6d996f70f6b9f99e4ae0aad1f28d224c84c22194551ca4e21f56127eb563faea

Resubmissions

07-07-2024 01:45

240707-b6jz2azfrp 7

07-07-2024 01:39

240707-b21rzsselc 6

Analysis

max time kernel
121s
max time network
157s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
07-07-2024 01:39

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

BlueStacks10Installer_10.41.218.1001_native_51fc3b1a41380306ef41deb4aa5254d9_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe
Size

911KB
MD5

05cd50890a8efa95d686384d2d96c530
SHA1

ad496d950142315aa8662edb002549e84d3de424
SHA256

6d996f70f6b9f99e4ae0aad1f28d224c84c22194551ca4e21f56127eb563faea
SHA512

6dc050e3c6577299ba4bcc306d1866ddea3eb2499f75f1de96e435d03f03b0ccf4021602be0eb6c816d7a0e81ce29590de247a084d67e88a64fa6ced4043bcf3
SSDEEP

24576:bivtCXWeGKM8WolR74uEFQWa3GZllJCGt3:+tCXWPIWofUuCQWa25JN3

Score

6^/10

Malware Config

Signatures

Downloads MZ/PE file

Executes dropped EXE 6 IoCs

pid	Process
320	BlueStacksInstaller.exe
2928	HD-CheckCpu.exe
776	BlueStacksMicroInstaller5.14.22.1003_native_51fc3b1a41380306ef41deb4aa5254d9.exe
3040	BlueStacksInstaller.exe
2504	HD-CheckCpu.exe
1656	HD-CheckCpu.exe

Loads dropped DLL 8 IoCs

pid	Process
2856	BlueStacks10Installer_10.41.218.1001_native_51fc3b1a41380306ef41deb4aa5254d9_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe
2856	BlueStacks10Installer_10.41.218.1001_native_51fc3b1a41380306ef41deb4aa5254d9_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe
2856	BlueStacks10Installer_10.41.218.1001_native_51fc3b1a41380306ef41deb4aa5254d9_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe
2856	BlueStacks10Installer_10.41.218.1001_native_51fc3b1a41380306ef41deb4aa5254d9_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe
776	BlueStacksMicroInstaller5.14.22.1003_native_51fc3b1a41380306ef41deb4aa5254d9.exe
776	BlueStacksMicroInstaller5.14.22.1003_native_51fc3b1a41380306ef41deb4aa5254d9.exe
776	BlueStacksMicroInstaller5.14.22.1003_native_51fc3b1a41380306ef41deb4aa5254d9.exe
776	BlueStacksMicroInstaller5.14.22.1003_native_51fc3b1a41380306ef41deb4aa5254d9.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies system certificate store 2 TTPs 6 IoCs

