Malware Analysis Report

2024-11-13 18:04

Sample ID 241107-tm9qfsvhqa
Target https://cdn.discordapp.com/attachments/1116815761172856942/1304050478023315547/base64.txt?ex=672dfb26&is=672ca9a6&hm=1a6ede6d27ace34a125827b49f6f5eba8a9f41040075a142dd4919160615e78f&
Tags
defense_evasion discovery evasion execution exploit persistence phishing privilege_escalation spyware stealer
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

Threat Level: Likely malicious

The file https://cdn.discordapp.com/attachments/1116815761172856942/1304050478023315547/base64.txt?ex=672dfb26&is=672ca9a6&hm=1a6ede6d27ace34a125827b49f6f5eba8a9f41040075a142dd4919160615e78f& was found to be: Likely malicious.

Malicious Activity Summary

defense_evasion discovery evasion execution exploit persistence phishing privilege_escalation spyware stealer

Downloads MZ/PE file

Manipulates Digital Signatures

Modifies Windows Firewall

Stops running service(s)

Creates new service(s)

Possible privilege escalation attempt

Executes dropped EXE

A potential corporate email address has been identified in the URL: swiper@9

A potential corporate email address has been identified in the URL: currency-file@1

A potential corporate email address has been identified in the URL: [email protected]

Event Triggered Execution: Component Object Model Hijacking

Modifies file permissions

A potential corporate email address has been identified in the URL: [email protected]

A potential corporate email address has been identified in the URL: [email protected]/20241107/auto/storage/goog4_request

Loads dropped DLL

A potential corporate email address has been identified in the URL: =@L

Reads user/profile data of web browsers

Checks installed software on the system

Adds Run key to start application

Enumerates connected drives

Legitimate hosting services abused for malware hosting/C2

Drops file in System32 directory

Enumerates processes with tasklist

Drops file in Program Files directory

Launches sc.exe

Drops file in Windows directory

Subvert Trust Controls: Mark-of-the-Web Bypass

Browser Information Discovery

Enumerates physical storage devices

System Location Discovery: System Language Discovery

Event Triggered Execution: Netsh Helper DLL

Enumerates system info in registry

Modifies Internet Explorer settings

Suspicious behavior: GetForegroundWindowSpam

Uses Volume Shadow Copy service COM API

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Checks processor information in registry

Modifies registry class

Suspicious use of AdjustPrivilegeToken

Checks SCSI registry key(s)

Modifies data under HKEY_USERS

Suspicious behavior: AddClipboardFormatListener

Gathers network information

Suspicious use of FindShellTrayWindow

Suspicious use of SetWindowsHookEx

Uses Volume Shadow Copy WMI provider

Gathers system information

Suspicious use of SendNotifyMessage

Uses Task Scheduler COM API

NTFS ADS

Suspicious behavior: EnumeratesProcesses

Suspicious use of WriteProcessMemory

Opens file in notepad (likely ransom note)

Runs net.exe

Suspicious behavior: LoadsDriver

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Reported

2024-11-07 16:11

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-11-07 16:11

Reported

2024-11-07 16:36

Platform

win11-20241007-en

Max time kernel

1499s

Max time network

1474s

Command Line

"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://cdn.discordapp.com/attachments/1116815761172856942/1304050478023315547/base64.txt?ex=672dfb26&is=672ca9a6&hm=1a6ede6d27ace34a125827b49f6f5eba8a9f41040075a142dd4919160615e78f&

Signatures

Creates new service(s)

persistence execution

Downloads MZ/PE file

Manipulates Digital Signatures

Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Cleanup\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllVerifyIndirectData\{C689AABA-8E78-11D0-8C47-00C04FC295EE}\FuncName = "CryptSIPVerifyIndirectData" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\CertCheck\{573E31F8-AABA-11D0-8CCB-00C04FC295EE}\$Function = "SoftpubCheckCert" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\FinalPolicy\{573E31F8-AABA-11D0-8CCB-00C04FC295EE}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\#2002\FuncName = "WVTAsn1SpcFinancialCriteriaInfoEncode" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.2.4.2\FuncName = "WVTAsn1IntentToSealAttributeEncode" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Cleanup\{FC451C16-AC75-11D1-B4B8-00C04FB66EA0}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllDecodeObject\1.3.6.1.4.1.311.2.1.30\FuncName = "WVTAsn1SpcSigInfoDecode" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\#2003\FuncName = "WVTAsn1SpcIndirectDataContentEncode" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllDecodeObject\#2005\Dll = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllDecodeObject\1.3.6.1.4.1.311.2.1.4\FuncName = "WVTAsn1SpcIndirectDataContentDecode" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\#2009\Dll = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Message\{FC451C16-AC75-11D1-B4B8-00C04FB66EA0}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\FinalPolicy\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\FinalPolicy\{573E31F8-AABA-11D0-8CCB-00C04FC295EE}\$Function = "HTTPSFinalProv" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllPutSignedDataMsg\{C689AABA-8E78-11D0-8C47-00C04FC295EE}\Dll = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Signature\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$Function = "SoftpubLoadSignature" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Initialization\{189A3842-3041-11D1-85E1-00C04FC295EE}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllGetSignedDataMsg\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}\FuncName = "CryptSIPGetSignedDataMsg" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllDecodeObject\#2003\FuncName = "WVTAsn1SpcIndirectDataContentDecode" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Message\{C6B2E8D0-E005-11CF-A134-00C04FD7BF43}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Initialization\{FC451C16-AC75-11D1-B4B8-00C04FB66EA0}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllRemoveSignedDataMsg\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}\FuncName = "CryptSIPRemoveSignedDataMsg" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Certificate\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Usages\1.3.6.1.4.1.311.10.3.3\CallbackAllocFunction = "SoftpubLoadDefUsageCallData" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\FinalPolicy\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\#2001\Dll = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Cleanup\{573E31F8-AABA-11D0-8CCB-00C04FC295EE}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllDecodeObject\1.3.6.1.4.1.311.16.1.1\FuncName = "DecodeAttrSequence" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.2.1.11\Dll = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllDecodeObject\1.3.6.1.4.1.311.2.1.12\FuncName = "WVTAsn1SpcSpOpusInfoDecode" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllDecodeObject\1.3.6.1.4.1.311.2.4.3\FuncName = "WVTAsn1SealingSignatureAttributeDecode" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllCreateIndirectData\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}\Dll = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Initialization\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\$Function = "DriverInitializePolicy" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllDecodeObject\1.3.6.1.4.1.311.2.4.4\Dll = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllVerifyIndirectData\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}\Dll = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Initialization\{573E31F8-DDBA-11D0-8CCB-00C04FC295EE}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\#2005\FuncName = "WVTAsn1SpcLinkEncode" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllDecodeObject\1.3.6.1.4.1.311.2.1.12\Dll = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Message\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\#2008\FuncName = "WVTAsn1SpcLinkEncode" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Certificate\{573E31F8-DDBA-11D0-8CCB-00C04FC295EE}\$Function = "WintrustCertificateTrust" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Initialization\{573E31F8-AABA-11D0-8CCB-00C04FC295EE}\$Function = "SoftpubInitialize" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Message\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\#2012\FuncName = "WVTAsn1SealingTimestampAttributeEncode" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Cleanup\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$Function = "SoftpubCleanup" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Cleanup\{573E31F8-DDBA-11D0-8CCB-00C04FC295EE}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Signature\{64B9D180-8DA2-11CF-8736-00AA00A485EB}\$Function = "SoftpubLoadSignature" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Certificate\{189A3842-3041-11D1-85E1-00C04FC295EE}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllDecodeObject\#2005\FuncName = "WVTAsn1SpcLinkDecode" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllGetSignedDataMsg\{DE351A43-8E59-11D0-8C47-00C04FC295EE}\FuncName = "CryptSIPGetSignedDataMsg" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Initialization\{64B9D180-8DA2-11CF-8736-00AA00A485EB}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Signature\{189A3842-3041-11D1-85E1-00C04FC295EE}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\FinalPolicy\{64B9D180-8DA2-11CF-8736-00AA00A485EB}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Message\{C6B2E8D0-E005-11CF-A134-00C04FD7BF43}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Signature\{573E31F8-DDBA-11D0-8CCB-00C04FC295EE}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Usages\1.3.6.1.5.5.7.3.1\CallbackAllocFunction = "SoftpubLoadDefUsageCallData" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Usages\2.16.840.1.113730.4.1\CallbackFreeFunction = "SoftpubFreeDefUsageCallData" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllDecodeObject\#2130\Dll = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllDecodeObject\1.3.6.1.4.1.311.2.1.26\FuncName = "WVTAsn1SpcMinimalCriteriaInfoDecode" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllPutSignedDataMsg\{DE351A43-8E59-11D0-8C47-00C04FC295EE}\FuncName = "CryptSIPPutSignedDataMsg" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Signature\{64B9D180-8DA2-11CF-8736-00AA00A485EB}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.12.2.3\Dll = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.2.1.12\FuncName = "WVTAsn1SpcSpOpusInfoEncode" C:\Windows\SysWOW64\regsvr32.exe N/A

Possible privilege escalation attempt

exploit
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\icacls.exe N/A
N/A N/A C:\Windows\SysWOW64\takeown.exe N/A
N/A N/A C:\Windows\SysWOW64\icacls.exe N/A
N/A N/A C:\Windows\SysWOW64\takeown.exe N/A
N/A N/A C:\Windows\SysWOW64\icacls.exe N/A
N/A N/A C:\Windows\SysWOW64\takeown.exe N/A

Stops running service(s)

evasion execution

A potential corporate email address has been identified in the URL: =@L

phishing

A potential corporate email address has been identified in the URL: [email protected]/20241107/auto/storage/goog4_request

phishing

A potential corporate email address has been identified in the URL: currency-file@1

phishing

A potential corporate email address has been identified in the URL: [email protected]

phishing

A potential corporate email address has been identified in the URL: [email protected]

phishing

A potential corporate email address has been identified in the URL: swiper@9

phishing

Event Triggered Execution: Component Object Model Hijacking

persistence privilege_escalation

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\BlueStacks10Installer_10.41.600.1015_native_26f6bacc8e6bdf0ff6cae3878c653f52_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSC7941148\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSC7941148\HD-CheckCpu.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSC7941148\HD-CheckCpu.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BlueStacks10Installer_10.41.600.1015_native_26f6bacc8e6bdf0ff6cae3878c653f52_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\7zr.exe N/A
N/A N/A C:\ProgramData\BlueStacksServicesSetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\7zr.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\HD-ForceGPU.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\HD-GLCheck.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\HD-GLCheck.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\HD-GLCheck.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\HD-GLCheck.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\HD-GLCheck.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\HD-GLCheck.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\HD-CheckCpu.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\7zr.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\7zr.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\7zr.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\7zr.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\HD-GLCheck.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\HD-GLCheck.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\HD-GLCheck.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\HD-CheckCpu.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\7zr.exe N/A
N/A N/A C:\Users\Admin\Downloads\BlueStacksInstaller_4.280.4.4002_native_357c1005781de9013db3f088edfbd9df.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS08BC8D4A\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS08BC8D4A\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BlueStacksInstaller_4.280.4.4002_native_357c1005781de9013db3f088edfbd9df.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\7zr.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\HD-ForceGPU.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\HD-GLCheck.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\HD-GLCheck.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\HD-GLCheck.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\HD-CheckCpu.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\HD-GLCheck.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\HD-GLCheck.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\HD-GLCheck.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\HD-GLCheck.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\HD-GLCheck.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\7zr.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\HD-GLCheck.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\HD-GLCheck.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\7zr.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\7zr.exe N/A
N/A N/A C:\Users\Admin\Downloads\nox_setup_v7.0.6.1_full_intl.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Nox\CheckGLVersion.exe N/A
N/A N/A C:\Users\Admin\Downloads\nox_setup_v7.0.6.1_full_intl.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Nox\CheckGLVersion.exe N/A
N/A N/A C:\Program Files\BlueStacks_bgp64\HD-ComRegistrar.exe N/A
N/A N/A C:\Program Files\BlueStacks_bgp64\HD-ComRegistrar.exe N/A
N/A N/A C:\Program Files\BlueStacks_bgp64\HD-Player.exe N/A
N/A N/A C:\Program Files\BlueStacks_bgp64\BstkSVC.exe N/A
N/A N/A C:\Program Files\BlueStacks_bgp64\HD-Agent.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A

Modifies file permissions

discovery
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\takeown.exe N/A
N/A N/A C:\Windows\SysWOW64\icacls.exe N/A
N/A N/A C:\Windows\SysWOW64\takeown.exe N/A
N/A N/A C:\Windows\SysWOW64\icacls.exe N/A
N/A N/A C:\Windows\SysWOW64\takeown.exe N/A
N/A N/A C:\Windows\SysWOW64\icacls.exe N/A

Reads user/profile data of web browsers

spyware stealer

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-2584844841-1405471295-1760131749-1000\Software\Microsoft\Windows\CurrentVersion\Run\electron.app.BlueStacks Services = "C:\\Users\\Admin\\AppData\\Local\\Programs\\bluestacks-services\\BlueStacksServices.exe --hidden" C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A

Checks installed software on the system

discovery

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\F: C:\Windows\SysWOW64\takeown.exe N/A
File opened (read-only) \??\F: C:\Windows\system32\taskmgr.exe N/A
File opened (read-only) \??\F: C:\Users\Admin\Downloads\LDPlayer9_ens_1001_ld.exe N/A
File opened (read-only) \??\F: C:\Windows\SysWOW64\takeown.exe N/A
File opened (read-only) \??\F: C:\Windows\SysWOW64\takeown.exe N/A

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A discord.com N/A N/A
N/A discord.com N/A N/A

Drops file in System32 directory

Description Indicator Process Target
File created C:\Windows\system32\storage.json C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
File opened for modification C:\Windows\system32\storage.json C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A

Enumerates processes with tasklist

discovery
Description Indicator Process Target
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files (x86)\BlueStacks X\translations\qtwebengine_locales\sv.pak C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
File created C:\Program Files (x86)\BlueStacks X\translations\qt_ja.qm C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
File opened for modification C:\Program Files (x86)\BlueStacks X\plugins\audio_filter\libheadphone_channel_mixer_plugin.dll C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
File opened for modification C:\Program Files\BlueStacks_bgp64\libGLESv2.dll C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\7zr.exe N/A
File created C:\Program Files\BlueStacks_bgp64\libGLES_V2_translator.dll C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\7zr.exe N/A
File created C:\Program Files\BlueStacks_nxt\HD-ComRegistrar.exe C:\Users\Admin\AppData\Local\Temp\7zS4E145984\7zr.exe N/A
File created C:\Program Files\BlueStacks_nxt\QtQuick\qtquick2plugin.dll C:\Users\Admin\AppData\Local\Temp\7zS4E145984\7zr.exe N/A
File created C:\Program Files\BlueStacks_nxt\swresample-4.dll C:\Users\Admin\AppData\Local\Temp\7zS4E145984\7zr.exe N/A
File opened for modification C:\Program Files (x86)\BlueStacks X\translations\qtwebengine_locales\sv.pak C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
File opened for modification C:\Program Files (x86)\BlueStacks X\api-ms-win-crt-process-l1-1-0.dll C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
File opened for modification C:\Program Files (x86)\BlueStacks X\plugins\aws\aws-c-http.dll C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
File opened for modification C:\Program Files (x86)\BlueStacks X\plugins\video_output\libwingdi_plugin.dll C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
File opened for modification C:\Program Files\BlueStacks_nxt\Assets\checked_gray.png C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\7zr.exe N/A
File opened for modification C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\7zr.exe N/A
File created C:\Program Files\BlueStacks_bgp64\HD-ComRegistrar.exe.config C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\7zr.exe N/A
File opened for modification C:\Program Files (x86)\BlueStacks X\image\Guide\Step2_video.mp4 C:\Program Files (x86)\BlueStacks X\BlueStacks X.exe N/A
File created C:\Program Files\BlueStacks_nxt\BlueStacksHelper.exe.config C:\Users\Admin\AppData\Local\Temp\7zS4E145984\7zr.exe N/A
File opened for modification C:\Program Files\BlueStacks_nxt\HD-DataManager.exe.config C:\Users\Admin\AppData\Local\Temp\7zS4E145984\7zr.exe N/A
File created C:\Program Files (x86)\BlueStacks X\plugins\meta_engine\libfolder_plugin.dll C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
File opened for modification C:\Program Files (x86)\BlueStacks X\plugins\video_chroma\libyuvp_plugin.dll C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
File opened for modification C:\Program Files\BlueStacks_nxt\HD-CheckCpu.exe C:\Users\Admin\AppData\Local\Temp\7zS4E145984\7zr.exe N/A
File created C:\Program Files (x86)\BlueStacks X\image\account\facebook.svg C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
File created C:\Program Files (x86)\BlueStacks X\image\MyGames\no_game_arrow.png C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
File created C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\mr.pak C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\7zr.exe N/A
File created C:\Program Files\BlueStacks_bgp64\HD-Sensor-Native.dll C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\7zr.exe N/A
File opened for modification C:\Program Files (x86)\BlueStacks X\language\ar.qm C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
File opened for modification C:\Program Files (x86)\BlueStacks X\translations\qtwebengine_locales\zh-CN.pak C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
File opened for modification C:\Program Files (x86)\BlueStacks X\image\Search\mini_and.svg C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
File created C:\Program Files (x86)\BlueStacks X\image\TypeIndicator\CS_hover.svg C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
File opened for modification C:\Program Files (x86)\BlueStacks X\plugins\access\libvdr_plugin.dll C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
File opened for modification C:\Program Files\BlueStacks_bgp64\Vanara.Core.dll C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\7zr.exe N/A
File created C:\Program Files\ldplayer9box\VBoxDD.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File opened for modification C:\Program Files\BlueStacks_nxt\translations\qtwebengine_locales\fa.pak C:\Users\Admin\AppData\Local\Temp\7zS4E145984\7zr.exe N/A
File created C:\Program Files (x86)\BlueStacks X\image\account\icon_ photoicon_camera.png C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
File opened for modification C:\Program Files (x86)\BlueStacks X\audio\qtaudio_wasapi.dll C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
File created C:\Program Files\BlueStacks_nxt\libaosl.dll C:\Users\Admin\AppData\Local\Temp\7zS4E145984\7zr.exe N/A
File created C:\Program Files\BlueStacks_nxt\BlueStacksAppplayerWeb.exe C:\Users\Admin\AppData\Local\Temp\7zS4E145984\7zr.exe N/A
File opened for modification C:\Program Files (x86)\BlueStacks X\platforms C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
File opened for modification C:\Program Files\BlueStacks_nxt\Assets\powered_by_bs.png C:\Users\Admin\AppData\Local\Temp\7zS4E145984\7zr.exe N/A
File created C:\Program Files\BlueStacks_nxt\QtQml\WorkerScript\qmldir C:\Users\Admin\AppData\Local\Temp\7zS4E145984\7zr.exe N/A
File created C:\Program Files (x86)\BlueStacks X\plugins\aws\aws-c-s3.dll C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
File opened for modification C:\Program Files (x86)\BlueStacks X\xplugins\SidebarPlugin.dll C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
File opened for modification C:\Program Files\BlueStacks_nxt\vcruntime140_1.dll C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\7zr.exe N/A
File created C:\Program Files\BlueStacks_bgp64\7zr.exe C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\7zr.exe N/A
File created C:\Program Files\ldplayer9box\NetLwfUninstall.exe F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\BlueStacks_nxt\avcodec-60.dll C:\Users\Admin\AppData\Local\Temp\7zS4E145984\7zr.exe N/A
File opened for modification C:\Program Files\BlueStacks_nxt\agora_rtc_sdk.dll C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\7zr.exe N/A
File created C:\Program Files\BlueStacks_bgp64\msvcp100.dll C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\7zr.exe N/A
File created C:\Program Files\BlueStacks_nxt\BlueStacksUninstaller.exe.config C:\Users\Admin\AppData\Local\Temp\7zS4E145984\7zr.exe N/A
File created C:\Program Files\BlueStacks_nxt\HD-WerHandler.dll C:\Users\Admin\AppData\Local\Temp\7zS4E145984\7zr.exe N/A
File created C:\Program Files (x86)\BlueStacks X\Qt5Multimedia.dll C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
File opened for modification C:\Program Files (x86)\BlueStacks X\xplugins\AccountPlugin.dll C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
File created C:\Program Files\BlueStacks_bgp64\BstkDD2.dll C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\7zr.exe N/A
File opened for modification C:\Program Files\BlueStacks_bgp64\DiscordRPC.dll C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\7zr.exe N/A
File created C:\Program Files\BlueStacks_bgp64\HD-QuitMultiInstall.exe C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\7zr.exe N/A
File created C:\Program Files\ldplayer9box\Ld9BoxSVC.exe F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\ldplayer9box\x86\vccorlib140.dll F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File created C:\Program Files\BlueStacks_nxt\HD-Hvutl.exe C:\Users\Admin\AppData\Local\Temp\7zS4E145984\7zr.exe N/A
File opened for modification C:\Program Files (x86)\BlueStacks X\image\CloudMode\Icon_popular.svg C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
File created C:\Program Files (x86)\BlueStacks X\image\settings\setting_loading.svg C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
File created C:\Program Files\BlueStacks_nxt\HD-CheckCpu.exe C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\7zr.exe N/A
File created C:\Program Files\BlueStacks_bgp64\Bluestacks.exe.lastcodeanalysissucceeded C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\7zr.exe N/A
File opened for modification C:\Program Files (x86)\BlueStacks X\image\Tutorial\InstantPlay\Icon_tip2.svg C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
File opened for modification C:\Program Files\BlueStacks_bgp64\HD-Quit.exe.config C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\7zr.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\Panther\UnattendGC\setuperr.log C:\Windows\System32\oobe\UserOOBEBroker.exe N/A
File opened for modification C:\Windows\Panther\UnattendGC\diagerr.xml C:\Windows\System32\oobe\UserOOBEBroker.exe N/A
File opened for modification C:\Windows\Panther\UnattendGC\diagwrn.xml C:\Windows\System32\oobe\UserOOBEBroker.exe N/A
File opened for modification C:\Windows\Logs\DISM\dism.log C:\Windows\SysWOW64\dism.exe N/A
File opened for modification C:\Windows\Logs\DISM\dism.log C:\Users\Admin\AppData\Local\Temp\34D08338-9562-478C-831A-61EE8C936B3A\dismhost.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File opened for modification C:\Windows\Panther\UnattendGC\setupact.log C:\Windows\System32\oobe\UserOOBEBroker.exe N/A

Subvert Trust Controls: Mark-of-the-Web Bypass

defense_evasion
Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\BlueStacks10Installer_10.41.600.1015_native_26f6bacc8e6bdf0ff6cae3878c653f52_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe:Zone.Identifier C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File opened for modification C:\Users\Admin\Downloads\BlueStacksInstaller_4.280.4.4002_native_357c1005781de9013db3f088edfbd9df.exe:Zone.Identifier C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File opened for modification C:\Users\Admin\Downloads\nox_setup_v7.0.6.1_full_intl.exe:Zone.Identifier C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File opened for modification C:\Users\Admin\Downloads\LDPlayer9_ens_1001_ld.exe:Zone.Identifier C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Browser Information Discovery

discovery

Enumerates physical storage devices

Event Triggered Execution: Netsh Helper DLL

persistence privilege_escalation
Description Indicator Process Target
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh C:\Windows\SysWOW64\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh C:\Windows\SysWOW64\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh C:\Windows\SysWOW64\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\SYSTEM32\netsh.exe N/A

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language F:\LDPlayer\LDPlayer9\driverconfig.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\takeown.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\sc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files\BlueStacks_bgp64\HD-Adb.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\7zS4E145984\7zr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\7zr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\nox_setup_v7.0.6.1_full_intl.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\takeown.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\7zS4E145984\7zr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\7zSC7941148\HD-CheckCpu.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files\BlueStacks_bgp64\HD-Adb.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\7zS4E145984\7zr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\7zS4E145984\7zr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\7zr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\dism.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files\BlueStacks_bgp64\HD-Adb.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files\BlueStacks_bgp64\HD-Adb.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\7zS4E145984\7zr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\7zr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\HD-CheckCpu.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\icacls.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\7zr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\regsvr32.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\7zr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\ProgramData\BlueStacksServicesSetup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\sc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\regsvr32.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\takeown.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language F:\LDPlayer\LDPlayer9\dnplayer.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\7zr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\nox_setup_v7.0.6.1_full_intl.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\regsvr32.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language F:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\regsvr32.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\regsvr32.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\sc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\sc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\7zr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\7zr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\HD-CheckCpu.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\7zS4E145984\7zr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files\BlueStacks_bgp64\HD-Adb.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files\BlueStacks_bgp64\HD-Adb.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files\BlueStacks_bgp64\7zr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\BlueStacks10Installer_10.41.600.1015_native_26f6bacc8e6bdf0ff6cae3878c653f52_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\7zr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\HD-CheckCpu.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\icacls.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\icacls.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\7zS4E145984\HD-CheckCpu.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\7zr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\sc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\sc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\sc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files\BlueStacks_bgp64\HD-Adb.exe N/A

Checks SCSI registry key(s)

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000 C:\Windows\system32\taskmgr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A C:\Windows\system32\taskmgr.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName C:\Windows\system32\taskmgr.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\BlueStacks X\BlueStacks X.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ C:\Program Files (x86)\BlueStacks X\BlueStacks X.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files (x86)\BlueStacks X\BlueStacks X.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\BlueStacksInstaller.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString F:\LDPlayer\LDPlayer9\dnplayer.exe N/A
Key queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\BlueStacks X\BlueStacks X.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Users\Admin\AppData\Local\Temp\7zS4E145984\BlueStacksInstaller.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Users\Admin\AppData\Local\Temp\7zS4E145984\BlueStacksInstaller.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\BlueStacksInstaller.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 F:\LDPlayer\LDPlayer9\dnplayer.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Gathers network information

Description Indicator Process Target
N/A N/A C:\Windows\SYSTEM32\netstat.exe N/A
N/A N/A C:\Windows\SYSTEM32\ipconfig.exe N/A

Gathers system information

Description Indicator Process Target
N/A N/A C:\Windows\SYSTEM32\SystemInfo.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-2584844841-1405471295-1760131749-1000\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION F:\LDPlayer\LDPlayer9\dnplayer.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2584844841-1405471295-1760131749-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\ldnews.exe = "11001" F:\LDPlayer\LDPlayer9\dnplayer.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2584844841-1405471295-1760131749-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\dnplayer.exe = "11001" F:\LDPlayer\LDPlayer9\dnplayer.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133754695074716696" C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{3D9B8D2C-6B58-4D02-8CFC-64D06419AC88}\ = "IKeyboard" C:\Program Files\BlueStacks_bgp64\HD-ComRegistrar.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-A862-4DC9-8C89-BF4BA74A886A}\ = "IMediumFormat" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-8079-447A-A33E-47A69C7980DB}\NumMethods\ = "15" C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-1BCF-4218-9807-04E036CC70F1}\NumMethods C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{20191216-9CEE-493C-B6FC-64FFE759B3C9} C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{7C587818-2E5C-4E47-9566-8357A173ED09}\1.3\0 C:\Program Files\BlueStacks_bgp64\HD-ComRegistrar.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-1C58-440C-BB7B-3A1397284C7B}\ = "IStorageControllerChangedEvent" C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-C927-11E7-B788-33C248E71FC7}\ = "ICursorPositionChangedEvent" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-4974-A19C-4DC6-CC98C2269626}\ = "IGuestDirectory" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-E4B1-486A-8F2E-747AE346C3E9}\ = "IDirectory" C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-26F1-4EDB-8DD2-6BDDD0912368} C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{EBCB4312-BD9B-4116-AFEE-451AD824A023}\ = "IVirtualBox" C:\Program Files\BlueStacks_bgp64\HD-ComRegistrar.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C4903776-6141-448E-956B-56E2181DABC9} C:\Program Files\BlueStacks_bgp64\HD-ComRegistrar.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FC01A8B2-8DBD-4BAB-A9A5-67A580525480}\ProxyStubClsid32 C:\Program Files\BlueStacks_bgp64\HD-ComRegistrar.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-2D12-4D7C-BA6D-CE51D0D5B265} C:\Windows\SYSTEM32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-6989-4002-80CF-3607F377D40C} C:\Windows\SYSTEM32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-1A29-4A19-92CF-02285773F3B5}\ProxyStubClsid32 C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-07DA-41EC-AC4A-3DD99DB35594}\ProxyStubClsid32\ = "{20191216-1807-4249-5BA5-EA42D66AF0BF}" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-F4F4-4DD0-9D30-C89B873247EC}\ProxyStubClsid32\ = "{20191216-1807-4249-5BA5-EA42D66AF0BF}" C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-5637-472A-9736-72019EABD7DE} C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-4C1B-EDF7-FDF3-C1BE6827DC28}\ProxyStubClsid32\ = "{20191216-1807-4249-5BA5-EA42D66AF0BF}" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-4022-DC80-5535-6FB116815604}\NumMethods\ = "14" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{31F827E8-9DB2-4492-AAF4-66151076D50F}\NumMethods\ = "21" C:\Program Files\BlueStacks_bgp64\HD-ComRegistrar.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-799A-4489-86CD-FE8E45B2FF8E} C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-E254-4E5B-A1F2-011CF991C38D}\NumMethods\ = "82" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-C6EA-45B6-9D43-DC6F70CC9F02}\ProxyStubClsid32\ = "{20191216-1807-4249-5BA5-EA42D66AF0BF}" C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3F41678D-2113-4B35-B10E-6E12E3412C20}\NumMethods C:\Program Files\BlueStacks_bgp64\HD-ComRegistrar.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{106D9ABB-4041-41A4-9BEF-881BE740BE7C}\ProxyStubClsid32\ = "{BD20420B-DF5F-403C-A737-5DD16559D60A}" C:\Program Files\BlueStacks_bgp64\HD-ComRegistrar.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{605A33BE-20D1-465E-82CF-BAF89580DC6F}\ProxyStubClsid32\ = "{BD20420B-DF5F-403C-A737-5DD16559D60A}" C:\Program Files\BlueStacks_bgp64\HD-ComRegistrar.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-3534-4239-B2DE-8E1535D94C0B}\NumMethods C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-B4A4-44CE-85A8-127AC5EB59DC} C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-7FF8-4A84-BD34-0C651E118BB5}\ProxyStubClsid32 C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{6F3C9D93-CDFE-4CB7-8121-2C4D0CFB66B9} C:\Program Files\BlueStacks_bgp64\HD-ComRegistrar.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{67D8E799-3C61-4446-96D5-498505F1B662}\ProxyStubClsid32 C:\Program Files\BlueStacks_bgp64\HD-ComRegistrar.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E9877DC1-C2E7-4209-ABFD-852F2C082D4E}\ProxyStubClsid32\ = "{BD20420B-DF5F-403C-A737-5DD16559D60A}" C:\Program Files\BlueStacks_bgp64\HD-ComRegistrar.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-7BDC-11E9-8BC2-8FFDB8B19219}\ = "IRangedIntegerFormValue" C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-6989-4002-80CF-3607F377D40C}\ProxyStubClsid32\ = "{20191216-1807-4249-5BA5-EA42D66AF0BF}" C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-58D9-43AE-8B03-C1FD7088EF15}\ProxyStubClsid32\ = "{20191216-1807-4249-5BA5-EA42D66AF0BF}" C:\Windows\SYSTEM32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{20191216-47b9-4a1e-82b2-07ccd5323c3f} C:\Windows\SYSTEM32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-D8ED-44CF-85AC-C83A26C95A4D}\NumMethods C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\VirtualBox.VirtualBoxClient C:\Program Files\BlueStacks_bgp64\HD-ComRegistrar.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-4453-4F3E-C9B8-5686939C80B6}\ = "IGuestProcess" C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-B855-40B8-AB0C-44D3515B4528}\ = "INATNetworkCreationDeletionEvent" C:\Windows\SYSTEM32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-FD1C-411A-95C5-E9BB1414E632}\ProxyStubClsid32 C:\Windows\SYSTEM32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{82D149F0-EC40-4D5F-B8C0-76FA276557A9} C:\Program Files\BlueStacks_bgp64\HD-ComRegistrar.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{106D9ABB-4041-41A4-9BEF-881BE740BE7C}\NumMethods C:\Program Files\BlueStacks_bgp64\HD-ComRegistrar.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-0126-43E0-B05D-326E74ABB356}\ = "IMediumAttachment" C:\Windows\SYSTEM32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-4521-44CC-DF95-186E4D057C83}\ProxyStubClsid32 C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-E254-4E5B-A1F2-011CF991C38D}\NumMethods C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-DA7C-44C8-A7AC-9F173490446A}\ = "IAdditionsStateChangedEvent" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-42DA-C94B-8AEC-21968E08355D}\ProxyStubClsid32\ = "{20191216-1807-4249-5BA5-EA42D66AF0BF}" C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2E91C7BE-DE42-451D-A5C8-A29E84223354} C:\Program Files\BlueStacks_bgp64\HD-ComRegistrar.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{6935012D-374D-408E-A03E-536C0C57952C}\ = "IDnDModeChangedEvent" C:\Program Files\BlueStacks_bgp64\HD-ComRegistrar.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-9B2D-4377-BFE6-9702E881516B}\ = "ISnapshotRestoredEvent" C:\Windows\SYSTEM32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-DAD4-4496-85CF-3F76BCB3B5FA}\NumMethods C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{4960E888-FE75-46FD-9700-3A4768B4D1A7}\ProxyStubClsid32\ = "{BD20420B-DF5F-403C-A737-5DD16559D60A}" C:\Program Files\BlueStacks_bgp64\HD-ComRegistrar.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3D4A9A21-6BFB-42DE-A91C-E260F2A0EE13}\NumMethods C:\Program Files\BlueStacks_bgp64\HD-ComRegistrar.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-3EE4-11E9-B872-CB9447AAD965} C:\Windows\SYSTEM32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-2F05-4D28-855F-488F96BAD2B2}\ProxyStubClsid32 C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-7532-45E8-96DA-EB5986AE76E4}\NumMethods C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{ADAA6D9D-3A55-4FF4-A6AC-6654B227CA33}\ProxyStubClsid32 C:\Program Files\BlueStacks_bgp64\HD-ComRegistrar.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-EBF9-4D5C-7AEA-877BFC4256BA}\ = "IDHCPGroupConfig" C:\Windows\SYSTEM32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-4737-457B-99FC-BC52C851A44F} C:\Windows\SYSTEM32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-800A-40F8-87A6-170D02249A55} C:\Windows\SYSTEM32\regsvr32.exe N/A

NTFS ADS

Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\base64.txt:Zone.Identifier C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File opened for modification C:\Users\Admin\Downloads\BlueStacks10Installer_10.41.600.1015_native_26f6bacc8e6bdf0ff6cae3878c653f52_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe:Zone.Identifier C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File opened for modification C:\Users\Admin\Downloads\BlueStacksInstaller_4.280.4.4002_native_357c1005781de9013db3f088edfbd9df.exe:Zone.Identifier C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File opened for modification C:\Users\Admin\Downloads\nox_setup_v7.0.6.1_full_intl.exe:Zone.Identifier C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File opened for modification C:\Users\Admin\Downloads\LDPlayer9_ens_1001_ld.exe:Zone.Identifier C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Opens file in notepad (likely ransom note)

ransomware
Description Indicator Process Target
N/A N/A C:\Windows\system32\NOTEPAD.EXE N/A

Runs net.exe

Suspicious behavior: AddClipboardFormatListener

Description Indicator Process Target
N/A N/A C:\Program Files\BlueStacks_bgp64\HD-Agent.exe N/A
N/A N/A C:\Program Files\BlueStacks_bgp64\HD-Agent.exe N/A
N/A N/A C:\Program Files (x86)\BlueStacks X\BlueStacks X.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSC7941148\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSC7941148\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSC7941148\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSC7941148\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSC7941148\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSC7941148\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSC7941148\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\BlueStacksInstaller.exe N/A
N/A N/A C:\ProgramData\BlueStacksServicesSetup.exe N/A
N/A N/A C:\ProgramData\BlueStacksServicesSetup.exe N/A
N/A N/A C:\Windows\SysWOW64\tasklist.exe N/A
N/A N/A C:\Windows\SysWOW64\tasklist.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\BlueStacksInstaller.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS08BC8D4A\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS08BC8D4A\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS08BC8D4A\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS08BC8D4A\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS08BC8D4A\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS08BC8D4A\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS08BC8D4A\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS08BC8D4A\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS08BC8D4A\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS08BC8D4A\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS08BC8D4A\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS08BC8D4A\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS08BC8D4A\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS08BC8D4A\BlueStacksInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\Bootstrapper.exe N/A

Suspicious behavior: LoadsDriver

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\BlueStacks_bgp64\HD-Agent.exe N/A
N/A N/A C:\Program Files\BlueStacks_bgp64\HD-Agent.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\dnplayer.exe N/A
N/A N/A C:\Program Files\BlueStacks_bgp64\HD-Agent.exe N/A
N/A N/A C:\Program Files\BlueStacks_bgp64\HD-Agent.exe N/A
N/A N/A C:\Program Files\BlueStacks_bgp64\HD-Agent.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\HD-GLCheck.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\HD-GLCheck.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\HD-GLCheck.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\HD-GLCheck.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\HD-GLCheck.exe N/A
N/A N/A C:\Users\Admin\Downloads\nox_setup_v7.0.6.1_full_intl.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Nox\CheckGLVersion.exe N/A
N/A N/A C:\Users\Admin\Downloads\nox_setup_v7.0.6.1_full_intl.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Nox\CheckGLVersion.exe N/A
N/A N/A C:\Program Files\BlueStacks_bgp64\HD-Player.exe N/A
N/A N/A C:\Program Files\BlueStacks_bgp64\HD-Player.exe N/A
N/A N/A C:\Program Files\BlueStacks_bgp64\HD-Player.exe N/A
N/A N/A C:\Users\Admin\Downloads\LDPlayer9_ens_1001_ld.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
N/A N/A C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\driverconfig.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A
N/A N/A C:\Program Files\BlueStacks_bgp64\HD-Player.exe N/A
N/A N/A C:\Program Files\BlueStacks_bgp64\HD-Player.exe N/A
N/A N/A C:\Program Files\BlueStacks_bgp64\HD-Player.exe N/A
N/A N/A C:\Program Files\BlueStacks_bgp64\BlueStacks.exe N/A
N/A N/A C:\Program Files\BlueStacks_bgp64\HD-Player.exe N/A
N/A N/A C:\Program Files\BlueStacks_bgp64\HD-Player.exe N/A
N/A N/A C:\Program Files\BlueStacks_bgp64\HD-Player.exe N/A
N/A N/A C:\Program Files (x86)\BlueStacks X\BlueStacks X.exe N/A
N/A N/A C:\Program Files (x86)\BlueStacks X\BlueStacks X.exe N/A
N/A N/A C:\Program Files (x86)\BlueStacks X\BlueStacks X.exe N/A
N/A N/A C:\Program Files (x86)\BlueStacks X\BlueStacks X.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS4E145984\HD-GLCheck.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS4E145984\HD-GLCheck.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2824 wrote to memory of 3000 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 3000 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1276 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1276 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1276 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1276 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1276 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1276 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1276 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1276 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1276 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1276 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1276 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1276 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1276 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1276 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1276 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1276 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1276 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1276 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1276 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1276 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1276 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1276 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1276 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1276 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1276 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1276 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1276 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1276 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1276 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1276 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 4276 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 4276 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 2064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 2064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 2064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 2064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 2064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 2064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 2064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 2064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 2064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 2064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 2064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 2064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 2064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 2064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 2064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 2064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 2064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 2064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 2064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 2064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 2064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 2064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 2064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 2064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 2064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 2064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 2064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 2064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 2064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 2064 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe

Uses Task Scheduler COM API

persistence

Uses Volume Shadow Copy WMI provider

ransomware

Uses Volume Shadow Copy service COM API

ransomware

Processes

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://cdn.discordapp.com/attachments/1116815761172856942/1304050478023315547/base64.txt?ex=672dfb26&is=672ca9a6&hm=1a6ede6d27ace34a125827b49f6f5eba8a9f41040075a142dd4919160615e78f&

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffefa82cc40,0x7ffefa82cc4c,0x7ffefa82cc58

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1824,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=1816 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2084,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2104 /prefetch:3

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2172,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2352 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3064,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3084 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3088,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3228 /prefetch:1

C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4276,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4632 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4876,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4888 /prefetch:8

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --field-trial-handle=4252,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4484 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=5180,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5144 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5336,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5324 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5448,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5464 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=5444,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5612 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=3168,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3180 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=5944,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5924 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=5820,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5836 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5564,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5548 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5580,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5556 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=6000,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5056 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=4316,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5136 /prefetch:1

C:\Windows\system32\NOTEPAD.EXE

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Downloads\base64.txt

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --field-trial-handle=3268,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5404 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --field-trial-handle=3248,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3128 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --field-trial-handle=5380,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6044 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --field-trial-handle=5328,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6164 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --field-trial-handle=6328,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6284 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --field-trial-handle=5400,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6492 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --field-trial-handle=6624,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6656 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --field-trial-handle=6852,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6796 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --field-trial-handle=6932,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6776 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --field-trial-handle=6340,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6664 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --field-trial-handle=6820,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6332 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --field-trial-handle=6744,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6036 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --field-trial-handle=5348,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5784 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --field-trial-handle=6696,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6704 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --field-trial-handle=6436,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6412 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --field-trial-handle=6384,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6212 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --field-trial-handle=212,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6432 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --field-trial-handle=7256,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7268 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --field-trial-handle=7456,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6552 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --field-trial-handle=6148,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7568 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --field-trial-handle=7728,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7696 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --field-trial-handle=7868,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6460 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --field-trial-handle=7976,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7992 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --field-trial-handle=8116,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7860 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --field-trial-handle=8260,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=8268 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --field-trial-handle=6600,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6532 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --field-trial-handle=7536,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7500 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --field-trial-handle=1344,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6432 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --field-trial-handle=8516,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=8528 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --field-trial-handle=8532,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7432 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --field-trial-handle=6568,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6576 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --field-trial-handle=8508,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6040 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --field-trial-handle=6308,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7200 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --field-trial-handle=7496,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7176 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --field-trial-handle=8744,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=8748 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --field-trial-handle=6216,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5316 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --field-trial-handle=9156,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=8720 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --field-trial-handle=9332,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=9304 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --field-trial-handle=9432,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=9448 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --field-trial-handle=8708,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=9596 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --field-trial-handle=9576,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=9728 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --field-trial-handle=9756,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=9484 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --field-trial-handle=10008,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=10020 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --field-trial-handle=10164,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=10212 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --field-trial-handle=10348,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=9176 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --field-trial-handle=10460,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=10484 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --field-trial-handle=10464,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=10612 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --field-trial-handle=10764,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=10812 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=10788,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=10964 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=10784,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=11104 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=10796,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=11260 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=11256,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=11412 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=11572,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=11584 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --field-trial-handle=11248,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=11720 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --field-trial-handle=10776,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=11884 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=10364,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=10228 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --field-trial-handle=10284,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=10952 /prefetch:1

