Analysis

  • max time kernel
    119s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    15/06/2024, 16:36

General

  • Target

    BlueStacks10Installer_10.41.210.1001_native_dae242b5419cf3ab502c9629c45a19d5_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe

  • Size

    910KB

  • MD5

    d2c72208f8783ec83b123324e8093cc1

  • SHA1

    4afbc9f19f8a194bccd5216e05083e0d7617fff0

  • SHA256

    52ed4671a31c8529f2ba3027e25080c842d09f0517fe64e844f93d619cb4dd26

  • SHA512

    03b7c6511e32f9822a42182776b2f862bae7627a2df374f874df05f3d46f90857a37afaf12d7d29a960f5d22536878dea9240c5872d84c9835663d219c5d531a

  • SSDEEP

    24576:0ivtCXWeGK69Txt9OkcXGgrwPgZNYtOvLm:xtCXWPXvz5cXGcwPgZOtcLm

Score
6/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Executes dropped EXE 6 IoCs
  • Loads dropped DLL 8 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies system certificate store 2 TTPs 6 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 27 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\BlueStacks10Installer_10.41.210.1001_native_dae242b5419cf3ab502c9629c45a19d5_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe
    "C:\Users\Admin\AppData\Local\Temp\BlueStacks10Installer_10.41.210.1001_native_dae242b5419cf3ab502c9629c45a19d5_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:3024
    • C:\Users\Admin\AppData\Local\Temp\7zS0DB91376\BlueStacksInstaller.exe
      "C:\Users\Admin\AppData\Local\Temp\7zS0DB91376\BlueStacksInstaller.exe"
      2⤵
      • Executes dropped EXE
      • Modifies system certificate store
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:2752
      • C:\Users\Admin\AppData\Local\Temp\7zS0DB91376\HD-CheckCpu.exe
        "C:\Users\Admin\AppData\Local\Temp\7zS0DB91376\HD-CheckCpu.exe" --cmd checkHypervEnabled
        3⤵
        • Executes dropped EXE
        PID:1920
      • C:\Users\Admin\AppData\Local\BlueStacksSetup\BlueStacksMicroInstaller5.14.22.1003_native_dae242b5419cf3ab502c9629c45a19d5.exe
        "C:\Users\Admin\AppData\Local\BlueStacksSetup\BlueStacksMicroInstaller5.14.22.1003_native_dae242b5419cf3ab502c9629c45a19d5.exe"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious use of WriteProcessMemory
        PID:812
        • C:\Users\Admin\AppData\Local\Temp\7zSC23C23B6\BlueStacksInstaller.exe
          "C:\Users\Admin\AppData\Local\Temp\7zSC23C23B6\BlueStacksInstaller.exe"
          4⤵
          • Executes dropped EXE
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of WriteProcessMemory
          PID:2692
          • C:\Users\Admin\AppData\Local\Temp\7zSC23C23B6\HD-CheckCpu.exe
            "C:\Users\Admin\AppData\Local\Temp\7zSC23C23B6\HD-CheckCpu.exe" --cmd checkHypervEnabled
            5⤵
            • Executes dropped EXE
            PID:1472
          • C:\Users\Admin\AppData\Local\Temp\7zSC23C23B6\HD-CheckCpu.exe
            "C:\Users\Admin\AppData\Local\Temp\7zSC23C23B6\HD-CheckCpu.exe" --cmd checkSSE4
            5⤵
            • Executes dropped EXE
            PID:1296

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416

          Filesize

          1KB

          MD5

          55540a230bdab55187a841cfe1aa1545

          SHA1

          363e4734f757bdeb89868efe94907774a327695e

          SHA256

          d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb

          SHA512

          c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416

          Filesize

          230B

          MD5

          ea2fd2fc7d7ed58d3e2762feba05c76c

          SHA1

          a6372b7f8d33867487ee545b4d6e6a9d797da3af

          SHA256

          dc1da2bfa74b4d44b2a1706346bb0718cce78c4d5c8500420b4d83c1a96e0dae

          SHA512

          2906ac994101ebd2de4e954c28df082bc2d4f2b87aa7d5067bf8433aef73996f3361e2ede62a0e919ffa7a666a7ad706988d2face39aea73635c11f50ec9014a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a21ac06be8f073c7bae5a2ba04ce51bd

          SHA1

          722475e405f6f8a4fbe270dc775cb155d2088283

          SHA256

          db996913ccf9716fba117b9f13055d5527be275c26cbee4d45aef3595096916c

          SHA512

          b1737c698589736277124d1a68ea35ef9d9c7dfda8283962665f971c30583be0a9f24976ab410bcf03221fffbd174676778582f28559d77886b8b0c3e2711b97

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5e8f57b329582368fdef06466fc37fc6

          SHA1

          93f7bc17e6df7c5ab30ea106e820a125e23f8c8d

          SHA256

          d35dc577c2655518952e97d8cac32810747774814759bad74548710ebc59b53e

          SHA512

          ccb355bb69909a7df873e1c3f85336b1df1552ecdad4a570bbafdc1d3659a9439009e2d949ff1421bdd89ea6077f0ee2179fbbe7b6f15fb5a98fa6ab29632e91