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\317A2AD07F2B335EF5A1C34E4B57E8B7D8F1FCA6	BlueStacksInstaller.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\317A2AD07F2B335EF5A1C34E4B57E8B7D8F1FCA6\Blob = 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	BlueStacksInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A	BlueStacksInstaller.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 040000000100000010000000324a4bbbc863699bbe749ac6dd1d46240f00000001000000140000000f6aad4c3fe04619cdc8b2bd655aa1a26042e6500b000000010000005400000053007400610072006600690065006c006400200043006c00610073007300200032002000430065007200740069006600690063006100740069006f006e00200041007500740068006f007200690074007900000053000000010000004800000030463021060b6086480186fd6d0107170330123010060a2b0601040182373c0101030200c03021060b6086480186fd6e0107170330123010060a2b0601040182373c0101030200c009000000010000002a000000302806082b0601050507030106082b0601050507030206082b0601050507030406082b06010505070303140000000100000014000000bf5fb7d1cedd1f86f45b55acdcd710c20ea988e71d000000010000001000000090c4f4233b006b7bfaa6adcd8f577d77030000000100000014000000ad7e1c28b064ef8f6003402014c3d0e3370eb58a190000000100000010000000fd960962ac6938e0d4b0769aa1a64e262000000001000000130400003082040f308202f7a003020102020100300d06092a864886f70d01010505003068310b300906035504061302555331253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e31323030060355040b1329537461726669656c6420436c61737320322043657274696669636174696f6e20417574686f72697479301e170d3034303632393137333931365a170d3334303632393137333931365a3068310b300906035504061302555331253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e31323030060355040b1329537461726669656c6420436c61737320322043657274696669636174696f6e20417574686f7269747930820120300d06092a864886f70d01010105000382010d00308201080282010100b732c8fee971a60485ad0c1164dfce4defc80318873fa1abfb3ca69ff0c3a1dad4d86e2b5390fb24a43e84f09ee85fece52744f528a63f7bdee02af0c8af532f9eca0501931e8f661c39a74dfa5ab673042566eb777fe759c64a99251454eb26c7f37f19d530708fafb0462affadeb29edd79faa0487a3d4f989a5345fdb43918236d9663cb1b8b982fd9c3a3e10c83bef0665667a9b19183dff71513c302e5fbe3d7773b25d066cc323569a2b8526921ca702b3e43f0daf087982b8363dea9cd335b3bc69caf5cc9de8fd648d1780336e5e4a5d99c91e87b49d1ac0d56e1335235edf9b5f3defd6f776c2ea3ebb780d1c42676b04d8f8d6da6f8bf244a001ab020103a381c53081c2301d0603551d0e04160414bf5fb7d1cedd1f86f45b55acdcd710c20ea988e73081920603551d2304818a3081878014bf5fb7d1cedd1f86f45b55acdcd710c20ea988e7a16ca46a3068310b300906035504061302555331253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e31323030060355040b1329537461726669656c6420436c61737320322043657274696669636174696f6e20417574686f72697479820100300c0603551d13040530030101ff300d06092a864886f70d01010505000382010100059d3f889dd1c91a55a1ac69f3f359da9b01871a4f57a9a179092adbf72fb21eccc75e6ad88387a197ef49353e7706415862bf8e58b80a673fecb3dd21661fc954fa72cc3d4c40d881af779e837abba2c7f534178ed91140f4fc2c2a4d157fa7625d2e25d3000b201a1d68f917b8f4bd8bed2859dd4d168b1783c8b265c72d7aa5aabc53866ddd57a4caf820410b68f0f4fb74be565d7a79f5f91d85e32d95bef5719043cc8d1f9a000a8729e95522580023eae31243295b4708dd8c416a6506a8e521aa41b4952195b97dd134ab13d6adbcdce23d39cdbd3e7570a1185903c922b48f9cd55e2ad7a5b6d40a6df8b74011469a1f790e62bf0f97ece02f1f1794	BlueStacksInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436	BlueStacksInstaller.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436\Blob = 04000000010000001000000079e4a9840d7d3a96d7c04fe2434c892e0f0000000100000014000000b34ddd372ed92e8f2abfbb9e20a9d31f204f194b090000000100000034000000303206082b0601050507030106082b0601050507030206082b0601050507030406082b0601050507030306082b0601050507030814000000010000001400000003de503556d14cbb66f0a3e21b1bc397b23dd1550b00000001000000120000004400690067006900430065007200740000001d000000010000001000000059779e39e21a2e3dfced6857ed5c5fd9030000000100000014000000a8985d3a65e5e5c4b2d7d66d40c6dd2fb19c54361900000001000000100000000f3a0527d242de2dc98e5cfcb1e991ee2000000001000000b3030000308203af30820297a0030201020210083be056904246b1a1756ac95991c74a300d06092a864886f70d01010505003061310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3120301e06035504031317446967694365727420476c6f62616c20526f6f74204341301e170d3036313131303030303030305a170d3331313131303030303030305a3061310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3120301e06035504031317446967694365727420476c6f62616c20526f6f7420434130820122300d06092a864886f70d01010105000382010f003082010a0282010100e23be11172dea8a4d3a357aa50a28f0b7790c9a2a5ee12ce965b010920cc0193a74e30b753f743c46900579de28d22dd870640008109cece1b83bfdfcd3b7146e2d666c705b37627168f7b9e1e957deeb748a308dad6af7a0c3906657f4a5d1fbc17f8abbeee28d7747f7a78995985686e5c23324bbf4ec0e85a6de370bf7710bffc01f685d9a844105832a97518d5d1a2be47e2276af49a33f84908608bd45fb43a84bfa1aa4a4c7d3ecf4f5f6c765ea04b37919edc22e66dce141a8e6acbfecdb3146417c75b299e32bff2eefad30b42d4abb74132da0cd4eff881d5bb8d583fb51be84928a270da3104ddf7b216f24c0a4e07a8ed4a3d5eb57fa390c3af270203010001a3633061300e0603551d0f0101ff040403020186300f0603551d130101ff040530030101ff301d0603551d0e0416041403de503556d14cbb66f0a3e21b1bc397b23dd155301f0603551d2304183016801403de503556d14cbb66f0a3e21b1bc397b23dd155300d06092a864886f70d01010505000382010100cb9c37aa4813120afadd449c4f52b0f4dfae04f5797908a32418fc4b2b84c02db9d5c7fef4c11f58cbb86d9c7a74e79829ab11b5e370a0a1cd4c8899938c9170e2ab0f1cbe93a9ff63d5e40760d3a3bf9d5b09f1d58ee353f48e63fa3fa7dbb466df6266d6d16e418df22db5ea774a9f9d58e22b59c04023ed2d2882453e7954922698e08048a837eff0d6796016deace80ecd6eac4417382f49dae1453e2ab93653cf3a5006f72ee8c457496c612118d504ad783c2c3a806ba7ebaf1514e9d889c1b9386ce2916c8aff64b977255730c01b24a3e1dce9df477cb5b424080530ec2dbd0bbf45bf50b9a9f3eb980112adc888c698345f8d0a3cc6e9d595956dde	BlueStacksInstaller.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
320	BlueStacksInstaller.exe
320	BlueStacksInstaller.exe
320	BlueStacksInstaller.exe
320	BlueStacksInstaller.exe
320	BlueStacksInstaller.exe
3040	BlueStacksInstaller.exe
3040	BlueStacksInstaller.exe
3040	BlueStacksInstaller.exe
3040	BlueStacksInstaller.exe
3040	BlueStacksInstaller.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	320	BlueStacksInstaller.exe
Token: SeDebugPrivilege	3040	BlueStacksInstaller.exe

Suspicious use of WriteProcessMemory 27 IoCs

description	pid	Process	procid_target
PID 2856 wrote to memory of 320	2856	BlueStacks10Installer_10.41.218.1001_native_51fc3b1a41380306ef41deb4aa5254d9_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe	28
PID 2856 wrote to memory of 320	2856	BlueStacks10Installer_10.41.218.1001_native_51fc3b1a41380306ef41deb4aa5254d9_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe	28
PID 2856 wrote to memory of 320	2856	BlueStacks10Installer_10.41.218.1001_native_51fc3b1a41380306ef41deb4aa5254d9_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe	28
PID 2856 wrote to memory of 320	2856	BlueStacks10Installer_10.41.218.1001_native_51fc3b1a41380306ef41deb4aa5254d9_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe	28
PID 320 wrote to memory of 2928	320	BlueStacksInstaller.exe	29
PID 320 wrote to memory of 2928	320	BlueStacksInstaller.exe	29
PID 320 wrote to memory of 2928	320	BlueStacksInstaller.exe	29
PID 320 wrote to memory of 2928	320	BlueStacksInstaller.exe	29
PID 320 wrote to memory of 776	320	BlueStacksInstaller.exe	31
PID 320 wrote to memory of 776	320	BlueStacksInstaller.exe	31
PID 320 wrote to memory of 776	320	BlueStacksInstaller.exe	31
PID 320 wrote to memory of 776	320	BlueStacksInstaller.exe	31
PID 320 wrote to memory of 776	320	BlueStacksInstaller.exe	31
PID 320 wrote to memory of 776	320	BlueStacksInstaller.exe	31
PID 320 wrote to memory of 776	320	BlueStacksInstaller.exe	31
PID 776 wrote to memory of 3040	776	BlueStacksMicroInstaller5.14.22.1003_native_51fc3b1a41380306ef41deb4aa5254d9.exe	32
PID 776 wrote to memory of 3040	776	BlueStacksMicroInstaller5.14.22.1003_native_51fc3b1a41380306ef41deb4aa5254d9.exe	32
PID 776 wrote to memory of 3040	776	BlueStacksMicroInstaller5.14.22.1003_native_51fc3b1a41380306ef41deb4aa5254d9.exe	32
PID 776 wrote to memory of 3040	776	BlueStacksMicroInstaller5.14.22.1003_native_51fc3b1a41380306ef41deb4aa5254d9.exe	32
PID 3040 wrote to memory of 2504	3040	BlueStacksInstaller.exe	33
PID 3040 wrote to memory of 2504	3040	BlueStacksInstaller.exe	33
PID 3040 wrote to memory of 2504	3040	BlueStacksInstaller.exe	33
PID 3040 wrote to memory of 2504	3040	BlueStacksInstaller.exe	33
PID 3040 wrote to memory of 1656	3040	BlueStacksInstaller.exe	35
PID 3040 wrote to memory of 1656	3040	BlueStacksInstaller.exe	35
PID 3040 wrote to memory of 1656	3040	BlueStacksInstaller.exe	35
PID 3040 wrote to memory of 1656	3040	BlueStacksInstaller.exe	35

