Analysis

  • max time kernel
    928s
  • max time network
    911s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240611-en
  • resource tags

    arch:x64arch:x86image:win11-20240611-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    24/06/2024, 01:48

General

  • Target

    BlueStacks10Installer_10.41.212.1013_native_d5d03cd464e4589377b3c219d000d010_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe

  • Size

    910KB

  • MD5

    f81719092d3de67dbb703c4d7de0b4bc

  • SHA1

    7591f7ed9e61f921df2bcd961aabd2bc92911d0b

  • SHA256

    497fb57d6d983b1189b91486e5a4f1898753d8d4d086093913a426bbd9a7a9f6

  • SHA512

    e51cc252be15cd58788319777782577b3a8ce61eaa4b871d6a1f82e6c5178829b53fee814398714b42136d1fd462522fafbd0cc28b712e83afa41f62245219fb

  • SSDEEP

    24576:wivtCXWeGK29Txt9Okc/EFcjboQWhwil/cji:1tCXWPTvz5c/gcfohail/cji

Malware Config

Signatures

  • Stops running service(s) 4 TTPs
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Downloads MZ/PE file
  • Modifies Windows Firewall 2 TTPs 8 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Executes dropped EXE 32 IoCs
  • Launches sc.exe 1 IoCs

    Sc.exe is a Windows utlilty to control services on the system.

  • Loads dropped DLL 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Event Triggered Execution: Netsh Helper DLL 1 TTPs 24 IoCs

    Netsh.exe (also referred to as Netshell) is a command-line scripting utility used to interact with the network configuration of a system.

  • Checks processor information in registry 2 TTPs 6 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 6 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 6 IoCs
  • NTFS ADS 1 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 56 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: LoadsDriver 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 30 IoCs
  • Suspicious behavior: RenamesItself 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of SetWindowsHookEx 9 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\BlueStacks10Installer_10.41.212.1013_native_d5d03cd464e4589377b3c219d000d010_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe
    "C:\Users\Admin\AppData\Local\Temp\BlueStacks10Installer_10.41.212.1013_native_d5d03cd464e4589377b3c219d000d010_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:400
    • C:\Users\Admin\AppData\Local\Temp\7zS091D0D57\BlueStacksInstaller.exe
      "C:\Users\Admin\AppData\Local\Temp\7zS091D0D57\BlueStacksInstaller.exe"
      2⤵
      • Executes dropped EXE
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: RenamesItself
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:2288
      • C:\Users\Admin\AppData\Local\Temp\7zS091D0D57\HD-CheckCpu.exe
        "C:\Users\Admin\AppData\Local\Temp\7zS091D0D57\HD-CheckCpu.exe" --cmd checkHypervEnabled
        3⤵
        • Executes dropped EXE
        PID:2384
      • C:\Users\Admin\AppData\Local\Temp\7zS091D0D57\HD-CheckCpu.exe
        "C:\Users\Admin\AppData\Local\Temp\7zS091D0D57\HD-CheckCpu.exe" --cmd checkSSE4
        3⤵
        • Executes dropped EXE
        PID:3104
      • C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.212.1027_nxt.exe
        "C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.212.1027_nxt.exe" -s
        3⤵
        • Drops file in Program Files directory
        • Executes dropped EXE
        • Loads dropped DLL
        • Modifies registry class
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:2132
        • C:\Windows\SysWOW64\WScript.exe
          "C:\Windows\System32\WScript.exe" "C:\Program Files (x86)\BlueStacks X\green.vbs"
          4⤵
          • Suspicious use of WriteProcessMemory
          PID:232
          • C:\Windows\SysWOW64\cmd.exe
            "C:\Windows\System32\cmd.exe" /c green.bat
            5⤵
            • Suspicious use of WriteProcessMemory
            PID:5608
            • C:\Windows\SysWOW64\netsh.exe
              netsh advfirewall firewall delete rule name="BlueStacksWeb"
              6⤵
              • Modifies Windows Firewall
              • Event Triggered Execution: Netsh Helper DLL
              PID:3404
            • C:\Windows\SysWOW64\netsh.exe
              netsh advfirewall firewall delete rule name="Cloud Game"
              6⤵
              • Modifies Windows Firewall
              • Event Triggered Execution: Netsh Helper DLL
              PID:676
            • C:\Windows\SysWOW64\netsh.exe
              netsh advfirewall firewall add rule name="BlueStacksWeb" dir=in action=allow program="C:\Program Files (x86)\BlueStacks X\BlueStacksWeb.exe"
              6⤵
              • Modifies Windows Firewall
              • Event Triggered Execution: Netsh Helper DLL
              PID:5508
            • C:\Windows\SysWOW64\netsh.exe
              netsh advfirewall firewall add rule name="Cloud Game" dir=in action=allow program="C:\Program Files (x86)\BlueStacks X\Cloud Game.exe"
              6⤵
              • Modifies Windows Firewall
              • Event Triggered Execution: Netsh Helper DLL
              PID:916
      • C:\Users\Admin\AppData\Local\BlueStacksSetup\BlueStacks10Installer_10.41.212.1013_native_d5d03cd464e4589377b3c219d000d010_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe
        "C:\Users\Admin\AppData\Local\BlueStacksSetup\BlueStacks10Installer_10.41.212.1013_native_d5d03cd464e4589377b3c219d000d010_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe" -versionMachineID=219b7d3a-800b-46ff-8891-46c24b676ece -machineID=d00780de-1dbe-40fb-8369-550445549a6a -pddir="C:\ProgramData\BlueStacks_nxt" -defaultImageName=Pie64 -imageToLaunch=Pie64 -isSSE4Available=1 -appToLaunch=bsx -bsxVersion=10.41.212.1013 -country=GB -skipBinaryShortcuts -isWalletFeatureEnabled -isNewMachineIdCreated
        3⤵
        • Suspicious use of WriteProcessMemory
        PID:5200
        • C:\Users\Admin\AppData\Local\Temp\7zS054251A9\BlueStacksInstaller.exe
          "C:\Users\Admin\AppData\Local\Temp\7zS054251A9\BlueStacksInstaller.exe" -versionMachineID=219b7d3a-800b-46ff-8891-46c24b676ece -machineID=d00780de-1dbe-40fb-8369-550445549a6a -pddir="C:\ProgramData\BlueStacks_nxt" -defaultImageName=Pie64 -imageToLaunch=Pie64 -isSSE4Available=1 -appToLaunch=bsx -bsxVersion=10.41.212.1013 -country=GB -skipBinaryShortcuts -isWalletFeatureEnabled -isNewMachineIdCreated
          4⤵
          • Executes dropped EXE
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of WriteProcessMemory
          PID:5592
          • C:\Users\Admin\AppData\Local\Temp\7zS054251A9\HD-CheckCpu.exe
            "C:\Users\Admin\AppData\Local\Temp\7zS054251A9\HD-CheckCpu.exe" --cmd checkHypervEnabled
            5⤵
            • Executes dropped EXE
            PID:8552
  • C:\Program Files (x86)\BlueStacks X\BlueStacks X.exe
    "C:\Program Files (x86)\BlueStacks X\BlueStacks X.exe"
    1⤵
    • Executes dropped EXE
    • Checks processor information in registry
    • Modifies registry class
    • Modifies system certificate store
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:6180
    • C:\Program Files (x86)\BlueStacks X\BlueStacksWeb.exe
      BlueStacksWeb.exe --type=renderer --disable-speech-api --enable-threaded-compositing --enable-features=AllowContentInitiatedDataUrlNavigations,NetworkServiceInProcess,TracingServiceInProcess --disable-features=BackgroundFetch,ConsolidatedMovementXY,DnsOverHttpsUpgrade,InstalledApp,MojoVideoCapture,PictureInPicture,SmsReceiver,UseSkiaRenderer,WebPayments,WebUSB --lang=en --webengine-schemes=qrc:sLV --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=3 --mojo-platform-channel-handle=3724 /prefetch:1
      2⤵
      • Executes dropped EXE
      • Suspicious behavior: EnumeratesProcesses
      PID:6940
    • C:\Program Files (x86)\BlueStacks X\BlueStacksWeb.exe
      BlueStacksWeb.exe --type=renderer --disable-speech-api --enable-threaded-compositing --enable-features=AllowContentInitiatedDataUrlNavigations,NetworkServiceInProcess,TracingServiceInProcess --disable-features=BackgroundFetch,ConsolidatedMovementXY,DnsOverHttpsUpgrade,InstalledApp,MojoVideoCapture,PictureInPicture,SmsReceiver,UseSkiaRenderer,WebPayments,WebUSB --lang=en --webengine-schemes=qrc:sLV --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=3812 /prefetch:1
      2⤵
      • Executes dropped EXE
      • Suspicious behavior: EnumeratesProcesses
      PID:6964
    • C:\Program Files (x86)\BlueStacks X\7z.exe
      "C:\Program Files (x86)\BlueStacks X\7z.exe" x "C:/Users/Admin/Downloads/Fortnite Installer_5.3.0_APKPure.apk" AndroidManifest.xml "-oC:/Users/Admin/AppData/Local/BlueStacks X/cache/ApkParser"
      2⤵
      • Executes dropped EXE
      PID:6592
    • C:\Users\Admin\AppData\Local\BlueStacks X\BlueStacks-Installer_5.21.212.1027_amd64_native.exe
      "C:\Users\Admin\AppData\Local\BlueStacks X\BlueStacks-Installer_5.21.212.1027_amd64_native.exe" -s -defaultImageName Pie64 -imageToLaunch Pie64 -skipBinaryShortcuts -appToLaunch=bsx
      2⤵
      • Executes dropped EXE
      PID:6012
      • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\Bootstrapper.exe
        "C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\Bootstrapper.exe" -s -defaultImageName Pie64 -imageToLaunch Pie64 -skipBinaryShortcuts -appToLaunch=bsx
        3⤵
        • Executes dropped EXE
        • Suspicious behavior: EnumeratesProcesses
        PID:4760
        • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\BlueStacksInstaller.exe
          "C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\BlueStacksInstaller.exe" -s -defaultImageName="Pie64" -imageToLaunch="Pie64" -skipBinaryShortcuts -appToLaunch="bsx" -parentpath="C:\Users\Admin\AppData\Local\BlueStacks X\BlueStacks-Installer_5.21.212.1027_amd64_native.exe"
          4⤵
          • Executes dropped EXE
          • Checks processor information in registry
          • Suspicious behavior: EnumeratesProcesses
          PID:6640
          • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\7zr.exe
            "C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\7zr.exe" x "C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\CommonInstallUtils.zip" -o"C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\" -aoa
            5⤵
            • Executes dropped EXE
            PID:8008
          • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\7zr.exe
            "C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\7zr.exe" x "C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\QtRedistx64.zip" -o"C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\" -aoa
            5⤵
            • Executes dropped EXE
            PID:6100
          • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\HD-ForceGPU.exe
            "C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\HD-ForceGPU.exe" 1 "C:\Program Files\BlueStacks_nxt"
            5⤵
            • Executes dropped EXE
            PID:2024
          • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\HD-GLCheck.exe
            "C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\HD-GLCheck.exe" 1 2
            5⤵
            • Executes dropped EXE
            PID:6436
          • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\HD-GLCheck.exe
            "C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\HD-GLCheck.exe" 4 2
            5⤵
            • Executes dropped EXE
            PID:3612
          • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\HD-GLCheck.exe
            "C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\HD-GLCheck.exe" 2 2
            5⤵
            • Executes dropped EXE
            PID:6368
          • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\HD-GLCheck.exe
            "C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\HD-GLCheck.exe" 1 1
            5⤵
            • Executes dropped EXE
            PID:4476
          • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\HD-GLCheck.exe
            "C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\HD-GLCheck.exe" 4 1
            5⤵
            • Executes dropped EXE
            • Suspicious use of SetWindowsHookEx
            PID:5364
          • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\HD-GLCheck.exe
            "C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\HD-GLCheck.exe" 2 1
            5⤵
            • Executes dropped EXE
            PID:4304
          • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\HD-CheckCpu.exe
            "C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\HD-CheckCpu.exe" --cmd checkSSE4
            5⤵
            • Executes dropped EXE
            PID:6272
          • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\7zr.exe
            "C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\7zr.exe" x "C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\PF.zip" -o"C:\Program Files\BlueStacks_nxt" -aoa
            5⤵
            • Drops file in Program Files directory
            • Executes dropped EXE
            PID:5264
          • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\HD-GLCheck.exe
            "C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\\HD-GLCheck.exe" 2
            5⤵
            • Executes dropped EXE
            PID:6716
          • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\HD-GLCheck.exe
            "C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\\HD-GLCheck.exe" 3
            5⤵
            • Executes dropped EXE
            • Suspicious use of SetWindowsHookEx
            PID:3504
          • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\HD-GLCheck.exe
            "C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\\HD-GLCheck.exe" 1
            5⤵
            • Executes dropped EXE
            PID:1772
          • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\7zr.exe
            "C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\7zr.exe" x "C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\QtRedistx64.zip" -o"C:\Program Files\BlueStacks_nxt" -aoa
            5⤵
            • Drops file in Program Files directory
            • Executes dropped EXE
            PID:6300
          • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\7zr.exe
            "C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\7zr.exe" x "C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\PD.zip" -o"C:\ProgramData\BlueStacks_nxt" -aoa
            5⤵
            • Executes dropped EXE
            PID:8692
          • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\7zr.exe
            "C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\7zr.exe" x "C:\ProgramData\Pie64_5.21.212.1027.exe" -o"C:\ProgramData\BlueStacks_nxt\Engine\Pie64" -aoa
            5⤵
            • Executes dropped EXE
            PID:4252
          • C:\Windows\SYSTEM32\netsh.exe
            "netsh.exe" advfirewall firewall delete rule name="BlueStacks Service"
            5⤵
            • Modifies Windows Firewall
            • Event Triggered Execution: Netsh Helper DLL
            PID:1424
          • C:\Windows\SYSTEM32\netsh.exe
            "netsh.exe" advfirewall firewall add rule name="BlueStacks Service" dir=in action=allow program="C:\Program Files\BlueStacks_nxt\HD-Player.exe" enable=yes
            5⤵
            • Modifies Windows Firewall
            • Event Triggered Execution: Netsh Helper DLL
            PID:7816
          • C:\Windows\SYSTEM32\netsh.exe
            "netsh.exe" advfirewall firewall delete rule name="BlueStacksAppplayerWeb"
            5⤵
            • Modifies Windows Firewall
            • Event Triggered Execution: Netsh Helper DLL
            PID:3860
          • C:\Windows\SYSTEM32\netsh.exe
            "netsh.exe" advfirewall firewall add rule name="BlueStacksAppplayerWeb" dir=in action=allow program="C:\Program Files\BlueStacks_nxt\BlueStacksAppplayerWeb.exe" enable=yes
            5⤵
            • Modifies Windows Firewall
            • Event Triggered Execution: Netsh Helper DLL
            PID:5612
          • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\HD-CheckCpu.exe
            "C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\HD-CheckCpu.exe" --cmd checkSSE3
            5⤵
            • Executes dropped EXE
            PID:4600
          • C:\Windows\SYSTEM32\cmd.exe
            "cmd.exe" /c "sc.exe delete BlueStacksDrv_nxt"
            5⤵
              PID:5480
              • C:\Windows\system32\sc.exe
                sc.exe delete BlueStacksDrv_nxt
                6⤵
                • Launches sc.exe
                PID:5196
            • C:\Windows\SYSTEM32\reg.exe
              "reg.exe" EXPORT HKLM\Software\BlueStacks_nxt "C:\Users\Admin\AppData\Local\Temp\hfm0pikb.zcw\RegHKLM.txt"
              5⤵
                PID:5616
              • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\7zr.exe
                "C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\7zr.exe" a "C:\Users\Admin\AppData\Local\Temp\Installer.zip" -m0=LZMA:a=1 "C:\Users\Admin\AppData\Local\Temp\hfm0pikb.zcw\*"
                5⤵
                • Executes dropped EXE
                PID:5504
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe"
        1⤵
        • Enumerates system info in registry
        • Modifies data under HKEY_USERS
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        PID:244
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ff91d50ab58,0x7ff91d50ab68,0x7ff91d50ab78
          2⤵
            PID:6416
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1580 --field-trial-handle=1824,i,15259351901428344984,10952497687949159534,131072 /prefetch:2
            2⤵
              PID:8584
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2092 --field-trial-handle=1824,i,15259351901428344984,10952497687949159534,131072 /prefetch:8
              2⤵
                PID:5184
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=1596 --field-trial-handle=1824,i,15259351901428344984,10952497687949159534,131072 /prefetch:8
                2⤵
                  PID:6384
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2964 --field-trial-handle=1824,i,15259351901428344984,10952497687949159534,131072 /prefetch:1
                  2⤵
                    PID:5140
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3100 --field-trial-handle=1824,i,15259351901428344984,10952497687949159534,131072 /prefetch:1
                    2⤵
                      PID:8236
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=3948 --field-trial-handle=1824,i,15259351901428344984,10952497687949159534,131072 /prefetch:1
                      2⤵
                        PID:3240
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4516 --field-trial-handle=1824,i,15259351901428344984,10952497687949159534,131072 /prefetch:8
                        2⤵
                          PID:5692
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4448 --field-trial-handle=1824,i,15259351901428344984,10952497687949159534,131072 /prefetch:8
                          2⤵
                            PID:3996
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4664 --field-trial-handle=1824,i,15259351901428344984,10952497687949159534,131072 /prefetch:8
                            2⤵
                              PID:6744
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4472 --field-trial-handle=1824,i,15259351901428344984,10952497687949159534,131072 /prefetch:8
                              2⤵
                                PID:6500
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4484 --field-trial-handle=1824,i,15259351901428344984,10952497687949159534,131072 /prefetch:8
                                2⤵
                                  PID:5752
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4528 --field-trial-handle=1824,i,15259351901428344984,10952497687949159534,131072 /prefetch:8
                                  2⤵
                                    PID:5704
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4892 --field-trial-handle=1824,i,15259351901428344984,10952497687949159534,131072 /prefetch:8
                                    2⤵
                                      PID:5576
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3976 --field-trial-handle=1824,i,15259351901428344984,10952497687949159534,131072 /prefetch:8
                                      2⤵
                                        PID:6676
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=4920 --field-trial-handle=1824,i,15259351901428344984,10952497687949159534,131072 /prefetch:1
                                        2⤵
                                          PID:6764
                                      • C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe
                                        "C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"
                                        1⤵
                                          PID:5196
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default
                                          1⤵
                                          • Enumerates system info in registry
                                          • Suspicious behavior: EnumeratesProcesses
                                          • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                          • Suspicious use of FindShellTrayWindow
                                          • Suspicious use of SendNotifyMessage
                                          PID:7716
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ff91d3b3cb8,0x7ff91d3b3cc8,0x7ff91d3b3cd8
                                            2⤵
                                              PID:7908
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1968,11484525440538394902,2895111924801530199,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=2016 /prefetch:2
                                              2⤵
                                                PID:7676
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1968,11484525440538394902,2895111924801530199,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2308 /prefetch:3
                                                2⤵
                                                • Suspicious behavior: EnumeratesProcesses
                                                PID:8464
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1968,11484525440538394902,2895111924801530199,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2560 /prefetch:8
                                                2⤵
                                                  PID:7668
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1968,11484525440538394902,2895111924801530199,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3344 /prefetch:1
                                                  2⤵
                                                    PID:8044
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1968,11484525440538394902,2895111924801530199,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3372 /prefetch:1
                                                    2⤵
                                                      PID:7964
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1968,11484525440538394902,2895111924801530199,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4932 /prefetch:1
                                                      2⤵
                                                        PID:8776
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1968,11484525440538394902,2895111924801530199,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4912 /prefetch:1
                                                        2⤵
                                                          PID:3492
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1968,11484525440538394902,2895111924801530199,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4680 /prefetch:1
                                                          2⤵
                                                            PID:1924
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1968,11484525440538394902,2895111924801530199,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4664 /prefetch:1
                                                            2⤵
                                                              PID:9112
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1968,11484525440538394902,2895111924801530199,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5012 /prefetch:1
                                                              2⤵
                                                                PID:8908
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1968,11484525440538394902,2895111924801530199,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3972 /prefetch:8
                                                                2⤵
                                                                • Suspicious behavior: EnumeratesProcesses
                                                                PID:2368
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1968,11484525440538394902,2895111924801530199,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5040 /prefetch:1
                                                                2⤵
                                                                  PID:2960
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1968,11484525440538394902,2895111924801530199,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5644 /prefetch:8
                                                                  2⤵
                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                  PID:4592
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1968,11484525440538394902,2895111924801530199,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5688 /prefetch:1
                                                                  2⤵
                                                                    PID:2784
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1968,11484525440538394902,2895111924801530199,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3976 /prefetch:8
                                                                    2⤵
                                                                      PID:452
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1968,11484525440538394902,2895111924801530199,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=5240 /prefetch:8
                                                                      2⤵
                                                                      • Modifies registry class
                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                      PID:1416
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1968,11484525440538394902,2895111924801530199,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4672 /prefetch:1
                                                                      2⤵
                                                                        PID:1000
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1968,11484525440538394902,2895111924801530199,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2964 /prefetch:1
                                                                        2⤵
                                                                          PID:5556
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1968,11484525440538394902,2895111924801530199,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2764 /prefetch:1
                                                                          2⤵
                                                                            PID:5996
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1968,11484525440538394902,2895111924801530199,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4744 /prefetch:1
                                                                            2⤵
                                                                              PID:3240
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1968,11484525440538394902,2895111924801530199,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5436 /prefetch:1
                                                                              2⤵
                                                                                PID:8964
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1968,11484525440538394902,2895111924801530199,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3916 /prefetch:1
                                                                                2⤵
                                                                                  PID:8920
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1968,11484525440538394902,2895111924801530199,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6456 /prefetch:1
                                                                                  2⤵
                                                                                    PID:4560
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1968,11484525440538394902,2895111924801530199,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4756 /prefetch:1
                                                                                    2⤵
                                                                                      PID:3852
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1968,11484525440538394902,2895111924801530199,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7256 /prefetch:1
                                                                                      2⤵
                                                                                        PID:772
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1968,11484525440538394902,2895111924801530199,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6396 /prefetch:1
                                                                                        2⤵
                                                                                          PID:5288
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1968,11484525440538394902,2895111924801530199,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7096 /prefetch:1
                                                                                          2⤵
                                                                                            PID:3928
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1968,11484525440538394902,2895111924801530199,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6300 /prefetch:1
                                                                                            2⤵
                                                                                              PID:376
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1968,11484525440538394902,2895111924801530199,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=3544 /prefetch:2
                                                                                              2⤵
                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                              PID:704
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1968,11484525440538394902,2895111924801530199,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7252 /prefetch:1
                                                                                              2⤵
                                                                                                PID:6464
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1968,11484525440538394902,2895111924801530199,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7420 /prefetch:1
                                                                                                2⤵
                                                                                                  PID:6092
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1968,11484525440538394902,2895111924801530199,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7600 /prefetch:1
                                                                                                  2⤵
                                                                                                    PID:1312
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1968,11484525440538394902,2895111924801530199,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7796 /prefetch:1
                                                                                                    2⤵
                                                                                                      PID:5384
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1968,11484525440538394902,2895111924801530199,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7244 /prefetch:1
                                                                                                      2⤵
                                                                                                        PID:6504
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1968,11484525440538394902,2895111924801530199,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7460 /prefetch:8
                                                                                                        2⤵
                                                                                                        • NTFS ADS
                                                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                                                        PID:220
                                                                                                    • C:\Windows\System32\CompPkgSrv.exe
                                                                                                      C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                                                      1⤵
                                                                                                        PID:7724
                                                                                                      • C:\Windows\System32\CompPkgSrv.exe
                                                                                                        C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                                                        1⤵
                                                                                                          PID:7732

                                                                                                        Network

                                                                                                        MITRE ATT&CK Enterprise v15

                                                                                                        Replay Monitor

                                                                                                        Loading Replay Monitor...

