefetch:1

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Users\Admin\AppData\Local\BlueStacks X\BlueStacks-Installer_5.21.210.1023_amd64_native.exe

"C:\Users\Admin\AppData\Local\BlueStacks X\BlueStacks-Installer_5.21.210.1023_amd64_native.exe" -s -defaultImageName Pie64 -imageToLaunch Pie64 -skipBinaryShortcuts -appToLaunch=bsx

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Bootstrapper.exe

"C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Bootstrapper.exe" -s -defaultImageName Pie64 -imageToLaunch Pie64 -skipBinaryShortcuts -appToLaunch=bsx

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\BlueStacksInstaller.exe

"C:\Users\Admin\AppData\Local\Temp\7zS444D342A\BlueStacksInstaller.exe" -s -defaultImageName="Pie64" -imageToLaunch="Pie64" -skipBinaryShortcuts -appToLaunch="bsx" -parentpath="C:\Users\Admin\AppData\Local\BlueStacks X\BlueStacks-Installer_5.21.210.1023_amd64_native.exe"

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\7zr.exe

"C:\Users\Admin\AppData\Local\Temp\7zS444D342A\7zr.exe" x "C:\Users\Admin\AppData\Local\Temp\7zS444D342A\CommonInstallUtils.zip" -o"C:\Users\Admin\AppData\Local\Temp\7zS444D342A\" -aoa

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\7zr.exe

"C:\Users\Admin\AppData\Local\Temp\7zS444D342A\7zr.exe" x "C:\Users\Admin\AppData\Local\Temp\7zS444D342A\QtRedistx64.zip" -o"C:\Users\Admin\AppData\Local\Temp\7zS444D342A\" -aoa

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\HD-ForceGPU.exe

"C:\Users\Admin\AppData\Local\Temp\7zS444D342A\HD-ForceGPU.exe" 1 "C:\Program Files\BlueStacks_nxt"

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS444D342A\HD-GLCheck.exe" 1 2

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS444D342A\HD-GLCheck.exe" 4 2

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS444D342A\HD-GLCheck.exe" 2 2

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS444D342A\HD-GLCheck.exe" 1 1

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS444D342A\HD-GLCheck.exe" 4 1

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS444D342A\HD-GLCheck.exe" 2 1

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\HD-CheckCpu.exe

"C:\Users\Admin\AppData\Local\Temp\7zS444D342A\HD-CheckCpu.exe" --cmd checkSSE4

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\7zr.exe

"C:\Users\Admin\AppData\Local\Temp\7zS444D342A\7zr.exe" x "C:\Users\Admin\AppData\Local\Temp\7zS444D342A\PF.zip" -o"C:\Program Files\BlueStacks_nxt" -aoa

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS444D342A\\HD-GLCheck.exe" 2

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS444D342A\\HD-GLCheck.exe" 3

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS444D342A\\HD-GLCheck.exe" 1

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\7zr.exe

"C:\Users\Admin\AppData\Local\Temp\7zS444D342A\7zr.exe" x "C:\Users\Admin\AppData\Local\Temp\7zS444D342A\QtRedistx64.zip" -o"C:\Program Files\BlueStacks_nxt" -aoa

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\7zr.exe

"C:\Users\Admin\AppData\Local\Temp\7zS444D342A\7zr.exe" x "C:\Users\Admin\AppData\Local\Temp\7zS444D342A\PD.zip" -o"C:\ProgramData\BlueStacks_nxt" -aoa

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\7zr.exe

"C:\Users\Admin\AppData\Local\Temp\7zS444D342A\7zr.exe" x "C:\ProgramData\Pie64_5.21.210.1023.exe" -o"C:\ProgramData\BlueStacks_nxt\Engine\Pie64" -aoa

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe

"C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.15063.0 --user-data-dir="C:\Users\Admin\AppData\Roaming\bluestacks-services" --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3156 --field-trial-handle=1592,i,15117155858831184089,14251078412914070169,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" advfirewall firewall delete rule name="BlueStacks Service"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" advfirewall firewall add rule name="BlueStacks Service" dir=in action=allow program="C:\Program Files\BlueStacks_nxt\HD-Player.exe" enable=yes

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" advfirewall firewall delete rule name="BlueStacksAppplayerWeb"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" advfirewall firewall add rule name="BlueStacksAppplayerWeb" dir=in action=allow program="C:\Program Files\BlueStacks_nxt\BlueStacksAppplayerWeb.exe" enable=yes

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\HD-CheckCpu.exe

"C:\Users\Admin\AppData\Local\Temp\7zS444D342A\HD-CheckCpu.exe" --cmd checkSSE3

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\SYSTEM32\cmd.exe

"cmd.exe" /c "sc.exe delete BlueStacksDrv_nxt"

C:\Windows\system32\sc.exe

sc.exe delete BlueStacksDrv_nxt

C:\Windows\SYSTEM32\reg.exe

"reg.exe" EXPORT HKLM\Software\BlueStacks_nxt "C:\Users\Admin\AppData\Local\Temp\x1jd1vcn.yxl\RegHKLM.txt"

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\7zr.exe

"C:\Users\Admin\AppData\Local\Temp\7zS444D342A\7zr.exe" a "C:\Users\Admin\AppData\Local\Temp\Installer.zip" -m0=LZMA:a=1 "C:\Users\Admin\AppData\Local\Temp\x1jd1vcn.yxl\*"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Users\Admin\AppData\Local\BlueStacks X\BlueStacks-Installer_5.21.210.1023_amd64_native.exe

"C:\Users\Admin\AppData\Local\BlueStacks X\BlueStacks-Installer_5.21.210.1023_amd64_native.exe" -s -defaultImageName Pie64 -imageToLaunch Pie64 -skipBinaryShortcuts -appToLaunch=bsx

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\Bootstrapper.exe

"C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\Bootstrapper.exe" -s -defaultImageName Pie64 -imageToLaunch Pie64 -skipBinaryShortcuts -appToLaunch=bsx

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\BlueStacksInstaller.exe

"C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\BlueStacksInstaller.exe" -s -defaultImageName="Pie64" -imageToLaunch="Pie64" -skipBinaryShortcuts -appToLaunch="bsx" -parentpath="C:\Users\Admin\AppData\Local\BlueStacks X\BlueStacks-Installer_5.21.210.1023_amd64_native.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\7zr.exe

"C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\7zr.exe" x "C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\CommonInstallUtils.zip" -o"C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\" -aoa

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\7zr.exe

"C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\7zr.exe" x "C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtRedistx64.zip" -o"C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\" -aoa

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\HD-ForceGPU.exe

"C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\HD-ForceGPU.exe" 1 "C:\Program Files\BlueStacks_nxt"

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\HD-GLCheck.exe" 1 2

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\HD-GLCheck.exe" 4 2

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\HD-GLCheck.exe" 2 2

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\HD-GLCheck.exe" 1 1

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\HD-GLCheck.exe" 4 1

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\HD-GLCheck.exe" 2 1

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\HD-CheckCpu.exe

"C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\HD-CheckCpu.exe" --cmd checkSSE4

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\7zr.exe

"C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\7zr.exe" x "C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\PF.zip" -o"C:\Program Files\BlueStacks_nxt" -aoa

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\\HD-GLCheck.exe" 2

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\\HD-GLCheck.exe" 3

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\\HD-GLCheck.exe" 1

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\7zr.exe

"C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\7zr.exe" x "C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtRedistx64.zip" -o"C:\Program Files\BlueStacks_nxt" -aoa

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\7zr.exe

"C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\7zr.exe" x "C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\PD.zip" -o"C:\ProgramData\BlueStacks_nxt" -aoa

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\7zr.exe

"C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\7zr.exe" x "C:\Users\Admin\AppData\Local\BlueStacks X\Pie64_5.21.210.1023.exe" -o"C:\ProgramData\BlueStacks_nxt\Engine\Pie64" -aoa

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" advfirewall firewall delete rule name="BlueStacks Service"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" advfirewall firewall add rule name="BlueStacks Service" dir=in action=allow program="C:\Program Files\BlueStacks_nxt\HD-Player.exe" enable=yes

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" advfirewall firewall delete rule name="BlueStacksAppplayerWeb"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" advfirewall firewall add rule name="BlueStacksAppplayerWeb" dir=in action=allow program="C:\Program Files\BlueStacks_nxt\BlueStacksAppplayerWeb.exe" enable=yes

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\HD-CheckCpu.exe

"C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\HD-CheckCpu.exe" --cmd checkSSE3

C:\Windows\SYSTEM32\cmd.exe

"cmd.exe" /c "sc.exe delete BlueStacksDrv_nxt"

C:\Windows\system32\sc.exe

sc.exe delete BlueStacksDrv_nxt

C:\Windows\SYSTEM32\reg.exe

"reg.exe" EXPORT HKLM\Software\BlueStacks_nxt "C:\Users\Admin\AppData\Local\Temp\zycuu5m3.22p\RegHKLM.txt"

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\7zr.exe

"C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\7zr.exe" a "C:\Users\Admin\AppData\Local\Temp\Installer.zip" -m0=LZMA:a=1 "C:\Users\Admin\AppData\Local\Temp\zycuu5m3.22p\*"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca

C:\Windows\system32\browser_broker.exe

C:\Windows\system32\browser_broker.exe -Embedding

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Users\Admin\AppData\Local\BlueStacks X\BlueStacks-Installer_5.21.210.1023_amd64_native.exe

"C:\Users\Admin\AppData\Local\BlueStacks X\BlueStacks-Installer_5.21.210.1023_amd64_native.exe" -s -defaultImageName Pie64 -imageToLaunch Pie64 -skipBinaryShortcuts -appToLaunch=bsx

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\Bootstrapper.exe

"C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\Bootstrapper.exe" -s -defaultImageName Pie64 -imageToLaunch Pie64 -skipBinaryShortcuts -appToLaunch=bsx

C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\BlueStacksInstaller.exe

"C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\BlueStacksInstaller.exe" -s -defaultImageName="Pie64" -imageToLaunch="Pie64" -skipBinaryShortcuts -appToLaunch="bsx" -parentpath="C:\Users\Admin\AppData\Local\BlueStacks X\BlueStacks-Installer_5.21.210.1023_amd64_native.exe"

C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\7zr.exe

"C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\7zr.exe" x "C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\CommonInstallUtils.zip" -o"C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\" -aoa

C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\7zr.exe

"C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\7zr.exe" x "C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\QtRedistx64.zip" -o"C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\" -aoa

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\HD-ForceGPU.exe

"C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\HD-ForceGPU.exe" 1 "C:\Program Files\BlueStacks_nxt"

C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\HD-GLCheck.exe" 1 2

C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\HD-GLCheck.exe" 4 2

C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\HD-GLCheck.exe" 2 2

C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\HD-GLCheck.exe" 1 1

C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\HD-GLCheck.exe" 4 1

C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\HD-GLCheck.exe" 2 1

C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\HD-CheckCpu.exe

"C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\HD-CheckCpu.exe" --cmd checkSSE4

C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\7zr.exe

"C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\7zr.exe" x "C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\PF.zip" -o"C:\Program Files\BlueStacks_nxt" -aoa

C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\\HD-GLCheck.exe" 2

C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\\HD-GLCheck.exe" 3

C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\\HD-GLCheck.exe" 1

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\7zr.exe

"C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\7zr.exe" x "C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\QtRedistx64.zip" -o"C:\Program Files\BlueStacks_nxt" -aoa

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\7zr.exe

"C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\7zr.exe" x "C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\PD.zip" -o"C:\ProgramData\BlueStacks_nxt" -aoa

C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\7zr.exe

"C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\7zr.exe" x "C:\Users\Admin\AppData\Local\BlueStacks X\Pie64_5.21.210.1023.exe" -o"C:\ProgramData\BlueStacks_nxt\Engine\Pie64" -aoa

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" advfirewall firewall delete rule name="BlueStacks Service"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" advfirewall firewall add rule name="BlueStacks Service" dir=in action=allow program="C:\Program Files\BlueStacks_nxt\HD-Player.exe" enable=yes

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" advfirewall firewall delete rule name="BlueStacksAppplayerWeb"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" advfirewall firewall add rule name="BlueStacksAppplayerWeb" dir=in action=allow program="C:\Program Files\BlueStacks_nxt\BlueStacksAppplayerWeb.exe" enable=yes

C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\HD-CheckCpu.exe

"C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\HD-CheckCpu.exe" --cmd checkSSE3

C:\Windows\SYSTEM32\cmd.exe

"cmd.exe" /c "sc.exe delete BlueStacksDrv_nxt"

C:\Windows\system32\sc.exe

sc.exe delete BlueStacksDrv_nxt

C:\Windows\SYSTEM32\reg.exe

"reg.exe" EXPORT HKLM\Software\BlueStacks_nxt "C:\Users\Admin\AppData\Local\Temp\clj2xb2z.p2k\RegHKLM.txt"

C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\7zr.exe

"C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\7zr.exe" a "C:\Users\Admin\AppData\Local\Temp\Installer.zip" -m0=LZMA:a=1 "C:\Users\Admin\AppData\Local\Temp\clj2xb2z.p2k\*"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

Network

Country Destination Domain Proto
US 8.8.8.8:53 cloud.bluestacks.com udp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 8.8.8.8:53 181.86.160.34.in-addr.arpa udp
US 8.8.8.8:53 ak-build.bluestacks.com udp
NL 96.16.53.139:443 ak-build.bluestacks.com tcp
US 8.8.8.8:53 139.53.16.96.in-addr.arpa udp
N/A 127.0.0.1:49930 tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
N/A 127.0.0.1:49938 tcp
US 8.8.8.8:53 cloud.bluestacks.com udp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
N/A 127.0.0.1:62444 tcp
US 8.8.8.8:53 wallet.now.gg udp
US 34.96.124.47:443 wallet.now.gg tcp
US 8.8.8.8:53 cloud.bluestacks.com udp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 8.8.8.8:53 47.124.96.34.in-addr.arpa udp
US 8.8.8.8:53 redirector.gvt1.com udp
US 8.8.8.8:53 redirector.gvt1.com udp
US 8.8.8.8:53 wallet.now.gg udp
US 8.8.8.8:53 wallet.now.gg udp
US 34.96.124.47:443 wallet.now.gg tcp
US 8.8.8.8:53 redirector.gvt1.com udp
US 8.8.8.8:53 redirector.gvt1.com udp
US 8.8.8.8:53 redirector.gvt1.com udp
GB 142.250.200.14:443 redirector.gvt1.com tcp
US 8.8.8.8:53 r5---sn-aigl6ns6.gvt1.com udp
US 8.8.8.8:53 r5---sn-aigl6ns6.gvt1.com udp
GB 74.125.105.10:443 r5---sn-aigl6ns6.gvt1.com udp
GB 74.125.105.10:443 r5---sn-aigl6ns6.gvt1.com tcp
US 8.8.8.8:53 14.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 10.105.125.74.in-addr.arpa udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:53 4.4.8.8.in-addr.arpa udp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 8.8.8.8:53 bsxplayerv2.bluestacks.com udp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 8.8.8.8:53 x-api.bluestacks.com udp
US 8.8.8.8:53 ak-build.bluestacks.com udp
US 163.181.154.235:443 x-api.bluestacks.com tcp
NL 96.16.53.139:443 ak-build.bluestacks.com tcp
US 8.8.8.8:53 235.154.181.163.in-addr.arpa udp
US 8.8.8.8:53 bsxplayerv2.bluestacks.com udp
US 163.181.154.237:443 bsxplayerv2.bluestacks.com tcp
US 8.8.8.8:53 dev-x.bstkinternal.net udp
SG 8.214.38.30:443 dev-x.bstkinternal.net tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 163.181.154.235:443 bsxplayerv2.bluestacks.com tcp
SG 8.214.38.30:443 dev-x.bstkinternal.net tcp
US 8.8.8.8:53 bst-launcher-sgp.bluestacks.cn udp
US 8.8.8.8:53 237.154.181.163.in-addr.arpa udp
US 8.8.8.8:53 30.38.214.8.in-addr.arpa udp
US 163.181.154.233:443 bst-launcher-sgp.bluestacks.cn tcp
US 163.181.154.233:443 bst-launcher-sgp.bluestacks.cn tcp
US 8.8.8.8:53 233.154.181.163.in-addr.arpa udp
US 8.8.8.8:53 202.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 cloud.bluestacks.com udp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 8.8.8.8:53 now.gg udp
CH 13.224.103.112:443 now.gg tcp
US 8.8.8.8:53 112.103.224.13.in-addr.arpa udp
US 8.8.8.8:53 11.103.224.13.in-addr.arpa udp
US 8.8.8.8:53 cdn-bgp.bluestacks.com udp
NL 96.16.53.161:443 cdn-bgp.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 8.8.8.8:53 cdn-icon.bluestacks.com udp
NL 104.110.191.155:443 cdn-icon.bluestacks.com tcp
NL 104.110.191.155:443 cdn-icon.bluestacks.com tcp
NL 104.110.191.155:443 cdn-icon.bluestacks.com tcp
NL 104.110.191.155:443 cdn-icon.bluestacks.com tcp
NL 96.16.53.161:443 cdn-bgp.bluestacks.com tcp
NL 104.110.191.155:443 cdn-icon.bluestacks.com tcp
NL 96.16.53.161:443 cdn-bgp.bluestacks.com tcp
NL 96.16.53.161:443 cdn-bgp.bluestacks.com tcp
NL 96.16.53.161:443 cdn-bgp.bluestacks.com tcp
NL 96.16.53.161:443 cdn-bgp.bluestacks.com tcp
US 8.8.8.8:53 234.197.17.2.in-addr.arpa udp
US 8.8.8.8:53 161.53.16.96.in-addr.arpa udp
NL 96.16.53.161:443 cdn-bgp.bluestacks.com tcp
NL 96.16.53.161:443 cdn-bgp.bluestacks.com tcp
US 8.8.8.8:53 155.191.110.104.in-addr.arpa udp
NL 96.16.53.161:443 cdn-bgp.bluestacks.com tcp
NL 96.16.53.161:443 cdn-bgp.bluestacks.com tcp
NL 96.16.53.161:443 cdn-bgp.bluestacks.com tcp
NL 96.16.53.139:443 cdn-bgp.bluestacks.com tcp
NL 96.16.53.139:443 cdn-bgp.bluestacks.com tcp
US 8.8.8.8:53 cdn.now.gg udp
NL 96.16.53.134:443 cdn.now.gg tcp
NL 96.16.53.134:443 cdn.now.gg tcp
NL 96.16.53.134:443 cdn.now.gg tcp
NL 96.16.53.134:443 cdn.now.gg tcp
NL 96.16.53.134:443 cdn.now.gg tcp
NL 96.16.53.134:443 cdn.now.gg tcp
NL 96.16.53.134:443 cdn.now.gg tcp
NL 96.16.53.134:443 cdn.now.gg tcp
NL 96.16.53.134:443 cdn.now.gg tcp
NL 96.16.53.134:443 cdn.now.gg tcp
NL 96.16.53.134:443 cdn.now.gg tcp
US 8.8.8.8:53 134.53.16.96.in-addr.arpa udp
US 8.8.8.8:53 cdn-bgp.bluestacks.com udp
NL 96.16.53.161:443 cdn-bgp.bluestacks.com tcp
NL 96.16.53.161:443 cdn-bgp.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
NL 96.16.53.161:443 cdn-bgp.bluestacks.com tcp
US 8.8.8.8:53 99.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 cdn-icon.bluestacks.com udp
NL 104.110.191.155:443 cdn-icon.bluestacks.com tcp
NL 104.110.191.155:443 cdn-icon.bluestacks.com tcp
NL 104.110.191.155:443 cdn-icon.bluestacks.com tcp
NL 104.110.191.155:443 cdn-icon.bluestacks.com tcp
NL 104.110.191.155:443 cdn-icon.bluestacks.com tcp
US 8.8.8.8:53 66.112.168.52.in-addr.arpa udp
US 34.160.86.181:443 cloud.bluestacks.com tcp
NL 104.110.191.155:443 cdn-icon.bluestacks.com tcp
NL 104.110.191.155:443 cdn-icon.bluestacks.com tcp
NL 104.110.191.155:443 cdn-icon.bluestacks.com tcp
NL 104.110.191.155:443 cdn-icon.bluestacks.com tcp
NL 104.110.191.155:443 cdn-icon.bluestacks.com tcp
NL 104.110.191.155:443 cdn-icon.bluestacks.com tcp
NL 104.110.191.155:443 cdn-icon.bluestacks.com tcp
NL 104.110.191.155:443 cdn-icon.bluestacks.com tcp
NL 104.110.191.155:443 cdn-icon.bluestacks.com tcp
US 163.181.154.237:443 bst-launcher-sgp.bluestacks.cn tcp
US 8.8.8.8:53 cdn.now.gg udp
NL 96.16.53.134:443 cdn.now.gg tcp
NL 96.16.53.134:443 cdn.now.gg tcp
NL 96.16.53.134:443 cdn.now.gg tcp
NL 96.16.53.139:443 cdn-bgp.bluestacks.com tcp
US 8.8.8.8:53 cloud.bluestacks.com udp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 8.8.8.8:53 249.197.17.2.in-addr.arpa udp
US 8.8.8.8:53 storage.googleapis.com udp
GB 142.250.180.27:443 storage.googleapis.com tcp
US 8.8.8.8:53 27.180.250.142.in-addr.arpa udp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 8.8.8.8:53 bsxplayerv2.bluestacks.com udp
US 8.8.8.8:53 cdn-bgp.bluestacks.com udp
NL 96.16.53.161:443 cdn-bgp.bluestacks.com tcp
US 163.181.154.238:443 bsxplayerv2.bluestacks.com tcp
US 8.8.8.8:53 238.154.181.163.in-addr.arpa udp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
GB 142.250.180.27:443 storage.googleapis.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 8.8.8.8:53 support.bluestacks.com udp
US 104.16.51.111:443 support.bluestacks.com tcp
US 104.16.51.111:443 support.bluestacks.com tcp
US 8.8.8.8:53 111.51.16.104.in-addr.arpa udp
US 8.8.8.8:53 11.97.55.23.in-addr.arpa udp
US 8.8.8.8:53 static.zdassets.com udp
US 8.8.8.8:53 use.fontawesome.com udp
US 104.18.70.113:443 static.zdassets.com tcp
US 104.18.70.113:443 static.zdassets.com tcp
US 8.8.8.8:53 cdn.jsdelivr.net udp
US 104.21.27.152:443 use.fontawesome.com tcp
US 104.21.27.152:443 use.fontawesome.com tcp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
US 104.18.70.113:443 static.zdassets.com tcp
US 8.8.8.8:53 bluestacks.zendesk.com udp
US 8.8.8.8:53 x2.c.lencr.org udp
US 104.16.53.111:443 bluestacks.zendesk.com tcp
US 104.16.53.111:443 bluestacks.zendesk.com tcp
BE 23.55.97.11:80 x2.c.lencr.org tcp
US 8.8.8.8:53 stats.g.doubleclick.net udp
BE 74.125.71.155:443 stats.g.doubleclick.net tcp
BE 74.125.71.155:443 stats.g.doubleclick.net tcp
US 8.8.8.8:53 region1.google-analytics.com udp
US 8.8.8.8:53 113.70.18.104.in-addr.arpa udp
US 8.8.8.8:53 14.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 152.27.21.104.in-addr.arpa udp
US 8.8.8.8:53 229.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 104.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 111.53.16.104.in-addr.arpa udp
US 8.8.8.8:53 67.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 226.21.18.104.in-addr.arpa udp
US 8.8.8.8:53 155.71.125.74.in-addr.arpa udp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 104.16.51.111:443 bluestacks.zendesk.com tcp
US 104.16.51.111:443 bluestacks.zendesk.com tcp
BE 23.55.97.11:80 x2.c.lencr.org tcp
US 8.8.8.8:53 36.34.239.216.in-addr.arpa udp
US 8.8.8.8:53 cdn-icon.bluestacks.com udp
NL 104.110.191.160:443 cdn-icon.bluestacks.com tcp
NL 104.110.191.160:443 cdn-icon.bluestacks.com tcp
NL 104.110.191.160:443 cdn-icon.bluestacks.com tcp
NL 104.110.191.160:443 cdn-icon.bluestacks.com tcp
NL 104.110.191.160:443 cdn-icon.bluestacks.com tcp
NL 104.110.191.160:443 cdn-icon.bluestacks.com tcp
NL 104.110.191.160:443 cdn-icon.bluestacks.com tcp
NL 104.110.191.160:443 cdn-icon.bluestacks.com tcp
NL 104.110.191.160:443 cdn-icon.bluestacks.com tcp
US 8.8.8.8:53 160.191.110.104.in-addr.arpa udp
US 8.8.8.8:53 ak-build.bluestacks.com udp
NL 96.16.53.139:443 ak-build.bluestacks.com tcp
US 8.8.8.8:53 cloud.bluestacks.com udp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
GB 142.250.180.27:443 storage.googleapis.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 8.8.8.8:53 cloud.bluestacks.com udp
US 34.160.86.181:443 cloud.bluestacks.com tcp

Files

C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\BlueStacksInstaller.exe

MD5 c8ec5e0af9329936df1fb6382f092687
SHA1 fc8a59149198e5acef2ca6a51f01d1e3ff0f50fe
SHA256 7b3fcbf635508cde1dd74e41b3914f5b85bdb8de1bcece745ac6a05ddfde63da
SHA512 1bd43948428d964b94befe7e2b9cd74e0cb5d6af76f5adb166323510b2f775ae479e781df104222197ac5e04e83e885cf6a5ec65c7bb3c5aebd45dead24439cf

C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\BlueStacksInstaller.exe.config

MD5 1b456d88546e29f4f007cd0bf1025703
SHA1 e5c444fcfe5baf2ef71c1813afc3f2c1100cab86
SHA256 d6d316584b63bb0d670a42f88b8f84e0de0db4275f1a342084dc383ebeb278eb
SHA512 c545e416c841b8786e4589fc9ca2b732b16cdd759813ec03f558332f2436f165ec1ad2fbc65012b5709fa19ff1e8396639c17bfad150cabeb51328a39ea556e6

memory/2512-114-0x00007FF9B35C3000-0x00007FF9B35C4000-memory.dmp

memory/2512-113-0x0000000000950000-0x00000000009EE000-memory.dmp

memory/2512-115-0x000000001BBA0000-0x000000001BCA2000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\JSON.dll

MD5 f5fd966e29f5c359f78cb61a571d1be4
SHA1 a55e7ed593b4bc7a77586da0f1223cfd9d51a233
SHA256 d2c8d26f95f55431e632c8581154db7c19547b656380e051194a9d2583dd2156
SHA512 d99e6fe250bb106257f86135938635f6e7ad689b2c11a96bb274f4c4c5e9a85cfacba40122dbc953f77b5d33d886c6af30bff821f10945e15b21a24b66f6c8be

memory/2512-117-0x000000001BCB0000-0x000000001BD18000-memory.dmp

memory/2512-118-0x00007FF9B35C0000-0x00007FF9B3FAC000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\Locales\i18n.en-US.txt

MD5 206562eed57e938afe21fc6942fa8e59
SHA1 779e90fec866c0fd2f47da020651db71c89ec3dd
SHA256 27d611a71edf36307a7ed0651f6c5910292ac7e2b68074a7e33d306b3d93ec45
SHA512 275c3192a7aee28fad31beb521cf5e7c66010e7562ce244ba9fc4de352f35b4ab63180ed12a56ea0b1458c185e076e2d07ba6d8797467177d3c5b2ac14371b26

C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\Locales\i18n.es-ES.txt

MD5 5f5cacda94bb2384f9d6bdece58ac526
SHA1 c10f095a312e623b79c42ab7ca3f48130b348d62
SHA256 2b698fd5d6f4fd959c4a24b47b02c2e1a9f51a72a66cfab3ed72d8f667d221cd
SHA512 1ca9373b2eff0620d02249ab82fe46644f6452db36a2b61334cc258d2e9910200c33543f7794e0bdc69761f5b86aedacca0fe6491293ecd1df2992eaa5aaae99

C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\HD-CheckCpu.exe

MD5 81234fd9895897b8d1f5e6772a1b38d0
SHA1 80b2fec4a85ed90c4db2f09b63bd8f37038db0d3
SHA256 2e14887f3432b4a313442247fc669f891dbdad7ef1a2d371466a2afa88074a4c
SHA512 4c924d6524dc2c7d834bfc1a0d98b21753a7bf1e94b1c2c6650f755e6f265512d3a963bc7bc745351f79f547add57c37e29ba9270707edbf62b60df3a541bc16

C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\Assets\loader.png

MD5 03903fd42ed2ee3cb014f0f3b410bcb4
SHA1 762a95240607fe8a304867a46bc2d677f494f5c2
SHA256 076263cc65f9824f4f82eb6beaa594d1df90218a2ee21664cf209181557e04b1
SHA512 8b0e717268590e5287c07598a06d89220c5e9a33cd1c29c55f8720321f4b3efc869d20c61fcc892e13188d77f0fdc4c73a2ee6dece174bf876fcc3a6c5683857

memory/2512-127-0x000000001DBF0000-0x000000001E116000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\ThemeFile

MD5 c3e6bab4f92ee40b9453821136878993
SHA1 94493a6b3dfb3135e5775b7d3be227659856fbc4
SHA256 de1a2e6b560e036da5ea6b042e29e81a5bfcf67dde89670c332fc5199e811ba6
SHA512 a64b6b06b3a0f3591892b60e59699682700f4018b898efe55d6bd5fb417965a55027671c58092d1eb7e21c2dbac42bc68dfb8c70468d98bed45a8cff0e945895

memory/2512-129-0x000000001DB40000-0x000000001DB60000-memory.dmp

memory/2512-131-0x000000001D260000-0x000000001D298000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\Assets\installer_minimize.png

MD5 38b539a1e4229738e5c196eedb4eb225
SHA1 f027b08dce77c47aaed75a28a2fce218ff8c936c
SHA256 a064f417e3c2b8f3121a14bbded268b2cdf635706880b7006f931de31476bbc2
SHA512 2ce433689a94fae454ef65e0e9ec33657b89718bbb5a038bf32950f6d68722803922f3a427278bad432395a1716523e589463fcce4279dc2a895fd77434821cc

C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\Assets\close_red.png

MD5 93216b2f9d66d423b3e1311c0573332d
SHA1 5efaebec5f20f91f164f80d1e36f98c9ddaff805
SHA256 d0b6d143642d356b40c47459a996131a344cade6bb86158f1b74693426b09bfb
SHA512 922a7292de627c5e637818556d25d9842a88e89f2b198885835925679500dfd44a1e25ce79e521e63c4f84a6b0bd6bf98e46143ad8cee80ecdbaf3d3bc0f3a32

C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\Assets\installer_logo.png

MD5 e33432b5d6dafb8b58f161cf38b8f177
SHA1 d7f520887ce1bfa0a1abd49c5a7b215c24cbbf6a
SHA256 9f3104493216c1fa114ff935d23e3e41c7c3511792a30b10a40b507936c0d183
SHA512 520dc99f3176117ebc28da5ef5439b132486ef67d02fa17f28b7eab0c59db0fa99566e44c0ca7bb75c9e7bd5244e4a23d87611a55c841c6f9c9776e457fb1cbf

C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\Assets\custom.png

MD5 03b17f0b1c067826b0fcc6746cced2cb
SHA1 e07e4434e10df4d6c81b55fceb6eca2281362477
SHA256 fbece8bb5f4dfa55dcfbf41151b10608af807b9477e99acf0940954a11e68f7b
SHA512 67c78ec01e20e9c8d9cdbba665bb2fd2bb150356f30b88d3d400bbdb0ae92010f5d7bcb683dcf6f895722a9151d8e669d8bef913eb6e728ba56bb02f264573b2