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4d1f6d9808654d429bce2c60c14015a1

          SHA1

          04764a05b3feac7b39a0450e45f5fadb816336bc

          SHA256

          ae39c736040f3d7540f531edf97b8e68adae370d7790de709f4105199cf39899

          SHA512

          aab6b672dd49026b55c2249e0a6926de37b5c684cce0fa1c1fe033241cd2f663521d882aa9c23f2a88415fed8a5deb2c2ce5e528d93e88dc521244eeb0c1f638

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2015edd2ad0451205caa2048da15b2f1

          SHA1

          67d65e5fab9bd9a095b12c4a4114cc62227f83eb

          SHA256

          456ddf0d501dc6ba3e028bc1b7c33772b2815fa1c8f91ee0171333bb49870a6a

          SHA512

          d7940b94ee35988fc3ab0aa9021b0351b18e4b754bdd27569d3878ef613b5788136321b812c6203337bfe5986ac61880f14abb7303568f5950849150aa1ac30c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f7abe7ef7394b2ae4192681fd52ef677

          SHA1

          65735b0be54475d5c8b54a098b660ceac3a7edac

          SHA256

          2754e0209b5778bfed65b47cfc96dcb1f1a6eac11b6352629a2b54ded89c0d2b

          SHA512

          1ff9321d71fd78df21bb48970c44017434e1f79165ebc8a473b0a4367a7d69857f68709e65f7c0931d85fc465e0da3ba4e63374ce804867b48ebfccec674b437

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d66fa6b3362ee1f502ba7f226ff01923

          SHA1

          76e2c19616ffd10f2b067237ee1de602d6681553

          SHA256

          23aee1eb8550a11e6bae0bb2385581b18f27abad46ef2600871276f3769dd997

          SHA512

          895cc38f3323a6120eb1cccdf839d6e8f1007f2ce30de1fa791192e2db24351137e6ba32527c666bb9ef166b073b83dd255ee64f2cab226ac6531b5d426e5ca4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c27ee6f5457d9a82c8a265107ff2c6c5

          SHA1

          124e1105fec5d56435b01347563d53302a57df36

          SHA256

          5b4927bb8113d6d9d2bcf12fbf15011c02e6669b36a3c13df5e717c431374337

          SHA512

          c8a053887db8d736feb370f32585d710ea5a39e839f8604b7e8ac5f00120e2bc99aba417307ce1712814488f856c5d00b1bd2af5074bc7f38685d342a8dd70b4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          9f8e86a23b55bb084a9b7d20326af683

          SHA1

          0e9c529ae1a519bfb9f31f4ecb0d844b29834b75

          SHA256

          6da747f21991649c41d65e89c28f7640f6f344e8dad0f36c5dd19714f0972250

          SHA512

          2d3714519048ddf79225e326a37c9bf9b3094707f62b22945cb9d4ba0dbaa0fce1115b1e39cb57e71f0ba229a8cc5cc3c51d7e35a91c2406cded56280f610fdf

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          98fb1c3ffb77a4dea82388b79f7d096e

          SHA1

          e550707815b1d280885b704a0cff01b07cbef271

          SHA256

          747f3dffeef391ec1e0b6965bccf4820a44a31b8ea3893f5dfa7cbc64332f15e

          SHA512

          f6ed9d2e38340b632a6be048c502858adba0d6883550171469258b5546496f97ffaceda2f5bde071c2356fd16cdf49842189206545858b1fec78cf7b94f06be8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d4738310f67e03421d41afaf8d85ac81

          SHA1

          f8ec24e85cf6bcca47b7ef2580a348439ada590c

          SHA256

          d7ff00682163b681e77ceb8822a2dd166285bb9bcd875f7e23a5c301bb63a9ff

          SHA512

          4f1245ff1b5689e277aa098519ae77087b3e9298b70bc41e9ef1fcbb46fa9ab970a4df5bcd737d9463373f8940c69a32ee19d9befda35dd67fb46922c36cc11b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          7a8e9d0580313f45a4f6e1634ac39dbe

          SHA1

          160283848f0c829dc65e1033de9be7a1273f3451

          SHA256

          c07e6748bdfa8aba4ca67c90fffe8bd63eeb6a406d3c05cef60453f4f3be2e9e

          SHA512

          b240ebf4d950fcdb792e5deeb10a6296b450c69a1bb95d1b6c579f5203a66fe9f2498595daa3e0f2603f76d8116f7c0b59a76b4f65180710ded88d2b8c68d9cf

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0e5ff20d81166fd83d9d10afd4788256