                                                                                                        Downloads

                                                                                                        • C:\Program Files (x86)\BlueStacks X\BlueStacks X.exe

                                                                                                          Filesize

                                                                                                          477KB

                                                                                                          MD5

                                                                                                          b14d32de52d03e8369b869264c0c9ead

                                                                                                          SHA1

                                                                                                          573224af57649ab35bb009b284227b49c3ef51f5

                                                                                                          SHA256

                                                                                                          e0eb40ce927db3948a0476fd6dd2d560a5aedb10264cca6f16c6d79e67afd57c

                                                                                                          SHA512

                                                                                                          73ef05b81409a78d9ef967f37df49f2458d5a5335ac548e36e6bdfae2672e41068c6b1002b60ba887c9f4acd31125d57fefa0da44e14916f218287cb3920c014

                                                                                                        • C:\Program Files (x86)\BlueStacks X\image\LocalAPK\close_disabled.svg

                                                                                                          Filesize

                                                                                                          569B

                                                                                                          MD5

                                                                                                          e7fdf6a9c8cae1fc1108dc5a803a1905

                                                                                                          SHA1

                                                                                                          2853f9ff5e63685ebb1449dcf693176b17e4ab60

                                                                                                          SHA256

                                                                                                          8ee5aa84139b2ea5549f7272523aeb203d73954c5ccdcf6f7407bf1a3469f13e

                                                                                                          SHA512

                                                                                                          a6388b24926934e20ccf7fcab41bd219dc6c0053428481d7f466bf89f26bf1a36fdff716a9ddd9ab268df73b04dff1449c6bac1f5c707e31ae2ee71c2087e0d9

                                                                                                        • C:\Program Files (x86)\BlueStacks X\image\LocalAPK\close_hover.svg

                                                                                                          Filesize

                                                                                                          653B

                                                                                                          MD5

                                                                                                          76166804e6ce35e8a0c92917b8abc071

                                                                                                          SHA1

                                                                                                          8bd38726a11a9633ac937b9c6f205ce5d36348b0

                                                                                                          SHA256

                                                                                                          1bca2e912184b8168ee8961de68d1d839f4f9827fde6f48ab100fb61e82eff90

                                                                                                          SHA512

                                                                                                          93c4f1af7e9f89091a207ab308e05ddd4c92406c039f7465d3b8aca7e0cc7a6c922a22e1eee2f5c88db5e89016ef69294b2a0905d7d6a90fd32835bc11929005

                                                                                                        • C:\Program Files (x86)\BlueStacks X\image\LocalAPK\close_normal.svg

                                                                                                          Filesize

                                                                                                          569B

                                                                                                          MD5

                                                                                                          3221ac69d7facd8aa90ffa15aea991b0

                                                                                                          SHA1

                                                                                                          e0571f30f4708ec78addc726a743679ca0f05e45

                                                                                                          SHA256

                                                                                                          92aeae68e9e0973d9e0dc575941f1cb2e24afd0574341a46b870be7384eaa537

                                                                                                          SHA512

                                                                                                          5e2de0abfe60a4db16ea5e8739260c19962fbfc60869a77bde6ab3547ad8ee3ad88e74e97da31fa23be096afddad018e431d152d6d0fa21a75357a11dacb1328

                                                                                                        • C:\Program Files (x86)\BlueStacks X\image\LocalAPK\close_pressed.svg

                                                                                                          Filesize

                                                                                                          653B

                                                                                                          MD5

                                                                                                          dfddf8d0788988c3e48fcbfb2a76cd20

                                                                                                          SHA1

                                                                                                          463bb61f0012289e860c32f1885a3a8f57467f2e

                                                                                                          SHA256

                                                                                                          9585f41eb6202e89f2087266fa31852d7f41ca8cc659b907c96753fe165f937d

                                                                                                          SHA512

                                                                                                          e708c5114c60f7574589d6a56c9faedda26ee4a40f0eeb25f5e12eadcf790f24fdbf393fa0aa6ad449b5337d625b092d6f8822472fa8a6ce1339aca59c50c3ca

                                                                                                        • C:\Program Files\BlueStacks_nxt\7zr.exe

                                                                                                          Filesize

                                                                                                          812KB

                                                                                                          MD5

                                                                                                          fbaba140f30a11e5ff4f97d921de6d45

                                                                                                          SHA1

                                                                                                          d12360b79d9fe7ddc5380a22539dc7d4768ff5f3

                                                                                                          SHA256

                                                                                                          4889c0826c633c0291264d37834363be90ee39d07fcea228494ed151386dcb16

                                                                                                          SHA512

                                                                                                          cd18bb1b057b1b077fde372ca5f98701614b196b692ac42ec56e5b839535022d884a2cd9b6bf644a520c6f48f12f673574a24e60580c70c695067b66442ea7a5

                                                                                                        • C:\Program Files\BlueStacks_nxt\BlueStacksUninstaller.exe.config

                                                                                                          Filesize

                                                                                                          392B

                                                                                                          MD5

                                                                                                          ca0a329097316832e4a6ea5d870c9268

                                                                                                          SHA1

                                                                                                          4a36b93361d3dc9df9b00313f2c2b394be9e1e72

                                                                                                          SHA256

                                                                                                          4b7df915d706af6459c38d75b09c5e14f951842ae0678078400f204ad1c7a7c2

                                                                                                          SHA512

                                                                                                          51f9a874e84f130be4fa29fcc4bc934105318234b5dd9ceedaf569e3f0e6b38e29f3bec056044724476ae24295a510b16d8a737b994fd6f1268609defa315271

                                                                                                        • C:\Program Files\BlueStacks_nxt\HD-ForceGPU.exe

                                                                                                          Filesize

                                                                                                          169KB

                                                                                                          MD5

                                                                                                          45fd2233c5ced0fbc7238c0ded005f40

                                                                                                          SHA1

                                                                                                          99320dac4daca5ec25c6850f9b78dba29d8f771a

                                                                                                          SHA256

                                                                                                          30bb8b879e4a210ed422cf01b8243a2a8699e51de62f646425b002dd24da8bfd

                                                                                                          SHA512

                                                                                                          a64880c99da2adecf5d2d82c4502e5508c900f7542d024e2c93e0774d74a3e2dd26e116b00b47d1e5ea71125ca8f57889b855d0b2490b14d81bf29030e34ca71

                                                                                                        • C:\Program Files\BlueStacks_nxt\HD-GLCheck.exe

                                                                                                          Filesize

                                                                                                          223KB

                                                                                                          MD5

                                                                                                          b928703ade4eb6bd330635f6c0cff27b

                                                                                                          SHA1

                                                                                                          115b58f974f91e953cf0b8ccff5c3db8f2beb6f4

                                                                                                          SHA256

                                                                                                          83efdf58618eb4df28137450c0d6445c01ba5ac9169dd45ecb39ba93a5c8b6b6

                                                                                                          SHA512

                                                                                                          9bd2eeafb3ea6f63a8f0e4b27d86de6dee8d4e7c2bb841244f971f2f0ba0d708597977cf81ea209c2c8c3cf6c864bfcb54d92dd0f6e7ad0d736a0de3ce495f2f

                                                                                                        • C:\Program Files\BlueStacks_nxt\ProductLogo.ico

                                                                                                          Filesize

                                                                                                          131KB

                                                                                                          MD5

                                                                                                          169706218f98a42594a8c5c5a65771fe

                                                                                                          SHA1

                                                                                                          b8ded94180212578d86a031eb71ef93dcffe1a26

                                                                                                          SHA256

                                                                                                          3803045963af064936d7071c178de8e40854968b3d3f9171c57a182c869f3697

                                                                                                          SHA512

                                                                                                          1c3f18ed0a24ffa78fe938826eb88531eb8be134d6f209b87d7af5d0e8c4829f01947d7b0048996b9755562bbb7f52e000bcd15d07d646cacb2989ac881ce448

                                                                                                        • C:\Program Files\BlueStacks_nxt\resources\icudtl.dat

                                                                                                          Filesize

                                                                                                          10.0MB

                                                                                                          MD5

                                                                                                          03205e5952ea7b803839ecfe3bb000d6

                                                                                                          SHA1

                                                                                                          74146e76e31fd1e75ae1c34fa8194bc291b34a40

                                                                                                          SHA256

                                                                                                          8364e6c6bf5744357199de0de3f6ba30846ccda70288675b75059e6fd52241f3

                                                                                                          SHA512

                                                                                                          badb8843f9a483329cc4f559f95bd07a8cc1f9383e0e67dddacf74e586541067ca452a7fc28b63dcd28edc434c3be8ddc733dcbad0e06d973dafc99242f0b192

                                                                                                        • C:\Program Files\BlueStacks_nxt\resources\qtwebengine_resources.pak

                                                                                                          Filesize

                                                                                                          2.4MB

                                                                                                          MD5

                                                                                                          aed2766cd70116ab1e0c430001a30b8f

                                                                                                          SHA1

                                                                                                          a06c62b35c333412dd61c493d6a6520a8c04537c

                                                                                                          SHA256

                                                                                                          4ed3a10f1bbc40b9a2ce3b8cb6dab6f00fe922d0c0e1c6ab5adfd8617cec9389

                                                                                                          SHA512

                                                                                                          a1ca058b88c1a6839b2e329b08423ee115800864f580f832bbc4f4720f0965984f893d210437951bd79dcfd3b917137b0b2e8f381e50d2a1bc2de37ca5555961

                                                                                                        • C:\Program Files\BlueStacks_nxt\resources\qtwebengine_resources_100p.pak

                                                                                                          Filesize

                                                                                                          191KB

                                                                                                          MD5

                                                                                                          8615f18dea34c152e8aeb8f4e01fd17b

                                                                                                          SHA1

                                                                                                          032b7bab09943cc5c8a380b0aba29652d5539153

                                                                                                          SHA256

                                                                                                          e7e2cd13fa9fbaa33c537e8eecfd542e4ce4a621bc0b94159ef9e6e4541652a6

                                                                                                          SHA512

                                                                                                          2a68ba854d473883f20e1a26375fa39b689cd39d2e284a963b07f25fa3eb6865ff3d8fea2241af23ffc731b83e20ec5b8147486de0a507e83413f75d71eab248

                                                                                                        • C:\Program Files\BlueStacks_nxt\resources\qtwebengine_resources_200p.pak

                                                                                                          Filesize

                                                                                                          250KB

                                                                                                          MD5

                                                                                                          de5e6a97c80d698256369b10255ce45d

                                                                                                          SHA1

                                                                                                          8d4b979a8c2ee33c2dbc01ed13a165b455a5fdfc

                                                                                                          SHA256

                                                                                                          669f9d3388438377c440419e5c62973362e33e84a5b247ddd0dd4568da75eb13

                                                                                                          SHA512

                                                                                                          5609ca5053f581e636c0fe10def704f076c7acf5d958e235991fec32a2ddebd72b312f36a6648d2462766d1cb141f3df12d39df1a344e0dfb4a9e2946dcf1206

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\am.pak

                                                                                                          Filesize

                                                                                                          420KB

                                                                                                          MD5

                                                                                                          2a8ca8692a60fe8d33d51d99c9084a9d

                                                                                                          SHA1

                                                                                                          919d8adacce240fd394d6faf2aa41d2e5b8460ec

                                                                                                          SHA256

                                                                                                          73f0a7c7632313613814b3ccf5962962aff99de940e084e0b609ecbad1ec1d44

                                                                                                          SHA512

                                                                                                          080e56cce041226592e7fa816fe8c5e362a1f172a8c671bda4092ff127f0cbe8238c40d41751099f6bac8f02c71faccc011df270b1c1bb8b772286ab95f5f1ea

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\ar.pak

                                                                                                          Filesize

                                                                                                          441KB

                                                                                                          MD5

                                                                                                          143ffa8ca3ac0e6dca9a8b3e8ba3f3f5

                                                                                                          SHA1

                                                                                                          6186940350b3fdd936f6ce41f3091bbca397e9a2

                                                                                                          SHA256

                                                                                                          3f35466a80f4ca5a5167b2d3a3278e75afd90821206ac98801210a2117c913e2

                                                                                                          SHA512

                                                                                                          a12b5e3ae821e08aa76657cf84bd79def6f8fdb413e908b13944f6c2bc1aa9724193d0a9a0abd5dc0b87e0845d61b021d39024a5048443531dafa19de707944e

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\bg.pak

                                                                                                          Filesize

                                                                                                          475KB

                                                                                                          MD5

                                                                                                          154217351d415b13dca71e28727902c4

                                                                                                          SHA1

                                                                                                          096a1640b5e83a7b20afdfa7cfe2507b4128e0a5

                                                                                                          SHA256

                                                                                                          da4bb8513745180a0eb26228a315786a6bfb98d6594173491d25cdf9d59c5bcf

                                                                                                          SHA512

                                                                                                          f1676a8b05c00588308c57b2290c00a6d844811e9ad4495ba94d62ae71a8c58d504ccd2697cfbf822fd5c2ce6423f76da8a901b4eae55095dc4b9667d9c2a8eb

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\bn.pak

                                                                                                          Filesize

                                                                                                          624KB

                                                                                                          MD5

                                                                                                          304432105fbe28b1625f0d7b6be3e7bf

                                                                                                          SHA1

                                                                                                          2d5474854bc0bca3f3ead1b9199d76ef533f0850

                                                                                                          SHA256

                                                                                                          ac282f17c5f25b55d368d06b305b89b614949d41c2a1377f1dd5aecb57d1ca8e

                                                                                                          SHA512

                                                                                                          8ab35cf2069f70a3a99dde98a7b7782821000abcefa97eaeb07b8a717d26a7b6c5461d5bcd39110b47db98aad9c56e463ca2707b7e6b71cda1092b8cf3a91ab8

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\ca.pak

                                                                                                          Filesize

                                                                                                          294KB

                                                                                                          MD5

                                                                                                          a2c61a98fe7407ded9ece126c4c9d057

                                                                                                          SHA1

                                                                                                          c7d64d8bdc2fd9e7f1c62dff79e0e56e13f9cd69

                                                                                                          SHA256

                                                                                                          4d583b753104ae98a1e5858bfe38dfa3195d477128441ca59c882d158d52ebf8

                                                                                                          SHA512

                                                                                                          7522ee10397140b5eb45ec3d5cb32e9212a7d3cae8fbc377b270872aaf6c7077e7b13465f6005a85b5fdd4d2e86b1731c3366ddfb2e4bccae4ae2d1a178e0b1c

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\cs.pak

                                                                                                          Filesize

                                                                                                          303KB

                                                                                                          MD5

                                                                                                          c0bb82986abc67281d8067e5f20625c7

                                                                                                          SHA1

                                                                                                          e7cc8888dd95d9edf226893f0e4c12e572bf6bf8

                                                                                                          SHA256

                                                                                                          217718dd6d64f45da33db0629e6d56da8084ae0fd8123eafda909e662a5e5b50

                                                                                                          SHA512

                                                                                                          80f4542345cc6e0d3589aeb76e0e5f19a824f2d3186d397c8fb71c1e9d6c056108df7f9a192a6515eb9ee43505b7844c0bf76b77596adcaa3c0ee783dd590ad9

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\da.pak

                                                                                                          Filesize

                                                                                                          271KB

                                                                                                          MD5

                                                                                                          5eba7377be8e34dd03db766300039ed2

                                                                                                          SHA1

                                                                                                          b3460fa050b93454b9e05586d86d7cf67881f557

                                                                                                          SHA256

                                                                                                          94157ad608b35b29dd176a3106caa4613ed6d4c20268ce00ac4ccf13a9950f94

                                                                                                          SHA512

                                                                                                          7d24210b60fe38b42fc6a4437ffb1e06333b7084025efe462b66e086cdee953254a1d6fec69ab3c8569118156f3a4a957aed5259e1432772ab46cf7905aa4385

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\de.pak

                                                                                                          Filesize

                                                                                                          292KB

                                                                                                          MD5

                                                                                                          01cc5b8a05a435482dc692baef032d3a

                                                                                                          SHA1

                                                                                                          229a4d1c9aea9111bb46895d096dfcaf488b8d4a

                                                                                                          SHA256

                                                                                                          53d5743a2606d6b553e8dbff871f2f1d3d53666baeb9ecca5b1ed624d48d5835

                                                                                                          SHA512

                                                                                                          082654e8385811d4e0f35544c017704b0f13638f850947d76c9abe093333fdaf9d1d08c184bb8107d16b0eae6ebcbe0c522ed18138dcee30a71d9d75ea8c3488

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\el.pak

                                                                                                          Filesize

                                                                                                          522KB

                                                                                                          MD5

                                                                                                          26afc001a706679413f5deaa3c6603e4

                                                                                                          SHA1

                                                                                                          c9d780d930775cfc17cf9160712a2e90ca55106e

                                                                                                          SHA256

                                                                                                          4c2a3552e84fdd08852073d25c99727c4270160260d159572715c7d37e5861bc

                                                                                                          SHA512

                                                                                                          743380b99f6d55ad892296e8361b74cf90254403fef15de37c3e5fc302bae2991f5bb4ae21ba84bddc30da3b5b31fb4e741b0c524feede1656bcd2d531d76ea1

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\en-GB.pak

                                                                                                          Filesize

                                                                                                          239KB

                                                                                                          MD5

                                                                                                          06da37b66f4dbbe8c5ae1bd7e4addc99

                                                                                                          SHA1

                                                                                                          ac190bbb14b76d14143dcc088f460d1be2ba2886

                                                                                                          SHA256

                                                                                                          60f87ec2b06329bdea7f835a61e9893fae147343f133caa2bfa5215797881ee0

                                                                                                          SHA512

                                                                                                          c436359e259c0a1cdc0dea1bb9ecd2bc22fe1124d76b9deac7e8c7751d97d66cbe61739aecef650908ed05363156fa11453490a9c9f23c74c683ac4e8c7c8c3e

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\en-US.pak

                                                                                                          Filesize

                                                                                                          242KB

                                                                                                          MD5

                                                                                                          1e958f35257ef1e2e5115d860602a593

                                                                                                          SHA1

                                                                                                          688afb781ce3c4c9a55fee9696145260d2ce1400

                                                                                                          SHA256

                                                                                                          4a65112f4d03cf38abf2ccff5e3fe8e161cb3e47d588b510504007c9bb876b37

                                                                                                          SHA512

                                                                                                          a996e8708f4e92794cf3eb6b7780d9ac8e567b1359aface4fd50d427630e4219678f4cdcd58764123ab6baf12a9c87a08b6ba5767fa8f6042a7319fb45b72a27

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\es-419.pak

                                                                                                          Filesize

                                                                                                          289KB

                                                                                                          MD5

                                                                                                          f21b0783d062082ee46aa573eff68df0

                                                                                                          SHA1

                                                                                                          84f62d15eb68858245e56bef0cf317e273918044

                                                                                                          SHA256

                                                                                                          859cb8ad8666e97a47f0e24df4ae85aad80002fbf842b4e68afd0a308d6597fe

                                                                                                          SHA512

                                                                                                          d87e2d51cedba8ba4eba3b0fd390bfb32b25c5cda98a0d6465b5ae351dc745a67ac174c223e7def8b02c9f00729244026e895791add2611680579dfec4b7b07b