C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\Assets\unchecked_gray.png

MD5 e50df2a0768f7fc4c3fe8d784564fea3
SHA1 d1fc4db50fe8e534019eb7ce70a61fd4c954621a
SHA256 671f26795b12008fbea1943143f660095f3dca5d925f67d765e2352fd7ee2396
SHA512 c87a8308a73b17cbdd179737631fb1ba7fdaeb65e82263f6617727519b70a81266bb695867b9e599c1306ee2cf0de525452f77ce367ca89bf870ea3ae7189998

memory/2512-138-0x000000001D320000-0x000000001D366000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\Assets\setpath.png

MD5 b2e7f40179744c74fded932e829cb12a
SHA1 a0059ab8158a497d2cf583a292b13f87326ec3f0
SHA256 5bbb2f41f9f3a805986c3c88a639bcc22d90067d4b8de9f1e21e3cf9e5c1766b
SHA512 b95b7ebdb4a74639276eaa5c055fd8d9431e2f58a5f7c57303f7cf22e8b599f6f2a7852074cf71b19b49eb31cc9bf2509aedf41d608981d116e49a00030c797c

C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\Assets\backicon.png

MD5 7ff5dc8270b5fa7ef6c4a1420bd67a7f
SHA1 b224300372feaa97d882ca2552b227c0f2ef4e3e
SHA256 fa64884054171515e97b78aaa1aad1ec5baa9d1daf9c682e0b3fb4a41a9cb1c1
SHA512 f0d5a842a01b99f189f3d46ab59d2c388a974951b042b25bbce54a15f5a3f386984d19cfca22ba1440eebd79260066a37dfeff6cb0d1332fca136add14488eef

memory/2512-141-0x000000001D2D0000-0x000000001D2D8000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\7zS0146EA57\Assets\installer_bg.jpg

MD5 3478e24ba1dd52c80a0ff0d43828b6b5
SHA1 b5b13bbf3fb645efb81d3562296599e76a2abac0
SHA256 4c7471c986e16de0cd451be27d4b3171e595fe2916b4b3bf7ca52df6ec368904
SHA512 5c8c9cc76d6dbc7ce482d0d1b6c2f3d48a7a510cd9ed01c191328763e1bccb56daeb3d18c33a9b10ac7c9780127007aa13799fa82d838de27fbe0a02ad98119d

memory/2512-143-0x00007FF9B35C3000-0x00007FF9B35C4000-memory.dmp

memory/2512-144-0x00007FF9B35C0000-0x00007FF9B3FAC000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\nsuD235.tmp\nsDui.dll

MD5 97293a34cbd5897ee92dd96bb666fbbf
SHA1 06d39908d3ac86332758159d5e4accb80753aaf3
SHA256 8b08f564483fc6f4e61d0dc33ee8da4572055ecfb669c9d73645130aad17b4e6
SHA512 bd3688fed0397f19bef1f831d889a8f2d168262d243b9dd388ad77ab6422eca6907dbcac670092b3d7d1f3a4c0c524a68d7f10942d67f591931cfb7c9fa3046c

\Users\Admin\AppData\Local\Temp\nsuD235.tmp\BgWorker.dll

MD5 36c81676ada53ceb99e06693108d8cce
SHA1 d31fa4aebd584238b3edc4768dd5414494610889
SHA256 a9e4f7ec65670d2ce375ffaf09b6d07f4cd531132ca002452287a4d540154a38
SHA512 1300de7b3e1ac9e706e0aad0b70e3e2a21db8c860e05b314a52e63dd66b5dffdf6be1e38ab6ede13bfd3a64631cc909486bf4b1403e7d821e3b566edc514c63c

\Users\Admin\AppData\Local\Temp\nsuD235.tmp\nsDialogs.dll

MD5 f7b92b78f1a00a872c8a38f40afa7d65
SHA1 872522498f69ad49270190c74cf3af28862057f2
SHA256 2bee549b2816ba29f81c47778d9e299c3a364b81769e43d5255310c2bd146d6e
SHA512 3ad6afa6269b48f238b48cf09eeefdef03b58bab4e25282c8c2887b4509856cf5cbb0223fbb06c822fb745aeea000dd1eee878df46ad0ba7f2ef520a7a607f79

\Users\Admin\AppData\Local\Temp\nsuD235.tmp\System.dll

MD5 959ea64598b9a3e494c00e8fa793be7e
SHA1 40f284a3b92c2f04b1038def79579d4b3d066ee0
SHA256 03cd57ab00236c753e7ddeee8ee1c10839ace7c426769982365531042e1f6f8b
SHA512 5e765e090f712beffce40c5264674f430b08719940d66e3a4d4a516fd4ade859f7853f614d9d6bbb602780de54e11110d66dbb0f9ca20ef6096ede531f9f6d64

\Users\Admin\AppData\Local\Temp\nsuD235.tmp\nsis7z.dll

MD5 95f6f6ab9509bc366ab9215defe4251a
SHA1 e3f4a6effd6ca5838cfe91a01967cb72edcc7b0b
SHA256 a896a9ece055d334d431cd0f856113ab925d9ee86d2dee383c0bfbbef11a5b50
SHA512 a853f70d2ea7f384df99be067724bf3ca73c63f3c3573c112f5528fc86a96bd34509d934b038e2a81833f3abb3eedbc5894921291139100e01df6e35696c0ecc

C:\Program Files (x86)\BlueStacks X\image\LocalAPK\close_pressed.svg

MD5 dfddf8d0788988c3e48fcbfb2a76cd20
SHA1 463bb61f0012289e860c32f1885a3a8f57467f2e
SHA256 9585f41eb6202e89f2087266fa31852d7f41ca8cc659b907c96753fe165f937d
SHA512 e708c5114c60f7574589d6a56c9faedda26ee4a40f0eeb25f5e12eadcf790f24fdbf393fa0aa6ad449b5337d625b092d6f8822472fa8a6ce1339aca59c50c3ca

C:\Program Files (x86)\BlueStacks X\image\LocalAPK\close_normal.svg

MD5 3221ac69d7facd8aa90ffa15aea991b0
SHA1 e0571f30f4708ec78addc726a743679ca0f05e45
SHA256 92aeae68e9e0973d9e0dc575941f1cb2e24afd0574341a46b870be7384eaa537
SHA512 5e2de0abfe60a4db16ea5e8739260c19962fbfc60869a77bde6ab3547ad8ee3ad88e74e97da31fa23be096afddad018e431d152d6d0fa21a75357a11dacb1328

C:\Program Files (x86)\BlueStacks X\image\LocalAPK\close_hover.svg

MD5 76166804e6ce35e8a0c92917b8abc071
SHA1 8bd38726a11a9633ac937b9c6f205ce5d36348b0
SHA256 1bca2e912184b8168ee8961de68d1d839f4f9827fde6f48ab100fb61e82eff90
SHA512 93c4f1af7e9f89091a207ab308e05ddd4c92406c039f7465d3b8aca7e0cc7a6c922a22e1eee2f5c88db5e89016ef69294b2a0905d7d6a90fd32835bc11929005

C:\Program Files (x86)\BlueStacks X\image\LocalAPK\close_disabled.svg

MD5 e7fdf6a9c8cae1fc1108dc5a803a1905
SHA1 2853f9ff5e63685ebb1449dcf693176b17e4ab60
SHA256 8ee5aa84139b2ea5549f7272523aeb203d73954c5ccdcf6f7407bf1a3469f13e
SHA512 a6388b24926934e20ccf7fcab41bd219dc6c0053428481d7f466bf89f26bf1a36fdff716a9ddd9ab268df73b04dff1449c6bac1f5c707e31ae2ee71c2087e0d9

C:\Program Files (x86)\BlueStacks X\BlueStacks X.exe

MD5 31619556ed6d5ca481cfcc3b8a5b6a80
SHA1 61fbb30965a5b11b6d8d26e85f0aab14868fc97b
SHA256 d19ed921fe898222fc2bf4260820d58315ef30f178e87bafffd41b9602b791e4
SHA512 1a5725d88a8005a62cb2c229235752b63698323e7c5facb564d62c7b6e09188d75935c319b91c0e82e40eb6118d7fa9bcf048065f485b7e61e47523447bc06d9

memory/2512-12675-0x0000000002A10000-0x0000000002A50000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\7zSC0E2B3B8\Assets\exit_close.png

MD5 26eb04b9e0105a7b121ea9c6601bbf2a
SHA1 efc08370d90c8173df8d8c4b122d2bb64c07ccd8
SHA256 7aaef329ba9fa052791d1a09f127551289641ea743baba171de55faa30ec1157
SHA512 9df3c723314d11a6b4ce0577eb61488061f2f96a9746a944eb6a4ee8c0c4d29131231a1b20988ef5454b79f9475b43d62c710839ecc0a9c98324f977cab6db68

C:\Users\Admin\AppData\Local\Temp\7zSC0E2B3B8\Assets\minimize_progress.png

MD5 1504b80f2a6f2d3fefc305da54a2a6c2
SHA1 432a9d89ebc2f693836d3c2f0743ea5d2077848d
SHA256 2f62d4e8c643051093f907058dddc78cc525147d9c4f4a0d78b4d0e5c90979f6
SHA512 675db04baf3199c8d94af30a1f1c252830a56a90f633c3a72aa9841738b04242902a5e7c56dd792626338e8b7eabc1f359514bb3a2e62bc36c16919e196cfd94

memory/5856-12788-0x000000001D520000-0x000000001D53A000-memory.dmp

memory/1040-12789-0x0000000000400000-0x000000000045D000-memory.dmp

memory/2512-13185-0x00007FF9B35C0000-0x00007FF9B3FAC000-memory.dmp

memory/1040-13224-0x0000000000400000-0x000000000045D000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\nshE376.tmp\WinShell.dll

MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

C:\Users\Admin\AppData\Local\Temp\nshE376.tmp\StdUtils.dll

MD5 c6a6e03f77c313b267498515488c5740
SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

C:\Users\Admin\AppData\Local\Temp\nshE376.tmp\Registry.dll

MD5 2b7007ed0262ca02ef69d8990815cbeb
SHA1 2eabe4f755213666dbbbde024a5235ddde02b47f
SHA256 0b25b20f26de5d5bd795f934c70447112b4981343fcb2dfab3374a4018d28c2d
SHA512 aa75ee59ca0b8530eb7298b74e5f334ae9d14129f603b285a3170b82103cfdcc175af8185317e6207142517769e69a24b34fcdf0f58ed50a4960cbe8c22a0aca

C:\Users\Admin\AppData\Roaming\bluestacks-services\config.json

MD5 10ee13e6245d6f6bab05870ede776879
SHA1 a94f80a85b7709d549f34321a3c4baf31a13d5d0
SHA256 67127cf351230b45f0532e81f76f001dfd64f7f08229bf6849df91d7c247b24e
SHA512 0038c206db1fd627529818909fd5bd06b168065c9582378631cff6f818fb9c5c573e0063f8c83d8bc1fdc8b6a4a17faeafe9a06877c1cec413b73d7224ad1db5

C:\Users\Admin\AppData\Roaming\bluestacks-services\config.json.tmp-820167626976f7ed

MD5 7da03921ae6b737e109cf5907b04a48e
SHA1 6247ae1dafb61b5290bd3cbaa96304a05228fd58
SHA256 cc83e83c8c85e0bedbf0ef4694b661c81a25902a9027674ade1b5ba641c9de6e
SHA512 11467757464c0e92688d9d1df2cd47227858097068bb64a943fe51b601c94e2eb768f125712f539f182a356dccb76c24fe125c9894b649f31605768ebe78542f

memory/6300-13755-0x00007FF9CE5A0000-0x00007FF9CE5A1000-memory.dmp

memory/6300-13754-0x00007FF9CD050000-0x00007FF9CD051000-memory.dmp

C:\Users\Admin\AppData\Roaming\bluestacks-services\config.json

MD5 3cc72ab00cb63ef67f461dd242ff2bd6
SHA1 c3908b3461ec9ea730784766a1651ae29ef73db7
SHA256 c44626b5904b0d22bf8bba0b2caac4918942d196cd6c76c6dd3ff368e29e876b
SHA512 af54f27087f901432e1fb4a22c247d955ac779f880b44c3f1bac1afa6f6b97f1efb4ee7f77c2054a7131f44243b6207d05b1e49c9fec6909d69907abcf0ad11e

memory/6300-13810-0x000001F09B830000-0x000001F09CC67000-memory.dmp

C:\Users\Admin\AppData\Local\BlueStacks X\Log\log.txt

MD5 eab983ca5a8c858b4af0d9365fe9736f
SHA1 d2702a697b95c9307abe397c2d88d7a04e4269bc
SHA256 2836c839233a13515285502429b7d98bba2029ec4ef778c6d545ed613f93146c
SHA512 583ffdf25365abfdffbb74855a73417e6d9dc5585ea23f124719411037c7323fe01c8e5705463d5c214d24f7c130ebfdac668afee7cf3606f44508f88db86cba

C:\Users\Admin\AppData\Local\BlueStacks X\Log\log.txt

MD5 32b4c9bdf6a87cdf3917e7e2e6973358
SHA1 81c58e384740f250a2855a7cf650a294d6c830b9
SHA256 83bd70cf6cae79325755d6af92c5fddfdfea1aa6efb840c6484f7a30a796deec
SHA512 0ddcb92e435e9488ff7bf55d801e9c965470c301dfba0759013b16aa3f8109107db6202b7b06346f8c0d5a42b01344999ae50cb8e086ba9265c7187b6bd71334

C:\Users\Admin\AppData\Local\BlueStacks X\QtWebEngine\Default\Platform Notifications\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\BlueStacks X\cache\QtWebEngine\Default\Cache\data_2

MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

C:\Users\Admin\AppData\Local\BlueStacks X\cache\QtWebEngine\Default\Cache\data_3

MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

C:\Users\Admin\AppData\Local\BlueStacks X\QtWebEngine\Default\Local Storage\leveldb\MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

C:\Users\Admin\AppData\Roaming\bluestacks-services\config.json.tmp-8201712212b9088b

MD5 d2f6f8f15a296883db69aa0254f58917
SHA1 462d76e233cfa2605ce8dc287d550bb4ca941024
SHA256 33545daa566063cb0b73f02d84b081fac7f23c63b386c773b233a36fd87b0802
SHA512 a97e2ebf778ae687a22b9df515f0c7459d689abae179821bda15f249f424d5a052a75432f481aa05678fa7ea21f50ac2ebb338381cdd1a24f9552c556dd8dfb6

C:\Users\Admin\AppData\Roaming\bluestacks-services\config.json

MD5 15343ab80809249437fffadd021db73d
SHA1 670e17cebb7a5ec88ae7a6cd9f92eb41f923e27f
SHA256 b7845bd38b91ad4c86427e396edaea0b13d0c06a230dcf102599b331e4cb3052
SHA512 d375e9676945b09aa8d34e25317872941c8be0651566f0b671d278577ef6445c7bd67bb08796f7a72b40c888b037a6c581133e598e1f00d850e9918d9159c134

C:\Users\Admin\AppData\Local\BlueStacks X\cache\QtWebEngine\Default\Cache\f_000013

MD5 864b95c35a68896755b0bbaa3dfe9da7
SHA1 a7d8360923bf2d4a927ff9581aff67adf0999d8b
SHA256 34fe7ba81d687fbe278d1a2d218e2cfa871b622a2c89d83dd361bff0c29ee39d
SHA512 3c54dab83ebc0d7d0a8be53efc3dccbf8a2c7e8a28f46bcfab1b1a65f54ce7b54680b5d31f8cad2e4efffa23694dec8f37ce11f3101924a0866f8039786ac58c

C:\Users\Admin\AppData\Local\BlueStacks X\cache\QtWebEngine\Default\Cache\f_000015

MD5 b8daab5e3dfa4ce14eeec21987341053
SHA1 4372b8d3e43d8fa892015c6c38921f6dcf510c01
SHA256 402f188eedca43781fc07609737aeadc8f5f96e7512a910dd60270e68df37ff4
SHA512 6bda9765e7b40bfac60c9b4302655480deaf79638b2a170c0b2c70b80c419ffa6b2aa31ae2ff6f62dc219f34d4e22fa775e6137a81b91b5a62758bf57490b97c

C:\Users\Admin\AppData\Roaming\bluestacks-services\Network\Network Persistent State

MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

C:\Users\Admin\AppData\Roaming\bluestacks-services\Network\Network Persistent State

MD5 40ab9008e4b1458d247c2c918e2e2bd1
SHA1 3cd99430ae73c20d4b36e7aa79a98fb9efdf2b54
SHA256 454080ad60b58375ab3c992f40846ffa750c5d356b1065ca8c03059680724825
SHA512 11b0e111acd56e60a8539a38127eec6d3f21361d4f1c29d948cd0f47bd74174094bd75b5970d0cd67b26e16dd75ad04603c6f5823209f43163f0b4850ed5608e

C:\Users\Admin\AppData\Local\BlueStacks X\QtWebEngine\Default\TransportSecurity~RFe5a130c.TMP

MD5 9ca55e224433479426a9dda6453e5389
SHA1 d0d0bd41ce769fa7b657828884b3edcb2e67bfc9
SHA256 fefceadc7227712b2cf02cdc100a0ec4b7b62c12e5aa2d85ef51d7ba61ecd056
SHA512 cbb18f032790e8357f91ee56db6a3e66816a38ba42aef13db834be239776aba9599d871917c35d61c92f09d7f91e63affc2905b6f0fdeacbd33daab0a72c3533

C:\Users\Admin\AppData\Local\BlueStacks X\QtWebEngine\Default\TransportSecurity

MD5 7994fe79e399f8c49244d9aa00ed506a
SHA1 3260c3b443e4f2e0ba59a5ebe3c7b3f833bc7d47
SHA256 247a30c96ef3315108efcad0ffa196178b8f9ae1762b14c5a1eacd7d40594857
SHA512 6416992b2f6c3bc85ec3dae4cf3fef6a6ab0a3df3541b6d50552adf923e2248413b7ce4fe2a2f60aab27c61df1082c601978e4ad5cad90d0ed6f62098df017cf

C:\Users\Admin\AppData\Local\BlueStacks X\QtWebEngine\Default\Network Persistent State

MD5 1d47d815b7ebeaf0616951ee407456f6
SHA1 c78e393627960485d58a7e9a867147fe5c8717f0
SHA256 37304602e22a4c3ff32b282af3e65c6afc2031ec94e7160fe0f91defcb4949e8
SHA512 7989cb1459f34f183323ec83e754185319748f2a01f81a3f438d6bf8c180c6164f0209e8122802c0e9f93a7b14468adea4563f743f62066950b85a7c127d8322

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Assets\checked_gray.png

MD5 ce144d2aab3bf213af693d4e18f87a59
SHA1 df59dc3dbba88bdc5ffc25f2e5e7b73ac3de5afa
SHA256 d8e502fab00b0c6f06ba6abede6922ab3b423fe6f2d2f56941dabc887b229ad3
SHA512 0f930edd485a0d49ef157f6cc8856609c087c91b77845adeb5cc8c8a80ebc7ec5416df351ffa1af780caad884dbb49dcc778b0b30de6fb7c85ffef22d7220ebe

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Assets\checked_gray_hover.png

MD5 ea22933e94c7ab813b639627f2b38286
SHA1 c5358c5cb7fb1a0744c775f8148c2376928fb509
SHA256 d7c79677d2ef897fa0ad1efc90e916c46da29f571208f78f24505603b7165c20
SHA512 ba447a1aedec49419e2b4a8de85c6047886f1a5ebb94f1c45e205a3780c6826f412a3892e97115b35e43839f43e346f3c72ffbf0c57d57f6d26b360ae61b3964

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Assets\setpath_hover.png

MD5 b1e53a76b6ddb3ecff52bfc1a8e5b09d
SHA1 012b5879e879fa25bf48e4bb62c35ee829eea571
SHA256 2da3f9367c847e47131370dd163f611c4639287512a47f487e0025c5665830e0
SHA512 4369891858b4adaf9144636c44b55979290177bcff57f67f341071e42e90f992531024e122c0bc5436ddb8c55e994e7b913ec37137a642dc0164e6e2516f0b68

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Assets\unchecked_gray_hover.png

MD5 62d7f14c26608f8392537d68f43dece1
SHA1 add4f30e7c3af4f7622e6bc55d960db612f3bb0a
SHA256 a631e26bd5b6ea19c8c65b766a056c92ba8a47e1483768dcf12b05293c9a7a0d
SHA512 e41210a78e6076954f75a2f73c0f7628e8604a09ecbb1d2ee0972741d4ef1d814b366828977c02944736b03ed116bc559a2ae47ddb7cbc6f4e54578c8263edf4

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Assets\powered_by_bs.png

MD5 7a2e5c21140aa8269c2aafd207f5dbaa
SHA1 4e0d9e7e1b09e67eba10100d73dc51623517821e
SHA256 3d2afe5236ec813d9e8063bc43eb34b88c2155784e1bce19c6a533c32767af35
SHA512 63f512559f2068a9702c7c527c126f6017cd8d1d16af52e41b884aa9a64ff4294a57243ec78c3a416f70fb6178a79877d68345357725ff92c935709a2ef8adde

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Assets\minimize_progress_hover.png

MD5 fc2a0361a751177d3aacdba9c31b2682
SHA1 0a8f672d7a8777d1106e3b8ee36bd6e45bd322ab
SHA256 1a4aaa46893e2a9b011c478fbb0cd0e84c199f9f3520703189640088969ef5cd
SHA512 a15542c90972387133d86f6a94c17435432b1493b02502533c4d7978428ed7d44a7d3c5564fe08946561638f8a5a3dd0b35b81979c2929dcc386ee5f6f7ecccb

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Assets\link.png

MD5 ae2c73ee43d722c327c7fb6fdbee905c
SHA1 96f238bf53ac80f5b7a9ad6ef2531e8e3f274628
SHA256 28c0abc6bfe7a155815104883a37a53dd783d142300471064c95eddf3cae0eaf
SHA512 5a1e341f727cf1cb4832cced8e96c5a74971451629603c48bfb91ceb4561d0122ab9ae701f8b34681d5f13115a384467d430ccb8282494b40f4577ebc3ad825b

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Assets\installer_upgrade_image_bg.jpg

MD5 3bb85d2c8cef28c89a2d07adf931e955
SHA1 596d13e7742455afce8a534382b28cfd2f6aa185
SHA256 b7f75233e633107d50f24ca82099225c83a832571cd2ce92901f2db3897f058b
SHA512 7075fe989d69ad5f0f4cca5fbbbabad16e0949c2ab8538f3f96020b831a4ec1cc3a701dcb7332e577b5eceba230449efbbf8e288dad47a53d76e40c2337dc730

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Assets\installer_minimize_hover.png

MD5 18fb6465b029206477d0222e8da6fdf9
SHA1 b7f91e5e3002a5d3c84a30ca6cebe1a89a65ba7b
SHA256 57aae4bf49dcbb0ad6cff6263200015c89d7752dc75c2ad918bf846e1ce9646d
SHA512 f045dfed35ea9ff31336cd354a0dd2e9a7ac2582cea1d25a444fffa3bd01e03d73611f786873a81a27a370e5ddb3a6043713e29f064d274088df1c925eb6785f

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Assets\installer_minimize_click.png

MD5 08fc39a69fa17e0f529915919cea1633
SHA1 2966a3f739698e2ce368585fb7f6ac4eae4497b1
SHA256 2599d6a55a8e12b1f05a6e8982d55559151a25ae3690e6637510b6283622dd95
SHA512 f5eae902f9b631410b03b6d4f9be1b4cf6547a94f1a2eee6bf70b0f3036499c01a42c9d58cf98ffbe10edbe79577a01e64faf0e527a70bc9470a1c3d9263b805

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Assets\exit_close_hover.png

MD5 92c2bf222d6ab81fe7a0c072bf31c107
SHA1 8853eb08a2aa3e99fae6dabb9cff6461704f2a2e
SHA256 bcc053a9a087e077d58114106d29701a34f7851f4052f3157102811355d3e709
SHA512 6548d0038f4bda1db69de0729cc9648725d744953649a396b9147afb16abf018a5aef7ff7d3bb019031863f20c81bc202d6e37d171027ab9fde3b37402e179c7

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Assets\error_icon_72.png

MD5 4aaf83d2b3fd56ad806708e60474df39
SHA1 144777a265879b69fadea3eb3ac6939458918578
SHA256 84e59d14d9433e6c3d92daeb8c443063b5e3be6c0b297f0403dbde473a05cb3f
SHA512 3b8485f054fe6ed2374bc81cb1786f09741219fbfcb22503707b11cf5db1ab262ba4349633597d5d9ddabc3415b170fa8eebc932f58d211d7092b8fb96fa1304

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Assets\error_icon.png

MD5 dab2c4538a83422b5deae0e0de9b7a30
SHA1 78c2ab2271aa4020df1e0289bc3c1ba9a43fd424
SHA256 666ad4fe456216ddc06618967846ed31f81d8db5be97da6531842c0667352b89
SHA512 24cb30a68ce117ba16edd1e94c7d066343eb265c874cd55467db2f913c01b9d776b2ad846e3414cd820c0ba10d93f132aea27739d16165b6e9dd5fbc8890bfdc

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Assets\custom_hover.png

MD5 f3e05f142e742e25a98d4f5af3ae0623
SHA1 88363e81ddef700803f4859d2f3f0b4af516bbf3
SHA256 d588ef0eaa334ed8482f32e5839a7ee0d0b544d5b8d5f7720b8c57010e080424
SHA512 5f07a7163c9834564dc4de5a1a484ac8208151bc244f8e72d64556abf88c35f6a81dd6718a3e6f681265c10e2dbbadb07570fa64c31113342a88fd605019496a

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Assets\setpath_click.png

MD5 624e84e9b49bc150043aa9fb0eed2822
SHA1 f23f2a4ec609e3e9cff9319533e561968ccabb22
SHA256 c94924e95a49b175c8fc00bdc2821bb70a85b864cc193becc553b32f0024dde1
SHA512 288e1954d29bd3d22b56fadb2e0d3d10580a540fa1f2bab1284d957708bad96df5e38b67c6dc14784e1e275b89082c57370b786c0d0c4307601c0d2bf3704460

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Assets\custom_click.png

MD5 ced07c9db242115400e159d9a02bb7b7
SHA1 6f2bebd1714dd7522479b5f3e3f2b3f0d18e8c77
SHA256 1318e0f34a551edae1e82818fdf7de5ac627493db5b24556d919f525052d5b90
SHA512 d52e63792a5b4172d4ac4e2d369b22b170578616d04de5a40be15b260a2741bf8158b3aed9509760c334283360dd13a4fa21538fc4547ba464be5dd700a22b70

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Assets\close_red_hover.png

MD5 5ceab43aa527bc146f9453a1586ddf03
SHA1 88ffb3cadccb54d4be3aabf31cf4d64210b5f553
SHA256 7c625ae4668cc03e37e4ffc478b87eace06b49b77e71e3209f431c23d98acdd0
SHA512 8a5c81c048fb7d02b246ed23a098ae5f95cdf6f4ca58fd3d30e4fe3001c933444310ca6391096cfaeed86b13f568236f84df4ea9a3d205c0677e31025616f19e

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Assets\close_red_click.png

MD5 6db7460b73a6641c7621d0a6203a0a90
SHA1 d39b488b96f3e5b5fe93ee3eecb6d28bb5b03cf3
SHA256 d5a7e6fc5e92e0b29a4f65625030447f3379b4e3ac4bed051a0646a7932ce0cd
SHA512 a0e6911853f51d73605e8f1a61442391fad25ff7b50a3f84d140d510fd98e262c971f130fb8a237a63704b8162c24b8440a5f235f51a5c343389f64e67c1c852

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Locales\i18n.de-DE.txt

MD5 a9ce4896a111f0ea2149e25ddfcf27aa
SHA1 5f242727905a3f30263793e3095fff8fe7a3a0f2
SHA256 941d60fe4e4f1a66166e8fe75f885ab1086a4037a4627004e391d7493e3e8911
SHA512 05d0f13214d60fc4533652f5b1dc161f3f14c8b194d74e45a34412f97267fd69b7b19f1f647f348ebfbbd2551c4060e36e746a6a79963db7e78cd95c92dc4d3e

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Locales\i18n.ar-IL.txt

MD5 9fb07e066cc2f213a64d35a97a8c2922
SHA1 a70db989f5c562bc69caad89a1402c8ad7c9b80e
SHA256 65e7b0f37b5e2aa805ac8d57969804d803430186f34e9703ca9fa09ba908ef90
SHA512 81680bff55b475a62a4bf29a8c219230b84894c1165f60e372209a5aacdba8e4819c3dfb76f3b55c15d472ababeabf0cd4b30c04e7daa26df63c8a5101970c3c

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Locales\i18n.it-IT.txt

MD5 ea49ac9605d0ddbff07b0e19d6d34517
SHA1 c17fef2467a8973db193de95f7b66e6f511529d5
SHA256 408c2ff8977fd6fba4ece99f547182394ab62d22401454344f48ea085707ebbf
SHA512 e45a6d19a570f496a30eb2b39991a04743d491ff85b29390e52be2a5e146f7819c2197cd0b0357120a0c5ad9c792059584e6c4fe8f8098ecaf435aad6a44731f

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Locales\i18n.ar-EG.txt

MD5 7a7d65e41e785a7a848f0b021cc0c0d7
SHA1 9d61357d9aaec43adb92b95dd63103c566aa2083
SHA256 e02e378326e351980325f9cbf4e27327ac03aabf85286e7636c99220da950806
SHA512 8f67d2e4ef55abffdc1062997cab7a44cc81e42b16174d88dad41939992903b7a9ce9c7775db10835d30cf4aaecfac7c8d6f2cd1611f17e40d3c66ee0fb928cb

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Locales\i18n.id-ID.txt

MD5 623b1aacfbaf85b09a4e0c180e9ef178
SHA1 e41bfa201d627d093bf446eb39fab268528e5e32
SHA256 ce6bf3cbca52a1ae369199ee190272f6842a45e64da9ab6cac8b48842aa099ca
SHA512 83b91c326561b725483fa703d7bfc66a3eafc55a25772bb22251bc88869a30bf11c2c5aeabd5a07da8fd7f2d2b93ab2ba47edaf025f8055f6ebf07df99f9b77e

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Locales\i18n.th-TH.txt

MD5 19402422b374354b36b182df60197aba
SHA1 75b68c2f7f9ef4730f0fe738f9477c543feb46c8
SHA256 d1de34e55cdb1a8abf9ad3bdf0c875b8f14825ac25df5526da98ced87588aefb
SHA512 c2f6991d15bc870a0998bfa74a939c66131f2d17485b3771e41fe876cee02050ece0c8a25cbca6720254ea8e25542fcab6ad569864a8443b5e3a0e266282490f

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Locales\i18n.zh-CN.txt

MD5 0d168bc28c89f0fd4bf3b7f2d9c65eda
SHA1 733690096aabff107a7b9a8d8a45c7a68aa9335c
SHA256 9a5032c277e2af24fc596e1d2f535dd8873530cdf055ef7b9a27b84a1e4bce88
SHA512 bb1e632e0c6aef6915ff178e9fb2b71173d1a3a00bfb294b59933e2d84f05642001d4201e42a2cbb7716cb4df039e4acc9ee24f91c784a48521039a2deedcdc1

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Locales\i18n.vi-VN.txt

MD5 fcbbad664f3eb4d57764f73eb0765942
SHA1 cfb0601f07f12a78993d701168aa93109fa891c0
SHA256 401a8d87d3057dc1b2dae6338c93ad8f5a5f7de628ea2d5fb94ab781f9d1a776
SHA512 aa077fa7ddf698ba5e619239025775ce81972af515d82d1211039e0c65e5a30524ced698dcc1b7a1e1c943992ab6ea8fd5d28dbdd5abf57ba0c246360e21f08d