C:\Users\Admin\AppData\Local\Temp\BlueStacks10Installer_10.41.218.1001_native_51fc3b1a41380306ef41deb4aa5254d9_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe
"C:\Users\Admin\AppData\Local\Temp\BlueStacks10Installer_10.41.218.1001_native_51fc3b1a41380306ef41deb4aa5254d9_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe"
1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:2856
- C:\Users\Admin\AppData\Local\Temp\7zS82B5C326\BlueStacksInstaller.exe
  "C:\Users\Admin\AppData\Local\Temp\7zS82B5C326\BlueStacksInstaller.exe"
  2⤵
  - Executes dropped EXE
  - Modifies system certificate store
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of WriteProcessMemory
  PID:320
- - C:\Users\Admin\AppData\Local\Temp\7zS82B5C326\HD-CheckCpu.exe
    "C:\Users\Admin\AppData\Local\Temp\7zS82B5C326\HD-CheckCpu.exe" --cmd checkHypervEnabled
    3⤵
    - Executes dropped EXE
    PID:2928
- - C:\Users\Admin\AppData\Local\BlueStacksSetup\BlueStacksMicroInstaller5.14.22.1003_native_51fc3b1a41380306ef41deb4aa5254d9.exe
    "C:\Users\Admin\AppData\Local\BlueStacksSetup\BlueStacksMicroInstaller5.14.22.1003_native_51fc3b1a41380306ef41deb4aa5254d9.exe"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Suspicious use of WriteProcessMemory
    PID:776
  - - C:\Users\Admin\AppData\Local\Temp\7zS80322756\BlueStacksInstaller.exe
      "C:\Users\Admin\AppData\Local\Temp\7zS80322756\BlueStacksInstaller.exe"
      4⤵
      Executes dropped EXE
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of AdjustPrivilegeToken
      Suspicious use of WriteProcessMemory
      PID:3040
    - - C:\Users\Admin\AppData\Local\Temp\7zS80322756\HD-CheckCpu.exe
        
        "C:\Users\Admin\AppData\Local\Temp\7zS80322756\HD-CheckCpu.exe" --cmd checkHypervEnabled
        5⤵
        Executes dropped EXE
        
        PID:2504
    - - C:\Users\Admin\AppData\Local\Temp\7zS80322756\HD-CheckCpu.exe
        
        "C:\Users\Admin\AppData\Local\Temp\7zS80322756\HD-CheckCpu.exe" --cmd checkSSE4
        5⤵
        Executes dropped EXE
        
        PID:1656
    - - C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.14.22.1003_nxt.exe
        
        "C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.14.22.1003_nxt.exe" -s
        5⤵
        
        PID:1716

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416

Filesize
1KB

MD5
55540a230bdab55187a841cfe1aa1545

SHA1
363e4734f757bdeb89868efe94907774a327695e

SHA256
d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb

SHA512
c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
80e6312b8d40e08888e1b9c3e0933b3e

SHA1
cfeb24f1c3638eb9f974f546c3184224f4a8ae36

SHA256
7ec473f9868266d6fdf0e55b110476a41b504dba7e655594a7ecb2ebacb1e52d

SHA512
65d07e99e375278072b745f5cb94c3ad4d2582f4ddf42e6327a9256497934c2516ec70ce8b6e3c0e7e529c1471b2a0f54e8c791dda11376b9a58fb876a477501

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
21e20de197ca93e339fd933df0f96e7d

SHA1
738ed013ea26c165fa2cf7eddfd068dc3adda274

SHA256
4671c4017700ad4b0c4303da5890fb6037d3e32b890502580651422e04931322

SHA512
e7a440887003daa377e99d36854fc862d545f8130f44813645d3ba905ddfe10ccc746e9622662449d8aecdf4c1ba20443e2ef247180bce8ba4dacdc43915c2c0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
2d222f3fb876cb1f4b65e5c889adeabe

SHA1
9651ef78bd669924ecc76fc6703875ef56e9c09f

SHA256
15caf4dd6327808071bbcc328f32bd9fc886e30189222bafd588824a33388384

SHA512
920e6d24dde9c2dea14b3717814ec852db5283a571a059ee3cf664cd7d318f007713abb5a6427d0c43d987137a7076703c2adec9bc09c3011f417ef98308d945

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
70872d3f1bce77fa1526b4eeb9e9d867

SHA1
d97fb167c5f2ed3d03774a569e3236c01a151937

SHA256
98161015fea2254757d2af2bfbcb5d65663280d6aa1912ed1d3a246e35b59f3e

SHA512
196c3821701815dbcee7af4479d0af36be77d9a6021585333924cedb988d10d92a9c29facecf29272124d1c9c9c74187770a938305a5da490e99dcb1415a92f8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
8a4e43ca7479fe539601bfbbec1398b1

SHA1
b184d6880b631ba3c931220c715edef784a4708a

SHA256
b905ff8f6b7cb17486bf2a71f9100aecad7c1e6ce1fe67bfc24a8a95228b7022

SHA512
dfefcd6fea587854d94139b7becd11f49a9c66cddb5130f080934662fabb645e15b985b067cdcaa06898c32e1de395195652adb5f5225c90819b0f12cc30e372

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
1a2a8c7afc9f26d5d0d844ce6a4414a8