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\es.pak

                                                                                                          Filesize

                                                                                                          293KB

                                                                                                          MD5

                                                                                                          03265b1a7f6a996513067866d55f3bcb

                                                                                                          SHA1

                                                                                                          427eecd7810cf24c8758dc9beae18afc9d8969a0

                                                                                                          SHA256

                                                                                                          516234550bfda93687b28c5cb3b7b5362212bf41b900d790ade52747bcf766da

                                                                                                          SHA512

                                                                                                          d6ace0340666eaffe28f57fb070eb4504460bd47517cf3c0b9c07671a605ec017c4fb45a38fbb96b9c54887dcee639b41ef03b2fd85ed9a666af56dbb73023dc

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\et.pak

                                                                                                          Filesize

                                                                                                          261KB

                                                                                                          MD5

                                                                                                          73e6f20f0c75a9beb72798167f8c6f91

                                                                                                          SHA1

                                                                                                          d01932a69626d23e8ce9e9bc240f6d99dd155fb4

                                                                                                          SHA256

                                                                                                          ff1b0d50f6f067b291199578b6a7757797bd7fdc6b0ac472c9361076bf9eadaf

                                                                                                          SHA512

                                                                                                          98966566211bba402352607a0622dca7f64ad4c056cec2b40cb70572cd1ce5ed92556490b4399a32ed1c04a14d80a3841fd1a758225120ee416c68e9314316db

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\fa.pak

                                                                                                          Filesize

                                                                                                          422KB

                                                                                                          MD5

                                                                                                          f913ea1db8c9c99bff701ceeaf8138f3

                                                                                                          SHA1

                                                                                                          6bef3ff865b3a95dc1900ba3c94c5bf556c695a1

                                                                                                          SHA256

                                                                                                          b4e0d3f7cb858ce12b5a75a71ef14f2a36494cd4138181b29f6fb3d6bd386c4c

                                                                                                          SHA512

                                                                                                          edca9b945c6dc90586f6d20e73316f620d5fff61f3ad4fd35c7e9064f55b1988cc77d372a97d100cbf572a2906cd193777a18ace98fabadea1604df42c8823a5

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\fi.pak

                                                                                                          Filesize

                                                                                                          269KB

                                                                                                          MD5

                                                                                                          f55358f58eb17b4bc6abb19592c1aba7

                                                                                                          SHA1

                                                                                                          6dc1d99757bc5a447b9761a4a0c90a2be521c6b0

                                                                                                          SHA256

                                                                                                          cf3b9a857c63022d671f4cc335728c270935628f085ac9a17568a2529daeb4c1

                                                                                                          SHA512

                                                                                                          d7cb03ec31a3cd8c7f13e1bae1439fbba3b76636f1f254ba5376c5da82b9a98e93684fc3cab3bbe8a4c892ba42f17c0db1eec1531950e17932aee16007081aab

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\fil.pak

                                                                                                          Filesize

                                                                                                          301KB

                                                                                                          MD5

                                                                                                          f5257136ed900e1715979c9a96de292d

                                                                                                          SHA1

                                                                                                          217cbe02931f6466bdbdb27c85c876b851610b23

                                                                                                          SHA256

                                                                                                          98a20cd0e9fae36f22de4a4db7b515532b4327e6d475d4e39ae93ea45b76cd90

                                                                                                          SHA512

                                                                                                          c38828d2736ba26ad0bff9976adc9d3910df7a417aad8cf6e3cf6383688a56ad2581cbda520403d44b010562b56d6107211385fc80988ac57e930199415ca654

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\fr.pak

                                                                                                          Filesize

                                                                                                          318KB

                                                                                                          MD5

                                                                                                          75575474726cc8d98def90e0dbddcb0f

                                                                                                          SHA1

                                                                                                          3e62e3b73bab73597a01c3ece5871c64b142391f

                                                                                                          SHA256

                                                                                                          d37509844342371b4026b720dc00f77ff88fe2e7c2b27861e3ca66b10e76ca94

                                                                                                          SHA512

                                                                                                          37e8e5cc44ee4433b0206cd1baedb955947d0fdf172e69a28fb7bc09f2a57c4f27fb45c12a0a49753281cb2e2a92792b67d568f3cd4f90c9c87337249d031fc0

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\gu.pak

                                                                                                          Filesize

                                                                                                          596KB

                                                                                                          MD5

                                                                                                          e245057bea15117bed15bc3ee2911d74

                                                                                                          SHA1

                                                                                                          c8e2d5f85a974fa989c0d0f64121d2836a13bb84

                                                                                                          SHA256

                                                                                                          4ea64678c7c551c2b2088b9417bcc76218822f3213e9b8028d618864035b97a5

                                                                                                          SHA512

                                                                                                          a72a1c259332f279f976403034c9d2356a437a1677c0e20c243f23ac246a8ab65bf150a610867687eef48a0b7c87d23f0e357ef21bb1791386790243803ee70f

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\he.pak

                                                                                                          Filesize

                                                                                                          368KB

                                                                                                          MD5

                                                                                                          8c02d30c68c4abb4b1a7c2493d8fde51

                                                                                                          SHA1

                                                                                                          2cbe2f537d59971296f2180d146d9c2905d2a76f

                                                                                                          SHA256

                                                                                                          e37f0e2516799f320e4ac1a872d0ab7108c4f63d9ad33a17a4008923c7f93e9a

                                                                                                          SHA512

                                                                                                          9155cb07b6a23d7f73bf8f68af44ee3bc1e25c6ca643c2f8d64a808d3f78076e3ee60f68d3be9cfe3a6dcfbbfd4595e58c897cb4f8b92272e8ffb443cdf6f3a6

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\hi.pak

                                                                                                          Filesize

                                                                                                          618KB

                                                                                                          MD5

                                                                                                          61838bdf13a1d60545d15e9cc49866be

                                                                                                          SHA1

                                                                                                          64bec7fe42caf53f192b58e4e5b068e56d835cec

                                                                                                          SHA256

                                                                                                          9a399dd9dac62ea30d700f94e83dd79d54827eac8b9cbce0343ad2dc0f4809a1

                                                                                                          SHA512

                                                                                                          7e9e0c3aabebd6f0c221918b6790d096824ee1c5f7338a21ac489952b8260b1e59be423005ce34bd5039cb38fa7c9197cf48b77974ed8f6b7ab2a2472e3daecf

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\hr.pak

                                                                                                          Filesize

                                                                                                          290KB

                                                                                                          MD5

                                                                                                          a621446d9e94b0d47935bf3310c385b5

                                                                                                          SHA1

                                                                                                          5cb954846bd2a2c477cb28b99545cd9bc0fbe990

                                                                                                          SHA256

                                                                                                          93f7fbaf2c7e5f52187fc4a2b5726387e84decebd1efd8b922665bb831e5b842

                                                                                                          SHA512

                                                                                                          80c5ddea81bf8d1721a2c6cf094cb2c99a10a9aa443193bb2942360de9783da75292eaa341711700281626cc0c8a8f9dc071bd8bb589444f764ea307c4b9de37

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\hu.pak

                                                                                                          Filesize

                                                                                                          312KB

                                                                                                          MD5

                                                                                                          3c70ba470c8503cae9407540d070f506

                                                                                                          SHA1

                                                                                                          0b841228d28e8605c37df79f1a3714402d2b18df

                                                                                                          SHA256

                                                                                                          0770854f32f041df5ee0190164aa24a1ad06e199c79efd46f3ab65e12129023e

                                                                                                          SHA512

                                                                                                          ded69524127431d1b6a68bcf85119079a57d3aae5c5be7fd8f215090ecc74570b899e8ec70d6cf74da49833d903f8ec2cbb06738a1c917efc5e19a44167183c1

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\id.pak

                                                                                                          Filesize

                                                                                                          259KB

                                                                                                          MD5

                                                                                                          fc2cd7f4af1976579f6b0eae3ab2d874

                                                                                                          SHA1

                                                                                                          c4e434b9d0d95a505947c97d396b05c9a18f3983

                                                                                                          SHA256

                                                                                                          48b670c94216623a0c81ad611cc3b47a47dc9368215e065fd02448b4ebf808ef

                                                                                                          SHA512

                                                                                                          9e355bcfcc31535755233cdd7a521b0bc68f897d85a22da658e3fe5bfa388ce8d8dfa7c01087ea04cd268d44d43862c5acf5b305e45b4572dcb25884e45a4535

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\it.pak

                                                                                                          Filesize

                                                                                                          285KB

                                                                                                          MD5

                                                                                                          56c13472d7efdb4466d5189af2d06ce6

                                                                                                          SHA1

                                                                                                          84025c148e10e1885125893dd286d0f9e751e101

                                                                                                          SHA256

                                                                                                          7114d3e0c7de30f25c789a1dcc7c50e85985b8ff35afce4600128e85318b4af4

                                                                                                          SHA512

                                                                                                          fa9b17d387585a281ef1582b8596cb61dc79658bf3b121f6fb6355bd6584c517d938e21d1a0b1be6491c01e5c15c2da666d9f77000a12a2da137c040046957f8

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\ja.pak

                                                                                                          Filesize

                                                                                                          351KB

                                                                                                          MD5

                                                                                                          9705a8fcead214aa619f1be816135ea0

                                                                                                          SHA1

                                                                                                          f10d22cdbf5d7960aeaa13c98cf8f7de41034760

                                                                                                          SHA256

                                                                                                          c8db5560edd42f1a6acc4efd10865ce39c15dadd3b7dbdaaa28922e1f9c86320

                                                                                                          SHA512

                                                                                                          6d82ae6023e48ef54d6903a13b6f07069fdd5c87aa0e7b1219c0797bf49cc789170b3677d572fb1b63feda138e624f71e7175022eb7928db0dd413cc8652c6af

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\kn.pak

                                                                                                          Filesize

                                                                                                          693KB

                                                                                                          MD5

                                                                                                          2e9a1e91aa149308dde43e0b357e1c8a

                                                                                                          SHA1

                                                                                                          d657811a3b3dabe519fb7b5fad46977674234f51

                                                                                                          SHA256

                                                                                                          2a0411a1368fd5f342581b00fb3b451f89ad593fa49f0f79fd9abd5ee0d5f5e1

                                                                                                          SHA512

                                                                                                          d7b612562fb04a89dac28f51e691f42af39cf61bbd2199c4f652a3096330a99084c0f410bf0c449403031b9a264769ba2932cdae8b0c49bcf92b5ae7a4e8fe9b

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\ko.pak

                                                                                                          Filesize

                                                                                                          296KB

                                                                                                          MD5

                                                                                                          2a0bc83152bfbc0f365d3a85fd1e1832

                                                                                                          SHA1

                                                                                                          9b972a8e823ff6f161ca2aadac11043b054b3146

                                                                                                          SHA256

                                                                                                          ae1cdf9a4cef3a86d3550f7501e5c650cc1e0924c9ab84900df702ea7e351f8f

                                                                                                          SHA512

                                                                                                          2c3ae97d3c78310cafe92620c0438dde4c624353cd682f3087c92050870d768e6f7071248e55d03232739a2dd94c7694975b0b329f1ffc6148221a18effa9088

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\lt.pak

                                                                                                          Filesize

                                                                                                          313KB

                                                                                                          MD5

                                                                                                          7769b6273b1519ea1a8ac9f059e78c93

                                                                                                          SHA1

                                                                                                          6d8807f4af484041bac83d5d8873d639d5f07d0e

                                                                                                          SHA256

                                                                                                          e88897c766d8746b9ad859123742dc84b4dc9e6bd05d10a9262b15055a67758a

                                                                                                          SHA512

                                                                                                          9c91942cb73bc0c2dfdd94a93759520d9a3ac7f6b43ac826d00d2ff46c6335ed87126024bfa955e9c9e744d437a832188d66ad238ae66378a23210b9d1e740ae

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\lv.pak

                                                                                                          Filesize

                                                                                                          310KB

                                                                                                          MD5

                                                                                                          17b9ff8c299fff962e9b9bc0d5f2f15b

                                                                                                          SHA1

                                                                                                          6224d9bf81c4771033e14477da0a652336326036

                                                                                                          SHA256

                                                                                                          7e4a42d3cc06b7c9cfebad08391de3a275ec129ac20d36ec90ac136ee88223f0

                                                                                                          SHA512

                                                                                                          8bd3f102b933b94cd0da09e77c78369a156e2ac22f29888ac0c9db8d9d4e2a7e4eeac99942ae7a8785c6207a0277c374c1727712a932922c10646e3fec609963

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\ml.pak

                                                                                                          Filesize

                                                                                                          728KB

                                                                                                          MD5

                                                                                                          df01088842b8c05568fce402a69bb595

                                                                                                          SHA1

                                                                                                          4b97c244ee85efb9c35b69f65f64d9cfcb2d25aa

                                                                                                          SHA256

                                                                                                          9f1fe59eb3d0da8d36715d63da958b5773ced3967e04c5314b3d5aaad2f3c579

                                                                                                          SHA512

                                                                                                          b434a12884f7a1d417c02de2fd27955e6af2329d8d8d0db9781675a16396556b89e2f46dc951e070c4077073e126d492a5db7a077b7ac3b1f80fe4fab4d68125

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\mr.pak

                                                                                                          Filesize

                                                                                                          584KB

                                                                                                          MD5

                                                                                                          f40f6817a07049b8589310b7dba04534

                                                                                                          SHA1

                                                                                                          93afea27adbd165aa1e3261cb67d5ab719ea02db

                                                                                                          SHA256

                                                                                                          5429e2696d32638253c4372cc427b3fa154d7c997dc13aab90411fdf98c8f6d3

                                                                                                          SHA512

                                                                                                          450039cebfebd9b5dd012c2980587e78b64e777bb2ed7cebd1f3174b5e88f0a018cbd60af18ef3eaeeecf9729b420a0216a0b167867be4a2814744217bbf84e6

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\ms.pak

                                                                                                          Filesize

                                                                                                          269KB

                                                                                                          MD5

                                                                                                          901240b9cb3a7a635c2d56d6ff1b3966

                                                                                                          SHA1

                                                                                                          c1fdd4ccf213bf1822696061d64930f47a017cdf

                                                                                                          SHA256

                                                                                                          a750d091e4ca00bdc647ca36c2a22cf9199126c69607fc14f468f6b3b588e55e

                                                                                                          SHA512

                                                                                                          2b316bc8d5f27f6f90434fa61d270a28f5aef2b9808b1467697c5671aedcfd99d7cf99d72f11d05dee06e73949ab2b22627ea1e925ce8b1ec65b4cd43d03eca4

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\nb.pak

                                                                                                          Filesize

                                                                                                          264KB

                                                                                                          MD5

                                                                                                          5c901b43287edab65f05464dbad3e301

                                                                                                          SHA1

                                                                                                          d76444677a7eeafdfe0bc27a0ff892f028144d67

                                                                                                          SHA256

                                                                                                          0bdd86ed3444e7e5508dfe4ec483673c2744925accaa5529bff4037cd1b0c2ed

                                                                                                          SHA512

                                                                                                          46fbe41905a44fe034f3b0798459a2b5bfb4ac408bb90fb5f0f9e82c91407e4b6eddaa82173c0926784881acee514da71284ed02decb49d99cb235784d072da2

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\nl.pak

                                                                                                          Filesize

                                                                                                          275KB

                                                                                                          MD5

                                                                                                          884f7faf0e79d04c6536506d6f95eab1

                                                                                                          SHA1

                                                                                                          39334913aa447b35012a8d7100e7f91e805c7e9d

                                                                                                          SHA256

                                                                                                          b4d9d873df0ab126f4a312755fde331d4d246519f1757f32087b36714ef4249f

                                                                                                          SHA512

                                                                                                          77a4379e148c7886950b92bdf8959c12c8695b7121be89142f4d4190cf32c43b8accb77f0c40718cd3c7e3ac0f90e99f3dcf5992140a5769821fc2adac988e18

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\pl.pak

                                                                                                          Filesize

                                                                                                          301KB

                                                                                                          MD5

                                                                                                          41ad390a8cc5fbd5b1f352e838b42ce1

                                                                                                          SHA1

                                                                                                          9efa8f2e5a0312e83f737929765a86112a874272

                                                                                                          SHA256

                                                                                                          979c4336b428df84e37a2a51a7c5f311ac33ef6e4edc309c138ab2866dd065c0

                                                                                                          SHA512

                                                                                                          1beb3c66c5b4f9d128e8badcaa8b9dfa9908d74ea910c40a7cde8be3b9b704525e7ddf1e646013cfecf7c66585975b8a8e640b43b27771335bbaa90158f45d01

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\pt-BR.pak

                                                                                                          Filesize

                                                                                                          285KB

                                                                                                          MD5

                                                                                                          4792f1e39c6875d8aa5e911f16ed638d

                                                                                                          SHA1

                                                                                                          c04ecb497096be4173f9aae3f0ae6accc8324156

                                                                                                          SHA256

                                                                                                          a39bf79dce50c0ef227c3f326728d12c7675a79ab5d4b891fc56913bcbe83e5e

                                                                                                          SHA512

                                                                                                          5fabf0e030f94c959eac797ae401f28b76ad63816e88d26e3875168978d7448317e3f86aa99b15c0ff266505c5dcb30124c796c6c46c0b90e09ce21b77324d69

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\pt-PT.pak

                                                                                                          Filesize

                                                                                                          288KB

                                                                                                          MD5

                                                                                                          0db54f0f25ec3a19dff541ba223bd5b4

                                                                                                          SHA1

                                                                                                          dc1f0c9b1c2578490af5923df179a92814c04904

                                                                                                          SHA256

                                                                                                          ff89da2b21c03475373f3839615c570d15b9929fa2cea991105915ef4e648d69

                                                                                                          SHA512

                                                                                                          96060c6c548085f019f3f127c4250ae6620c2b4f206da9203db94a7d2146c945b5384a661494ad886ceb35cf3f45500302b01009e08b43e549e17ddc318bc48c

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\ro.pak

                                                                                                          Filesize

                                                                                                          297KB

                                                                                                          MD5

                                                                                                          14ee5c1a362e753a5c44b11343430fdb

                                                                                                          SHA1

                                                                                                          b87e4750d5319c5c695f1581feaacdd71abe0cda

                                                                                                          SHA256

                                                                                                          ac3134a201073f6482a4cceb29a745104325ac76b7ad0d262ac7567584f450a1

                                                                                                          SHA512

                                                                                                          ed647aa3f3ccd5033e41c8cbb8f85d1bd0dbf783472668abb9a7e83ce5ce05706b9d67d5cfb4c28791414e77b5ea9ca5335189545ee79475d3f7cf58c1f12377

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\ru.pak

                                                                                                          Filesize

                                                                                                          477KB

                                                                                                          MD5

                                                                                                          3d28ef9e25426b08409db5379cfd55e3

                                                                                                          SHA1

                                                                                                          25fefc87d6233da5b287dbbf04a63c34cb9c5571

                                                                                                          SHA256

                                                                                                          b81a0b0175225dbdf35150dcc0c36154cfc042c1525df216d68034f0ae609057

                                                                                                          SHA512

                                                                                                          210b8bf28519c1e1576dfaa76260ceb6fe5dc46d23a6c74f1eaba9e08abb310b34989f0e667b6839999f765cb9bb77d35636db63ba082d471c6b73819b357995

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\sk.pak

                                                                                                          Filesize

                                                                                                          308KB

                                                                                                          MD5

                                                                                                          b37b81799942fc174e05b6aac03ea4c3

                                                                                                          SHA1

                                                                                                          788d6d10c82614465628f79bbe1f2346839a582e

                                                                                                          SHA256

                                                                                                          579a167528badf2a6feafbab487bd2314dd6107d0cc87df17a88ae325ef16319

                                                                                                          SHA512

                                                                                                          31bb82eb4434665a1b22a21e3e91b48fb2fe78913aac18475f8f328f05fafb2e4bffdd1565b8f48c67061fbf760ad217300882b5871d1753255d969be2b49b44

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\sl.pak

                                                                                                          Filesize

                                                                                                          294KB

                                                                                                          MD5

                                                                                                          4138dc422fc6a5afb1a855ffe0caba32

                                                                                                          SHA1

                                                                                                          8b23cb3c91167908e181eb0ce9d730ca5b3179e7

                                                                                                          SHA256

                                                                                                          7904fb9153a65105690d76ebda6e9edef2852b868f6a8d2e989b2013d40ffc3b

                                                                                                          SHA512

                                                                                                          a578919421c6458fd187d5985d721257cfb7bc3404f174dff413c211f29cb2d4552699fe10f0c01a651e224c1c7f3189706aaf71107187120a4260214881e531

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\sr.pak

                                                                                                          Filesize

                                                                                                          451KB

                                                                                                          MD5

                                                                                                          97ef86fc3b66a0a3aa4e1be4555369f0

                                                                                                          SHA1

                                                                                                          bbe68527d0c4c9e6624920d548c0ab0c09dbac88

                                                                                                          SHA256

                                                                                                          d5a48e324fba0fe6ad0b08da12fa2f4b9279b6271d36710663b3462794a0c7fb

                                                                                                          SHA512

                                                                                                          fd7802060a8891df3ad2df1252e0fe09f227c7ca81715917fe0020277d28788326d9798cb62acb8820f4701fb18627f78b6d22d9ee8ee402abcfeb4704718ef3

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\sv.pak

                                                                                                          Filesize

                                                                                                          266KB

                                                                                                          MD5

                                                                                                          f2bf46d97477489d80659d0be53d9d05

                                                                                                          SHA1

                                                                                                          a76378ec45dcdef0c596aebe8a4cf36dd3f9c01c

                                                                                                          SHA256

                                                                                                          196265eea8a2d8746953564b11d64dfc38acc9b17d3e38965f3ae1ba78841e32

                                                                                                          SHA512

                                                                                                          d65d27d04beacb20d3367af016ef55bea774c782475271e0a0573d2bff2912835d96a803c216ca5f43b56d142e6a77b41a67f35c5bc704c10f5e2aee5d6b7348