C:\Users\Admin\Downloads\BlueStacks10Installer_10.41.600.1015_native_26f6bacc8e6bdf0ff6cae3878c653f52_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe

"C:\Users\Admin\Downloads\BlueStacks10Installer_10.41.600.1015_native_26f6bacc8e6bdf0ff6cae3878c653f52_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe"

C:\Users\Admin\AppData\Local\Temp\7zSC7941148\BlueStacksInstaller.exe

"C:\Users\Admin\AppData\Local\Temp\7zSC7941148\BlueStacksInstaller.exe"

C:\Users\Admin\AppData\Local\Temp\7zSC7941148\HD-CheckCpu.exe

"C:\Users\Admin\AppData\Local\Temp\7zSC7941148\HD-CheckCpu.exe" --cmd checkHypervEnabled

C:\Users\Admin\AppData\Local\Temp\7zSC7941148\HD-CheckCpu.exe

"C:\Users\Admin\AppData\Local\Temp\7zSC7941148\HD-CheckCpu.exe" --cmd checkSSE4

C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe

"C:\Users\Admin\AppData\Local\BlueStacksSetup\BSX-Setup-5.21.600.1019_nxt.exe" -s

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\Program Files (x86)\BlueStacks X\green.vbs"

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c green.bat

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall delete rule name="BlueStacksWeb"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall delete rule name="Cloud Game"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall add rule name="BlueStacksWeb" dir=in action=allow program="C:\Program Files (x86)\BlueStacks X\BlueStacksWeb.exe"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall add rule name="Cloud Game" dir=in action=allow program="C:\Program Files (x86)\BlueStacks X\Cloud Game.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=8544,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7524 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --field-trial-handle=8476,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=8484 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --field-trial-handle=10836,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=10748 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7472,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=9264 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10856,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=9688 /prefetch:8

C:\Users\Admin\AppData\Local\BlueStacksSetup\BlueStacks10Installer_10.41.600.1015_native_26f6bacc8e6bdf0ff6cae3878c653f52_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe

"C:\Users\Admin\AppData\Local\BlueStacksSetup\BlueStacks10Installer_10.41.600.1015_native_26f6bacc8e6bdf0ff6cae3878c653f52_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe" -versionMachineID=b90caeb6-f1ca-481b-ae12-59d7ebccbbea -machineID=e2d5ecdc-0728-4931-9816-e23ca018797c -pddir="C:\ProgramData\BlueStacks_nxt" -defaultImageName=Pie64 -imageToLaunch=Pie64 -isSSE4Available=1 -appToLaunch=bsx -bsxVersion=10.41.600.1015 -country=GB -skipBinaryShortcuts -isWalletFeatureEnabled

C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\Bootstrapper.exe

"C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\Bootstrapper.exe" -versionMachineID=b90caeb6-f1ca-481b-ae12-59d7ebccbbea -machineID=e2d5ecdc-0728-4931-9816-e23ca018797c -pddir="C:\ProgramData\BlueStacks_nxt" -defaultImageName=Pie64 -imageToLaunch=Pie64 -isSSE4Available=1 -appToLaunch=bsx -bsxVersion=10.41.600.1015 -country=GB -skipBinaryShortcuts -isWalletFeatureEnabled

C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\BlueStacksInstaller.exe

"C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\BlueStacksInstaller.exe" -versionMachineID="b90caeb6-f1ca-481b-ae12-59d7ebccbbea" -machineID="e2d5ecdc-0728-4931-9816-e23ca018797c" -pddir="C:\ProgramData\BlueStacks_nxt" -defaultImageName="Pie64" -imageToLaunch="Pie64" -appToLaunch="bsx" -bsxVersion="10.41.600.1015" -country="GB" -skipBinaryShortcuts -isWalletFeatureEnabled -parentpath="C:\Users\Admin\AppData\Local\BlueStacksSetup\BlueStacks10Installer_10.41.600.1015_native_26f6bacc8e6bdf0ff6cae3878c653f52_MzsxNSwwOzUsMTsxNSw0OzE1LA==.exe" -md5=26f6bacc8e6bdf0ff6cae3878c653f52 -app64=

C:\ProgramData\BlueStacksServicesSetup.exe

"C:\ProgramData\BlueStacksServicesSetup.exe"

C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\7zr.exe

"C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\7zr.exe" x "C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\CommonInstallUtils.zip" -o"C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\" -aoa

C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\7zr.exe

"C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\7zr.exe" x "C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\QtRedistx64.zip" -o"C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\" -aoa

C:\Windows\SysWOW64\cmd.exe

cmd /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq BlueStacksServices.exe" | find "BlueStacksServices.exe"

C:\Windows\SysWOW64\tasklist.exe

tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq BlueStacksServices.exe"

C:\Windows\SysWOW64\find.exe

find "BlueStacksServices.exe"

C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe

"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca

C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe

"C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe" --hidden --initialLaunch

C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\HD-ForceGPU.exe

"C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\HD-ForceGPU.exe" 1 "C:\Program Files\BlueStacks_nxt"

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc

C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\HD-GLCheck.exe" 1 2

C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe

"C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\bluestacks-services" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1616 --field-trial-handle=1700,i,12774631895228373066,1066249156044643213,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2

C:\Windows\system32\cscript.exe

cscript.exe

C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\HD-GLCheck.exe" 4 2

C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe

"C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\bluestacks-services" --mojo-platform-channel-handle=1964 --field-trial-handle=1700,i,12774631895228373066,1066249156044643213,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8

C:\Windows\system32\cscript.exe

cscript.exe //Nologo C:\Users\Admin\AppData\Local\Programs\bluestacks-services\resources\regedit\vbs\regList.wsf A HKCU\SOFTWARE\BlueStacksServices

C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\HD-GLCheck.exe" 2 2

C:\Windows\system32\cscript.exe

cscript.exe //Nologo C:\Users\Admin\AppData\Local\Programs\bluestacks-services\resources\regedit\vbs\regList.wsf A HKCU\SOFTWARE\BlueStacksServices

C:\Windows\system32\cscript.exe

cscript.exe //Nologo C:\Users\Admin\AppData\Local\Programs\bluestacks-services\resources\regedit\vbs\regPutValue.wsf A

C:\Windows\System32\oobe\UserOOBEBroker.exe

C:\Windows\System32\oobe\UserOOBEBroker.exe -Embedding

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe -Embedding

C:\Windows\system32\cscript.exe

cscript.exe //Nologo C:\Users\Admin\AppData\Local\Programs\bluestacks-services\resources\regedit\vbs\regPutValue.wsf A

C:\Windows\system32\cscript.exe

cscript.exe //Nologo C:\Users\Admin\AppData\Local\Programs\bluestacks-services\resources\regedit\vbs\regList.wsf A "HKCU\SOFTWARE\BlueStacks X"

C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\HD-GLCheck.exe" 1 1

C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\HD-GLCheck.exe" 4 1

C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe

"C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\bluestacks-services" --app-user-model-id=com.bluestacks.services --app-path="C:\Users\Admin\AppData\Local\Programs\bluestacks-services\resources\app.asar" --enable-sandbox --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2616 --field-trial-handle=1700,i,12774631895228373066,1066249156044643213,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\cscript.exe

cscript.exe //Nologo C:\Users\Admin\AppData\Local\Programs\bluestacks-services\resources\regedit\vbs\regList.wsf A "HKCU\SOFTWARE\BlueStacks X"

C:\Windows\system32\cscript.exe

cscript.exe //Nologo C:\Users\Admin\AppData\Local\Programs\bluestacks-services\resources\regedit\vbs\regList.wsf A "HKCU\SOFTWARE\BlueStacks X"

C:\Windows\system32\cscript.exe

cscript.exe //Nologo C:\Users\Admin\AppData\Local\Programs\bluestacks-services\resources\regedit\vbs\regList.wsf A "HKCU\SOFTWARE\BlueStacks X"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\HD-GLCheck.exe" 2 1

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\cscript.exe

cscript.exe //Nologo C:\Users\Admin\AppData\Local\Programs\bluestacks-services\resources\regedit\vbs\regList.wsf A HKLM\SOFTWARE\BlueStacks_nxt

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cscript.exe

cscript.exe //Nologo C:\Users\Admin\AppData\Local\Programs\bluestacks-services\resources\regedit\vbs\regList.wsf A HKLM\SOFTWARE\BlueStacks_nxt

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\HD-CheckCpu.exe

"C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\HD-CheckCpu.exe" --cmd checkSSE4

C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\7zr.exe

"C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\7zr.exe" x "C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\PF.zip" -o"C:\Program Files\BlueStacks_nxt" -aoa

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\7zr.exe

"C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\7zr.exe" x "C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\QtRedistx64.zip" -o"C:\Program Files\BlueStacks_nxt" -aoa

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\system32\cscript.exe

cscript.exe //Nologo C:\Users\Admin\AppData\Local\Programs\bluestacks-services\resources\regedit\vbs\regList.wsf A "HKCU\SOFTWARE\BlueStacks X"

C:\Windows\system32\cscript.exe

cscript.exe //Nologo C:\Users\Admin\AppData\Local\Programs\bluestacks-services\resources\regedit\vbs\regList.wsf A HKLM\SOFTWARE\BlueStacks_nxt

C:\Windows\system32\cscript.exe

cscript.exe //Nologo C:\Users\Admin\AppData\Local\Programs\bluestacks-services\resources\regedit\vbs\regList.wsf A "HKCU\SOFTWARE\BlueStacks X"

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\cscript.exe

cscript.exe //Nologo C:\Users\Admin\AppData\Local\Programs\bluestacks-services\resources\regedit\vbs\regList.wsf A HKLM\SOFTWARE\BlueStacks_nxt

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\7zr.exe

"C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\7zr.exe" x "C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\PD.zip" -o"C:\ProgramData\BlueStacks_nxt" -aoa

C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\7zr.exe

"C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\7zr.exe" x "C:\ProgramData\Pie64_5.21.600.1019.exe" -o"C:\ProgramData\BlueStacks_nxt\Engine\Pie64" -aoa

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\\HD-GLCheck.exe" 2

C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\\HD-GLCheck.exe" 3

C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\\HD-GLCheck.exe" 1

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" advfirewall firewall delete rule name="BlueStacks Service"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" advfirewall firewall add rule name="BlueStacks Service" dir=in action=allow program="C:\Program Files\BlueStacks_nxt\HD-Player.exe" enable=yes

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" advfirewall firewall delete rule name="BlueStacksAppplayerWeb"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" advfirewall firewall add rule name="BlueStacksAppplayerWeb" dir=in action=allow program="C:\Program Files\BlueStacks_nxt\BlueStacksAppplayerWeb.exe" enable=yes

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\HD-CheckCpu.exe

"C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\HD-CheckCpu.exe" --cmd checkSSE3

C:\Windows\SYSTEM32\cmd.exe

"cmd.exe" /c "sc.exe delete BlueStacksDrv_nxt"

C:\Windows\system32\sc.exe

sc.exe delete BlueStacksDrv_nxt

C:\Windows\SYSTEM32\reg.exe

"reg.exe" EXPORT HKLM\Software\BlueStacks_nxt "C:\Users\Admin\AppData\Local\Temp\4nacax5l.qfy\RegHKLM.txt"

C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\7zr.exe

"C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\7zr.exe" a "C:\Users\Admin\AppData\Local\Temp\Installer.zip" -m0=LZMA:a=1 "C:\Users\Admin\AppData\Local\Temp\4nacax5l.qfy\*"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://cloud.bluestacks.com/bs3/help_articles?article=valid_cert_update&oem=nxt&locale=en-US&guid=e2d5ecdc-0728-4931-9816-e23ca018797c&image_name=Pie64

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x120,0x124,0x128,0xfc,0x12c,0x7ffed96c3cb8,0x7ffed96c3cc8,0x7ffed96c3cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1952,10311952147542016928,232366686009696036,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=2032 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1952,10311952147542016928,232366686009696036,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2276 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1952,10311952147542016928,232366686009696036,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1948 /prefetch:8

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,10311952147542016928,232366686009696036,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3404 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,10311952147542016928,232366686009696036,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3448 /prefetch:1

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1952,10311952147542016928,232366686009696036,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5728 /prefetch:8

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\BackgroundTransferHost.exe

"BackgroundTransferHost.exe" -ServerName:BackgroundTransferHost.13

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=5028,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2936 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=10920,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=10584 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=10492,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=10004 /prefetch:8

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Users\Admin\Downloads\BlueStacksInstaller_4.280.4.4002_native_357c1005781de9013db3f088edfbd9df.exe

"C:\Users\Admin\Downloads\BlueStacksInstaller_4.280.4.4002_native_357c1005781de9013db3f088edfbd9df.exe"

C:\Users\Admin\AppData\Local\Temp\7zS08BC8D4A\BlueStacksInstaller.exe

"C:\Users\Admin\AppData\Local\Temp\7zS08BC8D4A\BlueStacksInstaller.exe"

C:\Users\Admin\AppData\Local\Temp\7zS08BC8D4A\BlueStacksInstaller.exe

"C:\Users\Admin\AppData\Local\Temp\7zS08BC8D4A\BlueStacksInstaller.exe" "install" "BlueStacksInstaller_4.280.4.4002_native_357c1005781de9013db3f088edfbd9df.exe" "357c1005781de9013db3f088edfbd9df" "admin" "e2d5ecdc-0728-4931-9816-e23ca018797c" "01c8b259-b7ce-4afe-9d27-c4b2789a5f2a"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --field-trial-handle=10772,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=10824 /prefetch:1

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --field-trial-handle=9644,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=10252 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9636,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=10808 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9420,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=10564 /prefetch:8

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --field-trial-handle=7524,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2684 /prefetch:1

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --field-trial-handle=5540,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=9904 /prefetch:1

C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe

"C:\Users\Admin\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --user-data-dir="C:\Users\Admin\AppData\Roaming\bluestacks-services" --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2912 --field-trial-handle=1700,i,12774631895228373066,1066249156044643213,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9260,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=9572 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9516,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=9600 /prefetch:8

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --field-trial-handle=10604,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=9528 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --field-trial-handle=9408,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=11284 /prefetch:1

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --field-trial-handle=10952,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=9508 /prefetch:1

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=10268,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=11108 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=8608,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=8632 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=10960,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=9412 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=8700,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=8380 /prefetch:8

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-appcompat-clear --field-trial-handle=6608,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=11340 /prefetch:8

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x00000000000004D0 0x00000000000004EC

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Users\Admin\AppData\Local\BlueStacksSetup\BlueStacksInstaller_4.280.4.4002_native_357c1005781de9013db3f088edfbd9df.exe

"C:\Users\Admin\AppData\Local\BlueStacksSetup\BlueStacksInstaller_4.280.4.4002_native_357c1005781de9013db3f088edfbd9df.exe" -versionMachineID=01c8b259-b7ce-4afe-9d27-c4b2789a5f2a -machineID=e2d5ecdc-0728-4931-9816-e23ca018797c -pddir="C:\ProgramData\BlueStacks_bgp64"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\Bootstrapper.exe

"C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\Bootstrapper.exe" -versionMachineID=01c8b259-b7ce-4afe-9d27-c4b2789a5f2a -machineID=e2d5ecdc-0728-4931-9816-e23ca018797c -pddir="C:\ProgramData\BlueStacks_bgp64"

C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\BlueStacksInstaller.exe

"C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\BlueStacksInstaller.exe" -versionMachineID="01c8b259-b7ce-4afe-9d27-c4b2789a5f2a" -machineID="e2d5ecdc-0728-4931-9816-e23ca018797c" -pddir="C:\ProgramData\BlueStacks_bgp64" -md5=357c1005781de9013db3f088edfbd9df -parentpath=C:\Users\Admin\AppData\Local\BlueStacksSetup\BlueStacksInstaller_4.280.4.4002_native_357c1005781de9013db3f088edfbd9df.exe -app64=

C:\Windows\SYSTEM32\cmd.exe

"cmd" /c dir "C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\" /s

C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\7zr.exe

"C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\7zr.exe" x "C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\CommonInstallUtils.zip" -o"C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\" -aoa

C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\HD-ForceGPU.exe

"C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\HD-ForceGPU.exe" 1

C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\HD-GLCheck.exe" 1 1

C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\HD-GLCheck.exe" 1 2

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\HD-GLCheck.exe" 4 1

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\HD-CheckCpu.exe

"C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\HD-CheckCpu.exe"

C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\HD-GLCheck.exe" 1 1

C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\HD-GLCheck.exe" 4 1

C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\HD-GLCheck.exe" 1 2

C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\HD-GLCheck.exe" 4 2

C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\7zr.exe

"C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\7zr.exe" x "C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\PF.zip" -o"C:\Program Files\BlueStacks_bgp64" -aoa

C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\\HD-GLCheck.exe" 2

C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\\HD-GLCheck.exe" 3

C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\\HD-GLCheck.exe" 1

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\7zr.exe

"C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\7zr.exe" x "C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\PD.zip" -o"C:\ProgramData\BlueStacks_bgp64" -aoa

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --field-trial-handle=8580,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5204 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=11372,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=10752 /prefetch:8

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\7zr.exe

"C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\7zr.exe" x "C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\CefData.zip" -o"C:\ProgramData\BlueStacks_bgp64\CefData" -aoa

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" advfirewall firewall delete rule name="BlueStacks Service"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" advfirewall firewall add rule name="BlueStacks Service" dir=in action=allow program="C:\Program Files\BlueStacks_bgp64\HD-Player.exe" enable=yes

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2861/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2862/ User=\"Everyone"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2863/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2864/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2865/ User=\"Everyone"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2866/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2867/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2868/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2869/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2870/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2871/ User=\"Everyone"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2872/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2873/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2874/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2875/ User=\"Everyone"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2876/ User=\"Everyone"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --field-trial-handle=10860,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=9624 /prefetch:1

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2877/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2878/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2879/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2880/ User=\"Everyone"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2881/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2882/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2883/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2884/ User=\"Everyone"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2885/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2886/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2887/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2888/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2889/ User=\"Everyone"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2890/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2891/ User=\"Everyone"

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2892/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2893/ User=\"Everyone"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2894/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2895/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2896/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2897/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2898/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2899/ User=\"Everyone"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2900/ User=\"Everyone"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2901/ User=\"Everyone"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --field-trial-handle=12220,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=10804 /prefetch:1

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2902/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2903/ User=\"Everyone"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2904/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2905/ User=\"Everyone"

C:\Users\Admin\Downloads\nox_setup_v7.0.6.1_full_intl.exe

"C:\Users\Admin\Downloads\nox_setup_v7.0.6.1_full_intl.exe"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2906/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2907/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2908/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2909/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2910/ User=\"Everyone"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2911/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2912/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2913/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2914/ User=\"Everyone"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Users\Admin\AppData\Local\Nox\CheckGLVersion.exe

"C:\Users\Admin\AppData\Local\Nox\CheckGLVersion.exe "

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2915/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2916/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2917/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2918/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2919/ User=\"Everyone"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2920/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2921/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2922/ User=\"Everyone"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2923/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2924/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2925/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2926/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2927/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2928/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2929/ User=\"Everyone"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2930/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2931/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2932/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2933/ User=\"Everyone"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2934/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2935/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2936/ User=\"Everyone"

C:\Users\Admin\Downloads\nox_setup_v7.0.6.1_full_intl.exe

"C:\Users\Admin\Downloads\nox_setup_v7.0.6.1_full_intl.exe"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2937/ User=\"Everyone"

C:\Users\Admin\AppData\Local\Nox\CheckGLVersion.exe

"C:\Users\Admin\AppData\Local\Nox\CheckGLVersion.exe "

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2938/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2939/ User=\"Everyone"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2940/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2941/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2942/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2943/ User=\"Everyone"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2944/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2945/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2946/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2947/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2948/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2949/ User=\"Everyone"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2950/ User=\"Everyone"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2951/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2952/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2953/ User=\"Everyone"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2954/ User=\"Everyone"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --field-trial-handle=10264,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=11908 /prefetch:1

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2955/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2956/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2957/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2958/ User=\"Everyone"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2959/ User=\"Everyone"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2960/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2961/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2962/ User=\"Everyone"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2963/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2964/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2965/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2966/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2967/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2968/ User=\"Everyone"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2969/ User=\"Everyone"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" http add urlacl url=http://*:2970/ User=\"Everyone"

C:\Program Files\BlueStacks_bgp64\HD-ComRegistrar.exe

"C:\Program Files\BlueStacks_bgp64\HD-ComRegistrar.exe" -unreg

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --field-trial-handle=12244,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=9940 /prefetch:1

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --field-trial-handle=12268,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=10976 /prefetch:1

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Program Files\BlueStacks_bgp64\HD-ComRegistrar.exe

"C:\Program Files\BlueStacks_bgp64\HD-ComRegistrar.exe" -reg

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --field-trial-handle=11208,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=11184 /prefetch:1

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Program Files\BlueStacks_bgp64\HD-Player.exe

"C:\Program Files\BlueStacks_bgp64\HD-Player.exe" Android -h -sysPrep

C:\Program Files\BlueStacks_bgp64\BstkSVC.exe

"C:\Program Files\BlueStacks_bgp64\BstkSVC.exe" -Embedding

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Program Files\BlueStacks_bgp64\HD-Agent.exe

"C:\Program Files\BlueStacks_bgp64\HD-Agent.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Program Files\BlueStacks_bgp64\HD-LogCollector.exe

"C:\Program Files\BlueStacks_bgp64\HD-LogCollector.exe" -boot

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --field-trial-handle=11652,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=11628 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=11172,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=11176 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=11284,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=8568 /prefetch:8

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=11344,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=11200 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --field-trial-handle=5648,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=10328 /prefetch:1

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --field-trial-handle=11200,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4976 /prefetch:1

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Users\Admin\Downloads\LDPlayer9_ens_1001_ld.exe

"C:\Users\Admin\Downloads\LDPlayer9_ens_1001_ld.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --field-trial-handle=11196,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=9440 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --field-trial-handle=5164,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=11184 /prefetch:1

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\DllHost.exe

C:\Windows\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

F:\LDPlayer\LDPlayer9\LDPlayer.exe

"F:\LDPlayer\LDPlayer9\\LDPlayer.exe" -silence -downloader -openid=1001 -language=en -path="F:\LDPlayer\LDPlayer9\"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --field-trial-handle=12160,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=12112 /prefetch:1

F:\LDPlayer\LDPlayer9\dnrepairer.exe

"F:\LDPlayer\LDPlayer9\dnrepairer.exe" listener=787334

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\SysWOW64\net.exe

"net" start cryptsvc

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 start cryptsvc

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\SysWOW64\regsvr32.exe

"regsvr32" Softpub.dll /s

C:\Windows\SysWOW64\regsvr32.exe

"regsvr32" Wintrust.dll /s

C:\Windows\SysWOW64\regsvr32.exe

"regsvr32" Initpki.dll /s

C:\Windows\SysWOW64\regsvr32.exe

"C:\Windows\system32\regsvr32" Initpki.dll /s

C:\Windows\SysWOW64\regsvr32.exe

"regsvr32" dssenh.dll /s

C:\Windows\SysWOW64\regsvr32.exe

"regsvr32" rsaenh.dll /s

C:\Windows\SysWOW64\regsvr32.exe

"regsvr32" cryptdlg.dll /s

C:\Windows\SysWOW64\takeown.exe

"takeown" /f "F:\LDPlayer\LDPlayer9\vms" /r /d y

C:\Windows\SysWOW64\icacls.exe

"icacls" "F:\LDPlayer\LDPlayer9\vms" /grant everyone:F /t

C:\Windows\SysWOW64\takeown.exe

"takeown" /f "F:\LDPlayer\LDPlayer9\\system.vmdk"

C:\Windows\SysWOW64\icacls.exe

"icacls" "F:\LDPlayer\LDPlayer9\\system.vmdk" /grant everyone:F /t

C:\Windows\SysWOW64\dism.exe

C:\Windows\system32\dism.exe /Online /English /Get-Features

C:\Users\Admin\AppData\Local\Temp\34D08338-9562-478C-831A-61EE8C936B3A\dismhost.exe

C:\Users\Admin\AppData\Local\Temp\34D08338-9562-478C-831A-61EE8C936B3A\dismhost.exe {996DBA17-FFC7-4A8C-A9A4-0CDD6D7A7DB6}

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\SysWOW64\sc.exe

sc query HvHost

C:\Windows\SysWOW64\sc.exe

sc query vmms

C:\Windows\SysWOW64\sc.exe

sc query vmcompute

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Program Files\ldplayer9box\Ld9BoxSVC.exe

"C:\Program Files\ldplayer9box\Ld9BoxSVC.exe" /RegServer

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\SYSTEM32\regsvr32.exe

"regsvr32" "C:\Program Files\ldplayer9box\VBoxC.dll" /s

C:\Windows\SysWOW64\regsvr32.exe

"regsvr32" "C:\Program Files\ldplayer9box\x86\VBoxClient-x86.dll" /s

C:\Windows\SYSTEM32\regsvr32.exe

"regsvr32" "C:\Program Files\ldplayer9box\VBoxProxyStub.dll" /s

C:\Windows\SysWOW64\regsvr32.exe

"regsvr32" "C:\Program Files\ldplayer9box\x86\VBoxProxyStub-x86.dll" /s

C:\Windows\SysWOW64\sc.exe

"C:\Windows\system32\sc" create Ld9BoxSup binPath= "C:\Program Files\ldplayer9box\Ld9BoxSup.sys" type= kernel start= auto

C:\Windows\SysWOW64\sc.exe

"C:\Windows\system32\sc" start Ld9BoxSup

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

"powershell.exe" New-NetFirewallRule -DisplayName "Ld9BoxSup" -Direction Inbound -Program 'C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe' -RemoteAddress LocalSubnet -Action Allow

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

"powershell.exe" New-NetFirewallRule -DisplayName "Ld9BoxNat" -Direction Inbound -Program 'C:\Program Files\ldplayer9box\VBoxNetNAT.exe' -RemoteAddress LocalSubnet -Action Allow

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

"powershell.exe" New-NetFirewallRule -DisplayName "dnplayer" -Direction Inbound -Program 'F:\LDPlayer\LDPlayer9\dnplayer.exe' -RemoteAddress LocalSubnet -Action Allow

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

F:\LDPlayer\LDPlayer9\driverconfig.exe

"F:\LDPlayer\LDPlayer9\driverconfig.exe"

C:\Windows\SysWOW64\takeown.exe

"takeown" /f F:\LDPlayer\ldmutiplayer\ /r /d y

C:\Windows\SysWOW64\icacls.exe

"icacls" F:\LDPlayer\ldmutiplayer\ /grant everyone:F /t

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://discord.gg/4bUcwDd53d

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x120,0x124,0x128,0x100,0x12c,0x7ffed96c3cb8,0x7ffed96c3cc8,0x7ffed96c3cd8

F:\LDPlayer\LDPlayer9\dnplayer.exe

"F:\LDPlayer\LDPlayer9\\dnplayer.exe"

C:\Windows\SysWOW64\sc.exe

sc query HvHost

C:\Windows\SysWOW64\sc.exe

sc query vmms

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x00000000000004D0 0x00000000000004EC

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1916,10599268072776038191,11693252464204452238,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1952 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1916,10599268072776038191,11693252464204452238,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 /prefetch:3

C:\Windows\SysWOW64\sc.exe

sc query vmcompute

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1916,10599268072776038191,11693252464204452238,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2664 /prefetch:8

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,10599268072776038191,11693252464204452238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3612 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,10599268072776038191,11693252464204452238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3672 /prefetch:1

C:\Program Files\ldplayer9box\Ld9BoxSVC.exe

"C:\Program Files\ldplayer9box\Ld9BoxSVC.exe" -Embedding

C:\Program Files\ldplayer9box\vbox-img.exe

"C:\Program Files\ldplayer9box\vbox-img.exe" setuuid --filename "F:\LDPlayer\LDPlayer9\vms\..\system.vmdk" --uuid 20160302-bbbb-bbbb-54d7-bbbb00000000

C:\Program Files\ldplayer9box\vbox-img.exe

"C:\Program Files\ldplayer9box\vbox-img.exe" setuuid --filename "F:\LDPlayer\LDPlayer9\vms\leidian0\data.vmdk" --uuid 20160302-cccc-cccc-54d7-000000000000

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,10599268072776038191,11693252464204452238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4852 /prefetch:1

C:\Program Files\ldplayer9box\vbox-img.exe

"C:\Program Files\ldplayer9box\vbox-img.exe" setuuid --filename "F:\LDPlayer\LDPlayer9\vms\leidian0\sdcard.vmdk" --uuid 20160302-dddd-dddd-54d7-000000000000

C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe

"C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe" --comment leidian0 --startvm 20160302-aaaa-aaaa-54d7-000000000000 --vrde config

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe

"C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe" --comment leidian0 --startvm 20160302-aaaa-aaaa-54d7-000000000000 --vrde config

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe

"C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe" --comment leidian0 --startvm 20160302-aaaa-aaaa-54d7-000000000000 --vrde config

C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe

"C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe" --comment leidian0 --startvm 20160302-aaaa-aaaa-54d7-000000000000 --vrde config

C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe

"C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe" --comment leidian0 --startvm 20160302-aaaa-aaaa-54d7-000000000000 --vrde config

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1916,10599268072776038191,11693252464204452238,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=2460 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1916,10599268072776038191,11693252464204452238,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=2468 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.ldplayer.net/blog/how-to-enable-vt.html

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffed96c3cb8,0x7ffed96c3cc8,0x7ffed96c3cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,10599268072776038191,11693252464204452238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2620 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1916,10599268072776038191,11693252464204452238,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5316 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1916,10599268072776038191,11693252464204452238,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2620 /prefetch:8

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Program Files\BlueStacks_bgp64\HD-Quit.exe

"C:\Program Files\BlueStacks_bgp64\HD-Quit.exe"

C:\Program Files\BlueStacks_bgp64\BlueStacks.exe

"C:\Program Files\BlueStacks_bgp64\BlueStacks.exe" -force

C:\Program Files\BlueStacks_bgp64\HD-Player.exe

"C:\Program Files\BlueStacks_bgp64\HD-Player.exe" Android -h

C:\Program Files\BlueStacks_bgp64\HD-Agent.exe

"C:\Program Files\BlueStacks_bgp64\HD-Agent.exe"

C:\Program Files\BlueStacks_bgp64\HD-LogCollector.exe

"C:\Program Files\BlueStacks_bgp64\HD-LogCollector.exe" -boot

C:\Program Files\BlueStacks_bgp64\BlueStacks.exe

"C:\Program Files\BlueStacks_bgp64\BlueStacks.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --disable-smooth-scrolling --no-sandbox --service-pipe-token=C0276C91D56DDB38E65DF4781E76AD73 --lang=en-US --lang=en-US --log-file="C:\Program Files\BlueStacks_bgp64\debug.log" --log-severity=verbose --user-agent="Mozilla/5.0(Windows NT 6.2; Win64; x64) AppleWebKit/537.36(KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36Bluestacks/4.280.4.4002" --enable-system-flash --ppapi-flash-path="C:\ProgramData\BlueStacks_bgp64\CefData\pepflashplayer.dll" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553 --disable-accelerated-video-decode --disable-gpu-compositing --service-request-channel-token=C0276C91D56DDB38E65DF4781E76AD73 --renderer-client-id=2 --mojo-platform-channel-handle=2640 /prefetch:1

C:\Windows\SYSTEM32\SystemInfo.exe

"SystemInfo"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\wbem\WmiApSrv.exe

C:\Windows\system32\wbem\WmiApSrv.exe

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\SYSTEM32\reg.exe

"reg.exe" EXPORT HKLM\System\CurrentControlSet\services\BlueStacksDrv_bgp64 "C:\Users\Admin\AppData\Local\Temp\Bst_Logs_4l15ixrd.c2q\RegBstkDrv.txt"

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\SYSTEM32\nslookup.exe

"nslookup" www.google.com

C:\Windows\SYSTEM32\netstat.exe

"netstat" -aon

C:\Windows\SYSTEM32\net.exe

"net" statistics workstation

C:\Windows\system32\net1.exe

C:\Windows\system32\net1 statistics workstation

C:\Windows\SYSTEM32\ipconfig.exe

"ipconfig" /all

C:\Program Files\BlueStacks_bgp64\HD-Player.exe

"C:\Program Files\BlueStacks_bgp64\HD-Player.exe" Android -h

C:\Program Files\BlueStacks_bgp64\HD-Adb.exe

"C:\Program Files\BlueStacks_bgp64\HD-Adb.exe" "connect" "127.0.0.1:5555"

C:\Program Files\BlueStacks_bgp64\HD-Agent.exe

"C:\Program Files\BlueStacks_bgp64\HD-Agent.exe"

C:\Program Files\BlueStacks_bgp64\HD-LogCollector.exe

"C:\Program Files\BlueStacks_bgp64\HD-LogCollector.exe" -boot

C:\Program Files\BlueStacks_bgp64\HD-Adb.exe

adb -P 5037 fork-server server --reply-fd 588

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Program Files\BlueStacks_bgp64\HD-Adb.exe

"C:\Program Files\BlueStacks_bgp64\HD-Adb.exe" "-s" "127.0.0.1:5555" "shell" "bugreport"

C:\Program Files\BlueStacks_bgp64\HD-Adb.exe

"C:\Program Files\BlueStacks_bgp64\HD-Adb.exe" kill-server

C:\Program Files\BlueStacks_bgp64\HD-Adb.exe

"C:\Program Files\BlueStacks_bgp64\HD-Adb.exe" start-server

C:\Program Files\BlueStacks_bgp64\HD-Adb.exe

adb -P 5037 fork-server server --reply-fd 592

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Program Files\BlueStacks_bgp64\HD-Adb.exe

"C:\Program Files\BlueStacks_bgp64\HD-Adb.exe" "connect" "127.0.0.1:5555"

C:\Program Files\BlueStacks_bgp64\HD-Adb.exe

"C:\Program Files\BlueStacks_bgp64\HD-Adb.exe" "-s" "127.0.0.1:5555" "shell" "dumpstate"

C:\Program Files\BlueStacks_bgp64\HD-Adb.exe

"C:\Program Files\BlueStacks_bgp64\HD-Adb.exe" "-s" "127.0.0.1:5555" "pull" "/data/downloads/.config_user.db" "C:\Users\Admin\AppData\Local\Temp\Bst_Logs_4l15ixrd.c2q\.config_user.db"

C:\Program Files\BlueStacks_bgp64\HD-Adb.exe

"C:\Program Files\BlueStacks_bgp64\HD-Adb.exe" "-s" "127.0.0.1:5555" "pull" "/data/downloads/.config.db" "C:\Users\Admin\AppData\Local\Temp\Bst_Logs_4l15ixrd.c2q\.config.db"

C:\Program Files\BlueStacks_bgp64\HD-Adb.exe

"C:\Program Files\BlueStacks_bgp64\HD-Adb.exe" "-s" "127.0.0.1:5555" "pull" "/data/downloads/config.db" "C:\Users\Admin\AppData\Local\Temp\Bst_Logs_4l15ixrd.c2q\config.db"

C:\Program Files\BlueStacks_bgp64\HD-Quit.exe

"C:\Program Files\BlueStacks_bgp64\HD-Quit.exe" -ignoreAgent

C:\Windows\SYSTEM32\reg.exe

"reg.exe" EXPORT HKLM\Software\BlueStacks_bgp64 "C:\Users\Admin\AppData\Local\Temp\Bst_Logs_4l15ixrd.c2q\RegHKLM.txt"

C:\Windows\SYSTEM32\cmd.exe

"cmd" /c dir "C:\Program Files\BlueStacks_bgp64\" /s

C:\Windows\SYSTEM32\cmd.exe

"cmd" /c dir "C:\ProgramData\BlueStacks_bgp64\Engine\" /s

C:\Program Files\BlueStacks_bgp64\7zr.exe

"C:\Program Files\BlueStacks_bgp64\7zr.exe" a archive.zip -m0=LZMA:a=2 *

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --field-trial-handle=11568,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=9660 /prefetch:1

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --field-trial-handle=11684,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=9924 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --field-trial-handle=12284,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=11420 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10936,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=11156 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9944,i,12226547393812291437,13965651423266623789,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=10976 /prefetch:8

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\taskmgr.exe

"C:\Windows\system32\taskmgr.exe" /7

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Program Files (x86)\BlueStacks X\BlueStacks X.exe

"C:\Program Files (x86)\BlueStacks X\BlueStacks X.exe"

C:\Program Files (x86)\BlueStacks X\BlueStacksWeb.exe

BlueStacksWeb.exe --type=renderer --disable-speech-api --enable-threaded-compositing --enable-features=AllowContentInitiatedDataUrlNavigations,NetworkServiceInProcess,TracingServiceInProcess --disable-features=BackgroundFetch,ConsolidatedMovementXY,DnsOverHttpsUpgrade,InstalledApp,MojoVideoCapture,PictureInPicture,SmsReceiver,UseSkiaRenderer,WebPayments,WebUSB --lang=en --webengine-schemes=qrc:sLV --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=3 --mojo-platform-channel-handle=4048 /prefetch:1

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq BlueStacks X.exe""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "tasklist /FI "IMAGENAME eq HD-Player.exe""

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq BlueStacks X.exe"

C:\Windows\system32\tasklist.exe

tasklist /FI "IMAGENAME eq HD-Player.exe"

C:\Users\Admin\AppData\Local\BlueStacks X\BlueStacks-Installer_5.21.600.1019_amd64_native.exe

"C:\Users\Admin\AppData\Local\BlueStacks X\BlueStacks-Installer_5.21.600.1019_amd64_native.exe" -s -defaultImageName Pie64 -imageToLaunch Pie64 -skipBinaryShortcuts -appToLaunch=bsx

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Bootstrapper.exe

"C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Bootstrapper.exe" -s -defaultImageName Pie64 -imageToLaunch Pie64 -skipBinaryShortcuts -appToLaunch=bsx

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\BlueStacksInstaller.exe

"C:\Users\Admin\AppData\Local\Temp\7zS4E145984\BlueStacksInstaller.exe" -s -defaultImageName="Pie64" -imageToLaunch="Pie64" -skipBinaryShortcuts -appToLaunch="bsx" -parentpath="C:\Users\Admin\AppData\Local\BlueStacks X\BlueStacks-Installer_5.21.600.1019_amd64_native.exe"

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\7zr.exe

"C:\Users\Admin\AppData\Local\Temp\7zS4E145984\7zr.exe" x "C:\Users\Admin\AppData\Local\Temp\7zS4E145984\CommonInstallUtils.zip" -o"C:\Users\Admin\AppData\Local\Temp\7zS4E145984\" -aoa

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\7zr.exe

"C:\Users\Admin\AppData\Local\Temp\7zS4E145984\7zr.exe" x "C:\Users\Admin\AppData\Local\Temp\7zS4E145984\QtRedistx64.zip" -o"C:\Users\Admin\AppData\Local\Temp\7zS4E145984\" -aoa

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\HD-ForceGPU.exe

"C:\Users\Admin\AppData\Local\Temp\7zS4E145984\HD-ForceGPU.exe" 1 "C:\Program Files\BlueStacks_nxt"

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS4E145984\HD-GLCheck.exe" 1 2

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS4E145984\HD-GLCheck.exe" 4 2

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS4E145984\HD-GLCheck.exe" 2 2

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS4E145984\HD-GLCheck.exe" 1 1

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS4E145984\HD-GLCheck.exe" 4 1

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS4E145984\HD-GLCheck.exe" 2 1

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\HD-CheckCpu.exe

"C:\Users\Admin\AppData\Local\Temp\7zS4E145984\HD-CheckCpu.exe" --cmd checkSSE4

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\7zr.exe

"C:\Users\Admin\AppData\Local\Temp\7zS4E145984\7zr.exe" x "C:\Users\Admin\AppData\Local\Temp\7zS4E145984\PF.zip" -o"C:\Program Files\BlueStacks_nxt" -aoa

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\7zr.exe

"C:\Users\Admin\AppData\Local\Temp\7zS4E145984\7zr.exe" x "C:\Users\Admin\AppData\Local\Temp\7zS4E145984\QtRedistx64.zip" -o"C:\Program Files\BlueStacks_nxt" -aoa

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\7zr.exe

"C:\Users\Admin\AppData\Local\Temp\7zS4E145984\7zr.exe" x "C:\Users\Admin\AppData\Local\Temp\7zS4E145984\PD.zip" -o"C:\ProgramData\BlueStacks_nxt" -aoa

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\7zr.exe

"C:\Users\Admin\AppData\Local\Temp\7zS4E145984\7zr.exe" x "C:\Users\Admin\AppData\Local\BlueStacks X\Pie64_5.21.600.1019.exe" -o"C:\ProgramData\BlueStacks_nxt\Engine\Pie64" -aoa

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS4E145984\\HD-GLCheck.exe" 2

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS4E145984\\HD-GLCheck.exe" 3

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\HD-GLCheck.exe

"C:\Users\Admin\AppData\Local\Temp\7zS4E145984\\HD-GLCheck.exe" 1

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" advfirewall firewall delete rule name="BlueStacks Service"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" advfirewall firewall add rule name="BlueStacks Service" dir=in action=allow program="C:\Program Files\BlueStacks_nxt\HD-Player.exe" enable=yes

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" advfirewall firewall delete rule name="BlueStacksAppplayerWeb"

C:\Windows\SYSTEM32\netsh.exe

"netsh.exe" advfirewall firewall add rule name="BlueStacksAppplayerWeb" dir=in action=allow program="C:\Program Files\BlueStacks_nxt\BlueStacksAppplayerWeb.exe" enable=yes

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\HD-CheckCpu.exe

"C:\Users\Admin\AppData\Local\Temp\7zS4E145984\HD-CheckCpu.exe" --cmd checkSSE3

C:\Windows\SYSTEM32\cmd.exe

"cmd.exe" /c "sc.exe delete BlueStacksDrv_nxt"