SHA1
4325676658b4242c02d3e8274114d5b02fe08ec3

SHA256
b8741abfd7c8cd75ccfdddf9cdb4d55f786d10f62d50b0f955e970f7e97d849a

SHA512
73086de1601b2911b9d6227d79abdee5f3554e4b575ff992cb648453de8ea9b6c948912355390500915e55230266b92bb6fba7b67a460df862124564b3902afa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
082e9e9648e033c8b224d5663618580d

SHA1
94ca4bc12508a9b45e3c2ad49cd7bf355322ea44

SHA256
ae72da8f521dffad8e2a563c2a3f1a6ed865b592ea79338295eb944ebb8b862e

SHA512
c8e10a88b31d8ec33185d8f38a0ddb2f4f8a457cb8db023b394d588f74258b1f9f932505b62e5e8db0f0fdb5059b74ca26e31b4177c074050b994254ef980e57

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
8d40ccb4bd8c43638bbf2fbf87c4278d

SHA1
1ea2907601f62fadc6ffa1f978a131243ae180d4

SHA256
9d8ac24a2339e8dd0989f61589704b3cb3426e4a692eb8e9c31845fbaf93327c

SHA512
98245c4a823dcd5c3f52b20083a7f48784d8711ceb67747b8b37cba9dcc68446a68f31adfc7d31992fc307a23657de5f23fcf3630a0b32d700b4493554f968f4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
df264c24bb8fcfd819d5fc5277057b33

SHA1
0eea88a91bf5da8ae4131109867ac478ac5713d7

SHA256
9e474346af1aabbda044315cd77075988edbaaf6dc2f80f8dd3d1217e878b019

SHA512
1f92a3eb0454bbd2fcad746a047f5efa6ff357ab44977589b23da95ea1fef394a89015f940b3f732f504542f955360003e3ba3e81e20106dc5d69fe85afc5d89

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
015c5765f70cbf4f6a493da3e720d9f7

SHA1
95850d80a03e907a047d86f54b6c3e6447b8e7ee

SHA256
a8686e80fad6d1a6db86f8e62631f408ffdef4802ee89effabcdaf2a710697c9

SHA512
8b1cfa9188223ce94ae76786548b01401504505a4b4fa3e907b0659c563af127cfd4bffb904aec75b29b6822644bdb7d6cda82077781a4a5eb384588d01904ca

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
76e1eb7a4c498fc0d2a1015c1f0a63e0

SHA1
12ed579fccebe72c2f777b2638a6ccafc39c74bb

SHA256
da44f5fc9e976446663af1cb726d3549d42dd67a5d13b128429e179f8817f1ce

SHA512
5ed01f11a7f12da99e7bf10574a3f0d70727747a0cbc97c81bf8d75550a0a9d9ffc28ac63ef41331bcde651f0a781ec2ea5f2d08ad795cb17c2a99aa3fc6afce

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
0f92520d1977c64b09e0367f2a1ae808

SHA1
119e776394a48acd1cccacd2636c4678989c7769

SHA256
61dc9e9e7f1dcbbfc43e3c975e29d8c382617dd4874283ab591f8048e9ae7be0

SHA512
55852c831c5441aaa6d3ecc8ab7168cf466ae595b31aa7e23e81b2a86708937349821be68a1c2e65713b56fbeacb85e57da1551b17a75980cd32166501ee4dec

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
a0b3f95b38ca5a31ed38376e839eb58c

SHA1
ad4b3619f1b839cf3fc46c6ac81fa006803eec8b

SHA256
768a4307e0f8357f76f6911dd7e0117b811550b646086b84586d57908757a123

SHA512
eec41b5e37b4ad62f09a5f8e9bbaf7a2b47ab87e625b9b79f7f82e04d8b3dd0d71515e7b99c04a5c6fdff98363720b9cab15b54197afbd7cc7e9c1a5a513a64b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
2af518d16b08d6c0b0fc66cbcbe8b597

SHA1
71d19db3611a1183684ef37364221325dbe2ef09

SHA256
c690e3268424885dbfd0bbef9ba6e15141a3c747ba726be83309c10de86e9bc8

SHA512
bd38f02e75c82aae8c81bbe23aca9555bb6204da87105216e551a3fbaf000e4de9c0bb7964f1e11891bd969a9d6451b0c9620a93445bfb29755865322b93f5e5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
d8ad6f76ed831df385ef58d02897c207

SHA1
86ef086f8bb1df7257b68d1a28d1c4d41dce18fa

SHA256
021c45e1c10e5d3a1646f2ef8ba58a0b428efcd95a62579564d3f161ad105f22

SHA512
9163b61860cdd4651cbfb751aef781a8daea5f641b7855581563ec945a55edae20066e22b59ad1f76f66e96d3df632e547be90151199f268bbcf8c6064717e23

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
e094b8d3a627dcb7c7f4e3a9ca3d7bdc

SHA1
d775fdfc85d7db39b61321c6ae906711663394f0

SHA256
2f28f3ab72fcf922f31e22af490e5055f96d4c16222134a49018f2a1bfcbb7c6

SHA512
52285536d1bc847405f09ccefc375ecd3d96db6e301c055ec1fbbb60da4de391fd837dc0024b9050e2aef01c8b23abad3f4859cd974e664c81c87e4b3cd5f896

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
b38c46d8d69b9ebb4457dac4752b23d9

SHA1
eb6a84a171d9996a417fb5c76285b3fc846c26be

SHA256
b19f4c9792d2022a32ee3a0c609d3a394ace2895d40ede538c42dcd778f467e8

SHA512
d883d0800ab78850be07ab9e83dd7a6f2df70b6c9d24ea4d7505bc683e3039ef901eda4c80704753230943f30089e98a14b612a04eaa2b027e9ed0d48dbcd94f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
98016b8a575e2b2b1890ea842025fcd4

SHA1
98fadd00a71a60b337e13cbbf23348e97341235e

SHA256
2752c75748381089fab4505b41c18e3ae80c95063a5fc5ff044298eae4b08b38

SHA512
e5c456a3570cb57865b62238e0838033eaa554992fe54f2fb0e263f0fb16e80cedcbe53918d136393a1a4b23f638de3e95a6332d29990e823b501ee0a21ec2cd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
f0a051f10d7e5cffac8a17dab3f5fe25

SHA1
49ebf507a93f9a08e51e78b4abffceb5c91acaf4

SHA256
5f014e06d2f3a895c17f893c2de770e739e99c8d12112496abca296d4689d231

SHA512
13ec4d3a2faa59df1c94f5966ebd1604c9bf760d692c2da9639091b5e054b9405fbf95569ca5b8448b279f1dd54810ba4f3cfe5777ad7f14c5a6afe37d47b083