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\sw.pak

                                                                                                          Filesize

                                                                                                          273KB

                                                                                                          MD5

                                                                                                          e99bc71c3caeae580ef7060155ddd0ff

                                                                                                          SHA1

                                                                                                          d6986e1fe1dd6c110b05f44f84e956ecac188b97

                                                                                                          SHA256

                                                                                                          4282f200af58345ac756dbf88d0b898d26750f5aa16b7d2557b4d31c0ec126c8

                                                                                                          SHA512

                                                                                                          6bef16c9633387a3a0557cb644f152210d75157ac9b8ab1af6b94bdbdfb48b2511d0adc84d269ad16a439415ec46b78ff9a2e743bf72238cc5f25a4ce5bbd7f0

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\ta.pak

                                                                                                          Filesize

                                                                                                          703KB

                                                                                                          MD5

                                                                                                          48554783d89587fe96d94cc1afb58248

                                                                                                          SHA1

                                                                                                          be0843e27225df82cbb27f017acb7bac27c92c5e

                                                                                                          SHA256

                                                                                                          df0d976ad84bd0dc165f341ca9c5dfe7995a4f676c1c0a09d7a4716747e94896

                                                                                                          SHA512

                                                                                                          2ec38646a550e86bd6634247de2a49be20e9f3c09820284da82f7aaa6ceabe32920c4395d3bcd728e3370f8342627a9a9f12b6a222de145213efe57239183784

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\te.pak

                                                                                                          Filesize

                                                                                                          658KB

                                                                                                          MD5

                                                                                                          079fbd6adf806504199dd0b05c87c697

                                                                                                          SHA1

                                                                                                          4fec8c3bae9b48f92e35b609fc3977eda5de2039

                                                                                                          SHA256

                                                                                                          ee2697e8850803f08bee80e461833bd9f4232532c3f569f56521b1320c99e5e2

                                                                                                          SHA512

                                                                                                          722c6f3f6f61a8eea6965eae290e580a3263b894e07f7aac08fb6cca67e668db92a874728e32764ee0c10f5307b753d1589b8cae5c8a39edb29c7253591c017d

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\th.pak

                                                                                                          Filesize

                                                                                                          556KB

                                                                                                          MD5

                                                                                                          433dbeabe2d4c70255f1685ece8fb97b

                                                                                                          SHA1

                                                                                                          966c16c364b4f3ae6ccb8c5019c0b6bca75b593e

                                                                                                          SHA256

                                                                                                          dedb178d79730bb0282605f7bbc6e410b03ee7bdcee1a64c08d9e9c442f49942

                                                                                                          SHA512

                                                                                                          b5f3d434f71b62136647700e7d4c4e207bafeeb20cdb03019c6cd6580e61f88f596a4f2a0ca77b010f38b41a3eaf5df8e2a00e06764db17244083cb95703213c

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\tr.pak

                                                                                                          Filesize

                                                                                                          282KB

                                                                                                          MD5

                                                                                                          1a505f3f30511c2b05eb29ee0e0bff26

                                                                                                          SHA1

                                                                                                          08d4002d32dc5ea8a9476495786f5d5c1bae7ea6

                                                                                                          SHA256

                                                                                                          27627a61c6857b80b5eec4f6720b585f82b38271b7470c00a444735beee254e0

                                                                                                          SHA512

                                                                                                          d925f59cc9af4d55ad5daee42094ddf5d120eae816cddb56e906cd8da47039502f7608e9c4af77994ee7db585697fb26dbbd1c2e7c0bee4e3b194c9eee80eeff

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\uk.pak

                                                                                                          Filesize

                                                                                                          478KB

                                                                                                          MD5

                                                                                                          e21f45d7685b75be483013e1e8dc8237

                                                                                                          SHA1

                                                                                                          8f4cdd3dea580d7671117e9c49891212ab950686

                                                                                                          SHA256

                                                                                                          dd57df6e7b591b3bd6663743c52f4c5f3a7a24e90fd8045b03479707f25702b3

                                                                                                          SHA512

                                                                                                          b29d8c67a259e4221e9cbb082f41a1b008f665e18dac568c7ac75fd40ee1e1e00df8bcd65825fbac63d51b1bf555c5c3752b96a9c8a4a153cd325377a165a048

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\vi.pak

                                                                                                          Filesize

                                                                                                          332KB

                                                                                                          MD5

                                                                                                          561050669f78bd04d0431de3eb98d160

                                                                                                          SHA1

                                                                                                          028a78bbaabe19ac338648ac95a8b944254e8d3d

                                                                                                          SHA256

                                                                                                          922eb514cc20dbb44f41745c9e793756f8b46892504207e75de188be0aca6333

                                                                                                          SHA512

                                                                                                          2df7ff472a616c9271da813a66c6bd98809d788c7dc752ff0f3f68423f245cadd6945a5424af740b17d14f4f6935a2f2bf030b369dc8a39fa6e968d7f2a1897d

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\zh-CN.pak

                                                                                                          Filesize

                                                                                                          245KB

                                                                                                          MD5

                                                                                                          54415acf2d54c65718c99ed78b4bf3e5

                                                                                                          SHA1

                                                                                                          311937480b01256a1e50d0556df9b4f9f9a46424

                                                                                                          SHA256

                                                                                                          3648945ec3205f590da62f76af957d8a4175890e6ddb5fd1103beeaf66728c7a

                                                                                                          SHA512

                                                                                                          4eba5d0f1be81e72699d8429252877096524b4e27fd7d8ac480ec13cb60a83f4b8288823299c1c4e210699278588662e578814b8061bd5b72b5179b956624fc9

                                                                                                        • C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\zh-TW.pak

                                                                                                          Filesize

                                                                                                          245KB

                                                                                                          MD5

                                                                                                          c709c2e92d4c0a1a2fd30f5350bed636

                                                                                                          SHA1

                                                                                                          31c8463300bdfe0238f167451a1adffc4fa899a3

                                                                                                          SHA256

                                                                                                          37a8707ce5a07b4363579e2d411a1c641913ed1e0377ae1e8cdf70146cee889e

                                                                                                          SHA512

                                                                                                          38f8da72ecbf73f10a8109ba51f162e77b0f567f7415fe2fa17a2bd7677d9562ff8bd5c136251f44c192c7618cdf72684dfe11070f478255828a5bcc5df8c01d

                                                                                                        • C:\ProgramData\BlueStacks_nxt\Client\Assets\exit_close_click.png

                                                                                                          Filesize

                                                                                                          447B

                                                                                                          MD5

                                                                                                          b09525b48c0023f893d6b64d06add4b1

                                                                                                          SHA1

                                                                                                          10ecd439ea04e02eefe17f6c110d0c0a78a1db21

                                                                                                          SHA256

                                                                                                          caa2a8fe9b282939a21b86f8f61fb0c9452222cc3409f06cbb0dcc45613aca8e

                                                                                                          SHA512

                                                                                                          c6f5a7014c24133eb576708ca17d15becf2b45ec278b3f94e5275e47c78cf0f2eb8bb1a17d277d1a665039f38f2e25faf830e275f426b0a94c6a3da096b6204f

                                                                                                        • C:\ProgramData\BlueStacks_nxt\Client\Assets\radio_selected_hover.png

                                                                                                          Filesize

                                                                                                          577B

                                                                                                          MD5

                                                                                                          47ff3e4cc15b8c4a07e3ceb6cb619b62

                                                                                                          SHA1

                                                                                                          0318e54c613b8ff00f54d843e90ef88310c1a96f

                                                                                                          SHA256

                                                                                                          4786cfb7c98edcf01d6b670abf19c50891d56a4de87b96a5e17be142b1af666a

                                                                                                          SHA512

                                                                                                          0212bd7f6cee390d3bc221a22189b75407fa660a0951c7f768645bf97e7b61ee86fa9b1de6f546ff1151560dcb3b071db8c14a7b08b0e771b539a817b31b154e

                                                                                                        • C:\ProgramData\BlueStacks_nxt\Client\Assets\radio_unselected_hover.png

                                                                                                          Filesize

                                                                                                          480B

                                                                                                          MD5

                                                                                                          22efccf38e15df945962ac85ac3aa3b7

                                                                                                          SHA1

                                                                                                          b94a8615dc92982e1637680446896080f97c2564

                                                                                                          SHA256

                                                                                                          0ec39ed4bf89a341f1b5aea56d0e99ff5c923b9c3a6a81adeb9ff21764136f92

                                                                                                          SHA512

                                                                                                          41a4dbb57abed1a16aa84c72c202da461ca45cbaf68f69a10cb3e5529e8dff659e89f7f4459d1e2e8f3549c6fd51f23fc8422f86667577ebed5ab5df149c79ee

                                                                                                        • C:\Users\Admin\AppData\Local\BlueStacks X\Log\log.txt

                                                                                                          Filesize

                                                                                                          770B

                                                                                                          MD5

                                                                                                          fdcae2304ad2a731aad7086e09a458f0

                                                                                                          SHA1

                                                                                                          39e108cdd64f3f4088b1862efa2bc92138a597ef

                                                                                                          SHA256

                                                                                                          9d918674b8fdb77cbbaae98388f917b99eddc1107331c77a5c2fe8fd75a81796

                                                                                                          SHA512

                                                                                                          8ec286fd1a778903e5b2b59a0d48e01b4e4fe576eb9610b98c5547a06bcc7d9464ecfccce869003fe1cfb1ec75db22bf8186a453892106bde6709a69eb58b200

                                                                                                        • C:\Users\Admin\AppData\Local\BlueStacks X\Log\log.txt

                                                                                                          Filesize

                                                                                                          4KB

                                                                                                          MD5

                                                                                                          8bec3841c1dead726f0dedc4c2b67106

                                                                                                          SHA1

                                                                                                          c64c7138acd94c7f2aa6aaf057c16b0910adc5ce

                                                                                                          SHA256

                                                                                                          17b5da495ac2f6e8da931dcf8743e81b5822fd726a39402e17d6f03886bd442f

                                                                                                          SHA512

                                                                                                          a24489aa4298251660bcda7d60d0d43e440a6ec994855307a6e5d0b40b8f09182b92a6f19dd76101689fcadaeca37e93796b7ccde7fc298b6f02f057233a44eb

                                                                                                        • C:\Users\Admin\AppData\Local\BlueStacks X\QtWebEngine\Default\Local Storage\leveldb\CURRENT

                                                                                                          Filesize

                                                                                                          16B

                                                                                                          MD5

                                                                                                          46295cac801e5d4857d09837238a6394

                                                                                                          SHA1

                                                                                                          44e0fa1b517dbf802b18faf0785eeea6ac51594b

                                                                                                          SHA256

                                                                                                          0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                                                                                                          SHA512

                                                                                                          8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                                                                                                        • C:\Users\Admin\AppData\Local\BlueStacks X\QtWebEngine\Default\Network Persistent State

                                                                                                          Filesize

                                                                                                          489B

                                                                                                          MD5

                                                                                                          543a76644a8e2db84c37c220e1b0e9d3

                                                                                                          SHA1

                                                                                                          7cf9566d834fb196be1ecc969ab3800cb845ae61

                                                                                                          SHA256

                                                                                                          3a7b8dee12f62a3263be3e81526ea9ad110a5a120eefea9165fdacdedcff64ee

                                                                                                          SHA512

                                                                                                          d1fece64561d523914befc77835879eb3a018dd43bb766a802007f2420bdeec8760fed3d2d8f3b765a3192f38525705215288ad510a164a892973f08c7e9dbf0

                                                                                                        • C:\Users\Admin\AppData\Local\BlueStacks X\QtWebEngine\Default\Network Persistent State~RFe5b65ac.TMP

                                                                                                          Filesize

                                                                                                          59B

                                                                                                          MD5

                                                                                                          2800881c775077e1c4b6e06bf4676de4

                                                                                                          SHA1

                                                                                                          2873631068c8b3b9495638c865915be822442c8b

                                                                                                          SHA256

                                                                                                          226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974

                                                                                                          SHA512

                                                                                                          e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

                                                                                                        • C:\Users\Admin\AppData\Local\BlueStacks X\QtWebEngine\Default\Session Storage\MANIFEST-000001

                                                                                                          Filesize

                                                                                                          41B

                                                                                                          MD5

                                                                                                          5af87dfd673ba2115e2fcf5cfdb727ab

                                                                                                          SHA1

                                                                                                          d5b5bbf396dc291274584ef71f444f420b6056f1

                                                                                                          SHA256

                                                                                                          f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

                                                                                                          SHA512

                                                                                                          de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

                                                                                                        • C:\Users\Admin\AppData\Local\BlueStacks X\cache\QtWebEngine\Default\Cache\f_00000e

                                                                                                          Filesize

                                                                                                          201KB

                                                                                                          MD5

                                                                                                          762d651b3659b78aaadd643672f395b4

                                                                                                          SHA1

                                                                                                          475f84a6cb0eda14d196ffae0b05ff224aa25ca1

                                                                                                          SHA256

                                                                                                          b15960fc83e52326bab2318e7d9966a7e2bb749f909a20ec8c79de9e67136588

                                                                                                          SHA512

                                                                                                          a3d62d4841571c5d0a89dc9ca17f3080be8a86e83aa059ba7e2c9e3dd57e7b65ea940f3713fb00f82207914a6a390d138c600a7c8f3cb7c3b1066dee297285df

                                                                                                        • C:\Users\Admin\AppData\Local\BlueStacks X\cache\QtWebEngine\Default\Cache\f_00000f

                                                                                                          Filesize

                                                                                                          121KB

                                                                                                          MD5

                                                                                                          864b95c35a68896755b0bbaa3dfe9da7

                                                                                                          SHA1

                                                                                                          a7d8360923bf2d4a927ff9581aff67adf0999d8b

                                                                                                          SHA256

                                                                                                          34fe7ba81d687fbe278d1a2d218e2cfa871b622a2c89d83dd361bff0c29ee39d

                                                                                                          SHA512

                                                                                                          3c54dab83ebc0d7d0a8be53efc3dccbf8a2c7e8a28f46bcfab1b1a65f54ce7b54680b5d31f8cad2e4efffa23694dec8f37ce11f3101924a0866f8039786ac58c

                                                                                                        • C:\Users\Admin\AppData\Local\BlueStacks X\cache\QtWebEngine\Default\Cache\f_000010

                                                                                                          Filesize

                                                                                                          182KB

                                                                                                          MD5

                                                                                                          7a290835539323b7490fa9c068f4b68f

                                                                                                          SHA1

                                                                                                          144a903da574868f7475879b8910664a49245720

                                                                                                          SHA256

                                                                                                          f0e2bc7305210cb2caf477b03bb3d40463b1f51ca9b5684802b407fe9cd3fe51

                                                                                                          SHA512

                                                                                                          177153ff832fbb887c0d5925884617b93ac09c277d03caeb5f15027dd545e2c85e70d618c770cefb66274bcf0906422ec562afb14724b14bc3df67085e6ff896

                                                                                                        • C:\Users\Admin\AppData\Local\BlueStacks X\cache\QtWebEngine\Default\Cache\f_000011

                                                                                                          Filesize

                                                                                                          163KB

                                                                                                          MD5

                                                                                                          008568ff49428d51d7f53c8703c947bc

                                                                                                          SHA1

                                                                                                          443c6629214ccd22df5daf4047763fa103b47336

                                                                                                          SHA256

                                                                                                          cc959fe449a989b6b3b05160815511f63197eed52d8cf421bb3d531e9f062a1d

                                                                                                          SHA512

                                                                                                          2cf342e1161eebf13f9ea0c6464b0914b35a3ca8b45ef397c1d6b7f67d73930ece3fd059d2fe3a75c56d12180eddda80ece3e50b2840715b6366fcbefd2c5ed8

                                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007

                                                                                                          Filesize

                                                                                                          204KB

                                                                                                          MD5

                                                                                                          081c4aa5292d279891a28a6520fdc047

                                                                                                          SHA1

                                                                                                          c3dbb6c15f3555487c7b327f4f62235ddb568b84

                                                                                                          SHA256

                                                                                                          12cc87773068d1cd7105463287447561740be1cf4caefd563d0664da1f5f995f

                                                                                                          SHA512

                                                                                                          9a78ec4c2709c9f1b7e12fd9105552b1b5a2b033507de0c876d9a55d31678e6b81cec20e01cf0a9e536b013cdb862816601a79ce0a2bb92cb860d267501c0b69

                                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                                          Filesize

                                                                                                          144B

                                                                                                          MD5

                                                                                                          6eb85194b0e6b2ee5e0c90e881dc5dcd

                                                                                                          SHA1

                                                                                                          0edcfd635a19ddc39ec7709a4d376ae789195db4

                                                                                                          SHA256

                                                                                                          9cf1e670147973c027ae7731e2649104463148436f48fabf1ed28c407ec1df20

                                                                                                          SHA512

                                                                                                          3a2d81a1e99d3b72ba74e80a482f384967d9dfc63ebe473156b36e24e4524997bce12aa8908da7b283c25732546c566fcc089cda7ad48425a0cdce22f2a9e59e

                                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnCache\data_1

                                                                                                          Filesize

                                                                                                          264KB

                                                                                                          MD5

                                                                                                          b42992eded46bde9fe17679a19eb0af4

                                                                                                          SHA1

                                                                                                          1491ba7f6982033d7ea727368ff3d2e29c5fc87f

                                                                                                          SHA256

                                                                                                          5020a391c5f12765092c260114ab4f40d36c71509c2514efa72d87ffb4fc636f

                                                                                                          SHA512

                                                                                                          aa99f10e91019728d97ea5dad2d1fe80774b8af6f1bbb0aa1e69759defca28a6887b6c0fe5b3c27ca117c5a4321f1c054412e51739c88e948de885d44214d7d4

                                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                                                                                                          Filesize

                                                                                                          2KB

                                                                                                          MD5

                                                                                                          d6e6fccb23444b7eee3532ab91f4aa7d

                                                                                                          SHA1

                                                                                                          a4e870e2474ca2b340aff99c701ae152d759d1b4

                                                                                                          SHA256

                                                                                                          843c7673dbb60f51bff3cd1f8b007f34cf58b199e8ef75c0f71d5e1910f3c52f

                                                                                                          SHA512

                                                                                                          04d1b4b0b91a8566fed2d7c2fcb105ebefa64a4a3ef19060bb3af4ebeb1283a6e15753667f9217500371666f838d6bd234511dafbea095e000d5e7a26e0260e0

                                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

                                                                                                          Filesize

                                                                                                          2B

                                                                                                          MD5

                                                                                                          d751713988987e9331980363e24189ce

                                                                                                          SHA1

                                                                                                          97d170e1550eee4afc0af065b78cda302a97674c

                                                                                                          SHA256

                                                                                                          4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                                                                                                          SHA512

                                                                                                          b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

                                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                                                          Filesize

                                                                                                          356B

                                                                                                          MD5

                                                                                                          08b40ef2e5c5e3a402a2bbb49b6aa656

                                                                                                          SHA1

                                                                                                          2db9436765e04fbe2616d58156181c4bf200ecad

                                                                                                          SHA256

                                                                                                          c6d3bdf9fb9ad98605d3402abeacf46d46a5cd40a5b4367f4f67acb379da76b2

                                                                                                          SHA512

                                                                                                          6a7fc0a39e03218516823e3c901d55247fa175ff40a51a587f95bc0fcdc6efcc70ab9ab0fd84495bc4f753c1b36adc2387d63a057074d84f198f76f021bf6fa5

                                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                                                                          Filesize

                                                                                                          356B

                                                                                                          MD5

                                                                                                          3b6c6aab58e6efe880b36c0b7f4dcfc3

                                                                                                          SHA1

                                                                                                          f022fa376121655f3d266a5c87abaa45cc8d4ac4

                                                                                                          SHA256

                                                                                                          6f6a0cfb7d391cabfd3e213c40b300813626f98e21f8d2c0a58d55421ed48078

                                                                                                          SHA512

                                                                                                          b42203526968151c4bbb940623e8bf61ddd0f22ac329a3fb1d5a88dbeca0c6983774f991c0550446a42d6baa9819d6f19f17e7441da7af3d3f4599a89de45cd0

                                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                                          Filesize

                                                                                                          7KB

                                                                                                          MD5

                                                                                                          d55d948bb0d605f77c52655f53728854

                                                                                                          SHA1

                                                                                                          f73aef807b52f5810be4a4fc62a201be7b54cab9

                                                                                                          SHA256

                                                                                                          473ec66bd3bef11650d6673ebc61825fb0ddcacbbc9fe988e5ccf1bb47a280aa

                                                                                                          SHA512

                                                                                                          1a274bbaffb98dcccd5645b2c42b60c47e04c32e0121e57cc2e2175233a06e942df7ac324afd8db9885e86554cc8ee549f3e7f7de5a154dfcaaa4d8a990b50ef

                                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                                          Filesize

                                                                                                          7KB

                                                                                                          MD5

                                                                                                          0c97541fe6053037792c5a0d962a53f3

                                                                                                          SHA1

                                                                                                          1d02f4366a4c37b1bce5959f0d1b603cd118711c

                                                                                                          SHA256

                                                                                                          8d58d2a33e0ec95d872177bde2c90be395390a4918788f79a659eabfccc5d35b

                                                                                                          SHA512

                                                                                                          c373f9e411936248543a017076db3ac47e759448f576595d31f6bfaa71fd915494c0905a2876a59500b0049dd22e6e80ac3765e15f5bb1713e3c39dccab8abeb