          SHA1

          d1d7b93bf70e4b73c9e34862d3399c0aa19a2a1d

          SHA256

          2d3fb9bf6664704c12ffa4469e41bf39bfeb7d96e47bd803ec6b48ed8b8cb1e4

          SHA512

          aa048859d376006c8a968bab84348e08c3c96ab6e21bdcaa9c6899b9953f94590118afb7fcd2a4ba6fa310fdc33e32ef706703f4dfcb381fbc2db155c2b5bd5a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          07fad1008f4dbc821ad786d9f4aaf49b

          SHA1

          fb40c5dccbd5716f1146d7413e0ab403435c61d4

          SHA256

          2b34f5397c312d1d369e3ee456b93b70fa6ef5f11bd8a6f8d12f517447397bba

          SHA512

          dad455c02dd3dde49cbd177b1ba7809c733480ac6c441f324ef09e2bf7c04f344d8eca12d463aca15c05840e9f11febf2b6e8ba968255115441d812e3ead2fc1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f4de26ef17c07233509efd3cda55bbbc

          SHA1

          c1f0548835376ec51c2102b773ba035e1888cccf

          SHA256

          45bd7c90e02bc89817d8fbd9f91799417ed40b769e08b61996d34539e926f65b

          SHA512

          05649d5377b28565e28c389042b9b8fca4677eccf1e65a236778f671003debd134516d00b087879ca4e0bee914f587026748b6017b92cb968e812e356816a140

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6676ef2e39b4d3e33763e36e5ffca7ee

          SHA1

          cc0d099ed3d74d9f5bb0fabca3eab886d368c1f7

          SHA256

          3f315d883f0cd2f8db639faaca7d800e1c30b95fd4d7a96db199aa5822a142f1

          SHA512

          a2da5a61f51b4de9ba653a259664e579404d9b0fa17b0600ab2f6ec8f892fed29d0f8cd862f7ff4d25d739ef0644262057283729390a76fd67c42824384cb24b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          06c97b3e95baa2734b25c6fdf85fabcc

          SHA1

          68924a566ab9ba17fbac68df7da29eb9e5ca0679

          SHA256

          d2ad69d4c450c23ca739ade2a632459a193fe3d39ade03402d843dc23bce783f

          SHA512

          f2d3f12d87ac4e97270e1232e4ba9a3f6236822353d32a8bff0e04a1f924e85a65482955c26e04de62c3beef3fde122b95a0a807029c8581672902fa48044e70

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          755b842246f964b550200c7639631907

          SHA1

          f50d996d1226a7d5473171a103132091432e0e73

          SHA256

          e46ca82508a86f8b3b86a6b01a00c83e8d4d3c12635735ff4e344cfc0f4d253b

          SHA512

          5a71edff97853288261fc6cbf877ffaae060378c89d14bd2197df3fdc274d805ba485fda8e789942e85c61fb45c75571fdc79dbe5a92c7ae8b37faecb1d1d6dc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5149dc4a3e02ee173f5656dc08d14249

          SHA1

          7ebb85eee4e94b7e864d5918431d1483c61a8ebf

          SHA256

          f5ffade0d0de442a8ea46c3fc04610b0b51505d1ba861d4b6be55e20e3ff5604

          SHA512

          7d14dd37fc8c14a3409510fb6bf133a8b4bcc8fefefeb583ac37b17f5fa9856032c3e1e99b6b16f83f2f7f190336ba5a3d85e80edb4c9dc0c34d3b0a5e5ba29b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          562577bb12e2cdb36fb57c45109394c2

          SHA1

          92e45775eb19f94aed173df0213d2ec83858dfb8

          SHA256

          1566458e952c183948dffe4779c2335ea2c7157f5062b714b62e734670d3a77a

          SHA512

          4f8c7448e79590923a3b82fc9060e757a447d1f0bddc128b7354adb33c740b5394984bfef4001250a7459f6397a67666d23487d0d8c9dfdc93c095ec236e8acd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e771b81092e1fce135c52486b31fed97

          SHA1

          85e597b339b42e1dec435cafc7cb866edeea513b

          SHA256

          bbc544b3aded94667c7b7e87c76e70fcdeb2b118535b8407c3a63e8fa423fb7d

          SHA512

          ae686148ee9258d80ae93d14f43078f407e04b28f389d64f306814797ceefbe9d266b51d41ad5894d4e8e792227f7e6899b4d21364223bd7ad89e7958ad5ca99

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2e1e0654f1a645dd162966676b900cc4

          SHA1

          5358b289b83159270b2c9144eb888c3e8d7f6863

          SHA256

          e1b778da56d3136dbf52a34388e8862365dc5fc974b231a2ad6b20a16b472abd

          SHA512

          3d3340e33dde3af99e0a00ee85e9733349c80eb4001474f8b54be97612c2f4d36546d934fe35b3c1d4b001d25cf00a1c52e6bf98f241c055cb800b898f4c1ba6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          bccdb0df575f3d134e2a58b6e4bfdf1f