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
87cf4f6c2d7402983506f61ba471f0fd

SHA1
ecaab866a7298f4bd9fe32ef36b704efd8991d55

SHA256
67a341bfc7be83288183c54ffa51122652287e893f53a736125cdc9d1d04c1b0

SHA512
203cfc8f02a70ba0eb4623da3f48b68a1f4e710681202dd1c3c65022297e881aa69d5f20e1444cb5d5b4b54787982ce7545e659e2c8f907bd0908165f85624df

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
225bac812719727a23212a70ce080dee

SHA1
f89826a9d33ac4e2d26f7697a91211145bb8cb99

SHA256
908a208179a92df43df94ed51fd570a1a9e925c163b1ed788358ca90c66d378e

SHA512
3955bb87b31934824d37e2d1f90e541e149a942dda2cba2eadcdc7d676ae6f8c78cb04876e5be3ad7d2d198aacfee779df896ba430e2d5516ccf784f58ac79b1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
32c66907f3b6a60a52b44e8b65fbe1ca

SHA1
192d23a7ab00586f7c9bb2effacd7a270b279e5b

SHA256
927f51d2b899d8cff7d65a465a06cf9c03970d2bb67493cf7648fd251b584b0c

SHA512
0952e0830fa4520e79cbdda86fdff591c83ebfb2d64be1bc8c4532a8d07aac6fcacf46c3da9c2bab17678b30b69bec07386daaf60490c8f8b06c00aedf9bca6b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
5f394cd38428bb3c5d6be47473580317

SHA1
8a72d077344f8e1a677d13fd4dab3066766b50e0

SHA256
d15fe0b449d6c4f9e7744f555e3736d74d6a24489ade9d5e6b8c0fe8b677102b

SHA512
a913a2f041807a6affe28f86ec2150ccaf46775b130fe48d38c32617dbf83298b9b5a1bfdb0e634f9548e545bd144fd00b94a53df9089b02abc0750706c66212

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
4e44c1c654925ac1a257538e8510dea8

SHA1
ba01307d943d2c5ac12b0cb55a1479e379c686e6

SHA256
f8be9c494d21d6f14378bdfa454aa777a119c0288653cd51cf63fb9fdaefc8ae

SHA512
a8c83edd7ab2a515dd609605b7a6df3035376b9c33864b436e7fc35874c8ff75af4301ea5bca8b8bc3e20215b79e991388d82d1c973a50a9aa796c9df55ae944

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
8b4115ad16a14837644f6e883f0b8502

SHA1
d218408df752fd1e0f71167dcefb2b3915b15ba0

SHA256
4a4357dccf5500a763d1d8f3ad6bd8031f12088ef9d1130ecc169ce9645f8e3f

SHA512
d568bc851c0faaa53deaeb3f30bb7c83a67ad287194f6c1e38e9c5ca8b3376803f34f4d71ee184f8003eea4784dd70b4b5f997f1d17f7fb6dbc5009c58be0687

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
cdaf3feccb95807ddcd1dffefc06b9bb

SHA1
5ec57cf4988a06cc6dd7f78ef044776aa6ff49f6

SHA256
2fd36a79d1899ab4a17664365c8725ec600083375e459e6455c8b558e52a48a6

SHA512
17ff386cc6ea54fae965390de2d61413ca7a06efd2c66d3e89d5d690408c91c6e7cdf5c304593780dff7f0680ccdc6ea35c4397e328a9def28ace5ee1d8bf0d7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
5e8c0902e38f0e0dd146e075ebe5ae4c

SHA1
a2fc2f36acbd46839555a90f4445b905f59ac275

SHA256
fd4921cdc60e7c86d6a74e9cfd96b993fd1d714772c121a38f3ef29e546d07f5

SHA512
1bc80fe5918f2ae174ff4bf87c44cf71334df2aa095503e91952394ca7699771380fecf0256f09288a794b48688dae2c66efa7dfe7c5f907970e37d06d7817c1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
0ca32ed606b3e59ee26059313207091d

SHA1
93af2a134533d979295aa668a791b5f484034f54

SHA256
1f5de5acf909eba3d70d2b14fc394e2c2f2b1c6fbd61c9693edc2e891c789710

SHA512
ba88630c2574b587548ffc2fe44a4c55679dccaf35eeabb54223912a2da399f9bcf65259f1c248040d550935af1af62c3efd94396a5d3af49dfeea09346a8479

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
d4f712c84fb2a1f5256fcd53ac64cadf

SHA1
c15c9ad18eddc8e0a0a3fb11098f8c1bbcde3d74

SHA256
ae946d28ddad19f03e2ec984befee746582b63dd6a71a46dce292205996d0718

SHA512
220486c85e470f894b23ca0dfb9f3676e2be84ffa94053f09eff8ba2b3094599d88643cf614caf6b7b615111ec58b5340094cf1e7e7360f13fdae9da1464c103

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
4255d0a4464ee546fc27f51e044e8914

SHA1
0e8df54d6346a256a608f44c0802bce0ae30cc8a

SHA256
cc58308c7279da79417f82df3397e925b84a859e9ebcbb65ed6149d3745123cc

SHA512
8f1692b1eca357124527ba958479fb9c091128ab441f1c6a190b5530b15be02fbf8a6185af08be75a2e7e288190b2f2b5950c83f69883a1aceec758ff456c5d8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
93058c156997d3d6969a48b9c9fe637d

SHA1
d3c9dbc47cd210df3bf237e05c632fdbf5cde204

SHA256
590271954b8a5cabfe3a324cfcce47eecc9fd09ec532554ddf599b489bc36f26

SHA512
41bc8cabe2014ef52c0eb921952f2eaa559b6b5ce07e1b96ca46727de4ee28d1797f7f617c783c658b0f069205dc8cac91a362bb88156d380956431dc9eac4d5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
90cf950bdb9d79a0c18a37eeb4302674

SHA1
a864cf95be8a878d6f49c2f1475aa8e0d49e2bf2

SHA256
372b1f546c87fa9d94fd6de247ff1553f992cd6e45e40a34c360276961afa9b3

SHA512
2d7ff22cde89d4d66dcf41abc3e96c6faea0b448aa65e609d2c9209e59af1c726979d43cd8e3c73bef20657ade8073670beb876c7910969105c7f9b0a7c1ca4e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
21f73861aa00385fce8f1fb5222f87be