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Locales\i18n.tr-TR.txt

MD5 3aeda0b485130bfc9dedff4b8fef1961
SHA1 ace8100a277ea0f8e06902d68c1c39061a44fb26
SHA256 3c465dcb8fe7197b0862637548d7c383574965666dd8305f5eb617444e9acfc1
SHA512 319cad94c82fd188103a0178a4aaa6433d57358a7fc99348522336fdc786946f2b08fd405fd104573d7aeab62248577a7ff6a27ad35cff50790d0eada45440f4

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Locales\i18n.ru-RU.txt

MD5 c14b9c7f08c0e2a57ccfee06a7c5a05d
SHA1 c630e7233059006b1213807f8dfcb38295dde240
SHA256 b61b82dbc223e35f7451fb848978a79703b345c7a7728d60d59fb95171e11969
SHA512 15e3fe85a248c065429cfb52b5fa3f454d2440ac39612452974c7fe1fc890316c57a2b6c4137de36b3642276aa6791345e1b41af6628e80c4e7a3c6247dff6d5

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Locales\i18n.pt-BR.txt

MD5 35c829fe17dd39d16ed9ed9d3c3a423f
SHA1 e2f498fb2ebd74647eea70edbe29d49dec3856f0
SHA256 a3a3183e5f85ef1d84f386deab1052871fe8ee1cfba2800cd6443459e3609346
SHA512 4a9db0e592d62cfec1ddf7fb1a67d2ed9338af50edce9582321d9ca798548cd65c53b810631cd862791c925cae2075a10f3183b02b5851cdb2cb2f54db229698

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Locales\i18n.pl-PL.txt

MD5 1d824987054f6109e386a2af3a2930ff
SHA1 f0103827d00e343161463cbb436a751135ab7c68
SHA256 a5c2f911ae2e891f152d08203e8e99e78735f09de4b7421fc6cf343987b48e34
SHA512 df45abf4e8b24683eb3314478bfa9820caa83799e7d685473ec963bc9f07d72e763eab14a80aaaa7e1e44232223efb43cc6e9ec777c028516e7831694994d8f2

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Locales\i18n.ko-KR.txt

MD5 21af008aed42c6654b0a6eadd1fca98a
SHA1 9f1dd90654b10a1d56c0b7345de9226deafeac52
SHA256 7f9e11fcb9567e432cacc5ec0b399fcbfedcdb0838f21ee84641cc4eb7794155
SHA512 da2bcca88b89caff19edfc38cae25fb8aaf1805dc80c28b0e1a51f5de64ce7b5c671bceb2ceb897969906fe80477e47efb9df7cd377d62f8aa3ae9ae1200d440

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Locales\i18n.fr-FR.txt

MD5 6b1fc0b4e861692c83e8f36848e7faad
SHA1 79e064008b2c2bcc63146664cdf1a63f1d5ab58f
SHA256 f5684f68c50b3f8f5c1ce0e1266e003f2099d3ae401c848b2cd30260a998feed
SHA512 0a15eded536ea683c4493af1f45f8bcfdc24ae69747386a6747dfb2bd3475f88f4d15d2ac77515eb5ce75b65870f2fe2337bdef0fae5758edd72684683a9180d

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Locales\i18n.ja-JP.txt

MD5 da7a6902f658d02dffe24e7b29ae25a8
SHA1 2942cfd645e7de104aadb45d65976c073dd54a64
SHA256 0c28d5d9178465b76fab0f5d736962095ecd333d7b2b1775c31becd38aded023
SHA512 1079fc5da14e53157486609ec2faac6c88272c74c2acaa8a02f7cc698cd078f118bbdc9d979a40b183055dfd3104d1792d530b9bdeff4b1d1f12131a7f3253e4

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\Locales\i18n.zh-TW.txt

MD5 35dbabb7d08aae38d44bb326ccd10eea
SHA1 193c8df23ae63107227a1faa03658c91635af058
SHA256 c5ad750e534b3a1ef73e2b8b8aacdb5f591a72c366583f9ae1ca8138eae5979c
SHA512 75aa4b75b3a9d76d0306360c6dbb49b86a7ecf7c88d8f31f28918f5a93d623e578f8e5faeae95c11b82d17f161834f65970088fbd293a12fca9f9322b5fad3af

memory/7296-24798-0x00000000003D0000-0x00000000003F8000-memory.dmp

memory/7296-24799-0x000000001B010000-0x000000001B0F4000-memory.dmp

memory/7332-24800-0x00000000003E0000-0x0000000000434000-memory.dmp

memory/7332-24801-0x000000001C400000-0x000000001C480000-memory.dmp

memory/7332-25210-0x0000000020570000-0x000000002057E000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\7zS444D342A\7zr.exe

MD5 fbaba140f30a11e5ff4f97d921de6d45
SHA1 d12360b79d9fe7ddc5380a22539dc7d4768ff5f3
SHA256 4889c0826c633c0291264d37834363be90ee39d07fcea228494ed151386dcb16
SHA512 cd18bb1b057b1b077fde372ca5f98701614b196b692ac42ec56e5b839535022d884a2cd9b6bf644a520c6f48f12f673574a24e60580c70c695067b66442ea7a5

C:\Program Files\BlueStacks_nxt\BlueStacksUninstaller.exe.config

MD5 ca0a329097316832e4a6ea5d870c9268
SHA1 4a36b93361d3dc9df9b00313f2c2b394be9e1e72
SHA256 4b7df915d706af6459c38d75b09c5e14f951842ae0678078400f204ad1c7a7c2
SHA512 51f9a874e84f130be4fa29fcc4bc934105318234b5dd9ceedaf569e3f0e6b38e29f3bec056044724476ae24295a510b16d8a737b994fd6f1268609defa315271

C:\Program Files\BlueStacks_nxt\HD-ForceGPU.exe

MD5 69457c9a9974ab32264fed54bceb4b1f
SHA1 7b00b9860fbb9fde7edaf6cb35a7070f79554dec
SHA256 115ca4c71da3c6f6cdf74247fedec9830b7e9490ec6358d77a301be27bf69e5e
SHA512 ccfc6597b2a34923f9f2162a4ab743d56486d169802772dd8ca87dad9c1e04d75330a960eac380e5af5e1db9a9e44b66221df1f583b0425dd4a91d0fea1d71dd

C:\Program Files\BlueStacks_nxt\HD-GLCheck.exe

MD5 4be4afddacc41422970834d7a0d4d1d7
SHA1 82ffe2b1d535f2550ab63cbab450a6a3b6b034f5
SHA256 24552a2080acfe8022dcb0afbe73896a4b781bfa49007e2fa6022f368265565e
SHA512 228b79f571b459f7a968e79db2d2c78da103db5956f19d7e13e167bd3a4783d8f967dd055df73076e362194be67a2bdd25dd4af99e22d59ab451c5c767c2572a

C:\Program Files\BlueStacks_nxt\ProductLogo.ico

MD5 169706218f98a42594a8c5c5a65771fe
SHA1 b8ded94180212578d86a031eb71ef93dcffe1a26
SHA256 3803045963af064936d7071c178de8e40854968b3d3f9171c57a182c869f3697
SHA512 1c3f18ed0a24ffa78fe938826eb88531eb8be134d6f209b87d7af5d0e8c4829f01947d7b0048996b9755562bbb7f52e000bcd15d07d646cacb2989ac881ce448

memory/7332-25465-0x00000000215A0000-0x0000000021B67000-memory.dmp

C:\Program Files\BlueStacks_nxt\resources\icudtl.dat

MD5 03205e5952ea7b803839ecfe3bb000d6
SHA1 74146e76e31fd1e75ae1c34fa8194bc291b34a40
SHA256 8364e6c6bf5744357199de0de3f6ba30846ccda70288675b75059e6fd52241f3
SHA512 badb8843f9a483329cc4f559f95bd07a8cc1f9383e0e67dddacf74e586541067ca452a7fc28b63dcd28edc434c3be8ddc733dcbad0e06d973dafc99242f0b192

C:\Program Files\BlueStacks_nxt\resources\qtwebengine_resources.pak

MD5 aed2766cd70116ab1e0c430001a30b8f
SHA1 a06c62b35c333412dd61c493d6a6520a8c04537c
SHA256 4ed3a10f1bbc40b9a2ce3b8cb6dab6f00fe922d0c0e1c6ab5adfd8617cec9389
SHA512 a1ca058b88c1a6839b2e329b08423ee115800864f580f832bbc4f4720f0965984f893d210437951bd79dcfd3b917137b0b2e8f381e50d2a1bc2de37ca5555961

C:\Program Files\BlueStacks_nxt\resources\qtwebengine_resources_100p.pak

MD5 8615f18dea34c152e8aeb8f4e01fd17b
SHA1 032b7bab09943cc5c8a380b0aba29652d5539153
SHA256 e7e2cd13fa9fbaa33c537e8eecfd542e4ce4a621bc0b94159ef9e6e4541652a6
SHA512 2a68ba854d473883f20e1a26375fa39b689cd39d2e284a963b07f25fa3eb6865ff3d8fea2241af23ffc731b83e20ec5b8147486de0a507e83413f75d71eab248

C:\Program Files\BlueStacks_nxt\resources\qtwebengine_resources_200p.pak

MD5 de5e6a97c80d698256369b10255ce45d
SHA1 8d4b979a8c2ee33c2dbc01ed13a165b455a5fdfc
SHA256 669f9d3388438377c440419e5c62973362e33e84a5b247ddd0dd4568da75eb13
SHA512 5609ca5053f581e636c0fe10def704f076c7acf5d958e235991fec32a2ddebd72b312f36a6648d2462766d1cb141f3df12d39df1a344e0dfb4a9e2946dcf1206

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\am.pak

MD5 2a8ca8692a60fe8d33d51d99c9084a9d
SHA1 919d8adacce240fd394d6faf2aa41d2e5b8460ec
SHA256 73f0a7c7632313613814b3ccf5962962aff99de940e084e0b609ecbad1ec1d44
SHA512 080e56cce041226592e7fa816fe8c5e362a1f172a8c671bda4092ff127f0cbe8238c40d41751099f6bac8f02c71faccc011df270b1c1bb8b772286ab95f5f1ea

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\ar.pak

MD5 143ffa8ca3ac0e6dca9a8b3e8ba3f3f5
SHA1 6186940350b3fdd936f6ce41f3091bbca397e9a2
SHA256 3f35466a80f4ca5a5167b2d3a3278e75afd90821206ac98801210a2117c913e2
SHA512 a12b5e3ae821e08aa76657cf84bd79def6f8fdb413e908b13944f6c2bc1aa9724193d0a9a0abd5dc0b87e0845d61b021d39024a5048443531dafa19de707944e

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\bg.pak

MD5 154217351d415b13dca71e28727902c4
SHA1 096a1640b5e83a7b20afdfa7cfe2507b4128e0a5
SHA256 da4bb8513745180a0eb26228a315786a6bfb98d6594173491d25cdf9d59c5bcf
SHA512 f1676a8b05c00588308c57b2290c00a6d844811e9ad4495ba94d62ae71a8c58d504ccd2697cfbf822fd5c2ce6423f76da8a901b4eae55095dc4b9667d9c2a8eb

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\bn.pak

MD5 304432105fbe28b1625f0d7b6be3e7bf
SHA1 2d5474854bc0bca3f3ead1b9199d76ef533f0850
SHA256 ac282f17c5f25b55d368d06b305b89b614949d41c2a1377f1dd5aecb57d1ca8e
SHA512 8ab35cf2069f70a3a99dde98a7b7782821000abcefa97eaeb07b8a717d26a7b6c5461d5bcd39110b47db98aad9c56e463ca2707b7e6b71cda1092b8cf3a91ab8

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\ca.pak

MD5 a2c61a98fe7407ded9ece126c4c9d057
SHA1 c7d64d8bdc2fd9e7f1c62dff79e0e56e13f9cd69
SHA256 4d583b753104ae98a1e5858bfe38dfa3195d477128441ca59c882d158d52ebf8
SHA512 7522ee10397140b5eb45ec3d5cb32e9212a7d3cae8fbc377b270872aaf6c7077e7b13465f6005a85b5fdd4d2e86b1731c3366ddfb2e4bccae4ae2d1a178e0b1c

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\cs.pak

MD5 c0bb82986abc67281d8067e5f20625c7
SHA1 e7cc8888dd95d9edf226893f0e4c12e572bf6bf8
SHA256 217718dd6d64f45da33db0629e6d56da8084ae0fd8123eafda909e662a5e5b50
SHA512 80f4542345cc6e0d3589aeb76e0e5f19a824f2d3186d397c8fb71c1e9d6c056108df7f9a192a6515eb9ee43505b7844c0bf76b77596adcaa3c0ee783dd590ad9

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\da.pak

MD5 5eba7377be8e34dd03db766300039ed2
SHA1 b3460fa050b93454b9e05586d86d7cf67881f557
SHA256 94157ad608b35b29dd176a3106caa4613ed6d4c20268ce00ac4ccf13a9950f94
SHA512 7d24210b60fe38b42fc6a4437ffb1e06333b7084025efe462b66e086cdee953254a1d6fec69ab3c8569118156f3a4a957aed5259e1432772ab46cf7905aa4385

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\de.pak

MD5 01cc5b8a05a435482dc692baef032d3a
SHA1 229a4d1c9aea9111bb46895d096dfcaf488b8d4a
SHA256 53d5743a2606d6b553e8dbff871f2f1d3d53666baeb9ecca5b1ed624d48d5835
SHA512 082654e8385811d4e0f35544c017704b0f13638f850947d76c9abe093333fdaf9d1d08c184bb8107d16b0eae6ebcbe0c522ed18138dcee30a71d9d75ea8c3488

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\el.pak

MD5 26afc001a706679413f5deaa3c6603e4
SHA1 c9d780d930775cfc17cf9160712a2e90ca55106e
SHA256 4c2a3552e84fdd08852073d25c99727c4270160260d159572715c7d37e5861bc
SHA512 743380b99f6d55ad892296e8361b74cf90254403fef15de37c3e5fc302bae2991f5bb4ae21ba84bddc30da3b5b31fb4e741b0c524feede1656bcd2d531d76ea1

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\en-GB.pak

MD5 06da37b66f4dbbe8c5ae1bd7e4addc99
SHA1 ac190bbb14b76d14143dcc088f460d1be2ba2886
SHA256 60f87ec2b06329bdea7f835a61e9893fae147343f133caa2bfa5215797881ee0
SHA512 c436359e259c0a1cdc0dea1bb9ecd2bc22fe1124d76b9deac7e8c7751d97d66cbe61739aecef650908ed05363156fa11453490a9c9f23c74c683ac4e8c7c8c3e

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\en-US.pak

MD5 1e958f35257ef1e2e5115d860602a593
SHA1 688afb781ce3c4c9a55fee9696145260d2ce1400
SHA256 4a65112f4d03cf38abf2ccff5e3fe8e161cb3e47d588b510504007c9bb876b37
SHA512 a996e8708f4e92794cf3eb6b7780d9ac8e567b1359aface4fd50d427630e4219678f4cdcd58764123ab6baf12a9c87a08b6ba5767fa8f6042a7319fb45b72a27

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\es-419.pak

MD5 f21b0783d062082ee46aa573eff68df0
SHA1 84f62d15eb68858245e56bef0cf317e273918044
SHA256 859cb8ad8666e97a47f0e24df4ae85aad80002fbf842b4e68afd0a308d6597fe
SHA512 d87e2d51cedba8ba4eba3b0fd390bfb32b25c5cda98a0d6465b5ae351dc745a67ac174c223e7def8b02c9f00729244026e895791add2611680579dfec4b7b07b

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\es.pak

MD5 03265b1a7f6a996513067866d55f3bcb
SHA1 427eecd7810cf24c8758dc9beae18afc9d8969a0
SHA256 516234550bfda93687b28c5cb3b7b5362212bf41b900d790ade52747bcf766da
SHA512 d6ace0340666eaffe28f57fb070eb4504460bd47517cf3c0b9c07671a605ec017c4fb45a38fbb96b9c54887dcee639b41ef03b2fd85ed9a666af56dbb73023dc

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\et.pak

MD5 73e6f20f0c75a9beb72798167f8c6f91
SHA1 d01932a69626d23e8ce9e9bc240f6d99dd155fb4
SHA256 ff1b0d50f6f067b291199578b6a7757797bd7fdc6b0ac472c9361076bf9eadaf
SHA512 98966566211bba402352607a0622dca7f64ad4c056cec2b40cb70572cd1ce5ed92556490b4399a32ed1c04a14d80a3841fd1a758225120ee416c68e9314316db

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\fa.pak

MD5 f913ea1db8c9c99bff701ceeaf8138f3
SHA1 6bef3ff865b3a95dc1900ba3c94c5bf556c695a1
SHA256 b4e0d3f7cb858ce12b5a75a71ef14f2a36494cd4138181b29f6fb3d6bd386c4c
SHA512 edca9b945c6dc90586f6d20e73316f620d5fff61f3ad4fd35c7e9064f55b1988cc77d372a97d100cbf572a2906cd193777a18ace98fabadea1604df42c8823a5

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\fi.pak

MD5 f55358f58eb17b4bc6abb19592c1aba7
SHA1 6dc1d99757bc5a447b9761a4a0c90a2be521c6b0
SHA256 cf3b9a857c63022d671f4cc335728c270935628f085ac9a17568a2529daeb4c1
SHA512 d7cb03ec31a3cd8c7f13e1bae1439fbba3b76636f1f254ba5376c5da82b9a98e93684fc3cab3bbe8a4c892ba42f17c0db1eec1531950e17932aee16007081aab

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\fil.pak

MD5 f5257136ed900e1715979c9a96de292d
SHA1 217cbe02931f6466bdbdb27c85c876b851610b23
SHA256 98a20cd0e9fae36f22de4a4db7b515532b4327e6d475d4e39ae93ea45b76cd90
SHA512 c38828d2736ba26ad0bff9976adc9d3910df7a417aad8cf6e3cf6383688a56ad2581cbda520403d44b010562b56d6107211385fc80988ac57e930199415ca654

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\fr.pak

MD5 75575474726cc8d98def90e0dbddcb0f
SHA1 3e62e3b73bab73597a01c3ece5871c64b142391f
SHA256 d37509844342371b4026b720dc00f77ff88fe2e7c2b27861e3ca66b10e76ca94
SHA512 37e8e5cc44ee4433b0206cd1baedb955947d0fdf172e69a28fb7bc09f2a57c4f27fb45c12a0a49753281cb2e2a92792b67d568f3cd4f90c9c87337249d031fc0

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\gu.pak

MD5 e245057bea15117bed15bc3ee2911d74
SHA1 c8e2d5f85a974fa989c0d0f64121d2836a13bb84
SHA256 4ea64678c7c551c2b2088b9417bcc76218822f3213e9b8028d618864035b97a5
SHA512 a72a1c259332f279f976403034c9d2356a437a1677c0e20c243f23ac246a8ab65bf150a610867687eef48a0b7c87d23f0e357ef21bb1791386790243803ee70f

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\he.pak

MD5 8c02d30c68c4abb4b1a7c2493d8fde51
SHA1 2cbe2f537d59971296f2180d146d9c2905d2a76f
SHA256 e37f0e2516799f320e4ac1a872d0ab7108c4f63d9ad33a17a4008923c7f93e9a
SHA512 9155cb07b6a23d7f73bf8f68af44ee3bc1e25c6ca643c2f8d64a808d3f78076e3ee60f68d3be9cfe3a6dcfbbfd4595e58c897cb4f8b92272e8ffb443cdf6f3a6

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\hi.pak

MD5 61838bdf13a1d60545d15e9cc49866be
SHA1 64bec7fe42caf53f192b58e4e5b068e56d835cec
SHA256 9a399dd9dac62ea30d700f94e83dd79d54827eac8b9cbce0343ad2dc0f4809a1
SHA512 7e9e0c3aabebd6f0c221918b6790d096824ee1c5f7338a21ac489952b8260b1e59be423005ce34bd5039cb38fa7c9197cf48b77974ed8f6b7ab2a2472e3daecf

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\hr.pak

MD5 a621446d9e94b0d47935bf3310c385b5
SHA1 5cb954846bd2a2c477cb28b99545cd9bc0fbe990
SHA256 93f7fbaf2c7e5f52187fc4a2b5726387e84decebd1efd8b922665bb831e5b842
SHA512 80c5ddea81bf8d1721a2c6cf094cb2c99a10a9aa443193bb2942360de9783da75292eaa341711700281626cc0c8a8f9dc071bd8bb589444f764ea307c4b9de37

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\hu.pak

MD5 3c70ba470c8503cae9407540d070f506
SHA1 0b841228d28e8605c37df79f1a3714402d2b18df
SHA256 0770854f32f041df5ee0190164aa24a1ad06e199c79efd46f3ab65e12129023e
SHA512 ded69524127431d1b6a68bcf85119079a57d3aae5c5be7fd8f215090ecc74570b899e8ec70d6cf74da49833d903f8ec2cbb06738a1c917efc5e19a44167183c1

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\id.pak

MD5 fc2cd7f4af1976579f6b0eae3ab2d874
SHA1 c4e434b9d0d95a505947c97d396b05c9a18f3983
SHA256 48b670c94216623a0c81ad611cc3b47a47dc9368215e065fd02448b4ebf808ef
SHA512 9e355bcfcc31535755233cdd7a521b0bc68f897d85a22da658e3fe5bfa388ce8d8dfa7c01087ea04cd268d44d43862c5acf5b305e45b4572dcb25884e45a4535

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\it.pak

MD5 56c13472d7efdb4466d5189af2d06ce6
SHA1 84025c148e10e1885125893dd286d0f9e751e101
SHA256 7114d3e0c7de30f25c789a1dcc7c50e85985b8ff35afce4600128e85318b4af4
SHA512 fa9b17d387585a281ef1582b8596cb61dc79658bf3b121f6fb6355bd6584c517d938e21d1a0b1be6491c01e5c15c2da666d9f77000a12a2da137c040046957f8

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\ja.pak

MD5 9705a8fcead214aa619f1be816135ea0
SHA1 f10d22cdbf5d7960aeaa13c98cf8f7de41034760
SHA256 c8db5560edd42f1a6acc4efd10865ce39c15dadd3b7dbdaaa28922e1f9c86320
SHA512 6d82ae6023e48ef54d6903a13b6f07069fdd5c87aa0e7b1219c0797bf49cc789170b3677d572fb1b63feda138e624f71e7175022eb7928db0dd413cc8652c6af

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\kn.pak

MD5 2e9a1e91aa149308dde43e0b357e1c8a
SHA1 d657811a3b3dabe519fb7b5fad46977674234f51
SHA256 2a0411a1368fd5f342581b00fb3b451f89ad593fa49f0f79fd9abd5ee0d5f5e1
SHA512 d7b612562fb04a89dac28f51e691f42af39cf61bbd2199c4f652a3096330a99084c0f410bf0c449403031b9a264769ba2932cdae8b0c49bcf92b5ae7a4e8fe9b

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\ko.pak

MD5 2a0bc83152bfbc0f365d3a85fd1e1832
SHA1 9b972a8e823ff6f161ca2aadac11043b054b3146
SHA256 ae1cdf9a4cef3a86d3550f7501e5c650cc1e0924c9ab84900df702ea7e351f8f
SHA512 2c3ae97d3c78310cafe92620c0438dde4c624353cd682f3087c92050870d768e6f7071248e55d03232739a2dd94c7694975b0b329f1ffc6148221a18effa9088

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\lt.pak

MD5 7769b6273b1519ea1a8ac9f059e78c93
SHA1 6d8807f4af484041bac83d5d8873d639d5f07d0e
SHA256 e88897c766d8746b9ad859123742dc84b4dc9e6bd05d10a9262b15055a67758a
SHA512 9c91942cb73bc0c2dfdd94a93759520d9a3ac7f6b43ac826d00d2ff46c6335ed87126024bfa955e9c9e744d437a832188d66ad238ae66378a23210b9d1e740ae

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\lv.pak

MD5 17b9ff8c299fff962e9b9bc0d5f2f15b
SHA1 6224d9bf81c4771033e14477da0a652336326036
SHA256 7e4a42d3cc06b7c9cfebad08391de3a275ec129ac20d36ec90ac136ee88223f0
SHA512 8bd3f102b933b94cd0da09e77c78369a156e2ac22f29888ac0c9db8d9d4e2a7e4eeac99942ae7a8785c6207a0277c374c1727712a932922c10646e3fec609963

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\ml.pak

MD5 df01088842b8c05568fce402a69bb595
SHA1 4b97c244ee85efb9c35b69f65f64d9cfcb2d25aa
SHA256 9f1fe59eb3d0da8d36715d63da958b5773ced3967e04c5314b3d5aaad2f3c579
SHA512 b434a12884f7a1d417c02de2fd27955e6af2329d8d8d0db9781675a16396556b89e2f46dc951e070c4077073e126d492a5db7a077b7ac3b1f80fe4fab4d68125

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\mr.pak

MD5 f40f6817a07049b8589310b7dba04534
SHA1 93afea27adbd165aa1e3261cb67d5ab719ea02db
SHA256 5429e2696d32638253c4372cc427b3fa154d7c997dc13aab90411fdf98c8f6d3
SHA512 450039cebfebd9b5dd012c2980587e78b64e777bb2ed7cebd1f3174b5e88f0a018cbd60af18ef3eaeeecf9729b420a0216a0b167867be4a2814744217bbf84e6

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\ms.pak

MD5 901240b9cb3a7a635c2d56d6ff1b3966
SHA1 c1fdd4ccf213bf1822696061d64930f47a017cdf
SHA256 a750d091e4ca00bdc647ca36c2a22cf9199126c69607fc14f468f6b3b588e55e
SHA512 2b316bc8d5f27f6f90434fa61d270a28f5aef2b9808b1467697c5671aedcfd99d7cf99d72f11d05dee06e73949ab2b22627ea1e925ce8b1ec65b4cd43d03eca4

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\nb.pak

MD5 5c901b43287edab65f05464dbad3e301
SHA1 d76444677a7eeafdfe0bc27a0ff892f028144d67
SHA256 0bdd86ed3444e7e5508dfe4ec483673c2744925accaa5529bff4037cd1b0c2ed
SHA512 46fbe41905a44fe034f3b0798459a2b5bfb4ac408bb90fb5f0f9e82c91407e4b6eddaa82173c0926784881acee514da71284ed02decb49d99cb235784d072da2

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\nl.pak

MD5 884f7faf0e79d04c6536506d6f95eab1
SHA1 39334913aa447b35012a8d7100e7f91e805c7e9d
SHA256 b4d9d873df0ab126f4a312755fde331d4d246519f1757f32087b36714ef4249f
SHA512 77a4379e148c7886950b92bdf8959c12c8695b7121be89142f4d4190cf32c43b8accb77f0c40718cd3c7e3ac0f90e99f3dcf5992140a5769821fc2adac988e18

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\pl.pak

MD5 41ad390a8cc5fbd5b1f352e838b42ce1
SHA1 9efa8f2e5a0312e83f737929765a86112a874272
SHA256 979c4336b428df84e37a2a51a7c5f311ac33ef6e4edc309c138ab2866dd065c0
SHA512 1beb3c66c5b4f9d128e8badcaa8b9dfa9908d74ea910c40a7cde8be3b9b704525e7ddf1e646013cfecf7c66585975b8a8e640b43b27771335bbaa90158f45d01

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\pt-BR.pak

MD5 4792f1e39c6875d8aa5e911f16ed638d
SHA1 c04ecb497096be4173f9aae3f0ae6accc8324156
SHA256 a39bf79dce50c0ef227c3f326728d12c7675a79ab5d4b891fc56913bcbe83e5e
SHA512 5fabf0e030f94c959eac797ae401f28b76ad63816e88d26e3875168978d7448317e3f86aa99b15c0ff266505c5dcb30124c796c6c46c0b90e09ce21b77324d69

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\pt-PT.pak

MD5 0db54f0f25ec3a19dff541ba223bd5b4
SHA1 dc1f0c9b1c2578490af5923df179a92814c04904
SHA256 ff89da2b21c03475373f3839615c570d15b9929fa2cea991105915ef4e648d69
SHA512 96060c6c548085f019f3f127c4250ae6620c2b4f206da9203db94a7d2146c945b5384a661494ad886ceb35cf3f45500302b01009e08b43e549e17ddc318bc48c

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\ro.pak

MD5 14ee5c1a362e753a5c44b11343430fdb
SHA1 b87e4750d5319c5c695f1581feaacdd71abe0cda
SHA256 ac3134a201073f6482a4cceb29a745104325ac76b7ad0d262ac7567584f450a1
SHA512 ed647aa3f3ccd5033e41c8cbb8f85d1bd0dbf783472668abb9a7e83ce5ce05706b9d67d5cfb4c28791414e77b5ea9ca5335189545ee79475d3f7cf58c1f12377

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\ru.pak

MD5 3d28ef9e25426b08409db5379cfd55e3
SHA1 25fefc87d6233da5b287dbbf04a63c34cb9c5571
SHA256 b81a0b0175225dbdf35150dcc0c36154cfc042c1525df216d68034f0ae609057
SHA512 210b8bf28519c1e1576dfaa76260ceb6fe5dc46d23a6c74f1eaba9e08abb310b34989f0e667b6839999f765cb9bb77d35636db63ba082d471c6b73819b357995

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\sk.pak

MD5 b37b81799942fc174e05b6aac03ea4c3
SHA1 788d6d10c82614465628f79bbe1f2346839a582e
SHA256 579a167528badf2a6feafbab487bd2314dd6107d0cc87df17a88ae325ef16319
SHA512 31bb82eb4434665a1b22a21e3e91b48fb2fe78913aac18475f8f328f05fafb2e4bffdd1565b8f48c67061fbf760ad217300882b5871d1753255d969be2b49b44

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\sl.pak

MD5 4138dc422fc6a5afb1a855ffe0caba32
SHA1 8b23cb3c91167908e181eb0ce9d730ca5b3179e7
SHA256 7904fb9153a65105690d76ebda6e9edef2852b868f6a8d2e989b2013d40ffc3b
SHA512 a578919421c6458fd187d5985d721257cfb7bc3404f174dff413c211f29cb2d4552699fe10f0c01a651e224c1c7f3189706aaf71107187120a4260214881e531

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\sr.pak

MD5 97ef86fc3b66a0a3aa4e1be4555369f0
SHA1 bbe68527d0c4c9e6624920d548c0ab0c09dbac88
SHA256 d5a48e324fba0fe6ad0b08da12fa2f4b9279b6271d36710663b3462794a0c7fb
SHA512 fd7802060a8891df3ad2df1252e0fe09f227c7ca81715917fe0020277d28788326d9798cb62acb8820f4701fb18627f78b6d22d9ee8ee402abcfeb4704718ef3

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\sw.pak

MD5 e99bc71c3caeae580ef7060155ddd0ff
SHA1 d6986e1fe1dd6c110b05f44f84e956ecac188b97
SHA256 4282f200af58345ac756dbf88d0b898d26750f5aa16b7d2557b4d31c0ec126c8
SHA512 6bef16c9633387a3a0557cb644f152210d75157ac9b8ab1af6b94bdbdfb48b2511d0adc84d269ad16a439415ec46b78ff9a2e743bf72238cc5f25a4ce5bbd7f0

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\sv.pak

MD5 f2bf46d97477489d80659d0be53d9d05
SHA1 a76378ec45dcdef0c596aebe8a4cf36dd3f9c01c
SHA256 196265eea8a2d8746953564b11d64dfc38acc9b17d3e38965f3ae1ba78841e32
SHA512 d65d27d04beacb20d3367af016ef55bea774c782475271e0a0573d2bff2912835d96a803c216ca5f43b56d142e6a77b41a67f35c5bc704c10f5e2aee5d6b7348