C:\Windows\system32\sc.exe

sc.exe delete BlueStacksDrv_nxt

C:\Windows\SYSTEM32\reg.exe

"reg.exe" EXPORT HKLM\Software\BlueStacks_nxt "C:\Users\Admin\AppData\Local\Temp\t5ezxxg3.krd\RegHKLM.txt"

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\7zr.exe

"C:\Users\Admin\AppData\Local\Temp\7zS4E145984\7zr.exe" a "C:\Users\Admin\AppData\Local\Temp\Installer.zip" -m0=LZMA:a=1 "C:\Users\Admin\AppData\Local\Temp\t5ezxxg3.krd\*"

Network

Country Destination Domain Proto
US 8.8.8.8:53 cdn.discordapp.com udp
US 162.159.133.233:443 cdn.discordapp.com tcp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 10.178.250.142.in-addr.arpa udp
GB 142.250.180.4:443 www.google.com tcp
GB 142.250.180.4:443 www.google.com udp
GB 216.58.201.110:443 apis.google.com tcp
GB 142.250.187.202:443 ogads-pa.googleapis.com tcp
GB 142.250.187.202:443 ogads-pa.googleapis.com udp
US 8.8.8.8:53 202.187.250.142.in-addr.arpa udp
GB 172.217.16.238:443 consent.google.com tcp
US 216.239.34.157:443 tunnel.googlezip.net tcp
GB 142.250.187.202:443 content-autofill.googleapis.com tcp
GB 142.250.187.202:443 content-autofill.googleapis.com udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
GB 172.217.16.238:443 consent.google.com tcp
US 8.8.8.8:53 cdn-www.bluestacks.com udp
US 34.120.235.88:443 webapi-cloud.bluestacks.com tcp
DE 18.64.103.80:443 www.bluestacks.com tcp
DE 18.64.103.80:443 www.bluestacks.com tcp
US 151.101.193.229:443 cdn.jsdelivr.net tcp
GB 2.19.117.88:443 cdn-www.bluestacks.com tcp
GB 2.19.117.88:443 cdn-www.bluestacks.com tcp
GB 2.19.117.88:443 cdn-www.bluestacks.com udp
DE 3.162.79.32:443 cmp.inmobi.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
DE 3.162.79.32:443 cmp.inmobi.com tcp
DE 3.162.79.113:443 static.hotjar.com tcp
DE 18.66.2.109:443 script.hotjar.com tcp
DE 3.124.169.244:443 api.cmp.inmobi.com tcp
DE 3.124.169.244:443 api.cmp.inmobi.com tcp
GB 172.217.16.238:443 consent.google.com udp
US 34.160.86.181:443 cloud.bluestacks.com udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
US 216.239.34.157:443 tunnel.googlezip.net tcp
GB 172.217.16.238:443 consent.google.com udp
FR 51.83.2.171:443 www.base64decode.org tcp
US 172.67.203.223:443 cdn.base64decode.org tcp
US 172.67.203.223:443 cdn.base64decode.org tcp
US 172.67.203.223:443 cdn.base64decode.org tcp
US 104.17.160.237:443 cdn.fuseplatform.net tcp
US 216.239.32.36:443 region1.analytics.google.com tcp
GB 216.58.204.67:443 www.google.co.uk tcp
BE 66.102.1.154:443 stats.g.doubleclick.net tcp
DE 3.162.79.32:443 cmp.inmobi.com tcp
US 104.17.160.237:443 cdn.fuseplatform.net tcp
GB 142.250.200.2:443 securepubads.g.doubleclick.net tcp
DE 3.162.86.128:443 c.amazon-adsystem.com tcp
US 151.101.193.229:443 cdn.jsdelivr.net tcp
DE 3.162.79.32:443 cmp.inmobi.com tcp
DE 3.162.86.128:443 c.amazon-adsystem.com tcp
GB 142.250.200.2:443 securepubads.g.doubleclick.net tcp
GB 142.250.200.2:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 154.1.102.66.in-addr.arpa udp
US 8.8.8.8:53 128.86.162.3.in-addr.arpa udp
US 8.8.8.8:53 2.200.250.142.in-addr.arpa udp
DE 3.124.169.244:443 api.cmp.inmobi.com tcp
DE 3.124.169.244:443 api.cmp.inmobi.com tcp
US 8.8.8.8:53 btloader.com udp
US 104.22.75.216:443 btloader.com tcp
DE 18.64.119.104:443 config.aps.amazon-adsystem.com tcp
US 104.26.3.70:443 ad-delivery.net tcp
US 104.26.3.70:443 ad-delivery.net tcp
US 104.26.3.70:443 ad-delivery.net tcp
US 104.22.53.86:443 cdn.id5-sync.com tcp
US 8.8.8.8:53 70.3.26.104.in-addr.arpa udp
US 8.8.8.8:53 104.119.64.18.in-addr.arpa udp
US 8.8.8.8:53 86.53.22.104.in-addr.arpa udp
US 130.211.23.194:443 api.btloader.com tcp
US 130.211.23.194:443 api.btloader.com tcp
FR 51.83.2.171:443 www.base64decode.org tcp
US 172.67.203.223:443 cdn.base64decode.org udp
US 130.211.23.194:443 api.btloader.com tcp
FR 51.83.2.171:443 www.base64decode.org tcp
US 8.8.8.8:53 bidder.criteo.com udp
US 8.8.8.8:53 i.connectad.io udp
US 8.8.8.8:53 tlx.3lift.com udp
US 8.8.8.8:53 hbopenbid.pubmatic.com udp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 8.8.8.8:53 prg8.smartadserver.com udp
US 8.8.8.8:53 prg-apac.smartadserver.com udp
US 8.8.8.8:53 apex.go.sonobi.com udp
US 8.8.8.8:53 ssc.33across.com udp
DE 3.162.79.42:443 tags.crwdcntrl.net tcp
US 34.120.63.153:443 prebid.media.net tcp
US 8.8.8.8:53 onetag-sys.com udp
FR 163.5.194.31:443 prebid.a-mo.net tcp
US 23.192.21.192:443 a.teads.tv tcp
US 172.64.153.78:443 mp.4dex.io tcp
NL 178.250.1.56:443 bidder.criteo.com tcp
US 104.22.55.206:443 i.connectad.io tcp
US 172.64.151.101:443 ssum-sec.casalemedia.com tcp
NL 89.149.193.80:443 prg8.smartadserver.com tcp
NL 89.149.193.80:443 prg8.smartadserver.com tcp
NL 89.149.193.80:443 prg8.smartadserver.com tcp
DE 18.157.230.4:443 tlx.3lift.com tcp
NL 185.64.189.112:443 hbopenbid.pubmatic.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
FR 178.32.210.226:443 prg-apac.smartadserver.com tcp
FR 178.32.210.226:443 prg-apac.smartadserver.com tcp
DE 37.252.171.53:443 ib.adnxs.com tcp
US 35.186.253.211:443 rtb.openx.net tcp
US 79.127.243.248:443 ssc.33across.com tcp
US 79.127.243.248:443 ssc.33across.com tcp
US 79.127.243.248:443 ssc.33across.com tcp
US 79.127.243.248:443 ssc.33across.com tcp
US 79.127.243.248:443 ssc.33across.com tcp
NL 143.244.197.139:443 ads.servenobid.com tcp
DE 51.89.9.253:443 onetag-sys.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
DE 18.64.95.121:443 aax.amazon-adsystem.com tcp
IE 54.74.74.210:443 bcp.crwdcntrl.net tcp
US 8.8.8.8:53 4.230.157.18.in-addr.arpa udp
US 8.8.8.8:53 226.210.32.178.in-addr.arpa udp
US 8.8.8.8:53 80.193.149.89.in-addr.arpa udp
US 8.8.8.8:53 53.171.252.37.in-addr.arpa udp
US 8.8.8.8:53 139.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 253.9.89.51.in-addr.arpa udp
US 8.8.8.8:53 139.197.244.143.in-addr.arpa udp
US 8.8.8.8:53 8.1.166.69.in-addr.arpa udp
US 8.8.8.8:53 121.95.64.18.in-addr.arpa udp
US 8.8.8.8:53 248.243.127.79.in-addr.arpa udp
US 8.8.8.8:53 210.74.74.54.in-addr.arpa udp
IE 67.220.224.150:443 aax-eu.amazon-adsystem.com tcp
US 172.67.8.174:443 sync.connectad.io tcp
US 80.77.87.166:443 cs.admanmedia.com tcp
FR 51.83.2.171:443 www.base64decode.org tcp
US 35.244.159.8:443 u.openx.net tcp
US 80.77.87.166:443 cs.admanmedia.com tcp
FR 149.202.238.100:443 ssbsync.smartadserver.com tcp
IE 54.155.111.174:443 match.prod.bidr.io tcp
US 20.33.55.12:443 sync.inmobi.com tcp
GB 2.23.220.28:443 cs.media.net tcp
NL 89.207.16.137:443 amazon-tam-match.dotomi.com tcp
GB 2.23.204.244:443 ads.pubmatic.com tcp
US 216.239.32.36:443 region1.analytics.google.com udp
DE 3.160.39.83:443 s.ad.smaato.net tcp
DE 51.89.9.253:443 onetag-sys.com tcp
US 98.82.156.107:443 s.amazon-adsystem.com tcp
US 130.211.23.194:443 api.btloader.com udp
US 34.120.63.153:443 prebid.media.net udp
US 104.22.55.206:443 sync.connectad.io udp
US 35.186.253.211:443 rtb.openx.net udp
US 69.166.1.8:443 apex.go.sonobi.com tcp
DE 51.89.9.253:443 onetag-sys.com udp
US 172.64.151.101:443 ssum-sec.casalemedia.com udp
DE 51.89.9.253:443 onetag-sys.com udp
US 172.64.151.101:443 ssum-sec.casalemedia.com tcp
US 172.67.8.174:443 sync.connectad.io udp
US 80.77.87.166:443 cs.admanmedia.com tcp
US 35.244.159.8:443 u.openx.net udp
US 172.64.151.101:443 ssum-sec.casalemedia.com tcp
US 98.82.156.107:443 s.amazon-adsystem.com tcp
US 8.8.8.8:53 eb2.3lift.com udp
DE 37.252.171.53:443 ib.adnxs.com tcp
IE 67.220.224.150:443 aax-eu.amazon-adsystem.com tcp
US 8.8.8.8:53 match.adsrvr.org udp
US 76.223.111.18:443 eb2.3lift.com tcp
US 35.71.131.137:443 match.adsrvr.org tcp
US 172.64.151.101:443 dsum-sec.casalemedia.com udp
NL 185.184.8.90:443 creativecdn.com tcp
NL 198.47.127.19:443 image6.pubmatic.com tcp
NL 35.214.136.108:443 x.bidswitch.net tcp
IE 54.195.212.149:443 ap.lijit.com tcp
US 8.8.8.8:53 66.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 90.8.184.185.in-addr.arpa udp
US 8.8.8.8:53 19.127.47.198.in-addr.arpa udp
US 8.8.8.8:53 108.136.214.35.in-addr.arpa udp
US 8.8.8.8:53 149.212.195.54.in-addr.arpa udp
NL 35.214.168.80:443 trace-eu.mediago.io tcp
US 8.8.8.8:53 eus.rubiconproject.com udp
US 70.42.32.255:443 b1sync.zemanta.com tcp
US 23.192.21.141:443 eus.rubiconproject.com tcp
DK 37.157.2.233:443 cm.adform.net tcp
US 172.64.150.63:443 s.tribalfusion.com tcp
US 104.26.11.209:443 ad4m.at tcp
NL 35.214.136.108:443 x.bidswitch.net udp
US 35.186.253.211:443 rtb.openx.net tcp
IE 52.215.59.147:443 pr-bh.ybp.yahoo.com tcp
DE 91.228.74.166:443 cms.quantserve.com tcp
DK 37.157.4.28:443 c1.adform.net tcp
DK 37.157.4.28:443 c1.adform.net tcp
GB 216.58.213.1:443 485794ed863e659c03171ab00330800f.safeframe.googlesyndication.com tcp
GB 172.217.169.33:443 tpc.googlesyndication.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
NL 208.93.169.131:443 bh.contextweb.com tcp
CA 148.113.153.94:443 pixel.onaudience.com tcp
DK 77.243.51.121:443 uipglob.semasio.net tcp
US 172.67.40.173:443 mwzeom.zeotap.com tcp
GB 172.217.169.33:443 tpc.googlesyndication.com tcp
NL 34.91.62.186:443 um.simpli.fi tcp
GB 216.58.201.100:443 www.google.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 35.186.253.211:443 rtb.openx.net udp
GB 185.64.191.210:443 image2.pubmatic.com tcp
NL 198.47.127.205:443 simage2.pubmatic.com tcp
NL 198.47.127.205:443 simage2.pubmatic.com tcp
NL 69.173.156.148:443 token.rubiconproject.com tcp
NL 69.173.156.148:443 token.rubiconproject.com tcp
NL 69.173.156.148:443 token.rubiconproject.com tcp
GB 172.217.169.33:443 tpc.googlesyndication.com udp
NL 69.173.156.148:443 token.rubiconproject.com tcp
NL 69.173.156.148:443 token.rubiconproject.com tcp
NL 69.173.156.149:443 token.rubiconproject.com tcp
NL 69.173.156.149:443 token.rubiconproject.com tcp
NL 69.173.156.149:443 token.rubiconproject.com tcp
US 13.107.42.14:443 px.ads.linkedin.com tcp
NL 69.173.156.149:443 token.rubiconproject.com tcp
NL 69.173.156.149:443 token.rubiconproject.com tcp
NL 69.173.156.149:443 token.rubiconproject.com tcp
US 34.111.113.62:443 pixel.tapad.com tcp
DE 3.121.27.153:443 ps.eyeota.net tcp
IE 52.48.206.11:443 ce.lijit.com tcp
US 151.101.193.229:443 cdn.jsdelivr.net udp
DE 18.195.234.25:443 match.sharethrough.com tcp
US 18.214.221.59:443 sync.ipredictive.com tcp
US 172.64.146.152:443 capi.connatix.com tcp
US 8.8.8.8:53 28.4.157.37.in-addr.arpa udp
US 8.8.8.8:53 1.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 33.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 131.169.93.208.in-addr.arpa udp
US 8.8.8.8:53 1.80.190.35.in-addr.arpa udp
US 8.8.8.8:53 173.40.67.172.in-addr.arpa udp
US 8.8.8.8:53 100.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 121.51.243.77.in-addr.arpa udp
US 8.8.8.8:53 210.191.64.185.in-addr.arpa udp
US 8.8.8.8:53 186.62.91.34.in-addr.arpa udp
US 8.8.8.8:53 94.153.113.148.in-addr.arpa udp
US 8.8.8.8:53 148.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 205.127.47.198.in-addr.arpa udp
US 8.8.8.8:53 149.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 14.42.107.13.in-addr.arpa udp
US 8.8.8.8:53 62.113.111.34.in-addr.arpa udp
US 8.8.8.8:53 navvy.media.net udp
GB 142.250.200.2:443 securepubads.g.doubleclick.net udp
GB 142.250.187.226:443 googleads.g.doubleclick.net tcp
US 34.160.55.127:443 navvy.media.net tcp
IE 52.209.88.203:443 d.illuma-tech.com tcp
GB 2.19.117.36:443 qsearch-a.akamaihd.net tcp
GB 2.19.117.36:443 qsearch-a.akamaihd.net tcp
GB 2.23.220.28:443 warp.media.net tcp
GB 2.23.220.28:443 warp.media.net tcp
GB 2.23.220.28:443 warp.media.net tcp
GB 142.250.187.226:443 googleads.g.doubleclick.net tcp
US 23.192.21.192:443 a.teads.tv tcp
GB 2.23.221.112:443 t.teads.tv tcp
GB 2.23.221.112:443 t.teads.tv tcp
GB 2.23.221.112:443 t.teads.tv tcp
GB 2.23.221.112:443 t.teads.tv tcp
GB 18.172.89.42:443 live.primis.tech tcp
GB 172.217.169.33:443 tpc.googlesyndication.com udp
NL 178.250.1.3:443 static.criteo.net tcp
GB 2.17.149.102:443 sync.teads.tv tcp
GB 2.17.149.102:443 sync.teads.tv tcp
US 23.192.20.210:443 servedby.flashtalking.com tcp
GB 2.17.149.102:443 sync.teads.tv tcp
GB 2.17.149.102:443 sync.teads.tv tcp
GB 2.17.149.102:443 sync.teads.tv tcp
GB 2.17.149.102:443 sync.teads.tv tcp
DE 18.66.2.122:443 secure-gl.imrworldwide.com tcp
US 35.186.194.101:443 ad.sxp.smartclip.net tcp
DE 18.64.79.115:443 sync-gdpr.intentiq.com tcp
GB 2.23.204.119:443 ad.yieldlab.net tcp
GB 2.22.249.28:443 ajs-assets.ftstatic.com tcp
NL 46.228.164.13:443 d.turn.com tcp
US 35.186.194.101:443 ad.sxp.smartclip.net udp
IE 54.77.211.105:443 rakzdifdhtbfwt3hr7cvzpwqjme6w1730995939.darnuid.imrworldwide.com tcp
DE 18.64.119.103:443 agen-assets.ftstatic.com tcp
NL 178.250.1.9:443 dis.criteo.com tcp
US 35.244.174.68:443 idsync.rlcdn.com tcp
DE 52.29.6.179:443 aa.agkn.com tcp
IE 54.78.254.47:443 loadm.exelator.com tcp
NL 178.250.1.9:443 dis.criteo.com tcp
IE 54.78.254.47:443 loadm.exelator.com tcp
US 35.244.174.68:443 idsync.rlcdn.com tcp
DE 52.29.6.179:443 aa.agkn.com tcp
US 35.71.131.137:443 match.adsrvr.org tcp
IE 34.248.111.137:443 sync.crwdcntrl.net tcp
IE 34.248.111.137:443 sync.crwdcntrl.net tcp
FR 154.54.250.80:443 ads.stickyadstv.com tcp
IE 34.248.189.184:443 sync.springserve.com tcp
DE 18.64.119.34:443 js.ad-score.com tcp
US 151.101.130.49:443 sync-tm.everesttech.net tcp
IE 52.209.138.173:443 d9.flashtalking.com tcp
DE 18.64.79.9:443 cdn.flashtalking.com tcp
DE 18.64.79.9:443 cdn.flashtalking.com tcp
DE 18.64.79.9:443 cdn.flashtalking.com tcp
US 8.8.8.8:53 102.149.17.2.in-addr.arpa udp
US 8.8.8.8:53 210.20.192.23.in-addr.arpa udp
US 8.8.8.8:53 122.2.66.18.in-addr.arpa udp
NL 198.47.127.20:443 simage4.pubmatic.com tcp
GB 89.187.167.39:443 load77.exelator.com tcp
US 35.241.34.106:443 c.4dex.io tcp
DE 18.64.79.88:443 ib.3lift.com tcp
GB 18.169.60.99:443 ad-events.flashtalking.com tcp
US 130.211.115.4:443 data.ad-score.com tcp
IE 54.229.179.127:443 s.nmh.4dex.io tcp
US 8.8.8.8:53 99.60.169.18.in-addr.arpa udp
US 8.8.8.8:53 127.179.229.54.in-addr.arpa udp
US 8.8.8.8:53 4.115.211.130.in-addr.arpa udp
DE 18.64.79.88:443 ib.3lift.com udp
IE 54.229.179.127:443 s.nmh.4dex.io tcp
US 104.18.23.145:443 cadmus2.script.ac tcp
US 76.223.111.18:443 eb2.3lift.com tcp
US 76.223.111.18:443 eb2.3lift.com tcp
GB 142.250.187.226:443 googleads.g.doubleclick.net udp
GB 142.250.187.226:443 googleads.g.doubleclick.net udp
GB 87.248.114.12:443 ups.analytics.yahoo.com tcp
US 34.36.216.150:443 pixel-sync.sitescout.com tcp
GB 185.64.190.81:443 image4.pubmatic.com tcp
US 23.192.20.60:443 secure.flashtalking.com tcp
US 34.36.216.150:443 pixel-sync.sitescout.com udp
NL 178.250.1.11:443 gum.criteo.com tcp
NL 178.250.1.11:443 gum.criteo.com tcp
IE 54.229.179.127:443 s.nmh.4dex.io tcp
NL 185.89.210.20:443 secure.adnxs.com tcp
GB 172.217.169.34:443 googleads4.g.doubleclick.net tcp
GB 172.217.16.230:443 s0.2mdn.net tcp
US 204.79.197.237:443 c.bing.com tcp
US 3.211.176.3:443 sync.srv.stackadapt.com tcp
NL 46.228.164.11:443 ad.turn.com tcp
NL 64.158.223.137:443 triplelift-match.dotomi.com tcp
GB 172.217.169.34:443 googleads4.g.doubleclick.net udp
US 3.211.176.3:443 sync.srv.stackadapt.com tcp
US 216.239.32.36:443 region1.analytics.google.com tcp
BE 66.102.1.154:443 stats.g.doubleclick.net tcp
GB 216.58.204.67:443 www.google.co.uk tcp
US 34.120.235.88:443 webapi-cloud.bluestacks.com tcp
US 34.120.235.88:443 webapi-cloud.bluestacks.com udp
NL 82.145.213.8:443 t.adx.opera.com tcp
DE 80.82.210.217:443 dsp-cookie.adfarm1.adition.com tcp
IE 52.16.63.113:443 dsp.360yield.com tcp
NL 188.42.63.48:443 dsp-ap.eskimi.com tcp
US 34.102.163.6:443 ad.mrtnsvr.com tcp
US 34.102.163.6:443 ad.mrtnsvr.com tcp
IE 54.155.111.174:443 match.prod.bidr.io tcp
NL 193.0.160.130:443 p.rfihub.com tcp
NL 35.214.194.148:443 csync.loopme.me tcp
SE 13.50.192.155:443 d5p.de17a.com tcp
US 34.160.86.181:443 cloud.bluestacks.com udp
US 35.186.193.173:443 ipac.ctnsnet.com tcp
FR 51.178.195.216:443 rtb-csync.smartadserver.com tcp
SI 195.5.165.20:443 core.iprom.net tcp
US 216.239.32.36:443 region1.analytics.google.com udp
SG 35.186.154.107:443 cm-supply-web.gammaplatform.com tcp
NL 46.228.174.117:443 sync.targeting.unrulymedia.com tcp
SG 35.186.154.107:443 cm-supply-web.gammaplatform.com tcp
IE 52.215.155.11:443 cm.adgrx.com tcp
FR 141.94.242.226:443 green.erne.co tcp
GB 2.19.117.85:443 ak-build.bluestacks.com tcp
NL 46.228.174.117:443 sync.targeting.unrulymedia.com tcp
US 172.64.150.63:443 s.tribalfusion.com udp
FR 54.38.113.4:443 pixel-eu.onaudience.com tcp
US 8.8.8.8:53 4.113.38.54.in-addr.arpa udp
DE 23.88.86.2:443 matching.truffle.bid tcp
NL 46.228.174.117:443 sync.targeting.unrulymedia.com tcp
DE 23.88.86.2:443 matching.truffle.bid tcp
NL 46.228.174.117:443 sync.targeting.unrulymedia.com tcp
NL 134.122.57.34:443 match.adsby.bidtheatre.com tcp
NL 178.250.1.11:443 gum.criteo.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
GB 2.19.117.88:443 ak-build.bluestacks.com tcp
DE 162.55.120.196:443 matching.truffle.bid tcp
DE 162.55.120.196:443 matching.truffle.bid tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
N/A 127.0.0.1:50838 tcp
N/A 127.0.0.1:50845 tcp
GB 216.58.213.3:443 beacons.gcp.gvt2.com tcp
US 172.67.8.174:443 sync.connectad.io udp
GB 216.58.213.3:443 beacons.gcp.gvt2.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
DE 51.89.9.253:443 onetag-sys.com tcp
US 35.186.253.211:443 rtb.openx.net udp
US 34.120.63.153:443 prebid.media.net udp
NL 89.149.193.80:443 prg8.smartadserver.com tcp
FR 163.5.194.31:443 prebid.a-mo.net tcp
NL 178.250.1.56:443 bidder.criteo.com tcp
US 104.22.55.206:443 sync.connectad.io udp
US 79.127.243.248:443 ssc.33across.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
DE 37.252.173.215:443 ib.adnxs.com tcp
US 172.64.151.101:443 htlb.casalemedia.com udp
FR 178.32.210.226:443 prg-apac.smartadserver.com tcp
GB 216.58.213.3:443 beacons.gcp.gvt2.com tcp
GB 216.58.213.3:443 beacons.gcp.gvt2.com tcp
GB 216.58.213.3:443 beacons.gcp.gvt2.com tcp
CH 35.216.230.172:443 e2c44.gcp.gvt2.com tcp
GB 18.169.60.99:443 ad-events.flashtalking.com tcp
GB 172.217.169.35:443 beacons.gvt2.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 69.166.1.8:443 apex.go.sonobi.com tcp
IE 54.171.102.245:443 s.nmh.4dex.io tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 104.18.43.90:443 tcp
US 104.18.43.90:443 tcp
NL 46.228.164.11:443 ad.turn.com tcp
US 34.36.216.150:443 pixel-sync.sitescout.com udp
US 192.132.33.69:443 bttrack.com tcp
IE 18.202.187.23:443 sync.crwdcntrl.net tcp
IE 52.49.196.193:443 jsmhlcilrryg9r5eum5wbwpgbxde11730996014.darnuid.imrworldwide.com tcp
IE 52.49.196.193:443 jsmhlcilrryg9r5eum5wbwpgbxde11730996014.darnuid.imrworldwide.com tcp
IE 18.202.187.23:443 sync.crwdcntrl.net tcp
US 104.18.43.90:443 udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
GB 142.250.187.226:443 googleads.g.doubleclick.net udp
US 34.102.143.98:443 ox-rtb-europe-west2.openx.net tcp
DE 18.64.103.6:443 ts.amazon-adsystem.com tcp
IE 34.252.173.211:443 protected-by.clarium.io tcp
US 34.102.143.98:443 ox-rtb-europe-west2.openx.net tcp
GB 172.217.169.34:443 googleads4.g.doubleclick.net tcp
GB 172.217.16.230:443 s0.2mdn.net tcp
DE 18.64.103.6:443 ts.amazon-adsystem.com tcp
GB 172.217.169.33:443 tpc.googlesyndication.com udp
GB 172.217.169.34:443 googleads4.g.doubleclick.net udp
DE 37.252.173.215:443 ib.adnxs.com tcp
US 35.175.17.148:443 sync.srv.stackadapt.com tcp
IE 3.248.173.67:443 match.prod.bidr.io tcp
US 34.96.105.8:443 tr.blismedia.com tcp
NL 64.158.223.137:443 triplelift-match.dotomi.com tcp
US 34.98.64.218:443 sea-u.openx.net udp
ES 51.92.37.70:443 www.btd-zaz.tq-tungsten.com tcp
IE 3.253.181.25:443 sq-tungsten-ts-eu.amazon-adsystem.com tcp
US 130.211.115.4:443 data.ad-score.com tcp
N/A 127.0.0.1:60088 tcp
GB 216.58.213.3:443 beacons.gcp.gvt2.com udp
GB 216.58.201.100:443 www.google.com udp
US 34.96.124.47:443 wallet.now.gg tcp
GB 142.250.187.202:443 fcmregistrations.googleapis.com udp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
GB 2.18.66.43:443 tcp
GB 92.123.128.152:443 r.bing.com tcp
GB 92.123.128.152:443 r.bing.com tcp
GB 92.123.128.152:443 r.bing.com tcp
GB 92.123.128.152:443 r.bing.com tcp
GB 92.123.128.152:443 r.bing.com tcp
GB 92.123.128.152:443 r.bing.com tcp
US 8.8.8.8:53 wallet.now.gg udp
US 8.8.8.8:53 wallet.now.gg udp
US 34.96.124.47:443 wallet.now.gg tcp
US 34.96.124.47:443 wallet.now.gg tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
GB 23.213.251.133:443 cxcs.microsoft.net tcp
GB 92.123.128.186:443 www.bing.com tcp
GB 172.217.169.10:443 fcmregistrations.googleapis.com tcp
US 8.8.8.8:53 186.128.123.92.in-addr.arpa udp
US 8.8.8.8:53 10.169.217.172.in-addr.arpa udp
BE 64.233.167.188:5228 mtalk.google.com tcp
US 8.8.8.8:443 dns.google udp
US 34.96.124.47:443 wallet.now.gg udp
GB 142.250.179.251:443 storage.googleapis.com tcp
US 8.8.8.8:53 251.179.250.142.in-addr.arpa udp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 216.198.54.1:443 support.bluestacks.com tcp
US 216.198.54.1:443 support.bluestacks.com tcp
US 8.8.8.8:53 static.zdassets.com udp
US 8.8.8.8:53 cdn.jsdelivr.net udp
US 8.8.8.8:53 use.fontawesome.com udp
US 151.101.129.229:443 cdn.jsdelivr.net tcp
US 151.101.129.229:443 cdn.jsdelivr.net tcp
US 151.101.129.229:443 cdn.jsdelivr.net tcp
US 151.101.129.229:443 cdn.jsdelivr.net tcp
US 151.101.129.229:443 cdn.jsdelivr.net tcp
US 216.198.53.3:443 static.zdassets.com tcp
US 104.21.27.152:443 use.fontawesome.com tcp
US 216.198.53.3:443 static.zdassets.com tcp
US 151.101.129.229:443 cdn.jsdelivr.net tcp
US 8.8.8.8:53 229.129.101.151.in-addr.arpa udp
US 8.8.8.8:53 226.20.18.104.in-addr.arpa udp
US 8.8.8.8:53 bluestacks.zendesk.com udp
US 104.21.27.152:443 use.fontawesome.com tcp
US 216.198.54.1:443 bluestacks.zendesk.com tcp
US 104.21.27.152:443 use.fontawesome.com tcp
US 34.160.86.181:443 cloud.bluestacks.com udp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 8.8.8.8:53 bluestacks-zendesk-com.disqus.com udp
US 8.8.8.8:53 widget.kommunicate.io udp
US 199.232.192.134:443 bluestacks-zendesk-com.disqus.com tcp
DE 18.66.2.89:443 widget.kommunicate.io tcp
US 216.198.53.3:443 ekr.zdassets.com tcp
US 199.232.192.134:443 bluestacks-zendesk-com.disqus.com tcp
DE 18.66.2.89:443 widget.kommunicate.io tcp
US 216.239.32.36:443 region1.google-analytics.com tcp
US 151.101.0.134:443 disqus.com tcp
US 3.165.148.60:443 c.disquscdn.com tcp
US 8.8.8.8:53 60.148.165.3.in-addr.arpa udp
US 8.8.8.8:53 134.0.101.151.in-addr.arpa udp
US 216.198.54.1:443 bluestacks.zendesk.com tcp
DE 18.64.119.21:80 crt.rootg2.amazontrust.com tcp
DE 18.64.119.101:443 cdn.kommunicate.io tcp
US 216.239.32.36:443 region1.google-analytics.com udp
GB 2.18.66.43:443 tcp
GB 2.18.66.43:443 tcp
GB 92.123.128.191:443 www.bing.com tcp
US 8.8.8.8:53 www.bluestacks.com udp
US 8.8.8.8:53 cdn.jsdelivr.net udp
US 151.101.129.229:443 cdn.jsdelivr.net udp
GB 216.58.213.3:443 beacons.gcp.gvt2.com udp
GB 216.58.213.3:443 beacons.gcp.gvt2.com udp
GB 216.58.213.3:443 beacons.gcp.gvt2.com tcp
GB 216.58.213.3:443 beacons.gcp.gvt2.com tcp
US 8.8.8.8:53 cdn-www.bluestacks.com udp
US 216.239.32.36:443 region1.google-analytics.com udp
GB 142.250.187.195:443 www.google.co.uk udp
US 34.120.235.88:443 webapi-cloud.bluestacks.com udp
GB 2.19.117.88:443 cdn-www.bluestacks.com udp
US 34.160.86.181:443 cloud.bluestacks.com udp
US 34.120.235.88:443 webapi-cloud.bluestacks.com udp
US 34.160.86.181:443 cloud.bluestacks.com udp
DE 18.64.79.53:443 cdn3.bluestacks.com tcp
DE 152.199.19.74:80 sw.symcd.com tcp
US 8.8.8.8:53 sw.symcb.com udp
SE 192.229.221.95:80 sw.symcb.com tcp
US 8.8.8.8:53 74.19.199.152.in-addr.arpa udp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
DE 18.64.79.46:80 cdn3.bluestacks.com tcp
US 8.8.8.8:53 ak-build.bluestacks.com udp
GB 2.19.117.88:443 ak-build.bluestacks.com tcp
US 8.8.8.8:53 46.79.64.18.in-addr.arpa udp
GB 142.250.180.4:443 www.google.com udp
GB 142.250.187.202:443 fcmregistrations.googleapis.com udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
GB 142.250.187.202:443 fcmregistrations.googleapis.com udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
US 8.8.8.8:53 encrypted-tbn3.gstatic.com udp
GB 172.217.16.238:443 www.youtube.com udp
US 8.8.8.8:53 encrypted-tbn2.gstatic.com udp
US 8.8.8.8:53 encrypted-tbn1.gstatic.com udp
GB 216.58.212.206:443 encrypted-tbn2.gstatic.com tcp
GB 142.250.200.46:443 www.youtube.com tcp
GB 142.250.200.46:443 www.youtube.com tcp
GB 142.250.200.46:443 www.youtube.com tcp
GB 142.250.200.46:443 www.youtube.com tcp
GB 142.250.200.46:443 www.youtube.com tcp
GB 142.250.200.46:443 www.youtube.com tcp
GB 142.250.180.14:443 www.youtube.com tcp
GB 172.217.16.238:443 encrypted-tbn1.gstatic.com tcp
GB 142.250.180.4:443 www.google.com udp
GB 142.250.180.4:443 www.google.com udp
GB 142.250.179.246:443 i.ytimg.com tcp
GB 142.250.187.226:443 ep1.adtrafficquality.google tcp
GB 142.250.179.230:443 static.doubleclick.net tcp
GB 216.58.213.10:443 jnn-pa.googleapis.com tcp
GB 216.58.213.10:443 jnn-pa.googleapis.com udp
GB 172.217.16.238:443 encrypted-tbn1.gstatic.com tcp
GB 172.217.16.238:443 encrypted-tbn1.gstatic.com tcp
GB 216.58.213.3:443 beacons.gcp.gvt2.com udp
GB 172.217.16.238:443 encrypted-tbn1.gstatic.com udp
GB 142.250.200.46:443 www.youtube.com udp
GB 142.250.179.246:443 i.ytimg.com tcp
US 216.239.34.157:443 tunnel.googlezip.net tcp
US 104.18.53.109:443 www.bignox.com tcp
US 104.18.53.109:443 www.bignox.com tcp
US 216.239.34.157:443 tunnel.googlezip.net tcp
US 104.18.48.185:443 res02.noxgroup.com tcp
US 104.18.48.185:443 res02.noxgroup.com tcp
US 104.18.48.185:443 res02.noxgroup.com tcp
US 104.18.48.185:443 res02.noxgroup.com tcp
DE 18.64.79.64:443 res11.bignox.com tcp
US 104.18.48.185:443 res02.noxgroup.com tcp
DE 18.64.79.64:443 res11.bignox.com tcp
US 104.18.48.185:443 res06.noxgroup.com tcp
HK 103.210.21.251:443 bi.noxgroup.com tcp
HK 103.210.21.251:443 bi.noxgroup.com tcp
US 104.18.53.109:443 www.bignox.com udp
US 104.18.54.68:443 res06.noxgroup.com tcp
US 104.18.54.68:443 res06.noxgroup.com tcp
US 104.18.54.68:443 res06.noxgroup.com tcp
US 104.18.54.68:443 res06.noxgroup.com tcp
US 104.18.54.68:443 res06.noxgroup.com tcp
US 104.18.54.68:443 res06.noxgroup.com tcp
US 104.18.48.154:443 www.bignox.com tcp
US 8.8.8.8:53 185.48.18.104.in-addr.arpa udp
US 8.8.8.8:53 64.79.64.18.in-addr.arpa udp
US 8.8.8.8:53 8.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 68.54.18.104.in-addr.arpa udp
US 8.8.8.8:53 251.21.210.103.in-addr.arpa udp
US 8.8.8.8:53 154.48.18.104.in-addr.arpa udp
US 104.18.48.154:443 www.bignox.com udp
GB 216.58.201.110:443 chrome.google.com tcp
GB 172.217.16.238:443 encrypted-tbn1.gstatic.com udp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
DE 18.64.103.7:443 www.bluestacks.com tcp
US 8.8.8.8:53 webapi-cloud.bluestacks.com udp
GB 142.250.187.195:443 www.google.co.uk udp
US 216.239.34.36:443 region1.analytics.google.com udp
US 34.120.235.88:443 webapi-cloud.bluestacks.com udp
GB 2.19.117.88:443 cdn-www.bluestacks.com udp
US 34.160.86.181:443 cloud.bluestacks.com udp
DE 3.162.79.89:443 cmp.inmobi.com tcp
DE 3.162.79.124:443 static.hotjar.com tcp
US 8.8.8.8:53 36.34.239.216.in-addr.arpa udp
US 8.8.8.8:53 89.79.162.3.in-addr.arpa udp
US 34.120.235.88:443 webapi-cloud.bluestacks.com udp
US 8.8.8.8:53 124.79.162.3.in-addr.arpa udp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
GB 216.58.213.3:443 beacons.gcp.gvt2.com udp
GB 216.58.213.3:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 tlx.3lift.com udp
US 8.8.8.8:53 prebid.a-mo.net udp
US 8.8.8.8:53 htlb.casalemedia.com udp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
US 35.186.253.211:443 rtb.openx.net udp
DE 51.89.9.253:443 onetag-sys.com tcp
US 8.8.8.8:53 ssc.33across.com udp
US 8.8.8.8:53 i.connectad.io udp
US 8.8.8.8:53 ads.servenobid.com udp
US 8.8.8.8:53 a.teads.tv udp
US 8.8.8.8:53 prg8.smartadserver.com udp
US 8.8.8.8:53 prebid.media.net udp
US 8.8.8.8:53 ib.adnxs.com udp
NL 178.250.1.56:443 bidder.criteo.com tcp
US 8.8.8.8:53 mp.4dex.io udp
US 69.166.1.8:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 fastlane.rubiconproject.com udp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 8.8.8.8:53 prg-apac.smartadserver.com udp
US 104.18.34.178:443 mp.4dex.io tcp
US 79.127.243.241:443 ssc.33across.com tcp
US 23.192.21.192:443 a.teads.tv tcp
NL 81.17.55.113:443 prg-apac.smartadserver.com tcp
US 104.22.54.206:443 i.connectad.io udp
NL 185.89.210.244:443 ib.adnxs.com tcp
US 34.120.63.153:443 prebid.media.net udp
NL 143.244.197.139:443 ads.servenobid.com tcp
US 35.186.253.211:443 rtb.openx.net tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
DE 51.89.9.253:443 onetag-sys.com tcp
NL 81.17.55.113:443 prg-apac.smartadserver.com tcp
US 104.18.36.155:443 htlb.casalemedia.com udp
DE 18.64.95.121:443 aax.amazon-adsystem.com tcp
DE 3.78.168.176:443 tlx.3lift.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
FR 163.5.194.36:443 prebid.a-mo.net tcp
FR 217.182.178.225:443 prg-apac.smartadserver.com tcp
DE 51.89.9.253:443 onetag-sys.com tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
FR 163.5.194.36:443 prebid.a-mo.net tcp
US 8.8.8.8:53 225.178.182.217.in-addr.arpa udp
US 8.8.8.8:53 176.168.78.3.in-addr.arpa udp
US 35.186.253.211:443 rtb.openx.net udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 34.102.143.98:443 ox-rtb-europe-west2.openx.net tcp
GB 142.250.178.2:443 googleads.g.doubleclick.net udp
GB 142.250.178.2:443 googleads.g.doubleclick.net udp
US 34.98.64.218:443 us-u.openx.net udp
NL 69.173.156.148:443 token.rubiconproject.com tcp
GB 216.58.212.194:443 cm.g.doubleclick.net udp
US 54.152.32.181:443 fw.adsafeprotected.com tcp
GB 172.217.16.230:443 s0.2mdn.net udp
US 8.8.8.8:53 194.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 181.32.152.54.in-addr.arpa udp
GB 172.217.16.230:443 s0.2mdn.net udp
US 8.8.8.8:53 googleads4.g.doubleclick.net udp
IE 52.94.220.185:443 aax-eu.amazon-adsystem.com tcp
GB 216.58.212.194:443 googleads4.g.doubleclick.net udp
NL 46.228.164.11:443 ad.turn.com tcp
US 8.8.8.8:53 sync.ipredictive.com udp
NL 34.91.62.186:443 um.simpli.fi tcp
US 8.8.8.8:53 pixel-sync.sitescout.com udp
GB 172.217.16.230:443 s0.2mdn.net tcp
GB 172.217.16.230:443 s0.2mdn.net udp
GB 142.250.178.2:443 googleads.g.doubleclick.net udp
NL 46.228.164.11:443 ad.turn.com tcp
NL 34.91.62.186:443 um.simpli.fi tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
GB 172.217.16.230:443 s0.2mdn.net tcp
US 104.18.43.90:443 udp
US 8.8.8.8:53 m.media-amazon.com udp
US 8.8.8.8:53 ts.amazon-adsystem.com udp
US 8.8.8.8:53 protected-by.clarium.io udp
US 8.8.8.8:53 a.tribalfusion.com udp
US 172.64.150.63:443 a.tribalfusion.com udp
GB 216.58.212.194:443 googleads4.g.doubleclick.net udp
US 8.8.8.8:53 static.adsafeprotected.com udp
US 8.8.8.8:53 185.220.94.52.in-addr.arpa udp
US 44.239.36.52:443 dt.adsafeprotected.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 44.239.36.52:443 dt.adsafeprotected.com tcp
US 44.239.36.52:443 dt.adsafeprotected.com tcp
US 18.214.221.59:443 sync.ipredictive.com tcp
US 34.36.216.150:443 pixel-sync.sitescout.com udp
NL 188.42.63.48:443 dsp-ap.eskimi.com tcp
GB 172.217.169.33:443 tpc.googlesyndication.com udp
GB 216.58.212.194:443 googleads4.g.doubleclick.net udp
DE 18.64.95.121:443 aax.amazon-adsystem.com tcp
GB 18.172.89.36:443 static.adsafeprotected.com tcp
GB 18.172.89.36:443 static.adsafeprotected.com tcp
GB 18.172.89.36:443 static.adsafeprotected.com tcp
US 8.8.8.8:53 36.89.172.18.in-addr.arpa udp
GB 2.19.117.31:443 m.media-amazon.com tcp
GB 2.19.117.31:443 m.media-amazon.com tcp
GB 2.19.117.31:443 m.media-amazon.com tcp
IE 34.243.84.31:443 protected-by.clarium.io tcp
DE 18.64.103.6:443 ts.amazon-adsystem.com tcp
DE 18.64.103.6:443 ts.amazon-adsystem.com tcp
US 8.8.8.8:53 aes.eu-west.3px.axp.amazon-adsystem.com udp
US 8.8.8.8:53 31.84.243.34.in-addr.arpa udp
IE 52.18.108.50:443 aes.eu-west.3px.axp.amazon-adsystem.com tcp
GB 2.19.117.31:443 m.media-amazon.com udp
IE 52.94.220.185:443 aax-eu.amazon-adsystem.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
ES 51.92.114.109:443 www.btd-zaz.tq-tungsten.com tcp
IE 3.251.217.202:443 sq-tungsten-ts-eu.amazon-adsystem.com tcp
GB 142.250.187.194:443 ade.googlesyndication.com tcp
DE 51.89.9.253:443 onetag-sys.com udp
DE 51.89.9.253:443 onetag-sys.com tcp
NL 178.250.1.56:443 bidder.criteo.com tcp
US 79.127.243.241:443 ssc.33across.com tcp
NL 143.244.197.139:443 ads.servenobid.com tcp
FR 217.182.178.225:443 prg-apac.smartadserver.com tcp
DE 3.78.168.176:443 tlx.3lift.com tcp
US 35.186.253.211:443 rtb.openx.net udp
US 23.192.21.192:443 a.teads.tv tcp
US 104.18.34.178:443 mp.4dex.io tcp
FR 163.5.194.36:443 prebid.a-mo.net tcp
NL 185.89.210.244:443 ib.adnxs.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
US 35.186.253.211:443 rtb.openx.net tcp
DE 51.89.9.253:443 onetag-sys.com tcp
NL 178.250.1.56:443 bidder.criteo.com tcp
US 79.127.243.241:443 ssc.33across.com tcp
NL 143.244.197.139:443 ads.servenobid.com tcp
FR 217.182.178.225:443 prg-apac.smartadserver.com tcp
DE 3.78.168.176:443 tlx.3lift.com tcp
US 23.192.21.192:443 a.teads.tv tcp
US 104.18.34.178:443 mp.4dex.io tcp
FR 163.5.194.36:443 prebid.a-mo.net tcp
NL 185.89.210.244:443 ib.adnxs.com tcp
NL 81.17.55.113:443 prg-apac.smartadserver.com tcp
US 79.127.243.241:443 ssc.33across.com tcp
US 35.241.34.106:443 c.4dex.io udp
GB 142.250.178.2:443 googleads.g.doubleclick.net udp
US 13.248.245.213:443 eb2.3lift.com tcp
US 13.248.245.213:443 eb2.3lift.com tcp
US 8.8.8.8:53 image6.pubmatic.com udp
US 8.8.8.8:53 sync.teads.tv udp
GB 185.64.190.78:443 image6.pubmatic.com tcp
GB 2.17.149.102:443 sync.teads.tv tcp
US 35.241.34.106:443 c.4dex.io tcp
US 18.214.221.59:443 sync.ipredictive.com tcp
NL 46.228.164.11:443 ad.turn.com tcp
US 8.8.8.8:53 x.bidswitch.net udp
US 8.8.8.8:53 s.amazon-adsystem.com udp
US 8.8.8.8:53 b1sync.zemanta.com udp
US 8.8.8.8:53 sync.mathtag.com udp
US 8.8.8.8:53 pm.w55c.net udp
US 98.82.158.241:443 s.amazon-adsystem.com tcp
US 216.200.232.253:443 sync.mathtag.com tcp
US 64.74.236.159:443 b1sync.zemanta.com tcp
IE 34.249.168.140:443 pm.w55c.net tcp
US 3.217.190.136:443 sync.srv.stackadapt.com tcp
IE 3.248.173.67:443 match.prod.bidr.io tcp
NL 35.214.136.108:443 x.bidswitch.net tcp
GB 2.19.117.31:443 m.media-amazon.com udp
DE 3.162.87.40:443 images-eu.ssl-images-amazon.com tcp
NL 35.214.136.108:443 x.bidswitch.net udp
US 34.111.113.62:443 pixel.tapad.com udp
NL 198.47.127.205:443 image2.pubmatic.com tcp
US 8.8.8.8:53 159.236.74.64.in-addr.arpa udp
US 8.8.8.8:53 241.158.82.98.in-addr.arpa udp
US 8.8.8.8:53 136.190.217.3.in-addr.arpa udp
US 8.8.8.8:53 40.87.162.3.in-addr.arpa udp
US 34.111.113.62:443 pixel.tapad.com tcp
US 3.213.208.233:443 cm.smadex.com tcp
IE 3.251.217.202:443 sq-tungsten-ts-eu.amazon-adsystem.com tcp
US 3.213.208.233:443 cm.smadex.com tcp
US 8.8.8.8:53 api-new.bignox.com udp
CN 47.94.233.176:443 api-new.bignox.com tcp
CN 47.94.233.176:443 api-new.bignox.com tcp
IE 52.94.220.185:443 aax-eu.amazon-adsystem.com tcp
CN 47.94.233.176:443 api-new.bignox.com tcp
CN 47.94.233.176:443 api-new.bignox.com tcp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
GB 216.58.213.3:443 beacons.gcp.gvt2.com udp
DE 51.89.9.253:443 onetag-sys.com tcp
NL 143.244.197.139:443 ads.servenobid.com tcp
US 104.18.34.178:443 mp.4dex.io tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
US 79.127.243.241:443 ssc.33across.com tcp
FR 163.5.194.36:443 prebid.a-mo.net tcp
DE 3.78.168.176:443 tlx.3lift.com tcp
US 23.192.21.192:443 a.teads.tv tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
FR 217.182.178.225:443 prg-apac.smartadserver.com tcp
NL 178.250.1.56:443 bidder.criteo.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
DE 18.64.95.121:443 aax.amazon-adsystem.com tcp
NL 81.17.55.113:443 prg-apac.smartadserver.com tcp
IE 52.94.220.185:443 aax-eu.amazon-adsystem.com tcp
DE 18.64.103.6:443 ts.amazon-adsystem.com tcp
IE 34.243.84.31:443 protected-by.clarium.io tcp
DE 18.64.103.6:443 ts.amazon-adsystem.com tcp
IE 34.243.84.31:443 protected-by.clarium.io tcp
US 13.248.245.213:443 eb2.3lift.com tcp
US 13.248.245.213:443 eb2.3lift.com tcp
US 13.248.245.213:443 eb2.3lift.com tcp
US 8.8.8.8:53 sync.search.spotxchange.com udp
US 8.8.8.8:53 ups.analytics.yahoo.com udp
US 13.248.245.213:443 eb2.3lift.com tcp
US 13.248.245.213:443 eb2.3lift.com tcp
US 13.248.245.213:443 eb2.3lift.com tcp
GB 87.248.114.12:443 ups.analytics.yahoo.com tcp
DE 18.64.103.6:443 ts.amazon-adsystem.com tcp
IE 52.18.108.50:443 aes.eu-west.3px.axp.amazon-adsystem.com tcp
NL 34.91.62.186:443 um.simpli.fi tcp
US 8.8.8.8:53 us.creativecdn.com udp
US 8.8.8.8:53 pbs.yahoo.com udp
NL 185.89.210.244:443 ib.adnxs.com tcp
NL 35.214.194.148:443 csync.loopme.me tcp
NL 178.250.1.9:443 dis.criteo.com tcp
US 151.101.194.49:443 sync-tm.everesttech.net tcp
US 185.184.10.30:443 us.creativecdn.com tcp
NL 82.145.213.8:443 t.adx.opera.com tcp
ES 51.92.114.109:443 www.btd-zaz.tq-tungsten.com tcp
IE 3.251.217.202:443 sq-tungsten-ts-eu.amazon-adsystem.com tcp
GB 87.248.114.12:443 pbs.yahoo.com tcp
GB 142.250.180.4:443 www.google.com udp
GB 142.250.180.4:443 www.google.com udp
GB 216.58.213.3:443 beacons.gcp.gvt2.com udp
HK 103.210.21.251:443 bi.noxgroup.com tcp
HK 103.210.21.251:443 bi.noxgroup.com tcp
US 216.239.34.157:443 tunnel.googlezip.net tcp
US 8.8.8.8:53 ogads-pa.googleapis.com udp
GB 142.250.179.246:443 i.ytimg.com udp
GB 142.250.179.246:443 i.ytimg.com tcp
US 8.8.8.8:53 www.ldplayer.net udp
GB 142.250.179.246:443 i.ytimg.com udp
US 8.8.8.8:53 play.google.com udp
GB 142.250.178.14:443 play.google.com udp
US 8.8.8.8:53 14.178.250.142.in-addr.arpa udp
GB 142.250.179.246:443 i.ytimg.com tcp
GB 142.250.178.2:443 googleads.g.doubleclick.net udp
GB 216.58.213.10:443 jnn-pa.googleapis.com udp
GB 142.250.178.2:443 googleads.g.doubleclick.net tcp
GB 216.58.201.106:443 ogads-pa.googleapis.com udp
GB 142.250.178.2:443 googleads.g.doubleclick.net tcp
US 216.239.34.157:443 tunnel.googlezip.net tcp
US 8.8.8.8:53 106.201.58.216.in-addr.arpa udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
GB 142.250.178.14:443 play.google.com udp
US 34.160.86.181:443 cloud.bluestacks.com tcp
GB 79.133.176.223:443 www.ldplayer.net tcp
GB 79.133.176.223:443 www.ldplayer.net tcp
US 8.8.8.8:53 cmp.setupcmp.com udp
US 8.8.8.8:53 cdn.ldplayer.net udp
US 8.8.8.8:53 res.ldrescdn.com udp
US 104.26.4.6:443 cmp.setupcmp.com tcp
US 104.26.4.6:443 cmp.setupcmp.com tcp
US 8.8.8.8:53 223.176.133.79.in-addr.arpa udp
US 8.8.8.8:53 6.4.26.104.in-addr.arpa udp
US 104.26.4.6:443 cmp.setupcmp.com tcp
US 8.8.8.8:53 eb.bluestacks.com udp
US 54.153.18.198:80 eb.bluestacks.com tcp
US 104.26.4.6:443 cmp.setupcmp.com tcp
GB 163.181.154.244:443 res.ldrescdn.com tcp
GB 163.181.154.244:443 res.ldrescdn.com tcp
GB 79.133.176.186:443 cdn.ldplayer.net tcp
GB 216.58.201.110:443 fundingchoicesmessages.google.com tcp
GB 216.58.201.110:443 fundingchoicesmessages.google.com tcp
GB 216.58.201.110:443 fundingchoicesmessages.google.com tcp
US 8.8.8.8:53 186.176.133.79.in-addr.arpa udp
US 8.8.8.8:53 content-autofill.googleapis.com udp
GB 142.250.187.234:443 content-autofill.googleapis.com tcp
GB 216.58.201.110:443 apis.google.com udp
US 8.8.8.8:53 usersdk.ldmnq.com udp
US 8.8.8.8:53 234.187.250.142.in-addr.arpa udp
SG 8.222.254.73:443 usersdk.ldmnq.com tcp
GB 216.58.201.110:443 apis.google.com tcp
US 8.8.8.8:53 apien.ldplayer.net udp
US 8.8.8.8:53 play-lh.googleusercontent.com udp
GB 79.133.176.174:443 apien.ldplayer.net tcp
GB 79.133.176.174:443 apien.ldplayer.net tcp
GB 79.133.176.174:443 apien.ldplayer.net tcp
SG 8.222.254.73:443 usersdk.ldmnq.com tcp
GB 216.58.201.110:443 apis.google.com udp
GB 79.133.176.174:443 apien.ldplayer.net tcp
US 54.153.18.198:443 eb.bluestacks.com tcp
US 8.8.8.8:53 bat.bing.com udp
US 8.8.8.8:53 www.clarity.ms udp
US 8.8.8.8:53 hm.baidu.com udp
US 8.8.8.8:53 analytics.tiktok.com udp
US 8.8.8.8:53 198.18.153.54.in-addr.arpa udp
US 8.8.8.8:53 73.254.222.8.in-addr.arpa udp
US 8.8.8.8:53 174.176.133.79.in-addr.arpa udp