SHA1
2b4d781b7376d4c3a56e21eac51f024ffff2a34f

SHA256
cf45d5b102ba32d7beca33ce0b1c98272122efa83751b0d66f6350c6052de384

SHA512
d53f23802d3b20d190e5a200fb39bb668582ddae7f656cfbe7e814beb3c7e30de71135559c8352d57bcdc80e7c89b9746770913583bdac5b187c303cb5e79a30

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ce1de53cdb3785a3cf4c6351958e09e4

SHA1
0cf30bafabf04d5eaa419e984882a8879bedc2e9

SHA256
8b4d1df1f7f1f3ae1887b9e31a6488606a955ce117c9c2e834c4808a3570ec64

SHA512
150c64cc6dace833bf0a7d171fb60910d73731e2ef9405bde82b472537cc83b75ba445ca5c249e509bb84c24a914298ddfb4dac242e30ecd1a62447a81abfaa9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
9948f520113f62bcce45f97f4fd15a9b

SHA1
e06083f11bd3fce7a68caeea6dfd2a4040d3a129

SHA256
cb96b20968fcb3930f1861de6b86352b76c7bc637a91294045a2dff320abe99c

SHA512
5f915483bc315ce09ca9f0a155b06453c5e1b3598c6bb786c71eac67de9ae32822d3fdff46b1226acd7709eed2574b05134b5214a0cea0bb1f839531ffde0cd2

Download Submit
C:\Users\Admin\AppData\Local\BlueStacksSetup\BlueStacksMicroInstaller5.14.22.1003_native_51fc3b1a41380306ef41deb4aa5254d9.exe

Filesize
900KB

MD5
4611f5bcd1dce6d2d0e0bfafdbc70c84

SHA1
5f22f6540e4ce5f2c6e5b9bb1d2f1af8f5779128

SHA256
71c0651f04787a0b9d1c997b5026cc388f798e608c6049d44daea58669a3eba2

SHA512
a62165ae66a6e21da73da7a31285a1f901495c192be729ec249b278cd6b3093107f4ea315ea82d572d72755e30b77b8ce87a515e14a57fc22a4c86466bddffd3

Download Submit
C:\Users\Admin\AppData\Local\Bluestacks\Logs.log

Filesize
780B

MD5
ec8dfae1f66019f7269b2cf8f7993091

SHA1
f0a61491de59d6392f483d5ae94a1311b13b4858

SHA256
9b24d9cdbff9182e7f3c75ac95d1d0454c064094453b9a4ee74ca83c09157827

SHA512
d0bb9dee0de96162319bd2b060754a4c7ac5c1def33cc54ad00cbe08237490d2c8b8e7c71c431db9c7f1707b45e1064ee31bded255453f72292743e33a6b8b5c

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zS80322756\Assets\backicon.png

Filesize
15KB

MD5
7ff5dc8270b5fa7ef6c4a1420bd67a7f

SHA1
b224300372feaa97d882ca2552b227c0f2ef4e3e

SHA256
fa64884054171515e97b78aaa1aad1ec5baa9d1daf9c682e0b3fb4a41a9cb1c1

SHA512
f0d5a842a01b99f189f3d46ab59d2c388a974951b042b25bbce54a15f5a3f386984d19cfca22ba1440eebd79260066a37dfeff6cb0d1332fca136add14488eef

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zS80322756\Assets\close_red.png

Filesize
15KB

MD5
93216b2f9d66d423b3e1311c0573332d

SHA1
5efaebec5f20f91f164f80d1e36f98c9ddaff805

SHA256
d0b6d143642d356b40c47459a996131a344cade6bb86158f1b74693426b09bfb

SHA512
922a7292de627c5e637818556d25d9842a88e89f2b198885835925679500dfd44a1e25ce79e521e63c4f84a6b0bd6bf98e46143ad8cee80ecdbaf3d3bc0f3a32

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zS80322756\Assets\custom.png

Filesize
17KB

MD5
03b17f0b1c067826b0fcc6746cced2cb

SHA1
e07e4434e10df4d6c81b55fceb6eca2281362477

SHA256
fbece8bb5f4dfa55dcfbf41151b10608af807b9477e99acf0940954a11e68f7b

SHA512
67c78ec01e20e9c8d9cdbba665bb2fd2bb150356f30b88d3d400bbdb0ae92010f5d7bcb683dcf6f895722a9151d8e669d8bef913eb6e728ba56bb02f264573b2

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zS80322756\Assets\installer_bg.jpg

Filesize
78KB

MD5
3478e24ba1dd52c80a0ff0d43828b6b5

SHA1
b5b13bbf3fb645efb81d3562296599e76a2abac0

SHA256
4c7471c986e16de0cd451be27d4b3171e595fe2916b4b3bf7ca52df6ec368904

SHA512
5c8c9cc76d6dbc7ce482d0d1b6c2f3d48a7a510cd9ed01c191328763e1bccb56daeb3d18c33a9b10ac7c9780127007aa13799fa82d838de27fbe0a02ad98119d

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zS80322756\Assets\installer_logo.png

Filesize
14KB

MD5
e33432b5d6dafb8b58f161cf38b8f177

SHA1
d7f520887ce1bfa0a1abd49c5a7b215c24cbbf6a

SHA256
9f3104493216c1fa114ff935d23e3e41c7c3511792a30b10a40b507936c0d183

SHA512
520dc99f3176117ebc28da5ef5439b132486ef67d02fa17f28b7eab0c59db0fa99566e44c0ca7bb75c9e7bd5244e4a23d87611a55c841c6f9c9776e457fb1cbf

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zS80322756\Assets\installer_minimize.png

Filesize
113B

MD5
38b539a1e4229738e5c196eedb4eb225

SHA1
f027b08dce77c47aaed75a28a2fce218ff8c936c

SHA256
a064f417e3c2b8f3121a14bbded268b2cdf635706880b7006f931de31476bbc2

SHA512
2ce433689a94fae454ef65e0e9ec33657b89718bbb5a038bf32950f6d68722803922f3a427278bad432395a1716523e589463fcce4279dc2a895fd77434821cc