          SHA1

          bb7a5e2f697717d53f15f4ff572245e8297b387f

          SHA256

          a3f9bd479aa75adaca5a73fca18798cc22da64e697d57cd2e2ea9f566a587b09

          SHA512

          fb6c176a32e9a9eb10aed6517f15cffdd5eca6c889fd2dcb2aeb16e3698ddc2a0bff955d6993f3ffdc52bc59c7f5a74b850365386d2427a3eea1879518e2bb3c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b01ae5dd26c987409b96707b85758626

          SHA1

          516e7a0a7517c13dbd476311280f4e5cc9318b49

          SHA256

          305a6054946fe903cd432b8f182b773975d28270805ef1dc4964894b9dff112b

          SHA512

          58e5e5726ed0647985fa1e3c27502d8be6440c962351d847c08d4caac8c81b50f1aced4cb63cd667a5c4bd0f06ea2e21afa4286941f87b2dcc2dcaf25d740158

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          327326f2ec34be21a240260784f341fe

          SHA1

          f2d1c4737f97ab14143af923767f710ec97dd217

          SHA256

          257d58fb9c07afbf3ad8504d5a876a6fc0eff5d462f572c225213f47b3519e7b

          SHA512

          c9cf652fd1fa7d5ce933e9f316b04920fabdd1e40e8680ec6bb24d2cf50f69a0c451c58715cb3a39abf2de1a8959269b460d3f095169cfcb54aba2ad919f04f4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c27d0fa75fff9b881822692ccfdbe17b

          SHA1

          d9141c49d28262b9834f26725d263dc9514d7dff

          SHA256

          a39bde869bc100d54fc63afd88755407bfa5215e48ca14e08beb59877508382b

          SHA512

          ae2d39003795116becc5aebc55ed3a4ad751316cfd0c1157b4c159b74f2641623e6e159caff8afc5b9ef6a72bd9180f1f8318fc6d4f228d85fe16850dfe199da

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f89adf20f6a324822403566bac70a3b0

          SHA1

          85229b0c3d28a2b37fae2af2c38c3d84183fe772

          SHA256

          3a83865e82a39235b01da1f9046f4cbb0364274835ed9d76bc2b63553cbeb1d8

          SHA512

          fe85ae0a6e97e811ef0fce4646b8188a6d7ab33c6ce275b4b2a68aac2cf61c5c051ebb94c20e25ebf2a291bd3f4c00182e1548ad0bb482df205280408eb531d8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          9e91a17b3cde992a09e62f344b6b72bc

          SHA1

          160c06f296c41cec886b8b59ada22ed4fdc7a4bc

          SHA256

          b764afab60e65b3f4290959b015ee7491fe059e0bd3e5466f48ac8b7bab5f87f

          SHA512

          6951b7ec0fe7c7f02b642db4e1e02fe35896c077d067d78b2e11991fd0ebc34c285774261dae7cf342dfd9a4ea1558fc899cfdd563c6779fc62ea4da6aef1f4a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8ce27bf31dcae13ba3792b04bdebbb73

          SHA1

          89d96238c82c570f5fc1ab43164bd206559619b0

          SHA256

          cab663f0cd7c7df673baf750cc87307acb458ae0a5f02b15f1cbdb5c66fc97b7

          SHA512

          9b4846587bff6e06c987db2228c26547ff09563b8459416416a85d7524f293bb43632efd4c04d5336c445f98082f42503970d8b8355173591a155bffce7ee62f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          9189e83dcadcd39d527a49f007c4d1db

          SHA1

          eace05ed818f968c917ebfa06a3fc003013a859e

          SHA256

          63ecc6d7446070bea5e4bd41bfc531cfc38e26bba48deba9271a684ea91acd7c

          SHA512

          533c853161a21ba67457dbe96547f55ccb6a84166759601cfe60e5eda8340791d76355b7a6c4ce10066e6e24ea7f3a0635596139df146781af53713d5076b59b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          bad6e95a5a01aef9630068f4f7e2a1df

          SHA1

          5569c9ac409bcd771483111c7278a73a30d4133e

          SHA256

          f75f557361cea83bb98c23699f715a83c7cd57a440141cb014267f81d9eef8a1

          SHA512

          d578f7d8c98f2ae071b042d868103819855c8a3eabc85a52aecdc93db351456144daa267a85ab2e86030f80ead4e33b353e110ec961a917db3fcc4c7b3c54f87

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b3388f0bd079391437c0145e0d8ad959

          SHA1

          d08d5a505971ca59ac47ab6076c272df9fcbaf29

          SHA256

          750846fe216c1af24f2ff4dc4634a8f53989d4c418609dabd65e8888fdecab40

          SHA512

          f603b74471708433f9415c308df23df86ec41bc3b8fbb587664167f46c970b9fce4b59e12c02c685e2e430a4c0a36aff81877ab08207abc8279c801cccf3afa0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0105a10c3a16db72001433f1f644dcf2

          SHA1

          dd5e4a825508af9048438eef145bd69c9f6dd78d

          SHA256

          1ecb4bcd43c87f4fa44e5fb68fce6ceb564314faad891b352445703f38b72f5a

          SHA512

          7abcaf2fe70768a8b572f1df5bdf09055db7a5966dff067aaf3d4e5549e7a81fc7c2f0b42a0f61bd099551ba03b3079c63175b547d4d56d850966d40229d499a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          de8afa8500d29d85cddf3f4371ed2657