GB 216.58.201.118:443 play-lh.googleusercontent.com tcp
GB 142.250.180.4:443 www.google.com tcp
GB 142.250.180.4:443 www.google.com tcp
US 8.8.8.8:53 118.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 8.8.8.8:53 www.google.co.uk udp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
GB 163.181.154.244:443 res.ldrescdn.com tcp
US 216.239.34.36:443 region1.google-analytics.com udp
GB 163.181.154.244:443 res.ldrescdn.com tcp
GB 172.217.169.3:443 www.google.co.uk tcp
GB 172.217.169.3:443 www.google.co.uk tcp
BE 66.102.1.157:443 stats.g.doubleclick.net tcp
GB 172.217.169.3:443 www.google.co.uk tcp
BE 66.102.1.157:443 stats.g.doubleclick.net tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
GB 142.250.178.2:443 googleads.g.doubleclick.net tcp
GB 142.250.178.2:443 googleads.g.doubleclick.net tcp
GB 142.250.178.2:443 googleads.g.doubleclick.net tcp
US 104.18.30.49:443 stpd.cloud tcp
GB 142.250.178.2:443 googleads.g.doubleclick.net tcp
GB 142.250.178.2:443 googleads.g.doubleclick.net tcp
BE 66.102.1.157:443 stats.g.doubleclick.net udp
GB 142.250.178.2:443 googleads.g.doubleclick.net tcp
GB 142.250.178.2:443 googleads.g.doubleclick.net tcp
GB 142.250.178.2:443 googleads.g.doubleclick.net tcp
GB 142.250.178.2:443 googleads.g.doubleclick.net tcp
US 104.18.30.49:443 stpd.cloud tcp
GB 142.250.187.226:443 ep1.adtrafficquality.google tcp
US 8.8.8.8:53 ep2.adtrafficquality.google udp
GB 142.250.178.2:443 googleads.g.doubleclick.net tcp
GB 142.250.179.225:443 ep2.adtrafficquality.google tcp
US 8.8.8.8:53 accounts.google.com udp
BE 108.177.15.84:443 accounts.google.com tcp
US 8.8.8.8:53 157.1.102.66.in-addr.arpa udp
US 8.8.8.8:53 49.30.18.104.in-addr.arpa udp
GB 142.250.179.225:443 ep2.adtrafficquality.google tcp
GB 142.250.179.225:443 ep2.adtrafficquality.google tcp
GB 142.250.180.4:443 www.google.com tcp
BE 108.177.15.84:443 accounts.google.com udp
GB 142.250.179.225:443 ep2.adtrafficquality.google tcp
US 8.8.8.8:53 www.googletagservices.com udp
US 150.171.27.10:443 bat.bing.com tcp
GB 95.100.104.16:443 analytics.tiktok.com tcp
US 13.107.246.65:443 www.clarity.ms tcp
IE 13.74.129.1:443 c.clarity.ms tcp
CN 14.215.182.140:443 hm.baidu.com tcp
US 8.8.8.8:53 c.amazon-adsystem.com udp
US 8.8.8.8:53 cdn.jsdelivr.net udp
US 8.8.8.8:53 id5-sync.com udp
NL 178.250.1.11:443 gum.criteo.com tcp
US 151.101.65.229:443 cdn.jsdelivr.net tcp
DE 3.162.86.128:443 c.amazon-adsystem.com tcp
DE 18.64.79.128:443 tagan.adlightning.com tcp
DE 162.19.138.119:443 id5-sync.com tcp
FR 163.5.194.36:443 prebid.a-mo.net tcp
US 35.186.253.211:443 rtb.openx.net tcp
US 8.8.8.8:53 84.15.177.108.in-addr.arpa udp
US 8.8.8.8:53 225.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 10.27.171.150.in-addr.arpa udp
US 8.8.8.8:53 16.104.100.95.in-addr.arpa udp
US 8.8.8.8:53 65.246.107.13.in-addr.arpa udp
NL 185.184.8.90:443 prebid-eu.creativecdn.com tcp
US 172.67.68.162:443 prebid-stag.setupad.net tcp
US 172.67.68.162:443 prebid-stag.setupad.net tcp
FR 91.134.110.128:443 prg.smartadserver.com tcp
DK 37.157.3.26:443 adx.adform.net tcp
GB 142.250.179.225:443 ep2.adtrafficquality.google udp
IE 13.74.129.1:443 c.clarity.ms tcp
CN 14.215.182.140:443 hm.baidu.com tcp
US 151.101.65.229:443 cdn.jsdelivr.net tcp
DE 3.162.86.128:443 c.amazon-adsystem.com tcp
DE 18.64.79.128:443 tagan.adlightning.com tcp
DE 162.19.138.119:443 id5-sync.com tcp
FR 91.134.110.128:443 prg.smartadserver.com tcp
US 35.244.159.8:443 u.openx.net tcp
NL 178.250.1.11:443 gum.criteo.com tcp
GB 172.217.169.33:443 tpc.googlesyndication.com tcp
GB 172.217.169.33:443 tpc.googlesyndication.com tcp
GB 172.217.169.33:443 tpc.googlesyndication.com tcp
GB 172.217.169.33:443 tpc.googlesyndication.com tcp
GB 142.250.178.2:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 128.110.134.91.in-addr.arpa udp
US 8.8.8.8:53 1.129.74.13.in-addr.arpa udp
US 8.8.8.8:53 229.65.101.151.in-addr.arpa udp
US 23.220.249.212:443 analytics.pangle-ads.com tcp
US 13.107.21.237:443 c.bing.com tcp
GB 142.250.180.4:443 www.google.com udp
GB 172.217.169.33:443 tpc.googlesyndication.com udp
NL 81.17.55.170:443 ssbsync-global.smartadserver.com tcp
DE 141.95.33.120:443 lb.eu-1-id5-sync.com tcp
US 4.153.129.168:443 b.clarity.ms tcp
GB 216.58.212.194:443 googleads4.g.doubleclick.net tcp
GB 216.58.212.194:443 googleads4.g.doubleclick.net tcp
DE 3.162.86.128:443 c.amazon-adsystem.com tcp
DE 18.64.95.121:443 aax.amazon-adsystem.com tcp
NL 154.57.158.115:443 ads.stickyadstv.com tcp
NL 89.149.193.88:443 rtb-csync.smartadserver.com tcp
DE 18.64.119.12:443 config.aps.amazon-adsystem.com tcp
GB 172.217.16.230:443 s0.2mdn.net tcp
US 4.153.129.168:443 b.clarity.ms tcp
GB 216.58.212.194:443 googleads4.g.doubleclick.net tcp
GB 172.217.16.230:443 s0.2mdn.net udp
NL 154.57.158.115:443 ads.stickyadstv.com tcp
NL 89.149.193.88:443 rtb-csync.smartadserver.com tcp
GB 216.58.212.194:443 googleads4.g.doubleclick.net tcp
US 172.67.68.162:443 prebid-stag.setupad.net tcp
US 8.8.8.8:53 128.79.64.18.in-addr.arpa udp
US 8.8.8.8:53 119.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 237.21.107.13.in-addr.arpa udp
US 8.8.8.8:53 212.249.220.23.in-addr.arpa udp
US 8.8.8.8:53 170.55.17.81.in-addr.arpa udp
US 8.8.8.8:53 120.33.95.141.in-addr.arpa udp
US 8.8.8.8:53 12.119.64.18.in-addr.arpa udp
US 8.8.8.8:53 168.129.153.4.in-addr.arpa udp
US 8.8.8.8:53 115.158.57.154.in-addr.arpa udp
US 8.8.8.8:53 88.193.149.89.in-addr.arpa udp
DE 162.19.138.119:443 lb.eu-1-id5-sync.com tcp
US 172.67.68.162:443 prebid-stag.setupad.net tcp
DK 37.157.4.28:443 cm.adform.net tcp
US 4.153.129.168:443 b.clarity.ms tcp
IE 34.249.168.140:443 pm.w55c.net tcp
US 151.101.129.91:443 t.seenthis.se tcp
US 151.101.193.91:443 t.seenthis.se tcp
US 151.101.193.91:443 t.seenthis.se tcp
GB 142.250.178.2:443 securepubads.g.doubleclick.net udp
GB 216.58.213.1:443 8c4867952cf02f14320af176628611f5.safeframe.googlesyndication.com tcp
DE 162.19.138.119:443 lb.eu-1-id5-sync.com tcp
GB 87.248.114.11:443 ups.analytics.yahoo.com tcp
IE 63.33.3.88:443 ce.lijit.com tcp
GB 216.58.213.1:443 8c4867952cf02f14320af176628611f5.safeframe.googlesyndication.com tcp
FR 45.137.176.88:443 sync.adotmob.com tcp
GB 2.17.149.102:443 sync.teads.tv tcp
NL 81.17.55.108:443 ssbsync.smartadserver.com tcp
GB 142.250.187.226:443 ep1.adtrafficquality.google udp
US 35.244.159.8:443 u.openx.net udp
FR 45.137.176.88:443 sync.adotmob.com tcp
GB 2.17.149.102:443 sync.teads.tv tcp
NL 81.17.55.108:443 ssbsync.smartadserver.com tcp
GB 104.78.175.230:443 secure.cdn.fastclick.net tcp
US 104.22.52.173:443 cdn.hadronid.net tcp
US 8.8.8.8:53 88.3.33.63.in-addr.arpa udp
US 8.8.8.8:53 108.55.17.81.in-addr.arpa udp
US 8.8.8.8:53 230.175.78.104.in-addr.arpa udp
GB 172.217.169.3:443 www.google.co.uk udp
US 8.8.8.8:53 cdn.id5-sync.com udp
US 8.8.8.8:53 id.hadron.ad.gt udp
GB 142.250.178.2:443 securepubads.g.doubleclick.net udp
US 104.22.4.69:443 id.hadron.ad.gt tcp
US 104.22.53.86:443 cdn.id5-sync.com tcp
GB 104.78.175.230:443 secure.cdn.fastclick.net tcp
GB 142.250.187.226:443 ep1.adtrafficquality.google udp
US 151.101.129.91:443 t.seenthis.se udp
US 151.101.193.91:443 t.seenthis.se udp
GB 18.134.84.19:443 1f2e7.v.fwmrm.net tcp
US 151.101.129.91:443 t.seenthis.se udp
US 8.8.8.8:53 69.4.22.104.in-addr.arpa udp
US 8.8.8.8:53 88.176.137.45.in-addr.arpa udp
GB 18.134.84.19:443 1f2e7.v.fwmrm.net tcp
US 4.153.129.168:443 b.clarity.ms tcp
US 8.8.8.8:53 node.setupad.com udp
US 35.186.253.211:443 rtb.openx.net udp
GB 216.58.212.194:443 googleads4.g.doubleclick.net udp
US 8.8.8.8:53 pr-bh.ybp.yahoo.com udp
IE 34.251.118.136:443 pr-bh.ybp.yahoo.com tcp
IE 34.251.118.136:443 pr-bh.ybp.yahoo.com tcp
DE 3.162.79.128:443 tags.crwdcntrl.net tcp
SE 192.229.221.95:80 sw.symcb.com tcp
DE 162.19.138.119:443 lb.eu-1-id5-sync.com tcp
DE 3.162.79.128:443 tags.crwdcntrl.net tcp
GB 172.217.169.3:443 www.google.co.uk udp
US 8.8.8.8:53 proc.ad.cpe.dotomi.com udp
US 8.8.8.8:53 bcp.crwdcntrl.net udp
NL 64.158.223.146:443 proc.ad.cpe.dotomi.com tcp
IE 52.31.95.82:443 bcp.crwdcntrl.net tcp
DE 162.19.138.119:443 lb.eu-1-id5-sync.com tcp
US 4.153.129.168:443 b.clarity.ms tcp
GB 142.250.178.2:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 146.223.158.64.in-addr.arpa udp
US 8.8.8.8:53 82.95.31.52.in-addr.arpa udp
GB 172.217.169.33:443 tpc.googlesyndication.com tcp
US 8.8.8.8:53 rtb.gumgum.com udp
IE 63.35.70.55:443 rtb.gumgum.com tcp
NL 185.89.210.244:443 ib.adnxs.com tcp
BE 66.102.1.157:443 stats.g.doubleclick.net tcp
US 8.8.8.8:53 match.prod.bidr.io udp
IE 54.155.111.174:443 match.prod.bidr.io tcp
US 35.71.131.137:443 match.adsrvr.org tcp
GB 163.181.154.243:443 res.ldrescdn.com tcp
US 8.8.8.8:53 136.118.251.34.in-addr.arpa udp
IE 54.155.111.174:443 match.prod.bidr.io tcp
US 35.71.131.137:443 match.adsrvr.org tcp
GB 142.250.187.194:443 ade.googlesyndication.com tcp
US 8.8.8.8:53 cdn.ampproject.org udp
GB 172.217.169.33:443 tpc.googlesyndication.com udp
DE 159.89.25.223:443 node.setupad.com tcp
GB 142.250.180.4:443 www.google.com udp
GB 142.250.180.1:443 cdn.ampproject.org tcp
GB 142.250.180.1:443 cdn.ampproject.org tcp
GB 142.250.180.1:443 cdn.ampproject.org tcp
GB 142.250.180.1:443 cdn.ampproject.org tcp
GB 142.250.180.1:443 cdn.ampproject.org tcp
DE 159.89.25.223:443 node.setupad.com tcp
DE 162.19.138.119:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 243.154.181.163.in-addr.arpa udp
US 8.8.8.8:53 1.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 223.25.89.159.in-addr.arpa udp
DE 162.19.138.119:443 lb.eu-1-id5-sync.com tcp
NL 154.57.158.115:443 ads.stickyadstv.com tcp
US 34.98.64.218:443 setupad-d.openx.net tcp
FR 163.5.194.35:443 sync.a-mo.net tcp
GB 2.19.117.8:443 csync.smartadserver.com tcp
US 8.8.8.8:53 gw-iad-bid.ymmobi.com udp
US 8.8.8.8:53 dm-eu.hybrid.ai udp
US 8.8.8.8:53 sync.smartadserver.com udp
US 8.8.8.8:53 rtb.adentifi.com udp
US 8.8.8.8:53 sync.1rx.io udp
NL 82.145.213.8:443 t.adx.opera.com tcp
GB 79.133.176.185:443 apien.ldmnq.com tcp
NL 37.230.131.16:443 dm-eu.hybrid.ai tcp
US 184.73.111.79:443 rtb.adentifi.com tcp
NL 89.149.193.89:443 sync.smartadserver.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
US 47.253.61.56:443 gw-iad-bid.ymmobi.com tcp
US 104.19.159.19:443 assets.a-mo.net tcp
NL 154.57.158.115:443 ads.stickyadstv.com tcp
NL 37.230.131.16:443 dm-eu.hybrid.ai tcp
US 184.73.111.79:443 rtb.adentifi.com tcp
US 104.19.159.19:443 assets.a-mo.net tcp
US 4.153.129.168:443 b.clarity.ms tcp
SE 192.229.221.95:80 sw.symcb.com tcp
GB 2.19.117.8:443 csync.smartadserver.com tcp
US 8.8.8.8:53 ced-ns.sascdn.com udp
GB 2.19.117.22:443 ced-ns.sascdn.com tcp
US 35.71.131.137:443 match.adsrvr.org tcp
GB 163.181.154.243:443 res.ldrescdn.com tcp
GB 163.181.154.243:443 res.ldrescdn.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
GB 185.64.190.78:443 image6.pubmatic.com tcp
NL 46.228.164.11:443 ad.turn.com tcp
US 8.8.8.8:53 16.131.230.37.in-addr.arpa udp
US 8.8.8.8:53 185.176.133.79.in-addr.arpa udp
US 8.8.8.8:53 79.111.73.184.in-addr.arpa udp
US 8.8.8.8:53 22.117.19.2.in-addr.arpa udp
US 8.8.8.8:53 19.159.19.104.in-addr.arpa udp
NL 185.89.210.244:443 secure.adnxs.com tcp
US 172.64.151.101:443 ssum-sec.casalemedia.com tcp
FR 45.137.176.88:443 sync.adotmob.com tcp
NL 35.214.136.108:443 x.bidswitch.net tcp
DE 80.82.210.217:443 dsp-cookie.adfarm1.adition.com tcp
NL 178.250.1.9:443 dis.criteo.com tcp
DK 37.157.6.233:443 c1.adform.net tcp
US 34.193.171.116:443 pxl.iqm.com tcp
NL 185.89.210.212:443 secure.adnxs.com tcp
US 151.101.2.49:443 sync-tm.everesttech.net tcp
NL 208.93.169.131:443 bh.contextweb.com tcp
DE 91.228.74.159:443 cms.quantserve.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
NL 46.228.164.11:443 ad.turn.com tcp
IE 34.249.168.140:443 pm.w55c.net tcp
US 8.8.8.8:53 wt.rqtrk.eu udp
US 8.8.8.8:53 s.amazon-adsystem.com udp
US 98.82.156.107:443 s.amazon-adsystem.com tcp
DE 57.129.18.105:443 wt.rqtrk.eu tcp
DE 18.184.206.66:443 match.sharethrough.com tcp
IE 34.251.118.136:443 pr-bh.ybp.yahoo.com tcp
DE 91.228.74.159:443 cms.quantserve.com tcp
NL 134.122.57.34:443 match.adsby.bidtheatre.com tcp
NL 34.91.62.186:443 um.simpli.fi tcp
DE 162.19.138.119:443 lb.eu-1-id5-sync.com tcp
DK 37.157.6.233:443 c1.adform.net tcp
US 151.101.2.49:443 sync-tm.everesttech.net tcp
IE 34.249.168.140:443 pm.w55c.net tcp
NL 35.214.136.108:443 x.bidswitch.net tcp
US 8.8.8.8:53 pixel.rubiconproject.com udp
US 8.8.8.8:53 id.a-mx.com udp
DK 37.157.4.28:443 cm.adform.net tcp
US 35.186.253.211:443 rtb.openx.net tcp
NL 81.17.55.170:443 ssbsync.smartadserver.com tcp
US 8.8.8.8:53 ssum.casalemedia.com udp
US 8.8.8.8:53 ap.lijit.com udp
IE 34.251.118.136:443 pr-bh.ybp.yahoo.com tcp
NL 134.122.57.34:443 match.adsby.bidtheatre.com tcp
NL 34.91.62.186:443 um.simpli.fi tcp
DE 162.19.138.119:443 lb.eu-1-id5-sync.com tcp
US 64.74.236.159:443 b1sync.zemanta.com tcp
US 35.244.159.8:443 setupad-d.openx.net udp
US 172.67.68.162:443 prebid-stag.setupad.net tcp
US 8.8.8.8:53 dsum-sec.casalemedia.com udp
DK 37.157.4.28:443 cm.adform.net tcp
US 35.186.253.211:443 rtb.openx.net tcp
NL 81.17.55.170:443 ssbsync.smartadserver.com tcp
US 8.8.8.8:53 159.74.228.91.in-addr.arpa udp
US 8.8.8.8:53 116.171.193.34.in-addr.arpa udp
US 8.8.8.8:53 105.18.129.57.in-addr.arpa udp
US 8.8.8.8:53 66.206.184.18.in-addr.arpa udp
NL 35.214.194.148:443 csync.loopme.me tcp
US 80.77.87.166:443 cs.admanmedia.com tcp
FR 51.255.68.171:443 dsp.nrich.ai tcp
NL 46.228.164.13:443 d.turn.com tcp
DE 3.160.39.118:443 s.ad.smaato.net tcp
NL 63.215.202.172:443 equativ-match.dotomi.com tcp
NL 35.214.136.108:443 x.bidswitch.net udp
NL 35.214.194.148:443 csync.loopme.me tcp
US 80.77.87.166:443 cs.admanmedia.com tcp
NL 63.215.202.172:443 equativ-match.dotomi.com tcp
US 8.8.8.8:53 49.2.101.151.in-addr.arpa udp
US 8.8.8.8:53 171.68.255.51.in-addr.arpa udp
US 8.8.8.8:53 118.39.160.3.in-addr.arpa udp
US 8.8.8.8:53 ads.betweendigital.com udp
US 8.8.8.8:53 ice.360yield.com udp
IE 54.195.0.129:443 ice.360yield.com tcp
US 8.8.8.8:53 129.0.195.54.in-addr.arpa udp
US 8.8.8.8:53 172.202.215.63.in-addr.arpa udp
US 104.19.159.19:443 assets.a-mo.net tcp
NL 178.250.1.9:443 dis.eu.criteo.com tcp
GB 142.250.187.194:443 ade.googlesyndication.com udp
US 4.153.129.168:443 b.clarity.ms tcp
NL 188.42.189.197:443 ads.betweendigital.com tcp
US 151.101.129.91:443 t.seenthis.se udp
US 151.101.193.91:443 t.seenthis.se udp
US 8.8.8.8:53 197.189.42.188.in-addr.arpa udp
DE 162.19.138.119:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 pb-am.a-mo.net udp
US 34.96.71.22:443 s.company-target.com tcp
US 34.96.71.22:443 s.company-target.com tcp
IE 52.215.155.11:443 cm.adgrx.com tcp
FR 163.5.194.32:443 pb-am.a-mo.net tcp
US 172.64.151.101:443 dsum-sec.casalemedia.com udp
US 8.8.8.8:53 32.194.5.163.in-addr.arpa udp
DK 77.243.51.121:443 uipglob.semasio.net tcp
GB 216.58.213.3:443 beacons.gcp.gvt2.com udp
US 151.101.193.91:443 t.seenthis.se udp
CN 183.240.98.228:443 hm.baidu.com tcp
CN 183.240.98.228:443 hm.baidu.com tcp
DK 37.157.6.233:443 c1.adform.net tcp
DK 37.157.6.233:443 c1.adform.net tcp
US 8.8.8.8:53 image8.pubmatic.com udp
US 8.8.8.8:53 pixel.rubiconproject.com udp
US 8.8.8.8:53 ssum.casalemedia.com udp
IE 34.250.168.231:443 ap.lijit.com tcp
IE 34.250.168.231:443 ap.lijit.com tcp
FR 163.5.194.35:443 pb-am.a-mo.net tcp
GB 185.64.191.214:443 image8.pubmatic.com tcp
GB 185.64.191.214:443 image8.pubmatic.com tcp
US 172.64.151.101:443 ssum.casalemedia.com tcp
DE 79.127.216.47:443 id.a-mx.com tcp
DE 79.127.216.47:443 id.a-mx.com tcp
DE 79.127.216.47:443 id.a-mx.com tcp
US 8.8.8.8:53 231.168.250.34.in-addr.arpa udp
NL 154.57.158.115:443 ads.stickyadstv.com tcp
US 8.8.8.8:53 image4.pubmatic.com udp
US 8.8.8.8:53 prebid.adnxs.com udp
US 8.8.8.8:53 ow.pubmatic.com udp
NL 154.57.158.115:443 ads.stickyadstv.com tcp
US 4.153.129.168:443 b.clarity.ms tcp
US 13.248.245.213:443 eb2.3lift.com tcp
US 8.8.8.8:53 214.191.64.185.in-addr.arpa udp
US 8.8.8.8:53 47.216.127.79.in-addr.arpa udp
US 13.248.245.213:443 eb2.3lift.com tcp
US 8.8.8.8:53 sync.ipredictive.com udp
US 52.0.8.114:443 sync.ipredictive.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
DE 162.19.138.119:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 jelly.mdhv.io udp
US 216.239.36.21:443 jelly.mdhv.io tcp
FR 163.5.194.36:443 pb-am.a-mo.net tcp
FR 163.5.194.36:443 pb-am.a-mo.net tcp
FR 163.5.194.36:443 pb-am.a-mo.net tcp
NL 185.89.208.11:443 prebid.adnxs.com tcp
DE 79.127.216.47:443 id.rtb.mx tcp
GB 185.64.190.84:443 ow.pubmatic.com tcp
NL 185.89.208.11:443 prebid.adnxs.com tcp
US 8.8.8.8:53 84.190.64.185.in-addr.arpa udp
US 8.8.8.8:53 11.208.89.185.in-addr.arpa udp
SG 47.245.87.130:443 middledata.ldplayer.net tcp
US 4.153.129.168:443 b.clarity.ms tcp
US 4.153.129.168:443 b.clarity.ms tcp
NL 198.47.127.20:443 image4.pubmatic.com tcp
NL 198.47.127.20:443 image4.pubmatic.com tcp
NL 35.204.158.49:443 um.simpli.fi tcp
NL 64.227.64.62:443 match.adsby.bidtheatre.com tcp
FR 163.5.194.35:443 pb-am.a-mo.net tcp
US 8.8.8.8:53 62.64.227.64.in-addr.arpa udp
US 151.101.193.91:443 t.seenthis.se udp
US 172.67.68.162:443 prebid-stag.setupad.net tcp
FR 163.5.194.36:443 pb-am.a-mo.net tcp
DK 37.157.3.26:443 adx.adform.net tcp
NL 185.184.8.90:443 prebid-eu.creativecdn.com tcp
FR 91.134.110.128:443 prg.smartadserver.com tcp
US 35.186.253.211:443 rtb.openx.net udp
DE 18.64.95.121:443 aax.amazon-adsystem.com tcp
GB 216.58.213.3:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 e2c40.gcp.gvt2.com udp
US 35.186.253.211:443 rtb.openx.net udp
BE 35.210.214.151:443 e2c40.gcp.gvt2.com tcp
GB 142.250.178.2:443 securepubads.g.doubleclick.net udp
CN 111.45.3.198:443 hm.baidu.com tcp
CN 111.45.3.198:443 hm.baidu.com tcp
US 8.8.8.8:53 151.214.210.35.in-addr.arpa udp
DE 159.89.25.223:443 node.setupad.com tcp
GB 142.250.180.4:443 www.google.com udp
GB 172.217.169.33:443 tpc.googlesyndication.com udp
DE 159.89.25.223:443 node.setupad.com tcp
US 8.8.8.8:53 beacons.gvt2.com udp
GB 172.217.169.35:443 beacons.gvt2.com tcp
GB 142.250.187.194:443 ade.googlesyndication.com udp
GB 216.58.213.3:443 beacons.gcp.gvt2.com tcp
GB 216.58.213.3:443 beacons.gcp.gvt2.com tcp
CN 111.45.11.83:443 hm.baidu.com tcp
CN 111.45.11.83:443 hm.baidu.com tcp
CN 14.215.183.79:443 hm.baidu.com tcp
CN 14.215.183.79:443 hm.baidu.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
GB 216.58.213.3:443 beacons.gcp.gvt2.com tcp
GB 216.58.213.3:443 beacons.gcp.gvt2.com tcp
GB 172.217.169.3:443 www.google.co.uk udp
GB 216.58.213.3:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 e2c34.gcp.gvt2.com udp
US 35.212.16.125:443 e2c50.gcp.gvt2.com tcp
KR 35.216.18.75:443 e2c34.gcp.gvt2.com tcp
US 35.212.16.125:443 e2c50.gcp.gvt2.com tcp
KR 35.216.18.75:443 e2c34.gcp.gvt2.com tcp
GB 216.58.213.3:443 beacons.gcp.gvt2.com udp
GB 172.217.169.35:443 beacons.gvt2.com tcp
GB 79.133.176.185:443 apien.ldmnq.com tcp
US 8.8.8.8:53 75.18.216.35.in-addr.arpa udp
GB 216.58.213.3:443 beacons.gcp.gvt2.com udp
SG 47.245.87.130:443 middledata.ldplayer.net tcp
SG 47.245.87.130:443 middledata.ldplayer.net tcp
GB 142.250.187.194:443 ade.googlesyndication.com udp
GB 79.133.176.185:80 apien.ldmnq.com tcp
SG 47.245.87.130:443 middledata.ldplayer.net tcp
US 8.8.8.8:53 178.38.239.216.in-addr.arpa udp
SG 47.245.87.130:443 middledata.ldplayer.net tcp
US 8.8.8.8:53 discord.gg udp
US 8.8.8.8:53 ad.ldplayer.net udp
GB 79.133.176.192:443 ad.ldplayer.net tcp
US 8.8.8.8:53 apien.ldplayer.net udp
US 8.8.8.8:53 res.ldrescdn.com udp
GB 163.181.154.244:443 res.ldrescdn.com tcp
GB 163.181.154.244:443 res.ldrescdn.com tcp
US 162.159.133.234:443 discord.gg tcp
SG 47.245.87.130:443 middledata.ldplayer.net tcp
GB 79.133.176.174:443 apien.ldplayer.net tcp
GB 163.181.154.244:443 res.ldrescdn.com tcp
GB 163.181.154.244:443 res.ldrescdn.com tcp
GB 163.181.154.244:443 res.ldrescdn.com tcp
US 162.159.137.232:443 discord.com tcp
SE 192.229.221.95:80 sw.symcb.com tcp
US 8.8.8.8:53 232.137.159.162.in-addr.arpa udp
GB 163.181.154.244:443 res.ldrescdn.com tcp
GB 163.181.154.244:443 res.ldrescdn.com tcp
GB 163.181.154.244:443 res.ldrescdn.com tcp
SG 47.245.87.130:443 middledata.ldplayer.net tcp
GB 79.133.176.225:443 www.ldplayer.net tcp
GB 163.181.154.244:443 res.ldrescdn.com tcp
GB 163.181.154.244:443 res.ldrescdn.com tcp
GB 163.181.154.244:443 res.ldrescdn.com tcp
GB 163.181.154.244:443 res.ldrescdn.com tcp
GB 163.181.154.244:443 res.ldrescdn.com tcp
GB 79.133.176.192:443 ad.ldplayer.net tcp
GB 163.181.154.244:443 res.ldrescdn.com tcp
US 162.159.130.233:443 cdn.discordapp.com tcp
US 162.159.130.233:443 cdn.discordapp.com tcp
GB 79.133.176.225:443 www.ldplayer.net tcp
GB 79.133.176.225:443 www.ldplayer.net tcp
GB 216.58.201.118:443 play-lh.googleusercontent.com tcp
GB 79.133.176.211:443 www.ldplayer.net tcp
GB 79.133.176.211:443 www.ldplayer.net tcp
GB 142.250.187.227:80 o.pki.goog tcp
US 8.8.8.8:53 233.130.159.162.in-addr.arpa udp
US 8.8.8.8:53 211.176.133.79.in-addr.arpa udp
GB 142.250.187.227:80 o.pki.goog tcp
US 8.8.8.8:53 cdn.ldplayer.net udp
US 104.26.4.6:443 cmp.setupcmp.com tcp
GB 142.250.187.227:80 o.pki.goog tcp
GB 79.133.176.186:443 cdn.ldplayer.net tcp
GB 216.58.201.110:443 www.youtube.com tcp
GB 163.181.154.244:443 res.ldrescdn.com tcp
GB 163.181.154.244:443 res.ldrescdn.com tcp
US 104.26.4.6:443 cmp.setupcmp.com tcp
US 104.18.30.49:443 stpd.cloud tcp
US 8.8.8.8:53 i.ytimg.com udp
GB 216.58.201.110:443 www.youtube.com udp
GB 163.181.154.244:443 res.ldrescdn.com tcp
GB 163.181.154.244:443 res.ldrescdn.com tcp
GB 163.181.154.244:443 res.ldrescdn.com tcp
GB 163.181.154.244:443 res.ldrescdn.com tcp
GB 163.181.154.244:443 res.ldrescdn.com tcp
GB 163.181.154.244:443 res.ldrescdn.com tcp
GB 216.58.201.110:443 www.youtube.com udp
GB 172.217.169.86:443 i.ytimg.com tcp
GB 163.181.154.244:443 res.ldrescdn.com tcp
GB 163.181.154.244:443 res.ldrescdn.com tcp
GB 142.250.200.34:443 googleads.g.doubleclick.net tcp
US 8.8.8.8:53 apien.ldplayer.net udp
US 8.8.8.8:53 usersdk.ldmnq.com udp
GB 142.250.178.2:443 securepubads.g.doubleclick.net tcp
GB 142.250.178.2:443 securepubads.g.doubleclick.net tcp
GB 79.133.176.174:443 apien.ldplayer.net tcp
SG 47.236.4.49:443 usersdk.ldmnq.com tcp
GB 142.250.200.34:443 googleads.g.doubleclick.net udp
SG 47.236.4.49:443 usersdk.ldmnq.com tcp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
US 8.8.8.8:53 static.doubleclick.net udp
GB 142.250.180.4:443 www.google.com tcp
US 8.8.8.8:53 yt3.ggpht.com udp
GB 172.217.16.234:443 jnn-pa.googleapis.com tcp
GB 142.250.179.230:443 static.doubleclick.net tcp
GB 142.250.187.225:443 yt3.ggpht.com tcp
GB 172.217.16.234:443 jnn-pa.googleapis.com udp
US 8.8.8.8:53 cdn.jsdelivr.net udp
US 8.8.8.8:53 c.amazon-adsystem.com udp
US 151.101.129.229:443 cdn.jsdelivr.net udp
DE 18.64.79.128:443 tagan.adlightning.com tcp
DE 3.162.86.128:443 c.amazon-adsystem.com tcp
DE 3.162.86.128:443 c.amazon-adsystem.com tcp
GB 79.133.176.185:80 apien.ldmnq.com tcp
GB 79.133.176.185:443 apien.ldmnq.com tcp
US 8.8.8.8:53 3.180.250.142.in-addr.arpa udp
GB 79.133.176.185:443 apien.ldmnq.com tcp
GB 142.250.200.34:443 googleads.g.doubleclick.net udp
GB 216.58.213.3:443 beacons.gcp.gvt2.com udp
US 34.160.86.181:443 cloud.bluestacks.com tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2861 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
DE 18.64.79.28:80 cdn3.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
GB 2.19.117.88:443 ak-build.bluestacks.com tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
GB 2.19.117.102:443 cdn-bgp.bluestacks.com tcp
GB 2.19.117.102:443 cdn-bgp.bluestacks.com tcp
GB 2.19.117.102:443 cdn-bgp.bluestacks.com tcp
GB 2.19.117.102:443 cdn-bgp.bluestacks.com tcp
GB 2.19.117.102:443 cdn-bgp.bluestacks.com tcp
GB 2.19.117.102:443 cdn-bgp.bluestacks.com tcp
US 35.190.88.7:443 sessions.bugsnag.com tcp
GB 2.19.117.102:443 cdn-bgp.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.120.160.131:443 push-notification-8.firebaseio.com tcp
US 8.8.8.8:53 131.160.120.34.in-addr.arpa udp
GB 142.250.200.59:443 storage.googleapis.com tcp
GB 2.19.117.68:443 cloud-api-cdn.bluestacks.com tcp
GB 2.19.117.68:443 cloud-api-cdn.bluestacks.com tcp
GB 2.19.117.68:443 cloud-api-cdn.bluestacks.com tcp
GB 2.19.117.145:443 cdn-icon.bluestacks.com tcp
GB 2.19.117.145:443 cdn-icon.bluestacks.com tcp
GB 2.19.117.145:443 cdn-icon.bluestacks.com tcp
GB 2.19.117.145:443 cdn-icon.bluestacks.com tcp
GB 2.19.117.145:443 cdn-icon.bluestacks.com tcp
GB 2.19.117.145:443 cdn-icon.bluestacks.com tcp
N/A 127.0.0.1:2881 tcp
GB 79.133.176.192:443 ad.ldplayer.net tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
US 172.67.68.162:443 prebid-stag.setupad.net tcp
DK 37.157.3.26:443 adx.adform.net tcp
US 35.186.253.211:443 rtb.openx.net udp
US 8.8.8.8:53 prg.smartadserver.com udp
NL 185.184.8.90:443 prebid-eu.creativecdn.com tcp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 35.186.253.211:443 rtb.openx.net tcp
FR 163.5.194.32:443 prebid.a-mo.net tcp
DE 18.64.95.121:443 aax.amazon-adsystem.com tcp
FR 164.132.25.177:443 prg.smartadserver.com tcp
US 172.67.68.162:443 prebid-stag.setupad.net tcp
DK 37.157.3.26:443 adx.adform.net tcp
NL 185.184.8.90:443 prebid-eu.creativecdn.com tcp
GB 216.58.213.3:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 177.25.132.164.in-addr.arpa udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
N/A 127.0.0.1:2881 tcp
DE 18.64.79.128:443 tagan.adlightning.com tcp
DE 18.64.79.128:443 tagan.adlightning.com tcp
DE 18.64.79.128:443 tagan.adlightning.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
GB 172.217.169.33:443 tpc.googlesyndication.com udp
GB 142.250.180.4:443 www.google.com udp
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 prg-apac.smartadserver.com udp
US 8.8.8.8:53 ads.servenobid.com udp
US 8.8.8.8:53 onetag-sys.com udp
US 8.8.8.8:53 tlx.3lift.com udp
US 8.8.8.8:53 mp.4dex.io udp
US 8.8.8.8:53 ssc.33across.com udp
US 35.186.253.211:443 rtb.openx.net udp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 prebid.media.net udp
NL 178.250.1.56:443 bidder.criteo.com tcp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 35.186.253.211:443 rtb.openx.net tcp
US 8.8.8.8:53 a.teads.tv udp
US 104.18.36.155:443 htlb.casalemedia.com udp
US 8.8.8.8:53 i.connectad.io udp
US 8.8.8.8:53 hbopenbid.pubmatic.com udp
FR 163.5.194.32:443 prebid.a-mo.net tcp
US 8.8.8.8:53 prg8.smartadserver.com udp
US 69.166.1.8:443 apex.go.sonobi.com tcp
DE 18.64.95.121:443 aax.amazon-adsystem.com tcp
US 8.8.8.8:53 fastlane.rubiconproject.com udp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
FR 51.178.195.208:443 prg8.smartadserver.com tcp
NL 178.250.1.56:443 bidder.criteo.com tcp
FR 163.5.194.32:443 prebid.a-mo.net tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
DE 18.64.95.121:443 aax.amazon-adsystem.com tcp
FR 163.5.194.32:443 prebid.a-mo.net tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
DE 18.64.95.121:443 aax.amazon-adsystem.com tcp
FR 51.178.195.208:443 prg8.smartadserver.com tcp
US 8.8.8.8:53 cm.g.doubleclick.net udp
GB 142.250.178.2:443 cm.g.doubleclick.net udp
GB 142.250.178.2:443 cm.g.doubleclick.net tcp
US 8.8.8.8:53 googleads4.g.doubleclick.net udp
GB 2.18.190.133:443 cdn.doubleverify.com tcp
GB 172.217.169.34:443 googleads4.g.doubleclick.net udp
NL 185.89.210.244:443 ib.adnxs.com tcp
DE 51.38.120.206:443 onetag-sys.com tcp
DE 51.38.120.206:443 onetag-sys.com tcp
US 34.120.63.153:443 prebid.media.net udp
DE 3.78.168.176:443 tlx.3lift.com tcp
N/A 127.0.0.1:2881 tcp
NL 143.244.197.139:443 ads.servenobid.com tcp
US 23.192.21.192:443 a.teads.tv tcp
US 89.187.176.168:443 ssc.33across.com tcp
US 104.18.34.178:443 mp.4dex.io tcp
US 34.120.63.153:443 prebid.media.net tcp
US 8.8.8.8:53 208.195.178.51.in-addr.arpa udp
US 8.8.8.8:53 133.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 206.120.38.51.in-addr.arpa udp
DE 3.78.168.176:443 tlx.3lift.com tcp
NL 143.244.197.139:443 ads.servenobid.com tcp
US 23.192.21.192:443 a.teads.tv tcp
US 89.187.176.168:443 ssc.33across.com tcp
US 104.18.34.178:443 mp.4dex.io tcp
DE 3.78.168.176:443 tlx.3lift.com tcp
NL 143.244.197.139:443 ads.servenobid.com tcp
US 23.192.21.192:443 a.teads.tv tcp
US 89.187.176.168:443 ssc.33across.com tcp
US 104.18.34.178:443 mp.4dex.io tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
US 3.209.44.107:443 ads.everesttech.net tcp
DE 18.64.95.121:443 aax.amazon-adsystem.com tcp
DE 18.64.95.121:443 aax.amazon-adsystem.com tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:6463 tcp
US 104.22.54.206:443 i.connectad.io udp
GB 216.58.213.3:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 dco-assets.everestads.net udp
GB 104.78.164.147:443 dco-assets.everestads.net tcp
IE 54.239.38.253:443 aax-eu.amazon-adsystem.com tcp
IE 54.239.38.253:443 aax-eu.amazon-adsystem.com tcp
DE 159.89.25.223:443 node.setupad.com tcp
US 8.8.8.8:53 cdn.jsdelivr.net udp
GB 104.78.164.147:443 dco-assets.everestads.net tcp
US 8.8.8.8:53 a1841.casalemedia.com udp
US 8.8.8.8:53 k8s1-event-tracker-am.lb.indexww.com udp
CA 85.91.47.112:443 a1841.casalemedia.com tcp
GB 142.250.178.2:443 cm.g.doubleclick.net udp
US 13.248.245.213:443 eb2.3lift.com tcp
NL 185.80.36.156:443 k8s1-event-tracker-am.lb.indexww.com tcp
US 8.8.8.8:53 m.media-amazon.com udp
US 8.8.8.8:53 ts.amazon-adsystem.com udp
US 8.8.8.8:53 protected-by.clarium.io udp
IE 34.243.84.31:443 protected-by.clarium.io tcp
DE 18.64.103.27:443 ts.amazon-adsystem.com tcp
DE 18.64.114.89:443 m.media-amazon.com udp
DE 18.64.114.89:443 m.media-amazon.com udp
GB 172.217.16.230:443 s0.2mdn.net udp
US 172.64.151.101:443 r.casalemedia.com udp
GB 172.217.16.230:443 s0.2mdn.net udp
GB 172.217.169.34:443 googleads4.g.doubleclick.net udp
US 8.8.8.8:53 pixel-sync.sitescout.com udp
DK 37.157.6.233:443 c1.adform.net tcp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 8.8.8.8:53 sync.adotmob.com udp
US 8.8.8.8:53 cm.ctnsnet.com udp
US 8.8.8.8:53 d.adroll.com udp
US 8.8.8.8:53 js-sec.indexww.com udp
US 104.18.38.76:443 js-sec.indexww.com tcp
US 34.36.216.150:443 pixel-sync.sitescout.com udp
US 35.186.193.173:443 cm.ctnsnet.com tcp
IE 52.48.238.49:443 d.adroll.com tcp
FR 45.137.176.88:443 sync.adotmob.com tcp
US 52.204.245.185:443 sync.srv.stackadapt.com tcp
US 151.101.194.49:443 sync-tm.everesttech.net tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:6464 tcp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
US 172.64.151.101:443 dsum-sec.casalemedia.com tcp
US 151.101.193.229:443 cdn.jsdelivr.net tcp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
DE 18.64.103.27:443 ts.amazon-adsystem.com tcp
GB 104.78.164.147:443 dco-assets.everestads.net tcp
US 8.8.8.8:53 76.38.18.104.in-addr.arpa udp
US 8.8.8.8:53 49.238.48.52.in-addr.arpa udp
US 8.8.8.8:53 185.245.204.52.in-addr.arpa udp
IE 52.18.108.50:443 aes.eu-west.3px.axp.amazon-adsystem.com tcp
IE 3.251.217.202:443 sq-tungsten-ts-eu.amazon-adsystem.com tcp
ES 51.92.114.109:443 www.btd-zaz.tq-tungsten.com tcp
US 204.79.197.204:443 analyticspixel.microsoft.com tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:6465 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:6466 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2861 tcp
N/A 127.0.0.1:2861 tcp
GB 216.58.201.110:443 www.youtube.com udp
GB 142.250.180.4:443 www.google.com udp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
GB 172.217.169.3:443 www.google.co.uk udp
US 8.8.8.8:53 bat.bing.com udp
US 150.171.28.10:443 bat.bing.com tcp
US 216.239.34.36:443 region1.analytics.google.com udp
US 151.101.193.91:443 t.seenthis.se udp
US 23.23.194.123:443 tcp
US 130.211.115.4:443 data.ad-score.com tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
NL 178.250.1.56:443 bidder.criteo.com tcp
US 89.187.176.168:443 ssc.33across.com tcp
NL 185.89.210.244:443 ib.adnxs.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
FR 163.5.194.32:443 prebid.a-mo.net tcp
FR 51.178.195.208:443 prg8.smartadserver.com tcp
FR 5.196.111.64:443 prg8.smartadserver.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
CA 85.91.47.69:443 a698.casalemedia.com tcp
US 35.244.174.68:443 id.rlcdn.com tcp
IE 52.31.95.82:443 bcp.crwdcntrl.net tcp
US 8.8.8.8:53 ad.turn.com udp
US 8.8.8.8:53 x.bidswitch.net udp
US 8.8.8.8:53 rtb.adentifi.com udp
US 8.8.8.8:53 pm.w55c.net udp
US 8.8.8.8:53 s.amazon-adsystem.com udp
US 8.8.8.8:53 ums.acuityplatform.com udp
US 8.8.8.8:53 b1sync.zemanta.com udp
US 3.212.172.201:443 rtb.adentifi.com tcp
NL 46.228.164.11:443 ad.turn.com tcp
IE 99.80.216.230:443 pm.w55c.net tcp
US 98.82.157.137:443 s.amazon-adsystem.com tcp
US 70.42.32.223:443 b1sync.zemanta.com tcp
NL 35.214.136.108:443 x.bidswitch.net tcp
NL 154.59.122.79:443 ums.acuityplatform.com tcp
NL 35.214.174.141:443 a.sportradarserving.com tcp
GB 142.250.200.34:443 ade.googlesyndication.com udp
CA 85.91.47.35:443 a664.casalemedia.com tcp
IE 108.128.65.103:443 ad.360yield.com tcp
NL 35.214.174.141:443 a.sportradarserving.com udp
IE 52.31.215.85:443 ad.360yield.com tcp
IE 34.247.233.198:443 usersync.gumgum.com tcp
NL 35.214.194.148:443 csync.loopme.me tcp
NL 34.91.62.186:443 um.simpli.fi tcp
IE 34.251.118.136:443 pr-bh.ybp.yahoo.com tcp
NL 82.145.213.8:443 t.adx.opera.com tcp
US 34.160.19.107:443 dmp.brand-display.com tcp
NL 193.0.160.130:443 p.rfihub.com tcp
FR 91.134.110.132:443 ssbsync.smartadserver.com tcp
US 8.8.8.8:53 201.172.212.3.in-addr.arpa udp
US 8.8.8.8:53 141.174.214.35.in-addr.arpa udp
US 8.8.8.8:53 35.47.91.85.in-addr.arpa udp
US 8.8.8.8:53 103.65.128.108.in-addr.arpa udp
US 8.8.8.8:53 85.215.31.52.in-addr.arpa udp
US 8.8.8.8:53 198.233.247.34.in-addr.arpa udp
US 8.8.8.8:53 107.19.160.34.in-addr.arpa udp
N/A 127.0.0.1:9999 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:9999 tcp
GB 18.170.252.3:443 stat.flashtalking.com tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:9999 tcp
GB 142.250.200.10:443 ogads-pa.googleapis.com udp
GB 172.217.16.238:443 play.google.com udp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:9999 tcp
N/A 127.0.0.1:5037 tcp
GB 2.18.66.43:443 www.bing.com tcp
GB 2.18.66.43:443 tcp
GB 92.123.128.152:443 r.bing.com tcp
GB 92.123.128.152:443 r.bing.com tcp
GB 92.123.128.152:443 r.bing.com tcp
GB 92.123.128.152:443 r.bing.com tcp
GB 92.123.128.152:443 r.bing.com tcp
GB 92.123.128.152:443 r.bing.com tcp
SE 192.229.221.95:80 sw.symcb.com tcp
N/A 127.0.0.1:2861 tcp
US 20.189.173.27:443 browser.pipe.aria.microsoft.com tcp
N/A 127.0.0.1:2861 tcp
N/A 127.0.0.1:9999 tcp
N/A 127.0.0.1:63453 tcp
N/A 127.0.0.1:5555 tcp
N/A 127.0.0.1:5557 tcp
N/A 127.0.0.1:9999 tcp
N/A 127.0.0.1:5037 tcp
N/A 127.0.0.1:63556 tcp
N/A 127.0.0.1:5555 tcp
N/A 127.0.0.1:5559 tcp
N/A 127.0.0.1:9999 tcp
N/A 127.0.0.1:9999 tcp
N/A 127.0.0.1:5561 tcp
N/A 127.0.0.1:5037 tcp
N/A 127.0.0.1:5037 tcp
N/A 127.0.0.1:5037 tcp
N/A 127.0.0.1:5037 tcp
N/A 127.0.0.1:9999 tcp
N/A 127.0.0.1:63623 tcp
N/A 127.0.0.1:5555 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:2881 tcp
N/A 127.0.0.1:9999 tcp
N/A 127.0.0.1:5557 tcp
N/A 127.0.0.1:5037 tcp
N/A 127.0.0.1:5037 tcp
N/A 127.0.0.1:63636 tcp
N/A 127.0.0.1:5555 tcp
N/A 127.0.0.1:5559 tcp
N/A 127.0.0.1:9999 tcp
N/A 127.0.0.1:5037 tcp
N/A 127.0.0.1:5037 tcp
N/A 127.0.0.1:5037 tcp
N/A 127.0.0.1:5037 tcp
N/A 127.0.0.1:5037 tcp
N/A 127.0.0.1:5037 tcp
N/A 127.0.0.1:5037 tcp
N/A 127.0.0.1:5037 tcp
N/A 127.0.0.1:5561 tcp
N/A 127.0.0.1:9999 tcp
N/A 127.0.0.1:9999 tcp
US 8.8.8.8:53 chrome.google.com udp
GB 216.58.201.110:443 chrome.google.com tcp
US 172.202.65.254:443 arc-ring.msedge.net tcp
US 8.8.8.8:53 90105fca143032671833a459cd54b9b2.clo.footprintdns.com udp
ZA 20.87.44.201:443 90105fca143032671833a459cd54b9b2.clo.footprintdns.com tcp
US 8.8.8.8:53 254.65.202.172.in-addr.arpa udp
N/A 127.0.0.1:9999 tcp
N/A 127.0.0.1:9999 tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
GB 2.19.117.102:443 cloud-api-cdn.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 8.8.8.8:53 ak-build.bluestacks.com udp
GB 2.19.117.102:443 cloud-api-cdn.bluestacks.com tcp
GB 2.19.117.85:443 ak-build.bluestacks.com tcp
GB 2.19.117.102:443 cloud-api-cdn.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
GB 163.181.154.243:443 bsxplayer.bluestacks.com tcp
US 8.8.8.8:53 bst-launcher-sgp.bluestacks.cn udp
GB 163.181.154.241:443 bsxplayer.bluestacks.com tcp
GB 79.133.176.235:443 bst-launcher-sgp.bluestacks.cn tcp
US 8.8.8.8:53 241.154.181.163.in-addr.arpa udp
US 8.8.8.8:53 235.176.133.79.in-addr.arpa udp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
GB 2.19.117.102:443 cloud-api-cdn.bluestacks.com tcp
DE 18.66.2.12:443 now.gg tcp
GB 2.19.117.167:443 cdn-icon.bluestacks.com tcp
GB 2.19.117.167:443 cdn-icon.bluestacks.com tcp
GB 2.19.117.167:443 cdn-icon.bluestacks.com tcp
GB 2.19.117.167:443 cdn-icon.bluestacks.com tcp
GB 2.19.117.167:443 cdn-icon.bluestacks.com tcp
GB 2.19.117.102:443 cloud-api-cdn.bluestacks.com tcp
GB 2.19.117.102:443 cloud-api-cdn.bluestacks.com tcp
GB 2.19.117.102:443 cloud-api-cdn.bluestacks.com tcp
GB 2.19.117.102:443 cloud-api-cdn.bluestacks.com tcp
GB 2.19.117.102:443 cloud-api-cdn.bluestacks.com tcp
GB 2.19.117.102:443 cloud-api-cdn.bluestacks.com tcp
GB 2.19.117.102:443 cloud-api-cdn.bluestacks.com tcp
GB 2.19.117.102:443 cloud-api-cdn.bluestacks.com tcp
GB 2.19.117.102:443 cloud-api-cdn.bluestacks.com tcp
GB 2.19.117.102:443 cloud-api-cdn.bluestacks.com tcp
GB 2.19.117.102:443 cloud-api-cdn.bluestacks.com tcp
GB 2.19.117.102:443 cloud-api-cdn.bluestacks.com tcp
GB 2.19.117.102:443 cloud-api-cdn.bluestacks.com tcp
GB 2.19.117.85:443 ak-build.bluestacks.com tcp
GB 2.19.117.85:443 ak-build.bluestacks.com tcp
GB 2.19.117.78:443 cdn-bgp.bluestacks.com tcp
GB 2.19.117.78:443 cdn-bgp.bluestacks.com tcp
GB 2.19.117.78:443 cdn-bgp.bluestacks.com tcp
GB 2.19.117.78:443 cdn-bgp.bluestacks.com tcp
GB 2.19.117.98:443 cdn.now.gg tcp
GB 2.19.117.98:443 cdn.now.gg tcp
GB 2.19.117.98:443 cdn.now.gg tcp
GB 2.19.117.98:443 cdn.now.gg tcp
GB 2.19.117.98:443 cdn.now.gg tcp
GB 2.19.117.98:443 cdn.now.gg tcp
GB 2.19.117.98:443 cdn.now.gg tcp
GB 2.19.117.98:443 cdn.now.gg tcp
GB 2.19.117.98:443 cdn.now.gg tcp
GB 2.19.117.98:443 cdn.now.gg tcp
GB 2.19.117.98:443 cdn.now.gg tcp
GB 2.19.117.102:443 cloud-api-cdn.bluestacks.com tcp
GB 2.19.117.102:443 cloud-api-cdn.bluestacks.com tcp
GB 2.19.117.102:443 cloud-api-cdn.bluestacks.com tcp
GB 2.19.117.102:443 cloud-api-cdn.bluestacks.com tcp
GB 2.19.117.102:443 cloud-api-cdn.bluestacks.com tcp
GB 2.19.117.102:443 cloud-api-cdn.bluestacks.com tcp
GB 2.19.117.167:443 cdn-icon.bluestacks.com tcp
GB 2.19.117.167:443 cdn-icon.bluestacks.com tcp
GB 2.19.117.167:443 cdn-icon.bluestacks.com tcp
GB 2.19.117.167:443 cdn-icon.bluestacks.com tcp
GB 2.19.117.167:443 cdn-icon.bluestacks.com tcp
GB 2.19.117.102:443 cloud-api-cdn.bluestacks.com tcp
GB 2.19.117.102:443 cloud-api-cdn.bluestacks.com tcp
GB 2.19.117.102:443 cloud-api-cdn.bluestacks.com tcp
GB 2.19.117.85:443 ak-build.bluestacks.com tcp
GB 2.19.117.78:443 cdn-bgp.bluestacks.com tcp
GB 2.19.117.78:443 cdn-bgp.bluestacks.com tcp
GB 2.19.117.102:443 cloud-api-cdn.bluestacks.com tcp
GB 2.19.117.102:443 cloud-api-cdn.bluestacks.com tcp
GB 2.19.117.102:443 cloud-api-cdn.bluestacks.com tcp
GB 2.19.117.102:443 cloud-api-cdn.bluestacks.com tcp
GB 2.19.117.167:443 cdn-icon.bluestacks.com tcp
GB 2.19.117.78:443 cdn-bgp.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
GB 142.250.178.27:443 storage.googleapis.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
GB 2.19.117.68:443 cloud-api-cdn.bluestacks.com tcp
GB 142.250.200.34:443 ade.googlesyndication.com udp
GB 142.250.200.34:443 ade.googlesyndication.com tcp
GB 216.58.213.3:443 beacons.gcp.gvt2.com udp
GB 216.58.213.3:443 beacons.gcp.gvt2.com udp
GB 216.58.213.3:443 beacons.gcp.gvt2.com tcp
GB 216.58.213.3:443 beacons.gcp.gvt2.com udp
GB 216.58.213.3:443 beacons.gcp.gvt2.com udp
GB 142.250.200.2:443 ade.googlesyndication.com udp
GB 216.58.213.3:443 beacons.gcp.gvt2.com udp