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\ta.pak

MD5 48554783d89587fe96d94cc1afb58248
SHA1 be0843e27225df82cbb27f017acb7bac27c92c5e
SHA256 df0d976ad84bd0dc165f341ca9c5dfe7995a4f676c1c0a09d7a4716747e94896
SHA512 2ec38646a550e86bd6634247de2a49be20e9f3c09820284da82f7aaa6ceabe32920c4395d3bcd728e3370f8342627a9a9f12b6a222de145213efe57239183784

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\te.pak

MD5 079fbd6adf806504199dd0b05c87c697
SHA1 4fec8c3bae9b48f92e35b609fc3977eda5de2039
SHA256 ee2697e8850803f08bee80e461833bd9f4232532c3f569f56521b1320c99e5e2
SHA512 722c6f3f6f61a8eea6965eae290e580a3263b894e07f7aac08fb6cca67e668db92a874728e32764ee0c10f5307b753d1589b8cae5c8a39edb29c7253591c017d

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\th.pak

MD5 433dbeabe2d4c70255f1685ece8fb97b
SHA1 966c16c364b4f3ae6ccb8c5019c0b6bca75b593e
SHA256 dedb178d79730bb0282605f7bbc6e410b03ee7bdcee1a64c08d9e9c442f49942
SHA512 b5f3d434f71b62136647700e7d4c4e207bafeeb20cdb03019c6cd6580e61f88f596a4f2a0ca77b010f38b41a3eaf5df8e2a00e06764db17244083cb95703213c

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\tr.pak

MD5 1a505f3f30511c2b05eb29ee0e0bff26
SHA1 08d4002d32dc5ea8a9476495786f5d5c1bae7ea6
SHA256 27627a61c6857b80b5eec4f6720b585f82b38271b7470c00a444735beee254e0
SHA512 d925f59cc9af4d55ad5daee42094ddf5d120eae816cddb56e906cd8da47039502f7608e9c4af77994ee7db585697fb26dbbd1c2e7c0bee4e3b194c9eee80eeff

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\uk.pak

MD5 e21f45d7685b75be483013e1e8dc8237
SHA1 8f4cdd3dea580d7671117e9c49891212ab950686
SHA256 dd57df6e7b591b3bd6663743c52f4c5f3a7a24e90fd8045b03479707f25702b3
SHA512 b29d8c67a259e4221e9cbb082f41a1b008f665e18dac568c7ac75fd40ee1e1e00df8bcd65825fbac63d51b1bf555c5c3752b96a9c8a4a153cd325377a165a048

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\vi.pak

MD5 561050669f78bd04d0431de3eb98d160
SHA1 028a78bbaabe19ac338648ac95a8b944254e8d3d
SHA256 922eb514cc20dbb44f41745c9e793756f8b46892504207e75de188be0aca6333
SHA512 2df7ff472a616c9271da813a66c6bd98809d788c7dc752ff0f3f68423f245cadd6945a5424af740b17d14f4f6935a2f2bf030b369dc8a39fa6e968d7f2a1897d

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\zh-CN.pak

MD5 54415acf2d54c65718c99ed78b4bf3e5
SHA1 311937480b01256a1e50d0556df9b4f9f9a46424
SHA256 3648945ec3205f590da62f76af957d8a4175890e6ddb5fd1103beeaf66728c7a
SHA512 4eba5d0f1be81e72699d8429252877096524b4e27fd7d8ac480ec13cb60a83f4b8288823299c1c4e210699278588662e578814b8061bd5b72b5179b956624fc9

C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\zh-TW.pak

MD5 c709c2e92d4c0a1a2fd30f5350bed636
SHA1 31c8463300bdfe0238f167451a1adffc4fa899a3
SHA256 37a8707ce5a07b4363579e2d411a1c641913ed1e0377ae1e8cdf70146cee889e
SHA512 38f8da72ecbf73f10a8109ba51f162e77b0f567f7415fe2fa17a2bd7677d9562ff8bd5c136251f44c192c7618cdf72684dfe11070f478255828a5bcc5df8c01d

C:\ProgramData\BlueStacks_nxt\Client\Assets\exit_close_click.png

MD5 b09525b48c0023f893d6b64d06add4b1
SHA1 10ecd439ea04e02eefe17f6c110d0c0a78a1db21
SHA256 caa2a8fe9b282939a21b86f8f61fb0c9452222cc3409f06cbb0dcc45613aca8e
SHA512 c6f5a7014c24133eb576708ca17d15becf2b45ec278b3f94e5275e47c78cf0f2eb8bb1a17d277d1a665039f38f2e25faf830e275f426b0a94c6a3da096b6204f

C:\ProgramData\BlueStacks_nxt\Client\Assets\radio_unselected_hover.png

MD5 22efccf38e15df945962ac85ac3aa3b7
SHA1 b94a8615dc92982e1637680446896080f97c2564
SHA256 0ec39ed4bf89a341f1b5aea56d0e99ff5c923b9c3a6a81adeb9ff21764136f92
SHA512 41a4dbb57abed1a16aa84c72c202da461ca45cbaf68f69a10cb3e5529e8dff659e89f7f4459d1e2e8f3549c6fd51f23fc8422f86667577ebed5ab5df149c79ee

C:\ProgramData\BlueStacks_nxt\Client\Assets\radio_selected_hover.png

MD5 47ff3e4cc15b8c4a07e3ceb6cb619b62
SHA1 0318e54c613b8ff00f54d843e90ef88310c1a96f
SHA256 4786cfb7c98edcf01d6b670abf19c50891d56a4de87b96a5e17be142b1af666a
SHA512 0212bd7f6cee390d3bc221a22189b75407fa660a0951c7f768645bf97e7b61ee86fa9b1de6f546ff1151560dcb3b071db8c14a7b08b0e771b539a817b31b154e

C:\Users\Admin\AppData\Local\Temp\x1jd1vcn.yxl\BlueStacks-Installer_5.21.210.1023.log

MD5 1f77859137e20c2df50482f4b05e4d78
SHA1 261c3b8a5c841249c5bdc172b140bdc260de8a7d
SHA256 77fc4cbb66ba941dfdc502314b4abeef1638720923d6726a453408d8fbc9fa3b
SHA512 e4e9ff04eb5eaa550e3ca55e02df32f851f92b23c1c6472c65158ee2e257ed8d8b0ad7557ed3f2e57597cbdbc3a8aae83e93ff094c2cfcf10fa6d656268b06bc

memory/7332-25990-0x00000000215A0000-0x0000000021B67000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\oem.cfg

MD5 880dbbc36b6f1d4a6ca9a73419564776
SHA1 1b4eaca846ca50a9fecb6a741dd19973eee9e557
SHA256 0d111e0260b3c11e1dae2b5328bcfd2d1fb21f15f5b49064bd07e272a8bb0822
SHA512 19980cae5bd279216d737cdabc9e9980c74f8918234879b9d5fe9aef1e265cf426931e9db798e2582399272258e18dc04d817b0dad6557010d04b6ff7a715322

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\Bootstrapper.exe

MD5 e896caa05303bdbd59395225248889bb
SHA1 85681e927d9c44b1260609ee88d12eed9a612100
SHA256 b96937b386fdd06060a61756d3c0e2cf0b99908833cd91490fe88db6a44d394e
SHA512 584611be4bf3574693c2fc9d835379d644cb568fef177b420e74548483b41f89ea8ccefb55c4464fca60e2db9fa2e0fd40d7d3da1c2de5cc25e8c4822ceeaaa8

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\HD-Common.dll

MD5 2fb804c9349975e8cee70da02a4258ca
SHA1 13dbcde0136beb0e193566f23fed545f2186fe6a
SHA256 e62b66554e405a83ac09023f68f9ca1d53930c3063776ed17106df6eae519770
SHA512 d596cb9b16bdf19b889027400bcf0efcf413c60f5a7219a3d51b89c8c85f459b5d59fdcc0b6ae94ecab4b6aa5a3268e4a04c24686532da2fab32e1ef11b06fc7

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\HD-Bridge-Native.dll

MD5 351358ea18033cde1708fb57390ac58a
SHA1 592ed96425fc5468bf225a66d7bbfea9335d1677
SHA256 de9cef36b08f4c65bd647d4e5ccf37f62fb3a434d99e3ebf836a81e2be2201f6
SHA512 8ea0a3a47744d9c1c8d8f3886eca95b406297a3d85ea075db47ed96783c313e28c00ed3e7e8e05ddb47b0590291d64efebfc5ace34d94e553c7ce592ff9e0b89

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\Microsoft.WindowsAPICodePack.Shell.dll

MD5 0d4988c4cff29c55250fa5abbff258f2
SHA1 37ed08dd2e0483667f5fda27fa7267f13a5f11ee
SHA256 fc2440ad7e9728889a3ee0cddf1ffbe42c1a7af08157d670991f9b85d00c4d30
SHA512 4d755bf052d86c087643b93c58139d20378da0f6a23b086747bee20b0f3b735594a51f11e55d9d784183238b3677d00abe856c69c11800c89614adeaf8fd6dd8

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\Microsoft.WindowsAPICodePack.dll

MD5 97be421a63f0998dfe2f2386fd59ca51
SHA1 807b017c719709a6f7fdfef96593b26ab2133f74
SHA256 d0651b4ed253f8a5dc6f5e5f9cedf9b823daae90bc0b6f296c9958ef4840e83a
SHA512 ec5f1a19da9c386010344ebabc9897e98e9907d7cceb0961a195da6db208a5fa37227e556a36eb4244c919979ad394f082dda232958612289d75c594c2707909

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\Newtonsoft.Json.dll

MD5 bda878dada4f753f52e463fc3a05ab59
SHA1 03e8dbfae7effd85012c9ba7a5202e76bcd778cf
SHA256 8d81c6e44b74a9405525750e060ccdf938d202aea70b36daa5e87b9cdfc1643f
SHA512 ce21c5f368c3a929b5b7a322d7084653e2b26f4acfd3ba9166815d7e750cb867cee32fd5ef0ffba3a70082fe91ea0cb74e1b9f72aa9246b607b4eea16fb74a75

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\BstkTypeLib.dll

MD5 b1e3412d29d9417ac0d890a2ed47d911
SHA1 6599b399b68d4043d2c62534cb04875e806b2f5b
SHA256 3745b335663909f11b8a9f9fbcf4a675c2685c0571d986d9ec9477e8012f114b
SHA512 17014d08af02297063ba03971ae0f4bcfa095c40bea429039be1bc426f3e4d72323b4e8790ef1628f20c0fda40a98bc91b7debfca03cef283218adb6fc971546

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\concrt140.dll

MD5 c4fe3f03efd3188252caa101f954ffeb
SHA1 98b613aee45c71aed9d2be0d61d7ace323929e9c
SHA256 95bb425be3d515a6a58f7399d44dd9e032baea11667dfdba29517c460171880a
SHA512 80018e0bddf079367d3568433a5f89f0144aa0a75286b0105fe32aeeb5d80876c9b2e1ecaafb70fb041271e27a234a2cb88a2d3d160a4aa3768ccfcfc574704a

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\d3dcompiler_47.dll

MD5 5faba8b020b313253703b07591d00379
SHA1 f5ea546901c3faf60122a4ec2d15a86b916d5d10
SHA256 bef3c125122bb459434bb02e763454cc21454257a78e63ceabfb5b347d46efd2
SHA512 b23f0df210b25996953e51ceb2304bd85aaed33c41c75ee1577f6d76f37bbd2a2e96be0ba7561270e23b26cf0db2c8ae60567cdf91fbbd2d0577ae88e9ce3939

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\HD-Astcdecoder.dll

MD5 f98e3d2ac279c117c095a4c80733c147
SHA1 9da4d1eae959b58e6694c4a368a1af73f7aa0b7a
SHA256 1c662e75b3592a8cbd5bd14a845561550d7b63879ac4e055ea8c04bad8d0f09e
SHA512 68153e0fb55c10767afc37687544e06e96c009f218fd16396b1332efe0e65cd730933729077a8fde5db5c79e6ecc5fdfd678cc978530127b8b12a6ce1c4276fa

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\HD-Opengl-Native.dll

MD5 caa3cda43843b61964c777dcf1b7d289
SHA1 5b40484075f01b5a48b347ca71a9fb26b5110537
SHA256 518b2e77d88e79476be6525923b24463f0cd5a4182e9511db2fdd02c3da89323
SHA512 6b2de4733a660f3634b81769567ce9b87af923aaa8dd081b7dc49a443e3c815f28a24c9abf0042ac0a86d351e34888d057b3f5e12c29b8b0c9dc3b0a748b652c

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\libEGL.dll

MD5 be6ff0ec680921380c04331351a1ca2f
SHA1 164a58758bd929d3f61f5193494dc4ea188c34c2
SHA256 5e287e7e884504b524dc4610bebe79e013f0bc6f87fe788dd1f5562b70a6dd65
SHA512 8603d539b08c32a9777eb5749ea9707a26a025dee72e8b44a34bc7e5270d8d88004a3dc0625986b4814402a3891ce32d815a27c6ec7e0079638a36b68d13890a

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\libGLESv2.dll

MD5 35b10fb121ff7c4f85636c4ac075307c
SHA1 ced4a1b68ec66eb8bad69651e8d2d7ea63028f8f
SHA256 5b0acf994cd091c5c07d707219a33de7d5d9ce2038bf93644a7c3d8d64de48d5
SHA512 14fad63bbe5bc296206656b1b6075167d4d86278e2db7afe5ec68144e7896227a07ea07d93e3a5b042deae6089984ab1ff9f38f80c9c9b128787871d13f28d71

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\libOpenglRender.dll

MD5 bcd784d9cb5ae3af557f172c70868b3d
SHA1 8ed7789a66eba972ab67fc738ac5b69134963d81
SHA256 3579425030fa2bd3e28661b4ff9e1f8f420ec49040dea485067adb4262f36d51
SHA512 77764af05cb7bd460e946d899b1ad5b82d910363a80903bfc301b6db6bf3537dd1db121bd7ffdd542ad2d5493652630ab3dca0c5fe9159c0b555e6fedc9c6b77

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\msvcp140_codecvt_ids.dll

MD5 4266e7bb9bfce998083d2f4f938b11c9
SHA1 23fc9c4c9de9fd3e71941df86e26c4dd44f2a95b
SHA256 e1ee6d29e30708ad5812035626bbc1058ea12fd5503d5a79d28c9cb67fab4a14
SHA512 5dc1e769f973aec3f0f766ad7c2364a184b9f71c1266f5e5a874c3e63ca7082e9a2c38346d387aa516e2f23acaaf62979434819697b2695644883ce07bbfd867

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\msvcp140_atomic_wait.dll

MD5 1d2a0d23e35b93464bb5b09e5e4c02b2
SHA1 04d1a1eed3868433c5b7652ecae0fdcd29e1ef39
SHA256 a577b5fc4e3a14ae141657c30a38d11ff8593135e51e55485b252eb821d47e75
SHA512 18a0db760e4c4d9c4e014cff5ee0f433b298b65fdeca95b8f5f172b9bc534a1c7f64a1b2751b90e89cf76f41ee1ab468415466d2a657905eca9835e41cae264e

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\vccorlib140.dll

MD5 7ef7eab654df53e087ac4703c9ea0b16
SHA1 743dc76d168326b60f09347945fe1342a6effc4c
SHA256 13e568fdcde1b7b7f2d1c97a474bdb8858f5ab761157f0fea7201ccecf84b9b8
SHA512 0b860f10c03acb3866e82fd6044c29d63a2c6a1d5f6628f3d31f1cd1e44d7144e3660df3446b7a0b76b7811b261675e5aa39fb27efeec060d287fde3e630edd2

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\vcruntime140.dll

MD5 11d9ac94e8cb17bd23dea89f8e757f18
SHA1 d4fb80a512486821ad320c4fd67abcae63005158
SHA256 e1d6f78a72836ea120bd27a33ae89cbdc3f3ca7d9d0231aaa3aac91996d2fa4e
SHA512 aa6afd6bea27f554e3646152d8c4f96f7bcaaa4933f8b7c04346e410f93f23cfa6d29362fd5d51ccbb8b6223e094cd89e351f072ad0517553703f5bf9de28778

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\vcruntime140_1.dll

MD5 7667b0883de4667ec87c3b75bed84d84
SHA1 e6f6df83e813ed8252614a46a5892c4856df1f58
SHA256 04e7ccbdcad7cbaf0ed28692fb08eab832c38aad9071749037ee7a58f45e9d7d
SHA512 968cbaafe416a9e398c5bfd8c5825fa813462ae207d17072c035f916742517edc42349a72ab6795199d34ccece259d5f2f63587cfaeb0026c0667632b05c5c74

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\audio\qtaudio_windows.dll

MD5 9d2487f2acc6430df6883852c4f354d3
SHA1 e1d3e627aa2f9c8a1507eef362501bf56d18b083
SHA256 308020869ffee74c78144a5955cfbc82474d57d607272154651039b132bbd3f1
SHA512 1bee0249bf66d05a69a4403942b83a9f53078bbf5a9919ca7c2c68293529f7216c0b431bb61a4be73e67a29f0709cbf2df84c9e41d332c10540ed3e7d0fdbb7b

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\BlueStacksAppplayerWeb.exe

MD5 5094763e6e74e519fa69c73639aaf345
SHA1 5deb8c9ab661aa8cee47360bdece19f46b7b6a13
SHA256 f39a1329ee7a26060488cffbb5035d0837e00ddd3ab5bd542a12c275d399fdc9
SHA512 62f4880c94d1006dc3041f8ba385fa793ac976495dda1fc7e04a110ccf07f14baf934270b49b9aff67dd6f13236cb555937354e9d822cc5613a40e062320ff8c

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\imageformats\qjpeg.dll

MD5 864770c7eef65ec41abc0ae18bfb795b
SHA1 7c9ef94edfe2a7daa6227d42705069e4ed124f72
SHA256 899de9f62a71c1e837271c89747d3628436dc94e6af6ae528751e4096f8894ac
SHA512 c26c66d4b0d1729202493dc4fc90ecfe1dc80c8024e18aab46682ed8e358ab1f89a0f0a43ecc1db00e79e21a8392bd4e6ee970228b97ee1adb096adf79a0b2c4

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\imageformats\qsvg.dll

MD5 08ff22a811e0cf82b67fcad89494a8e8
SHA1 d1b22b0b90b72acceaa4d2f92bedba9ef875f6c8
SHA256 94d098083ef80abaa696be0470021148fbf57ec81491df20f7004ac27b924e62
SHA512 a5684c38eb8973c06348d18f24e5b8e0228bae62a18d0ab23ca24bda46a6d0d9157e10ba80bcda4e6b1858bff4bcf3cf3230d46c28c4d918798a1632457bcec5

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\mediaservice\dsengine.dll

MD5 36776270838fe3df2d7331185eed843f
SHA1 e6896eadf74e1ce2b8eb1b885ae1ebda4cc14334
SHA256 cf8f5298e06dc1dc12150c2f202825bed9d9da91199fd273501bdb0c8300a581
SHA512 0764141db43c32d350a02b4aad36b372ddea33ae42747d39176ea3d4f605008262ffe73716a3f259ca9720c3d5629128efd10d7abd7ee8bce479d6d5fdea9b75

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\mediaservice\qtmedia_audioengine.dll

MD5 e393e851203f9b99aff3322e3891677e
SHA1 3294cbf5047789dda2dac4026aff1d872af0f9c2
SHA256 b4a5f39821ed63db5e71e2a22579fdd674d4d4e96d2ce456220e5ce82d020adb
SHA512 3f9d959a31ca725b03ab6856e5357b7f85e672e7e5fef651d753637c85f1e2fdfb4160bdf5f28da9857b5338e9cff00378582fc0e2a5c1bbeda523ad0b4d535e

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\mediaservice\wmfengine.dll

MD5 98b634dafc0c516a9897352ecfd1b550
SHA1 398ae52c39d28f437b6479d34c700995b350a103
SHA256 ca55f177bf7dd5e219f3ce546918f2e81505a165fd2d9a8215281b2dbb05a5f9
SHA512 984b6df6e3b8ff452864fafcbe4a830eff4818fa4289a4b42849571ba68a63380f54996a0c40af2fc533d0efc2af544d3d566adfe411832c954030a9312ff6d7

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\platforms\qwindows.dll

MD5 950142e45ed844f84281b7051c9326f4
SHA1 beeab1999e609362b636cac8f145408ad826a551
SHA256 c335bb187da20d8de3ebe5e46a5c73800579db056eda339dcdae3e7c346169ef
SHA512 1b927afb34cd4509a846c18385a3e65f33c62ec07b254ae90ceaa6463cbe6e85bdd1e7808d77c30fa50d3c53b54aedd01593d029065f042b53e435e7bb45b1f0

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\Qt\labs\platform\qtlabsplatformplugin.dll

MD5 fd729e2a3318b97bc9225be305422ae4
SHA1 d12f250f4809967ec3a383037125a5298de64ccc
SHA256 85911e42641a0e80cde5ea2208f145ed2d73a0151c05dd12146bd4f15ec0e0d8
SHA512 81482c8afddc6f85f5045026d892477db5f6884bc1c6dc20814a04b73f7a734967242a794e44acc95d9729de6d7f757f248057c06cc22f4505ee53adc395255f

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\Qt\labs\platform\qmldir

MD5 5a7e631da13d90abf81e55dbe0cad1dd
SHA1 8dd3be1aa10ff10c49bb67f5fe0d1dd1ce064428
SHA256 2c05fbd9698a3296487b8b74d8b2354fc0ae39a4559c5a836702b5981fa6e5c0
SHA512 5f7390c51a7808d444b2a7ea1916f33a9d378c39b16a08f32a7024a2395b8e03f1ac0e9affbe41d514d8d6970621e8e215e6db82ea50f13bfb65695b2294c834

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\Qt5Core.dll

MD5 12b1cedd6f4f6d93e8cf1ccaf10435e2
SHA1 40d5742c716b2a223497281986d10023d3990825
SHA256 36a4a4fa33e73aae3e81c34d375af3d78ccfddc4ffe77bcf7a42d8f408406580
SHA512 1f10eb4da185d5a1fbb6ab990be967dcff1ec84515f7a66c53cb1f996874721ac6bfc440b9a74f72b30e2518dee91e6d986eb944d2bf4c950c52c5f72a921879

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\Qt5Gui.dll

MD5 ea9aa98ae60400d371d78c238a2d8f21
SHA1 649cc867966a359d1a072a5481b0a04ce4977092
SHA256 7c1bffa7be97d673a190bbee87ca70587222202e2a6e418cd2e781c4d5724194
SHA512 d4b56ca67f41e0554b6206d0ca7ea4572efdb9a6e5f4b7dc155e8dbbc94da2716ed80526e7d90fbd029fb53bf212cdab9b452d1daea96da223d57fb6894646dd

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\Qt5Multimedia.dll

MD5 00863c9e474d8e2a30f6f6ed6437dcd1
SHA1 a13bb43301317680c5a68c45c28d287051b8b590
SHA256 35a623ed52e14345e5f32f5b9d988ce0f14c57edf75eadc3e11277fd81f4f661
SHA512 7422deb1a4d91a3a271ecc777a2360d72801ded3147dea7a1f3fc61715df1e6c29ff2bdc883d95eac9df7114c5d6735a21d4d5c8edf355f45b15414ad7a4f2a9

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\Qt5MultimediaQuick.dll

MD5 32bde0f5ac13cb4560e62ac453f9f974
SHA1 b5f3b5b12b75349f1d8f6ed9dd8aa756accd6c19
SHA256 84dc17d4cf2f4233102f2174ffe792d5bf0b703e8bbfed89b64a6fb847bf8fb4
SHA512 e871bda551822d63bac6ce89b97dcfcee457a0d8ba41effd5c0ebe409580db456ef5d554de062ee8c1d61ae3b37a599ed46505b4ea551611b62f361ab6f707a6

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\Qt5Network.dll

MD5 cd61be9a6847d43f1536057e484499a9
SHA1 3c13f35dd63f14edd012c85f86fb5b386c9d72fa
SHA256 eebd7d2a69d7e1719ca26491de606f904ae759c3b076ee4fb84f16f70a77c06f
SHA512 6c840285242459ec081380dd443d792bbb5410f4d3c0ad290a69ab5d3f7cff24b101dfc4e43a126377e26d7d2c0f05e02be4a6ad52034b2152890def277f407a

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\Qt5Positioning.dll

MD5 99eb3b3dc32437a945d63609d05f7744
SHA1 21c53bb38972d649d6caa21c62445dfd321e83c3
SHA256 7206a85ad524ba7d06ad82ca28d6a5c67853358dc822e1d8827f634fbfe5e5d2
SHA512 3b3e62dbdae4b96e5c8941d9d53f79c488050657850b0e09223c90e5f81c8ab456d548172192dd9045e963fa78356d25d809d8d6caafcf9d6add088d6aad14f0

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\Qt5Qml.dll

MD5 6eba1aa16b8321286d608ec5c980ec5b
SHA1 a089d67011d213503dc77c500cf35e28ceb7eaae
SHA256 54922dce876e4bd01ae167bfb81d36db57610ac934c68114f7443433afa6e9c7
SHA512 53ca0498dd05ea39b701e42bfc821378f562bf3a4b29240f96660c9a9c3f5bd8ea57d1e5a219d3ac0a2c76eb0a02fa54421fef9a446e7b59dfe4b185ddff428f

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\Qt5QmlModels.dll

MD5 dc37e2773c013265e5b0c0e48e07806f
SHA1 ec5b54891af55937400ab3336aee74d8dd453d46
SHA256 ffefd7de5145469b401dbcf88111bc13429ccbca93f9299980480e0de42d2651
SHA512 65615c3e62ec6d84aeab82904b94cd6648916fdd05c155aaa2c62dda90ba03717a4244437d290fd9dadf0c5166060fa0c760049684b2a7621f653018e8bc9dda

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\Qt5QmlWorkerScript.dll

MD5 a62fd893c8238bf119f23f70d3f63f65
SHA1 3d83f17b391a967f89c8fe1c8bf5449f9821c3d2
SHA256 4bb3ccb8cfe8162c358e9ad72cdbb5be7c5400de0133df85b353f409148635c0
SHA512 ad811e65820f3b1089fc11ae0597822b0fcb653e7b2c47020f7b4e27ddc3f3d839fcb4b125156725b59f7020a438ce5f18d6e207546d894f59365e901870bafa

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\Qt5Quick.dll

MD5 5ec502fbca1a4180217d3403eecfe15d
SHA1 e436a4f9d957bcda0bde2bde448eff1f762a45b8
SHA256 87c3ae58688837f61d1b16a2a72d52e65aa5bd7ff6422600333e02206d787083
SHA512 4c9a63ef7c2be75e479d511b38615f63618f35433fc9f3f84115804293395485ea1a5d4f2ceb70dbba98341c26147ccae8113bd6b177ceaff92c6a944588e4a6

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\Qt5QuickControls2.dll

MD5 b917951d21a98bacf748211640608c15
SHA1 d8cd8b26cf3161b2c37f67710512391665e92201
SHA256 5ae1d17ead1017da7d91029982c5e7040781d4730396f2ddc9a5c8b920cfb5f8
SHA512 f4b765396f3b9044227bf8ffb79ca243ced90c6ecb8c3771bb5cb9457462b6b7a2a57cff6d7e1018114df9b5bab35afb6beb665d5dae0f15aea71247a76591ab

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\Qt5QuickShapes.dll

MD5 f1197bbcc2b3de8920582e6c96a57653
SHA1 1f3ec5dcd59684f0cfca29451e9e243692f8c650
SHA256 223b13c31c352bb93697b155e5c60b66216d942d2b5f5fa1a8b58c3931d972a4
SHA512 e8ff4bd96b99325a1772f023bbe5ed3acc0cdc95997f702dea51b0c5b3f1c42a68f16a87d992748954f554784139d278dbaf075892e382529ad4dca380f1ef27

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\Qt5QuickTemplates2.dll

MD5 9d1a513683b4acd81276081102bf8c1a
SHA1 33fd9343847b8fd94b34a91c2d0c98f61ab58639
SHA256 22da7061ee80f15a41f3862ae46d1c66cd996b4e4c51ea6d0b6cec5dea7b8747
SHA512 2412931dd632620cdb841ffe89e3961ec127ffd41121e9343a35e29a9d8edcce7e439ab1b211c35c2cb6a9f2c7bcd958d81c9156138028ba11e5da9f47b5d5a2

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\Qt5RemoteObjects.dll

MD5 5f54acd11f4ebf1f97bccdc62e6b6080
SHA1 02a4caa94b05bfc26a49b75f4d92817a5d5866e0
SHA256 9425552aaaece09d997d0aaafa1c8fa7252b90f5af112b0836261341aa8fc7ce
SHA512 a77293b89119311a114aad09c9a68c127b31d48998593c856e288b907ed84267c956a081bf86ad188488978cfcc8790e304cf5f1068841ce5c974a6578f88344

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\Qt5Svg.dll

MD5 65a343648419a804837d42402f96e058
SHA1 ecc0837fb8932f0993cab965f671edc39b12153e
SHA256 1c6e1710e4a626b48cd6b7952567a72461296f8e7ec32be2579b513cd20a6583
SHA512 1709bf95c6e44cb69b82b358ecdf77ee9dc38575f1713e7fce13a8daf9b51e148fa8721eb443ebc1e43890478591899c0fc85df1b9680932b0f9a3d89018b429

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\Qt5WebChannel.dll

MD5 834b5adbda956d7426a1a496117da8d9
SHA1 da9c903e5374a4e851ef289432370e1052119bb5
SHA256 4514cd03bcf0bdd88de4e38773eaabb61ff51476d555e0eb6fe0413a4db07f52
SHA512 5cb92f51d8d2e4a5307c9490c2a3bd1447c0f2829cff114bb9de235f62352282d9ceae991a1cbf2412251313e893efbf9342d940e68ed97ad241e59d03f20a2c

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\Qt5WebEngine.dll

MD5 82a9db62f8eef51ee185fb34da1b0f64
SHA1 7d8076a1d726935550e3db5255161cce058b4b71
SHA256 ee08199a46e6210f3766595a9e9e6849bdc654e19ca398299625b6140e517a1f
SHA512 266fe798e82d37fd4ee879575501f4001c8a9e0135cc2bd953bbf4c482568f57d8be926b6836f00e0a62cc30bc06fc8c8e9642217a7fae66bd71d966cd1f162a

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\Qt5Widgets.dll

MD5 b6aa409eb7233712a3b0cace47fe3d37
SHA1 8db9e10d522568ecf87425c33423a58778324568
SHA256 180ca9073a83b7eb0f3f0c3ab37545da6d43f57f73a3e637ed541f8e2a327a4b
SHA512 9af1f3a499c9aef814781df83e26ce1678799e475d8b0adf85a2e7f71d757b6953c1ae8e66b19c074857d9e75d5a70889cda5a8d722e870659b6df685882e122

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\Qt5Xml.dll

MD5 47032d7ee0f7517875418e9c1a1841df
SHA1 0ab9ed345f28655cab37c9a2b005df54dc386b38
SHA256 a6048bb84c86cf87f77c0d392b5e6a15bd856deb48db417c6e1b3779a58fb34a
SHA512 13f76bb01941cdef1f45f00b5e949bbb3aaf0ff3dde35f94f16a8eb431c8dbe3cbf5b73491ffdf01a626e95aab8fb86f5a652edb0ecbb5f286c842838611de5d