                                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                                          Filesize

                                                                                                          6KB

                                                                                                          MD5

                                                                                                          79296339f36b151f26683df773b48ae7

                                                                                                          SHA1

                                                                                                          05f707eee0655fdbb2f6c1a401bb60f4915241fa

                                                                                                          SHA256

                                                                                                          372e87aa83e75a367aa6e26df0d770588ba207953706a63501832c1516b6e9bc

                                                                                                          SHA512

                                                                                                          af171718ff60739b28bb3b1d82f9462a9f7bf38e6cc2506e45135afbcd60cb28036d28d8f375d584ebe3df0dd8bb6b1a0694fe0dd327687814b39ffb62f25190

                                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

                                                                                                          Filesize

                                                                                                          16KB

                                                                                                          MD5

                                                                                                          32cb872fe4d34045a349293b23b2024a

                                                                                                          SHA1

                                                                                                          b0899f8b027a71c80698e844eccf0e20ff208f0c

                                                                                                          SHA256

                                                                                                          65415199f859d040ab9a46d1ec8a0dd1c6dfa5fd64fd44b21a7779a9571120fb

                                                                                                          SHA512

                                                                                                          5260d34d2e37ca4da3216d8c3e421f8a15368d0d5d304d793b1d167b7a2539a9afdeadb7675c36f421ab8acffff495c40dfccb7a266685a0479c3a300f2ab9e9

                                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                                                                                          Filesize

                                                                                                          140KB

                                                                                                          MD5

                                                                                                          60426848cd755994e3c6059142c7e05c

                                                                                                          SHA1

                                                                                                          04ffa549aadeea31e4bcd7b986ee9f322ddd8d55

                                                                                                          SHA256

                                                                                                          14e40a0d90117e4696c19c34eaf9216e8ac81f2a2bc1fac2f24a5a008754756a

                                                                                                          SHA512

                                                                                                          e44a90cff03e35d7690c67bae75d43f750bfaf63a61df9f807f97325db99b93c1a4da51ef306c9a0dfc3a3a6f7323879091893989e61a8f3a4f4f3d026c1ba88

                                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                                                                                          Filesize

                                                                                                          281KB

                                                                                                          MD5

                                                                                                          6d7fc3faa75cba8179a43195e5523235

                                                                                                          SHA1

                                                                                                          7ccd5fb8ae58c91c021377f5b2703adffd34a64d

                                                                                                          SHA256

                                                                                                          3997377a61fda7d08c94be3ef536da108cc80cd39d2b2113f022c0aa6bfa50bc

                                                                                                          SHA512

                                                                                                          11d00ef4a1caca7a364836fe04440f89d61e607cf7a8b17a9cd64edb3db35fa3cf12734b86b80af1e16cffc64033ce823112b653f17fb26cf89c562ea9c2e27c

                                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                                                                                          Filesize

                                                                                                          281KB

                                                                                                          MD5

                                                                                                          4d0aacf860be3453b9d42a4ab319a3c7

                                                                                                          SHA1

                                                                                                          477ac381d2986ab285f12273eaebd84ddc85c416

                                                                                                          SHA256

                                                                                                          d3a7b6f36d905db547b390758472aeafd622ac79a27472fa861f6a68b94c5be8

                                                                                                          SHA512

                                                                                                          5cee6cb1235e38df7ac603220a78584df7cb41ef9d7cd27fb56bcbdcef6babee59a76d697d65ad449f5e65cf5697489fc0036f044b6f78ddce335c25a7a19c43

                                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

                                                                                                          Filesize

                                                                                                          86KB

                                                                                                          MD5

                                                                                                          ef5af7dceb7ee26745b0f30ccfc0a899

                                                                                                          SHA1

                                                                                                          85702ee5d0dcbf22b106e08e4f589dc4b73c1ae8

                                                                                                          SHA256

                                                                                                          43a03fac4433e8e49e7dfcaf75cd7f5ae6fa1152bd1a59f453fc4df0d9fee4c5

                                                                                                          SHA512

                                                                                                          3440bf4593d401b923a1cd0e35188e6bac83c087de57c6b8a330855c04f836958b073b7870c6a1c7a950613c9efb409787a952fbad9e6c4631b9d8b429740483

                                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe5b0ee1.TMP

                                                                                                          Filesize

                                                                                                          83KB

                                                                                                          MD5

                                                                                                          a8bb838a6ff6a0abc40768ad653cdc05

                                                                                                          SHA1

                                                                                                          3424dedae7826ff725f9472558d6ae150d0ba867

                                                                                                          SHA256

                                                                                                          e149f34cc3d9eeed94980c73dcd4da3ee5bc5ed81eff8ac28c5eaf4337aabb1f

                                                                                                          SHA512

                                                                                                          9b4856de290dc46021f609503328abe6cf53a1b3733ee5f8d5db241699d4c4700605bea7fbc6bc36c4e93038f8b109f60f3f31ff6f466b3393f9572e4b2f4794

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                                                                                          Filesize

                                                                                                          152B

                                                                                                          MD5

                                                                                                          5c4605aed5013f25a162a5054965829c

                                                                                                          SHA1

                                                                                                          4cec67cbc5ec1139df172dbc7a51fe38943360cf

                                                                                                          SHA256

                                                                                                          5c16c584cda1f348a7030e9cab6e9db9e8e47a283dd19879f8bb6d75e170827f

                                                                                                          SHA512

                                                                                                          bf2a5602fde0de143f9df334249fef2e36af7abeda389376a20d7613e9ccad59f2ca0447576ac1ed60ecf6ab1526c37e68c4614d79ae15c53e1774d325b4036f

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                                                                                          Filesize

                                                                                                          152B

                                                                                                          MD5

                                                                                                          3066a8b5ee69aa68f709bdfbb468b242

                                                                                                          SHA1

                                                                                                          a591d71a96bf512bd2cfe17233f368e48790a401

                                                                                                          SHA256

                                                                                                          76f6f3fcef4b1d989542e7c742ff73810c24158ac4e086cbd54f13b430cc4434

                                                                                                          SHA512

                                                                                                          ad4d30c7be9466a797943230cb9f2ca98f76bf0f907728a0fa5526de1ed23cd5cf81b130ee402f7b3bb5de1e303b049d2867d98cf2039b5d8cb177d7a410b257

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000051

                                                                                                          Filesize

                                                                                                          51KB

                                                                                                          MD5

                                                                                                          60c1416240e5d9083a1fcbf129ca62dc

                                                                                                          SHA1

                                                                                                          70c87048a7452fc6242f9fb968a59a4e3356859c

                                                                                                          SHA256

                                                                                                          7537744b6da3ebcc256af0400b073cf38d645efd9f0df94b465d39c6582bb682

                                                                                                          SHA512

                                                                                                          ae02d4c2e740f1855dd4659bb4fb70be4ebb4c207ff36ccc914dc9f4eab087257ab206e050024fb13ee160f453ace01483f485fa87f6c72e99e0c38fa8e0054b

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000052

                                                                                                          Filesize

                                                                                                          71KB

                                                                                                          MD5

                                                                                                          6cdc00c6ad37671897de02faa8f9670f

                                                                                                          SHA1

                                                                                                          6ca40395f87b32a0ef2d8b1a27cc0caf993a8f85

                                                                                                          SHA256

                                                                                                          3b1687d22763db8aa3803aba5d8567f91414bfe57b1c130ed9245c33bc885a8f

                                                                                                          SHA512

                                                                                                          1de607e7fb6b3a5c5ad1c16f3597a01d71fb9d08f6be7d45e96ffc4c0fa63948d3f6c1b94a9f3a0d9e996b40468046e42b2c93b74345da95ff26d55b6fa17678

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000053

                                                                                                          Filesize

                                                                                                          35KB

                                                                                                          MD5

                                                                                                          2640ddc532872bdf032cfb99ae0e2bef

                                                                                                          SHA1

                                                                                                          094cecd175db3744938184fbd357b6d54ecb9b53

                                                                                                          SHA256

                                                                                                          3320c8d0d3ff8fa60ad87e0a2ca6bedc8f469854686ece173732b1abd4aaa873

                                                                                                          SHA512

                                                                                                          9a62178ec29d57136ec4d38fa5f4007fbe6c2773c13af937251d57696290dbd6e6edaccab0a2c829f221bb37038b9fd81c60dd030d6b3c50de3fe0fdc6823403

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000054

                                                                                                          Filesize

                                                                                                          35KB

                                                                                                          MD5

                                                                                                          77bd9e2ebfa2a176f6de0bf5b917f38e

                                                                                                          SHA1

                                                                                                          48760348561ba155c5a57bb4e1ac7fdf79372dbf

                                                                                                          SHA256

                                                                                                          1193425683b027058dc98df4952ba744683848318dc4dcfad5e5f667d96dc2b0

                                                                                                          SHA512

                                                                                                          1a9f85ca1af311b5acbd331947f0c23fa94b3809ecdc9d354fc0a95f665bee8c5d492e8508bbf906a885cf70769c5339f59da964b0e34a8c76ee7699b2d3479a

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000055

                                                                                                          Filesize

                                                                                                          21KB

                                                                                                          MD5

                                                                                                          f52d27ff6c5612ef66841125de290c9e

                                                                                                          SHA1

                                                                                                          6b84a74a679bc97033a834b95c55e4b49cc706d4

                                                                                                          SHA256

                                                                                                          bf3019f08243214df29380557f72ab8149f38b405785a90063249eef62e88d46

                                                                                                          SHA512

                                                                                                          a672845d7d557d60297ccccb6e5712eb72038761c51c3fce5538ab94d6c34d7d01222fc446edd1da0a3f6c7a44352302f791bbdd02a7081ec9b11c07c9aa1989

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000056

                                                                                                          Filesize

                                                                                                          145KB

                                                                                                          MD5

                                                                                                          af764a312964df929fe76d4cb0a8c4bd

                                                                                                          SHA1

                                                                                                          b8cbfe63c83f3aef43e9648aa509a8a2d3cc279f

                                                                                                          SHA256

                                                                                                          c41949c095d840dc98d2f3d4872cdf9fe32a9ba083179085b5b83c880bd69f87

                                                                                                          SHA512

                                                                                                          f845566bd66641677819cb9def9de33bd0ab8be9befd0e47f6d335af6907d6aad13b8394298d049af90056b3c4fa12ae8446ac0e8fb865ab66233f5693aa54ae

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000057

                                                                                                          Filesize

                                                                                                          106KB

                                                                                                          MD5

                                                                                                          159be551f416f5d6916636e48a0fc0a5

                                                                                                          SHA1

                                                                                                          7e2edf90854c1ed8ec7e3d5a59f2297c637edeb8

                                                                                                          SHA256

                                                                                                          3a89163b055755706a03ed63c2b8ba91fbd7502ac363d5764d3ec49b530c5402

                                                                                                          SHA512

                                                                                                          7563d865c583ea8f0981a42766575a6d09223dbe369825b1d46881af43d91da7be7b54d79ec95c159c8d95ef5cdc9ef71b326077add55152286097339f83b4b2

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000058

                                                                                                          Filesize

                                                                                                          20KB

                                                                                                          MD5

                                                                                                          87e8230a9ca3f0c5ccfa56f70276e2f2

                                                                                                          SHA1

                                                                                                          eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7

                                                                                                          SHA256

                                                                                                          e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9

                                                                                                          SHA512

                                                                                                          37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000059

                                                                                                          Filesize

                                                                                                          18KB

                                                                                                          MD5

                                                                                                          c8e69fc65287045e4f083a6bcd40b8e0

                                                                                                          SHA1

                                                                                                          fa3a37740705510fe08c3b286ea9a81e2e4bb04d

                                                                                                          SHA256

                                                                                                          bffefe5f48974eeda69bb6a53127b10ee8244ba7f9dd4a925f2f2c1bde189db0

                                                                                                          SHA512

                                                                                                          2735de34b5292413834fce2025fc05cd3cbdca4821243495cedc7127432f8bceb794fac4410f610f74aea4c3f8d14660841c96c926bb4ef80c79b112aecf571a

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00005a

                                                                                                          Filesize

                                                                                                          82KB

                                                                                                          MD5

                                                                                                          c67544cd52d32b49ac85e6e40297aff7

                                                                                                          SHA1

                                                                                                          f02b4b07e6733c039d048f92b4604015b2d46cd9

                                                                                                          SHA256

                                                                                                          c0be8f495ede1c3576f43139997aee2b55636125b489098d1b87b79378a6815a

                                                                                                          SHA512

                                                                                                          799ea87b9931c0de84bd5a306bd5aca2b57c70911eeff0656a50c8fdbd1b950783a7760768e6f0c652d60a46c55c90306834a59f2a8b6b393735ae559d45ffb8

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000061

                                                                                                          Filesize

                                                                                                          64KB

                                                                                                          MD5

                                                                                                          34d417511bcc66045487a4307a08579d

                                                                                                          SHA1

                                                                                                          e2161accac890a2632bd6eaa7faaefc204cff6a1

                                                                                                          SHA256

                                                                                                          fcf96f427eebab9ffb97cf4ece8a7f3b37f9756d211164112371ce5950b58e4a

                                                                                                          SHA512

                                                                                                          a626a957f521fe0cccaa14ff22f08a26a968a6dc6633f5020fc668d0807ea98bba450fe76d9dd867ddff207b324ea68e0fe4b0dd7c85e2dcf39cf307a86e18c4

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000064

                                                                                                          Filesize

                                                                                                          19KB

                                                                                                          MD5

                                                                                                          bb30ea3b46964f49ba85f475efd1fb6f

                                                                                                          SHA1

                                                                                                          1bb4aae7781af8b933e1dd4dee56879a3ef92d38

                                                                                                          SHA256

                                                                                                          7a5bfdc2463dfde6b169ca4555ce9f5a0fb21c15c3ac807967590df27dd800e6

                                                                                                          SHA512

                                                                                                          bc52e8de4712d416aebf1d403d6ee8dcb6386a93dfc6727613af487f73de69db90913a9e9781660d8dec121d720ceec9c84b260c76f0f6f565ae80967eee7474

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                                          Filesize

                                                                                                          3KB

                                                                                                          MD5

                                                                                                          d7ffe9e338689dc8a5640285502758ba

                                                                                                          SHA1

                                                                                                          1fd3a6feaf76c417b97db021e9caca3476a142ab

                                                                                                          SHA256

                                                                                                          f405e753ec8e8276e20229ab15a08e06e31f9f0320e9036914be1e40d4a6d54d

                                                                                                          SHA512

                                                                                                          e474491f29e976b0f6af135d8f72e7d084b83c2fa273bc18bb01e9fd46434ea27296eaba14e2536f6809beebf66f6ce8ca0ba7d8be515ce699346ddbf789b1de

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                                          Filesize

                                                                                                          5KB

                                                                                                          MD5

                                                                                                          4973753ccd38661b5ac5ffa6c2e3e8b5

                                                                                                          SHA1

                                                                                                          b04bc828e09969c9a3a1817336ac57613485181e

                                                                                                          SHA256

                                                                                                          aa3199fa23753f9c8e9f813bb7f6696fdccd17149dfe5c7c9ee15ba54514fe1a

                                                                                                          SHA512

                                                                                                          fd56de5662628619bb18caf7e325492c58ad705aa8e6dc57b09a697e68c420ed989830a86d896ea1206d3ca9c6ba81895e37efa5b6429d83fe0a4af718c874bc

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                                                                          Filesize

                                                                                                          111B

                                                                                                          MD5

                                                                                                          285252a2f6327d41eab203dc2f402c67

                                                                                                          SHA1

                                                                                                          acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

                                                                                                          SHA256

                                                                                                          5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

                                                                                                          SHA512

                                                                                                          11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                                                                          Filesize

                                                                                                          5KB

                                                                                                          MD5

                                                                                                          5a3bb4c1dbbe047d73b5d77527b5c6cb

                                                                                                          SHA1

                                                                                                          98b9b0d04c836d1a9bcec13ff6bf199d3551ced2

                                                                                                          SHA256

                                                                                                          3ddb7bb7eca546ee288bdc00a6ccb2e300efb6af80e7cfcd1e0bafcd3446f622

                                                                                                          SHA512

                                                                                                          f158d80acb8fa8815cf348cf0af9669a79bc407b8150eafa747a69d3cc7cc1b51366f7b13ff07f65923a2fdb079e4d9615a60e6309a7dc30f04869416a85a920

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                                                                          Filesize

                                                                                                          1KB

                                                                                                          MD5

                                                                                                          528f08dbf1dc53260d757edcad9614c1

                                                                                                          SHA1

                                                                                                          97fd3b79945ed3e2bbc92dc534aa908a0e4f6316

                                                                                                          SHA256

                                                                                                          043082a31afd8693a14907d63e5daf45a1e395df2c95506649a45c81295c212d

                                                                                                          SHA512

                                                                                                          e2c1e6dcfed56b46f3416418a9030db20f01592ade92f62bfb1824d8123aaca59f8503990367a983c492a6432c81e1e23a8b6b88f29140116b3055956d690186

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                                                                          Filesize

                                                                                                          111B

                                                                                                          MD5

                                                                                                          807419ca9a4734feaf8d8563a003b048

                                                                                                          SHA1

                                                                                                          a723c7d60a65886ffa068711f1e900ccc85922a6

                                                                                                          SHA256

                                                                                                          aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631

                                                                                                          SHA512

                                                                                                          f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                                                                          Filesize

                                                                                                          4KB

                                                                                                          MD5

                                                                                                          31f4fb0a20091cab0722f0d16923fc8a

                                                                                                          SHA1

                                                                                                          7d59986b8efd8a906833d90f5015c868a3065091

                                                                                                          SHA256

                                                                                                          293c5ed59dc4e435a6fa23c8cc116f801b9b04294e272f17a76b337824ce936e

                                                                                                          SHA512

                                                                                                          e8017a4c4bcc0cf305b1b2815b5a32d57f7fc5692d63874c0be645eae323492dfd2563e183d899a84c2ab3b7391c142973a7d6f6f76342d5e51d79ec5be15f11

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                          Filesize

                                                                                                          5KB

                                                                                                          MD5

                                                                                                          5ff010cd13e33e13ad06ac449e44ed1e

                                                                                                          SHA1

                                                                                                          959b4b215380844f403ce0fd70b1d587d0ab8663

                                                                                                          SHA256

                                                                                                          50ce9a9192940ca78037ea5a65d59c493532e5c3e1f89c66177fd7099390a0a0

                                                                                                          SHA512

                                                                                                          e1494beaf5d6e517333f26f9efc9a12d6f1cdcb660eeab5ce96cf7b0c0ac69157f2339da5bc0a36bf271a9e9a5e4e79e25abc33342549f6d95e48657fc914346

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                          Filesize

                                                                                                          6KB

                                                                                                          MD5

                                                                                                          fdda95f5f247c3031040e4a47b20bf6a

                                                                                                          SHA1

                                                                                                          fb355e325fe729cb4dabb6f5bf03c609b6a26327

                                                                                                          SHA256

                                                                                                          a9c0866d2f1358983a4b724d8de43a1beca7647d949334e920b7750418305715

                                                                                                          SHA512

                                                                                                          888a48665a6748926c6be2d2c26fdaac9cfb08c1af6130dccb0b5c29693aaee7840f4c1d92ee07b192d22b0cda24339eb0de7ac0ca1e69eed4e24e1284a13e62

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                          Filesize

                                                                                                          8KB

                                                                                                          MD5

                                                                                                          5ca302918d7797825c70971900c2d7ae

                                                                                                          SHA1

                                                                                                          a7b71cae4141f239d9568dc5abda02cef101dc29

                                                                                                          SHA256

                                                                                                          5e2601245b5e29be1299e26a20d3e0fd425ee6f56555e9193c61e2c8b0bdaec1

                                                                                                          SHA512

                                                                                                          a426d4680bd22057070aced5e3fe7aad792fee18fc9da295457ae34a252efb62496378aa082d4cf02d3b9e5df9f8eb70a9cc0715d061b80abc292dfd5753dd18

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                          Filesize

                                                                                                          8KB

                                                                                                          MD5

                                                                                                          388828155eabbc600361bfa1904ee558

                                                                                                          SHA1

                                                                                                          a9bb25a4facc43160bb13994bc4b6fa9a358a9bf

                                                                                                          SHA256

                                                                                                          110c3c378d7084cc3ee6b5a9d8f53cdcea061d8e50052c4a3b0d767d5dc7e49d

                                                                                                          SHA512

                                                                                                          55563763596ba7abb374461f93c8bf514122dfd7ca50cf785c8e1ef9d6254763146e4662b51278d969c0b2c1a7564d674e56289785ef928dedbab0a982251acd

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                          Filesize

                                                                                                          6KB

                                                                                                          MD5

                                                                                                          8980210149165f77433b6ad83c2287f6

                                                                                                          SHA1

                                                                                                          c1527b548f3d011d2a89017510ca100610793b02

                                                                                                          SHA256

                                                                                                          e0016b7af367bf81c2a5af40e883190d654e4a09a9f7090adddb138115e8a0d4

                                                                                                          SHA512

                                                                                                          eb33b9755e4144245ad232eb9ea44f29665c8f8beb5d742fe21028e457c49b1a4b0d2c21572e7a785ad3e8bd67726077fcdd90627ecc7c4c51d77c2c741bedf6

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                          Filesize