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zS80322756\Assets\setpath.png

Filesize
15KB

MD5
b2e7f40179744c74fded932e829cb12a

SHA1
a0059ab8158a497d2cf583a292b13f87326ec3f0

SHA256
5bbb2f41f9f3a805986c3c88a639bcc22d90067d4b8de9f1e21e3cf9e5c1766b

SHA512
b95b7ebdb4a74639276eaa5c055fd8d9431e2f58a5f7c57303f7cf22e8b599f6f2a7852074cf71b19b49eb31cc9bf2509aedf41d608981d116e49a00030c797c

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zS80322756\Assets\unchecked_gray.png

Filesize
192B

MD5
e50df2a0768f7fc4c3fe8d784564fea3

SHA1
d1fc4db50fe8e534019eb7ce70a61fd4c954621a

SHA256
671f26795b12008fbea1943143f660095f3dca5d925f67d765e2352fd7ee2396

SHA512
c87a8308a73b17cbdd179737631fb1ba7fdaeb65e82263f6617727519b70a81266bb695867b9e599c1306ee2cf0de525452f77ce367ca89bf870ea3ae7189998

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zS80322756\BlueStacksInstaller.exe

Filesize
607KB

MD5
1744edd4e585a5efbd49ad0593810af1

SHA1
57dbda1bac0b48803933da6940c3b88376774c69

SHA256
3b136c884fb6e21acfcca33538f9b2e472f0eb83ae9a5a128cb1d5a6098b7f31

SHA512
f7690f5cbb08f2b7f801aecb24c826dee1fc08cd9d324b54359ab258be92577e72dcbab146bc4f55ab58dee0a01ff32070ef0f4a58385ba928f3f01bfe15d018

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zS80322756\Locales\i18n.en-US.txt

Filesize
18KB

MD5
bc0bfbf0fa8b40c2f72957c2f57afb8f

SHA1
644765340a713413e159ff57f0098501ca8304f4

SHA256
819b673bc98a9aefa9e480b3df2a5f9558033fce38c2a2f5be08d10b9a859e28

SHA512
6e7e88ac28190011c1e1e2a78517e3bb858e35ac90f125882c64bfa26d5a6f7ee6718c558b9446f3aeead0a8fc53c825fca66ad2f6d82819ede19b88ff658e3f

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zS82B5C326\Assets\change_hover.png

Filesize
310B

MD5
57092634754fc26e5515e3ed5ca7d461

SHA1
3ae4d01db9d6bba535f5292298502193dfc02710

SHA256
8e5847487da148ebb3ea029cc92165afd215cdc08f7122271e13eb37f94e6dc1

SHA512
553baf9967847292c8e9249dc3b1d55069f51c79f4d1d3832a0036e79691f433a3ce8296a68c774b5797caf7000037637ce61b8365885d2a4eed3ff0730e5e2a

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zS82B5C326\Assets\error_icon_72.png

Filesize
1KB

MD5
4aaf83d2b3fd56ad806708e60474df39

SHA1
144777a265879b69fadea3eb3ac6939458918578

SHA256
84e59d14d9433e6c3d92daeb8c443063b5e3be6c0b297f0403dbde473a05cb3f

SHA512
3b8485f054fe6ed2374bc81cb1786f09741219fbfcb22503707b11cf5db1ab262ba4349633597d5d9ddabc3415b170fa8eebc932f58d211d7092b8fb96fa1304

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zS82B5C326\Assets\exit_close.png

Filesize
670B

MD5
26eb04b9e0105a7b121ea9c6601bbf2a

SHA1
efc08370d90c8173df8d8c4b122d2bb64c07ccd8

SHA256
7aaef329ba9fa052791d1a09f127551289641ea743baba171de55faa30ec1157

SHA512
9df3c723314d11a6b4ce0577eb61488061f2f96a9746a944eb6a4ee8c0c4d29131231a1b20988ef5454b79f9475b43d62c710839ecc0a9c98324f977cab6db68

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zS82B5C326\Assets\link.png

Filesize
306B

MD5
ae2c73ee43d722c327c7fb6fdbee905c

SHA1
96f238bf53ac80f5b7a9ad6ef2531e8e3f274628

SHA256
28c0abc6bfe7a155815104883a37a53dd783d142300471064c95eddf3cae0eaf

SHA512
5a1e341f727cf1cb4832cced8e96c5a74971451629603c48bfb91ceb4561d0122ab9ae701f8b34681d5f13115a384467d430ccb8282494b40f4577ebc3ad825b

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zS82B5C326\Assets\loader.png

Filesize
279B

MD5
03903fd42ed2ee3cb014f0f3b410bcb4

SHA1
762a95240607fe8a304867a46bc2d677f494f5c2

SHA256
076263cc65f9824f4f82eb6beaa594d1df90218a2ee21664cf209181557e04b1

SHA512
8b0e717268590e5287c07598a06d89220c5e9a33cd1c29c55f8720321f4b3efc869d20c61fcc892e13188d77f0fdc4c73a2ee6dece174bf876fcc3a6c5683857

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zS82B5C326\Assets\minimize_progress.png

Filesize
212B

MD5
1504b80f2a6f2d3fefc305da54a2a6c2

SHA1
432a9d89ebc2f693836d3c2f0743ea5d2077848d

SHA256
2f62d4e8c643051093f907058dddc78cc525147d9c4f4a0d78b4d0e5c90979f6

SHA512
675db04baf3199c8d94af30a1f1c252830a56a90f633c3a72aa9841738b04242902a5e7c56dd792626338e8b7eabc1f359514bb3a2e62bc36c16919e196cfd94

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zS82B5C326\BlueStacksInstaller.exe.config

Filesize
324B

MD5
1b456d88546e29f4f007cd0bf1025703

SHA1
e5c444fcfe5baf2ef71c1813afc3f2c1100cab86

SHA256
d6d316584b63bb0d670a42f88b8f84e0de0db4275f1a342084dc383ebeb278eb

SHA512
c545e416c841b8786e4589fc9ca2b732b16cdd759813ec03f558332f2436f165ec1ad2fbc65012b5709fa19ff1e8396639c17bfad150cabeb51328a39ea556e6