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\Colorize.qml

MD5 1ec0cf0e533ccde389a9379f86e627b4
SHA1 2c5126a58a33d143799bdead316d2a5675241218
SHA256 197799164409990968460853d787600b9408d5e88044ef93d999c157b781cd1a
SHA512 089a68fabc9e3aefe947eb2e8de2f4b1a26aa0e4d6831530686dd3af3ab439d394a7c9664cb65e41698dc0e90042c57cc7503f687504d1f5b642be0336c25a19

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\BrightnessContrast.qml

MD5 6fdc937726d698a82297d6ff6f00c39a
SHA1 bbc4462478f739676579d25a79a1415a42bb88fb
SHA256 64fba62556110159e3bcb22f2f7106cb38c12b2479fd289c3c51257b8be03824
SHA512 76b4248641cd46a053d12082399b1f6e26922b7f3054920bb27c7b6f4bf0906f4178f568a78a8e1ee2f2e5c779edf789ccbcbc2fca44d5506520c5d5927e37da

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\Blend.qml

MD5 beaec37788f543b4ab3c5c4634c220cc
SHA1 7b75604471d2d4535bb72401adfd1bd6fa82a317
SHA256 cc6ef573aee3df53dfcc60df2d438c345da6028f137ab0747c941c13c54cb6c0
SHA512 327d9846e1e850d94401d423f9885b1d413651bddb3f6a31891c75a25b34aeb0c40694cd619271f970a0248e7ccbc1d3a47c52f0ac599ccab875af45dbb069b3

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\ColorOverlay.qml

MD5 8e74dc5ccefd459cbeac66dcfbe397b5
SHA1 900a2139b5b2df4002210a8c9e78621a31d052b3
SHA256 9ac89dbd19fcda5b55d59abb5f908ae16343cdf16cf75e2f0f19f959a1eba0a0
SHA512 7fada7936dc74caedd8d6d9e45118049f5dada84aa09b18a35412d74790f2cdc8c7c4ee8942d8d2cb96f1734a2436e87200a253c9518fd507f571034731dcf05

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\LinearGradient.qml

MD5 1ea2150858345eee0bd6d2f07a2a2d4c
SHA1 4d0576aafe4e85c46840fb1f9a4b98f28fd6938e
SHA256 b91050e8bd57c743aa018925eb7c47844eef6219da88835474cfd505d633630e
SHA512 de6a2f492c6920de38ffa3a4812344415d7f1206aa2cb7fe666cab68c039ef3e25457cd58f306c047116d835eb485553ab8bf4e0b5e000894509b3ba9dc77c15

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\LevelAdjust.qml

MD5 c06a6e4b80a67628614ada928fbdb565
SHA1 f27763a6273075adbcae86606d557b19905264fb
SHA256 3d79efeb518148e6de6b5e61d46e0303ca9a38f2684b9bbf45dc7751d281d6e5
SHA512 c35c194a5e543d3249d4a907233ea5e7520573e67da500dea7f90e15194f692d649121b5b01d4db70837dbde02fc29ad1144988b7b6a727d83366c145bf56898

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\InnerShadow.qml

MD5 a509a66bf6ff6c0b42bab956512ecb5e
SHA1 a276cc164b2df23c29b54e336652e4b022f421bc
SHA256 b32f6e360a5740475d95969cd4e1fa8350e78f707ac3ba24b2a555074fbcf4e5
SHA512 53e9f91e328371df9f5ea51c8b3f4dd2014ebbf26d1cfa0167bd50d60449b1107a37b29432fe98e2f027ca8c717f3aaf156244bf3e650ccf18826316b425f1d2

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\HueSaturation.qml

MD5 86f08a39bd6d8ddb8debc4ac928d3747
SHA1 d76d483a0cecd47cb235c27b0345e31ad63d405a
SHA256 8a8f90876f612e2aefe1594a15ec2b7e8fac3a66af36ab9bf328efe0f232f5d6
SHA512 8fa09fcf8303031271ea940f7a5fb4829918612040f53e3eb6cb1b9aaf96d0f1f47adbe56c3f65e47108ba5df1f005cacde527206a468f49b6dc03981bf65281

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\Glow.qml

MD5 f39b620c9a1d84327c7dcf32839d3503
SHA1 d03b917ed069848860136c5dfb57bf6e38e70485
SHA256 9e8c1f27320a3006c315c23ed4546aa4ae3ef63339248f22afe91a627eee6cbb
SHA512 fe7f2f3ae970bd55a51e90c4dd1eddc42812194a2ef98aef48a74b01b10a6ef9901107bc5cbb6f40d9872e141632150b4266e328282b7c03e2de7dcf9a375617

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\GaussianBlur.qml

MD5 16df85757d5147e7af13a943346b1a3e
SHA1 ca067a653d9a817599c29f82bef4f640b2bc87c7
SHA256 6df15f72f44b0108a904113cafdda279c25cca6ed29323600ca3e46a573fc89e
SHA512 de7127c4d5e6600144fc9bac79e3cdb86e7bc2e7b0a701ea01012dc363c5d187de6654cf7ed48162af151d9e997aaf27f9a5b1d26a66df2ee92c1a04e69b3a7b

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\GammaAdjust.qml

MD5 50178c53cfa7825710b02e6ffd5489c6
SHA1 3dd1dd3afb0d35ecc7b54e4f82518daea937bba2
SHA256 3d8e5ca167bb8a659cb4bf6bc2d2330da2b482caa049c98e99424de656b9031f
SHA512 e25659a6e07d350025d99f5ed80dd48c24d9e03943fdb2a587fee082c7dcb2533c218bd3b73e2a458648e588703b8c6db697bd13356eb8e1685bdf4bf895c695

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\FastBlur.qml

MD5 6604726b8e542e4801894cf7eba8d1d0
SHA1 7614a3bbf75f1f5aef13df19464a2415fa503880
SHA256 ff5c14f3c1bdcf2942decb767a6e2a246c3781448503214053a2f16cbde18553
SHA512 18e8c1884e8b2660149b698e44bcbd0cd63601bffe6ede3bbc0ea37502cf3948a1562fe28024257c0555385bca9201e039f9ee2330353c72aae81d671df67e28

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\MaskedBlur.qml

MD5 f2989fa1a4647999fd6b42e7066bcb16
SHA1 9533409c713da48c31a7849e4bd7776ed134e9a4
SHA256 5768ca07b9c710b53483c56a613dfb175edd3c1b574a69705103667ae0130349
SHA512 2ed1072107d65babe6aee082ad8d7d104d9265be750d7e79abf2a574f92772e7b6a2e607f434946c70d121327971a306968f60d0e6cdfa2ca9f97b36cd2bb7f3

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\DropShadow.qml

MD5 f80ff7be82b6042179b8d3baf6c44e52
SHA1 af2436799da9913ee1d65dc1ec85eb64e5443123
SHA256 ab0ad4d055b15ae2c8cfddd17c0067bd44964c8e35d848cf2e484a7ef9d7efdc
SHA512 f03a000e0825ece799c58fe30556abd0cc7ca1a64606e5868010728eaba72f981284e22152dad5dd80b99d3e83548d38b4ef4c77ec23f41fa69776dddf50b6ec

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\Displace.qml

MD5 225d30ed591a70ca5da4836e83b03b3b
SHA1 6c27704425856a98d608f3d1d09b9cd9a6fd8767
SHA256 f281d1fb31536f320f82496c39f93cadc44701fdfca7afef318de0e11277c801
SHA512 e4b855f182c5bffe9eab3ad2ed617312c94d223fe3a8a78f1e3f6e0ed6c0611feddfc58fc28aa80e566c7c75b5dbc53a33463ac1c722a350851a57a23fabcf9e

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\DirectionalBlur.qml

MD5 057a23d74c1a2d09f0dbcf026b181831
SHA1 faa64b8c9355ac266192911aa549905cc245697c
SHA256 7bf44aeb3654480e2d1c23ca76e53ff5958574766dd95d3cd1f3a1e84510146c
SHA512 89df4ea201e6b54e80c63072c9e30f4023065f57a451da602978f1cf72740e721edb030bb0790cafe67fb8d958b1ab6c0c1d93a37db3138a1aba9a690540ee7f

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\private\DropShadowBase.qml

MD5 66f77dae9f921f1e2c1878aee58355ae
SHA1 33c8c14579cca33a3b53447251e4303d87b2b667
SHA256 789f40939fc44ae0fa006d4b47b85630482f501a58ea798538edc56a62d62103
SHA512 e35e27e77c7e75310d3b43d7c0e920d83686bb4cb4b654c8c790dbe92e61c6d27a38bfc88e1710ced31dd386f6b0ca4f2452be9f87b308521382e5abac9b98ea

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\private\qmldir

MD5 82be01f1ad655ae2e5068903171bca0a
SHA1 810adfb9c00a5fa65ac7ff30b0a2ca05f873e058
SHA256 d7681c4c0c927f07eef863a156e254bde0bfeb48a0eea88f135b80325aa77fdf
SHA512 97e777fc63a9d851b52a4b9fc2ec1696a3f0beb72dbd91fbbb8ea7f16cbee421d4707dcc11672f6f8aead8098fa3df3b6044607aacd3f573d5a0b22f4cfb611d

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\private\GaussianMaskedBlur.qmlc

MD5 4023291ab80cb36ac61cc849e13cf8bd
SHA1 1e50150d580fe343ccbd1f305b0f3f15a57be8fc
SHA256 a04d23a705cebc123c5c6c0137fdd1ade6f90b7bec29e3f689bae53444c4778e
SHA512 c35d8d67fa4e2cdf12d8e1907e73a94581a7b51dfae0562366022fc2ef6f0e51a9f00b26198c0d7bcea955c39d23f17b2c9fc3e17d79f9c9ca6e05ff906d38c8

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\private\GaussianMaskedBlur.qml

MD5 491679ad9d744a35843ad99fa7273435
SHA1 a33fa076be8bfae915ee8249ca3c78fd314e9549
SHA256 5c69b8fe2bc4d17eb8f85d2a348c10944668e1021efa1865a9e2548f4fe5836b
SHA512 55f8eb312bae88e15c5ded044c377275ad68d0c10f82b9119e0d960a3a7f1c58c4bc83e248f54bfce189017ad8535010b00415cd992ae1c60aeb1613e73b8546

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\private\GaussianInnerShadow.qmlc

MD5 82e1216d2e0cee543abcfe176d14d822
SHA1 3afd46a6710125c0667c14c82f99ba3a660a6248
SHA256 0e520e5730f36c68f0b7a0b39bbef6a5dcfba381f4599475f66add52e02566bb
SHA512 e38065ff49350a4fa6873d1a164702f234132477c6188dad0b60093a7f73d759cefc5b6f8f17ac17b1876154610332e88aee35f94eebe4a074ae417a7146ea70

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\private\GaussianInnerShadow.qml

MD5 804f3062885449c034cab92fe582d8f7
SHA1 b2f77fdc6b1acd52a7c9d63dbea81919b376862d
SHA256 21af6e8f474fb487cc40d62b6d5c659a746e924e842f420245775cb972bc3739
SHA512 bad9dd6923aee85f2f510138f077b892018d353a69676dd05f5880562913c18f70cf93eb3366e98faa044d1bdc92120e774c66b49c103ff1a38aa89a95b1db0f

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\private\GaussianGlow.qmlc

MD5 5ce050469d37f32e642afd3d412edfcf
SHA1 8e5c339113492efe6a71fb41a66c1fda4993f6fd
SHA256 8d2b273b7b8eb109cc81ac3ec0631ec5b40fbfd0219a5beb539e5c29dd583ae8
SHA512 cab22042e729260b10d6c19e06d528ee7cfcb77912942421e075e973c135824689adfffc4776211845366ffe2ed88c056c18796edd7c06e57fb7f63eed5608b3

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\private\GaussianGlow.qml

MD5 b54698828093981a262f344e8bf00720
SHA1 284f93b68b4d2f781000fc23a224545a10baf882
SHA256 0976ef8bc0cd7c9e9ef43ac6e376665ef3fe8975ff27406f534a5238836a6ddc
SHA512 47a85de1b2038305df633b6dbf0791c6344c74254ef8dfc4c1ecb725d8ffe47954c168c2786255e53292d00bc8bae049a6da010670824688b82c47cb8e32dbc3

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\private\GaussianDirectionalBlur.qmlc

MD5 3e8c250531599b9a3dbbd9b7db88b90c
SHA1 bd5cf89cca097ff9833c4f5bd5c79154955d9c87
SHA256 cfab0ed624ad19b5d554093210cf3c74242c6a09d1e3ed7ab76ea1fe0235383a
SHA512 0f43e3f0cf83d75a37eff4d7a7542bc27d80de3d6cc00bbd0612544b54bb0c802323f2e479cc1ed86a372c0cbef378a0075b8ff1f1547dd801343f358ecb6529

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\private\GaussianDirectionalBlur.qml

MD5 93dc27463d58d26271db2b932c070200
SHA1 ae82f7ad4779b25ff71009f7197eb0c1b68b5536
SHA256 da6f8f57eb015b5d4165bc3c297e8ad1fa3ffb38bafe5ac50ffa807b280aa5b3
SHA512 2280cb0531b7982b1b0fbd3d9fdb4eadd6c37c031d35fbd9ebd5f123ed1144b5dfeae6d0aaccbd48cf22567a43e753413fc334782b24c575d3df8f3b686ab49b

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\private\FastMaskedBlur.qmlc

MD5 5765510cacc79d0a6946cf390078b08c
SHA1 1e24095d8031b0b5a1ad3018eda077e4024b086f
SHA256 c6fa5927784c674b4d56abc4cbd3c34d3f9e51168c0c3f0e27f71226d4379a86
SHA512 62825719992ad06d097376d32cea8ff2c357d01bd60ef4a109e0e03b3231b75e5c0f9cb5b53d7402f4ef936dd957c2017491b6ab0e5fedec3761d5c33eb48c89

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\private\FastMaskedBlur.qml

MD5 b7738f9522c79bcf2c02c6e786e110a6
SHA1 e2e48ba76267475db3fb0bd0c2099301693dbc94
SHA256 6bafd1fbe707892d9a02cad301d2de8b149a6695cabdf994b3b102358aab5f0e
SHA512 865d60364e39c5511bef74135275aa55127e71d24fb4af5bcf558bff538b9527d54728e34c7ca20f0c7fd826b5b6508ff0111181894cb108ad427f7ce0267bb8

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\private\FastInnerShadow.qmlc

MD5 84011dba0ded0a1506e9ce5bf7e7132a
SHA1 6e3c13a05874a0b928e1ea73352ae92a0c415592
SHA256 91034aa0fd7b84a00944085795129d845ec26b7125ac26fff026c186b0d1fb5f
SHA512 3d13109a7d1d17f6e4fc960025863154e158f293febb5194205c183777e0574d50cf74da2d0b7960a3114c4ebf5d2d080dff014c9de89079c436bbd90ec5cc60

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\private\FastInnerShadow.qml

MD5 9fcc8b2b293f8a45ffa13cdec6b873b6
SHA1 6f23fa0cce4ef0ccd3f5561dbb77fcd15e0b46d1
SHA256 676361ae072fa9dfef37dc9c0d5ec5d5d5c7a55a6b89cc089441bb8d3ebe725a
SHA512 21767f520f092ecc8c9dc2cc6ede6e703e433a760d65a7b8bc3f8032577731ebaef7a00bbd59d113cb4a0009eb0442df3684e60ba7966aef30963b56414b7d4e

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\private\FastGlow.qmlc

MD5 d4917acac1191da099c96cc9a5dc83a6
SHA1 473a7a03d733529ac77a5ab85743ce7403da381f
SHA256 998c912fbd9f2d518f117b2831360f22b15e2a658adc0301dc4f07f4d75cff40
SHA512 4687ac341142edf7bf6afeaec65e58815e9e292833b13247ca9863699daff28870221e9928e0c1902422eb3158fccff58ea9277f765a26d1120c50003fe006e7

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\private\FastGlow.qml

MD5 ad9b239016c87b2e821863ecb7381d67
SHA1 5712040672d6ac820c862903c611b6034190a914
SHA256 82d6866cd116d6a13bd447f74b8b1b69203ac20e0f6f82c414b95c2319dbc0bd
SHA512 4d21eaf9c2dffbbcdc29eb49b84bb80045350ea67c394edf5a122bc32d28a60b6da437369fa8a98d3da226c575650a379100c296f8c92a2b6d2a90234210e0a0

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\private\DropShadowBase.qmlc

MD5 44cb1c96bd308f14c6e6e3293f97fc05
SHA1 891ab31bde6bb5867f1539810c38358e029c98e0
SHA256 d391b8db0b97b4b3aa8e0122526f51f24c84fe942a51822149c6886ecf482f09
SHA512 cc4838b433310a7c4be290a03beef910c190de63a970b5afa6ece5139ebc97745b30857a09f16bba1b29765077a9db263cac94ba6878001903bcd6fa0af8ff09

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\plugins.qmltypes

MD5 c76bd51b4ec5299e2cc9ebdb505ab848
SHA1 430083140e4aab9adbf39ad81e2fc820274a82a2
SHA256 6350c17d1667563eb1dfba75fe5c4387ccc3f18f8ea1e266648f5df463c1ccf1
SHA512 88068751e49c91d6309098bcaa76a6437abf36ea1c14174e250ecf5b0f4a55a85bf42607d7b4cf61393d8b7dad41c2dbad3a4d15d3726667fd572e06f9b5b40f

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\OpacityMask.qml

MD5 b374702fc8b9611f4073c1413fb23dbd
SHA1 51fad11565692b9ad0e1d2b05b5594995aaaf946
SHA256 efb3d68fb238a76dc3178cf120f29eed78ef5a750a188a7818083ecdc4093a2d
SHA512 57932c192baff0113dc8883ec73b3cd27fa3851d2731c4740b5f97cce693b7df30180d986cbbd0dce67de873cd066f23049274139e037a4527f9a7bda99d5418

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\Desaturate.qml

MD5 58fe5795a1786e903b35d6c31220d8e7
SHA1 3d4391ac01510c4e0b3eebba1f2cdae841dfa14d
SHA256 0f08b5d757f3a1d7db0e7502cccf2cd4975ce8924c091ce8b23e6889ade100e5
SHA512 887b9e539f8a397f78b38b4d44ed3ce14a044c23f1943a565d0687bdbdaf57f2d1387fa863a61144807ec7122d9747069bee64f6c626692acf4513e0f31dc5a5

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\ConicalGradient.qml

MD5 54030f53938f983bdfe7a8143f45d059
SHA1 74421632f3c1c1d9a3f91664d87da2875a14ca85
SHA256 0864cb8e38b25d27966332fa41982ca2e39749b24fe3c173e79877c93fe405c9
SHA512 3e698998e4c04956aedb2e337c2b5b3e848b8b344eb8bdde28beb60970b01c1a6136d86aa2c704ade53fd6c38f8a733ba54e7bc91ec13f43d2c2d056ac655610

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\qmldir

MD5 b30fdda9d8391bc35ebfddb4ad45952f
SHA1 e614abd59dcafd491e456cb48695a4c932d05b0c
SHA256 a33ac64a4da419166ea7b498f5b5573b8b0f3d9068c7506c6911f17faeb947f0
SHA512 6265e82481cf9627c3fc75458389f61cae3a5fc719662ad673b6c7f4cd52ac3ccc0ac940edba3e8537fa511fc15b69002d17216f351f99bec335c24014396901

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\ZoomBlur.qml

MD5 8809727c210aabd119cb1c774ae6f909
SHA1 f3eca66159805c260cf196d66a48eb1dbe15daa1
SHA256 50ec0d53e7bcedb1af9b48caecb2df007f10ccd036e690b73e9578dce8ca5241
SHA512 6bdabc75241ac1be0dd8185ad8df5b8112863e6257501b8d2b9ce31dc18e741317a462edd489c3cb0a17b1f7636d93ff262d792ecbe39ec205faf5f6183c4863

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\ThresholdMask.qml

MD5 b79b1000d0c09d2de6ef258aa3637a91
SHA1 72a95d62c4d6140480efe286d5f724fdedd62cf5
SHA256 09c372e2b57e0958925405772c270b6bf41f9edcfab7ab6008c78701e2edd035
SHA512 0bef363b772275fbb9e6bbe84296af2560eb4268e78380376593c3a90aab02c84669870a46b3df7d8cde3f552b50fcdf56722616a626060bae90645fd54cf23d

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\RecursiveBlur.qml

MD5 37d341ebd7f4044191a330def8d6087b
SHA1 3b8e65f6fdccb96ac718c9796ecf8b6546244fe2
SHA256 c9e7a1c397b709fa47f7abd7f8584826a1d73a7e2d5e2b5bfb271734acbef17b
SHA512 261c3705da28e4fcccabd61a61d7ff62c59264199666bcd6e718503a58dcedb7f2916fe892ebf521c9b0649dc2b6fa83c7986adf77fbc92f3f7c48c2895652d3

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\RectangularGlow.qml

MD5 b05dcc8a1c0b16e36880125bdbed639d
SHA1 cc24199d8a201d82a7becb9ec466e738cdeb22a7
SHA256 1aff57c6657a72743bd3f9d62aaa2b6ff4e8be36894b5070a08880bd4e414e25
SHA512 1542ec910c98afd23d324c1da0866fbe213f5b94b37ef5b864c2ce541497c92bc28734ce637f6c9214a031ec60478db29810ba960aa16883e90a1a52b0d8e358

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\RadialGradient.qml

MD5 a6e569f1f55262b95d5cdfe5227228c2
SHA1 0febf4507f40e583933c4f5dda215ca319cef20b
SHA256 b70fba05da2dd9595cd475c3b4409745b0f1b94c6c06b21a90995d245bd79ee3
SHA512 120a9cba788491faa35a5db442e2df8ecc525ab681ec8ae5979d290f7500b1f35ba07fae0470823b873f99bdbdcea4a7b63cf2e20d332c5f7d16c93a59296bff

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\RadialBlur.qml

MD5 b78cf00f13209d60c15dad8ad9fcad7b
SHA1 32d066e508b44c0011b858467e954c646c7ac123
SHA256 bca0b0014593e8ba8201b4dcdec26bd540ba53fab0636e6b808eafce7a41a0f8
SHA512 d52834545d02114eb113bd1c02926fb653cc966b5141f019ec141c749d35184ab2b968273f64e434867887f8ff2a9b5d297189d7e483f19829fa42bcc9d6efb4

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\qtgraphicaleffectsplugin.dll

MD5 41907ae0655574be77fbcc39abed9cb5
SHA1 4550f85f9645dd68283ae4feacaa41ba02191b1d
SHA256 60ebd344f40cab6c49dd92923c3af5d51fce784561e3d1308a3f9617bc6940ff
SHA512 1df2e6b5ef363df2c7c6cd9c2c5de950954645bfb42fb976bd62723ac3cd9eb54cb4b5061190abd40d46adb2621422e5ed7279a5c55de2a7de3227e0628f246d

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtGraphicalEffects\private\qtgraphicaleffectsprivate.dll

MD5 7616224ea139a2685cf099435b753989
SHA1 4f37adb583341806e0c0568cd88ea62e9bbd5b0c
SHA256 a5ad526e6c577a53abc9a10aa1eaa6c1496fd7d253b55c9366813ea2d7727dee
SHA512 09419655da5764beab04ddeeaaf608d21f0f790a023c5ec92da6307d3a0938f7caf09307696ee2a0cfcc894b2871e0c92564e3857e830049106b24c81fb89cc4

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtMultimedia\qmldir

MD5 44e34fa143bfaa33f9dd6ebd13ef0466
SHA1 df857a43b313c8d531ffc3c7bd33c14625bcd06a
SHA256 be3831209463405a965a7c66a178d4fffd0c2f10de168ebf851cc0965d2c20d3
SHA512 bb2c2f3c95508bd6326ac3e29a3765fe8c6ed9b88adc54bfad1ea851a957e7575a4e0a254da4b65d30ac82b081e338a9e60b8b62f6a7c7a5073892303beee8de

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtQuick\Controls\Private\CalendarUtils.js

MD5 9e3318714062a50247ba2294a5ff3f12
SHA1 eb1788d56a41414667b5db08437b7799e41ae4ac
SHA256 b6fe1979a7a3e900831622c86d3fc37c743166803e58444cb283f9136ebfbb58
SHA512 4aea1e6edc53625d0816e6711d4a981a62161a7bfb17bb69ca009743c934674d5a9e1719b374671497b4dfa323a2688ab83d87ab495fedd6347371c030d40c7d

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtQuick\Controls\Private\CalendarHeaderModel.qml

MD5 24f9cb69b08d16a8b05f5ba2f9707eb8
SHA1 0be3a55f1c120946b5f7403ab353c31d2c54eb1b
SHA256 522faef10db45128f608cf2fa2f596a51c2d497652b7eb3d6565123671350f8b
SHA512 885045e598db1983fca465ae0da66ebc4e1e3a2e43276e1fe637811eff1a05212a5b8506529ced997102fc094f47d8a75d81cb3ab8d60f7aaa5f9d19049ffbd0

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtQuick\Controls\Label.qml

MD5 be7923cb8144fdc10b6874b7a2b7df11
SHA1 65bbeca10e685720b3cc5483780619f937ef54c8
SHA256 bf30f222012d7f17729a2346a4887b06149391fc8b51f59298c5da3f198e6e06
SHA512 9ea94345a75e8e6d0a34e37bac5d13c58f1bf70f1b28ce225da304ea19bf3f08a7e94d32b15d5d2d3fc9865735947a055e2d542af724c71535e096d454df7f08

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtQuick\Controls\Calendar.qml

MD5 097c9e71db49da7812817d2384058991
SHA1 196b3e9c5202828b32d67b872e7d7bae4f9991a6
SHA256 f0ddd9578c48f3e83be4a77870827cdf0d42588aa1fab51e74e544274c29c9b8
SHA512 89cd08a5b64fcb4058b67ed5327f1fff457f3c6b6b585d85cbadc014720b08e0132e449a117925f1a2a560b08ca01cedec3bf4c26739f69a1525346ebe5c980a

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtQuick\Controls\ApplicationWindow.qml

MD5 73e4d19b712b1c33bec069d16bb63557
SHA1 95de4d5a51424cfabf80daf118db8210837c6447
SHA256 17c95348263dcb8cb37d9af05cc4b9b2e0a96c6cb7d4a881a46fb13a00c6c8b7
SHA512 1d7b1087fc452b0ea5974cbc09cf28710d84a2ead7ba31c4aac031c8f15f70e2bafa239bf3a8d167b84eefc90d7e5501d017ee019756f5a3112483c4b77f87d9

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtMultimedia\Video.qml

MD5 a12032e8ace1b022f213dd5672ea9cf4
SHA1 b8c98a8bbf1a218c04aae1d30b4584383185badf
SHA256 2e7bbc8a81f335da40dda98a1717de1329cd401477406c1d007607c4d5df0396
SHA512 d45d2e9ad0b81b1216b323a7901587aa535d314c4f8c74d8247e7825efa1b6c79ed407628fd82ac090c0db5a3c0a03127d0e68ccf41493fe676e8191657065ce

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtMultimedia\plugins.qmltypes

MD5 41df66ad5f8bed5fbfb6719a4bf6f3ba
SHA1 b3d8a12ac7ac5cd29908f60a06b24c81f617b5b1
SHA256 34185224c6f82d8de0656bac43ea855316267b862ee129f134b3ac53a54a0ece
SHA512 5cc89f3904b6516a10589b7dd1fe512537f6ff31384a4075269c2ce57e872dad3bb3e01290359b95e96ae64517b5ef5146932200ce5d3071b5f808b5e4a9e6ae

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtMultimedia\declarative_multimedia.dll

MD5 7211ef1bb6bfef816a8b691f6673a73c
SHA1 636885c0f2a563c1ab437b7955ba6a0de211ad1f
SHA256 b591ca349a912626683472516e9e15de00b9d54d51fd6b6cf330ec98f4285e4f
SHA512 c8c3f8ccf7ffc9016763ae9e518f8b40d734ed987581f843785baae4d9d4de29b39c530a10d960aa89f89dbd22a378e51eabc93eebefd97104e6b155c63f73c6

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtQuick\Controls\Private\Control.qml

MD5 eb4fca16e0139e3bc0680a03a90850e3
SHA1 63b1b76b922ef85e7bcc01f38607b868da4fd6f3
SHA256 85d882c7e538ade60f224525861427d0e6c92fd2ddb3a094fb627ed655051769
SHA512 5c7701418ed017760846b97a1e07ce33915cd2a6b9c4105ceb8a55a77baea50f405d83ab306c8479912f2386d235d516fce02b7adeb098912492262d6ff5eae4

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtQuick\Controls\Private\HoverButton.qml

MD5 2bc41f570f6027468522bdd0d02c698e
SHA1 8b45ca8af553c6cf1003a44f5f052c8b43376ef5
SHA256 076910961f2dc18a60aefa89908a953122b957a341fc477940941bc516726ff2
SHA512 2e7b8a6491d5a74677049df9e3a177eb991ffdf6fdca0578269fda2c2d6f5b3050c5ffeb671ed7c59f2e256e4f63ceb7fcd29d3f96772a394cf4cc38b5c942ac

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtQuick\Controls\qmldir

MD5 a6ce84d84b95b99795330156f2b48c4f
SHA1 8530263b6c0e61b715673c77bb2f8e55c51b2aa0
SHA256 dfbd5cb07bddd1a2342b82a442cd4a4504d87d04df79f3083bba3a031888be3e
SHA512 0979b08fcb1ec0d7589c3a80f0b24ea77817476d6afabb9e5f63b8a07bf2f3f3d902695514cb3696f11db210e1ceb6172ca0b878d6bb366ddd8169b009e9a83b

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtQuick\Controls\Private\TextSingleton.qml

MD5 c411fb3f65b5b28247f0bf0d666d1ba9
SHA1 3b7790bc054e29001d776eda31f08eb61a176182
SHA256 90d46318b587facfeb2321af8d93c453d520c796284181eaac4ae3dc7c503151
SHA512 71a36ede1013fdd1b71c41105c3fbacbe4a8430cc3dedaf6d9f75c19b4566b25ae1dbb106d0b85e2914a801acdeaaa401a483d7401cfc20e342cc82a8c315727

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtQuick\Controls\Private\TabBar.qml

MD5 df004b712e1a4a48de9c13e438d8d6d4
SHA1 e8515d41b25c49a3c33a616af6034f6c2d9163dc
SHA256 c972000624286b2d744da6e4133ac25d1b134b92f335343d4f479df13c6a4e9a
SHA512 56a3cd1e3cf1f68e383f89f6116a5177ceaf6556ea7a503d9e9254157e62597d1c357f7bd941b7946b263cbc636de26a3c5e0e2b93f7656eee9d8f4e97ac0b5a

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtQuick\Controls\Private\SystemPaletteSingleton.qml

MD5 19d2d38135ac481238f974f08410f39a
SHA1 dcbe9e4677d84c53cadd28e321abafbceb506fd9
SHA256 8f581893fc6ca24a89d7889e316929f9b151a2bcf5531433aa23f98d46fac95b
SHA512 844ad70b8d3ef5ff9a0ecc5ac210b7eb8f85ceac38c533851caff61a003cd6b2bccc3250d3af749d9af95250ebf75c69c3fac120022ad970ca3f8ae2c624ac93

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtQuick\Controls\Private\Style.qml

MD5 3b163113ba9cfe25fb733ebdcbeef8fe
SHA1 66a4a62ef72f5062a9786abb35f694f3744fd7be
SHA256 a72adde6471b74218d73d4d2e879ff91304289be6a6bf4968ed282988711ced8
SHA512 8550c67a42c095874c9fc3749ce29c06d480792c2926fd21a3e4ec685f7cf987fcb01436b820ac74b578290781104c213cfdb7655893db594a4befacef50cc48

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtQuick\Controls\Private\style.js