Files

\??\pipe\crashpad_2824_KENYTHSPOFRAZNIC

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

C:\Users\Admin\Downloads\base64.txt:Zone.Identifier

MD5 0208a5530e86f365e19b7a03d7eef5a4
SHA1 756f77269f4aeca1080c23fa408ff4b5bf2e272c
SHA256 35c79f3ee15b3e596e3838ba0f301f248b80c0ce1c388d8b74b6d0b3f56789da
SHA512 000557b404959a164e7adc5b10edc86913d3f5ec2f512aa29555ecdfab15783627750c97d849a82775e91004b157d00e5abff4cc927ed0774a16220d9fedae1f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

MD5 8f1619eaedea3042c6aaaca347375028
SHA1 8d22d9f67372103f5e53a337dee593e79044f48c
SHA256 9c0bb6734216e64fcb5c524132f02193ec6f3927ccd315ac6e4b701c418adffb
SHA512 5aec4d4b24453f1eaf30c8bafb9f69fb1541be799c1eb8e479ed245e1f922b65cf581176f0891db229486972d694a832694dc583c7656d1bed838420c0340c59

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 19a08899039ffb73855d6bcc43e4fa58
SHA1 479a028c4e4afacb2ab1146d978b4ac0fdf36852
SHA256 b7bb8ae71922f8f1f25189122ad720dec23a4ca7c256314d4e372eb43daedb61
SHA512 b522df4bd9cbf8586136793d8b90a7426e5df353e2aeef05bc9965600ea872da5702c2e6b1f1ef0febc5cbf82747e636c049c4bb153978336eff6a3469399698

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 a4116fa8c7cc121f42ecde70dc21697e
SHA1 9f7222ad72b4781eda3bb36916291b99312deb8b
SHA256 a1cb3b1788ba2f858bc327a1c1bf53d02d92457f033470c2903c43dd7225648e
SHA512 d11ca610f33b5a19677ce9f61e4ac2dfccfda1d05c7c2bc5400a1a8414a189573f2b648ad6a3f76fe25c1f477eaa72592d53885fb86567c3dd61de9050571dc5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\e68f71cb-e0b2-43fe-88b7-7e1f75036a9b.tmp

MD5 9f0717f1e1dde069084004be46de1366
SHA1 b2b00fdaccdb14b8ac68bca8cf87c928e0e5e249
SHA256 4aaa7c4c16540b5dd303b8ac0d7c93b85d789dd4f10e51363cc2f189bb71912f
SHA512 37e0bdc63ddbd07a4e8380d3c5022d162c6e184487d6a0984c4f6d649af2d79869384d4be09e942a58f579e3a6ad1686a62f89a97aae020d9075b9a064cf4bbb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 4a27a8cfba19b1a5ddf3e6b1207a88d3
SHA1 b7cedfec4a017fba526d0021d522375ffa9fa9b6
SHA256 15c3d6401540540e2fbae382a15e4f364133abc6dab8c51c07fd8fc5a3e81ccb
SHA512 45136101db3832348480b640424a55901869ac3902ba996d9eaec3fb44678fa83e2ae45f792f78764717bbbf58ee9ab022bbaacfe3d0b029355a2b7807cc4341

C:\Users\Admin\Downloads\base64.txt

MD5 f2867ba75b1e0e6bf236067a05fd1c6f
SHA1 58cf0adb6694b5ef9e7bde5775d1b4254e825056
SHA256 51abb360c93189120ba594ed9b5c8124e7d226e93082c9b1626579d1bc0445c6
SHA512 ebc46af5361200e03a85a622fd0b01eb5cb495e8cf0276ec9d3c80d907dedd79e3ad9995208bfed9a95cbc7ae77b099c557141180d1ac16049153d742445f9d4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 2275cacbcca9e0079850bcf3a4f38be2
SHA1 f8e02045c7aca39ef84b448d7d16c45e64c8b071
SHA256 cd47fcc949053ee341e669ea0505e9778846f0693d7a4e6b8e2ecc6a70e03992
SHA512 9a7d0a0a57d007320bba674acb8aa533dd8f2a35569983ca2bd024125f1c836e242c3abf59d03a6d7555edbda9bbb8e2724dd7d6fa1fb6b45f234302821bc330

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 dd87a965b632cf9c7d849c5a152985f7
SHA1 49fcc8a8b052b481d19e0fda80a1159ede9246e5
SHA256 a68e20e3a23719936121173e46dfe482468c57c549151f9c929d1a63ab194c41
SHA512 4c2e2e79357f95640646ec2294b8decab6ac19e2aac3017f8b5789d7e803b7f0aba5a92ffabd558cbcf236494827df822023de77b15af640b840b9027c7fc728

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000041

MD5 2bbe412fad146096d0aced4342b42c23
SHA1 de5ab613b4daccf1ab7b4497c38b3725128518a7
SHA256 e73ceb1a47d2d4b53ed40210919b64fe0cdfbd05437fa3b4762a5170b35c2820
SHA512 1463b7c8acfff7cd154a53871a2ec34c0e8dfc4e93df6d63ec9b34385cc663f410c8bf13b366f58b87073f90719dbf98070e887213c5f3641d5ecbe09e59e767

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 49fe07165a5b9645f8481c3841e577ce
SHA1 7d47168f267f15e80743c4c58639211d53b64ba1
SHA256 dcabb25f256b3533d1fa0eb783ea1475218a7de23d59ecf758d3aa228d065e5f
SHA512 a9b376f3406fad194928a399fe815ae86a15aec256a646a3a4ffcd238e22ee8331dfdc7cfb9403e6c6afaa02701f699388676aa10c4a23fe84cc8dbc309f20b0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 aae728451ca47d763e5147b0fbebb0e5
SHA1 b7de59242418be3b5ca719a66d35962e7c0e4a6f
SHA256 ab01ad007deef702f2db302d5757a3923823002894b6bfdbba2d1b1d7e5399ed
SHA512 bf180f58faf5a357e73634cd2e1bbf53843e32c590cf315f974a1bb1654957705d9a131f93a9ae110f8040f6c90b71143d0939108c285164e31e847a25f37b37

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 9360efd2fccc54c3164e5698863c4992
SHA1 1b07ebbcd5077e87ee4c5b16648280db3cec6122
SHA256 860fa4ec82ba677b7d03fc79bf56730ef944c631a22037b65c96c99d16075951
SHA512 5d1abf485daf72e7adf630fb44bbd522430ed626a79368f1e90a0b403bbbbb3b0ca296048e73aa7a0bcfe6728525ef31a7924f09de59e8b030f61e085ddc9641

C:\Users\Admin\Downloads\Unconfirmed 308478.crdownload

MD5 86b016ee6a71a5219f56779885f691ef
SHA1 1a40a93403e1004f7f8033c5afee8196db16700a
SHA256 a56fd8aa5ffdaddaf58e4fbe8cbb2359fd11f2a93f34d9d0df610baf96972207
SHA512 9f9860782ad93a3a43a9d4509635ac5a08317d3ee60ae314ebdaf4b61855c0a697ca0e5561b5452040763bec719394baaaa1ac4c23c00842be4806ab4dde42a7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 193972853a8b98e612eeeefb7d107e7b
SHA1 9cb757bc043bd44b2c52ba9df5cec609014a1ac7
SHA256 df9789abb24fd1b7daefb705a0bf34e7c7d4e9f09eb9abe8ccb9f70e0992bf92
SHA512 5c7af6eebb5fab8e0a460a0725997d0e3ee975ac254ecd27fabe1053e9c1ea95a6789ed865ef201ab3fb741da7098bcfe66bf7800245c1cef4934bfd7ab55280

C:\Users\Admin\AppData\Local\Temp\7zSC7941148\Assets\change_hover.png

MD5 57092634754fc26e5515e3ed5ca7d461
SHA1 3ae4d01db9d6bba535f5292298502193dfc02710
SHA256 8e5847487da148ebb3ea029cc92165afd215cdc08f7122271e13eb37f94e6dc1
SHA512 553baf9967847292c8e9249dc3b1d55069f51c79f4d1d3832a0036e79691f433a3ce8296a68c774b5797caf7000037637ce61b8365885d2a4eed3ff0730e5e2a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 d48e5ed7c9b7337257c1a8f586a615ff
SHA1 6ec7863599ec4975749e3d573e3cc17d6653669d
SHA256 bcb6a68f704763c84d3f86909c8dd392885d7cfc1d03ae04e11c57e65194fba6
SHA512 e733d2b5450e4a78e49ff8c739ae626f66fc8b4f4ea4022e9be425d4b2b58bbafe6f55e9635ae9c7dbf22ffe8ac28315ea2587d5f67530e603683ee3a85c6b1e

C:\Users\Admin\AppData\Local\Temp\7zSC7941148\BlueStacksInstaller.exe

MD5 0d021ad9fc86a22215cd014b088f307e
SHA1 531e18244b9a43798562c1297c09ccc0239adb61
SHA256 c14eb1c61d737e195ce06cb84ba2b05925dcf36ac35c1078f260e423b1ad3485
SHA512 e5d977d5a3f5a5888e054521168a9ac22712892d5aea225a6f545e9be885deef1983fbcd963927367b2d7439c18b2e6c71a6b143a924a41f5acabc76e0a6e993

memory/5224-771-0x0000000000ED0000-0x0000000000F70000-memory.dmp

memory/5224-772-0x000000001BC80000-0x000000001BCE8000-memory.dmp

memory/5224-774-0x000000001D140000-0x000000001D668000-memory.dmp

memory/5224-776-0x000000001C6C0000-0x000000001C6CE000-memory.dmp

memory/5224-775-0x000000001C6F0000-0x000000001C728000-memory.dmp

memory/5224-778-0x0000000020540000-0x0000000020548000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 312c80193f710dc58a03d2957454288d
SHA1 74f9143bacb90a6e413f90ba561d2324cbb80f3f
SHA256 44b84e4d5e4f21df1c35bda07f93bf6cca024dda9208860e0236cbe46ba1d769
SHA512 6ee9df50baa900724e8585278b99f1fc47d5622aeca4ff5276bf5663bc1f7e0989136e292a6800ebeb3bbec082742f5ee0d5f8d78a52d990e079e1160301e124

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 f974725c9d461f463d80de2875267cdd
SHA1 29a62d0036c85993f6fd1ab1b13afc8a396ca59f
SHA256 4f0f9b5c816a2aa6e6c71dabb041cd09ab0dc679f29a320a7ed0ff6574fdf277
SHA512 e4497746188a49c83e8d5f8bb16cfef324c828e94e470c72056cacb24d1ee30006c65fabf653e9d194a7df83eca3198509b3faf5af6d91c7cd684b2a920873be

C:\Users\Admin\AppData\Local\Temp\nsg60D9.tmp\nsDui.dll

MD5 11b5dc4c5f5c61593479b90e588903e7
SHA1 18af8549ace57f3d59afa251887a4dc8a4001bbb
SHA256 8580d6533654e42473fb6f4b5aedf1add6875ed3f84d1e44d7741fef38628aa0
SHA512 65b96f113b727dd3f563dbb8fc182896540ab94cae166a145c752791d9f5cd358c8e98e694de5bb8bc6a077941421353bde711456d4ee9b2ba7dda543b04b8c6

C:\Users\Admin\AppData\Local\Temp\nsg60D9.tmp\BgWorker.dll

MD5 36c81676ada53ceb99e06693108d8cce
SHA1 d31fa4aebd584238b3edc4768dd5414494610889
SHA256 a9e4f7ec65670d2ce375ffaf09b6d07f4cd531132ca002452287a4d540154a38
SHA512 1300de7b3e1ac9e706e0aad0b70e3e2a21db8c860e05b314a52e63dd66b5dffdf6be1e38ab6ede13bfd3a64631cc909486bf4b1403e7d821e3b566edc514c63c

C:\Users\Admin\AppData\Local\Temp\nsg60D9.tmp\System.dll

MD5 959ea64598b9a3e494c00e8fa793be7e
SHA1 40f284a3b92c2f04b1038def79579d4b3d066ee0
SHA256 03cd57ab00236c753e7ddeee8ee1c10839ace7c426769982365531042e1f6f8b
SHA512 5e765e090f712beffce40c5264674f430b08719940d66e3a4d4a516fd4ade859f7853f614d9d6bbb602780de54e11110d66dbb0f9ca20ef6096ede531f9f6d64

C:\Program Files (x86)\BlueStacks X\image\LocalAPK\close_hover.svg

MD5 76166804e6ce35e8a0c92917b8abc071
SHA1 8bd38726a11a9633ac937b9c6f205ce5d36348b0
SHA256 1bca2e912184b8168ee8961de68d1d839f4f9827fde6f48ab100fb61e82eff90
SHA512 93c4f1af7e9f89091a207ab308e05ddd4c92406c039f7465d3b8aca7e0cc7a6c922a22e1eee2f5c88db5e89016ef69294b2a0905d7d6a90fd32835bc11929005

C:\Program Files (x86)\BlueStacks X\image\LocalAPK\close_pressed.svg

MD5 dfddf8d0788988c3e48fcbfb2a76cd20
SHA1 463bb61f0012289e860c32f1885a3a8f57467f2e
SHA256 9585f41eb6202e89f2087266fa31852d7f41ca8cc659b907c96753fe165f937d
SHA512 e708c5114c60f7574589d6a56c9faedda26ee4a40f0eeb25f5e12eadcf790f24fdbf393fa0aa6ad449b5337d625b092d6f8822472fa8a6ce1339aca59c50c3ca

C:\Program Files (x86)\BlueStacks X\image\LocalAPK\close_normal.svg

MD5 3221ac69d7facd8aa90ffa15aea991b0
SHA1 e0571f30f4708ec78addc726a743679ca0f05e45
SHA256 92aeae68e9e0973d9e0dc575941f1cb2e24afd0574341a46b870be7384eaa537
SHA512 5e2de0abfe60a4db16ea5e8739260c19962fbfc60869a77bde6ab3547ad8ee3ad88e74e97da31fa23be096afddad018e431d152d6d0fa21a75357a11dacb1328

C:\Program Files (x86)\BlueStacks X\image\LocalAPK\close_disabled.svg

MD5 e7fdf6a9c8cae1fc1108dc5a803a1905
SHA1 2853f9ff5e63685ebb1449dcf693176b17e4ab60
SHA256 8ee5aa84139b2ea5549f7272523aeb203d73954c5ccdcf6f7407bf1a3469f13e
SHA512 a6388b24926934e20ccf7fcab41bd219dc6c0053428481d7f466bf89f26bf1a36fdff716a9ddd9ab268df73b04dff1449c6bac1f5c707e31ae2ee71c2087e0d9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 489118d42c9e9124b3b9af3850731d4c
SHA1 8b61e2366bdeb081358e4dbe32ffc0d450a41d5b
SHA256 69c4faef1ccb1a0894986a50ba58c7d873763433c60c7f40e243b948557e8817
SHA512 78d0d88dc6aba6754ca567204b296c1ea30a8fdd3e537696d81326b170bbe9759de396b727d2f3365786540ae80f8dda38e973b024194c729357207f2b1bed15

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 5da25a7fd14dea56f73693dbb9f10777
SHA1 b5f0922a26c0233c2ce68a65b8e7aa8916c4f5cd
SHA256 03b4fb969375c0effa995da12120bfd511e96ee9916acc620eb8731fb6b098c2
SHA512 ce3093d430034ef9933ba35926654bff9db7fccea56a7717d260c136f9706ead97ce7269881afdc21a9368c89f0ff4176591ce9d19aa732b93b53f9862e0d5cb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 033ebbc00cd65d86c00adae6d9927bac
SHA1 e1f9d35965450c5817ae34d37f8ff8a2032fafc3
SHA256 b1330da222786beb2e976497f0224881c3bfe00228a493cc3db3d096b5e5701e
SHA512 a81225d2086e5ac0a29e7ad2ec1891a67dcaf3b9ad4a6b9e4a74ccd92f6c3405f772128af8568ce4590913d607574331857ead63ed1f1a87d591c684109104a9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\5c1dba9a-f68f-4d58-82eb-838c58b25353.tmp