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zS82B5C326\HD-CheckCpu.exe

Filesize
200KB

MD5
81234fd9895897b8d1f5e6772a1b38d0

SHA1
80b2fec4a85ed90c4db2f09b63bd8f37038db0d3

SHA256
2e14887f3432b4a313442247fc669f891dbdad7ef1a2d371466a2afa88074a4c

SHA512
4c924d6524dc2c7d834bfc1a0d98b21753a7bf1e94b1c2c6650f755e6f265512d3a963bc7bc745351f79f547add57c37e29ba9270707edbf62b60df3a541bc16

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zS82B5C326\JSON.dll

Filesize
411KB

MD5
f5fd966e29f5c359f78cb61a571d1be4

SHA1
a55e7ed593b4bc7a77586da0f1223cfd9d51a233

SHA256
d2c8d26f95f55431e632c8581154db7c19547b656380e051194a9d2583dd2156

SHA512
d99e6fe250bb106257f86135938635f6e7ad689b2c11a96bb274f4c4c5e9a85cfacba40122dbc953f77b5d33d886c6af30bff821f10945e15b21a24b66f6c8be

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zS82B5C326\Locales\i18n.en-US.txt

Filesize
19KB

MD5
0a041eb21be673b37a9a43f751d83400

SHA1
cf98837aeb730d05ec55252277d2ed41ef58f0ba

SHA256
708132b01a012c3a43a5a7e5550318f6fe72a98139bba7e4f5fb352b9e46db29

SHA512
476051e9cc528c8b72a1ff0aec6f9e05cce4e7069ff4af7e75558664f02a7018304a4d840e694ee811d08895b628da072b1c72b8f605e4212b75a84db66b8b14

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zS82B5C326\ThemeFile

Filesize
80KB

MD5
c3e6bab4f92ee40b9453821136878993

SHA1
94493a6b3dfb3135e5775b7d3be227659856fbc4

SHA256
de1a2e6b560e036da5ea6b042e29e81a5bfcf67dde89670c332fc5199e811ba6

SHA512
a64b6b06b3a0f3591892b60e59699682700f4018b898efe55d6bd5fb417965a55027671c58092d1eb7e21c2dbac42bc68dfb8c70468d98bed45a8cff0e945895

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar2A23.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsuFD25.tmp\nsDui.dll

Filesize
3.0MB

MD5
c40a4e327c43f7f51a20c38b1bae840f

SHA1
0f56fe0a357a71ef32cb138258366f743f8fc398

SHA256
ef94f69593fd376e52a46934629b634a6365590b7102cd45a2dfe45533139060

SHA512
f379dc79899744160f21d6c8f11341b2251e58c09dd510b035cf08ce8bfcd38e290b96af3baa656ec85be8753dca7e32d3b95098ced1cfb481142d454b178565

Download Submit
\Users\Admin\AppData\Local\Temp\7zS82B5C326\BlueStacksInstaller.exe

Filesize
623KB

MD5
f51cd98b34ad6b81081e1a017f5c45bc

SHA1
e734d4f3d81d517b2a2eafaf20310bc94a419207

SHA256
02ca17eaa0f8eec7e7d321756fd73bb8292f2de7f3585d567ecf6f56b4f037f6

SHA512
1b87f6b7c0ac1825a3bd76bebda7e90ebc8293b889a3f39a4513ce04800fcd516e5d8597db379275ed324afb5c7f868afb31d1c965922b434de6968c94c47184

Download Submit
\Users\Admin\AppData\Local\Temp\nsuFD25.tmp\BgWorker.dll

Filesize
12KB

MD5
36c81676ada53ceb99e06693108d8cce

SHA1
d31fa4aebd584238b3edc4768dd5414494610889

SHA256
a9e4f7ec65670d2ce375ffaf09b6d07f4cd531132ca002452287a4d540154a38

SHA512
1300de7b3e1ac9e706e0aad0b70e3e2a21db8c860e05b314a52e63dd66b5dffdf6be1e38ab6ede13bfd3a64631cc909486bf4b1403e7d821e3b566edc514c63c

Download Submit
\Users\Admin\AppData\Local\Temp\nsuFD25.tmp\nsDialogs.dll

Filesize
9KB

MD5
f7b92b78f1a00a872c8a38f40afa7d65

SHA1
872522498f69ad49270190c74cf3af28862057f2

SHA256
2bee549b2816ba29f81c47778d9e299c3a364b81769e43d5255310c2bd146d6e

SHA512
3ad6afa6269b48f238b48cf09eeefdef03b58bab4e25282c8c2887b4509856cf5cbb0223fbb06c822fb745aeea000dd1eee878df46ad0ba7f2ef520a7a607f79

Download Submit
memory/320-196-0x00000000020D0000-0x00000000020DA000-memory.dmp

Filesize
40KB

Download
memory/320-132-0x000007FEF5440000-0x000007FEF5E2C000-memory.dmp

Filesize
9.9MB

Download
memory/320-916-0x000007FEF5443000-0x000007FEF5444000-memory.dmp

Filesize
4KB

Download
memory/320-1246-0x00000000020D0000-0x00000000020DA000-memory.dmp

Filesize
40KB

Download
memory/320-197-0x00000000020D0000-0x00000000020DA000-memory.dmp

Filesize
40KB

Download
memory/320-1316-0x000007FEF5440000-0x000007FEF5E2C000-memory.dmp

Filesize
9.9MB

Download
memory/320-1004-0x000007FEF5440000-0x000007FEF5E2C000-memory.dmp

Filesize
9.9MB

Download
memory/320-129-0x0000000000C10000-0x0000000000CAE000-memory.dmp

Filesize
632KB

Download
memory/320-127-0x000007FEF5443000-0x000007FEF5444000-memory.dmp

Filesize
4KB

Download
memory/320-131-0x000000001A670000-0x000000001A6D8000-memory.dmp

Filesize
416KB

Download
memory/3040-1151-0x0000000000960000-0x00000000009FA000-memory.dmp

Filesize
616KB

Download
memory/3040-2373-0x00000000005B0000-0x00000000005BA000-memory.dmp

Filesize
40KB

Download
memory/3040-1165-0x0000000000410000-0x0000000000478000-memory.dmp

Filesize
416KB

Download
memory/3040-1414-0x00000000005B0000-0x00000000005BA000-memory.dmp

Filesize
40KB

Download
memory/3040-1413-0x00000000005B0000-0x00000000005BA000-memory.dmp

Filesize
40KB

Download