MD5 a310a6baabdb11a29309bd9b69541267
SHA1 df0d1f904c69e74b50c6c7837b0b516ecf05220a
SHA256 c688d92523dd63d6e00a33f81f536bb7e26a344bd926c65dc5eea794e8afd36f
SHA512 73c371ab9bf2b856874a55af3cd3fb1a7de40f1cb90ec4fb78661ca9e803b7365632cd70328a2a465a3eadb309d04516c05292d558956d4d566273b0da2ff048

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtQuick\Controls\Private\StackView.js

MD5 88a105395a11b53f09ccdfdfccf917da
SHA1 98fa4fbd774a3ca50a3663c07af1433c58625fce
SHA256 48b55e0e8bcf41ef059486e6e6da06dd54b2abfe78dc032ac155f36147530654
SHA512 8f31d9e9cb616f2cd5ee1a1ab8b08b3340b65b519a7772e35d4bc7bd830ad95852cb3bdbc740f271d77eb41fb735a1674739976a34cfd04a5b5606cd8f87cffd

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtQuick\Controls\Private\qmldir

MD5 20ab7d17be48c20278d09cc12f7626e8
SHA1 74cfb09a1a59ee6d4e603ea1760268d9d99635b7
SHA256 fa434686f6abc72813f1285a2fe12ddcff0f197ed719ef2b1557681df739ffec
SHA512 5af68d6a6843e8e4b4c6d2ca2c30aac571d68c6e82b56bff74dc58c486b9ad27264e2c4cf80766124cbc61af084992e787f6e50f1ca1095054b4ef5395cfdd9f

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtQuick\Controls\qtquickcontrolsplugin.dll

MD5 5c76adf81c0a01905c683aeb14d1a5c3
SHA1 52710a2c8f18338358e99f37e3f78ec983fd9938
SHA256 35c5bec1544e9f6101a9f57b8743e01a8cbfad66b5a674267ebdf555d8bd820b
SHA512 96bd31a6b53b8c24b25a3518c6eb50a5194d6f96f363d2069703f18d37cf49bc7e4494c1e0ecf968f82f4b7152e5ae71c2f96f97c3a10c5c8ae884d783da8829

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtQuick\Controls.2\qmldir

MD5 659ed029afaeabbe4235968ff5292736
SHA1 565ceba5b695eebbf28030965ee5929c2a5a2346
SHA256 7b404175bb8e2b0d3822e75320c8d6d09c61bb53f4513c235a7d04ac7d34fd57
SHA512 41fcb039c054c7decb9fc7ca198f3218dc0965813758b66c5b8b174b732040a33f2d3f54037aec7a9c48af5cd3bcc798ddd41c7458924b8c9bdd49a38846195b

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtQuick\Controls.2\qtquickcontrols2plugin.dll

MD5 270492fa8527840ffba951c0ce830ce6
SHA1 14ac6517b8f1bd250780b26c8162e185500b8814
SHA256 5fe09e6d6b2d5eb0b52780b543acb1c64b2c24c56f9b5db7fd3073bb8b380d35
SHA512 4f4b622a5cdb691ce6d6b43eca05eb90234fa6342b9718c08fe061037309984b30ba49deee893ea36e6dc1611023d610f2f05fb76ccb8efa90cfb2f91d4cbfc8

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtQuick\Controls.2\ApplicationWindow.qml

MD5 ebd6f295fc9c59b7ffcfb503bf5e3fac
SHA1 0ae37c43637d87006e5a2b3b24bfed2c06e37f04
SHA256 2f694fb7d1846e339a905b00dd0faa0282beb7fe50c303fa9073966d092ab674
SHA512 ce260e8ef9e7b8e0b1e4ef9090b598aafdf5ae64668b49162eb96efc7867b693a9cd37c93bcbab03e4521ca332743207507b832877c8e8925b97bb2120f51778

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtQuick\Controls\TabView.qml

MD5 77ce232d46dd56019ce8e38842f767ff
SHA1 8a001141b916ee4bb9fe3fd5146103aed3a930e7
SHA256 eee28c3382452f143314a1f84b9f77e47cb59ef059d97dc048719d249e9e19b0
SHA512 d34275068511c85e92682cd4f9822384e236e49585231c001d518d235a0fa13aaee93218043dc79f7ef6096138d25c4c3de5335916022efabbbc00654bd9b4fc

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtQuick\Controls\Tab.qml

MD5 4e3687873bc34890c47092840716175e
SHA1 5b31a8825f0881534fa371c7bd5fe27a5d2c41cc
SHA256 496f247a3ecc817c6655435aa30f56be219adac9159a245041532e63b0211587
SHA512 96c22cdd8c528d7165d874a3a00b51b116871b457513550e0dbef3677b395fcdd4a2c73f9b08b43e5cb6999230898b5627b7743baa9975068ef0b8ced1a080bb

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtQuick\Controls\Styles\qmldir

MD5 413dcf3e49e01ca487fa65136c6fb0a9
SHA1 51aa584ecabfc23f38b8c8e9c45ed820a7f404b7
SHA256 7bb94bcc9fa7d849c10ed84f476ad7951a61d48fe8f78ed5201956419d38d05c
SHA512 999e3adb3f09cf70140b45dd4b8db2c524974deb5826d309419fc995a3912a7df439fcef121c28d5ba5fa36a1c0d10a3c9289b6b948c7fb8656bbf20e7992519

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtQuick\Controls\Styles\Desktop\TabViewStyle.qml

MD5 f9949a513fc4a55f83ab51eb554b2848
SHA1 518a27704d7b6bd22b3f59ab0c48d59399fcaf53
SHA256 941a4d9a095514b8ad869de0953b12e3eb5146e833f662b1a34330e0824d989f
SHA512 bab8d504509c1837907e6efb6694afe5dbb96cb50298abe3a8e1885623bb3f6fcdd883837a43076e4f6994b8f69799f358c898d8abeeb856768273cfb2d3d5a1

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtQuick\Controls\Styles\Desktop\CalendarStyle.qml

MD5 38f4f223edfb618b4f39e935ef285c9b
SHA1 52b10a3d8f5c74b9f1bc2fa144af8e86c09ef50a
SHA256 21b8de4f92636e6e18b9fd871a81efaf0e6b131f84a7aade97649acf298961b6
SHA512 d5e7c409506df7f7ee82f192e8ec9d8d1b1081c0fbeb95345857527cea25afc95b79c34f36ba189d27667864d053c47524f95b3faba3359cd2dc9060bb6f7e55

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtQuick\Layouts\qmldir

MD5 e9ca7d1d1f439c9be217759f619bf102
SHA1 c8569cb2a6fcb910121afe65cabcea65d28375ff
SHA256 cb585c2fc06edca4b95c9ee04017cd384cae70356e8dd468abd7c4fd1e640b59
SHA512 a4f1d3d8b825f9b7e9bfd0c7fbafd7cdf379c28bfbfd8c78dec27546ec0ccc3871cb9b69daf12d0a262756593b39e28d47344c075aaab68998545638bcf214f8

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtQuick\Controls\Styles\Base\TabViewStyle.qml

MD5 a1f0f20f7c6b3dc5dcca3b0ebfe027e9
SHA1 bbd1250d81a52ef71fac30052d7d7271f2293b12
SHA256 163e4186974d3ddefe68207cff1e9e41f236097d54cf35032f563a5d3e5839cb
SHA512 8c7ee76129d0deab6ae5607ec8affb13ade002eaddab13b8732023a182c780ade024583d08ed0ab9235c7aed2f5f76bc32f4e0ca50ebf814f175934a78be6a9d

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtQuick\Controls\Styles\Base\CalendarStyle.qml

MD5 cac0cd422d744ce12b26509235bdb08d
SHA1 2b1b99322add0a5971dba52fd60e92449909507c
SHA256 ab6eae37d87e896fe48541ce674c098b79886ba613ca9991e83cb9e5f979b04b
SHA512 4fe838072f00f0a9da7255fae4d5c10bcefd6f60c5a46db4e423d1250da86702f0a1cb537a030c321034d1312cc821cab8b9411753bec43e5f93b8e32853b77c

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtQuick\Shapes\qmldir

MD5 e41c8121dcba32e0ac364120d729cda2
SHA1 29f76ed802c3c243d436b5761c09a2c97c1bca70
SHA256 5964af58f2a0371e9c5a4fd87514e006c12a7d97e23e5b8e56a0f86bda00d64c
SHA512 cd8dfb29cfa78f391ddbdc7ce79d59228d92993a6f9d8fbbe22b854ccc1f7162dd99be3e6215062b96bd96cb247cfea74c695dae11c5982b117ba03e59f28807

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtQuick\Layouts\qquicklayoutsplugin.dll

MD5 e0ee83a44c1bc9d4390837120f20acc3
SHA1 e8125eef6f9d61c901dea700cf66d23a19442668
SHA256 722da86a1eb071c025a07aee139fb4c2caa6af51c11bd6599aea763dc24edac4
SHA512 66c41e95dcd484dc022c60af1a338a77aeb0821682598dec9bb7f5be053878ac9a8df9b73886e1c63195391940f6ab2a5922aab118b559209914fb637a4b15dd

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtQuick\Window.2\qmldir

MD5 c434589591a9b33cbe88891afbb7c144
SHA1 42476fb63f3cf463b4bb03b47048aa0918e588b5
SHA256 8d88b81547e1573f8c91df998ea82608e0a79770b014c82f760a67388b41945a
SHA512 5a09830970ea37942166c1e5e5ce0fe452290eb9cd662ffaa9858bdb61806caa03b1016d30c98871a7b6c8fdfa369e29e3940a5f9779d967b98ede5901f4d30f

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtQuick\Window.2\windowplugin.dll

MD5 de952cd0d8fb0c803d3dc4593e20bfee
SHA1 e80a9c9c91f665abe96c1c7a85cfa3deab1586a3
SHA256 6e6cc884b3d16ea57515b8bda135916f026c25588dfaeb4a626508a6befbea3c
SHA512 b137e00d2480c32909a9faba943f584e6aadbd412d8443725a530e1ca56771e721ec91ff479d023a4392c913780db0836b63b88a870863822e0855ce49408315

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtWebEngine\qtwebengineplugin.dll

MD5 0c1fd9ef8fc4644b464e42460848628f
SHA1 b210eec1b7b6dae298d4574efa55f0d9c1c38659
SHA256 6e3fc6f9fab1f71813c53ecc3ae53d3e5c74d61d8967006fb956e8d2b1f49746
SHA512 f264ddea1302a1870d329e6c707d5b09fa86f001b92f9d2a0afcb2a3175e09b20b2e03953c4052eefbf2957bc80d8de52810480da27f5f0a51ba21f1c7ac0a47

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtWebEngine\qmldir

MD5 31ac87aea6a7d5f21f5a0592e180cf2b
SHA1 405dfa9e39932d6931c37c47b3a872cbc4e61c2f
SHA256 033bc267860c17fa876299d07ad30a30cc3646acfed6a2db920fc4f78fc02cb8
SHA512 bf4d4544fde8f382612db9272e0d4f547518c9cbc5357d0add0df62724d289212ac9ddbf602a7071352077c82e9cb91e96f9ea2285f8c3c804400ef05478152f

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtWebEngine\plugins.qmltypes

MD5 06a9780c09cbd22b2bd6e578cb94ab48
SHA1 b3d741161686cc1fc7dc8005693d12f0d58ea9b6
SHA256 8106a3c90d89465130b3c1f0d3401765a655181840499471284bba4a99a6db41
SHA512 ddee70ad2b53de3540b3f0c1f43fdf25493d0b65e491820e4ba3898a2244ffe586eec6ee4a09e17c60909dae2b26dce0b1440ee48fdc2062e04e763231ab3c2a

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtWebChannel\qmldir

MD5 351d33876d4874f0235804a7d6dc8fe9
SHA1 50b317c4891494abbaceada66445d51f8b43df93
SHA256 219dd5a60fd792d278187a1912af3206fdb7ec8f492307ae713b1a5af172eae8
SHA512 bd26d280e986d29b79d1009a1f1fb22d5129e1cc205b456a1b89f32180317721796777014e2a0673ca8e09db31960fb7332d87ac98e6792af44d98e70814cd40

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtWebChannel\plugins.qmltypes

MD5 29e9f02d5d44cf250acea7f68e7e5629
SHA1 42cd99c1f302e0c1af08f474b9aea77515bc4505
SHA256 3a61bbd2176faba0f13b95e6e4d7e3dab0e7b33c99ef8e830a04582d137deec6
SHA512 551bc087eeb33fbeea7cc11ebb187bd6a2c9f91ec25cf6ba91521cff9fe23a4cb1407b377f30a16747a59a92b851cb8a6e8cb4b0696a1a78a869dd391b9b34f5

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtWebChannel\declarative_webchannel.dll

MD5 3a2eb620a555a3a86597d1a9dff2283b
SHA1 f5b251c631e44e6b7815e51d8967f12d101bde5f
SHA256 31b30269b9f5803984dadd5ad47b68df06f73b3690236a221489f0db37615bac
SHA512 b027c2da62e1dc13e0b958e4549c9d7715c51ec3d301113a0c337923c3a2717b0e968ae7bae1fae8d5b327476939bc23de72a22d58ed18780d2eda5f607a8b27

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtQuick.2\qtquick2plugin.dll

MD5 85c26078cbddfe04c7f243d21d5bd025
SHA1 956720948b9be171c421e7aa5ac946db4fbb4356
SHA256 5feb9d75007d3e58c70994a6d1dccf7015bcd33fdd955238fe244696dbf39eed
SHA512 31f61d7603992ff9d607bef542e09b0abe1b06a353e268eb4995b8453c16994193c5f4cf50a5c5b02607e29aea62d40c8a3f99a608696bbe9b83d66d2b4b1111

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtQuick.2\qmldir

MD5 d2cf96786ce59e93a2feb2178603a27f
SHA1 7478dfedcd7ac1795bf4ff2732ef716ec82b061a
SHA256 b6f63056ade6925aa070d3b2bd4133d26e80df4ea2719e81ad90027e19661ae8
SHA512 4fcde288c6a690728f919b70308b3bb2ead62c40223bea14e52ec5f3ef74f5467b1930f419df77d78b8d50e84ec81a1fe78cc9a3b42c4a6d261ba77c654a1714

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtQuick\Shapes\qmlshapesplugin.dll

MD5 e7abe27592a02aa87a07942a2a0e8731
SHA1 60bacaef9b8833c66d60e13f248827b5f12948b0
SHA256 0c04683cb6d96a262fa631e12e537421516856c07e0a318778d843aae1c2c032
SHA512 6debcdd99c08226502decfa4ddcaaa4223a973f7c7329f4a0f23a82a28f96f5ab090189f4f98b2f89a2d4df5669608b2d6b9989c6c795ffacf04d6200d6a6045

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtQuick\Templates.2\qtquicktemplates2plugin.dll

MD5 7c4e442b016a4e07d46a54d39ed32f01
SHA1 6e4a85ae805e14dc9017afebd3d4f542739a3d92
SHA256 e22b48af2c50130d4e195d98a32e08696f9ad6d7b62a17ec4812375f3ca4a418
SHA512 2f212060361f5818f131f30a359b7c1c894411a37dc50728ec487d760250c15fc5b3c194616406fcdd75446a3aaaa3aab6620628a0a701784e2c9d23ef1c1164

C:\Users\Admin\AppData\Local\Temp\7zSCB159EAA\QtQuick\Templates.2\qmldir

MD5 1b909b940f9e8ff6f44d559d99ba98eb
SHA1 b84e860f41161f5b218df3fda1198d7a171d53f1
SHA256 b24f2c4aff9a7f102f2a25bcf552d91f637160e55e053583298b0a16c93aef23
SHA512 e9998a29acd59336a6ff7c56f09fa128b982621a4965388f1a25b03682114b4725dffbe292a0c288d053f20d8b3b1d09216b7ca41f567a28495f9c03682a4d13

C:\Program Files\BlueStacks_nxt\Assets\installer_bg.png

MD5 08d091faf58df0ea8218d7e08140bbeb
SHA1 38ebf2763bd2082635a5971c4302021ecaddc0d1
SHA256 7e5f6998d34d56aeca87f676c12a42c6c4362ae16a753dc567aae00e253b0817
SHA512 5cfede2ea2ade7bbc4b63475af5eb52f78af567fa7096a2ead396056271b8745df4dc6e11e4328151ce59ab74c6c48fd49cd13e30f7f4b86c566757e310fd5e8

C:\ProgramData\BlueStacks_nxt\Client\Assets\menu_help.png

MD5 2e82bd45c7a8b2e216c27a24d42f12a8
SHA1 8ff552358b2d77090a54dad0c12c2757af2ec433
SHA256 e55ef002466578307998045edd5e10577161efd1cf8f1a71768a8046f4c2ee0d
SHA512 d8f44a110bc31d5834b337553baa599c9a127d7335aeddd7e139ba5c7851db006d36ef74d841f10f7fe69e25edffd89a6faea9d3c72eba27bbbade843af440f7

C:\ProgramData\BlueStacks_nxt\Client\Assets\minimize_progress.png

MD5 90d5c0e2977d65b21b430f486114521e
SHA1 cfb48cef2634d4be33210ba54e5b7c5c197530e4
SHA256 aa538477ded33f33e33cb9a21241dacaceaa0c3e5ad8eb1b6830a448262bc998
SHA512 9a3f6690a638a69232335b746a4512ed1c623baa984d87cf4127663c4f85e818a4220564c63b764570e2ade8302989482580af7d9032052335d44b9c98d2d37b

C:\ProgramData\BlueStacks_nxt\Engine\Manager\BstkGlobal.xml.in

MD5 8c11ed64e4cb4e992c891a1685f5e0bd
SHA1 1b125f8aa3f77ab5e23bcf18ff7fd9efa5232bc5
SHA256 4c64d4ad8897d3198cc69c27e54c9ad24aafd70ee2818a4eb3a970f24b7cd535
SHA512 c2eee227704f0940bd46db419e42f15ce0dff3b006753c94005ac4c063fe2a2f0f24833a6674e9bbe570adcb425277a78bbbf398d600017e05357f33661d7c7d

C:\Users\Admin\AppData\Local\BlueStacks X\Grm\GrmConfig.json

MD5 7f31b3c4133374ff5673a9b354a979d4
SHA1 ac378d4a89294a31f0bc0dfc210f6640d440d9fa
SHA256 7b9b3f18d41660f2a29cfe8f14bb08f66a7d5dbee74fcc4e359f5406c1b0768a
SHA512 2d2d008ca9280a4a99bc91161877ca037161df8a950b7af443c6d8b7af49e23b4b72ce3d2e8a9c26677b32a35cf4f2fe10c55b00fe22517e0b98316fb06c037d

memory/8732-27571-0x0000024FA5320000-0x0000024FA5330000-memory.dmp

memory/8732-27587-0x0000024FA5420000-0x0000024FA5430000-memory.dmp

memory/8732-27606-0x0000024FA28E0000-0x0000024FA28E2000-memory.dmp

memory/11392-27616-0x0000021BEB700000-0x0000021BEB800000-memory.dmp

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cache\Y70WON39\fb66abb1efeba1f10de790e34a3c0dba42d11dc6[1].png

MD5 5e2fd00ef2d461eec5def4d6f9c6a885
SHA1 fb66abb1efeba1f10de790e34a3c0dba42d11dc6
SHA256 4a61982200d88980e7e6ec657e96bc0a29c77becf512d519be31f27a7e92f7a1
SHA512 c06c0e029c6a359121f4a655bf449e134015c856425c5ff096dcab3a86a5515e4a10aedcdb898ec6537008978842427856b83ada47a225c196dbd4662f6e1b61

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\Temp\~DF7084461B04182FC5.TMP

MD5 5f150f642b4968103a2fe7a805605de8
SHA1 390654bdd744d11ac48a9c1e8ce3ca4a1ad3d0ea
SHA256 6eaa583812730bc4010cfbfe647c395418eec3bf5d175bbb66cb97b822bd69b0
SHA512 62d0508fe0fa3fe1d3f474487e9fc4ca02b990abb6d7a1e2c74cacd0d61060cb3f8d76a114a128cc1e4a7e8910ab2c409edc8e1052daec44e3b85f093e2d2a4e

C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\PD.zip

MD5 53eec3ca38af3bb1c8f519d6addb980e
SHA1 4d2793c257a12a4bfb14f36bcb07bfba5531e99e
SHA256 c650ac75d89750e7f37e8b6d253a497e994e136ca80ba13b6d92e7ce49f0c23e
SHA512 00a03a265576b81cc1f33bf8e8bbb3b2369320775e3a9bd793f3549f00ce138b9554e967d416665aaec4ad43194f4e2104adc1f21980b54f0684fe46c098dcec

C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\PF.zip

MD5 39bc81c1d30babe4e2facddeb248d439
SHA1 337b9d08d8a6a18d2146f11942e0831eeddb219c
SHA256 e384416a2a13726623ab15166735482c38d02c613ab1e569679e8a458b1a90d5
SHA512 607c9d14c9ad939a716939a560e64bdac4347223fd101254f6e6b2f080ccb3f24ed5412952e1c9b7baf637d0069adb086f71ce6654f85cf698271c99be16f2ec

C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\BlueStacksInstaller.exe

MD5 905d9a094849eaa8b9c97dd81be34bdd
SHA1 38dac4ee6a21eb70e23d84aef7119c5834192072
SHA256 a2eeb5c3d0c8709162daad2581a39264300e19f32c319d4e42e896e55ad86b2a
SHA512 2c6fce60f6c423a4f40a7679ce7d0adb72ffa7bdcd7d9c20c2aae14065c067bc0ec9a55859457119202a7277226ecb4b72eebde0e7c865778f7941faa40d782e

C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\CPUID.dll

MD5 f57ff1a4b3cff90aea1a13efe71d79c5
SHA1 ac478750fb59bb3f0a88cabd0e56550e8a085357
SHA256 e7147c3e38950fe7e7ed2d37e5eacd6dd90046c9553fa81e2f2abe604635f79b
SHA512 e978d8e29e9788647b577d26506c28705cd7de0226b0e0742905a4d71d871b44c4629f821a3ba06358609186f7915277ec3cc6b5341f8e584ea01424823960a2

C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\vcredist_msvc2019_x64.exe

MD5 be433764fa9bbe0f2f9c654f6512c9e0
SHA1 b87c38d093872d7be7e191f01107b39c87888a5a
SHA256 40ea2955391c9eae3e35619c4c24b5aaf3d17aeaa6d09424ee9672aa9372aeed
SHA512 8a050ebd392654ce5981af3d0bf99107bfa576529bce8325a7ccc46f92917515744026a2d0ea49afb72bbc4e4278638a0677c6596ad96b7019e47c250e438191

C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\Dependencies.7z

MD5 3f849db312b0af458c8a9b6a256f5358
SHA1 12918e0ea8df5460baa5ca2c801e97635f14f023
SHA256 9b005b39ea526d7e706014c3cd0f77a79901975e5d5ea4efa67f30f133fdb8f7
SHA512 cb31a9b8b650640a50c47a70bc48cc6fe2373ae1924a669de393ff70f786b71d61b4c1250bc5869a505cb2f3c5b128562eb4a39d0ed4ac4fd6592810c0059896

C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\msvcp140.dll

MD5 cd0c37f1875b704f8eb08e397381ac16
SHA1 249d33c43e105a1c36ec6a24e5ef8dbc5f56b31b
SHA256 d86ac158123a245b927592c80cc020fea29c8c4addc144466c4625a00ca9c77a
SHA512 d60c56716399b417e1d9d7d739af13674c8572974f220a44e5e4e9ab0b0a23b8937bd0929eee9f03f20b7f74db008f70f9559a7eb66948b3afab5b96bdd1a6d5

C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\msvcp140_1.dll

MD5 8ad9c7cffbb2413f4d5ff9f3aaa1a69b
SHA1 2b5116e49ac5913ef8a512a7299e9a459dab4778
SHA256 18aef42187072c35b537be80e3b2da7ce4919b2c9574add19409d98e3026d916
SHA512 d489b82ce896a06cd37905bc5b2fe9620f4e7feb2a9b77fc93f94e0270b67e7a2f3879afba6b546ad44f2ee96f050e83bfc93830010a707126667857be79028a

C:\Users\Admin\AppData\Local\Temp\7zS8B2B4ADC\msvcp140_2.dll

MD5 84269806dce633e56e492ef060fa8f88
SHA1 a1e71cb750d25e7a63e0c9d0b01063df421f1938
SHA256 5fca695ed2cefec010d546310699226eef4b305df38cbe3dea2fdf9494abc163
SHA512 b25d25a35e6e431bacaf4d5fea0e40f3fe49cca14895c64ddbd78c212a2ef0b09b56616154a3d26813e9faaf3db1f6bb24a300b5f39b8ce286a41a12f6920ef1

C:\Program Files\BlueStacks_nxt\AdbWinApi.dll

MD5 eee7b2e55e74d81b20b15f88dd68bc21
SHA1 b58e9f94e23b904c38f7c2dc13e75a731e7e9b84
SHA256 35153b69f5769f5bbdbe3346a8ed28257d946395cc6245a61e6521b95bee3572
SHA512 7e027d356d49cf9334299b4f4d822f0ca036de263a7586b723ba3c7b852173d91f3002e51929ccee74d0e62b524fdf6e8e5ad56ce431e69f5425e958596bcbf6

C:\Program Files\BlueStacks_nxt\Assets\installer_bg_blurred.jpg

MD5 8cba5bc22364d1f8618ab3c05a271e83
SHA1 aefa4ee45fe0ff7c2472e5d2eeddb4032ee8a17f
SHA256 3c246e590a08d5853fa82c96423f679b17d0a6758c83a5cdb08e32db400fcb30
SHA512 c1d553b1d2d6468cb995c3539a6481917a34d51f2aa9a32501f2355827f678e94322bea4e2caddb19e3a3c37cd21ea62352ac0378e3040ba640c7185b3b0337c

C:\Program Files\BlueStacks_nxt\Assets\installer_bg_blurred.png

MD5 d82c6055a02e78fa13d4982e0f598e44
SHA1 06f62a453dd3243376c49eb9e1a60366457051cd
SHA256 f71e583152244cce5af3f9c211a9b98f2f7e5a7ed0561cca30a8e4924c3beace
SHA512 787a64c68555d274498a461009c6e2c504902a91a81f72d866abe79385b61f8ae6d07c85f6356c5e341ba0902a05683d1f8974690744cac6d43bc0b025af20e6

C:\Program Files\BlueStacks_nxt\BlueStacksHelper.exe

MD5 0595a2b217117653ac712f102a282089
SHA1 f96f8fdcff5ca2c3211247e52b6b5cce0e99dbb5
SHA256 871aabaebef57e13b1785f947c62f2280cfce49e9813b6c5bf542c7890598205
SHA512 619d09d2ab374687edb3ec7ae0b22b89bdcb548891e4407ab75138f6f8c32004b6cb41a6f16bbd8bfc15d9084323b540c8ca26f3dbaff373e43a7c9898d10652

C:\Program Files\BlueStacks_nxt\BlueStacksUninstaller.exe

MD5 710dcc90560e9d7bd8384ca11d39c21a
SHA1 295c21ffe9b23fc688c85abd48ddeecd2927be11
SHA256 06085bc60051700c9aa8199c142f5e173c436503207c77b22def56d571869845
SHA512 ef2585c48e9f26d7d7f3f178a9f49e457a438321f593894663fea50d54075d6ac97949cdb84d19b207830210fdfd3186de9d653152e8c7196f84a717b76d84fc

C:\Program Files\BlueStacks_nxt\boost_json-vc142-mt-x64-1_76.dll

MD5 50531e25625faea80f4124d0fb744594
SHA1 adad2b2ea075c092afb1b1d0ab983963342bd967
SHA256 5ac5bd1d605768b49f431db69d0cf480dac7170e28bcda8a8b500d531b649234
SHA512 35ac203b7c01f3e95b59c118cdf187921bb7fa28b295565e1ac1b1191ce2081f247c7c58e4845b94b17767037a2d73d967e2774ae31f89b58fc52918a7234ff0

C:\Program Files\BlueStacks_nxt\brotlicommon.dll

MD5 2c9fcf0dc12b586764b9a295e80f0c71
SHA1 9245402241f750238e9b80e73b939164da732c9c
SHA256 9295a64d988cbf86bed5372e86454def851ae2cb0d5bd0270ab2300d49f962f0
SHA512 eb5860f6407f0927777906adea5cbe42735d15384ab31428cfcffc81f1ff04a5858803683c44f727d47a0b62d50bd690937dff982510351c156c201d9fde4f19

C:\Program Files\BlueStacks_nxt\brotlidec.dll

MD5 4d167d0659825bef9f059a8b12b4045f
SHA1 b31f67730ed23348d3a9ec92fa8ae86b75db0492
SHA256 05fc6045464fa5471eaabb93d57b3c8fa0f231021f0080c02887fb5dc80cc3b2
SHA512 352b875c56c5ab6b6e89af69c86d1bf58bbad7d1f2d2cfeed39dadf8f01befc3a0421d670f5bcb7b49653cbf4caba46d54ec9d282b59ba67ab3376e4c8469581

C:\Program Files\BlueStacks_nxt\BstkC.dll

MD5 6bc6f9c07c5ba1d7a703dc13c955ba08
SHA1 8027e6fe41ee449540e8afb859f42a6c9cf0c55a
SHA256 9edeaa942e67e7b3d53c9172738e6493da181420796dbc617adbfd6fe2957efe
SHA512 73740fa2a742a64c1020a7ab964e31437613cb23edd855a3460c42e4337e310d2ce4e83fd0ef0e5c8b94ce302087fc4c86352542006da8037036a3a41187915f

C:\Program Files\BlueStacks_nxt\BstkDD.dll

MD5 df1eba33294e8e6d3cc7db1c4a2c59a5
SHA1 7558f952cbe772f2d4b88209b63e7c2f83c07072
SHA256 2175a2124d4b6c0c4d7bf4240469e0126111d6201115b6275cd09402d28575a9
SHA512 6e274ad99f5016cd6f092e59dc1c345223e5490c066e7256c141be015af655c8bfc834017539fcafd9e519e6de5f45ee7f9835b346df302586bf6bb78c9cb956

C:\Program Files\BlueStacks_nxt\BstkDDR0.r0

MD5 2fa3ff3a99c3b45ec471ad34ca0d46fd
SHA1 46cd20dfd70e5edf9c77db1e89f0b2d477e90516
SHA256 0c860aee3bdf0027f182002574cef99cd2fb6b23c41e4dd48b42334ba18dd65c
SHA512 ba5de1102227bec6bdfa2d3012cf55fbb71d4553d72821646da3ee3da2afcdb9ceade0b74477e1e546b9bc4d19a87cea6011db55ede1ee5b49741a208571a311

C:\Program Files\BlueStacks_nxt\BstkDDU.dll

MD5 0809bfff93473ee296f3a1ad29d8e400
SHA1 7d32823aeb32afaeb963f3a24b1795e9030a15b8
SHA256 2b16dde325c3611af41f13d67335fde9b78e77650dd5c35947bb40c86eafed98
SHA512 2dcb2fba9216c00a16c08f3b8cbe53d4d63f001c388320bfb2edb307b2a99b6a5aa18f066c45317bd1d826f253dd84ef8ae217a43c0a23277e2e4d1a26061226

C:\Program Files\BlueStacks_nxt\BstkDD2.dll

MD5 9d88a897c9cb9e91d04a999c446212ed
SHA1 40fbbcf1433f40cc210db65282a482625fc3b92e
SHA256 3ce82b081f38654b4b2ca0a0336ebd0af45de9117320a9984f0977e737f6f022
SHA512 1aedfc35a8498e76c715e3e3e581bab3a4b20be84f0810197ba52cff7c1d8b656b2dc0c7a268630d4c74844a64139b8b6ce9cb1246f744ad1b4e5280610f7232