MD5 5e01813a5db06980ab8df43e462beae3
SHA1 8053a7a852ff69480c91dd0898f5063e4189ad59
SHA256 af0942806d4ce3504d6d7332ed981a705c17017bc108ed6e7a1b8e7ff14e7757
SHA512 620d12783dc2d8c0da29aa0dab5eb1f1e4dc47e7223d785cd463d07808452f45cfdcac2feac54c78e188d876658fcd3ca203963b9e55357069c68ceec8b7bec7

C:\Program Files (x86)\BlueStacks X\BlueStacks X.exe

MD5 39ed2ccd44b675779a3c52d770959590
SHA1 edcec83de7a2c152ce07e444ddcd2382deca6e33
SHA256 03d75c338a4ae5c94bba108783a41fff403a91bb08fbe6d9c82856b092e72f35
SHA512 9fd7843c944a5e642a4136823664a7e981305baa7e6ca7d2646a8a8669aa62b41203e3e9babb4c789e80bccd888e6041cba13b047c9904d3a21d037221cd2cc8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 620cb62bf90c2a636d9af12088a08878
SHA1 ad6140f856a2aa3a42137af73fa2002bbf4fe8cf
SHA256 510db4575c0b2b0843534f0c10086b0278010c5dafcfa6b96b1a5608f555ff4c
SHA512 97fb7701b760e3b7ef3bd7c67ddf25875cf10e90c7275f6a6217fb40400c349dc24b0caea8bc1aba148c04930accd71ce760432406acf199f41f7babe491c637

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000069

MD5 dee46781c0389eada0ac9faa177539b6
SHA1 d7641e3d25ac7ac66c2ea72ac7df77b242c909d3
SHA256 35f13cf2aef17a352007ab69222724397e0ec093871ff4bd162645f466425642
SHA512 049b3d8dcfb64510745c2d5f9e8046747337b1c19d4b2714835cc200dc4ba61acaa994fec7c3cd122ba99d688be6e08f97eb642745561d75b410a5589c304d7d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 98c73aae6d7e64ee5efca1335a418af2
SHA1 692383c6bbea33a144881a9fab09e2f2b5eeec28
SHA256 2ae54cb8d513f09a9ae03c8997fa8106f29e2c129459fe5850742cdc8e77fd6a
SHA512 9467a2c464d5b7d319e981430a69c4f78c1ea2127f3d3af7e438303a12a11cbc9873851653160d47450a1f6fc7f1bc46563213c2053472886e5e5fb5a044151b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 6df7edf030edd7f8f89c538f38d98789
SHA1 dc6bb2eb3b79295f07b1ec18d051123f127381c5
SHA256 fcfa806d9a44a2b448b5ceb1c5f9f0f0022334039d76de81c353a20df3b867ff
SHA512 652f63df336d2b9ec7f2071cc719518201ef0334a02c90a4fc945423b623ac7d7d03c28bd7ef7069c8d4df34ce50e9f4aa091c431c593bc0ea10063131952a51

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 dbeec5ea6d86247e3b79f6b7ebbd4bc4
SHA1 3a86a48d40288248d035960d4fab4cfd7c72c957
SHA256 4a2f7f4986f69d36c1d0d8a25b42ad948afd6bded1c4b7f90782cf6ca694cf59
SHA512 5f3361e1c4d376f4755177eda40c22811a142c1042dece1e613b5212490db840406acc7947a1a1e0d718af5b522d7bd432ee6126f224a9d3c0c95bee1ba49319

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 1ec5588d26f853aafd8e01e24eb7e2a8
SHA1 5b674cb276328da61060ee3eb260705e156bb4fd
SHA256 33a8fd21c111b27208f2369555ed6604a34d10efa79d12777af439a55724ed65
SHA512 e1c709417daccd92ccbe3179590589d3a9e146d0e56d72de0fba84ae209cdfb6bc4c71a5e1e971b5d2a1d66f7e5bbb92d2de124dc09e3100eb6e8b04788f5c13

C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock

MD5 f49655f856acb8884cc0ace29216f511
SHA1 cb0f1f87ec0455ec349aaa950c600475ac7b7b6b
SHA256 7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba
SHA512 599e93d25b174524495ed29653052b3590133096404873318f05fd68f4c9a5c9a3b30574551141fbb73d7329d6be342699a17f3ae84554bab784776dfda2d5f8

C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx

MD5 b5ad5caaaee00cb8cf445427975ae66c
SHA1 dcde6527290a326e048f9c3a85280d3fa71e1e22
SHA256 b6409b9d55ce242ff022f7a2d86ae8eff873daabf3a0506031712b8baa6197b8
SHA512 92f7fbbcbbea769b1af6dd7e75577be3eb8bb4a4a6f8a9288d6da4014e1ea309ee649a7b089be09ba27866e175ab6f6a912413256d7e13eaf60f6f30e492ce7f

C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val

MD5 d222b77a61527f2c177b0869e7babc24
SHA1 3f23acb984307a4aeba41ebbb70439c97ad1f268
SHA256 80dc3ffa698e4ff2e916f97983b5eae79470203e91cb684c5ccd4ff1a465d747
SHA512 d17d836ea77aeaff4cd01f9c7523345167a4a6bc62528aac74acde12679f48079d75d159e9cea2e614da50e83c2dcd92c374c899ea6c4fe8e5513d9bf06c01ff

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007

MD5 24393e2ccc4e7a164f062df993d27335
SHA1 c8f960244677439e72295d499440f295ae5be7c5
SHA256 3ecbdf289749ebf07b749a91eb3db3d1f8fc338e5cae2dae22730fb893736130
SHA512 a675af57b19197f17a1be1351c3cee6a291f23dc2614081bd7bd71adbe5eb0d191c4d50b295d43b3a002d48454a24ef9e4dc52510f2db54dcfe0c8e71948d10c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000008

MD5 d4586933fabd5754ef925c6e940472f4
SHA1 a77f36a596ef86e1ad10444b2679e1531995b553
SHA256 6e1c3edffec71a01e11e30aa359952213ac2f297c5014f36027f308a18df75d2
SHA512 6ce33a8da7730035fb6b67ed59f32029c3a94b0a5d7dc5aa58c9583820bb01ef59dd55c1c142f392e02da86c8699b2294aff2d7c0e4c3a59fce5f792c749c5ce

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 eff4f41097cce1dcd072e3a2020bdbf1
SHA1 804562b9c2adceb451502cc1319155a4183e1e7f
SHA256 4a611baa3d0b476ad610bde421ecb2dd409aab2b237eb0fc0fb34a8ea0b288c0
SHA512 12a01c8c880e733ef60363df5e898ea9f1df013cee51205209c7c626f4d24bfc9298ad668b35852983ce7646db84c917df9fb0542358173ba1dc0725d217cb42

C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\Assets\minimize_progress.png

MD5 1504b80f2a6f2d3fefc305da54a2a6c2
SHA1 432a9d89ebc2f693836d3c2f0743ea5d2077848d
SHA256 2f62d4e8c643051093f907058dddc78cc525147d9c4f4a0d78b4d0e5c90979f6
SHA512 675db04baf3199c8d94af30a1f1c252830a56a90f633c3a72aa9841738b04242902a5e7c56dd792626338e8b7eabc1f359514bb3a2e62bc36c16919e196cfd94

C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\Assets\exit_close.png

MD5 26eb04b9e0105a7b121ea9c6601bbf2a
SHA1 efc08370d90c8173df8d8c4b122d2bb64c07ccd8
SHA256 7aaef329ba9fa052791d1a09f127551289641ea743baba171de55faa30ec1157
SHA512 9df3c723314d11a6b4ce0577eb61488061f2f96a9746a944eb6a4ee8c0c4d29131231a1b20988ef5454b79f9475b43d62c710839ecc0a9c98324f977cab6db68

memory/11272-10334-0x000000001B910000-0x000000001B9F6000-memory.dmp

memory/11272-10333-0x0000000000C70000-0x0000000000C98000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\Bootstrapper.exe

MD5 eec269059e0a507585d52276d000747a
SHA1 2c4156196eda3e29702ae8b5f7b200593412ea66
SHA256 151ec480cc1a3212c0a665dabc3995074f8a67aa4536e1bc7185d2c7baee41a3
SHA512 ab0aedee438981b337af42cae51927baebe81e095f7f21d821afdbde21783e8936a5bb8dcf931b67bf3afdd926b73c1dae36e48fbe8c9d26b71304c8cad94924

memory/11356-10339-0x0000000000EE0000-0x0000000000F36000-memory.dmp

memory/11356-10349-0x000000001DD00000-0x000000001DD80000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\7zS0B1CE8E9\HD-CheckCpu.exe

MD5 81234fd9895897b8d1f5e6772a1b38d0
SHA1 80b2fec4a85ed90c4db2f09b63bd8f37038db0d3
SHA256 2e14887f3432b4a313442247fc669f891dbdad7ef1a2d371466a2afa88074a4c
SHA512 4c924d6524dc2c7d834bfc1a0d98b21753a7bf1e94b1c2c6650f755e6f265512d3a963bc7bc745351f79f547add57c37e29ba9270707edbf62b60df3a541bc16

C:\Users\Admin\AppData\Local\Temp\nsa83CD.tmp\StdUtils.dll

MD5 c6a6e03f77c313b267498515488c5740
SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 d5352f03fad26ce27b6f249e3bafeabe
SHA1 153a44578cd4a7ac43511a660ce6d0753d9dce78
SHA256 0c79ea04254fc4dfdcc0855fa76fddca02ba7260cd25a67cc42f52c060bb6251
SHA512 cf9638450a921737fe5ab56661113401676bda6b9099d17beafe839ba48a5d99742931317648fd5b3c854a5bb86e50a312fe288f9af0763c5b02d99742407c91

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 0a39a04962a7cb5519a40da9ed0c1bfb
SHA1 15fa6e3495993055ddce4465bf3f729d54b4d166
SHA256 ff69ef74aab47707ae67aaaa6bcd9a2e680c1fc146b4e1579c1cac9a38711738
SHA512 46a035cbfcd7f898789975ba0ca6b18d79cba4a427529a48fb43f887b3cdd22a99e23a23f62aaefda1e9190aeb8b4182e7dae0053b323142e892019209772276

C:\Users\Admin\AppData\Local\Temp\nsa83CD.tmp\WinShell.dll

MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

C:\Users\Admin\AppData\Local\Temp\nsa83CD.tmp\Registry.dll

MD5 2b7007ed0262ca02ef69d8990815cbeb
SHA1 2eabe4f755213666dbbbde024a5235ddde02b47f
SHA256 0b25b20f26de5d5bd795f934c70447112b4981343fcb2dfab3374a4018d28c2d
SHA512 aa75ee59ca0b8530eb7298b74e5f334ae9d14129f603b285a3170b82103cfdcc175af8185317e6207142517769e69a24b34fcdf0f58ed50a4960cbe8c22a0aca

C:\Users\Admin\AppData\Local\Temp\nsa83CD.tmp\System.dll

MD5 0d7ad4f45dc6f5aa87f606d0331c6901
SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

C:\Users\Admin\AppData\Local\Temp\nsa83CD.tmp\nsis7z.dll

MD5 80e44ce4895304c6a3a831310fbf8cd0
SHA1 36bd49ae21c460be5753a904b4501f1abca53508
SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

C:\Users\Admin\AppData\Local\Temp\nsa83CD.tmp\nsExec.dll

MD5 ec0504e6b8a11d5aad43b296beeb84b2
SHA1 91b5ce085130c8c7194d66b2439ec9e1c206497c
SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
SHA512 3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

C:\Users\Admin\AppData\Roaming\bluestacks-services\config.json.tmp-0996052125b5d190

MD5 59c1003c2259b6b3899abbe7b062f6d7
SHA1 be78c8944aa68dab6fc2fe036d538d90b21c9212
SHA256 bef722072fb669730ea5b9315de84452ed735ae7d1469ca2e490f1d982959818
SHA512 587707e58f51becb59a391f36231205904a7cf66d8b9949c754e14ea7f415bb774972b576018ce610743faf971b23bdc4e7c8e53bb6c67413ba182c88b4f158d

memory/7708-11120-0x00007FFF08F90000-0x00007FFF08F91000-memory.dmp

memory/7708-11118-0x00007FFF08C20000-0x00007FFF08C21000-memory.dmp

C:\Users\Admin\AppData\Roaming\bluestacks-services\config.json

MD5 755a58d242043a00aaaaaaf27724f07e
SHA1 73d5e7be8ee3f752cbd1bd33e936a81b41b8cae3
SHA256 7f3e0d8afff837a2002143e48ae439685a0ae1f2e936b8fdeb06726bafad316e
SHA512 fcc8af99eb103cb98098ef421599a87ce06e5ce062bf986a31959caf52bb9d74313a47a1ea6318b55818b5f29ac157d8dd87a271b27dc9ac68754d1006450f74

C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

C:\Program Files\BlueStacks_nxt\7zr.exe

MD5 fbaba140f30a11e5ff4f97d921de6d45
SHA1 d12360b79d9fe7ddc5380a22539dc7d4768ff5f3
SHA256 4889c0826c633c0291264d37834363be90ee39d07fcea228494ed151386dcb16
SHA512 cd18bb1b057b1b077fde372ca5f98701614b196b692ac42ec56e5b839535022d884a2cd9b6bf644a520c6f48f12f673574a24e60580c70c695067b66442ea7a5

C:\Program Files\BlueStacks_nxt\Assets\close_red.png

MD5 93216b2f9d66d423b3e1311c0573332d
SHA1 5efaebec5f20f91f164f80d1e36f98c9ddaff805
SHA256 d0b6d143642d356b40c47459a996131a344cade6bb86158f1b74693426b09bfb
SHA512 922a7292de627c5e637818556d25d9842a88e89f2b198885835925679500dfd44a1e25ce79e521e63c4f84a6b0bd6bf98e46143ad8cee80ecdbaf3d3bc0f3a32

C:\Program Files\BlueStacks_nxt\Assets\checked_gray_hover.png

MD5 ea22933e94c7ab813b639627f2b38286
SHA1 c5358c5cb7fb1a0744c775f8148c2376928fb509
SHA256 d7c79677d2ef897fa0ad1efc90e916c46da29f571208f78f24505603b7165c20
SHA512 ba447a1aedec49419e2b4a8de85c6047886f1a5ebb94f1c45e205a3780c6826f412a3892e97115b35e43839f43e346f3c72ffbf0c57d57f6d26b360ae61b3964

C:\Program Files\BlueStacks_nxt\Assets\checked_gray.png

MD5 ce144d2aab3bf213af693d4e18f87a59
SHA1 df59dc3dbba88bdc5ffc25f2e5e7b73ac3de5afa
SHA256 d8e502fab00b0c6f06ba6abede6922ab3b423fe6f2d2f56941dabc887b229ad3
SHA512 0f930edd485a0d49ef157f6cc8856609c087c91b77845adeb5cc8c8a80ebc7ec5416df351ffa1af780caad884dbb49dcc778b0b30de6fb7c85ffef22d7220ebe

C:\Program Files\BlueStacks_nxt\Assets\installer_bg.jpg

MD5 3478e24ba1dd52c80a0ff0d43828b6b5
SHA1 b5b13bbf3fb645efb81d3562296599e76a2abac0
SHA256 4c7471c986e16de0cd451be27d4b3171e595fe2916b4b3bf7ca52df6ec368904
SHA512 5c8c9cc76d6dbc7ce482d0d1b6c2f3d48a7a510cd9ed01c191328763e1bccb56daeb3d18c33a9b10ac7c9780127007aa13799fa82d838de27fbe0a02ad98119d

C:\Program Files\BlueStacks_nxt\Assets\close_red_hover.png

MD5 5ceab43aa527bc146f9453a1586ddf03
SHA1 88ffb3cadccb54d4be3aabf31cf4d64210b5f553
SHA256 7c625ae4668cc03e37e4ffc478b87eace06b49b77e71e3209f431c23d98acdd0
SHA512 8a5c81c048fb7d02b246ed23a098ae5f95cdf6f4ca58fd3d30e4fe3001c933444310ca6391096cfaeed86b13f568236f84df4ea9a3d205c0677e31025616f19e

C:\Program Files\BlueStacks_nxt\Assets\close_red_click.png

MD5 6db7460b73a6641c7621d0a6203a0a90
SHA1 d39b488b96f3e5b5fe93ee3eecb6d28bb5b03cf3
SHA256 d5a7e6fc5e92e0b29a4f65625030447f3379b4e3ac4bed051a0646a7932ce0cd
SHA512 a0e6911853f51d73605e8f1a61442391fad25ff7b50a3f84d140d510fd98e262c971f130fb8a237a63704b8162c24b8440a5f235f51a5c343389f64e67c1c852

C:\Program Files\BlueStacks_nxt\Assets\unchecked_gray_hover.png

MD5 62d7f14c26608f8392537d68f43dece1
SHA1 add4f30e7c3af4f7622e6bc55d960db612f3bb0a
SHA256 a631e26bd5b6ea19c8c65b766a056c92ba8a47e1483768dcf12b05293c9a7a0d
SHA512 e41210a78e6076954f75a2f73c0f7628e8604a09ecbb1d2ee0972741d4ef1d814b366828977c02944736b03ed116bc559a2ae47ddb7cbc6f4e54578c8263edf4

C:\Program Files\BlueStacks_nxt\Assets\unchecked_gray.png

MD5 e50df2a0768f7fc4c3fe8d784564fea3
SHA1 d1fc4db50fe8e534019eb7ce70a61fd4c954621a
SHA256 671f26795b12008fbea1943143f660095f3dca5d925f67d765e2352fd7ee2396
SHA512 c87a8308a73b17cbdd179737631fb1ba7fdaeb65e82263f6617727519b70a81266bb695867b9e599c1306ee2cf0de525452f77ce367ca89bf870ea3ae7189998

C:\Program Files\BlueStacks_nxt\Assets\powered_by_bs.png

MD5 7a2e5c21140aa8269c2aafd207f5dbaa
SHA1 4e0d9e7e1b09e67eba10100d73dc51623517821e
SHA256 3d2afe5236ec813d9e8063bc43eb34b88c2155784e1bce19c6a533c32767af35
SHA512 63f512559f2068a9702c7c527c126f6017cd8d1d16af52e41b884aa9a64ff4294a57243ec78c3a416f70fb6178a79877d68345357725ff92c935709a2ef8adde

C:\Program Files\BlueStacks_nxt\Assets\installer_logo.png

MD5 e33432b5d6dafb8b58f161cf38b8f177
SHA1 d7f520887ce1bfa0a1abd49c5a7b215c24cbbf6a
SHA256 9f3104493216c1fa114ff935d23e3e41c7c3511792a30b10a40b507936c0d183
SHA512 520dc99f3176117ebc28da5ef5439b132486ef67d02fa17f28b7eab0c59db0fa99566e44c0ca7bb75c9e7bd5244e4a23d87611a55c841c6f9c9776e457fb1cbf

C:\Program Files\BlueStacks_nxt\BlueStacksUninstaller.exe.config

MD5 ca0a329097316832e4a6ea5d870c9268
SHA1 4a36b93361d3dc9df9b00313f2c2b394be9e1e72
SHA256 4b7df915d706af6459c38d75b09c5e14f951842ae0678078400f204ad1c7a7c2
SHA512 51f9a874e84f130be4fa29fcc4bc934105318234b5dd9ceedaf569e3f0e6b38e29f3bec056044724476ae24295a510b16d8a737b994fd6f1268609defa315271

C:\Program Files\BlueStacks_nxt\HD-ForceGPU.exe

MD5 f42fc8120918d880f49dd8a599e9628c
SHA1 9929ba01ecfab0ab80afee6e0d9d617384b826f8
SHA256 a6f7c313ed92f8eabee77503a04f6fd11227718fbad706e0002a4a76c6ad8c28
SHA512 84fc9c091839dbc656b9896946f5d2bfc047adbcc604fa72ef7eccb67e32b9609db45315133e4e939088b2a240b766f7a6a94b215f391b2849a3f40328c4304a

C:\Program Files\BlueStacks_nxt\HD-GLCheck.exe

MD5 e62ca2893248648c55b597a89b1c485b
SHA1 1e686d2199851c1c8e807b350570f378b895434e
SHA256 bb81765667cb98333373270a83de01ac450a72af7933864ffe9dbe12fc4245db
SHA512 e25a87f8432d25315f54a2effd79780d00b3ac43e6c1aa571427f7ab48074c8633b90ce2668129a8bbfb5de64eb89cad99705e2455bb6c9d6c1b013d21b42ad0

C:\Program Files\BlueStacks_nxt\ProductLogo.ico

MD5 169706218f98a42594a8c5c5a65771fe
SHA1 b8ded94180212578d86a031eb71ef93dcffe1a26
SHA256 3803045963af064936d7071c178de8e40854968b3d3f9171c57a182c869f3697
SHA512 1c3f18ed0a24ffa78fe938826eb88531eb8be134d6f209b87d7af5d0e8c4829f01947d7b0048996b9755562bbb7f52e000bcd15d07d646cacb2989ac881ce448

C:\Users\Admin\AppData\Roaming\bluestacks-services\config.json

MD5 38f3dcc06c48b360aacca69749640615
SHA1 f9fe61d9a980f8bca4b8f2c7cb0ed5ae603f776d
SHA256 9029e64e73eda18f02864b19f687e4771f06d57a95d235c1a66c2ccc8b705987
SHA512 52d6898a8cf0b93e200f53d021f5d495b0b2d4a10d548a4f1c075ec33b2c9937adae5eb1e62ba4a9aa89ce63559dc67cd19a064f487131beb9993bb493964432

C:\Windows\System32\storage.json

MD5 aa9ab927f7bc1bc84ada9519e58f9650
SHA1 a9515474d15f9cd43c4f1c30b2c7041d6c6b05c4
SHA256 3cb23b535845ddd6fd6160dbb5fb6b14096161d3e632e0dc424a788875c85094
SHA512 b5bb47ea20ec20587e29dd3b6f8f68e7f8ac567e087b1e432320c3264769ae5e03b16693f5c9d4ba38a0c67d2f2a071b3ee7d104e75cbfaa0aa9342515f0085c

C:\Users\Admin\AppData\Roaming\bluestacks-services\config.json

MD5 7d0e21616da232bf0015e6a278232278
SHA1 b32b2b01d710e2b01f672d02248350225b8247a9
SHA256 d3534319e4c191321adf26337f0b34a4d94604cb8599ce2e12af8c84fe702713
SHA512 ebca7e08e3deae067a606797085c16a2d2a480cb9012aea3a83b34f8ed915b4fdfcd94fa5f93112cc37c661417284f626bf7167a92a1f9a283265b858a90f16d

C:\Users\Admin\AppData\Roaming\bluestacks-services\config.json.tmp-0996063984d9bbbf

MD5 623580d16874546a09f8adb74409403f
SHA1 e26ce79de13b30b0a52e81fe1e6481dfcaf57eac
SHA256 dfea56a2bb183f682c01da66093934bfea8b9519893e979bf01e1cef8bc551fd
SHA512 2040f24a7dc07efb0ac7d9983e7d1fc5582f3c008e44529baec65927ee94b618fa1de936cf331b8bef544bdc9f0ccb5dd28e12bb150171a28781997d50e58b0e

C:\ProgramData\BlueStacks_nxt\Client\Assets\exit_close_click.png

MD5 b09525b48c0023f893d6b64d06add4b1
SHA1 10ecd439ea04e02eefe17f6c110d0c0a78a1db21
SHA256 caa2a8fe9b282939a21b86f8f61fb0c9452222cc3409f06cbb0dcc45613aca8e
SHA512 c6f5a7014c24133eb576708ca17d15becf2b45ec278b3f94e5275e47c78cf0f2eb8bb1a17d277d1a665039f38f2e25faf830e275f426b0a94c6a3da096b6204f

C:\ProgramData\BlueStacks_nxt\Locales\i18n.ru-RU.txt

MD5 a7748f70870a0f2cf2e5804d05f433fb
SHA1 ee74469bbfa6e5d04043dae2a2cdec1a777c5b28
SHA256 f74bceefe2a7e7d39650128096f9b97aca5e929fa67e451bfa8238d7b90cea34
SHA512 122025652c05ba9336b339db79b925b781862a635cdb0c8d5db0adacfeb6e0e43ef85c283d417f119d8622640d0ed15cdc6d915749ee3cc1a4f89b062ae71075

C:\ProgramData\BlueStacks_nxt\Locales\i18n.zh-TW.txt

MD5 3ab7d825111b89950d8ca4b3da1c00c1
SHA1 cdf4ec4344598ca9593665465497d370a35aa178
SHA256 dd286cac4e14fe69877e4c2f35eab8352de125f7dc757f47e4fc8329572460ce
SHA512 ac0c2dfc6a963a88657304c83d9f00cdadb5735f208571e72d43c410d767ff6c2cd05c4fcfeb5d4c7f8882e079608e8eeee8b1aea1e2cb6442f78cafaa8ffd09

C:\ProgramData\BlueStacks_nxt\Locales\i18n.zh-CN.txt

MD5 1eee99faa98b0385fd8077acdf53e81e
SHA1 3191f6c03d6fd3b4db1944e3e7b3a8b85ef20dde
SHA256 7d245f9271426eb08f976a83e8b229e9a830f51674e47b6bfc2181716ec0ecf5
SHA512 d2c116c7c56d7fd6154c2ab856adccba5848ba1fe1ce5ae38fd740e388cae77f095feaf90d4161527a4b3c99c129374156f85033c18f3293defde33f78708691

C:\ProgramData\BlueStacks_nxt\Locales\i18n.vi-VN.txt

MD5 2ffe813470cfedf7384207e61dabf1df
SHA1 1673c446a89a41afff299acd0f74b4df65cc29c1
SHA256 e666975aa6894c7d5230eb44a6ee85564cac7a51188ed05b77059beb60545ac1
SHA512 3288001e68c5533ae092460d7bcb20ca42c37c04fbdfd412c1046ba41f0582ca3a135f136303125f680165c401536b9bacf6d6435e10ec1477d7f9b45942c34c

C:\ProgramData\BlueStacks_nxt\Locales\i18n.tr-TR.txt

MD5 2ddee14b7986e234a208189d650a2e4d
SHA1 ab60bc9393258e556c7ac20a8d68f632ad44ea6d
SHA256 fd9c690e597fc7d8b3bbcba7e39816087c424227f89bf3107da7d16d444fb3dd
SHA512 116d06a37e836d4f48b59aa9cf4164e1ba4abc081e62adfc6f3c8d112f46b57c060381dd2fc361fb83a162ab12f915408df193bdac405490e3014bc0effecc9c

C:\ProgramData\BlueStacks_nxt\Locales\i18n.th-TH.txt

MD5 bfb84603722e804e4697a52285b867b2
SHA1 5840e5e93319f981dc0f6df4c7d7be23547f6655
SHA256 98f156d8184c10d504189eab0077aeac8687e1d6714d0bb228704d660e01446d
SHA512 e26cc6ab7087a252471cd6233e3baa9d9a66c0a7a0b3703987b31ff4f91f89d00854d8d970f3090b2d90155d5eb5f724a096badddbc6a4dca7dd1a53fad6ffd5

C:\ProgramData\BlueStacks_nxt\Locales\i18n.pt-BR.txt

MD5 f7ec10775c6fa5d5ab49531ec7910ed4
SHA1 9d3b8f8474328725097de234a961b32b2e1dc9ba
SHA256 909f5b1bbfd2cc1779dda1bf4f481c1d6ae1e1af3d9902c1518a535962860668
SHA512 d7d8ea4c15d54d9e4a2b75e4962ac9b81a316d23803c64c8925ffe6348b200fe21d445c6a0b0bd1a5b0a7e413bd5f5ad8935ee15cc56485886a5f4b29e51963b

C:\ProgramData\BlueStacks_nxt\Locales\i18n.pl-PL.txt

MD5 c61810a689ad52145f3b644b3e4b01e9
SHA1 ee7f7229aeea4a0ec6e18805b69d0ff928afbf87
SHA256 c5cdf3696ccd6e3e600483836c81b290e5270984fd7ca12becafedea42cd64e4
SHA512 79dcf55c6ac864764fa4c614667053c99cd37f408b2b573ce18077fd09ba70877b3cbbd1f57b680ba6e9b5ed5a4d257f11d12c67a0b56dc9a099bf2584e0c393

C:\ProgramData\BlueStacks_nxt\Locales\i18n.ko-KR.txt

MD5 299768cf839ca0926344233731549181
SHA1 773aa661c5bbc1a92a41b2f02e59bf1d78b4b142
SHA256 883cf4af6b2124bb70f51d683c7a1f4b3cecccc4ea61163b8c4ea967155ea839
SHA512 0de4317aa9139b415d4d10aba7f64cbfe39f0417e2d19dd8e69ada7d0915a81f71be242caebf5e019a2638d6d0457c042493c80ea0d24c2dd43c18bfe76dd2c2

C:\ProgramData\BlueStacks_nxt\Locales\i18n.ja-JP.txt

MD5 cb5797745966bfbded96d28cf53e2f93
SHA1 1cdc380338f076c608a4143cb685e4cab2bee916
SHA256 25fbeecfbeec0b2a8ad45f8b7da31c4eb6fdbe413f46e75f40cd22d874c8f7c3
SHA512 f42ef0a3566f02a4487daf50725c186a0cd8c03850c569eb0cf4134ad2c2004135730ff8f672207bf12837980fe722c4581bb0c6c1eea5dcc9014da5719901b7

C:\ProgramData\BlueStacks_nxt\Locales\i18n.it-IT.txt

MD5 444e991f12d84ad04baf6c8eeccc7a9d
SHA1 f4bec5e01161d6f5cc9107f2cba325cc9b0ef325
SHA256 4b1f6e0fbc834a783ab8230e678bfd1506ae6c18b0ac0a5bef1d8344b5b2531f
SHA512 ff61397322d86f36a225e9be7444c643e2760a556311c97b230583b0b2788208d11f723e500c3d291d55d076b5cb0a52d92b50a8b1fdfe348fd61341b915f855

C:\ProgramData\BlueStacks_nxt\Locales\i18n.id-ID.txt

MD5 08c0671314dc5408b6becb80cc5f1c74
SHA1 415734d91ab34bba578acbfae85d5976090777c8
SHA256 74d906f8e58094fad1006b44298a42fa1253e6b78634de5e53853e6f60869d79
SHA512 1c35bef1a3918f2f2f4d996188490086c3fbf44ad8b7337c2f5a0007a7e5a4efea418b77faad118ae74659f96770c324a8a0f02b4e50d6605f823abab0558098

C:\ProgramData\BlueStacks_nxt\Locales\i18n.fr-FR.txt

MD5 2625613573f48fa7eaa813d7fc16b63c
SHA1 a57a1cd71dbf2dbabe8bc873839adb2005f54c7b
SHA256 08062a8ae430d89af04c9d090506dd6e380490387eb2909f356a47c01540b271
SHA512 8a443771fbea7708479412c5d6c336e5e74745e097118712fbecc279277ecc2ff693ddc8e576f91c6b61ff658d7a576cd37c5b084d5116bc9606434fbfc4222b

C:\ProgramData\BlueStacks_nxt\Locales\i18n.es-ES.txt

MD5 412ce0feb5a656c908775da52043c31d
SHA1 54a35431dc77d66fde2c828f10372142926b4c47
SHA256 7db48c44d717c50011a2fe2d8f5eb0214c817c7eef5bf1f656feb70270a53458
SHA512 2209d911c91d21ceb44a8e9375fefa9b5ea55cb800f49f709a7baaa56d52a94f5711fce850d880394f6ae78d23d0e3f1a5727514b970f940d0b670e2e978a997

C:\ProgramData\BlueStacks_nxt\Locales\i18n.en-US.txt

MD5 a1e3293265a273080e68501ffdb9c2fc
SHA1 add264c4a560ce5803ca7b19263f8cd3ed6f68f0
SHA256 1cb847f640d0b2b363ce3c44872c4227656e8d2f1b4a5217603a62d802f0581f
SHA512 cb61083dc4d7d86f855a4cc3fe7c4938232a55188ad08b028a12445675fbff6188bb40638bd1ce4e6077f5bfc94449c145118c8f9b8929d4e9c47ed74cf7bece

C:\ProgramData\BlueStacks_nxt\Locales\i18n.de-DE.txt

MD5 defbcf66edf5e18b0b13c8062fdfeff8
SHA1 8c807de19b131831b72325455f1bcc3ead0a09cb
SHA256 a9d87275086fd2d700d588f45c3121eb6a75c64a2e6c4a8714a61032403cdb03
SHA512 a30e142679e942932d82fb8179a9f8ca2cd5882577de64e8e4c38eb84c99e359235346c35b6237133159288261b0f6e9032dc6b14f512e2a431f093187e1447a

C:\ProgramData\BlueStacks_nxt\Locales\i18n.ar-IL.txt

MD5 9fb07e066cc2f213a64d35a97a8c2922
SHA1 a70db989f5c562bc69caad89a1402c8ad7c9b80e
SHA256 65e7b0f37b5e2aa805ac8d57969804d803430186f34e9703ca9fa09ba908ef90
SHA512 81680bff55b475a62a4bf29a8c219230b84894c1165f60e372209a5aacdba8e4819c3dfb76f3b55c15d472ababeabf0cd4b30c04e7daa26df63c8a5101970c3c

C:\ProgramData\BlueStacks_nxt\Locales\i18n.ar-EG.txt

MD5 7dc7a16b5e42818c9249db888ca17075
SHA1 42f6b065b90017078fca7161cc4c26ae530dfbdd
SHA256 e696f4f231acef534d62ec9d99a3f4fc7b74a1c1deb3f9bbbeb4e94194bd9747
SHA512 f2706e0bb348a691d3cdc9d05ff4f71979804628547a41386aab068b008fe4933b8689500b5e45abf6afa6b6f1db3024ade2846659b2664b37b724fac5416a74

C:\ProgramData\BlueStacks_nxt\Client\Assets\radio_unselected_hover.png

MD5 22efccf38e15df945962ac85ac3aa3b7
SHA1 b94a8615dc92982e1637680446896080f97c2564
SHA256 0ec39ed4bf89a341f1b5aea56d0e99ff5c923b9c3a6a81adeb9ff21764136f92
SHA512 41a4dbb57abed1a16aa84c72c202da461ca45cbaf68f69a10cb3e5529e8dff659e89f7f4459d1e2e8f3549c6fd51f23fc8422f86667577ebed5ab5df149c79ee

C:\ProgramData\BlueStacks_nxt\Client\Assets\radio_selected_hover.png

MD5 47ff3e4cc15b8c4a07e3ceb6cb619b62
SHA1 0318e54c613b8ff00f54d843e90ef88310c1a96f
SHA256 4786cfb7c98edcf01d6b670abf19c50891d56a4de87b96a5e17be142b1af666a
SHA512 0212bd7f6cee390d3bc221a22189b75407fa660a0951c7f768645bf97e7b61ee86fa9b1de6f546ff1151560dcb3b071db8c14a7b08b0e771b539a817b31b154e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 fcbb6c154a5b296f87f9f6125e9eeb6e
SHA1 e1cbab5fb9962e1629d277b4f4247de2b3889124
SHA256 3ee4d5b88565f13e63828c5047b8d37ce96b43fbff2d1203c5ea3352350cd47e
SHA512 1ed2b0f5a5efa62b3d051b36f14d72023bfd69392448cde072963725a183b998910a1a0d62ee808bce6f0e0bb8b0f361289a794e699aa7daf0915d868485848a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 0775277ff9fde5be22ccbcba5c9a4787
SHA1 12276652e9b34a1839ecfd1560f16dd6458d6ce8
SHA256 d543abb502d69492e8700a5b0dcce8dc1461f53291fde491855fe9fc27756f77
SHA512 03ef5058031b94fddbc2c2e36cb28edc1b1985acfdd08690f4abd6fcc14b3900dac4a252ecc0236a5a38feaa5895f75ff9b1fcd3963f65492c6ad1830e034c84

C:\Users\Admin\AppData\Local\Temp\4nacax5l.qfy\BlueStacks-Installer_5.21.600.1019.log

MD5 a17e8d8249b5831d63822bd61e5e38f6
SHA1 610a99061460bb3ab77409fb959f48edcb8d0e4e
SHA256 1cf82dbbefd369abaf8ed19c736155fce3a3df73996a008527a969779153ae89
SHA512 19ee882c1543cac44f93daeebf4f1b72a679dfd2b6420c2268f9a1f527ed6f4261ea1c2f3efeb174c0db857a2aa4d84777266269301be07686303c60441a31fd

memory/11356-12374-0x000000001E5E0000-0x000000001E5E8000-memory.dmp

memory/11356-12375-0x000000001F570000-0x000000001F592000-memory.dmp

memory/11356-12381-0x000000001EAC0000-0x000000001EB9F000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 02a4b762e84a74f9ee8a7d8ddd34fedb
SHA1 4a870e3bd7fd56235062789d780610f95e3b8785
SHA256 366e497233268d7cdf699242e4b2c7ecc1999d0a84e12744f5af2b638e9d86da
SHA512 19028c45f2e05a0cb32865a2554513c1536bf9da63512ff4e964c94a3e171f373493c7787d2d2a6df8012648bbefab63a9de924f119c50c39c727cf81bdc659f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 826c7cac03e3ae47bfe2a7e50281605e
SHA1 100fbea3e078edec43db48c3312fbbf83f11fca0
SHA256 239b1d7cc6f76e1d1832b0587664f114f38a21539cb8548e25626ed5053ea2ab
SHA512 a82f3c817a6460fd8907a4ac6ab37c2129fb5466707edcfb565c255680d7f7212a5669fe2a42976150f16e4e549ea8310078f22ed35514ee1b7b45b46d8cc96e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 ec52adcbc539b1253920a27e12a64603
SHA1 27b6e1f1aedeeb9cf47eafe73bf5f273931e7076
SHA256 834066b89ba61b527a0021feb3ac64f71ef06f4f6ad735354f25c513ccb3ed76
SHA512 4b6593406736a867b4ff341a9bb31adb96c38883e022b444f935e8edf39808cd99c8b0b61fa7f437ff8b0d4c90e6de8f9ea83bf9d8f26d6d44c3a3fb01f28e0d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 b883187bd6c642e36c99c6c60c69f7c3
SHA1 73432157f02d34f8603285f1ac111d64501cd814
SHA256 9d01b54c3db63c3c31979d436d4f63731b025f7683665c1a583bf8c56a9064a2
SHA512 fbf65811b7d1a496069ba0bf15bb2d5b8acc22c5aea09871cd3b34c85849fc59630db7346cad8b75fcc736d101356acb4bc4bae9656c606593c94af3073866f8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 3fd6b4fe1914d1f546b6d5917d60e7aa
SHA1 aba3f9582187272d65c748bd2fc3b356deaf787f
SHA256 b1048e5f47c4787660f8a86943f26db85943851d7f2cf8239647d2ea43dd8b15
SHA512 29e8e1aa49c1a84464f72e4383ab72de53b21dbe17c96311197bf9c176138092b41471aadc22998cf35888d679598d565a30c7feb145e5ce76241dac394f13db

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 3a21509391ea0a9bbe24cd93836f9aa4
SHA1 ede45822ff248e0ee6201c202beda8c7fdb9ac60
SHA256 3f00e4bc170013f3092a84e135922637d75c7b53ec8a49c79155be03f548b5f4
SHA512 320ed1d6f57e17669848295bf3790c96ed16a93ba87bde97215cc5cd9072a619445f233f3fcd8707ddab5b9d30c53179317aa52df547afddf96271825c0ab679

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 e03f1e637c830de738af06a94a5e78fd
SHA1 7e8fb03bfd0782e1dd4933f84e0b889407708d1e
SHA256 89ce44476000290d4ec6e2828425ace1daf36da0487cd4257f53b63e6b52d7aa
SHA512 03065615f4b86c5228bf3266d814ab339f7519ad5e25bb70c0640c5db016e9f357335fdcf7b72075f14b415b0bccab59aa30b7202ab7da7506c56579216df08d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 11af184391a4cab5bf2b8f5203698998
SHA1 14a5889e521fc9d5ffe869ca6e995ba3797fcba1
SHA256 4f4a6d663650e2be98848cc329fb5e7cef500b5540a05e1b030d0475b87e9625
SHA512 8891c66e850e57c43b721d81935c7852d007b91fec94a4cf9c1a6c93450694cc959368f66914366de2629fa69232388e656a4f879c35f04dd182b884b764529c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 c976947bfd459df932302333b92e6b5d
SHA1 b0878275d90216a82ca9681b079b86070d067e9c
SHA256 5e9a3405aadd20acad10fcec18016db28f952bdab3485567d113204eccd2d41b
SHA512 659d365382e2648c128b4bb0484a959966f5c10af1ffe97c8af9251acf388a2aa816efad69ca787eb4b2fc88403d3dff48d64d93d9b3651c571694a0ed5098c1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 5d153beec7561cd5164124eaaf7b30b2
SHA1 3dd29a6b3bf544cb1e60c0a7b5acdb8d5d696c0e
SHA256 548d33721aeaf2081da96a786473f07ef12162cd98ea70cb9ded1e03c6660836
SHA512 291a75fa013d4cf24697d2cb6b1b6354114af782c0c4a3fc8ecc1d14b3020018de590f4bc58f805677b645558d21b3c6f56e222f40b1fa3bd3efb1f3ebd47d46

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 0179acae928064e11231fc78a5b7404e
SHA1 4cc4411b8fb6c1c03c80a6712bc8613055bc97c9
SHA256 43678876fe5acf336d308aa374b71d59acf331458dea8bdcc031c77a5774a06e
SHA512 011b2f9ea77d07e7e3953566c7cb139292921e561eb818ef59fcd6c2c7ce0ef3b2e890e6c2ab74f0dfc59c8ca064d045fd9ff3c2ed0512cdf1cb53cedbcf0899

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 a8d2d5a9fc89f417d58619fe510c066f
SHA1 08d1687b8ae42d9aba19b68299917862fae0b3e8
SHA256 f33b3f07ddb82044718f4c28ca22d0e9d98f825e72c0346576bebf9c484cb0e3
SHA512 ac7df7e718b5f85f5e977988e5bba6d22d8ebf8ea39f5a4fd1cc6a02076ac16663b0157dc035d517800b5119f6eadea97fb987aae0d3e218adfe7b5701e11194