          SHA1

          941345e34b4bcbec8e83babba18a1dd03b399165

          SHA256

          5f58a6c8621a69fb17d7d6e21c90d6124d1b53b95fdb960c1653c0b38aaeea74

          SHA512

          bb3a2cc3fa99502ecabb15aacd2487782f274cec8e310e28933b3cae2c9539884f18ebd9678527ede1a0f1342bcc588a7dd5be7d81a813e24e81d52f657cc370

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d09073f9758f156c4fd794ae0708c852

          SHA1

          71fdd52b64fa8485887d2f53ca1459f9b9a31251

          SHA256

          532991b244de0a113a10791c9f8698e7435eb9a32ece813aad3ee99d4db3f33e

          SHA512

          374cf0d816efc61f115af8d432da6ae55a8d40649d2b0650e829b99760cf45fce2f2dd76408876ce37cfb56203d30714d3f875fbe33840aa5bfd80e38520ae57

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          15cebb8c4329b146a388dfd644f060a7

          SHA1

          941de75e29039794b3cee49d7375c3e8d125c40d

          SHA256

          9148d7986280df2d5ec4d663f5260210fc4e0d0c9006dc26dc08c6d96fbceb95

          SHA512

          110cd7b8053233d3f80442516f52a9ef80522f775f53e79bb590c6c9b641f5f6a65f46542619483b0cc94bb3802ff543cc1f3dc938151f0159ab04b85074484c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          9806db3bbd0e2640972b5bddcb73ff8b

          SHA1

          221e4d98e16d485c5b9afa8fed0d5b2761bdb7d8

          SHA256

          20bed0d3e44576f37a2b3ee92fe8ed81d4b101f76da9482e8fe5e73113f44773

          SHA512

          56e060544e8dc32e6d86e8cc29b04b35434f08a36c8e66d9391468beb45ed399432536e3390fbe9536f95614db2840e3bcb6efb98bc0eaee995277c7dce167f8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          42b65b2fd26b7662056b197f7aaae516

          SHA1

          acbf1b143cd747d43ce77cd44a2e6af54cf7d557

          SHA256

          2a360a3f67b228d3a947f30b0afbbe6cf0ffd56852082e88c25b39d6d9b717e4

          SHA512

          31a761c19e8fc0f2c6744a52ed3df76d0e8e2c1420b7d9232203486e3e4b244b2d28f2722bc70bf0d2dce9a9bfe4e195e78b4e0c78a0a9e8605559dbb9d0502d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0f9a54183580618519cd006623d3e244

          SHA1

          92e1c073ed6342abd6746786031f5f595fd3a6ab

          SHA256

          ff69f6242d1f5390767b87afaf25577badae347d5cc6e30abd8914fdac596f75

          SHA512

          ed084e5d212f9398ae25941bbe6a9ede7c73d26eecec1eec34bbde25c513a7131cd347a92c3a8e6008b308d31632f6f6782d04ef38c63b059a8eb8132b6ee0d8

        • C:\Users\Admin\AppData\Local\BlueStacksSetup\BlueStacksMicroInstaller5.14.22.1003_native_dae242b5419cf3ab502c9629c45a19d5.exe

          Filesize

          900KB

          MD5

          4611f5bcd1dce6d2d0e0bfafdbc70c84

          SHA1

          5f22f6540e4ce5f2c6e5b9bb1d2f1af8f5779128

          SHA256

          71c0651f04787a0b9d1c997b5026cc388f798e608c6049d44daea58669a3eba2

          SHA512

          a62165ae66a6e21da73da7a31285a1f901495c192be729ec249b278cd6b3093107f4ea315ea82d572d72755e30b77b8ce87a515e14a57fc22a4c86466bddffd3

        • C:\Users\Admin\AppData\Local\Bluestacks\Logs.log

          Filesize

          785B

          MD5

          c444ef1029f6fbee504d6892318dec98

          SHA1

          b4dce978dceb8c1d9f7366834360d9b25e9eb5b9

          SHA256

          f4eb5541b1c4cb2a14e41878e3b7cde5037fdd9d2d1a56035f494356d44e2aba

          SHA512

          15f7ee69b8840b0cd1f63c699361f1bfc0d6744df79dbc76a4a1d9ff7ff37a5d551e91b747655750ac2254f0388a56dd41387dd9816dd3bee554c56d6097702d

        • C:\Users\Admin\AppData\Local\Temp\7zS0DB91376\Assets\error_icon_72.png

          Filesize

          1KB

          MD5

          4aaf83d2b3fd56ad806708e60474df39

          SHA1

          144777a265879b69fadea3eb3ac6939458918578

          SHA256

          84e59d14d9433e6c3d92daeb8c443063b5e3be6c0b297f0403dbde473a05cb3f

          SHA512

          3b8485f054fe6ed2374bc81cb1786f09741219fbfcb22503707b11cf5db1ab262ba4349633597d5d9ddabc3415b170fa8eebc932f58d211d7092b8fb96fa1304