C:\Program Files\BlueStacks_nxt\BstkDrv_nxt.sys

MD5 cd5aafc31ae73575e8ae91c88fbc07c4
SHA1 54c27c10ddb9c6673b1385d9fbad5fe93ecd640f
SHA256 5dbada964863a724ab1ba938116328191981a460246bf3b2012592e527a7ad52
SHA512 7859bf878ac8084536e8ac295ea838d1c09284c32fbd365d257783dd095cba0363f002c18c4edd7c9775471368f2ca8d33ed9a149b31391bdee2b75131889671

C:\Program Files\BlueStacks_nxt\BstkProxyStub.dll

MD5 174d25be035e476488ecf7e8dbef9f07
SHA1 5646a4648bed5885d0d8021c796e1a8d6ea9e056
SHA256 904d10408b7fcecdbf90dab3876ae1c0a8032e0f48e10a5fdcc92ea727077bd9
SHA512 fd6b179c0787ec47a90691b2ba108d7cf9c34e670970748a00e3c6cc58ba9a87f7f0df6561c83d419809e89a38e186123225e61c65eefb9d051d0edfa08cdbd7

C:\Program Files\BlueStacks_nxt\BstkRT.dll

MD5 9221dcaeb1e7ec6417019f3863828b3c
SHA1 c340c9438a489887ee1bb2da89905429061c4800
SHA256 f79bfa211d7d23561a8138ce436f7830637fe6a3ad2092501cd9f8d23834323d
SHA512 9d8b757e22bfd5e847d3aeba15af97e122d521b7194d5131d0c9dce950d016c0a1d9610fc01254ffe5f4cec79590e5276e26e627801ac2e7a1b8674a392ec860

C:\Program Files\BlueStacks_nxt\BstkSharedFolders.dll

MD5 c77952620f6a3bc5027230e3924587c9
SHA1 8b1d65f619f75cc4b36e1f4cea60ab4a156eeb45
SHA256 e2b1ba98c28536dec652d8f21d019008529c20a5d74e1a4bdcac9e49a91a5ae7
SHA512 2dafe3c8f3855fae093f9f5cbfc3c8db67561766bee5a2857432e85e3836e8a938e9a58be20fed57a18057cf8ab37d586a891e085e05d97354f572b22fca695c

C:\Program Files\BlueStacks_nxt\BstkSVC.exe

MD5 c47cac5ca8efe82b152980c84a6c2ebf
SHA1 f43901c847c6f0dfdcd6af1e72426ce10656c4c2
SHA256 8c6d808c43776a81e7eedddb2387a8ae82175bbbd9d22bd3f152d13debace683
SHA512 93cde3c24b81e078ef0b66d7849b4c84d4a4157c3270bb351ef0998ef014482272cc007dd2ecd72b26244ecaa1baa87a0f8ac0ffbbc7f68cd438ca4a36f220f9

C:\Program Files\BlueStacks_nxt\BstkVMM.dll

MD5 126ba6a5f2310354dc8ce3461fbb3196
SHA1 17a26db1b66d6d6ec1274c290d6dc0b210f8d196
SHA256 21b1d7bf2dd9152f9c59e60d42ae834f66e1c794c06ea3ef62548ea2bef5f2a4
SHA512 e05d3decea91e2363b8b4376071d8fb7893ed3b1e662a9da3711f3eb76a740cd9cf00b1df9ccd0989e402629365f76740b140e2ee5c8336b361403ce7a2096ac

C:\Program Files\BlueStacks_nxt\BstkVMMgr.exe

MD5 8a24a2598d1b2dbc71561a0cb70dd2fd
SHA1 8c8c4299a7bf6a6f212ed1166bcb72248f475210
SHA256 dc72e5b3d339e212b1dea2eccdc28171089b96624c574540ebc8fbbe99957d30
SHA512 cf495101d3031d5f48f89ce315d0e63c1aa41db9a3c52cee7c362e6e7827f760d2fac24b5ca24ec01be29002e65e9186c1f721bb0583e093bdc8c9c7e31936fb

C:\Program Files\BlueStacks_nxt\BstkVMMR0_nxt.r0

MD5 c2cf010920f6e7fa76d99d29ca1d0b9c
SHA1 fc3bdf9ed18d3ea11c29bea3982bd9e8242517d0
SHA256 17a638f00a2540aa3d05c2e83917e18ebbfe2a7158cc3b57b4ed90f34577c7a8
SHA512 6601b0350b6ec3940f83b328b173179ed02e29ea8a06ca1a8578f433f23116340645141edbc9ae91098fd856f38330b8db5921620d4013101e06092197936870

C:\Program Files\BlueStacks_nxt\D3DCompiler_43.dll

MD5 848c68fe61434da40f910289244852e1
SHA1 ec0d9586c6b8e9b3696ad23415ccd8f165d37176
SHA256 64b35bff050faa8640c424c930a8c6cd0256e138199a732414c788472583f32c
SHA512 b9beb03f5bcc3fbc064bdcd32e304fe0e203867a9a8f9350d5e14a0e0de5e9d99f6d0dcab9d7f13057c63a39a8c83491498a725cd4e58858389faa6eef61f21b

C:\Program Files\BlueStacks_nxt\discord_game_sdk.dll

MD5 f09656215e1ecb1f80f3e8241e7a99bf
SHA1 afd869d912bb6004b7b9d6e4771ff2800ad72eef
SHA256 eb1f615ec76c509db263a51fe8ef72667589cf362a2676b692c7e53ad71abb93
SHA512 a0717329b5647470ad354b1f73a56da0e6515eb6ed03ebfc13bc97fa99d83e25c126139235fcad9342150b600f6b9915b2c876c219168ef08709af75d49b24f6

C:\Program Files\BlueStacks_nxt\EULA.rtf

MD5 76fd1d75ca19601ac6138e1ce7e00008
SHA1 ec20f1186884ee2aec45afe827541cba0d875c8b
SHA256 2a9b1cec88d294e0c2f137bccec770ac316694883afb87289beb27e80bb20512
SHA512 16c578959bde5ab081af2bfd9a6bb5666bdf71c101add791cd0ac25571732707999fdb16e7f0a6e59b3c3d9e9ddb4f3481249ac7ab3c504a0e7ac6f8f734b416

C:\Program Files\BlueStacks_nxt\ffmpeg.exe

MD5 cd3af7d146a6be7c39dc616757597bcb
SHA1 7dd134335757216eaf1a1a778e2ee1d1a562341e
SHA256 a2695cff7bbd4bde05050ab055e7eece77c11e4c57b8b2877b3acff52d6ef734
SHA512 2ac3de4d758ed57fb1d26c69b5945e97a71af15626eb6d4bfb04d40c11091467a71ac784dd032984d7689262485a2535a02beab4051cb3034251bfffa9e6a0f9

C:\Program Files\BlueStacks_nxt\ffmpeg_command_template.txt

MD5 6495962889020e136354db390ed08419
SHA1 d846255522c0feb8f436c9f35f197db3b0dd13c1
SHA256 3f98e56ea9eefe51017759e011aac7bba77010a0c80ec321d78f343b66e75ea0
SHA512 783be02b15bc44a61b6f1e9ffa13997cd09a4fbf86d4273c31a97eee20c74d6048584bf71b5d00793a9019605e47ebafc23a14e0740b3cf71ab07556e68c3536

C:\Program Files\BlueStacks_nxt\HD-Adb.exe

MD5 56b69acd3c7152de6eaaed8f8454ba8c
SHA1 fbf090303de7a4b103ce4d911779337d5d1850ec
SHA256 6bc946d3912a48051cccbe1a64de726aff40f83c7a8bcb20c8785e55ed5ff919
SHA512 93f3aea05714b342fcc0e16a00da6e39bf77d17b41141916e937837354e778876825856aa4d03813fd7bda6904693b0134009d73fedb6d128d7ed16b68cad7bc

C:\Program Files\BlueStacks_nxt\HD-Apn.dll

MD5 f76cff3d88d45239a918c7729aff1890
SHA1 0915188b340bed02e53c5e608d4e274de32c97f6
SHA256 02b5104d720df95e1d84fb402a941defed376927d7ff744f98d82b8f96385e54
SHA512 36da0277af71d65b805e01b41f372d3df06434c2d1b657181577cd2e11ea4fbb963449791af5e8648f824df4f7ca00d2f5e9eae23652210c7ecf2ee17241708a

C:\Program Files\BlueStacks_nxt\HD-Astcdecoder_AVX1.dll

MD5 1d8ba4ff785b2f45b3218f8e08c4d2d3
SHA1 4d4c46b436b6a0ba78a2f9383cadb5e8b999bc31
SHA256 e687756f3d577aacafb61407805284a1f77120a8abfee4b5c06b395e99ecb898
SHA512 4dbd939ead34913284657b0c5f7bd35c8ac8300e938ad182ecc2efaafa64f006c2daaa878bdee024c7479a0e49d044df62fd67e80a4a18d10286908b32a6df07

C:\Program Files\BlueStacks_nxt\HD-Astcdecoder_SSE42.dll

MD5 e6c7b28ffcba38ed1b93b6db4490c19c
SHA1 bc8183cbcb6bb51fc9a16feccfb5e14089052c26
SHA256 f97739347b33a7beceb5bd9a7d4b458710642828572871dfe99823c3c0dd0428
SHA512 20908e47fad4138272d7f7f8837b86e28cc1deb86796fec6e48d017e7dc7a2b4c28ee98de7ca2b2e9e78655a23f45a9f5267554eda4bf647142e284fc7305966

C:\Program Files\BlueStacks_nxt\HD-Astcdecoder_SSE20.dll

MD5 3b9c0e2f5e3cfa9514facbe0b93c34a5
SHA1 cb95d90e244d9280bb48021ddf0f56837c60cdcc
SHA256 33ae74e4bb429944cb5340aea520b7892b00c71022fb747470d39490440b0762
SHA512 b0bafcfb6c85903f2701aa1a13b169509a3ee28e3a3a061c8a014554248d9ebc3ff1dcc2e8d054a3740dbcadc3c474b813aaf7343b4d49594c79eda5bb491ef7

C:\Program Files\BlueStacks_nxt\HD-ComRegistrar.exe

MD5 90fb870131805907613ca2ca1ebc0325
SHA1 0e8cc9a54dacdef9078484ad3d0c8ecc5e332d71
SHA256 4b1b57ce5f5514566c99b23c969e80dec488de6e9a1d0b8d0a1966bd9cba01c5
SHA512 fc069a3b7c3237d23170508eead90fec4ab71c2c0f38cbe6c1dc5df06a63920fdf8817ca5ca46ac574d1fc16cf74cb6316bbac5efaba8a7be33de9ed70c19c76

C:\Program Files\BlueStacks_nxt\HD-DataManager.exe

MD5 67216b6590d9ec4cb4e0f38806818d72
SHA1 9ed3215c0b711c826d4c130524bc58926d495a05
SHA256 24c9f37b46d637804163f14510307422f402d56a7723854645257e355b93a066
SHA512 6decb608dae6c21f5b467e0e19018941f97738ade2ad868eef2c9838ca5d3dde37d276872917c7111c8588b77e35f3d795653a2da47ae8e3762ee66eee87e964

C:\Program Files\BlueStacks_nxt\HD-DiskCompaction.exe

MD5 5d66f7940a8644c16ebfe0cb157f7cd5
SHA1 f9ed19928401477d4a03b6726208176254cb364e
SHA256 769b4d6095113a89f328d7567baf7281268fcb3e9cfe584ce063dabb7b154a2a
SHA512 fbd180124387339541a34e0f88d7cc99f6e5c54ca40e3e73194c07a3648372c8a1260ed92c5b902cc61edc2be0736c90b241595a17014a61d6eab0312b32c981

C:\Program Files\BlueStacks_nxt\HD-DiskFormatCheck.exe

MD5 c18a8f4a7fe201e5913331dc1920c3df
SHA1 f62ada72619998fd1fe07fafac514ccdf530e615
SHA256 d79fd6fafb1d62f332b681871d5344291f50339fc58084ea1c088a93a00e55e0
SHA512 7c940b678c112e784ce4c2612609902223b71ad30448d0f2912f748f90b5d7e95a104836879a8b07abd0537d60838f073e1e38ef697c39b8540a6aeb0517523b

C:\Program Files\BlueStacks_nxt\HD-EnableHyperV.exe

MD5 bd1aae4e50dd9fc52dcfa64aa9500612
SHA1 02bac4f721fc5412923105edae9d9439401e649a
SHA256 3a25dfa6dbcb162b1b1d0ce62cc6bd483f5d1513b572ad0411c4f805a4af4bf7
SHA512 d54ec347c7b4a4107c326bad7a8ae06789d48afcfda04a2ea82a26a4ffc604a800274a6eaec2c6e559082ea2ea9258a056a46ba7045b5f2eb6e2cf8223447b86

C:\Program Files\BlueStacks_nxt\HD-LogCollector.exe

MD5 f8c46ea539a8fbdd1a20b6fd234686b2
SHA1 68aa8b80a27322060cf5be408691c016cba66af9
SHA256 cb04a0344118e7764da3bd83946b23099d0482eebdffb459758730ad8b7819a6
SHA512 1c033d28405316b676e1f89fbcc6879c79f9cb6ef023d48a7cf827baebdae570d06440b96110981d4bd0fdcf17001b02fe934d93677f5844b544f9399ed915ac

C:\Program Files\BlueStacks_nxt\HD-LogCollector.exe.config

MD5 ed64bb001fac9954376d3f3626a02aa7
SHA1 5a1b3d3a0f54a7faa6e37d1071214bd293f47a84
SHA256 1e8daa96aef1fd4b5ac296019066feb5ee86ce17fab625edb16cafe5ae89feab
SHA512 2fa5169a4cea7a0632895c5ebd42a4e027ca6d6b0bbf3302a898623178468b7b65cc2bac25fd9b03ac9662567bc78aeb6647052f0b0f810044372258ee0475ba

C:\Program Files\BlueStacks_nxt\HD-Hvutl.exe

MD5 01453f99476f29a1fa7c6c2f181850f9
SHA1 b3e0890beaa0990d85442f851c7475dac92ece0b
SHA256 33d40f711823eaf7e13feb67f369953f10755c8e53c89f0280d604acbb027cca
SHA512 425ceb05a770b4082b52b416259a05efd4fc3306d3a8c5f6a06a58555f793b762a95bcb10bf1a438a722a464508cc32cef032755e23e025c3959ab4e61db5309

C:\Program Files\BlueStacks_nxt\HD-MultiInstanceManager.exe

MD5 1d3c249ed067cc9ea3eccee1022b4d7e
SHA1 6228d2f2d5237f0b0bac32bb18f9ab4cc8649dcc
SHA256 5685d29934287fb2772d033d2fe227070dfd1b6b11c26068423f9a2036d2e69c
SHA512 ef4dd63e205a261df12ac29e465018138c6aba2f1358a9209fd9079c80ba495fe1ddcbe67727edcce61735af9c05be5b2e81b3aa25dc2d3c2d82780dec363ee1

C:\Program Files\BlueStacks_nxt\HD-Player.exe

MD5 51a880a5ec9e05aa3f05db03dfb99f63
SHA1 2684d6730ce0a1434fb8456b974e5bad421548b0
SHA256 a40a0ff5038bcfe49f2c02dea8ed1a9bebc18da7d1b8dabf5d00d21c5ca15de9
SHA512 ac26df98eab1bc65dd218b8b8895e9171f01a5d3c0374a91f412d0b33dd921e6c7c50cb2012e61d38dd6f9dbc86106df151dbaf9eba45a8d2f550126e8fbbd17

C:\Program Files\BlueStacks_nxt\HD-WerHandler.dll

MD5 f9b18e2e23f11ed6c5cdb50e016e66aa
SHA1 f0a7ed23109a90058ab50dd9b281ef93910af0f9
SHA256 43e5ad8409fff012cb2cf31f453d4f7ec93a9741da72853100146325421de992
SHA512 c0e2cd340635fec4a654259097a4d56a9dc3ec24add59f7d1c7e6d74a9d8589b1ce812d2d801601aa6121405798aacdf1a47453b1b8f4935b634e7054bb0c3ee

C:\Program Files\BlueStacks_nxt\HD-WerHandler2.dll

MD5 3dc5b6637b64a59470cb38fbdd32c72a
SHA1 836e2f94e62574f4652b8b69f91d62e19eec9ade
SHA256 d410a8082ea3e2981e231ab0acaa17c02cfb275d57c5921b7675f33bc0d18c94
SHA512 4e744d55c191dd6e98b0db3208131cd2be98cc5e4a16d1df472704a569f0ab55678407c908072fe3b882dc724c3308c7262630f53106f225e4c5dcea52850735

C:\Program Files\BlueStacks_nxt\HD-Vdes-Service.dll

MD5 c3b676e1c8eb23f4ed3653fc9ffebdda
SHA1 920af53443cc725dc78220e1f195679d032e555f
SHA256 4277b798e702fe1b0bcffcda12d548dd78f7ea5e88cc0ddc6bb8ac1708b2bef7
SHA512 8b44bb6de6514f8c3f7bf4281356a344dda64dd2e8ffeb37c6fe1cf81747bb3abdbe1fc0d67b614f8d5d07e71045952ca8920891c4820531d581d9a0494caa07

C:\Program Files\BlueStacks_nxt\libcrypto-1_1-x64.dll

MD5 d909c131d4e83f18d4a44eba50574ce5
SHA1 45136f0c16845fc89b65b8c536f7a8cb4329d407
SHA256 4397f908944aa2df8e31cbcac6e750b2a235fedbbcb925cafea5c01d9beb29d3
SHA512 a7409380c6375956105dcb9be40070f0277b1d897c58500b88d7162829a6ff322534888f5609ebb170d0ed22f880b73473734b52e5316511eacf3791d5127b68

C:\Program Files\BlueStacks_nxt\libssl-1_1-x64.dll

MD5 b2a8298470f0ae3cdcfcc9337ffc5cc9
SHA1 7e5edb31fc32d1189399aee8c104d9c0964c8700
SHA256 a3622b37637a6a3c4f6fa0e89c58fac3f323e3a5a5d3ed55f95465bdfd1288d5
SHA512 687f1f60efdcf20b06fa1b636dd536dd307d0d3d290d036bca01c312f287e50a393f8b19765e5138605f30ad5d6b81381f4c6b6956941b555a7128c27e52ebfc

C:\Program Files\BlueStacks_nxt\LICENSE.txt

MD5 6f76287b106cea37043ab40bbd8e3aa8
SHA1 3d6e335ded3ef588cf0630561f88e823d499817a
SHA256 04db4ed4c8f0e2d6d1f75bd817c9c779b3daed36c6551335c164d3292c8554a7
SHA512 a07bdfadb38e1b04fe0d29cbc08834beda73e6204f96ab9c04ce6e9d271555db57f0d7c60f336df20c3acde3209cbeb5c0ade0033ec3865bae6d5d118860326f

C:\Program Files\BlueStacks_nxt\Microsoft.Win32.TaskScheduler.dll

MD5 77b9be732807c875f5538f7d62bbac84
SHA1 49d763f85400d88e4a113905ea1962828955ff4f
SHA256 45da7d7b6300ab6e6634012aa09152bb9ebd477311410c2874e16c2069c45a76
SHA512 8ab93930437116bee011f2448b10a43731fb3adfc20d7e097921073ed79e1b6d46d1cec66d90dfe4b7fe5bc3512f969162c0a6b82841d5ada91d0676ac0db783

C:\Program Files\BlueStacks_nxt\msvcp140.dll

MD5 5a5d01c627e9915e1ec66fc171d0dbdd
SHA1 c01eaa2b555e337483338dbeb3ac7fb3e361ce39
SHA256 b0ec05216b940c005f1958b978e87b6c495135102c9e6d2fc83c0a86858dd18b
SHA512 482f521f3a33b54fb9d69be3121389f8bee59aadb429bd196c907c1e0d8a83598ba2ebeeeb948f3b9169facf986140cf8d8f40aa35ab07457937d0d252b3cb36

C:\Program Files\BlueStacks_nxt\msvcp140_1.dll

MD5 6f46f1c40343a9ade3ef73984afa23f6
SHA1 1c871fa83d8ce040d0d107b82dc91158f8868425
SHA256 30a82affb9b59121d910c6d7a38d97f378f54ca6b02efceba9850a849e02faf1
SHA512 1a1205af112db6a4fe66b07ca26f81328cb39323cafe8e62e5e02d2c20c5a811875a66026af08d7f7976846283b2d90aa835732d9e2a61bd5ae9ce1ee297729c

C:\Program Files\BlueStacks_nxt\msvcp140_2.dll

MD5 5ce076d5ad600a98cf691778d75f6035
SHA1 e030c777740441f0afd9db54100c0144b380d83f
SHA256 23551b0fa1200162861f4f7258e1f9ae37b8e358d4a7e3227f91e40ba82dfd93
SHA512 e94b875911169e64ab5c1b5fa6e232b966b33f8451a3751aa9d0814564e49e170f81ee38b7bfd4cf6c28d98316e975a4e6b9eaa6b9c194367f2db6ee1984b2fe

C:\Program Files\BlueStacks_nxt\NOTICE.html

MD5 6ef5770dabe23dd90f24ad08f82c46be
SHA1 f7c8b140eb6894327db4717f48cf2ed485701fb6
SHA256 29a1b004a424ebc82d0c3d9e78af48b97aadca403697f6ec5954ec535d6b14d4
SHA512 86699a2e6d3f0fbee9eb5df3d1324ca573f799e167b78dc96c7bb171b9a9e05ca87d58c3a8f222493f47e9fa472abf548d76ec911b1654c634502448641c54c2

C:\Program Files\BlueStacks_nxt\VBoxCAPI.dll

MD5 d587df5109c72cd7cc9b393f5969b600
SHA1 cb91c5c0a30c3ec84e50985fcc11c091533c27fb
SHA256 28cf5b2956fb0863c3f596472cce71b90cfe7c28755c745f3f2837a804d6fc90
SHA512 199b9784c1d17e87d26c0cf0b0edadaeec1f5e9279281c4480b982d4b0872a92cd401021fb4b101d4c18333a07b988ed0c6f16085284d6b1b9d81a45c47fe1db

C:\Program Files\BlueStacks_nxt\zlib1.dll

MD5 320dc22ddea5f4628340bc260946f3d0
SHA1 fb1874a47f019a4a62944c1b5d781eb625005671
SHA256 213a253246a61e05bafcf8a2fb7c0e4a8f7099b5027ee6236ace0fc7712b6468
SHA512 3c35756607ddc1a47bdd0255dad36222141ab54f77124c8413c85bb136dd97ae73bec8fcad9b9100103a17b4bff71d2f80e64d8321dd63f350116a97ea747167

C:\Program Files\BlueStacks_nxt\tag.txt

MD5 0e73bd2cc8b038bf1e984471058460fd
SHA1 dd6ae7bd50141ab21cb1733e5eed39e921392286
SHA256 0d0e57a084a3e7645b4ae1bd0b4e9ee066e351d49bc23e98ea167a382c5cfeef
SHA512 2dafd63a0741bed57a84bec0909b947ffb81f6760df5103ae4bb3ab8710ab3bc1e59d8752bc437ec04eff55059685f3eb78f9c7bf3452a84282edab59d96df27

C:\ProgramData\BlueStacks_nxt\Client\Assets\BlueStacksMIM.ico

MD5 06f91b560e61bdff73c103efe6c9e82f
SHA1 3bd5d30674d6651a1eddcddf7bce9e603af15e1d
SHA256 9aa1c7f5b8acbd141db5bb92b3f43d64d50f52f9da88e5295ecfbc0750ce9339
SHA512 5dcfb7b2e085aff0439c46354216a66cac3eb88fcc0012468161cccdafe285c1b31ae28eccf921f4910020d54d798e7438de3457efaf608fbe1c7735426caf9c

C:\ProgramData\BlueStacks_nxt\Client\Assets\BlueStacksMIM.png

MD5 1364db4303d5043400805951faa630e6
SHA1 3ace34d3c7c7229ca8c5ec59deb244919b45b229
SHA256 4cb061710ea3bda65a50bbc962418d668817f8adae11334081c2844561f78f97
SHA512 01e3de8f61ca1de92d617293d5508a3288d662b4675823c47d8d5f9f8fe1881f667ced5023eb4822bed8ce349d8e3581062155e29f36039e82908912ba926483

C:\ProgramData\BlueStacks_nxt\Client\Assets\check_box_checked.png

MD5 0f2de5ff992d59c3ffec1928df9a3007
SHA1 8b5ae0cfac0cd5eebdb4efe14702d7de97b25d49
SHA256 1a9f1d96be0535b40ed6a13ef479d04ee73118dee08be0058f269e4627e2aa3b
SHA512 a9f84bf533c7f4da7592528b0ca59a3ecba0e59162f1fc7da929cfdf9aa8cfd2f582d48e72d01f1a0a55c098d10642530ca9e9b1f5abe552c7b27a9424a14fcd

C:\ProgramData\BlueStacks_nxt\Client\Assets\ErrorCircle.png

MD5 2893949b72a53b7b0db30f1611859e5c
SHA1 78082025ed8481939b7bf7556d73c833b967a6d3
SHA256 e9f32de247031dcbe17823a6e367567746038d54517436358c6dd1b4b338ae7c
SHA512 8aa75d776d03f4b5fd37b8a7bd4db1a7677d15dd3446942a3b41d8f4ddad66cb435d325057eef5997d90f34087e0dd5532f9c5426c3964dee5fc15eeb0e819c1

C:\ProgramData\BlueStacks_nxt\Client\Assets\check_box.png

MD5 86852b8d52fcab9b23e5ecd2345cb28b
SHA1 902805a9080bf9a2dff8ea69d228ca8216853407
SHA256 c0f7f6b9b95a5463258916afd1337e2ca49a8c69a20e843c629db8065a00e68b
SHA512 476a90a0714701702ccc59ac0b1555d7a75f7665e6067422fcf389195f625ca5b308627059c0dbb786565a773ce643737923456b176a5e77f210173248d19585

C:\ProgramData\BlueStacks_nxt\Client\Assets\ErrorIcon.png

MD5 d8aed25102d837572d74b32d9530cec3
SHA1 374c525476e436980c617aec563ec1a80391599b
SHA256 d1412dc0ec506a71aac8f97b4b0a3204173a1efbbf445e06f9a592294dd5490e
SHA512 48309f02fbaa0c6ee214b8bf12890ea0a872a891c0db9cc02b6f1b420ccc2439eefb3fb0995321068eab1afc33f3e664e2952e78a767335d5b2ed747b0ac112f

C:\ProgramData\BlueStacks_nxt\Client\Assets\exit_close_hover.png

MD5 811b8372e36c83b5afa8881cfefe1693
SHA1 dd30b446490a9db7e9089816ba92560c4a76b12f
SHA256 5674b440c16fd138d6a5b9bee0adf1399bdea98e15c3fec32cb90b6be3487748
SHA512 f7d5cc6b97ddd98035ee023a2736b45e3de5e77f42f97132f9d4585d03203338c2f625f6016294a747ba3f98e6e2c2b79711b9b2c8851be0bb7db8479e6734a5

C:\ProgramData\BlueStacks_nxt\Client\Assets\loadingCircles.gif

MD5 56357aae59af803bcb8cbc3af1c16229
SHA1 7949774b24d4184d5cd3ca78787820330e9e4273
SHA256 fcba6fc1c0f7dcb5a13e4ddf697ed990c2984b0c9c00b3beba1c74db4a170e6a
SHA512 d18e7f4c058aeb2011f0bfa88a3ffc17f9bd40a3c67d67080ea55d0a6f3184cd524758c44c9ac27243311055d299597cadd426bc0b4f139ceb5020dde90c526b

C:\ProgramData\BlueStacks_nxt\Client\Assets\message_info.png

MD5 88d0e2324f44a7acfe40f09830152fdd
SHA1 4e6dcf0df1e6fc2a6aabc4093de655abc996af49
SHA256 e4daa2fb4fa5cfc8452591fab418f67450ddf42298155538ca762ba57bd68c09
SHA512 b7f18c4285c9763792ab53295d589d3cd9c6873c5494b5b1bb931559e837ab6c961ffc7b0f575feadb57040de873312ce58359644ae0deedce633d830e994ac7

C:\ProgramData\BlueStacks_nxt\Client\Assets\minimize.png

MD5 ad4ea2efe0a8790d1bf2c5947fead285
SHA1 1274ea1f5b4c93fb40a57a9ec8a50857d488eab4
SHA256 b8e18699ea1abd21cd47a76c759a991637ca89c430e709ae9fb56aa2996178e3
SHA512 63af5d3d763a0854509a2abec68af462cff239e5a9fb539713755bf834f62ffa6fa8d4b1f39a41b17f68599c737b388785381fddb7a69212c9a4a2cd34dd0523

C:\ProgramData\BlueStacks_nxt\Client\Assets\minimize_progress_hover.png

MD5 c81c4cc1512d2eed5b3ac8d87490efad
SHA1 2f37ada51b8fb5a9d1ac84ce312a5772282d1754
SHA256 1498c4bee1c24693f8b9b16a60238ce09a4b8a5ab920011509d77d5e2fe20032
SHA512 341733fe73b2823fb5eb8eff02b118867fed46c6d6080c5a405dfd3f09b156bfaef2893c16e03f9d2b3e11904e0bea2a910f9e7fb7c3811c7f178c7b89b1f852

C:\ProgramData\BlueStacks_nxt\Client\Assets\minimize_hover.png

MD5 2a62067472463072b8c5bfaf115a3b98
SHA1 af94a3f6805fbf884b5a04bd615bb4c2cb57672d
SHA256 b64e37462471229431f67b0789f4c1a78ce9e2296f8e0f5d5d3206d6eef1486e
SHA512 3892c8b74bd5752f4e5df3e73427450f42511624c1cd90ef278f8eac235c291d6aaabf96ed314e2edad4b3ba57681804bdd16652ca2b0427c51b5c1a1f647a02

C:\ProgramData\BlueStacks_nxt\Client\Assets\minimize_click.png

MD5 29277db7c9bdcf07f35f83daf0077566
SHA1 9c0f28a8a258db62d78b209cf2d7b3c15018fafb
SHA256 a3c3421b30c1c6237adcaa12dc5602aeec722b5a6d415c322e99255f1f50581e
SHA512 533e1707a37fd36fbef9f846544f7e7605f556d32558f39575744c01319b0f62c93467296ded66e960375bd12e63fb4349236baed229b8f1470d2530d3a8fca2

C:\ProgramData\BlueStacks_nxt\Client\Assets\Mouse_cursor.png

MD5 c3748262e510ef25bbf2971104260f23
SHA1 53aff3a00a2ab704b73f26446d6b6a4c9609b4b8
SHA256 13ecc2f7d38e802f54a274bce8c6f7559243f4bf14905fb835dedb219b5f0eed
SHA512 7e0c8a98264eff4aab06fa70c7c9fb70442ffc667312c3138316098122eba0dc0d9cd5884a52cd23d5d059918df499c00f12ebbce058908f8cbcbdbeff2cc0e6

C:\ProgramData\BlueStacks_nxt\Client\Assets\Moba_cursor_right.png

MD5 c2f0a11bceecf342f2abe7b5e172ba9d
SHA1 6f19bb5070ae395507ec125c477673fe982de7b8
SHA256 0faec288b161dbf589d9968a5d21d811a66a273284a655a588eb5fa8842f375c
SHA512 1bf5cdea9811ce510edddfefbf066575b80f047fb7dc9b72778a7df08ba9489344ca0a192e67d92c58fdbe27e7b12c5f97ff16efdf6150f1b345847f5560f04f