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_1

MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\BackgroundTransferApi\71f8918b-3c56-4214-ad79-76d20420f0b7.down_data

MD5 5683c0028832cae4ef93ca39c8ac5029
SHA1 248755e4e1db552e0b6f8651b04ca6d1b31a86fb
SHA256 855abd360d8a8d6974eba92b70cbd09ce519bc8773439993f9ab37cb6847309e
SHA512 aba434bd29be191c823b02ea9b639beb10647bbe7759bbffdaa790dfb1ec2c58d74c525ef11aacda209e4effe322d1d3a07b115446c8914b07a3bce4d8a0e2c3

C:\Users\Admin\AppData\Roaming\bluestacks-services\Network\Network Persistent State

MD5 4b75faddcf39f080ba3f3859ab88fe36
SHA1 d0c1ddc770d7b622fd231d7828856f2bcd74e2c3
SHA256 5853e5478bd8fea60026be9e145fa7eb25c63c628439d186b9a6e22150e715f9
SHA512 d647766acd4d77b41d4eae54f295213b41d1f9afc9ba690f7dacfabaf522e854a38d2011689795d4a5a47f60971c094e807e529f7ee9dcaa032aeaf7bfd364af

C:\Users\Admin\AppData\Roaming\bluestacks-services\Network\Network Persistent State~RFe5abe8e.TMP

MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 cf2b3564d17f5f64368f53b4129b654f
SHA1 9b49f988e3103130f0b2e37c200dda84e3370c29
SHA256 af14bd82288a722129aa170bd88727b4a82d060c35453e74cb89f8b1a06bf943
SHA512 ffbea642a8fcec782a7d453849aa00822c003281670a42ce0735c6054059c6d47fadb1a504822a0b6d96d54a878123ed940d9e3d77e6f0eae4689fcdc959dbec

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000060

MD5 87e8230a9ca3f0c5ccfa56f70276e2f2
SHA1 eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7
SHA256 e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9
SHA512 37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

C:\Users\Admin\Downloads\Unconfirmed 103494.crdownload

MD5 8636a5fcea3abdd0fed43c8bdc27c5ff
SHA1 58a2064066a8b4a34c478b0ecaa1ddeeada095ad
SHA256 d7128f6452610452b737d188d167151e97dd714c251e70dc521032835a090486
SHA512 3f475f6a13e96513cf151e44927abd79a45d5a5f23ec68211661029d40c69e2b81cec66f20818e1be575c4e2b6b0ca028b2ad70af7b87929906ea7c6733dbc10

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 2ac6c2c28338ee8163489abe72961640
SHA1 856da5087217e49c54afb6e4e0668f4682a5b75e
SHA256 e52c847082353dee48c3e489c2df712f5727b0dc99a4a6e313622ca0bb382ae9
SHA512 8cde5a2320b9395a7020ff70f99d36683b27d551128b3e5a695ac0d4c1590446f9a5c661967b0928ecae93c3326bba56b52025180eef5da4a54b538bb16a0784

C:\Users\Admin\AppData\Local\Temp\7zS08BC8D4A\Assets\minimize_progress_hover.png

MD5 fc2a0361a751177d3aacdba9c31b2682
SHA1 0a8f672d7a8777d1106e3b8ee36bd6e45bd322ab
SHA256 1a4aaa46893e2a9b011c478fbb0cd0e84c199f9f3520703189640088969ef5cd
SHA512 a15542c90972387133d86f6a94c17435432b1493b02502533c4d7978428ed7d44a7d3c5564fe08946561638f8a5a3dd0b35b81979c2929dcc386ee5f6f7ecccb

C:\Users\Admin\AppData\Local\Temp\7zS08BC8D4A\BlueStacksInstaller.exe.config

MD5 1b456d88546e29f4f007cd0bf1025703
SHA1 e5c444fcfe5baf2ef71c1813afc3f2c1100cab86
SHA256 d6d316584b63bb0d670a42f88b8f84e0de0db4275f1a342084dc383ebeb278eb
SHA512 c545e416c841b8786e4589fc9ca2b732b16cdd759813ec03f558332f2436f165ec1ad2fbc65012b5709fa19ff1e8396639c17bfad150cabeb51328a39ea556e6

C:\Users\Admin\AppData\Local\Temp\7zS08BC8D4A\Assets\setpath_hover.png

MD5 b1e53a76b6ddb3ecff52bfc1a8e5b09d
SHA1 012b5879e879fa25bf48e4bb62c35ee829eea571
SHA256 2da3f9367c847e47131370dd163f611c4639287512a47f487e0025c5665830e0
SHA512 4369891858b4adaf9144636c44b55979290177bcff57f67f341071e42e90f992531024e122c0bc5436ddb8c55e994e7b913ec37137a642dc0164e6e2516f0b68

C:\Users\Admin\AppData\Local\Temp\7zS08BC8D4A\Assets\setpath_click.png

MD5 624e84e9b49bc150043aa9fb0eed2822
SHA1 f23f2a4ec609e3e9cff9319533e561968ccabb22
SHA256 c94924e95a49b175c8fc00bdc2821bb70a85b864cc193becc553b32f0024dde1
SHA512 288e1954d29bd3d22b56fadb2e0d3d10580a540fa1f2bab1284d957708bad96df5e38b67c6dc14784e1e275b89082c57370b786c0d0c4307601c0d2bf3704460

C:\Users\Admin\AppData\Local\Temp\7zS08BC8D4A\Assets\setpath.png

MD5 b2e7f40179744c74fded932e829cb12a
SHA1 a0059ab8158a497d2cf583a292b13f87326ec3f0
SHA256 5bbb2f41f9f3a805986c3c88a639bcc22d90067d4b8de9f1e21e3cf9e5c1766b
SHA512 b95b7ebdb4a74639276eaa5c055fd8d9431e2f58a5f7c57303f7cf22e8b599f6f2a7852074cf71b19b49eb31cc9bf2509aedf41d608981d116e49a00030c797c

C:\Users\Admin\AppData\Local\Temp\7zS08BC8D4A\Assets\installer_minimize_hover.png

MD5 18fb6465b029206477d0222e8da6fdf9
SHA1 b7f91e5e3002a5d3c84a30ca6cebe1a89a65ba7b
SHA256 57aae4bf49dcbb0ad6cff6263200015c89d7752dc75c2ad918bf846e1ce9646d
SHA512 f045dfed35ea9ff31336cd354a0dd2e9a7ac2582cea1d25a444fffa3bd01e03d73611f786873a81a27a370e5ddb3a6043713e29f064d274088df1c925eb6785f

C:\Users\Admin\AppData\Local\Temp\7zS08BC8D4A\Assets\installer_minimize_click.png

MD5 08fc39a69fa17e0f529915919cea1633
SHA1 2966a3f739698e2ce368585fb7f6ac4eae4497b1
SHA256 2599d6a55a8e12b1f05a6e8982d55559151a25ae3690e6637510b6283622dd95
SHA512 f5eae902f9b631410b03b6d4f9be1b4cf6547a94f1a2eee6bf70b0f3036499c01a42c9d58cf98ffbe10edbe79577a01e64faf0e527a70bc9470a1c3d9263b805

C:\Users\Admin\AppData\Local\Temp\7zS08BC8D4A\Assets\installer_minimize.png

MD5 38b539a1e4229738e5c196eedb4eb225
SHA1 f027b08dce77c47aaed75a28a2fce218ff8c936c
SHA256 a064f417e3c2b8f3121a14bbded268b2cdf635706880b7006f931de31476bbc2
SHA512 2ce433689a94fae454ef65e0e9ec33657b89718bbb5a038bf32950f6d68722803922f3a427278bad432395a1716523e589463fcce4279dc2a895fd77434821cc

C:\Users\Admin\AppData\Local\Temp\7zS08BC8D4A\Assets\installer_flash_background.jpg

MD5 08d091faf58df0ea8218d7e08140bbeb
SHA1 38ebf2763bd2082635a5971c4302021ecaddc0d1
SHA256 7e5f6998d34d56aeca87f676c12a42c6c4362ae16a753dc567aae00e253b0817
SHA512 5cfede2ea2ade7bbc4b63475af5eb52f78af567fa7096a2ead396056271b8745df4dc6e11e4328151ce59ab74c6c48fd49cd13e30f7f4b86c566757e310fd5e8

C:\Users\Admin\AppData\Local\Temp\7zS08BC8D4A\Assets\exit_close_hover.png

MD5 92c2bf222d6ab81fe7a0c072bf31c107
SHA1 8853eb08a2aa3e99fae6dabb9cff6461704f2a2e
SHA256 bcc053a9a087e077d58114106d29701a34f7851f4052f3157102811355d3e709
SHA512 6548d0038f4bda1db69de0729cc9648725d744953649a396b9147afb16abf018a5aef7ff7d3bb019031863f20c81bc202d6e37d171027ab9fde3b37402e179c7

C:\Users\Admin\AppData\Local\Temp\7zS08BC8D4A\Assets\error_icon.png

MD5 dab2c4538a83422b5deae0e0de9b7a30
SHA1 78c2ab2271aa4020df1e0289bc3c1ba9a43fd424
SHA256 666ad4fe456216ddc06618967846ed31f81d8db5be97da6531842c0667352b89
SHA512 24cb30a68ce117ba16edd1e94c7d066343eb265c874cd55467db2f913c01b9d776b2ad846e3414cd820c0ba10d93f132aea27739d16165b6e9dd5fbc8890bfdc

C:\Users\Admin\AppData\Local\Temp\7zS08BC8D4A\Assets\custom_hover.png

MD5 f3e05f142e742e25a98d4f5af3ae0623
SHA1 88363e81ddef700803f4859d2f3f0b4af516bbf3
SHA256 d588ef0eaa334ed8482f32e5839a7ee0d0b544d5b8d5f7720b8c57010e080424
SHA512 5f07a7163c9834564dc4de5a1a484ac8208151bc244f8e72d64556abf88c35f6a81dd6718a3e6f681265c10e2dbbadb07570fa64c31113342a88fd605019496a

C:\Users\Admin\AppData\Local\Temp\7zS08BC8D4A\Assets\custom_click.png

MD5 ced07c9db242115400e159d9a02bb7b7
SHA1 6f2bebd1714dd7522479b5f3e3f2b3f0d18e8c77
SHA256 1318e0f34a551edae1e82818fdf7de5ac627493db5b24556d919f525052d5b90
SHA512 d52e63792a5b4172d4ac4e2d369b22b170578616d04de5a40be15b260a2741bf8158b3aed9509760c334283360dd13a4fa21538fc4547ba464be5dd700a22b70

C:\Users\Admin\AppData\Local\Temp\7zS08BC8D4A\Assets\custom.png

MD5 03b17f0b1c067826b0fcc6746cced2cb
SHA1 e07e4434e10df4d6c81b55fceb6eca2281362477
SHA256 fbece8bb5f4dfa55dcfbf41151b10608af807b9477e99acf0940954a11e68f7b
SHA512 67c78ec01e20e9c8d9cdbba665bb2fd2bb150356f30b88d3d400bbdb0ae92010f5d7bcb683dcf6f895722a9151d8e669d8bef913eb6e728ba56bb02f264573b2

C:\Users\Admin\AppData\Local\Temp\7zS08BC8D4A\Assets\backicon.png

MD5 7ff5dc8270b5fa7ef6c4a1420bd67a7f
SHA1 b224300372feaa97d882ca2552b227c0f2ef4e3e
SHA256 fa64884054171515e97b78aaa1aad1ec5baa9d1daf9c682e0b3fb4a41a9cb1c1
SHA512 f0d5a842a01b99f189f3d46ab59d2c388a974951b042b25bbce54a15f5a3f386984d19cfca22ba1440eebd79260066a37dfeff6cb0d1332fca136add14488eef

C:\Users\Admin\AppData\Local\Temp\7zS08BC8D4A\BlueStacksInstaller.exe

MD5 d2b71de5198c712593c6e9e24ee62d59
SHA1 c359fe46f9909f2f2eba37a41c283e7e1ca8e88c
SHA256 a4eebde84f0166e5ba19f8ca3e5007a1e49a3dcd1c67ee6f4275f1e62f56ea34
SHA512 48a2ebe87ee5b6e2eebf5f1ed963582be6d29f6886bf8f3573768d0d87e420b604e866fc3c91b1a9dd0141038e3736579e25a118d8abcb5665883e160eced191

memory/10476-12960-0x00000000003C0000-0x000000000042C000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 fab6cbe44a35b527799193278a162917
SHA1 76a3780fa2fc59bce9b23063772750bd99d05922
SHA256 4e76b10384e181faed550fad36922266ffe5a8fbfffc809d31ea5273db3ddc07
SHA512 f3adb1075139cb982e2a491f7a9680d70905e9d94831230dec9edb4a7bbb95f67ca9df579fdd1ca4e6da45b17cb781525b0412585daeeffc67aae728a5180797

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 3d9f3169b999e4d5f9476ee0fb6dabe1
SHA1 c7891560acfdb225f52284d37a6901ea261c9cdd
SHA256 07d593dd040322220f72cc04c69e64fc4c823ccf99c1c41a99ad7e3e959395ca
SHA512 824002f22bc05aeac20ad5415764c9a92962f2e40bddabe08af031d6b3aa07c3803e98aabd42121e73a8c15f48f421c42eba537bd3e79f9a414c8ba121f12468

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 424fe54c2008d3b1fa7af0b15a2a9258
SHA1 5a092afdbc46df990c26790c97ccb099d6c106fb
SHA256 f7b19867ad9de1749f2a8a9199e16c4d20dc148a1c1f22001314dc74f33c0b65
SHA512 cf49a7223b2036a4cfb8d730fa057629129ab5c8e4aba42a941aa42fe50fc610f5d2d778d93b3ef2da88d60e4e83cddda97639134387168d4de089ebce0e4680

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000009

MD5 87c2b09a983584b04a63f3ff44064d64
SHA1 8796d5ef1ad1196309ef582cecef3ab95db27043
SHA256 d4a4a801c412a8324a19f21511a7880815b373628e66016bc1785a5a85e0afb0
SHA512 df1f0d6f5f53306887b0b16364651bda9cdc28b8ea74b2d46b2530c6772a724422b33bbdcd7c33d724d2fd4a973e1e9dbc4b654c9c53981386c341620c337067

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000c

MD5 645dd4f674cea34a1ad038362d4f25d8
SHA1 9059d76bdc468fb4bb6695c9ec00c2e557d7f1b9
SHA256 83dbd6b510cea4c326d464d14d68c06df156d925524d351c2f100197dd2dec60
SHA512 0f8e0e7a358b3766318d04fec937a97f5c47be9eefe04f3987709371c92af21d5017c47fd4208cb2f29cefc0d5d37798ec0447fe3c94fa0ea6e631e2da6d86d6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000b

MD5 6e16a0e00a70defc9c40ae9ece97c9e5
SHA1 9772b4012ee94ed05356c98ba7e27e71283211d7
SHA256 82c83658c88de47b8e7da9904ca19299fc174763fcee974dd3c087b80b9bd532
SHA512 5e3984a7985a21d5644f5b579f32f408b28bfcb4de59764f403e4e10e08085e7b3f099748fa6e22180b6097edb4d8c20b676de182999155b13fdec4fae93367d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000012

MD5 2a64c7ce8f6abc8e2d239d6ea0549046
SHA1 d6201850fc18ce76cba539714ae1180c9a342652
SHA256 ffd7da24db93540662ab4c0a75a75f09bd4e2ca9b957ff20946cb1e2674d8128
SHA512 d20b4c8957854c07282b37237408c2ec353eb5d254efa4c8d9d0f86154f698c45325f9326d1ff0bfeaea3385899c1be9f30bedb33aea6d534b94b8430a458893

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000011

MD5 d32aefba333d125a227efee515119abb
SHA1 ebf09eaba956e4624be456c970072a2c80ea51c0
SHA256 00421dc1929f15414095312ee4abea5b272ab8cea5eb0638000426aeeac2be64
SHA512 2e23e0520b414150715ddcafc6024b005405b195c44a55182ba2d641deff5641274816bd2e7620e122882d5ea8ecfc50b744658450e514b5c3e474a968aec151

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000013

MD5 824997965060955d6ec2207be6377214
SHA1 958622fc59f41b13af3b4087f8df26da670643da
SHA256 c3794c703b04b97b5531d89e4a73b3c62edd0cab3e2c0d7d9aceaf8582bb77ea
SHA512 794d87ee0a8e95cdfbef8efdaaca293c1265d46adb40705b81c11c2738010223112157f8be521aad51f1784f028867522a08a477569a746cef0d96c9d5ea1218

memory/5896-13063-0x000001B7F5D10000-0x000001B7F5D11000-memory.dmp

memory/5896-13075-0x000001B7F5D10000-0x000001B7F5D11000-memory.dmp

memory/5896-13074-0x000001B7F5D10000-0x000001B7F5D11000-memory.dmp

memory/5896-13073-0x000001B7F5D10000-0x000001B7F5D11000-memory.dmp

memory/5896-13072-0x000001B7F5D10000-0x000001B7F5D11000-memory.dmp

memory/5896-13071-0x000001B7F5D10000-0x000001B7F5D11000-memory.dmp

memory/5896-13070-0x000001B7F5D10000-0x000001B7F5D11000-memory.dmp

memory/5896-13069-0x000001B7F5D10000-0x000001B7F5D11000-memory.dmp

memory/5896-13065-0x000001B7F5D10000-0x000001B7F5D11000-memory.dmp

memory/5896-13064-0x000001B7F5D10000-0x000001B7F5D11000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 92be4d43f3b8d36e98ec16e7ca513bd8
SHA1 c94b5c0c03a508c2a40277b515269aac2c4d0265
SHA256 7de9f69d4f5f03ad9937febde50eecf71e2351ef3a98cf5e18a4cd4bbfd7de2f
SHA512 eaf8bb27d71ca9f68c034367adfd335272fd59159f9c7508b5fa28df85d196d8f571e246a264b2b503b29e83b5152fac69d137d8a8b8b75e8d645d4b02706b3b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 fabc1d7fdd67e81dd23ec16c8d7cfc94
SHA1 ab7b3d03011dde6c94480e9d19e361ffe0ee79f9
SHA256 80f92e678f27ef52876f4b4f1dfbb0458c8d93a6f5b4f2d0efd83c800a2c17f5
SHA512 43b06dbef9592396896b9670097cfd51402093fdb21f02600cf3aff04fe58d06b3450d7d4c26d028fc412f83811b6f329dc3e32a7d6731903648a7616ca206ce

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt

MD5 46cb7641be727eb4f17aff2342ae9017
SHA1 683a8d93c63cfa0ccbf444a20b42ae06e2c4b54d
SHA256 944fff1dd6764143550534f747243ef7d84fdac0642c94135ab40f584520f63e
SHA512 dc1b5f363e90abff5c1663a82764296922c842820d2819805e87da6da1081f1b5f2d8debc83ac34a26ce289b7b22588b022433686b19b039074ae184968b9fda

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\IndexedDB\indexeddb.leveldb\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt~RFe5b9a48.TMP

MD5 27c6f1b2002452fac46720589acfa96a
SHA1 65e9c99a9bf1187f56946ada9be6987bff98d779
SHA256 1c41b8f3560f2f7b6bb6d10cf9d9db3c4e66de10bcc0741fee2014f0d3a879db
SHA512 b8acfd37cd4fa8e5a6ec119d0313a53de879a65a4a22c35ef37a0518d7fc6e61df20c68e34e0e97f18b66e2d7da3d4928aa0200798248361a02793c62f3e3087

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 db0828d3db988a4f0413066296f7f517
SHA1 3e4700c68b630454866997aec63d43eea1a15c8b
SHA256 d7b20072ee12b985a42ac9fc7cd6bce33a005467629b31882082a1c16747ba5c
SHA512 6ea7fcf7625a4d8df961b5d0623ca6e68d97fbba26c3f226136a4904823371d1ac50da234cdd56b3a9438cfd7d3df7c2dc1a7de99e25ea8f49f6114b73e8f8d4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 574d88937611f0c4c73bc844ae38ed31
SHA1 2ecc55aecb1eeb114c73d0e15222da6cd7a4e61a
SHA256 c05c0c21b65a1af6e786c37c7c0326a68bb5b1de69ba44ef0dd18d2a06e68ff0
SHA512 e21336597e794b09dc53bb76d7e3cefafb80fbeff4516241fba978446d7c97a007a2510443f7852af40a14b59b8fe97015ce4e1536843b3c757395f76ff877a5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 e4b5f7017f0089b89fe641893ab0736b
SHA1 7995fcfb66072d6c0e6fdf3852069748ddee64da
SHA256 3916a582a94aabf678ccf719c9e7ec906e27ada612bf6b374c2e956ef55a1abf
SHA512 68af863ac99dee2741038c08413d3b75c578a64e8cc2ba0d6f3ec1b5d871c07dfd959bd050e986697f9cd977d2896448c089d3208d1f5c30db4049a4e8cd750d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 e305264eb6c655ec4f4d14a5c11c94b7
SHA1 69200c8cd7bf1d92681c171ae9a6aed2d3641b6a
SHA256 3241a722cd12914571d850cd63bc5a1da53e24ac41ee85b6a9ae125ac3022b87
SHA512 0aefd4b7adc797c99a1c391b8bb0124a8ce668582f75a9abe0b85c18d4f01cecc3207b0113d8bc8559cfd413b4f401329e5e7f0b15e4e8bb175f0b1c8f0a52eb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 68a60ba94d18e370e553ec6d41da0055
SHA1 19e9109f046dd1d19eaa8f0dd3ad15cd55485068
SHA256 df3a4d2316d4674efeebc89ee2fa6279f6cc4ea2e5ebc956c1331ce39258a9d4
SHA512 d6cd186297c9c1fad7dea312c4553fb3b2a5a863a7252528785ad9b864ec76b5ee80c5d690a3be8d09471152735f819589a768f59d3c27b1c5502de1bc570ac9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000bb

MD5 feb74c32cecafc6b830fd537ea61e88c
SHA1 80c63124bba2bd6e2d3c840c41f2a7ba6dec505d
SHA256 8f6f07130ef9423b401a2fce40e5db10ea0076047545483e0a11e3f5e54e80ea
SHA512 b163d8567dc0ec9ee7f100b267a5f1b28cbbdb46d3a834473b419fbbb96692b65adde9e95df34d363e2bcd25682925ca7fa71f61f4f11e87efc44aab8dadfe8d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 9602bf2d1deae7746e7586f3bc79ffca
SHA1 b6444b9a599ccc10257b981c26121d1693863748
SHA256 d897fbb54f16a308ca77b298158996765859b299bf0349b9e20db0c360195254
SHA512 75083a24e1da627bb7a752f8ae6d60b0d4dc293ddb4941139892a962ffd651c69e3358af82d1e13e51186999c60417ed197e23d06917967a693924d9e051149f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 d738685f11223d074c5a32948c5df6a2
SHA1 014e29bec66db39fa3050518d110af9448801f4b
SHA256 584a8fd9dc1fcfdd88460778695786187212f6caeb52f503e99a3ce9b71eebc5
SHA512 d2be91a2034be2fd109387f4f9b46386cc09fb52eab0ab0c7df0b14a313c73fbb6a33607aa73fd10717a37d5c6d6577ea860d622ef1813f826e739a8f40b5a87

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 a779814f7c5b417514860ea16740cd03
SHA1 4111937219d7c45471c1d365e9baf202106db579
SHA256 c14473b7c3c11145be5c776add9282350225776e3e682f767404208550bde301
SHA512 f3536281faaf42a96bfaedc0771956aa972e3ad6b0434a652bf8e8ba7dbc24bd717c207fcf76b53e7acbabc956650857ee81922aa68c0ddb0c2bbe558e11376c

C:\Users\Admin\AppData\Local\Temp\7zS46594E9C\Bootstrapper.exe

MD5 bb476dc04dff4faa13464df575f0f9ad
SHA1 d83f5d30a54be4ef8dde8dcf6ee5abedd9fcb8f5
SHA256 8be503d9ba2774a37725a06b380732fd7e98deb69df1908aa41f8c158aa2d5e3
SHA512 bd72822e6fccdd2331c402ffb5247770c5d7bdccec8cfbe7ebb217056f5c12b2e0c3830d7d8fe69644f57049634a37673f335dccf7071ae0f936dec10678d42f

memory/400-13592-0x0000000000940000-0x000000000094C000-memory.dmp

memory/400-13593-0x000000001B630000-0x000000001B78C000-memory.dmp

memory/9592-13594-0x00000000000E0000-0x0000000000116000-memory.dmp

memory/9592-13595-0x000000001ECE0000-0x000000001ED60000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000017

MD5 cd9fd05a6ea782828f3238b32c5f75b4
SHA1 147d9681802d02796523004d75a1c9d229ff9c4f
SHA256 81fb54d92decb49e6bbe236f4534b82279a1850b87e29f830ad1d7f756e53af8
SHA512 85cade51cf1ed7733eceda18d71b8e9b8bc3055d4c1f2d9560c1a077a9ff52bbd4aa14ba00beeea64aa9befdf342c60b5caa33ef6260aec44478a948029866f1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001c

MD5 d322c21ef69bff5949c4193d947f411e
SHA1 6337128db02ccc0fc27e09f26537df984253b572
SHA256 474dd1df22f73f9b935fa25304546636a724718b57defb2f8e7934706bb8546d
SHA512 307639623de39fa40e08f825ef07885ca35d837c3e46f9c558cf3c82d411c36863af122e66f144b12c0d6475c1e32f50d28cd7f811d31edf3683c919b22cbbcb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000022

MD5 becf9bcf50aac9a74b87bc57b7f87bfd
SHA1 9736819fb3b8cb1601ad55009ef01e61fbb07071
SHA256 c8f54047390aa7d18b000754fbdfd09da21aebe12bb6d555c9e53e509054bfb1
SHA512 68d7315b204cfce8a63677e8573a4b12fae0e66617ea95f42b7f5dca3e3957821d1b97df0f19e2761d39b93df5cdb41ff041e66bde2f5b6efbf7fd63f27f2eab

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002e

MD5 ac0caa97d811dee7106e0b2154deb5ae
SHA1 ba4b8337391895d7b33ebd1b0069899b46f709be
SHA256 843e51b5a9f51caa47875ef1049b4c4f8c5286c05fa50b4e5768b905cece9579
SHA512 95123d45a693c86b69720215c233b263de4a669a9f37b3e5b837358244918e8d67be672339160d822d8f743e7b6998274ec862d5dffb3774faf9c42329db93cc

C:\Program Files\BlueStacks_bgp64\7zr.exe

MD5 43141e85e7c36e31b52b22ab94d5e574
SHA1 cfd7079a9b268d84b856dc668edbb9ab9ef35312
SHA256 ea308c76a2f927b160a143d94072b0dce232e04b751f0c6432a94e05164e716d
SHA512 9119ae7500aa5cccf26a0f18fd8454245347e3c01dabba56a93dbaaab86535e62b1357170758f3b3445b8359e7dd5d37737318a5d8a6047c499d32d5b64126fc

C:\Program Files\BlueStacks_bgp64\Assets\installer_logo.png

MD5 4cc6586c249ae201501c07fe5354b23b
SHA1 8fda8ef400f0bc25fd19cf4aa13469141befa3d8
SHA256 06f6630b150cca4ab3a00b663bfb6b0fe0c53309d434036c5ef16b3fe01304ed
SHA512 65ce7392ad4519ca51edafb5e25d60f0b0d2d37f7f8afe0394aa0594e63c38d331cd3c63aea149419dedabdc836f10cb1e9cc468c2d40afbb9e94a344a20fa83

C:\Program Files\BlueStacks_bgp64\HD-CheckCpu.exe

MD5 fe2bd5b8dacbb0e6509ab71640979a12
SHA1 1ca2c7713c0dc75e0fb071d068e7f898a5c90085
SHA256 746aef1025c7cdf9eae0d9e55362d0230a8e877f0d6749ae39c53d730287eb36
SHA512 0cd4300a71af6489fa85ee4701d583cb73f1ffc41a850b4245b0c73a892000a754548c91e84c2cde01808c1913f4bfa0e7b2263da7af297163d11e7409d2a832

C:\Program Files\BlueStacks_bgp64\HD-Common-Native.dll

MD5 a2f774900180a4d3f0c8a2ad845e0b54
SHA1 79642c490fcb39b801b0b546c6e09de22fa447d7
SHA256 46bdde1a8ab06b1eb198df1b84697dc68f78aca17ed4299e4c0174cecb361277
SHA512 7eaa599e0a9d4f73deda7f157cee35455dc3cbd9ce6da5bc6cac1808cd3bd4a858e282a04cdb2837dabcb2803fdf82b960e4a834aa3aca3a11e0afcc1c6d3077

C:\Program Files\BlueStacks_bgp64\HD-ForceGPU.exe

MD5 9adcad57be2aaf64ec94b836a80ee655
SHA1 056c0206cef3fc209d5431bb5a7e8adfaa4b49da
SHA256 4f163c738aedf878804c04fce6b52d7881453a6519486eb6d97f4c2c89e815b7
SHA512 d8515e7b17a80f2c1e22835c06ca7d73b371faa2b9c222a66ef7c3b705a755ff425e6b4e39d563d129acb1694990231d7c9ff9fde2b0d65823dcfba22c54abd3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 107afd515a101cff8501cba6b2a5b767
SHA1 a91a7433fb52bf6b948f3b64683a5b33b524f75d
SHA256 9e1d4aafcdb06d9f1007c37c5e1e13e07b9c8d09010257db0bb48a519ac31a89
SHA512 8e91db1ea91d9d50480ab3c139bf5de2fc3a9a5d0948343946da2afc9ffd27b4e88d09bb8d982f4ce2ee11075e28e4886fe1bedbacab0e4f59aaf604a56ac71b

C:\Program Files\BlueStacks_bgp64\HD-GLCheck.exe

MD5 54275d9ad503cc8aa4392c9b599c2608
SHA1 21b705c60e691dd9880ddc09aff0db0bf0daa2a3
SHA256 6e5c2d84567d72e0cdcabceb776ef1b8f20de4241c909c5cdb5a0241eb2c24ee
SHA512 32d90dc6ad51d2de504db518b3f3f87835fc3d01ce3ff055fe52449e2845afde31205d1cd45bad1cc784f35ace5a9bea6b5a003b52ee134ff65a7e7cbd3bc8dd

C:\Program Files\BlueStacks_bgp64\ProductLogo.ico

MD5 a5942793d70481c7f48ae63c420538e5
SHA1 40214f9a369c060b0302220638eaa430a0d05071
SHA256 cb5a906f88e00b20f1f47def8bd1309cb5560ed73f72ee36d2feb7d8a0be3a36
SHA512 141450371bb7f05ecc6b9724bbdbc445bf7597e7af27ce06daff6833cca28bbeafac7e61082fbcdcf8ec353cc6007fba6b2707ecfca86adb280a1e0843b90a90

C:\ProgramData\BlueStacks_bgp64\Client\anime-blue\appFrameIcon_promo_hover.png

MD5 46d9a9c0c9ca4655d442f89106e58a9f
SHA1 a32f69765cd0dcc2c8cf76cfc41848dd5346a11c
SHA256 c4e7b3412ae74a2439887967bcde9e1d6d5e146dce2b1454cabb54911af60d71
SHA512 1d88be59b922ed40dd244126ee617d7cea3c354e2a508039e1c3d4af53c55a113fee410d923234bef16be9f79922c2bf2fd0fd68da30151255b1e1a2a667a842

C:\ProgramData\BlueStacks_bgp64\Client\anime-blue\app_suggestion_icon_border_hover.png

MD5 c0220fe8de167d5ed194508305051aa3
SHA1 e0da276affd90c1c8ada0ab3a77ee7510f41b9a8
SHA256 30672ccefed0369381ef3044e9e509515e95e336a1eddbcd8df41e6df1e75c1c
SHA512 504fcba3172b59217ba72d436c2a9acc280f9f983b3c6025d02fb7d6822e14f7b4f51968450eac8a55c7ae7aba4cca32d328883f3a40278d54b9227b41d4ff40

C:\ProgramData\BlueStacks_bgp64\Client\anime-blue\bgpcheckbox_click.png

MD5 c4d1eafd73d8effe2321fd9ba64113b6
SHA1 6d91c0b7fc8333387ca3862c79450c8a11a1dbc6
SHA256 1ada67b2cfc565b5dc2115fcb4fc770bb9cb5ee65537e6c350920b59d8b3e59d
SHA512 9b978c01143f63320d7b4be3e922681263b6f92cbe0d7f6ef3ceafce0fc03ebb2e76c95009209b7fe9b2bd01579029b0bfeab49e56141bfdee95facb1a019cbd

C:\ProgramData\BlueStacks_bgp64\Client\anime-blue\clearall_hover.png

MD5 ffb70eac789572135c6a0196a6ffbf30
SHA1 d5eea8033d28278dcc0b403112b9e987bcbf9ce9
SHA256 953db6d793a1e6d3ca26e2f8845c328fdc666d32b1f6184904d6d8bb846cff7d
SHA512 30f14c48efee9917f8851e7b260ef607acafc61057bca6e9f639318d2bbe71aaf4a18178a935b056984bf29ef9c47296ee3734437da7be63c24f3e459ac107e3

C:\ProgramData\BlueStacks_bgp64\Client\anime-blue\check_box_checked.png

MD5 3a8f0e69e41fc0a6f18a7106a1368930
SHA1 8ce701cff95beaf54d1f8eaaeee2e2b5fda29e9e
SHA256 a661080d4b3494948295f53c3a5085f5ad90a1c8a543274318581c2198483abf
SHA512 ac4b787f4addb0028410952ab6614971fd935dd57fa08429e525980f4a3cc9d834653e5ccf8ef4a5ddf5bbbcad6884879623f0fc83c9ab984f123b1d46b8880e

C:\ProgramData\BlueStacks_bgp64\Client\anime-blue\delete_icon.png

MD5 620535a40332cc4ab9d3306984a759e4
SHA1 56dbd580fb6745a04c288ca3a82b57c4bdc7a07d
SHA256 5ce50283d2ee309a7fb40fd9fdbb0295b7ee2963044987c2213ca20170141ebe
SHA512 825b0cf91e2fada40284d0fb115a323219835f6dd6c987a00624b15bc7c725048b1562b964381611320852798f89f51a177748ec99f833e172d5102fff69822a

C:\ProgramData\BlueStacks_bgp64\Client\anime-blue\detail_close.png

MD5 f732ffcf47f7a1d3bd33e352214b7a44
SHA1 069b9e6742c02df5450d60bb38d1a2e31093aa2f
SHA256 6ebd5950ca7add954da6f6744264a65e64602faecdeced388ad9f607456e57b4
SHA512 c362a483e23d4cbb22b91c8b7cff1c68e68c5d183cb52c6ce46e81818bff7d015470dea9e8c112f61b4c128e58b92b8f081e7d1fd7071ff09f4c584726f9ac6b

C:\ProgramData\BlueStacks_bgp64\Client\anime-blue\exit_close_hover.png

MD5 851ae51d560f1ac31546f03fcd949b44
SHA1 3c1a0c599414a076e0018f2dc67175299905f69a
SHA256 131093d23dcf0a989887d609bb28684a6b2734d7038c3a24cfc85ead3d54f2c0
SHA512 513b0c597a3bb3639be33a8fe254481c455d5aefa7a5a83a738c9692094e24e1c30dd89f3e2a4047b6caa7f368d6726c09cbb75700fc15031895be2f07a08e2b

C:\ProgramData\BlueStacks_bgp64\Client\anime-blue\loadingCircles.gif

MD5 56357aae59af803bcb8cbc3af1c16229
SHA1 7949774b24d4184d5cd3ca78787820330e9e4273
SHA256 fcba6fc1c0f7dcb5a13e4ddf697ed990c2984b0c9c00b3beba1c74db4a170e6a
SHA512 d18e7f4c058aeb2011f0bfa88a3ffc17f9bd40a3c67d67080ea55d0a6f3184cd524758c44c9ac27243311055d299597cadd426bc0b4f139ceb5020dde90c526b

C:\ProgramData\BlueStacks_bgp64\Client\anime-blue\macro_delete_hover.png

MD5 70b093612638a35ab112e439a3d1f1e1
SHA1 523a5af1cc9282e716546b727f4a4a11c2a6833f
SHA256 461256bf8f27dc85327b72cb51c9fc9b02c02085dd0298de54c6b3c09c3073ca
SHA512 f326fd89724ee9968aa5a8f46727a21c4358e4162397a5cfd4f559af7e643448b1d2d5084cc207c7989f1f75957e72a328c1ce9843ef02bde594689bc7f3a415

C:\ProgramData\BlueStacks_bgp64\Client\anime-blue\play_title_bar.png

MD5 ab0bdad45b70384750093626f2504384
SHA1 8a57c677546e95068b16e480a0829e500419625c
SHA256 e27780356442cc5328ababe66507acc4b9cfda77cbd7af72c6e3ad04e4b74670
SHA512 afa3103d3b6997ca865f75e91d48ec704b62334b3e2c5e931636cc73628fa2c3b527ab336d8c055ddface463af1dbcf2ed9d33cf8d7b5ea646373b0ebd1b3a88

C:\ProgramData\BlueStacks_bgp64\Client\anime-blue\radio_unselected_click.png

MD5 384f1b40d22ca1c128a036a92af9d4be
SHA1 70382789a2a714d720cecb72f7b0bf8ce7dd8337
SHA256 935c252b6cb49b9883b20797cf206c84addc57ae236fa8deca91126a01f3cc2b
SHA512 cf5c3167569869e1b547c81e9d377e9bb449c231317322cf3e1d0e61cd5f8d38958063559ceef33ca5266fcd57eb70c7af3adfb5ffc3a317ef8f23d1b5ad617f

C:\ProgramData\BlueStacks_bgp64\Client\anime-blue\radio_selected_click.png

MD5 82e2fa9dad99aa4b0d6e75e80a7c19d6
SHA1 003093787c26635874baa8f995674a2ea69f6093
SHA256 1f01e171c64fc414c8f3d73bcf6f7f4716503ae45daeed8171b8dca8fd3945f9
SHA512 a925ac847cebe7b2e0b6e33b0cae7d056f5e6043846e6bcada33f3246b5fc90497608338ca6a9bbead17d04afad16f7b9751b6e7edaaca33da14017db88bc93c

C:\ProgramData\BlueStacks_bgp64\Client\anime-blue\State_canvas_active.png

MD5 f2737f2d7642219398a511e00f2823a8
SHA1 890feadb31915381fe8c959011a4fad8842e0bbf
SHA256 d9e4c1b2d4d0fda42ca2eca37351a84ad5dc4e22e405644c5e8865b96db43ad0
SHA512 6710261ad2b704de2fe9fcd0a2a569639b180dbd90a7838c40d5d9f1b94adf114f98ccadcc80841a16dcd3b3412bef7e353111c5a1ca20df38c8a03ed87c52ef

C:\ProgramData\BlueStacks_bgp64\Client\anime-blue\zoom_canvas.png

MD5 422ea917894608edd7e04e4b1c48e1cc
SHA1 8b11143856348fde0b0944083040881463e8b1e9
SHA256 a3de7fc3bb3120c169ce97258a5e1088e169b6d039e5de69f1dfae1a278987a5
SHA512 bd5fd40315b321f2ae2fe4782b1155e75d7ae38d2497e72798a1a18873dcc00c6e6741e74ade787bbce967aaf7b0e8a42821cb124980dfc2fdba99eb08aa39b3

C:\ProgramData\BlueStacks_bgp64\Client\anime-lineage\close_icon.png

MD5 9601eb6aa916d00c6fae01db5e601e1a
SHA1 15a41c8cb037cf8ae229b7eec30fdb4fe06ad1bd
SHA256 d91e7d92e3756b2805e29e0f4da3c7484b4ac045996621d0336f698ebebab622
SHA512 22737213e0d79b097d51416e3d856feeb793afe855ee956f0cd5315f5246703dab3d1c2245eb51a6d99dbb40e9ad9a063cf7da76114af53355d66ae2f740aa08

C:\ProgramData\BlueStacks_bgp64\Client\anime-lineage\freelook_mouse_canvas.png

MD5 bbf3f2a2fedeb9f0ada134a1f8601c77
SHA1 a9bd65af961298763a19d05022113bfc519e2c9d
SHA256 d4fa3fa0eb9164f742b9481147209438b85da2deb2612187a7a58f8a3045907a
SHA512 e6680181c458f65e7a24850ff16e01bc7ecf2cfb2c951b2c3ab8c2a646da5bb7081f37bc3253783a0fe309ea6716afed7155dbf8e67045f86bb861b376d94b01

C:\ProgramData\BlueStacks_bgp64\Client\anime-lineage\macro_delete_hover.png

MD5 c6a949d3447d8a3e1bb8e4ddb43cade5
SHA1 d0cd002ed7deb9500b1c886c6838971772e173a7
SHA256 72d8082f7097ed82bedceabd6495fe6a94f3b8b96f455cc3e83a58bf29f164be
SHA512 725a091c94b5b99e1e96dd5cbae7082df9557b6fcb5e95d9e16f3d5c5e4e944927307a8c8b379d11433c910d4b59aaf93bd71978a1bdfd6add2a83ed692d6a24

C:\ProgramData\BlueStacks_bgp64\Client\anime-lineage\mousezoom_sidebar.png

MD5 20158bc3a62c4aa5ac3df5a279db7681
SHA1 4340a20d22edd3f7a16c7199d3dece6776051d26
SHA256 5fa6e2fe976147dcb64c66a1e20dab05a5aea0910cfc48c581cc70aab1262187
SHA512 c24ecc876befacc9750ed097762145918a643046c3219ab8d5dd5c1432d5cf9e30fe49d80a13d73756bbf125855b912424ae580c17679258f3b7fd6d88552157

C:\ProgramData\BlueStacks_bgp64\Client\anime-lineage\new_click.png

MD5 24c2706cf92ae04c479efcd78b7ac285
SHA1 d944e4603f1c7e02384ff920d7cb7f1bb5e8c168
SHA256 c024a35fd4ac8d8cb54ac77f192d4008a64230da2084bbb57d4bb8fded6a8da1
SHA512 3645c0f09fdb131e86ee081e8349c62bc1cd7fa50dfe9249ea92a25d05c69965e36bdf696fee8ea160f63d6b3855e6deeee6bdeaaea499a0cc4c2818b7fcb2b1