                                                                                                          5KB

                                                                                                          MD5

                                                                                                          4e271dd3afb1f7854fa32bf50da2f379

                                                                                                          SHA1

                                                                                                          bacecf54e0f40a9e395cc55841e2eff6f3f6bea1

                                                                                                          SHA256

                                                                                                          ab16d8f3671aaacea53c7de665ca22eb7cab0fe31f2280a02b1294067d1a22e2

                                                                                                          SHA512

                                                                                                          a1b6ee709296236d951054940d05b43d136f45829d91ef97ddfdafdfd54a4244b381e41284a34e9044e5581239786923e096fb05f031810154ed74b210440a66

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                          Filesize

                                                                                                          8KB

                                                                                                          MD5

                                                                                                          a6c6df885ee9bf6e54a9eccc3a404ea8

                                                                                                          SHA1

                                                                                                          bf5ffd8cc3dbf0ba9059ca7d9c964d82a401537e

                                                                                                          SHA256

                                                                                                          4226bd04aa31c064c2355bcce4cab04abf108e0e9ea27aa6a6214210eb18aefb

                                                                                                          SHA512

                                                                                                          694b56fc6633db0b2ffb7fed74ae4cf17968949a2b9c2b6a9eaf654d47f2aeb8bc32a8bae6d4b7895f9ac36088b919d3162a035254d6cf049af0f3d8ba814106

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                          Filesize

                                                                                                          8KB

                                                                                                          MD5

                                                                                                          7eeff6db7516531e14da18d418347dec

                                                                                                          SHA1

                                                                                                          18b91db7f2344ffb0a5c437d5247fd5b9de4a4ac

                                                                                                          SHA256

                                                                                                          febd1a632fb9bc63d63a618561dfedf4c3b6f2835474126f750da36f9ccb21d0

                                                                                                          SHA512

                                                                                                          a90a5f06087f57052691a0fd16dc155d36c0d6cd06ab35366f1db8347fdaa1457a9f0f3dfc814dd268bbf24b87103ec1940396df7e0dc2dc4eb31612f138a0db

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1182b646fe1b7c2fb535f6df1b863e7a17f43db5\680679db-0a9a-4671-a767-df15aa97a97e\index-dir\the-real-index

                                                                                                          Filesize

                                                                                                          72B

                                                                                                          MD5

                                                                                                          202bb9ef44f66531d7059b61d307fa58

                                                                                                          SHA1

                                                                                                          b82c3cbd6ef051c3eb01aba54e7c46b5c9ee5e47

                                                                                                          SHA256

                                                                                                          129f0056a6b8f7b71075c567c739ea2f27c0e75ddbd8476cf170aa3e81720249

                                                                                                          SHA512

                                                                                                          1960e6e62ca77d49ece869860f4f53f42c1b03e486bbb0a124b646abe6177c956d3955a19c666fef7e730c62e711beb9bbb1fbddeb8ba85f3f9e2e9412a6d253

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1182b646fe1b7c2fb535f6df1b863e7a17f43db5\680679db-0a9a-4671-a767-df15aa97a97e\index-dir\the-real-index~RFe5c2b4d.TMP

                                                                                                          Filesize

                                                                                                          48B

                                                                                                          MD5

                                                                                                          ef4831a98d4de2328f97d9a9335ae260

                                                                                                          SHA1

                                                                                                          cc302cb9540d5a0e68384b8df706851c2ac77df3

                                                                                                          SHA256

                                                                                                          5d36390e68d17fb39457ceedee4fc86248dee2f1348326311ea69856ce6c9fba

                                                                                                          SHA512

                                                                                                          6b89fcf0923b260d72eb4df650561f3270ab6f92ad078043591eacdd53b14ca288223f9a9d75293d769d11bdafa193f7af0becc12fc555fc86c4b435441846b6

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1182b646fe1b7c2fb535f6df1b863e7a17f43db5\9e4174ef-f303-482f-ba1e-612ee73eb4ff\index-dir\the-real-index

                                                                                                          Filesize

                                                                                                          1KB

                                                                                                          MD5

                                                                                                          a57808e8eb9f2898b625ef013ec9f1c6

                                                                                                          SHA1

                                                                                                          74f481fefb574168122495810eb7116d66f82d78

                                                                                                          SHA256

                                                                                                          79a6c4229eb4ddd891667b6aed01b5ed6376242a15ec2c8db2cffae07f063cee

                                                                                                          SHA512

                                                                                                          6793934e09be8f3d0354fc5acb37a3dbb3c967895c34648e9bcd162cf3753df70107ebd5a223501b021f75207b7d307278d7cdceebd55405e626f8f3d928b1a2

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1182b646fe1b7c2fb535f6df1b863e7a17f43db5\9e4174ef-f303-482f-ba1e-612ee73eb4ff\index-dir\the-real-index~RFe5c4240.TMP

                                                                                                          Filesize

                                                                                                          48B

                                                                                                          MD5

                                                                                                          2dbf6b1492ecf9b4dc28d7de67cedb5a

                                                                                                          SHA1

                                                                                                          cbe4b31826d32f71d5fa7b002046437c35964812

                                                                                                          SHA256

                                                                                                          39fe33a5dc31d6d86fb1cbedc7979353b8c47cc6a5cd0ffac358e451502c54ea

                                                                                                          SHA512

                                                                                                          e7b9a0741bb1977efae464978664f4e89364d0adb625097659fa28af4e2990827a56261e07df0eae0043aaa694b1b83f2c86fcae9ba9a6a91241f94fecf56a21

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1182b646fe1b7c2fb535f6df1b863e7a17f43db5\index.txt

                                                                                                          Filesize

                                                                                                          193B

                                                                                                          MD5

                                                                                                          1cdd73a9772a802d3ed7fcaf82f79ac6

                                                                                                          SHA1

                                                                                                          6d877f3157c0cf723b23ad0ffb2ae7802995a2fc

                                                                                                          SHA256

                                                                                                          1126f186e4c8ad4d3cda8abc3e9595e058a9019bb52af489c3f41a2a09991bd1

                                                                                                          SHA512

                                                                                                          4bea6ea208e38bbe83cf660988fb2943416ad1076984c94f1dc2c31576b614c5e9a3ba3b448dcd9a32517eefbecabf8cd399a8d5864b25e85872c3b08722bbc9

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1182b646fe1b7c2fb535f6df1b863e7a17f43db5\index.txt

                                                                                                          Filesize

                                                                                                          191B

                                                                                                          MD5

                                                                                                          d78495284b6fe0aa88c3a520d3477bf1

                                                                                                          SHA1

                                                                                                          b218f7163952ad69d1eaa010444254d64092ca85

                                                                                                          SHA256

                                                                                                          4098874dc493a0ab73d76b623429118445ee45ddffa76d8cfe60e8ae6491957c

                                                                                                          SHA512

                                                                                                          dc413b52613c097ade7e1da1e4c0b40d182b19c2cf713dc1ae0af3a6d28b7cd9ca922a4738e123cf7c470a753d99b26746e914481ba76bf48bb2e963d30fd178

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1182b646fe1b7c2fb535f6df1b863e7a17f43db5\index.txt~RFe5bda3f.TMP

                                                                                                          Filesize

                                                                                                          97B

                                                                                                          MD5

                                                                                                          d6a25d330f62e5fd3f7628666034940b

                                                                                                          SHA1

                                                                                                          cb972712b9f89dddc39bdfde2703cc644d7b14a8

                                                                                                          SHA256

                                                                                                          8a05127a0241ab2b6f3137f5e274fb6db10a8b0561d72b6af50d9a891292d03e

                                                                                                          SHA512

                                                                                                          76705933b76ecc3b237f0c8fc22d9f0d71749830032b080dd94fd36745a0aa8df29c8e8a9ee6174a624cc307c6a3d2d44efd00ef70b87611857ef3511f1b7703

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\297ecea5cebb5dfe_0

                                                                                                          Filesize

                                                                                                          48KB

                                                                                                          MD5

                                                                                                          f410f7a9019c28edc829c0cc464d6231

                                                                                                          SHA1

                                                                                                          2a5b0cc0900c6f3f81d4c58996bf2da9d62ef0b1

                                                                                                          SHA256

                                                                                                          5ec02cd5f0a80dc7913f76861d456e92d3098e96df2a23d00f362cde751eb964

                                                                                                          SHA512

                                                                                                          cbb50e8bea377393b67fe5f76cd96545bdaac1e421705fc393e7be5f4a24852f363515238a9b30a1e9479b127bcff32aba1dfde3cd676244052432ca9cfeab36

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

                                                                                                          Filesize

                                                                                                          216B

                                                                                                          MD5

                                                                                                          3c66cd66f577b34f133ca25ee0f6b66a

                                                                                                          SHA1

                                                                                                          2d0ba2a7053ad8e1f4725eb4420aec3fda068ddd

                                                                                                          SHA256

                                                                                                          1713fa30c0ef75c89e6d3e6f418e63ad346a339e3cb4314b3dcbd38aa63cc382

                                                                                                          SHA512

                                                                                                          798f3aa61cb3ea8a20ee5af458ab43408ac0eade78f0995543bd79f106b27b0e4c7795048db8c36e88b2ee2d11287d57508dc44389c60056190526c926fc0b0d

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

                                                                                                          Filesize

                                                                                                          264B

                                                                                                          MD5

                                                                                                          8de8358dafaad19fdc2f153b38f03e18

                                                                                                          SHA1

                                                                                                          1dddaeda77b4d5d797f99115389d33c180b47073

                                                                                                          SHA256

                                                                                                          baa1b09e67c58639a800c9ebedddce100b85c85cb75362f7f8dc7d5d5a95389a

                                                                                                          SHA512

                                                                                                          27251351fa5ae8d2bf49896560c25f67a452e147a196bc4447c4d90a7486b24fac5823a5532300629969247004a6cc6cac6c46d993e8d7867fbd6a750d452586

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5c2850.TMP

                                                                                                          Filesize

                                                                                                          48B

                                                                                                          MD5

                                                                                                          18f94ec4908fb7c45dca843e5494b89f

                                                                                                          SHA1

                                                                                                          ff864eeca929d09bd152f63fef995fa475a491e5

                                                                                                          SHA256

                                                                                                          94317d4a552350684c5ecd1404adbc97684478d2a8915bfa2185e0cbaffc8344

                                                                                                          SHA512

                                                                                                          e8faca63e420040d5a3e2ffad12a8032f4707f5e054e311061776ae48176bc86e18166369a7e996b1136fd9c47074c49f0f2a349febd62c37dd0134d46f77b0b

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                          Filesize

                                                                                                          1KB

                                                                                                          MD5

                                                                                                          732be126bfc635b9f53626dcaa227818

                                                                                                          SHA1

                                                                                                          d2052f46a49e991e5f3057a7a7d6ef4a9741e50b

                                                                                                          SHA256

                                                                                                          0378c0398272d1075d63fa30a5a114901b09c253f956e2ed993f8dc95a379937

                                                                                                          SHA512

                                                                                                          50e61fd75be54618359e77b147bd61fc2e9067d20c5d5e7ecae8a5049fbed7ccaaea5f001da339e0a394a0b51f602536334c8fe48ba7521aee09f2e651395279

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                          Filesize

                                                                                                          1KB

                                                                                                          MD5

                                                                                                          bf50efd740d93bd479d0baa7e1e2393d

                                                                                                          SHA1

                                                                                                          12e9b3fb639b2233da53fad23270ed34272a753e

                                                                                                          SHA256

                                                                                                          c1db0aa9d5156931e12bf73440d8ba7f43e66a7dc3feb1d1f63e44fcd2411d20

                                                                                                          SHA512

                                                                                                          f3469f95a6bb6b94023bfca9c06c685a857ae149bde5918401bea0834a46257a6736ec7225c347a45c790c97c67516e1996b183b77251d8268a5d4e24caaf775

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                          Filesize

                                                                                                          1KB

                                                                                                          MD5

                                                                                                          8fa95c9c48cce8a289a39327df69478a

                                                                                                          SHA1

                                                                                                          e4f105670adbd186c90e006ddcde48c797b30972

                                                                                                          SHA256

                                                                                                          af3277598b14a3f3d908e4bd165dddbba6c63c2fdfc1a2f5ba04be7ddc95f85c

                                                                                                          SHA512

                                                                                                          c28c466e074698d089fc7896641cca9a0a1d4a496737c39cebaa658891e15c044fbfb3a0db245ef54599aa3ceb856e64e5736f84c8d87a889c5893483f6be49f

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                          Filesize

                                                                                                          3KB

                                                                                                          MD5

                                                                                                          cefebd22a9716d56042aa5e605245eed

                                                                                                          SHA1

                                                                                                          e9e897d2597f27cdd036ea457df9570260a29d9e

                                                                                                          SHA256

                                                                                                          cf8ed488159c92a31eecd0ce7a9d8595bd61cf03469f9cef0d3305e665cf676b

                                                                                                          SHA512

                                                                                                          b9cc8b1f0033d1ac69d74493e71574cf75e769133b6f742744ccde72fe671ffbbc1fc68409f1e9ffa7b889d546e2ba8bfc4357bc90ef150d85c9039ba8ea380a

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                          Filesize

                                                                                                          3KB

                                                                                                          MD5

                                                                                                          523a0c98eb5c4800faf1615ad33ffd13

                                                                                                          SHA1

                                                                                                          ed0427ca3da1356eb5cab66d7b034ed457aaed59

                                                                                                          SHA256

                                                                                                          69b466f19f41630e3c6419c044e1477f1d8e78c75b4f9fafa6f9b036f223c1fc

                                                                                                          SHA512

                                                                                                          fb7f4adb61e2dff044096c0906c762fd2eea321eb461df1515fe1a8bb0ad73dcd76d407bab239e42d8e219456503a2d386bd55cc6c794a6195f79d9122ca6ca3

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                          Filesize

                                                                                                          3KB

                                                                                                          MD5

                                                                                                          5d48c8a1f6f0fcb055e36b30e93706cf

                                                                                                          SHA1

                                                                                                          e3c4ab9007e52c853259c88d4eb49424b7849adf

                                                                                                          SHA256

                                                                                                          7903ccee57b1c205cf88c53c59e87ea568d92662b3a3472aa50403b2468701bd

                                                                                                          SHA512

                                                                                                          df5cb40e64911bea0c4fb6ee7c29a648f9ac77cb5fa74f28b2b639af8186479978bb63fd81784320e73d4721ce9c37a39ba2bcd9176283eef7b9229f64671659

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                          Filesize

                                                                                                          3KB

                                                                                                          MD5

                                                                                                          00cf735b6d46528b2a50ac38c53ef83f

                                                                                                          SHA1

                                                                                                          4a30c0a0bdfd575f8237a661b151a718d86179e9

                                                                                                          SHA256

                                                                                                          7e5325608762aac24d416d5c23aab2b854fde8e12088212dc14deaacc28d80dc

                                                                                                          SHA512

                                                                                                          4cc4f33d2ed99d8cc825cd18f1fc8a7e999ca4b9dba7fb933fb59e9cfb6e17d82e61760a3ba5d8d844401e4c3279f9ccbfae8d3ee1c12a53d9745b376e28d3a1

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5bd8f7.TMP

                                                                                                          Filesize

                                                                                                          538B

                                                                                                          MD5

                                                                                                          a1e042018ee9fefef80b7c7a027d117b

                                                                                                          SHA1

                                                                                                          1eacb1b2f6bfbea1ed994ef0fff858b650d656c6

                                                                                                          SHA256

                                                                                                          94d0b47d9cf91307edd7d2a66a593dfa3265a45a4a0a2cc02e5dcbf0fba67893

                                                                                                          SHA512

                                                                                                          81d85ae6da4c48bd811198c0ed7be7c5c04139986ff56db27889c92a7ee987b0c378303de0f825680833d1f4cf2432c56fd74be87f483964517233c71478b84d

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                                                                                          Filesize

                                                                                                          16B

                                                                                                          MD5

                                                                                                          206702161f94c5cd39fadd03f4014d98

                                                                                                          SHA1

                                                                                                          bd8bfc144fb5326d21bd1531523d9fb50e1b600a

                                                                                                          SHA256

                                                                                                          1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

                                                                                                          SHA512

                                                                                                          0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                                          Filesize

                                                                                                          11KB

                                                                                                          MD5

                                                                                                          51c2f8bd02f00ccd62ffe4050fa0c786

                                                                                                          SHA1

                                                                                                          d2bf1f10f45f19c935bdd1ad36f4acf85ed4f1ac

                                                                                                          SHA256

                                                                                                          490ca247ce4683c6687b2ed44982c20562de8b2458fb4abed35d0dabb78f2463

                                                                                                          SHA512

                                                                                                          355aaf752f210799a8856cac203bc6a137e3529e63340ba2bb1ace5e129b48d6eed790c7fc48b17501d7f8b332c68b613e86da16f26d872153992ca5464af873

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                                          Filesize

                                                                                                          11KB

                                                                                                          MD5

                                                                                                          728d88c1ccc86454f0d9c423a272972b

                                                                                                          SHA1

                                                                                                          666f20ca1caad2dd51348778db3aa3ae7a3d61e7

                                                                                                          SHA256

                                                                                                          0fd0be9aa49b492f09261476084e3e7beeaf2b92d278297fed0b306b158c708a

                                                                                                          SHA512

                                                                                                          e56922ce1a5d65e5553b77725a66a6733eb0135ed45740e456d112df2b07caa7e345a4f5d6fbbb4f4629bd536ac75cd89a8d4a83a8758742676289d76d9e90ea

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                                          Filesize

                                                                                                          12KB

                                                                                                          MD5

                                                                                                          d2f0929dbad38054c64c563b9c47ce80

                                                                                                          SHA1

                                                                                                          e356a82ec264c35f28331fa9dd2529bf27926b3a

                                                                                                          SHA256

                                                                                                          0107cdda42b7da677ee42aa01d5dc98734905e4b3e6a7c9478cc6a159640edda

                                                                                                          SHA512

                                                                                                          d8e08eada10479c77a17c450c66cd7473ae5d52fdcb21b23040c8f9cc11b7df68821b79efb281a764bcfcb289c87ce84bfad1349c4d735dab12870121d8b16fd

                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db

                                                                                                          Filesize

                                                                                                          14KB

                                                                                                          MD5

                                                                                                          957ad2cea930e466186f84b495e13d6a

                                                                                                          SHA1

                                                                                                          7a77e39b26028f0521fa1a519dc12dbf04a4500c

                                                                                                          SHA256

                                                                                                          1c3f7e24aac77ce4f8047587e563287a859256394cefa64f98118101493ed729

                                                                                                          SHA512

                                                                                                          5e7db50fa9b6abc36e4ae0ccb23fa7647357f6e3cea491dca3d15a71c04f85cdd61ad767b1fa0bec08e9c2a4dc4e8ca691d1351342c44adb8a7ad4cd346f6823

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zS054251A9\Assets\exit_close.png

                                                                                                          Filesize

                                                                                                          670B

                                                                                                          MD5

                                                                                                          26eb04b9e0105a7b121ea9c6601bbf2a

                                                                                                          SHA1

                                                                                                          efc08370d90c8173df8d8c4b122d2bb64c07ccd8

                                                                                                          SHA256

                                                                                                          7aaef329ba9fa052791d1a09f127551289641ea743baba171de55faa30ec1157

                                                                                                          SHA512

                                                                                                          9df3c723314d11a6b4ce0577eb61488061f2f96a9746a944eb6a4ee8c0c4d29131231a1b20988ef5454b79f9475b43d62c710839ecc0a9c98324f977cab6db68

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zS054251A9\Assets\minimize_progress.png

                                                                                                          Filesize

                                                                                                          212B

                                                                                                          MD5

                                                                                                          1504b80f2a6f2d3fefc305da54a2a6c2

                                                                                                          SHA1

                                                                                                          432a9d89ebc2f693836d3c2f0743ea5d2077848d

                                                                                                          SHA256

                                                                                                          2f62d4e8c643051093f907058dddc78cc525147d9c4f4a0d78b4d0e5c90979f6

                                                                                                          SHA512

                                                                                                          675db04baf3199c8d94af30a1f1c252830a56a90f633c3a72aa9841738b04242902a5e7c56dd792626338e8b7eabc1f359514bb3a2e62bc36c16919e196cfd94

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zS091D0D57\Assets\backicon.png

                                                                                                          Filesize

                                                                                                          15KB

                                                                                                          MD5

                                                                                                          7ff5dc8270b5fa7ef6c4a1420bd67a7f

                                                                                                          SHA1

                                                                                                          b224300372feaa97d882ca2552b227c0f2ef4e3e

                                                                                                          SHA256

                                                                                                          fa64884054171515e97b78aaa1aad1ec5baa9d1daf9c682e0b3fb4a41a9cb1c1

                                                                                                          SHA512

                                                                                                          f0d5a842a01b99f189f3d46ab59d2c388a974951b042b25bbce54a15f5a3f386984d19cfca22ba1440eebd79260066a37dfeff6cb0d1332fca136add14488eef

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zS091D0D57\Assets\close_red.png

                                                                                                          Filesize

                                                                                                          15KB

                                                                                                          MD5

                                                                                                          93216b2f9d66d423b3e1311c0573332d

                                                                                                          SHA1

                                                                                                          5efaebec5f20f91f164f80d1e36f98c9ddaff805

                                                                                                          SHA256

                                                                                                          d0b6d143642d356b40c47459a996131a344cade6bb86158f1b74693426b09bfb

                                                                                                          SHA512

                                                                                                          922a7292de627c5e637818556d25d9842a88e89f2b198885835925679500dfd44a1e25ce79e521e63c4f84a6b0bd6bf98e46143ad8cee80ecdbaf3d3bc0f3a32

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zS091D0D57\Assets\custom.png