C:\ProgramData\BlueStacks_nxt\Client\Assets\Moba_cursor.png

MD5 e947293b7b03600e13818af14d09e8a7
SHA1 c658121009e514ce47f439f91aec6a5f8eea3070
SHA256 db8163662d495e7b57cd235a2c7c57df816cbda32d667c21f21ff6200ad20569
SHA512 ab2cb93dd130ef99b4add4a6ab005df61b00e49d15aceff8bdc2af7c246fcb3eb085a6e785457f8281853bed36d6762da20a507c668098637e6a89a73bc593e8

C:\ProgramData\BlueStacks_nxt\Client\Assets\ProductLogo.png

MD5 3fa88cd0cb912cbbdc984d78a505aa50
SHA1 f274895eab8f4b9913c94c680b24461eb2446a1a
SHA256 fed0529cb2e88e5254493d99926957aeb2320b18cb7da2aac6de218b4d091f36
SHA512 fab04cedde1f8e45b26306bb510c8a706ab5b135b59616f275541d1fc7d248d08cdb2c83ba22add340379f9dd3661e7e8b7addd4b705728c119208de72a6088e

C:\ProgramData\BlueStacks_nxt\Client\Assets\radio_selected_disaled.png

MD5 decae1c2fc1e76292ec271ff2c0eda2c
SHA1 9fa4d710efb701547b938f4912fd90533bf30b4f
SHA256 5ac492f99c8e4dec0c979506d351d389b9afc7cf0da218064b0514bf7a5e11fc
SHA512 b789b3bcbb1c5f78a474338ac95986747bb0e961e6d7416753262aa6e59db91636e154c443375e13c246a8750b8dcab2b76f3c7724e20bd242d4829ba7cfa07c

C:\ProgramData\BlueStacks_nxt\Client\Assets\radio_unselected_disaled.png

MD5 4d467a8eafa6d3b1593bc69d583a068b
SHA1 a20b3fc85106059ae15cd55228bae52b6536f9c8
SHA256 f81b9744fdc87f280e45fce2e7bea078d6a10dc9ae1ae1ba86618e4e78f53753
SHA512 c8e7dd43ae7921e040754a49a2a513f9d7cab59ff6c9d52667d9731a24c751128a972901da1fb847a79e32fd8270170fc6a787a3668152ee90e9362a653762bc

C:\ProgramData\BlueStacks_nxt\Client\Assets\SuccessIcon.png

MD5 028d89bc2bc5d4c07113e88e0bf3b686
SHA1 163677500b724f4b596a1228a4d0c70590853260
SHA256 ccf4b213406087157ce3fb82be0236ebfab2fd4ebacc5877e8c7490ed217df74
SHA512 9c2c120effe8d7467f5b272cb210b79b301d7b938fab6e57db1cc6b5829f375e44a9d7a61fb82cb4171c5ea25f3bf6c7a0d9b79150186901b376834be73d5672

C:\ProgramData\BlueStacks_nxt\Client\Assets\ThemeConfig.ini

MD5 a92070129aa6ebe582452823e189fdd3
SHA1 52808b593f6ddda24a816677a46a69180cb3746e
SHA256 7b44eafb5676e9ae976b367253afd7c9963adc777a7beda9dd8fc9339b1b69a1
SHA512 9be796157d52a3fd1dbfe0c63e52f0e14c4d54dd4b7f30ed80289789a6d44c403d6190630adc9215b815bf4d9528830c48468c1e003d764336a84576140f2b7c

C:\ProgramData\BlueStacks_nxt\Client\Assets\ThemeFile

MD5 097aaa2f03fb29cb24ad9e3f05ce115a
SHA1 df7cbe3eb3026ee513df465579b55c0fbbb1d2c6
SHA256 cdbf4deb03615bd13182ebcc6f62a661cd9e57b2db0e71cd1afd80f99d6891cb
SHA512 1f11973cdf9584d79b8f6af8e13240ba086c26f49657f9bcbc0fa7cff485cb2bc6de9bcd68c1e40d42e213362f1a6b0f6de573672cc7ac1498a2919cb99fa4f2

C:\ProgramData\BlueStacks_nxt\Client\Assets\VideoThumbnail.png

MD5 f0c1f5f6fba9959e7a09319c7c2892ae
SHA1 2e07f4b8002daca40c1123facd6558f259e298af
SHA256 17de3e38f6289e97853a16582e27bd65c6b8488eb70ecb98deacbdc601ad0789
SHA512 24e93ced073062718aba924116ba0edec787f006041484fd275413a26ff61e827f56485e4f77a9dfd39a5052a365b14d1d6c278da2945e7bf15b38210eca5734

C:\ProgramData\BlueStacks_nxt\Engine\UserData\InputMapper\gamepad.db

MD5 cb01636703334c6f2e16fd98be3ded94
SHA1 e11adc8535d854305f7bde47f57ccd2597041740
SHA256 bfdfd2195364fd86736d843c1ceedee2d4bd82a027e9ed8a2a6c40d6d92a998c
SHA512 92e032b345deb55a1f239b957854320227f63b1579376081317ad5ea1e9d1d123e015274ac4cdb901cf411de1f180a6227564c7c5097dc6e978ec766f29368c7

C:\ProgramData\BlueStacks_nxt\Locales\ProblemCategories\ReportProblemCategories.de-DE.Json

MD5 c14f8acc4d5f1b1faa8a37aa347a8cf8
SHA1 faaf4c6a51888d6c79e054772126ded3eaf6b205
SHA256 69d60b67d3a00d0950b8dc55de8906d06222cf0e27022c09fac3a0287f7a33de
SHA512 c99c49810658a31a63b3387b72ac3fb08536d7f71f670695f5c17bf448aed29282f65daf9b5b743252dddae480da9f2e32ef4f51311b9a9d85ae4c41b546ac3c

C:\ProgramData\BlueStacks_nxt\Locales\ProblemCategories\ReportProblemCategories.en-IN.Json

MD5 6bfd267fc5c9cf550f79bb4c873be4cd
SHA1 7749e4b2d30e41def1c8de4e48ab35ce03c9d6df
SHA256 12deaa32fceacea5f99ed81887cabbb8684c0b3bdddb256a579acd7f73355f5f
SHA512 cd317b5055568af919b19577203e9c7fb2dde412fcd67a6e38f2eb26c17a043b598d4aecb32aed1d997d334629b62f8314470dbf79aa44668a9c7d82d035ce3e

C:\ProgramData\BlueStacks_nxt\Locales\ProblemCategories\ReportProblemCategories.en-US.Json

MD5 f1fb918d7b2366a889315beb9e3a04f9
SHA1 6d441388adc264ed2a5bc754f64345c0b4a5a987
SHA256 29a68831d766f7426f96e51e0b7fca841c0be63ccc38b58363001ebc66eb1082
SHA512 5ecbc4d62b93c62838081b488c059eb3e02b1343391eff9ba444b07e7ed60610f7387a82feb39ce63a15870c83c4636608c3e1550201ccc4427292f5eb795371

C:\ProgramData\BlueStacks_nxt\Locales\ProblemCategories\ReportProblemCategories.es-ES.Json

MD5 7a11b42a097ef0a9754429c4bfdfad8c
SHA1 c10359c381f6c5a3fba8b27d842352a57fa272fd
SHA256 f20950920934c53e573bcc8f98a2f36233424eb5eb0e1196e18062beb20bddb6
SHA512 c5babd45d5699ff9c5ff8dbc3779b7d2fb5764a5a726bd65899e2753e932e47e404e33240b54607ec10877921b89330a06b8d04b5cd8837434a168042ef66414

C:\ProgramData\BlueStacks_nxt\Locales\ProblemCategories\ReportProblemCategories.fr-FR.Json

MD5 f127541aba01c807605625ea02d383f1
SHA1 348d0f5d033f6f41c4981c250044f7738d925e36
SHA256 33378d982a0512a5b70dbc2c3d21c8258b9e9975ec956769d8c768e648263cee
SHA512 2e2deb42f1290cc75d18b89bca1abdd3b3cebd0cdff4b99c5caf1ce21552a67c8d84db003b2a75c714186beee616b754166a5482db5b339e557d6c87bf7bf9d2

C:\ProgramData\BlueStacks_nxt\Locales\ProblemCategories\ReportProblemCategories.id-ID.Json

MD5 d1e7c73dfe9c2cef5f2498a972b97414
SHA1 183b488d7bda1a0804f760be3aa1650215d19b1a
SHA256 c35b2100e74d3e0bb89a50f42c2c8c9813ef03150f5f32b2bfdfdb4562d49d76
SHA512 c9aa269cf244e71190397c6b8d99df3c60d2c5f6675c89d6d46736d385379e7f2f563fb0474f4f093b5fd1b35ad53c7a70f7509cd0ba88f4525858c773f15d02

C:\ProgramData\BlueStacks_nxt\Locales\ProblemCategories\ReportProblemCategories.id.Json

MD5 db6cc8538209e0cca8acc037e6916fb9
SHA1 b54d09ecaa11d292c642ca3ccee3e7cb54ac09b0
SHA256 5202cb1710ee8fe7134084d1d65fd3df73579c4fa91b2e8c81a8c42d6a292b5c
SHA512 6c5dae01bf82985a0eadfb683a5ae63cac8ca5e1e74e4a222df5c7b5dccb058055bc94978984d3a492f729657c91cff74bb5d06e85c83e5d2a0554ed8a70e719

C:\ProgramData\BlueStacks_nxt\Locales\ProblemCategories\ReportProblemCategories.it-IT.Json

MD5 38780e1a01fb6a0ca6971ce034230cee
SHA1 5aea038ba24d66498ad8b0b12485211a2fd74153
SHA256 2c785cb569bab56a8ffdb21f27645bdcf65498f2899fdd4ce4fb53a8176750e9
SHA512 43b39264b69c86e10f6c7442b41457e868129f9bd88ee18f67f6e147406790b0200c69dd6754038b2e40b131d9aa95baadbf97ca7b53d2278ca152727d37f260

C:\ProgramData\BlueStacks_nxt\Locales\ProblemCategories\ReportProblemCategories.Json

MD5 9e1141a44519e9359739464310857bf8
SHA1 abb797ee7b512c77741978330292287d9c0d92e4
SHA256 42d8b6964164aa0e53cd0d5b7c59541bfca32b04f54b3a3cb07d9080eb60bf0f
SHA512 caced755aee6096103a067648ab069d517769bf4e89634cb0c96f00d264af786dc1e236f09652cb161c62c48df5fc30504025d0dddde709a05c87497dbc0daa2

C:\ProgramData\BlueStacks_nxt\Locales\ProblemCategories\ReportProblemCategories.ko-KR.Json

MD5 d0632357ba718a8bf6d1186aa5c19e5c
SHA1 a4330ed1e2b242dc01c612878fe9037bcc9f18c7
SHA256 8ce11b9f1f2fb4bca26b95e43415eb241d3c6714fb98a5fac42b2a7c6c2202c4
SHA512 036959de85f8439b2a106f3daf37d33965e9564d813599ac977a4a78e32650ed27950db9ebf6e5957d3906f66539d24d451206cf17edd929b844d6919f082c73

C:\ProgramData\BlueStacks_nxt\Locales\ProblemCategories\ReportProblemCategories.pt-BR.Json

MD5 7db260014e922c1e62aa4811ef3d6477
SHA1 c67f197dfe9de55d9006997052010c614c30f23d
SHA256 5ba9010aa4fb2b3e6f49d8a62504859c5876b157ce6e0bd59546bfe030c24ba7
SHA512 4999211c9ea396edc15eb0c2b4a913eff368da56bb0fa64b31ccb852f6db28aac4ac5a6bfbecfe432d589a02ce155f341e32045c757fdec92df8e05e8d9664f0

C:\ProgramData\BlueStacks_nxt\Locales\ProblemCategories\ReportProblemCategories.ru-RU.Json

MD5 1e7c57f9424763ea6b5fb6f94418d77d
SHA1 0d8132a7bb8ec1fc6faaa4e9599c3d03784edfca
SHA256 884e5e53fe8838d6a8e0f3079cccfdf98aba93bdd692bd5abbe515be8e92de48
SHA512 fff2e0d572494114390015c68a3a6c89d77139ddf8038df7e0c942963fd2315cca34c6140b997f004b1fcbf1f043724f5cb71eb2b2caeb4ca7d9060338da5f3a

C:\ProgramData\BlueStacks_nxt\Locales\ProblemCategories\ReportProblemCategories.ru.Json

MD5 076ef25a7a2fdc2518e7b44edc6b0f06
SHA1 8d5c27517f566005749c08ffd99a7e60d7e74cdc
SHA256 8a0565d7fa5d731751b8d3aaf2c566e69c85de161973357ad6487f7cc80eae27
SHA512 4d05ff2a6e340e9455190beec93eef8b9d5679f28e89dc7ffc70de3a65a05a7cf650cf317f4b60b95ea332121b2ce5b022746b96b7ced4034f72e586420cf1f2

C:\ProgramData\BlueStacks_nxt\Locales\ProblemCategories\ReportProblemCategories.th-TH.Json

MD5 64f29f0f15944fcd6b92b0d84e605056
SHA1 6adbfc9d6a025e29f18a2e0ab787d1a7c2bc831c
SHA256 ea49f66f60147bbb9270eb934a2d30bbe915086bcacc55adb983e864f0209cb7
SHA512 c1d47f47607d64e1fe258fd7084b182c008528655e5c45409ab0aefbaca8f4a685f658554a5f0e09c283fff501d13c31909ed60fa309f65e1f61fb877be08d7d

C:\ProgramData\BlueStacks_nxt\Locales\ProblemCategories\ReportProblemCategories.tr-TR.Json

MD5 d5c672dd5e11caa6636e6c4316ad889f
SHA1 c690474e5d97cab195003aa46bf1de9bb6da89f0
SHA256 e62f8f0b3588c9edaf12a4459fd31dce007c057f86c8e74089f2249a74efc9ec
SHA512 0c536ad704798ab2c72473ad6dd560accfbb75dc72af98edc08017920eaaebac8c26bb833a3318c0c2288c29a3b8e0487a8367028576e97981fbf9abb6b335bd

C:\ProgramData\BlueStacks_nxt\Locales\ProblemCategories\ReportProblemCategories.vi-VN.Json

MD5 419a2f1240aa2d99d467332d892fd223
SHA1 5b80d38f78196ae12fce28ae535798117ed657a4
SHA256 76447307b1f0f579ef7f58b69261c1775ac536c8c832651e427236c95d959025
SHA512 834eb16cbd32d57ce4c9258b92356390f83a75de6b4d7ef796e07f0404daea8e192a0196fdc83816314aff5066fd31835fea23c824b8a2703b94acfed3599930

C:\ProgramData\BlueStacks_nxt\Locales\ProblemCategories\ReportProblemCategories.zh-CN.Json

MD5 cc83301597e867c5a83d21d16733781d
SHA1 ab567224a1313b9afc190317459f60e5bea9e85b
SHA256 ab9ca929ad7babcf63f5bb12f4f2d57c21f2b9d2963f8f8d94d999b0bc79849c
SHA512 f94fabc8d501ae3b1a8e0ac090ecccb1ad7f9e1ab118712cbad5b571142ab32b9d42205f1b1c2a691958a2c4186012aa21c981374174d5e9932829be52b712a6

C:\ProgramData\BlueStacks_nxt\Locales\ProblemCategories\ReportProblemCategories.zh-TW.Json

MD5 3c3e62acafc7e8d8e4a16d3d98bda35b
SHA1 711a3a8521f835b70526c742211780a9d7487ed6
SHA256 ec1851ccd0df79e48c44a3227fb413b1352a35c9e4675afa2c0d725c9f910bb1
SHA512 201f70cd82e95a9b0e3f76342608047fc0a304ae443df33d171b56f6e7b75c183f8274adb968aae267a68cd5ab37607e728c36bbecec151e66c618f93d6f7beb

C:\ProgramData\BlueStacks_nxt\Locales\ProblemCategories\ReportProblemCategories_ru.Json

MD5 75caed5a21f1d254b7a166767b914b0d
SHA1 a6a8d5588583dc5b240c0e1314c7216c502c8863
SHA256 7e5ce9a2c76d527ecdd06db24032161468572f89b6a796048dda2ffbb2f4daff
SHA512 c51caae487becaac5e195028293698d836943be3d12eae149f30a8581356313af9242694b664e038423dc9c5ec3142d25d84121460f226d258ae62a1f31bfdde

C:\ProgramData\BlueStacks_nxt\Locales\ProblemCategories\ReportProblemCategories_th.Json

MD5 c513342ba005f907c1794f9c03ba36b3
SHA1 51eb1fc0c74415bf41ffe41ffebb94b3792e2202
SHA256 d0aae1a614f8d8c475c6544bd649ba60f5e2e89b38725de6e72173f8bf14bf6c
SHA512 6190f4c0c63a5ae724c9268a84f1273a82a480cd4b49d1d6b4eb76d4862e2dbfe21cafbc4baa9333ca6fe34dcea283d9c22764291f4c63f1701ff963eeb40744

C:\ProgramData\BlueStacks_nxt\Locales\ProblemCategories\ReportProblemCategories_tr.Json

MD5 4554f8757900aaeb163f438722510211
SHA1 d9caff5b615ba416328f904db32c4bf1e0fab971
SHA256 7728d6bf5cf06f09aa74085d76d2cc122994e4c4e26f9f5221a5f7a01a48ecfd
SHA512 a2931dc79ddc759a13823317e62fd84248149ad616c7cb6052ffae6ca0b50b589cf7e006d1f5df983852582f34e19485e2f885ad9616fd103e2fda63be8db01c

C:\ProgramData\BlueStacks_nxt\Locales\ProblemCategories\ReportProblemCategories_vi.Json

MD5 207a83427ef56f9d8dc7ad073f8710a2
SHA1 7731c398c4d811f599dd64bc8cf38c978482f958
SHA256 7fd91e5e65cd433b44f40d87a440a83dd80e7fe94881fd16aa842cb66a11de66
SHA512 e2bd3202c779b8faf29fc36445305d9cad95850a1860201b3d811ce3f5e57d44a86c18cb717139f8419de7fa543a3293d4979b92a2c938f3ef422b6e5759cd3f

C:\ProgramData\BlueStacks_nxt\Engine\Pie64\fastboot.vdi

MD5 02f66ea1444cb1571ce3712fad78cf8a
SHA1 b0d4e30df9875aa7cc17222123a35ff340d9e635
SHA256 bab88abda5392d18dbe323ccc70ef16ffb0232c564ce7407a4a30a5f57cc662b
SHA512 8b5087ce1a1e1376cfcbffc36f74d1e0c22bb1c7b2e6251a98a6c2241ee48d02eab5e6d7d11c485744879ed0fb0d19a24df1ed47c723cfb1f0a5647c9fa9e0b4

C:\ProgramData\BlueStacks_nxt\Engine\Pie64\Android.bstk.in

MD5 fc4fae9af43028b1d08641f33afbbb68
SHA1 9094088aa9c4eff0a818598d987c1c987adbdd70
SHA256 9d14fdf24a5771c43f2f78fb9856f60f607115beda49eaa61a29b09c6292e8e5
SHA512 3f92e36db97e48002c1da52a729576cefa8c59972ba65f31ab6044c15fc5997e6b08898190aadc9c414d9b04b9bf716b144bdb5e77f73d447de1623f67c2a8d4

C:\ProgramData\BlueStacks_nxt\Engine\Pie64\oem_Pie64.cfg

MD5 53958e2972911995ffdc4e6dbd43913c
SHA1 71ad4a1e7237ad76d82e950d9ed691db036b830b
SHA256 4acac73c61cb7813d61047ac326bde7d285dae2d07265550bd608342a507daf3
SHA512 2eacd0bf5640d7a89848fc74b639dd29626fc5dc73a7eb284d70d8d924c72c352e300069eaf785f0b534be4e0c822fd05e54f4634f91d156b65c9688dea68062

C:\Users\Admin\AppData\Local\Temp\clj2xb2z.p2k\config.json

MD5 7ebc06ed871b6a88a961659fa8548573
SHA1 5bb031ca39f53ab9e494084c57ab149d2e3c1492
SHA256 99da826e3bd90b2442d5ea6036aa9ecb8a80ea1736c78a742dc5d8689c2f6abe
SHA512 13775db6159fb3171af1c4e277f0f7999683334f9b4510b33f8ba10465c7bc544089a2e9c8d0fdcb847e075b7d1aa32fa22a139feeb189bf9b3758eaf790c915

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-12 14:12

Reported

2024-06-12 14:42

Platform

win10v2004-20240508-es

Max time kernel

1768s

Max time network

1778s

Command Line

"C:\Users\Admin\AppData\Local\Temp\BlueStacks10Installer_10.41.210.1001_native_c60745bef2840a6297522126c047af08_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe"

Signatures

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\BlueStacks10Installer_10.41.210.1001_native_c60745bef2840a6297522126c047af08_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe N/A

Enumerates physical storage devices

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\7zSC040B077\BlueStacksInstaller.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1036 wrote to memory of 2104 N/A C:\Users\Admin\AppData\Local\Temp\BlueStacks10Installer_10.41.210.1001_native_c60745bef2840a6297522126c047af08_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe C:\Users\Admin\AppData\Local\Temp\7zSC040B077\BlueStacksInstaller.exe
PID 1036 wrote to memory of 2104 N/A C:\Users\Admin\AppData\Local\Temp\BlueStacks10Installer_10.41.210.1001_native_c60745bef2840a6297522126c047af08_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe C:\Users\Admin\AppData\Local\Temp\7zSC040B077\BlueStacksInstaller.exe
PID 2104 wrote to memory of 3648 N/A C:\Users\Admin\AppData\Local\Temp\7zSC040B077\BlueStacksInstaller.exe C:\Users\Admin\AppData\Local\Temp\7zSC040B077\HD-CheckCpu.exe
PID 2104 wrote to memory of 3648 N/A C:\Users\Admin\AppData\Local\Temp\7zSC040B077\BlueStacksInstaller.exe C:\Users\Admin\AppData\Local\Temp\7zSC040B077\HD-CheckCpu.exe
PID 2104 wrote to memory of 3648 N/A C:\Users\Admin\AppData\Local\Temp\7zSC040B077\BlueStacksInstaller.exe C:\Users\Admin\AppData\Local\Temp\7zSC040B077\HD-CheckCpu.exe
PID 2104 wrote to memory of 3040 N/A C:\Users\Admin\AppData\Local\Temp\7zSC040B077\BlueStacksInstaller.exe C:\Users\Admin\AppData\Local\Temp\7zSC040B077\HD-CheckCpu.exe
PID 2104 wrote to memory of 3040 N/A C:\Users\Admin\AppData\Local\Temp\7zSC040B077\BlueStacksInstaller.exe C:\Users\Admin\AppData\Local\Temp\7zSC040B077\HD-CheckCpu.exe
PID 2104 wrote to memory of 3040 N/A C:\Users\Admin\AppData\Local\Temp\7zSC040B077\BlueStacksInstaller.exe C:\Users\Admin\AppData\Local\Temp\7zSC040B077\HD-CheckCpu.exe

Processes

C:\Users\Admin\AppData\Local\Temp\BlueStacks10Installer_10.41.210.1001_native_c60745bef2840a6297522126c047af08_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe

"C:\Users\Admin\AppData\Local\Temp\BlueStacks10Installer_10.41.210.1001_native_c60745bef2840a6297522126c047af08_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe"

C:\Users\Admin\AppData\Local\Temp\7zSC040B077\BlueStacksInstaller.exe

"C:\Users\Admin\AppData\Local\Temp\7zSC040B077\BlueStacksInstaller.exe"

C:\Users\Admin\AppData\Local\Temp\7zSC040B077\HD-CheckCpu.exe

"C:\Users\Admin\AppData\Local\Temp\7zSC040B077\HD-CheckCpu.exe" --cmd checkHypervEnabled

C:\Users\Admin\AppData\Local\Temp\7zSC040B077\HD-CheckCpu.exe

"C:\Users\Admin\AppData\Local\Temp\7zSC040B077\HD-CheckCpu.exe" --cmd checkSSE4

Network

Country Destination Domain Proto
US 8.8.8.8:53 cloud.bluestacks.com udp
US 8.8.8.8:53 cloud.bluestacks.com udp
US 8.8.8.8:53 cloud.bluestacks.com udp
US 8.8.8.8:53 cloud.bluestacks.com udp
US 8.8.8.8:53 delegate.bluestacks.com udp

Files

C:\Users\Admin\AppData\Local\Temp\7zSC040B077\BlueStacksInstaller.exe

MD5 c8ec5e0af9329936df1fb6382f092687
SHA1 fc8a59149198e5acef2ca6a51f01d1e3ff0f50fe
SHA256 7b3fcbf635508cde1dd74e41b3914f5b85bdb8de1bcece745ac6a05ddfde63da
SHA512 1bd43948428d964b94befe7e2b9cd74e0cb5d6af76f5adb166323510b2f775ae479e781df104222197ac5e04e83e885cf6a5ec65c7bb3c5aebd45dead24439cf

C:\Users\Admin\AppData\Local\Temp\7zSC040B077\BlueStacksInstaller.exe.config

MD5 1b456d88546e29f4f007cd0bf1025703
SHA1 e5c444fcfe5baf2ef71c1813afc3f2c1100cab86
SHA256 d6d316584b63bb0d670a42f88b8f84e0de0db4275f1a342084dc383ebeb278eb
SHA512 c545e416c841b8786e4589fc9ca2b732b16cdd759813ec03f558332f2436f165ec1ad2fbc65012b5709fa19ff1e8396639c17bfad150cabeb51328a39ea556e6

memory/2104-118-0x00007FFB232D3000-0x00007FFB232D5000-memory.dmp

memory/2104-120-0x0000000000BF0000-0x0000000000C8E000-memory.dmp

memory/2104-121-0x000000001C5A0000-0x000000001C6A2000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\7zSC040B077\JSON.dll

MD5 f5fd966e29f5c359f78cb61a571d1be4
SHA1 a55e7ed593b4bc7a77586da0f1223cfd9d51a233
SHA256 d2c8d26f95f55431e632c8581154db7c19547b656380e051194a9d2583dd2156
SHA512 d99e6fe250bb106257f86135938635f6e7ad689b2c11a96bb274f4c4c5e9a85cfacba40122dbc953f77b5d33d886c6af30bff821f10945e15b21a24b66f6c8be

memory/2104-123-0x000000001C6B0000-0x000000001C718000-memory.dmp

memory/2104-124-0x00007FFB232D0000-0x00007FFB23D91000-memory.dmp

memory/2104-125-0x000000001B760000-0x000000001B7A0000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\7zSC040B077\Locales\i18n.en-US.txt

MD5 206562eed57e938afe21fc6942fa8e59
SHA1 779e90fec866c0fd2f47da020651db71c89ec3dd
SHA256 27d611a71edf36307a7ed0651f6c5910292ac7e2b68074a7e33d306b3d93ec45
SHA512 275c3192a7aee28fad31beb521cf5e7c66010e7562ce244ba9fc4de352f35b4ab63180ed12a56ea0b1458c185e076e2d07ba6d8797467177d3c5b2ac14371b26

C:\Users\Admin\AppData\Local\Temp\7zSC040B077\Locales\i18n.es-ES.txt

MD5 5f5cacda94bb2384f9d6bdece58ac526
SHA1 c10f095a312e623b79c42ab7ca3f48130b348d62
SHA256 2b698fd5d6f4fd959c4a24b47b02c2e1a9f51a72a66cfab3ed72d8f667d221cd
SHA512 1ca9373b2eff0620d02249ab82fe46644f6452db36a2b61334cc258d2e9910200c33543f7794e0bdc69761f5b86aedacca0fe6491293ecd1df2992eaa5aaae99

C:\Users\Admin\AppData\Local\Temp\7zSC040B077\HD-CheckCpu.exe

MD5 81234fd9895897b8d1f5e6772a1b38d0
SHA1 80b2fec4a85ed90c4db2f09b63bd8f37038db0d3
SHA256 2e14887f3432b4a313442247fc669f891dbdad7ef1a2d371466a2afa88074a4c
SHA512 4c924d6524dc2c7d834bfc1a0d98b21753a7bf1e94b1c2c6650f755e6f265512d3a963bc7bc745351f79f547add57c37e29ba9270707edbf62b60df3a541bc16

memory/2104-134-0x000000001D700000-0x000000001DC28000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\7zSC040B077\Assets\loader.png

MD5 03903fd42ed2ee3cb014f0f3b410bcb4
SHA1 762a95240607fe8a304867a46bc2d677f494f5c2
SHA256 076263cc65f9824f4f82eb6beaa594d1df90218a2ee21664cf209181557e04b1
SHA512 8b0e717268590e5287c07598a06d89220c5e9a33cd1c29c55f8720321f4b3efc869d20c61fcc892e13188d77f0fdc4c73a2ee6dece174bf876fcc3a6c5683857

C:\Users\Admin\AppData\Local\Temp\7zSC040B077\ThemeFile

MD5 c3e6bab4f92ee40b9453821136878993
SHA1 94493a6b3dfb3135e5775b7d3be227659856fbc4
SHA256 de1a2e6b560e036da5ea6b042e29e81a5bfcf67dde89670c332fc5199e811ba6
SHA512 a64b6b06b3a0f3591892b60e59699682700f4018b898efe55d6bd5fb417965a55027671c58092d1eb7e21c2dbac42bc68dfb8c70468d98bed45a8cff0e945895

memory/2104-137-0x00007FFB232D0000-0x00007FFB23D91000-memory.dmp

memory/2104-138-0x000000001D5F0000-0x000000001D610000-memory.dmp

memory/2104-139-0x00007FFB232D0000-0x00007FFB23D91000-memory.dmp

memory/2104-141-0x000000001D660000-0x000000001D66E000-memory.dmp

memory/2104-140-0x000000001D690000-0x000000001D6C8000-memory.dmp

memory/2104-142-0x00007FFB232D0000-0x00007FFB23D91000-memory.dmp

memory/2104-144-0x00007FFB232D3000-0x00007FFB232D5000-memory.dmp

memory/2104-145-0x00007FFB232D0000-0x00007FFB23D91000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\7zSC040B077\Assets\minimize_progress.png

MD5 1504b80f2a6f2d3fefc305da54a2a6c2
SHA1 432a9d89ebc2f693836d3c2f0743ea5d2077848d
SHA256 2f62d4e8c643051093f907058dddc78cc525147d9c4f4a0d78b4d0e5c90979f6
SHA512 675db04baf3199c8d94af30a1f1c252830a56a90f633c3a72aa9841738b04242902a5e7c56dd792626338e8b7eabc1f359514bb3a2e62bc36c16919e196cfd94

C:\Users\Admin\AppData\Local\Temp\7zSC040B077\Assets\exit_close.png

MD5 26eb04b9e0105a7b121ea9c6601bbf2a
SHA1 efc08370d90c8173df8d8c4b122d2bb64c07ccd8
SHA256 7aaef329ba9fa052791d1a09f127551289641ea743baba171de55faa30ec1157
SHA512 9df3c723314d11a6b4ce0577eb61488061f2f96a9746a944eb6a4ee8c0c4d29131231a1b20988ef5454b79f9475b43d62c710839ecc0a9c98324f977cab6db68

memory/2104-148-0x000000001CCA0000-0x000000001CCBA000-memory.dmp

memory/2104-149-0x000000001CC90000-0x000000001CC98000-memory.dmp

memory/2104-150-0x00007FFB232D0000-0x00007FFB23D91000-memory.dmp

memory/2104-151-0x00007FFB232D0000-0x00007FFB23D91000-memory.dmp

memory/2104-152-0x00007FFB232D0000-0x00007FFB23D91000-memory.dmp

memory/2104-155-0x00007FFB232D0000-0x00007FFB23D91000-memory.dmp