        • C:\Users\Admin\AppData\Local\Temp\7zS0DB91376\Assets\exit_close.png

          Filesize

          670B

          MD5

          26eb04b9e0105a7b121ea9c6601bbf2a

          SHA1

          efc08370d90c8173df8d8c4b122d2bb64c07ccd8

          SHA256

          7aaef329ba9fa052791d1a09f127551289641ea743baba171de55faa30ec1157

          SHA512

          9df3c723314d11a6b4ce0577eb61488061f2f96a9746a944eb6a4ee8c0c4d29131231a1b20988ef5454b79f9475b43d62c710839ecc0a9c98324f977cab6db68

        • C:\Users\Admin\AppData\Local\Temp\7zS0DB91376\Assets\link.png

          Filesize

          306B

          MD5

          ae2c73ee43d722c327c7fb6fdbee905c

          SHA1

          96f238bf53ac80f5b7a9ad6ef2531e8e3f274628

          SHA256

          28c0abc6bfe7a155815104883a37a53dd783d142300471064c95eddf3cae0eaf

          SHA512

          5a1e341f727cf1cb4832cced8e96c5a74971451629603c48bfb91ceb4561d0122ab9ae701f8b34681d5f13115a384467d430ccb8282494b40f4577ebc3ad825b

        • C:\Users\Admin\AppData\Local\Temp\7zS0DB91376\Assets\loader.png

          Filesize

          279B

          MD5

          03903fd42ed2ee3cb014f0f3b410bcb4

          SHA1

          762a95240607fe8a304867a46bc2d677f494f5c2

          SHA256

          076263cc65f9824f4f82eb6beaa594d1df90218a2ee21664cf209181557e04b1

          SHA512

          8b0e717268590e5287c07598a06d89220c5e9a33cd1c29c55f8720321f4b3efc869d20c61fcc892e13188d77f0fdc4c73a2ee6dece174bf876fcc3a6c5683857

        • C:\Users\Admin\AppData\Local\Temp\7zS0DB91376\Assets\minimize_progress.png

          Filesize

          212B

          MD5

          1504b80f2a6f2d3fefc305da54a2a6c2

          SHA1

          432a9d89ebc2f693836d3c2f0743ea5d2077848d

          SHA256

          2f62d4e8c643051093f907058dddc78cc525147d9c4f4a0d78b4d0e5c90979f6

          SHA512

          675db04baf3199c8d94af30a1f1c252830a56a90f633c3a72aa9841738b04242902a5e7c56dd792626338e8b7eabc1f359514bb3a2e62bc36c16919e196cfd94

        • C:\Users\Admin\AppData\Local\Temp\7zS0DB91376\BlueStacksInstaller.exe.config

          Filesize

          324B

          MD5

          1b456d88546e29f4f007cd0bf1025703

          SHA1

          e5c444fcfe5baf2ef71c1813afc3f2c1100cab86

          SHA256

          d6d316584b63bb0d670a42f88b8f84e0de0db4275f1a342084dc383ebeb278eb

          SHA512

          c545e416c841b8786e4589fc9ca2b732b16cdd759813ec03f558332f2436f165ec1ad2fbc65012b5709fa19ff1e8396639c17bfad150cabeb51328a39ea556e6

        • C:\Users\Admin\AppData\Local\Temp\7zS0DB91376\HD-CheckCpu.exe

          Filesize

          200KB

          MD5

          81234fd9895897b8d1f5e6772a1b38d0

          SHA1

          80b2fec4a85ed90c4db2f09b63bd8f37038db0d3

          SHA256

          2e14887f3432b4a313442247fc669f891dbdad7ef1a2d371466a2afa88074a4c

          SHA512

          4c924d6524dc2c7d834bfc1a0d98b21753a7bf1e94b1c2c6650f755e6f265512d3a963bc7bc745351f79f547add57c37e29ba9270707edbf62b60df3a541bc16

        • C:\Users\Admin\AppData\Local\Temp\7zS0DB91376\JSON.dll

          Filesize

          411KB

          MD5

          f5fd966e29f5c359f78cb61a571d1be4

          SHA1

          a55e7ed593b4bc7a77586da0f1223cfd9d51a233

          SHA256

          d2c8d26f95f55431e632c8581154db7c19547b656380e051194a9d2583dd2156

          SHA512

          d99e6fe250bb106257f86135938635f6e7ad689b2c11a96bb274f4c4c5e9a85cfacba40122dbc953f77b5d33d886c6af30bff821f10945e15b21a24b66f6c8be