                                                                                                          Filesize

                                                                                                          17KB

                                                                                                          MD5

                                                                                                          03b17f0b1c067826b0fcc6746cced2cb

                                                                                                          SHA1

                                                                                                          e07e4434e10df4d6c81b55fceb6eca2281362477

                                                                                                          SHA256

                                                                                                          fbece8bb5f4dfa55dcfbf41151b10608af807b9477e99acf0940954a11e68f7b

                                                                                                          SHA512

                                                                                                          67c78ec01e20e9c8d9cdbba665bb2fd2bb150356f30b88d3d400bbdb0ae92010f5d7bcb683dcf6f895722a9151d8e669d8bef913eb6e728ba56bb02f264573b2

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zS091D0D57\Assets\installer_bg.jpg

                                                                                                          Filesize

                                                                                                          78KB

                                                                                                          MD5

                                                                                                          3478e24ba1dd52c80a0ff0d43828b6b5

                                                                                                          SHA1

                                                                                                          b5b13bbf3fb645efb81d3562296599e76a2abac0

                                                                                                          SHA256

                                                                                                          4c7471c986e16de0cd451be27d4b3171e595fe2916b4b3bf7ca52df6ec368904

                                                                                                          SHA512

                                                                                                          5c8c9cc76d6dbc7ce482d0d1b6c2f3d48a7a510cd9ed01c191328763e1bccb56daeb3d18c33a9b10ac7c9780127007aa13799fa82d838de27fbe0a02ad98119d

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zS091D0D57\Assets\installer_logo.png

                                                                                                          Filesize

                                                                                                          14KB

                                                                                                          MD5

                                                                                                          e33432b5d6dafb8b58f161cf38b8f177

                                                                                                          SHA1

                                                                                                          d7f520887ce1bfa0a1abd49c5a7b215c24cbbf6a

                                                                                                          SHA256

                                                                                                          9f3104493216c1fa114ff935d23e3e41c7c3511792a30b10a40b507936c0d183

                                                                                                          SHA512

                                                                                                          520dc99f3176117ebc28da5ef5439b132486ef67d02fa17f28b7eab0c59db0fa99566e44c0ca7bb75c9e7bd5244e4a23d87611a55c841c6f9c9776e457fb1cbf

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zS091D0D57\Assets\installer_minimize.png

                                                                                                          Filesize

                                                                                                          113B

                                                                                                          MD5

                                                                                                          38b539a1e4229738e5c196eedb4eb225

                                                                                                          SHA1

                                                                                                          f027b08dce77c47aaed75a28a2fce218ff8c936c

                                                                                                          SHA256

                                                                                                          a064f417e3c2b8f3121a14bbded268b2cdf635706880b7006f931de31476bbc2

                                                                                                          SHA512

                                                                                                          2ce433689a94fae454ef65e0e9ec33657b89718bbb5a038bf32950f6d68722803922f3a427278bad432395a1716523e589463fcce4279dc2a895fd77434821cc

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zS091D0D57\Assets\loader.png

                                                                                                          Filesize

                                                                                                          279B

                                                                                                          MD5

                                                                                                          03903fd42ed2ee3cb014f0f3b410bcb4

                                                                                                          SHA1

                                                                                                          762a95240607fe8a304867a46bc2d677f494f5c2

                                                                                                          SHA256

                                                                                                          076263cc65f9824f4f82eb6beaa594d1df90218a2ee21664cf209181557e04b1

                                                                                                          SHA512

                                                                                                          8b0e717268590e5287c07598a06d89220c5e9a33cd1c29c55f8720321f4b3efc869d20c61fcc892e13188d77f0fdc4c73a2ee6dece174bf876fcc3a6c5683857

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zS091D0D57\Assets\setpath.png

                                                                                                          Filesize

                                                                                                          15KB

                                                                                                          MD5

                                                                                                          b2e7f40179744c74fded932e829cb12a

                                                                                                          SHA1

                                                                                                          a0059ab8158a497d2cf583a292b13f87326ec3f0

                                                                                                          SHA256

                                                                                                          5bbb2f41f9f3a805986c3c88a639bcc22d90067d4b8de9f1e21e3cf9e5c1766b

                                                                                                          SHA512

                                                                                                          b95b7ebdb4a74639276eaa5c055fd8d9431e2f58a5f7c57303f7cf22e8b599f6f2a7852074cf71b19b49eb31cc9bf2509aedf41d608981d116e49a00030c797c

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zS091D0D57\Assets\unchecked_gray.png

                                                                                                          Filesize

                                                                                                          192B

                                                                                                          MD5

                                                                                                          e50df2a0768f7fc4c3fe8d784564fea3

                                                                                                          SHA1

                                                                                                          d1fc4db50fe8e534019eb7ce70a61fd4c954621a

                                                                                                          SHA256

                                                                                                          671f26795b12008fbea1943143f660095f3dca5d925f67d765e2352fd7ee2396

                                                                                                          SHA512

                                                                                                          c87a8308a73b17cbdd179737631fb1ba7fdaeb65e82263f6617727519b70a81266bb695867b9e599c1306ee2cf0de525452f77ce367ca89bf870ea3ae7189998

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zS091D0D57\BlueStacksInstaller.exe

                                                                                                          Filesize

                                                                                                          623KB

                                                                                                          MD5

                                                                                                          412ded9a267ba1eaac86176172c790e9

                                                                                                          SHA1

                                                                                                          ceff2bb5c38e21b53798f4fcdf86e15c752ee62e

                                                                                                          SHA256

                                                                                                          1ee1ce5c59586e593c5635fee744ffeaa222b07cdf6c4528414f0b1f80253397

                                                                                                          SHA512

                                                                                                          a2f02383335afeb938757ff277e217182da3d0d2f9e6f2d53af431b35b5a7e8de1867164deeab1631d94365343ff938c9329886c792037851b8be05d5d61a668

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zS091D0D57\BlueStacksInstaller.exe.config

                                                                                                          Filesize

                                                                                                          324B

                                                                                                          MD5

                                                                                                          1b456d88546e29f4f007cd0bf1025703

                                                                                                          SHA1

                                                                                                          e5c444fcfe5baf2ef71c1813afc3f2c1100cab86

                                                                                                          SHA256

                                                                                                          d6d316584b63bb0d670a42f88b8f84e0de0db4275f1a342084dc383ebeb278eb

                                                                                                          SHA512

                                                                                                          c545e416c841b8786e4589fc9ca2b732b16cdd759813ec03f558332f2436f165ec1ad2fbc65012b5709fa19ff1e8396639c17bfad150cabeb51328a39ea556e6

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zS091D0D57\HD-CheckCpu.exe

                                                                                                          Filesize

                                                                                                          200KB

                                                                                                          MD5

                                                                                                          81234fd9895897b8d1f5e6772a1b38d0

                                                                                                          SHA1

                                                                                                          80b2fec4a85ed90c4db2f09b63bd8f37038db0d3

                                                                                                          SHA256

                                                                                                          2e14887f3432b4a313442247fc669f891dbdad7ef1a2d371466a2afa88074a4c

                                                                                                          SHA512

                                                                                                          4c924d6524dc2c7d834bfc1a0d98b21753a7bf1e94b1c2c6650f755e6f265512d3a963bc7bc745351f79f547add57c37e29ba9270707edbf62b60df3a541bc16

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zS091D0D57\JSON.dll

                                                                                                          Filesize

                                                                                                          411KB

                                                                                                          MD5

                                                                                                          f5fd966e29f5c359f78cb61a571d1be4

                                                                                                          SHA1

                                                                                                          a55e7ed593b4bc7a77586da0f1223cfd9d51a233

                                                                                                          SHA256

                                                                                                          d2c8d26f95f55431e632c8581154db7c19547b656380e051194a9d2583dd2156

                                                                                                          SHA512

                                                                                                          d99e6fe250bb106257f86135938635f6e7ad689b2c11a96bb274f4c4c5e9a85cfacba40122dbc953f77b5d33d886c6af30bff821f10945e15b21a24b66f6c8be

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zS091D0D57\Locales\i18n.en-US.txt

                                                                                                          Filesize

                                                                                                          19KB

                                                                                                          MD5

                                                                                                          206562eed57e938afe21fc6942fa8e59

                                                                                                          SHA1

                                                                                                          779e90fec866c0fd2f47da020651db71c89ec3dd

                                                                                                          SHA256

                                                                                                          27d611a71edf36307a7ed0651f6c5910292ac7e2b68074a7e33d306b3d93ec45

                                                                                                          SHA512

                                                                                                          275c3192a7aee28fad31beb521cf5e7c66010e7562ce244ba9fc4de352f35b4ab63180ed12a56ea0b1458c185e076e2d07ba6d8797467177d3c5b2ac14371b26

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zS091D0D57\ThemeFile

                                                                                                          Filesize

                                                                                                          80KB

                                                                                                          MD5

                                                                                                          c3e6bab4f92ee40b9453821136878993

                                                                                                          SHA1

                                                                                                          94493a6b3dfb3135e5775b7d3be227659856fbc4

                                                                                                          SHA256

                                                                                                          de1a2e6b560e036da5ea6b042e29e81a5bfcf67dde89670c332fc5199e811ba6

                                                                                                          SHA512

                                                                                                          a64b6b06b3a0f3591892b60e59699682700f4018b898efe55d6bd5fb417965a55027671c58092d1eb7e21c2dbac42bc68dfb8c70468d98bed45a8cff0e945895

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\Assets\checked_gray.png

                                                                                                          Filesize

                                                                                                          538B

                                                                                                          MD5

                                                                                                          ce144d2aab3bf213af693d4e18f87a59

                                                                                                          SHA1

                                                                                                          df59dc3dbba88bdc5ffc25f2e5e7b73ac3de5afa

                                                                                                          SHA256

                                                                                                          d8e502fab00b0c6f06ba6abede6922ab3b423fe6f2d2f56941dabc887b229ad3

                                                                                                          SHA512

                                                                                                          0f930edd485a0d49ef157f6cc8856609c087c91b77845adeb5cc8c8a80ebc7ec5416df351ffa1af780caad884dbb49dcc778b0b30de6fb7c85ffef22d7220ebe

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\Assets\checked_gray_hover.png

                                                                                                          Filesize

                                                                                                          412B

                                                                                                          MD5

                                                                                                          ea22933e94c7ab813b639627f2b38286

                                                                                                          SHA1

                                                                                                          c5358c5cb7fb1a0744c775f8148c2376928fb509

                                                                                                          SHA256

                                                                                                          d7c79677d2ef897fa0ad1efc90e916c46da29f571208f78f24505603b7165c20

                                                                                                          SHA512

                                                                                                          ba447a1aedec49419e2b4a8de85c6047886f1a5ebb94f1c45e205a3780c6826f412a3892e97115b35e43839f43e346f3c72ffbf0c57d57f6d26b360ae61b3964

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\Assets\close_red_click.png

                                                                                                          Filesize

                                                                                                          15KB

                                                                                                          MD5

                                                                                                          6db7460b73a6641c7621d0a6203a0a90

                                                                                                          SHA1

                                                                                                          d39b488b96f3e5b5fe93ee3eecb6d28bb5b03cf3

                                                                                                          SHA256

                                                                                                          d5a7e6fc5e92e0b29a4f65625030447f3379b4e3ac4bed051a0646a7932ce0cd

                                                                                                          SHA512

                                                                                                          a0e6911853f51d73605e8f1a61442391fad25ff7b50a3f84d140d510fd98e262c971f130fb8a237a63704b8162c24b8440a5f235f51a5c343389f64e67c1c852

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\Assets\close_red_hover.png

                                                                                                          Filesize

                                                                                                          15KB

                                                                                                          MD5

                                                                                                          5ceab43aa527bc146f9453a1586ddf03

                                                                                                          SHA1

                                                                                                          88ffb3cadccb54d4be3aabf31cf4d64210b5f553

                                                                                                          SHA256

                                                                                                          7c625ae4668cc03e37e4ffc478b87eace06b49b77e71e3209f431c23d98acdd0

                                                                                                          SHA512

                                                                                                          8a5c81c048fb7d02b246ed23a098ae5f95cdf6f4ca58fd3d30e4fe3001c933444310ca6391096cfaeed86b13f568236f84df4ea9a3d205c0677e31025616f19e

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\Assets\custom_click.png

                                                                                                          Filesize

                                                                                                          15KB

                                                                                                          MD5

                                                                                                          ced07c9db242115400e159d9a02bb7b7

                                                                                                          SHA1

                                                                                                          6f2bebd1714dd7522479b5f3e3f2b3f0d18e8c77

                                                                                                          SHA256

                                                                                                          1318e0f34a551edae1e82818fdf7de5ac627493db5b24556d919f525052d5b90

                                                                                                          SHA512

                                                                                                          d52e63792a5b4172d4ac4e2d369b22b170578616d04de5a40be15b260a2741bf8158b3aed9509760c334283360dd13a4fa21538fc4547ba464be5dd700a22b70

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\Assets\custom_hover.png

                                                                                                          Filesize

                                                                                                          15KB

                                                                                                          MD5

                                                                                                          f3e05f142e742e25a98d4f5af3ae0623

                                                                                                          SHA1

                                                                                                          88363e81ddef700803f4859d2f3f0b4af516bbf3

                                                                                                          SHA256

                                                                                                          d588ef0eaa334ed8482f32e5839a7ee0d0b544d5b8d5f7720b8c57010e080424

                                                                                                          SHA512

                                                                                                          5f07a7163c9834564dc4de5a1a484ac8208151bc244f8e72d64556abf88c35f6a81dd6718a3e6f681265c10e2dbbadb07570fa64c31113342a88fd605019496a

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\Assets\error_icon.png

                                                                                                          Filesize

                                                                                                          1KB

                                                                                                          MD5

                                                                                                          dab2c4538a83422b5deae0e0de9b7a30

                                                                                                          SHA1

                                                                                                          78c2ab2271aa4020df1e0289bc3c1ba9a43fd424

                                                                                                          SHA256

                                                                                                          666ad4fe456216ddc06618967846ed31f81d8db5be97da6531842c0667352b89

                                                                                                          SHA512

                                                                                                          24cb30a68ce117ba16edd1e94c7d066343eb265c874cd55467db2f913c01b9d776b2ad846e3414cd820c0ba10d93f132aea27739d16165b6e9dd5fbc8890bfdc

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\Assets\error_icon_72.png

                                                                                                          Filesize

                                                                                                          1KB

                                                                                                          MD5

                                                                                                          4aaf83d2b3fd56ad806708e60474df39

                                                                                                          SHA1

                                                                                                          144777a265879b69fadea3eb3ac6939458918578

                                                                                                          SHA256

                                                                                                          84e59d14d9433e6c3d92daeb8c443063b5e3be6c0b297f0403dbde473a05cb3f

                                                                                                          SHA512

                                                                                                          3b8485f054fe6ed2374bc81cb1786f09741219fbfcb22503707b11cf5db1ab262ba4349633597d5d9ddabc3415b170fa8eebc932f58d211d7092b8fb96fa1304

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\Assets\exit_close_hover.png

                                                                                                          Filesize

                                                                                                          575B

                                                                                                          MD5

                                                                                                          92c2bf222d6ab81fe7a0c072bf31c107

                                                                                                          SHA1

                                                                                                          8853eb08a2aa3e99fae6dabb9cff6461704f2a2e

                                                                                                          SHA256

                                                                                                          bcc053a9a087e077d58114106d29701a34f7851f4052f3157102811355d3e709

                                                                                                          SHA512

                                                                                                          6548d0038f4bda1db69de0729cc9648725d744953649a396b9147afb16abf018a5aef7ff7d3bb019031863f20c81bc202d6e37d171027ab9fde3b37402e179c7

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\Assets\installer_minimize_click.png

                                                                                                          Filesize

                                                                                                          112B

                                                                                                          MD5

                                                                                                          08fc39a69fa17e0f529915919cea1633

                                                                                                          SHA1

                                                                                                          2966a3f739698e2ce368585fb7f6ac4eae4497b1

                                                                                                          SHA256

                                                                                                          2599d6a55a8e12b1f05a6e8982d55559151a25ae3690e6637510b6283622dd95

                                                                                                          SHA512

                                                                                                          f5eae902f9b631410b03b6d4f9be1b4cf6547a94f1a2eee6bf70b0f3036499c01a42c9d58cf98ffbe10edbe79577a01e64faf0e527a70bc9470a1c3d9263b805

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\Assets\installer_minimize_hover.png

                                                                                                          Filesize

                                                                                                          112B

                                                                                                          MD5

                                                                                                          18fb6465b029206477d0222e8da6fdf9

                                                                                                          SHA1

                                                                                                          b7f91e5e3002a5d3c84a30ca6cebe1a89a65ba7b

                                                                                                          SHA256

                                                                                                          57aae4bf49dcbb0ad6cff6263200015c89d7752dc75c2ad918bf846e1ce9646d

                                                                                                          SHA512

                                                                                                          f045dfed35ea9ff31336cd354a0dd2e9a7ac2582cea1d25a444fffa3bd01e03d73611f786873a81a27a370e5ddb3a6043713e29f064d274088df1c925eb6785f

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\Assets\installer_upgrade_image_bg.jpg

                                                                                                          Filesize

                                                                                                          19KB

                                                                                                          MD5

                                                                                                          3bb85d2c8cef28c89a2d07adf931e955

                                                                                                          SHA1

                                                                                                          596d13e7742455afce8a534382b28cfd2f6aa185

                                                                                                          SHA256

                                                                                                          b7f75233e633107d50f24ca82099225c83a832571cd2ce92901f2db3897f058b

                                                                                                          SHA512

                                                                                                          7075fe989d69ad5f0f4cca5fbbbabad16e0949c2ab8538f3f96020b831a4ec1cc3a701dcb7332e577b5eceba230449efbbf8e288dad47a53d76e40c2337dc730

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\Assets\link.png

                                                                                                          Filesize

                                                                                                          306B

                                                                                                          MD5

                                                                                                          ae2c73ee43d722c327c7fb6fdbee905c

                                                                                                          SHA1

                                                                                                          96f238bf53ac80f5b7a9ad6ef2531e8e3f274628

                                                                                                          SHA256

                                                                                                          28c0abc6bfe7a155815104883a37a53dd783d142300471064c95eddf3cae0eaf

                                                                                                          SHA512

                                                                                                          5a1e341f727cf1cb4832cced8e96c5a74971451629603c48bfb91ceb4561d0122ab9ae701f8b34681d5f13115a384467d430ccb8282494b40f4577ebc3ad825b

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\Assets\minimize_progress_hover.png

                                                                                                          Filesize

                                                                                                          214B

                                                                                                          MD5

                                                                                                          fc2a0361a751177d3aacdba9c31b2682

                                                                                                          SHA1

                                                                                                          0a8f672d7a8777d1106e3b8ee36bd6e45bd322ab

                                                                                                          SHA256

                                                                                                          1a4aaa46893e2a9b011c478fbb0cd0e84c199f9f3520703189640088969ef5cd

                                                                                                          SHA512

                                                                                                          a15542c90972387133d86f6a94c17435432b1493b02502533c4d7978428ed7d44a7d3c5564fe08946561638f8a5a3dd0b35b81979c2929dcc386ee5f6f7ecccb

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\Assets\powered_by_bs.png

                                                                                                          Filesize

                                                                                                          9KB

                                                                                                          MD5

                                                                                                          7a2e5c21140aa8269c2aafd207f5dbaa

                                                                                                          SHA1

                                                                                                          4e0d9e7e1b09e67eba10100d73dc51623517821e

                                                                                                          SHA256

                                                                                                          3d2afe5236ec813d9e8063bc43eb34b88c2155784e1bce19c6a533c32767af35

                                                                                                          SHA512

                                                                                                          63f512559f2068a9702c7c527c126f6017cd8d1d16af52e41b884aa9a64ff4294a57243ec78c3a416f70fb6178a79877d68345357725ff92c935709a2ef8adde

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\Assets\setpath_click.png

                                                                                                          Filesize

                                                                                                          15KB

                                                                                                          MD5

                                                                                                          624e84e9b49bc150043aa9fb0eed2822

                                                                                                          SHA1

                                                                                                          f23f2a4ec609e3e9cff9319533e561968ccabb22

                                                                                                          SHA256

                                                                                                          c94924e95a49b175c8fc00bdc2821bb70a85b864cc193becc553b32f0024dde1

                                                                                                          SHA512

                                                                                                          288e1954d29bd3d22b56fadb2e0d3d10580a540fa1f2bab1284d957708bad96df5e38b67c6dc14784e1e275b89082c57370b786c0d0c4307601c0d2bf3704460

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\Assets\setpath_hover.png

                                                                                                          Filesize

                                                                                                          15KB

                                                                                                          MD5

                                                                                                          b1e53a76b6ddb3ecff52bfc1a8e5b09d

                                                                                                          SHA1

                                                                                                          012b5879e879fa25bf48e4bb62c35ee829eea571

                                                                                                          SHA256

                                                                                                          2da3f9367c847e47131370dd163f611c4639287512a47f487e0025c5665830e0

                                                                                                          SHA512

                                                                                                          4369891858b4adaf9144636c44b55979290177bcff57f67f341071e42e90f992531024e122c0bc5436ddb8c55e994e7b913ec37137a642dc0164e6e2516f0b68

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\Assets\unchecked_gray_hover.png

                                                                                                          Filesize

                                                                                                          176B

                                                                                                          MD5

                                                                                                          62d7f14c26608f8392537d68f43dece1

                                                                                                          SHA1

                                                                                                          add4f30e7c3af4f7622e6bc55d960db612f3bb0a

                                                                                                          SHA256

                                                                                                          a631e26bd5b6ea19c8c65b766a056c92ba8a47e1483768dcf12b05293c9a7a0d

                                                                                                          SHA512

                                                                                                          e41210a78e6076954f75a2f73c0f7628e8604a09ecbb1d2ee0972741d4ef1d814b366828977c02944736b03ed116bc559a2ae47ddb7cbc6f4e54578c8263edf4