        • C:\Users\Admin\AppData\Local\Temp\7zS0DB91376\Locales\i18n.en-US.txt

          Filesize

          19KB

          MD5

          206562eed57e938afe21fc6942fa8e59

          SHA1

          779e90fec866c0fd2f47da020651db71c89ec3dd

          SHA256

          27d611a71edf36307a7ed0651f6c5910292ac7e2b68074a7e33d306b3d93ec45

          SHA512

          275c3192a7aee28fad31beb521cf5e7c66010e7562ce244ba9fc4de352f35b4ab63180ed12a56ea0b1458c185e076e2d07ba6d8797467177d3c5b2ac14371b26

        • C:\Users\Admin\AppData\Local\Temp\7zS0DB91376\ThemeFile

          Filesize

          80KB

          MD5

          c3e6bab4f92ee40b9453821136878993

          SHA1

          94493a6b3dfb3135e5775b7d3be227659856fbc4

          SHA256

          de1a2e6b560e036da5ea6b042e29e81a5bfcf67dde89670c332fc5199e811ba6

          SHA512

          a64b6b06b3a0f3591892b60e59699682700f4018b898efe55d6bd5fb417965a55027671c58092d1eb7e21c2dbac42bc68dfb8c70468d98bed45a8cff0e945895

        • C:\Users\Admin\AppData\Local\Temp\7zSC23C23B6\Assets\backicon.png

          Filesize

          15KB

          MD5

          7ff5dc8270b5fa7ef6c4a1420bd67a7f

          SHA1

          b224300372feaa97d882ca2552b227c0f2ef4e3e

          SHA256

          fa64884054171515e97b78aaa1aad1ec5baa9d1daf9c682e0b3fb4a41a9cb1c1

          SHA512

          f0d5a842a01b99f189f3d46ab59d2c388a974951b042b25bbce54a15f5a3f386984d19cfca22ba1440eebd79260066a37dfeff6cb0d1332fca136add14488eef

        • C:\Users\Admin\AppData\Local\Temp\7zSC23C23B6\Assets\close_red.png

          Filesize

          15KB

          MD5

          93216b2f9d66d423b3e1311c0573332d

          SHA1

          5efaebec5f20f91f164f80d1e36f98c9ddaff805

          SHA256

          d0b6d143642d356b40c47459a996131a344cade6bb86158f1b74693426b09bfb

          SHA512

          922a7292de627c5e637818556d25d9842a88e89f2b198885835925679500dfd44a1e25ce79e521e63c4f84a6b0bd6bf98e46143ad8cee80ecdbaf3d3bc0f3a32

        • C:\Users\Admin\AppData\Local\Temp\7zSC23C23B6\Assets\custom.png

          Filesize

          17KB

          MD5

          03b17f0b1c067826b0fcc6746cced2cb

          SHA1

          e07e4434e10df4d6c81b55fceb6eca2281362477

          SHA256

          fbece8bb5f4dfa55dcfbf41151b10608af807b9477e99acf0940954a11e68f7b

          SHA512

          67c78ec01e20e9c8d9cdbba665bb2fd2bb150356f30b88d3d400bbdb0ae92010f5d7bcb683dcf6f895722a9151d8e669d8bef913eb6e728ba56bb02f264573b2

        • C:\Users\Admin\AppData\Local\Temp\7zSC23C23B6\Assets\installer_bg.jpg

          Filesize

          78KB

          MD5

          3478e24ba1dd52c80a0ff0d43828b6b5

          SHA1

          b5b13bbf3fb645efb81d3562296599e76a2abac0

          SHA256

          4c7471c986e16de0cd451be27d4b3171e595fe2916b4b3bf7ca52df6ec368904

          SHA512

          5c8c9cc76d6dbc7ce482d0d1b6c2f3d48a7a510cd9ed01c191328763e1bccb56daeb3d18c33a9b10ac7c9780127007aa13799fa82d838de27fbe0a02ad98119d

        • C:\Users\Admin\AppData\Local\Temp\7zSC23C23B6\Assets\installer_logo.png

          Filesize

          14KB

          MD5

          e33432b5d6dafb8b58f161cf38b8f177

          SHA1

          d7f520887ce1bfa0a1abd49c5a7b215c24cbbf6a

          SHA256

          9f3104493216c1fa114ff935d23e3e41c7c3511792a30b10a40b507936c0d183

          SHA512

          520dc99f3176117ebc28da5ef5439b132486ef67d02fa17f28b7eab0c59db0fa99566e44c0ca7bb75c9e7bd5244e4a23d87611a55c841c6f9c9776e457fb1cbf

        • C:\Users\Admin\AppData\Local\Temp\7zSC23C23B6\Assets\installer_minimize.png

          Filesize

          113B

          MD5

          38b539a1e4229738e5c196eedb4eb225

          SHA1

          f027b08dce77c47aaed75a28a2fce218ff8c936c

          SHA256

          a064f417e3c2b8f3121a14bbded268b2cdf635706880b7006f931de31476bbc2

          SHA512

          2ce433689a94fae454ef65e0e9ec33657b89718bbb5a038bf32950f6d68722803922f3a427278bad432395a1716523e589463fcce4279dc2a895fd77434821cc

        • C:\Users\Admin\AppData\Local\Temp\7zSC23C23B6\Assets\setpath.png

          Filesize

          15KB

          MD5

          b2e7f40179744c74fded932e829cb12a

          SHA1

          a0059ab8158a497d2cf583a292b13f87326ec3f0

          SHA256

          5bbb2f41f9f3a805986c3c88a639bcc22d90067d4b8de9f1e21e3cf9e5c1766b

          SHA512

          b95b7ebdb4a74639276eaa5c055fd8d9431e2f58a5f7c57303f7cf22e8b599f6f2a7852074cf71b19b49eb31cc9bf2509aedf41d608981d116e49a00030c797c

        • C:\Users\Admin\AppData\Local\Temp\7zSC23C23B6\Assets\unchecked_gray.png

          Filesize

          192B

          MD5

          e50df2a0768f7fc4c3fe8d784564fea3

          SHA1

          d1fc4db50fe8e534019eb7ce70a61fd4c954621a

          SHA256

          671f26795b12008fbea1943143f660095f3dca5d925f67d765e2352fd7ee2396

          SHA512

          c87a8308a73b17cbdd179737631fb1ba7fdaeb65e82263f6617727519b70a81266bb695867b9e599c1306ee2cf0de525452f77ce367ca89bf870ea3ae7189998

        • C:\Users\Admin\AppData\Local\Temp\7zSC23C23B6\Locales\i18n.en-US.txt

          Filesize

          18KB

          MD5

          bc0bfbf0fa8b40c2f72957c2f57afb8f

          SHA1

          644765340a713413e159ff57f0098501ca8304f4

          SHA256

          819b673bc98a9aefa9e480b3df2a5f9558033fce38c2a2f5be08d10b9a859e28

          SHA512

          6e7e88ac28190011c1e1e2a78517e3bb858e35ac90f125882c64bfa26d5a6f7ee6718c558b9446f3aeead0a8fc53c825fca66ad2f6d82819ede19b88ff658e3f

        • C:\Users\Admin\AppData\Local\Temp\Cab6C3D.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\Tar6C8E.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

        • \Users\Admin\AppData\Local\Temp\7zS0DB91376\BlueStacksInstaller.exe

          Filesize

          623KB

          MD5

          c8ec5e0af9329936df1fb6382f092687

          SHA1

          fc8a59149198e5acef2ca6a51f01d1e3ff0f50fe

          SHA256

          7b3fcbf635508cde1dd74e41b3914f5b85bdb8de1bcece745ac6a05ddfde63da

          SHA512

          1bd43948428d964b94befe7e2b9cd74e0cb5d6af76f5adb166323510b2f775ae479e781df104222197ac5e04e83e885cf6a5ec65c7bb3c5aebd45dead24439cf

        • \Users\Admin\AppData\Local\Temp\7zSC23C23B6\BlueStacksInstaller.exe

          Filesize

          607KB

          MD5

          1744edd4e585a5efbd49ad0593810af1

          SHA1

          57dbda1bac0b48803933da6940c3b88376774c69

          SHA256

          3b136c884fb6e21acfcca33538f9b2e472f0eb83ae9a5a128cb1d5a6098b7f31

          SHA512

          f7690f5cbb08f2b7f801aecb24c826dee1fc08cd9d324b54359ab258be92577e72dcbab146bc4f55ab58dee0a01ff32070ef0f4a58385ba928f3f01bfe15d018

        • memory/2692-1080-0x0000000000290000-0x00000000002F8000-memory.dmp

          Filesize

          416KB

        • memory/2692-1172-0x0000000000320000-0x000000000032A000-memory.dmp

          Filesize

          40KB

        • memory/2692-1077-0x00000000008D0000-0x000000000096A000-memory.dmp

          Filesize

          616KB

        • memory/2752-835-0x000007FEF5410000-0x000007FEF5DFC000-memory.dmp

          Filesize

          9.9MB

        • memory/2752-126-0x000007FEF5410000-0x000007FEF5DFC000-memory.dmp

          Filesize

          9.9MB

        • memory/2752-836-0x0000000000430000-0x000000000043A000-memory.dmp

          Filesize

          40KB

        • memory/2752-185-0x0000000000430000-0x000000000043A000-memory.dmp

          Filesize

          40KB

        • memory/2752-184-0x0000000000430000-0x000000000043A000-memory.dmp

          Filesize

          40KB

        • memory/2752-1391-0x000007FEF5410000-0x000007FEF5DFC000-memory.dmp

          Filesize

          9.9MB

        • memory/2752-125-0x0000000000460000-0x00000000004C8000-memory.dmp

          Filesize

          416KB

        • memory/2752-123-0x0000000000F50000-0x0000000000FEE000-memory.dmp

          Filesize

          632KB

        • memory/2752-121-0x000007FEF5413000-0x000007FEF5414000-memory.dmp

          Filesize

          4KB

        • memory/2752-834-0x000007FEF5413000-0x000007FEF5414000-memory.dmp

          Filesize

          4KB