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\Bootstrapper.exe

                                                                                                          Filesize

                                                                                                          153KB

                                                                                                          MD5

                                                                                                          4f1edf69633aa2786e2e1d9ee1be7b08

                                                                                                          SHA1

                                                                                                          57fef50cae6a310bc3d621f025aaf6b9dea1808f

                                                                                                          SHA256

                                                                                                          6eed57ba829efd43abe8bbe4beebfcbd0464be3328407514a1f81abf7687affc

                                                                                                          SHA512

                                                                                                          f28c10efbab6395f0ed56c87ac054b4faedf2df61cd2febc06155e4b9a7931b6fe5e12694e5489b54da969b67156048ae4ca87093dd8965174a9f3bf70fbac16

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\Locales\i18n.ar-EG.txt

                                                                                                          Filesize

                                                                                                          25KB

                                                                                                          MD5

                                                                                                          7a7d65e41e785a7a848f0b021cc0c0d7

                                                                                                          SHA1

                                                                                                          9d61357d9aaec43adb92b95dd63103c566aa2083

                                                                                                          SHA256

                                                                                                          e02e378326e351980325f9cbf4e27327ac03aabf85286e7636c99220da950806

                                                                                                          SHA512

                                                                                                          8f67d2e4ef55abffdc1062997cab7a44cc81e42b16174d88dad41939992903b7a9ce9c7775db10835d30cf4aaecfac7c8d6f2cd1611f17e40d3c66ee0fb928cb

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\Locales\i18n.ar-IL.txt

                                                                                                          Filesize

                                                                                                          14KB

                                                                                                          MD5

                                                                                                          9fb07e066cc2f213a64d35a97a8c2922

                                                                                                          SHA1

                                                                                                          a70db989f5c562bc69caad89a1402c8ad7c9b80e

                                                                                                          SHA256

                                                                                                          65e7b0f37b5e2aa805ac8d57969804d803430186f34e9703ca9fa09ba908ef90

                                                                                                          SHA512

                                                                                                          81680bff55b475a62a4bf29a8c219230b84894c1165f60e372209a5aacdba8e4819c3dfb76f3b55c15d472ababeabf0cd4b30c04e7daa26df63c8a5101970c3c

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\Locales\i18n.de-DE.txt

                                                                                                          Filesize

                                                                                                          22KB

                                                                                                          MD5

                                                                                                          a9ce4896a111f0ea2149e25ddfcf27aa

                                                                                                          SHA1

                                                                                                          5f242727905a3f30263793e3095fff8fe7a3a0f2

                                                                                                          SHA256

                                                                                                          941d60fe4e4f1a66166e8fe75f885ab1086a4037a4627004e391d7493e3e8911

                                                                                                          SHA512

                                                                                                          05d0f13214d60fc4533652f5b1dc161f3f14c8b194d74e45a34412f97267fd69b7b19f1f647f348ebfbbd2551c4060e36e746a6a79963db7e78cd95c92dc4d3e

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\Locales\i18n.es-ES.txt

                                                                                                          Filesize

                                                                                                          21KB

                                                                                                          MD5

                                                                                                          5f5cacda94bb2384f9d6bdece58ac526

                                                                                                          SHA1

                                                                                                          c10f095a312e623b79c42ab7ca3f48130b348d62

                                                                                                          SHA256

                                                                                                          2b698fd5d6f4fd959c4a24b47b02c2e1a9f51a72a66cfab3ed72d8f667d221cd

                                                                                                          SHA512

                                                                                                          1ca9373b2eff0620d02249ab82fe46644f6452db36a2b61334cc258d2e9910200c33543f7794e0bdc69761f5b86aedacca0fe6491293ecd1df2992eaa5aaae99

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\Locales\i18n.fr-FR.txt

                                                                                                          Filesize

                                                                                                          22KB

                                                                                                          MD5

                                                                                                          6b1fc0b4e861692c83e8f36848e7faad

                                                                                                          SHA1

                                                                                                          79e064008b2c2bcc63146664cdf1a63f1d5ab58f

                                                                                                          SHA256

                                                                                                          f5684f68c50b3f8f5c1ce0e1266e003f2099d3ae401c848b2cd30260a998feed

                                                                                                          SHA512

                                                                                                          0a15eded536ea683c4493af1f45f8bcfdc24ae69747386a6747dfb2bd3475f88f4d15d2ac77515eb5ce75b65870f2fe2337bdef0fae5758edd72684683a9180d

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\Locales\i18n.id-ID.txt

                                                                                                          Filesize

                                                                                                          20KB

                                                                                                          MD5

                                                                                                          623b1aacfbaf85b09a4e0c180e9ef178

                                                                                                          SHA1

                                                                                                          e41bfa201d627d093bf446eb39fab268528e5e32

                                                                                                          SHA256

                                                                                                          ce6bf3cbca52a1ae369199ee190272f6842a45e64da9ab6cac8b48842aa099ca

                                                                                                          SHA512

                                                                                                          83b91c326561b725483fa703d7bfc66a3eafc55a25772bb22251bc88869a30bf11c2c5aeabd5a07da8fd7f2d2b93ab2ba47edaf025f8055f6ebf07df99f9b77e

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\Locales\i18n.it-IT.txt

                                                                                                          Filesize

                                                                                                          21KB

                                                                                                          MD5

                                                                                                          ea49ac9605d0ddbff07b0e19d6d34517

                                                                                                          SHA1

                                                                                                          c17fef2467a8973db193de95f7b66e6f511529d5

                                                                                                          SHA256

                                                                                                          408c2ff8977fd6fba4ece99f547182394ab62d22401454344f48ea085707ebbf

                                                                                                          SHA512

                                                                                                          e45a6d19a570f496a30eb2b39991a04743d491ff85b29390e52be2a5e146f7819c2197cd0b0357120a0c5ad9c792059584e6c4fe8f8098ecaf435aad6a44731f

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\Locales\i18n.ja-JP.txt

                                                                                                          Filesize

                                                                                                          25KB

                                                                                                          MD5

                                                                                                          da7a6902f658d02dffe24e7b29ae25a8

                                                                                                          SHA1

                                                                                                          2942cfd645e7de104aadb45d65976c073dd54a64

                                                                                                          SHA256

                                                                                                          0c28d5d9178465b76fab0f5d736962095ecd333d7b2b1775c31becd38aded023

                                                                                                          SHA512

                                                                                                          1079fc5da14e53157486609ec2faac6c88272c74c2acaa8a02f7cc698cd078f118bbdc9d979a40b183055dfd3104d1792d530b9bdeff4b1d1f12131a7f3253e4

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\Locales\i18n.ko-KR.txt

                                                                                                          Filesize

                                                                                                          22KB

                                                                                                          MD5

                                                                                                          21af008aed42c6654b0a6eadd1fca98a

                                                                                                          SHA1

                                                                                                          9f1dd90654b10a1d56c0b7345de9226deafeac52

                                                                                                          SHA256

                                                                                                          7f9e11fcb9567e432cacc5ec0b399fcbfedcdb0838f21ee84641cc4eb7794155

                                                                                                          SHA512

                                                                                                          da2bcca88b89caff19edfc38cae25fb8aaf1805dc80c28b0e1a51f5de64ce7b5c671bceb2ceb897969906fe80477e47efb9df7cd377d62f8aa3ae9ae1200d440

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\Locales\i18n.pl-PL.txt

                                                                                                          Filesize

                                                                                                          21KB

                                                                                                          MD5

                                                                                                          1d824987054f6109e386a2af3a2930ff

                                                                                                          SHA1

                                                                                                          f0103827d00e343161463cbb436a751135ab7c68

                                                                                                          SHA256

                                                                                                          a5c2f911ae2e891f152d08203e8e99e78735f09de4b7421fc6cf343987b48e34

                                                                                                          SHA512

                                                                                                          df45abf4e8b24683eb3314478bfa9820caa83799e7d685473ec963bc9f07d72e763eab14a80aaaa7e1e44232223efb43cc6e9ec777c028516e7831694994d8f2

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\Locales\i18n.pt-BR.txt

                                                                                                          Filesize

                                                                                                          21KB

                                                                                                          MD5

                                                                                                          35c829fe17dd39d16ed9ed9d3c3a423f

                                                                                                          SHA1

                                                                                                          e2f498fb2ebd74647eea70edbe29d49dec3856f0

                                                                                                          SHA256

                                                                                                          a3a3183e5f85ef1d84f386deab1052871fe8ee1cfba2800cd6443459e3609346

                                                                                                          SHA512

                                                                                                          4a9db0e592d62cfec1ddf7fb1a67d2ed9338af50edce9582321d9ca798548cd65c53b810631cd862791c925cae2075a10f3183b02b5851cdb2cb2f54db229698

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\Locales\i18n.ru-RU.txt

                                                                                                          Filesize

                                                                                                          29KB

                                                                                                          MD5

                                                                                                          c14b9c7f08c0e2a57ccfee06a7c5a05d

                                                                                                          SHA1

                                                                                                          c630e7233059006b1213807f8dfcb38295dde240

                                                                                                          SHA256

                                                                                                          b61b82dbc223e35f7451fb848978a79703b345c7a7728d60d59fb95171e11969

                                                                                                          SHA512

                                                                                                          15e3fe85a248c065429cfb52b5fa3f454d2440ac39612452974c7fe1fc890316c57a2b6c4137de36b3642276aa6791345e1b41af6628e80c4e7a3c6247dff6d5

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\Locales\i18n.th-TH.txt

                                                                                                          Filesize

                                                                                                          34KB

                                                                                                          MD5

                                                                                                          19402422b374354b36b182df60197aba

                                                                                                          SHA1

                                                                                                          75b68c2f7f9ef4730f0fe738f9477c543feb46c8

                                                                                                          SHA256

                                                                                                          d1de34e55cdb1a8abf9ad3bdf0c875b8f14825ac25df5526da98ced87588aefb

                                                                                                          SHA512

                                                                                                          c2f6991d15bc870a0998bfa74a939c66131f2d17485b3771e41fe876cee02050ece0c8a25cbca6720254ea8e25542fcab6ad569864a8443b5e3a0e266282490f

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\Locales\i18n.tr-TR.txt

                                                                                                          Filesize

                                                                                                          21KB

                                                                                                          MD5

                                                                                                          3aeda0b485130bfc9dedff4b8fef1961

                                                                                                          SHA1

                                                                                                          ace8100a277ea0f8e06902d68c1c39061a44fb26

                                                                                                          SHA256

                                                                                                          3c465dcb8fe7197b0862637548d7c383574965666dd8305f5eb617444e9acfc1

                                                                                                          SHA512

                                                                                                          319cad94c82fd188103a0178a4aaa6433d57358a7fc99348522336fdc786946f2b08fd405fd104573d7aeab62248577a7ff6a27ad35cff50790d0eada45440f4

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\Locales\i18n.vi-VN.txt

                                                                                                          Filesize

                                                                                                          23KB

                                                                                                          MD5

                                                                                                          fcbbad664f3eb4d57764f73eb0765942

                                                                                                          SHA1

                                                                                                          cfb0601f07f12a78993d701168aa93109fa891c0

                                                                                                          SHA256

                                                                                                          401a8d87d3057dc1b2dae6338c93ad8f5a5f7de628ea2d5fb94ab781f9d1a776

                                                                                                          SHA512

                                                                                                          aa077fa7ddf698ba5e619239025775ce81972af515d82d1211039e0c65e5a30524ced698dcc1b7a1e1c943992ab6ea8fd5d28dbdd5abf57ba0c246360e21f08d

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\Locales\i18n.zh-CN.txt

                                                                                                          Filesize

                                                                                                          18KB

                                                                                                          MD5

                                                                                                          0d168bc28c89f0fd4bf3b7f2d9c65eda

                                                                                                          SHA1

                                                                                                          733690096aabff107a7b9a8d8a45c7a68aa9335c

                                                                                                          SHA256

                                                                                                          9a5032c277e2af24fc596e1d2f535dd8873530cdf055ef7b9a27b84a1e4bce88

                                                                                                          SHA512

                                                                                                          bb1e632e0c6aef6915ff178e9fb2b71173d1a3a00bfb294b59933e2d84f05642001d4201e42a2cbb7716cb4df039e4acc9ee24f91c784a48521039a2deedcdc1

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\7zSC77DCC6E\Locales\i18n.zh-TW.txt

                                                                                                          Filesize

                                                                                                          18KB

                                                                                                          MD5

                                                                                                          35dbabb7d08aae38d44bb326ccd10eea

                                                                                                          SHA1

                                                                                                          193c8df23ae63107227a1faa03658c91635af058

                                                                                                          SHA256

                                                                                                          c5ad750e534b3a1ef73e2b8b8aacdb5f591a72c366583f9ae1ca8138eae5979c

                                                                                                          SHA512

                                                                                                          75aa4b75b3a9d76d0306360c6dbb49b86a7ecf7c88d8f31f28918f5a93d623e578f8e5faeae95c11b82d17f161834f65970088fbd293a12fca9f9322b5fad3af

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\hfm0pikb.zcw\BlueStacks-Installer_5.21.212.1027.log

                                                                                                          Filesize

                                                                                                          127KB

                                                                                                          MD5

                                                                                                          3be6721f967b7c468dc2f1a5acdf9bc2

                                                                                                          SHA1

                                                                                                          b34f5cb54d423270af4077d7a3a1d62169ad69f2

                                                                                                          SHA256

                                                                                                          bf14c14b0e8ab636da2c52c874c5bd91a3606102d0af1cc7964f0e3c33a64507

                                                                                                          SHA512

                                                                                                          90118c4c6d14fb699bb3d827fd0308788edcbe028122cbbb0faf8e0421e4432ad29ab46e8b236a72bd5d675946dd7e8cdc7fa553ac4b948ff081a337068b8c7b

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\nsg1F95.tmp\BgWorker.dll

                                                                                                          Filesize

                                                                                                          12KB

                                                                                                          MD5

                                                                                                          36c81676ada53ceb99e06693108d8cce

                                                                                                          SHA1

                                                                                                          d31fa4aebd584238b3edc4768dd5414494610889

                                                                                                          SHA256

                                                                                                          a9e4f7ec65670d2ce375ffaf09b6d07f4cd531132ca002452287a4d540154a38

                                                                                                          SHA512

                                                                                                          1300de7b3e1ac9e706e0aad0b70e3e2a21db8c860e05b314a52e63dd66b5dffdf6be1e38ab6ede13bfd3a64631cc909486bf4b1403e7d821e3b566edc514c63c

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\nsg1F95.tmp\System.dll

                                                                                                          Filesize

                                                                                                          11KB

                                                                                                          MD5

                                                                                                          959ea64598b9a3e494c00e8fa793be7e

                                                                                                          SHA1

                                                                                                          40f284a3b92c2f04b1038def79579d4b3d066ee0

                                                                                                          SHA256

                                                                                                          03cd57ab00236c753e7ddeee8ee1c10839ace7c426769982365531042e1f6f8b

                                                                                                          SHA512

                                                                                                          5e765e090f712beffce40c5264674f430b08719940d66e3a4d4a516fd4ade859f7853f614d9d6bbb602780de54e11110d66dbb0f9ca20ef6096ede531f9f6d64

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\nsg1F95.tmp\nsDialogs.dll

                                                                                                          Filesize

                                                                                                          9KB

                                                                                                          MD5

                                                                                                          f7b92b78f1a00a872c8a38f40afa7d65

                                                                                                          SHA1

                                                                                                          872522498f69ad49270190c74cf3af28862057f2

                                                                                                          SHA256

                                                                                                          2bee549b2816ba29f81c47778d9e299c3a364b81769e43d5255310c2bd146d6e

                                                                                                          SHA512

                                                                                                          3ad6afa6269b48f238b48cf09eeefdef03b58bab4e25282c8c2887b4509856cf5cbb0223fbb06c822fb745aeea000dd1eee878df46ad0ba7f2ef520a7a607f79

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\nsg1F95.tmp\nsDui.dll

                                                                                                          Filesize

                                                                                                          3.0MB

                                                                                                          MD5

                                                                                                          ce6c8ab02f6ff1ea26dda30eae4dbb2b

                                                                                                          SHA1

                                                                                                          4e68dbe6c4f852aabe170c6d3f28761176b860c1

                                                                                                          SHA256

                                                                                                          1fcbb07633353e9049f1c747afedd632b94319b0f3c10fd8c2f7aab4aeb5410b

                                                                                                          SHA512

                                                                                                          631dcdab7736e542b74e43e29b97a00a6cd3e6ef13b4fa0e92ef386fc9d7cbbb671208489a4e6dd69c0520c9cd7c6070bb70cb1969583d75fa7a11551e73fafa

                                                                                                        • C:\Users\Admin\AppData\Local\Temp\nsg1F95.tmp\nsis7z.dll

                                                                                                          Filesize

                                                                                                          434KB

                                                                                                          MD5

                                                                                                          95f6f6ab9509bc366ab9215defe4251a

                                                                                                          SHA1

                                                                                                          e3f4a6effd6ca5838cfe91a01967cb72edcc7b0b

                                                                                                          SHA256

                                                                                                          a896a9ece055d334d431cd0f856113ab925d9ee86d2dee383c0bfbbef11a5b50

                                                                                                          SHA512

                                                                                                          a853f70d2ea7f384df99be067724bf3ca73c63f3c3573c112f5528fc86a96bd34509d934b038e2a81833f3abb3eedbc5894921291139100e01df6e35696c0ecc

                                                                                                        • C:\Users\Admin\Downloads\Unconfirmed 592207.crdownload

                                                                                                          Filesize

                                                                                                          11.7MB

                                                                                                          MD5

                                                                                                          455a2f8045af9bc01715d90c7a6f4824

                                                                                                          SHA1

                                                                                                          3ba0e7017a7046f6f388916f46c14dd7b976563b

                                                                                                          SHA256

                                                                                                          9b9c556e9b0fc0fa6756c5f509e08d5606f2ded7d9808b1498fae5bbd65dd9f8

                                                                                                          SHA512

                                                                                                          60d757cdceac82845bd0658fa8f897e1dd4caf90c7330ad264dcda25aac51765f306c4785bb364d5920d500df1b537bcc75ac6071cbc0455dc232e991c3820a8

                                                                                                        • memory/400-12816-0x0000000000400000-0x000000000045D000-memory.dmp

                                                                                                          Filesize

                                                                                                          372KB

                                                                                                        • memory/400-12907-0x0000000000400000-0x000000000045D000-memory.dmp

                                                                                                          Filesize

                                                                                                          372KB

                                                                                                        • memory/2288-134-0x00007FF90B9A0000-0x00007FF90C462000-memory.dmp

                                                                                                          Filesize

                                                                                                          10.8MB

                                                                                                        • memory/2288-119-0x00007FF90B9A3000-0x00007FF90B9A5000-memory.dmp

                                                                                                          Filesize

                                                                                                          8KB

                                                                                                        • memory/2288-12867-0x00007FF90B9A0000-0x00007FF90C462000-memory.dmp

                                                                                                          Filesize

                                                                                                          10.8MB

                                                                                                        • memory/2288-150-0x00007FF90B9A0000-0x00007FF90C462000-memory.dmp

                                                                                                          Filesize

                                                                                                          10.8MB

                                                                                                        • memory/2288-132-0x000000001D1F0000-0x000000001D718000-memory.dmp

                                                                                                          Filesize

                                                                                                          5.2MB

                                                                                                        • memory/2288-149-0x00007FF90B9A0000-0x00007FF90C462000-memory.dmp

                                                                                                          Filesize

                                                                                                          10.8MB

                                                                                                        • memory/2288-131-0x00007FF90B9A0000-0x00007FF90C462000-memory.dmp

                                                                                                          Filesize

                                                                                                          10.8MB

                                                                                                        • memory/2288-136-0x000000001BCF0000-0x000000001BCFE000-memory.dmp

                                                                                                          Filesize

                                                                                                          56KB

                                                                                                        • memory/2288-146-0x000000001BC30000-0x000000001BC38000-memory.dmp

                                                                                                          Filesize

                                                                                                          32KB

                                                                                                        • memory/2288-123-0x00007FF90B9A0000-0x00007FF90C462000-memory.dmp

                                                                                                          Filesize

                                                                                                          10.8MB

                                                                                                        • memory/2288-122-0x0000000003280000-0x00000000032E8000-memory.dmp

                                                                                                          Filesize

                                                                                                          416KB

                                                                                                        • memory/2288-148-0x00007FF90B9A3000-0x00007FF90B9A5000-memory.dmp

                                                                                                          Filesize

                                                                                                          8KB

                                                                                                        • memory/2288-120-0x0000000000F30000-0x0000000000FCE000-memory.dmp

                                                                                                          Filesize

                                                                                                          632KB

                                                                                                        • memory/2288-135-0x000000001F850000-0x000000001F888000-memory.dmp

                                                                                                          Filesize

                                                                                                          224KB

                                                                                                        • memory/4760-24765-0x000000001B670000-0x000000001B754000-memory.dmp

                                                                                                          Filesize

                                                                                                          912KB

                                                                                                        • memory/4760-24764-0x0000000000960000-0x0000000000988000-memory.dmp

                                                                                                          Filesize

                                                                                                          160KB

                                                                                                        • memory/6640-24767-0x000000001B6A0000-0x000000001B720000-memory.dmp

                                                                                                          Filesize

                                                                                                          512KB

                                                                                                        • memory/6640-24766-0x0000000000AD0000-0x0000000000B24000-memory.dmp

                                                                                                          Filesize

                                                                                                          336KB