C:\ProgramData\BlueStacks_bgp64\Client\anime-lineage\playvideo.png

MD5 fc6e9f054f2571140b209e5510fc63f7
SHA1 561fef35e8caf00b2fa20b894bc4894a2edf6aa6
SHA256 83c2758947dbf7d52367b377175a59f8e394559db5c71a526269c44d60bcbbec
SHA512 dc8a1cd0c84c7d1df1e675a189dfe945e6f1e605608219e374601d89d5b7a09e270ec090e228df2bcb97a0b42b9d5b15062d06c7af0efac1b99e2c4faeda2dd9

C:\ProgramData\BlueStacks_bgp64\Client\anime-lineage\ProductLogo.png

MD5 766f20a67fa3b3d285aa5ca5a5531d12
SHA1 cb6a45c84cddb128d552156f604c0cc8f01b2235
SHA256 1e465d0ec98b448268a8f0f29763e63ca92e8b753df81e7be6fffb0a433111e2
SHA512 59e4dc3e089da5d84b7041bde5f455c614b530276984db02d6c8784b65f45697e4737e1c56d9467db9ca8ba3e34f42cf0a8072882d34db983dea8d6d6fb105a5

C:\ProgramData\BlueStacks_bgp64\Client\anime-lineage\mousezoom_canvas_active.png

MD5 5e4889f08048018cb53a1ea620982b34
SHA1 6e5f08965c66547b63f1876e7e7d57091f23ddc1
SHA256 dae814e4c43daf46244225f2cca65cba1b2f60062af0b5db6bbe910ee0051ffe
SHA512 60e956d9d424fdedce72e1372c869c871bcd6a05cf370917838440562469893069016d7c80fcd377bcf6db20fb420cf39e9a464af88facd8dcfc9f5c8c59df30

C:\ProgramData\BlueStacks_bgp64\Client\anime-lineage\MOBASkill_canvas_2.png

MD5 523323b3ed3e1179b96218da3a664370
SHA1 91bc9665a0d44fe839c6c53a046f0811302e09a0
SHA256 4213cab2c081d380d53f8f01bd31639897d9fb0e9b16f02aab1f6d8767ed2bd7
SHA512 7d6beb545864d8f505a94b64365417d39b832c84bc53497203481c09aea7a90d5538881e9ec6e725ff1e97721b0be88b4bc67d1c54993e5472e3ce02db7a00cf

C:\ProgramData\BlueStacks_bgp64\Client\anime-lineage\recording_macro.png

MD5 7eb9ab6cc6eeddf01f5ab4fbb2876995
SHA1 24c504025f67f40e539350c23c1dbeb986750b10
SHA256 9039cbed4fd1d08a96f6b1764afb17f4033ed8cf8f00af4167ae2dc465e838a6
SHA512 3b1e65cb5f99228a0c2323afd9239454ac773f686baecb090c32e7f81162b45cc1a80759b0696118e65e5264f354b7fca3bbbcda0d1a9d6cd5be69a61535dcc1

C:\ProgramData\BlueStacks_bgp64\Client\anime-lineage\radio_unselected_click.png

MD5 84c978d22ef9d149bcfe8e2c21e6bdf2
SHA1 6e13a44c70715eee6ddebe5f7d016ef48ce7bf2c
SHA256 97fc49c734cc3b3f4f72cbbf7d8a3c9f9a5bf6a8eaf33e78b120895e4d9210b9
SHA512 d7ec8ab0af7c17c32698e77297f0a17569c7427429156c1e9c1f30b618dc74064dabb1623cbc62a2e9125aa5e6d63c0802fbfd4344071c60f9cc5f1abad33beb

C:\ProgramData\BlueStacks_bgp64\Client\anime-lineage\radio_selected_click.png

MD5 48bc981ca235c41dcf4e25e07fbef53e
SHA1 881f4c97f063db1a52706e4db17fbf3f16b93f41
SHA256 2022f5f7a8857f7804db37642ce7b964a482e53c60c0e68ba4607989728d7e7f
SHA512 115e10123e9f162b41c71eb6e7fb22b590d6b18082f194034c10eb431689e9bdd4b494d758f5616770199ec1993a11456bacb1a9a1e695d2c6cf15da46c275c5

C:\ProgramData\BlueStacks_bgp64\Client\anime-lineage\Imap_GamepadDpadUp.png

MD5 0b8b3eb813faddf4dfdf8f92b5793a70
SHA1 9762b243e8c13fbfb2b531952af52b0cc375be2b
SHA256 11c5f0e8853c43787e343f5eb43524c745c7e36bcce4b10ad18f7ab76aa799d3
SHA512 9c25ee4f8fbedd75cb817b569c548fef1461bfe7f3a475f84f4058a67872db656435a9a627dac9ade6d379c4ff231ad1e6ca5f817284bd4ce35484c5c072a34d

C:\ProgramData\BlueStacks_bgp64\Client\anime-lineage\Imap_GamepadDpadRight.png

MD5 0d00719869b67c4c169a92be4dae84dd
SHA1 51a9be07263d03ffc4ca82049e0fd316573c7f14
SHA256 c20881ebff3b780f96c19a93c21313edc2ab09fd261ccbe8c3f05af0978a4174
SHA512 af4eca5bdbfea6278a7ac0feaa759059a6cc81cb64aa3beccb01062cbd75c02262670970accfff4a57af70e5abb098d56e4a80bb90a013c411dcc8231bb7455e

C:\ProgramData\BlueStacks_bgp64\Client\anime-lineage\Imap_GamepadDpadLeft.png

MD5 ef477ff45d73102792fac8950c450dcc
SHA1 326ed67dd6619a93c2e77ad960b85bafd4462487
SHA256 a37ce16e6814508d4e1be6b84b05f6bcd47a69ed0b5b36f2696f79e845f3e079
SHA512 f44e7b9973652a07377a806a02c72f20d55a0782769ffd098a63590b09606535578c5f3e353a2e0f6bdf30c530fb598173f45e8c67389570c0cc53020897a41f

C:\ProgramData\BlueStacks_bgp64\Client\anime-lineage\Imap_Down.png

MD5 252b7ff6114562ca54ae3cf7468d50c0
SHA1 b0a4ace1c39396ecdad8d9778dc696c7baaf8f95
SHA256 c7c4f0ddd792b6ad394c28e4a5ad2f17a4aac1a2c518d5c5f70b405584c7ef55
SHA512 2016084b480aadba175ec559c7710c29be0ce5a3c5a447c186fa56aa72f91677faed4da17d39721167c667a5df875d64ec0ae87648332b0e4102a5e1103c7277

C:\ProgramData\BlueStacks_bgp64\Client\anime-lineage\ImagePicker_sidebar.png

MD5 877ad6842b6ef2b12b57146bfaf8e941
SHA1 35117f57c9a51b043d9408a0d9066ba61f4d4208
SHA256 8f136c9b106869d4ec9e0db8b3e7594f5b2f6af1642c635d3cd847dacd48a08a
SHA512 a6334c7d09d8b3b2c4e32dee6cb1f468578a6197c8d38ae9c5ee037d02186458073c6d18c625e8c78a95d14a9e42c093eca57b120a68223f36ed5e219b96c6af

C:\ProgramData\BlueStacks_bgp64\Client\anime-lineage\ImagePicker_canvas.png

MD5 9f2695740ca9fe5e5a6a8a41ed9b4301
SHA1 039c6a06a856744188caf1e43e7ca0b2f93bef99
SHA256 86c37e351ad2652ee2d480363db6541c089afb539045ae3cf2adf8572aa246d3
SHA512 975e296115489de2d409c373b477a8dcaafc04a81aa36567758331c0d2316fdaec949d0cc3bf5f41542f6c56e5e03c1ecc5dd7bd658b2d94ae4cca73aa4c0a9e

C:\ProgramData\BlueStacks_bgp64\Client\anime-lineage\freelook_mouse_canvas_active.png

MD5 752d61a0bebe9eb804327a1e9f1cb731
SHA1 76d1c7eb069600a228798b2f49e19eefbe1f737e
SHA256 98a3e65d4974f525da91733c39804ee625b1cd15542f0c2669855ecda6a2f098
SHA512 45d02421336c2d174f7b26deeaa5cbb246a31b4d5b3a73a8f496b3541eb8bcfbb51247e7c8fae830df5ce2e6197f3b26cbe40385f8fe3dd87eb0d2d89b88238f

C:\ProgramData\BlueStacks_bgp64\Client\anime-lineage\exit_close_hover.png

MD5 189dad710e3b01e115e30f6f4a8bd352
SHA1 bd111a5ac024449fadf7c574038c0972f672b01e
SHA256 da6a4487fee06b1bd9199004dd42a2f61d6648b6cf78427b7cbd46787058415d
SHA512 e7f697361eecb3f72a227392c006cd9402f039130ac5627e5228784f3f05b4bfb898294774eb61ae32b4d4a2f93faea0042108b87a6c6704f3c872cd1915ef82

C:\ProgramData\BlueStacks_bgp64\Client\anime-lineage\endstream_button_dis_click.png

MD5 3d9e56f972bd80309e84b1a155241ea5
SHA1 f93528a5f2f9599104194527242837dfb0d43ade
SHA256 5450b69be9524ef45839caa6dbb0c93f82a301cf28047c201497016135de48e3
SHA512 0cf181379225e8330fac806e6580719de247e2fbed07a883bc3cdd67304e16a5517bad760847fd5252371158a6107436064d2a8deb1f59cbb686198206648c66

C:\ProgramData\BlueStacks_bgp64\Client\anime-lineage\duplicate_hover.png

MD5 c4169ee6016250f2430ebd109d48a426
SHA1 04a2efc07ab2fa3a5abe1f7539dfbb74ed96c1fd
SHA256 a6c45eeaaba19ab06d98e92f84f14d8d5236300472073eea0c50f741ac91920e
SHA512 3dd08f3a77973ba430d2989951947865586b7b73051c2eafb9852e572f59607aee93ba849dd9a6261d373dc3007fc5e50698a75fe7ba973d6498fd9ae9145dd5

C:\ProgramData\BlueStacks_bgp64\Client\anime-lineage\download_hover.png

MD5 f399ab81bb9a974b19a30a2eba52eb5b
SHA1 3e5f81e428eb36d076cfccade78397b743ee3d13
SHA256 ad6f733219803f2ef2be350b56caadb7e6d52efbcfcca6968156072c98ac2f44
SHA512 54e6ee35d8b9258e9ff2660c0ef434163db73e555046f6c1b21b1e1b36555d64a016c7c7676be2bd7b2ee541a411cafc952f1a1e07851ae44bbab01b4c0a9260

C:\ProgramData\BlueStacks_bgp64\Client\anime-lineage\detail_close.png

MD5 3f1952bdbc44614451ff3f1baeaf30e2
SHA1 9bbfcf5660ebf1060a672f326ef7c15eab6800b5
SHA256 b722f3644c0c4025f4728de4120a7c83b1210c6b62433129ff68754ae6159d41
SHA512 0d3a16e149786d7282f56f7aaad42b5bcf691245dbe9d5b1e4685245ec8f63619b437222124fb45b7243bb27b690eb4015ea070ad437a67897850fe616347e18

C:\ProgramData\BlueStacks_bgp64\Client\anime-lineage\delete_icon.png

MD5 7485a4db355b5bb710090da4f8a590d5
SHA1 3a3d493e6555dc4d5cf9ae54a02e66524296de8f
SHA256 51ffe0fb56a26a613641d4b2a93c02adc7f762af6f175b3ae5004fb68f542848
SHA512 cf2b3356064955e88d2864f654e8efc590c393e60fabc85f6c0ce66aa756e27b4c72db0052e183a5278dbf93414f6492765ffd574038c262cee1780acf7fc631

C:\ProgramData\BlueStacks_bgp64\Client\anime-lineage\resize_icon.png

MD5 0091e5b37906d47da76945ac14bdbcbb
SHA1 657ee0e1346cfebd39ce2c85c7c12731fc1873af
SHA256 9dda96937f725624567908c1fe1059ab03a4b0b3e5f9fd3697883ded3a0e851b
SHA512 bf61611c4cf30d6521a09ab108a7bb3120d7eea75c0eed840dae846f69957958b8c8ab85d956c36ef16be5ea99613d98afdfb098551e1197f235ceb0a6a6e1d6

C:\ProgramData\BlueStacks_bgp64\Client\anime-lineage\clearall_hover.png

MD5 edf763a833b71a6cb9fe0003489d63bc
SHA1 bd83e55bc90dc36485d3b70faabb973f8ace6cf1
SHA256 f7cdcc90e643e24e96347fac427fa35302bc802ac8d398cfee4800089657476a
SHA512 03768db5473885a870cc64730c13723b61d28460c70f9c7c1afb3abf7cad28c36269742de3c17df4e9e9b08379179f51b64144d60c607dabb7e1212edf26ff9c

C:\ProgramData\BlueStacks_bgp64\Client\anime-lineage\check_box_checked.png

MD5 3edf32a612daeb6cbf94fa91e4041e2d
SHA1 1518e868b8062b6eb1796d92dd5da25888d4dd20
SHA256 7765830d356648713fd72428ca51fe57c7025b29cb558b95269431d35dfc7bc8
SHA512 cc8c03979c713ff89127e64a3cf78895409c9f5e5946b7f5611476de7ff634e5e71f5e984ca445864a22cb253c9033c369957c68fba816043a5c10ee9feb07df

C:\ProgramData\BlueStacks_bgp64\Client\anime-lineage\bgpcheckbox_click.png

MD5 c3c8a21c8b1c8d5e17fed73b49638369
SHA1 658a436c19355d519a796ccda3f662bb4267b152
SHA256 d3197931a31e185c2993fdc532650737bc5156f9d9eb6de9066404f79adb04c4
SHA512 e1ef958cac1629cf30e88ba896b7106deb1ba014ed491f008443ba67f81314e626a9b37ffb406540970c0bc6effffd861bea0336b2dab29e847917c0a533a576

C:\ProgramData\BlueStacks_bgp64\Client\anime-lineage\btv_hover.png

MD5 11bd4ccbf50ac49981391013f79d1c7a
SHA1 9bb50ca0578abf5c8aedabc3bc3d76b880a8d472
SHA256 ad382d1c9a42bcbf4fe80ed5e6e10bd4d0c926e300f2f78a01a7ec2ea50571a0
SHA512 40510bcfd1577861d9cb9c9089765e11280e370585317fb80d56b05769c3e3e55cf6469532f221b8e06d7d7310111a623cf28ddcef288218bb0b2fcb065550e8

C:\ProgramData\BlueStacks_bgp64\Client\anime-lineage\app_settings.png

MD5 583beecb9699cb67c8ddb4cf384ead01
SHA1 1aeb02d9391d60d7b6597e6050a2906d29db5949
SHA256 12b20cb971a1237e88bc200478a7987783a76c486adf00915a928a47b5ee136c
SHA512 d20cb233c66d0eecf876e0df494d0f42edab7833f0694d3741b0758903158232ecea5608d92aa0a16fec93e74ac3fce02a5c2fc6900f9f6681815aa5936f02b2

C:\ProgramData\BlueStacks_bgp64\Client\anime-blue\volume_switch_on_click.png

MD5 7a9235a42a91a5d49c10fb3704086c01
SHA1 d77a4fb1449ad04ee709cf1f639f882d7d0c06dc
SHA256 5dc765def3a326591fbd77e8cc463d9ae2b98457e5e56ab4553ce7abf1ffdcdb
SHA512 bc7337afb34b673fa212e3925ba5a468d3d5ccf82d6f91105d0661d5e3a6fa59812bc86347278a432177a136af58ea028bea58ed037acf75d1edf87956ce4238

C:\ProgramData\BlueStacks_bgp64\Client\anime-blue\stop_recording_hover.png

MD5 7fff5e8b378597bd182a463f7006c2a9
SHA1 ab86a98f7c6dd742baaa007a56df6c86f50bec00
SHA256 f8b3188494eacbc509f29b2d488bb906153df966c5e1a845ee6f0fa1d042fa7a
SHA512 0875cf7ab4446a970def15ba75baf7a541493460951a2c0cf080fcd498f014e4f78b83ef1dc877bbb9e33f1211496ba5af60dfb71a967eb0466fa0db2e99eaf0

C:\ProgramData\BlueStacks_bgp64\Client\anime-blue\sync_titlebar_icon_hover.png

MD5 f3b98d80fe6d7bae0063560877b44548
SHA1 e325869439d51cb625468fc2d445fdda959349fb
SHA256 075df1b9620a251dfd08b11401cb40ebbe198ebf102e131ecaf0debcebe57eee
SHA512 1da5b510939ca7f791f6a55f2b05ea6e3b5e40f44a2fcbb7a3660e1be80d611c6b59d2d5cb8a7a1aca8311dd89b601ef62f49e7ad1418507719161bdee000c13

C:\ProgramData\BlueStacks_bgp64\Client\anime-blue\stop_title_bar.png

MD5 868998fcddd1fa0d1fb6a7f8bb266fe0
SHA1 bbe5cd78fef1a8b5a4af29f5f498092ecac6a946
SHA256 1fc0af036fa4dd8debd4441735fbb9c372299b9d6e735f72e00e00fa3a9966e5
SHA512 eacb72d915ff916193b5df8d3dd27245535a325ab8f0ffdf2bfaf372141475f6408471ab79df7b3836004cafa55eb538255ac443afda056598db94d4100d9fd8

C:\ProgramData\BlueStacks_bgp64\Client\anime-lineage\screen recordingRunning.png

MD5 0bc737f54c32670f8a8fa427b944ddce
SHA1 b530733279ab8843528fd8fc82c2ac6ef5c97312
SHA256 0cdc6e84cc27484bf5823ce5e6ad02feb1658dbc21446f97f38ad76dd992245c
SHA512 85c8911e70849308955c830c5db0fa931e162207353866c82115ed083e03c64d8d0895770230e78aea17f79ba7cf46098a363205b672b1b8b3564f79049b60d8

C:\ProgramData\BlueStacks_bgp64\Client\anime-lineage\screen recording.png

MD5 c8eb8f00c79e6bd3ed223d3859fdf9f5
SHA1 86a694169e2eeb7069323c24c81aa61919f2b222
SHA256 b28496f10b300629de0ad40a80d339de6b406664a5718414f03cf6d02a83d251
SHA512 eae725da8790471d83ba0a1851bf5581968adb22e32f60cca0e34c1255b9bdb2442451ce857ce6af09cff925091f538fe1a942648c21c5b701b4a65fc1cc6cee

C:\ProgramData\BlueStacks_bgp64\Client\anime-lineage\sidebar_farmmode_active_hover.png

MD5 17e540cf4464dc6d4d4a9ca9a1ee47f2
SHA1 ba7b928f4932322a413d51fc6565152762e2e038
SHA256 24b6209a607a339aa7fb938d06230ea10452cd25757fc1e73c69389128baea62
SHA512 27a993a1697749d74c865920fced43fb1cd01950fb2843b883ac5bac03df07061e082c9a70ab7b38b02cf012e9964f2147a04c10bde90d1c75e963941533571f

C:\ProgramData\BlueStacks_bgp64\Client\anime-lineage\snooze.png

MD5 33b00ba6fc7915b54bf9b9444a48fcad
SHA1 9efbe28b79bcf86d61b4e215f77811782b57fd0e
SHA256 e04791133336f30c5f7c3e83e6cce2dc5a51c9e8b79bdcf83852cddb4f26fd18
SHA512 d8d43a63a6b71e9e69b167ab7a487bb92b0f2e3f9d6e9cb821cc7ceba851c5b1d2f2ab6ceab492ddff281c50499575639b9c9f2f6ee87ef94282f923cc76f314

C:\ProgramData\BlueStacks_bgp64\Client\anime-lineage\stop_recording.png

MD5 888280f90c064c85c8a3b3d221f90315
SHA1 d044d447d7f580c60fb1033a6960dddf12b921a8
SHA256 8821318f078a0c64d8e7c9ec501072dea551b9f85b7dc4c94abbf2f5e7c460d5
SHA512 7b6c742fcb81f17dc5c09e8701e94c6f247d75d5dcfe181b612bb8f0630b655db9875f6d7cdf2734ea2b53831b8c22f66bc5ddc96761cdc9fc3b72a037945e0e

C:\ProgramData\BlueStacks_bgp64\Client\anime-lineage\sync_titlebar_icon_hover.png

MD5 08c69fadbb657668c3d31e2c60784317
SHA1 975119efc1b1e5124693f0b23e44136409124986
SHA256 ca7e8626fc8e6b81a0d6d9f879ed4691bf831e1893355307a9df1739788e60a2
SHA512 08445e1b42f03cbb4888cb15734c8df3086dcc572e0d60ac2a6a083c16e9ef5dd7adb89d4be56506d573071bddd9ddd58349102bf71ef6f9b870567dfa059ac6

C:\ProgramData\BlueStacks_bgp64\Client\anime-lineage\tap_setting_icon.png

MD5 19299a51585219e4ab137708d9e5d4ed
SHA1 14e4509c74e8875318bef1d75d9530692fee50c5
SHA256 ef2b993f053dbc9560f5337503494da07305ef23aaf2118c2443b72a2bd1851e
SHA512 c3239989b4721cf19ed8b754fa77feb8458eec5f607ee417b691df855f9f842a1009e74b41a52522cc427ae1db0f377acc8743d2686d092491d0b79277db209b

C:\ProgramData\BlueStacks_bgp64\Client\anime-lineage\ThemeConfig.ini

MD5 a92070129aa6ebe582452823e189fdd3
SHA1 52808b593f6ddda24a816677a46a69180cb3746e
SHA256 7b44eafb5676e9ae976b367253afd7c9963adc777a7beda9dd8fc9339b1b69a1
SHA512 9be796157d52a3fd1dbfe0c63e52f0e14c4d54dd4b7f30ed80289789a6d44c403d6190630adc9215b815bf4d9528830c48468c1e003d764336a84576140f2b7c

C:\ProgramData\BlueStacks_bgp64\Client\anime-lineage\volume_switch_on_max.png

MD5 0d589c606d1ed1751f1f3280910a9ba0
SHA1 5ce827be86fbb00a12f89b25f0b48ad96463a512
SHA256 c9b389d89140bc9ae2a3ff3e7851a7735a0090566ac76d55fa077618c2319b71
SHA512 d5a314906e4cf6f6a5b92fae0b5d6b0115cad4a77c927597c6241e536746d9229c4588d58cb3d75f441a2c2c22d01ec3ad23ae9617f23302200329b74aeccc25

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\appFrameIcon.png

MD5 dcfdcfa793ef11367307dd18981eca3f
SHA1 6a804077eb982e92e2cd4198da278f8a843e0e99
SHA256 9a87a971fb6db4f12f5055d6d3096f9edb9de4cf3514a3b29a00807946f21a88
SHA512 4d950717669cfef93b7b3a8d07e4dc8fef569c3d8b59c7cd1fdaf4b8450a84d1ed5dd74dc4be4507404df2bf0580ba0e445ba3f43162ac0438a7148220c7195b

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\apps_disconnected_icon.png

MD5 439d3e0595572a7fe0222be466242800
SHA1 d3649c7e31d182f0d52f3640130a6d75b3f9f781
SHA256 b67364585bb5ba90f2edf6a76d2e0932255c70a23d0f19c108840f33b7dcc157
SHA512 2772715fb7aace6b37f990c06285a43f85d2df2be94c2142f11ab14da9a8ea8f64ac79dadd785ab4a993c95c5798fcacb4c07ac2573cacb8e439151872a91a80

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\big_shadow.png

MD5 4ebf5bc75838e4e01c83e275ed9aeda4
SHA1 0bc818108af4cfdba60b1ff5617bcd763878cf4a
SHA256 048a929c6452b698ec60caad8ec7615a107da2b72eac0fae08f7da6a18458b25
SHA512 b5fc00793ab05263211df87dbcb454a82341079e8b67636c21dc57829e389f8d2b198cb7c3941349947b34f726d5c91a55f930c06c5ebe781ec07407f62d29fc

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\copy_hover.png

MD5 400b5dde7df8947bcb6fffca2e6ceb1a
SHA1 60f1efdfbfa1a9d4124196b46b01dd54f0460d33
SHA256 82f9ab7861afc598dfa872d4695ed20bf4d440483aca0ab6d4a012866f9ac99d
SHA512 bf7f77600c79ebf73e99595e396974ee234d2cf7a26b198af56ea62e6c62d47fe99790a12efd1207767637fe326f28e7723e13fc565286b1552961bad682534b

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\exit_close_hover.png

MD5 8883d688baca840cee8609a18a4a9db9
SHA1 c7de7bed024f8270c7c84de2bc64d8ab383939a8
SHA256 69533ce75c8fb69dd4fbe43e6b56e04de2b326c0c783e76d8e9b05687e78d647
SHA512 9251d9121ae2ea2278f23372edf148959a93f374253c103016c82e282517f1e6218e5fa8371d024a43edce03972f8ca5ba9e2f5e241b2dd5ca1d6a22ae39b996

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\installapk_hover.png

MD5 6f7a016327709d436c29406da44a409c
SHA1 73bd66841f9724c61cf85e4e22500ee7c389846a
SHA256 f62095348e6570cdefe6f670d823d11583cd5d88b600b5377da1dfeee99bb86f
SHA512 8bd3ebf5136fe67376eba26dc3042a157f8ad5e4529fae58b9c9f2cd892b480e50c8391c807c776dabb1e04d7a4799690078b5e0094353a53418505eab854458

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\onboarding_step_6.PNG

MD5 229f7c42bfaec1ed5228ce2b571013ae
SHA1 9daf6782ae6a02999b898ca7d335b7db629186c1
SHA256 1830947eb04394d4ebd9ceec561a64ab430a763200ab307800b950f77a4f5cab
SHA512 edec20f6b031239a2db566a23a3f56d423b43cd4cc2fe20e5d017feaf111d1f2db98ce8ff3aacae984dfa39eb42175bdc1ddf2df549a073785eb449de68b82ea

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\preregistration.png

MD5 47af21977ffe87f67d6371de31587d40
SHA1 7856f6c3bf606c62017c783cfed73393ad534df5
SHA256 c36144dfcb0fa257f9fdd398524130af08aa6d9f7363fcdf9225f176953c053e
SHA512 52ecca5b5e9596eb4c1deb554b63464b85b24991c7017d14e0bf2ca0386ada68e0c18aaef916635a8d2f7feec85a5d127f6eb266e2b68c386ba5c1fe4dea1a1c

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\sidebar_hide_hover.png

MD5 0d904e9bf71b6a270af98fd355fc2bdf
SHA1 8a9fd97f8546f19cc100c7e00852c1571ff070f9
SHA256 918f96c35280d97496d96ac13432e242b29485f0859abfb3ffc051fc8fa6da58
SHA512 8e6e2a2c1cef3ed7260d566fa93e0df47f90c41f4eee48000c71167326ed86da2802e258054436f0f4952c2b4dc7fb229ca37675fba6df74d3429acb0998e40a

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\syncing_ots_icon.png

MD5 589f9f9cd5ddc341d3ae7fbc2b79e602
SHA1 7f2355e78ce3d97f35ccfe12c2471f0329b72c79
SHA256 8748fb9e5a832f29a62bab3521f914bf701447ec3a9b8b504d3461f8c3e0b601
SHA512 d9623855399be0281b34a804854fedbcba8d3e469e7706b74129a0120cea69d70deef6ede1fc320e6b7ce19a9c529b619d1d3cd9a86c729dbb41fd5d8bdb91a4

C:\ProgramData\BlueStacks_bgp64\Client\Assets\bgpcheckbox_hover.png

MD5 86852b8d52fcab9b23e5ecd2345cb28b
SHA1 902805a9080bf9a2dff8ea69d228ca8216853407
SHA256 c0f7f6b9b95a5463258916afd1337e2ca49a8c69a20e843c629db8065a00e68b
SHA512 476a90a0714701702ccc59ac0b1555d7a75f7665e6067422fcf389195f625ca5b308627059c0dbb786565a773ce643737923456b176a5e77f210173248d19585

C:\ProgramData\BlueStacks_bgp64\Client\Assets\detail_close_hover.png

MD5 811b8372e36c83b5afa8881cfefe1693
SHA1 dd30b446490a9db7e9089816ba92560c4a76b12f
SHA256 5674b440c16fd138d6a5b9bee0adf1399bdea98e15c3fec32cb90b6be3487748
SHA512 f7d5cc6b97ddd98035ee023a2736b45e3de5e77f42f97132f9d4585d03203338c2f625f6016294a747ba3f98e6e2c2b79711b9b2c8851be0bb7db8479e6734a5

C:\ProgramData\BlueStacks_bgp64\Client\Assets\expand_click.png

MD5 9a792a44d59738e73eb43cb8090da07a
SHA1 8e52d33293856d25ef412cd151b646f8dd4c3adb
SHA256 13c1f6191a0dc09ae3d664d6db525ad2b5c2fbe908b9ac6893fd4ec8a6d47ce7
SHA512 85bd62ba7044e438f678cb1a2d81e1d622c27e89a16a1c5bb90a5c51884b524bf1004245d6398178e375ea9d4db946f7de158b1ebcf6811a8d9989121bfb11c7

C:\ProgramData\BlueStacks_bgp64\Client\Assets\new_click.png

MD5 b6a41a0a4749aa39a636799b4ef6fd80
SHA1 5a12435c76d064dabed61c8e637f794f1ff7e3e9
SHA256 9810a9b84034e55ce699fd199bbd5ac7577f6f00c6d31e75587827f6d4ef1f3a
SHA512 d7679841679488c4e9fbd2bf19f5b221eed876f8af3dda5b4dec2cd380a6fc06f9b4327287dde536002d1cf0e8edfff1137c382b6dd0ea1f75989bd0b3902a72

C:\ProgramData\BlueStacks_bgp64\Client\Assets\play.png

MD5 8e5aa751addb481df985d4f825a7aa51
SHA1 56e0c64dc343c8d2c345be4db3eaadafbf90c5ac
SHA256 629f979db00cffa4db1e09b2e75ec28b493c534218759a6be0c0777239887540
SHA512 bb6b2609b3fd689e466e834a39675f77f248b3a67c011eaed58c28ff8d929c3e36bf264d728255fe0c01c735ec0d3707a99212d40a11b573558104a3d434f9e6

C:\ProgramData\BlueStacks_bgp64\Client\Assets\stop_title_bar.png

MD5 b04a33e0f839e242a8f19ff8c8b4739c
SHA1 b8eeec5ecaed1e0277df0f7c3cc20553fbeb50c0
SHA256 57a4ffdeaa6823c3d8f16faa5ec4730c28e3d9ff9c210f17acd23a6e8fd66198
SHA512 b4354506ad42583e49d57caaa75014f47e1ef25ec0c51ec6bd6f0a6cee3404f0f3ac9d850a1e123d8361df7417d9feb31bcb14a9dedfe84b4a97a81c8bca1e60

C:\ProgramData\BlueStacks_bgp64\Client\Assets\stop_recording_hover.png

MD5 358e8660f22df5d09f1e95783ed954fa
SHA1 bf648ef342afef644d0e1853f41765ce1a440ca8
SHA256 d2166287318755817648cf3bdbef4036034a7ffe6ae3233a59a39eb238ae0245
SHA512 e78905af44a5a418d11101d69df6a3602d261130f8b6b89c046fbeb52f3d1e2c3fc9140a4b8862708523cd48fa6c266e0bf3552ea1163b68dc08fd56750d5faf

C:\ProgramData\BlueStacks_bgp64\Client\Assets\volume_switch_on_max.png

MD5 7079ce677003a2609651623ffc395a3a
SHA1 a8c172ec2d96eab53f6375839d14ee9a6b9c5d13
SHA256 ca51bda8932f92a18e16fb8034f1caa5b45c8170f44cc221fccb4d53a93263c7
SHA512 95d52c1050a201f103b1d57d6a6f01b6d7fe70042d9d07cd38b5241c841e17ea883feffa5ae166331aafd14f9ff42ae4bc610edebd152aa2eeffa2480450e8fc

C:\ProgramData\BlueStacks_bgp64\Client\Assets\sidebar_volume_muted.png

MD5 ac900934a86f30e61711782c4ef36f7f
SHA1 bdfc594aacab0d0c77e812394ea95c1a5912eb06
SHA256 869f94a90af5cfa54e63a58b5a6a1166ae2b698dc94ec34ea817071b1c9cceec
SHA512 1aab61d67257cdf444a44019636034ccee98a6795f89bf583b8d847c8dec77e6812cb7b86697c86b2aa30e2c6b311d5e1ddb3ac31d20c9b7aa2555b21029891c

C:\ProgramData\BlueStacks_bgp64\Client\Assets\sidebar_volume.png

MD5 d5d82af94f84658f8711258812cedb98
SHA1 6f6bc31cf822ca1ac46b0d80bb1a33f55c3bb75c
SHA256 ffbb23a92e46bc255c7b7125e7ed1118b658022e67c4068d6cd4e15ebfa65aee
SHA512 6f723a8da0fad777e6300159e656f1935bbc2a39755d00c2eae1198c3858e6cfe9d84bb71261753a5a85c03a0c9931e79294315814e2bf9e83752d2bb00b2cba

C:\ProgramData\BlueStacks_bgp64\Client\Assets\sidebar_video_capture_active_hover.png

MD5 add11927be4ed2f7926e558a337bc57e
SHA1 bc41132fe54f1422d9937f5fdebe723cca966499
SHA256 b9cafac81124c06389f5d1f68f63137fffc5126502e30ef91995bb3a85a5130e
SHA512 23fe6e9fe176a61b14e9f908d72d57e42136df2ad03723e022ebd710414f11b8deb9e58e49c14018d8f9743a07e92dc619fc9af696182955df7e4b8dd9199557

C:\ProgramData\BlueStacks_bgp64\Client\Assets\sidebar_overlay_inactive.png

MD5 be67ba89bf72914cc35556dd59f38df5
SHA1 f4f638c844dbf8a27e724f2e0e306048b5759648
SHA256 c16cd294fbad1ea5bf7b1e984e503ad96c9613b032e04bb6351dbfc10c7c3cbc
SHA512 492a96b59292867d806e11bb6d34a7c7cd1f9ef8333c5bc969df7678bc5176f993c1129c48195da5a29a635e2b41e63dd29af68d8837af3f028b21cb8e29e7b1

C:\ProgramData\BlueStacks_bgp64\Client\Assets\sidebar_overlay.png

MD5 963e9954ea97e222788f739af97fc1a5
SHA1 b33f87a842b56a962065c375ac3ed9e6573dc61a
SHA256 4cb7958788d6585bcf8b770f9593f1591280e3849a0fdb569300412ce1bcbb05
SHA512 7f4e454cdb83eb4bbdee8d9fa66631e15f866d8f594a2ff048eed17833fba733c748e282a8de3a312ec07170a24c3ea2d5245ff6576193459da5a4480529bd98

C:\ProgramData\BlueStacks_bgp64\Client\Assets\sync_titlebar_icon_hover.png

MD5 489a3e37a23b36c1342a0225820295a3
SHA1 c0df77a0cfb9591ff73e126abba422f1279434ad
SHA256 102058b5560d0b1d3d7628ad89b5fbfa07905b8e1cbda142ca674482ff44eaa9
SHA512 479dc1b7f48c263708d33c31b068ae6f78cb7a15cf98a03f936b23a4efabb7e2c21a26c538bf7b4253c936b6e265c0c0381d8ae8a9348a800c34ce1224a95a92

C:\ProgramData\BlueStacks_bgp64\Client\Assets\sidebar_volume_muted_hover.png

MD5 15c3871031afe2ae4638b682c2bb5c05
SHA1 659df74e9eaa864e0ce48acf0db5f3a24d1aacc7
SHA256 859ef76e2d2db36e87c0259f4d5abffc59b47d7530aea678460ae693b69f55f3
SHA512 e882f7f06f5680bee3ec272ee705904e25fdaa6a7a7b5e4ee15342bcd18478bfd73f0ab556e06a0301b2bddc3e207fa05d9596d264748089f4ac4bd8c13eb344

C:\ProgramData\BlueStacks_bgp64\Client\Assets\sidebar_controls.png

MD5 e1ac7546e92d2482639d1b6672a6b132
SHA1 b9161a025c3e055c5d548ce539ef0573dca5f4c5
SHA256 8e7fbdcafdbe6e19530783d7a7902b3cd5a15fdfb32f1c1d1ca43230c91c12ba
SHA512 2c07af28c23bba0a2cde80130651644cf0e975b5860afef5bcb76d5ab6ffe1023f9fd1d7c000314ab907c377047f31b70c878f05e6a29250176da2bba358abc9

C:\ProgramData\BlueStacks_bgp64\Client\Assets\sidebar_macro_hover.png

MD5 4276e926a28e9f2c6fbb64a521162075
SHA1 1e396e75eb6bba2caace64b8446b65feca193e12
SHA256 2c436bd316f345c5b9e0ecb89c01e85e6bff1e3f1384b248e8cfc3f1f5e132c3
SHA512 31473136a0956cd33b72ebe055766bf180b4c066f2c146dabeb2d2aca1d85e061434643d5ab007128625668c0e6d346e79015db9d073902cecc24d75640c0be1

C:\ProgramData\BlueStacks_bgp64\Client\Assets\sidebar_location_hover.png

MD5 1dcb15f22e93ba714d0be799cc7b1a66
SHA1 cdee09d260a06cc016001280519bd6662dfbb5fc
SHA256 72ed190db2b1165416a637c3bf873bbb836c226b9ec9fd350e21ce366b1674ab
SHA512 35b5be0365354321cdb7d05ecc5af7ca528fadca3b74e649d5636e1d323fb7992d573fcf0bcfcf0ce299088d50b609028b3c1129b68e213e43d23e00fc0b387e

C:\ProgramData\BlueStacks_bgp64\Client\Assets\sidebar_home_hover.png

MD5 faf8dc7db364bbac48e9def7baaf7d9b
SHA1 19563fe3859431629e34542701d58b6a5d9246a4
SHA256 d5ed2d4160c612b9be8c557681e52fc2fa4582758349e1e738fe4a01e13916b7
SHA512 2312bbb875695b6838e00742c6e82b39410cf4f063173fff1af543b66b1cf92abba59137beb7d0d763952786e9f3b73d5a148cc290b1520664186bd41a7d5a0a

C:\ProgramData\BlueStacks_bgp64\Client\Assets\minimize.png

MD5 ad4ea2efe0a8790d1bf2c5947fead285
SHA1 1274ea1f5b4c93fb40a57a9ec8a50857d488eab4
SHA256 b8e18699ea1abd21cd47a76c759a991637ca89c430e709ae9fb56aa2996178e3
SHA512 63af5d3d763a0854509a2abec68af462cff239e5a9fb539713755bf834f62ffa6fa8d4b1f39a41b17f68599c737b388785381fddb7a69212c9a4a2cd34dd0523

C:\ProgramData\BlueStacks_bgp64\Client\Assets\Mouse_cursor_MOBA.cur

MD5 51ef152ddfb96d10c0c200518193f689
SHA1 c06946c2277cee3fc292e17bd251a7988ad81fa1
SHA256 4ea89d87cda5dc011109e0c6ced22030e3ac8ca351db78e533e87df40f3dad75
SHA512 1edda15dfea3ff4ee8f53761ed7602647c3db09db4d9e42db9734f9996d4fdb0d6ef11a0ffa18648309a10dc5fdd1131cd812a21d3a53c3e7e9456a435097131

C:\ProgramData\BlueStacks_bgp64\Client\Assets\Mouse_cursor.cur

MD5 b03e703fcadbe63285c0bffd91b3e634
SHA1 dcbd1d818e91967776c949488d5a4d4b56f440ec
SHA256 8c3da7eb6e245a3099c0f64d704bac00203576fb82cd703134e91fa8de90056f
SHA512 761414592fd630f15e1541b5550e9c39410313703a11519a7e6cac96a698c55dc7eb5bfdf2c2258b9c8b3a32755a74d56b8f683b8a26767a56526fa2b2c7b253

C:\ProgramData\BlueStacks_bgp64\Client\Assets\minimize_progress.png

MD5 90d5c0e2977d65b21b430f486114521e
SHA1 cfb48cef2634d4be33210ba54e5b7c5c197530e4
SHA256 aa538477ded33f33e33cb9a21241dacaceaa0c3e5ad8eb1b6830a448262bc998
SHA512 9a3f6690a638a69232335b746a4512ed1c623baa984d87cf4127663c4f85e818a4220564c63b764570e2ade8302989482580af7d9032052335d44b9c98d2d37b

C:\ProgramData\BlueStacks_bgp64\Client\Assets\menu_help.png

MD5 2e82bd45c7a8b2e216c27a24d42f12a8
SHA1 8ff552358b2d77090a54dad0c12c2757af2ec433
SHA256 e55ef002466578307998045edd5e10577161efd1cf8f1a71768a8046f4c2ee0d
SHA512 d8f44a110bc31d5834b337553baa599c9a127d7335aeddd7e139ba5c7851db006d36ef74d841f10f7fe69e25edffd89a6faea9d3c72eba27bbbade843af440f7

C:\ProgramData\BlueStacks_bgp64\Client\Assets\macro_delete_hover.png

MD5 c6baed75b85d538498c0c5b6a8b6ccb3
SHA1 a8bda4785bd9bfe0f19fe3123af93b0ebebbfe97
SHA256 f1e184b859ed98e24bc88afc22dd34056f227b5e4bb89d020243f4d0b89c0f1c
SHA512 7cc2685903e1366201771c46a0459a4f041be6a986928f7147ec351541d53d4881da2ebc81459095f9412e2ce7abbd2c39259d7894c448396ad6d86fab735593

C:\ProgramData\BlueStacks_bgp64\Client\Assets\download_click.png

MD5 815f05c30ece71a90419755e9febca06
SHA1 761dc1a275dd5ede73e660b3150459ffd65a405c
SHA256 a469c4b81805e3a890a1f574fe0a6cd9941a46ee2efeb64fd53461362f0a94a6
SHA512 e832954f9505e49ff931b11166e1d77d3e921d0606974f66db39b5e25d539b9ca2700463e766ebda0cf0dacfe67d1c336125cb1864bc55a44263447bb2cc79b6

C:\ProgramData\BlueStacks_bgp64\Client\Assets\delete.png

MD5 401e09c16308cec53665b47cfec88d04
SHA1 9f74de57ba786221cbcd9219199c769754103ff2
SHA256 428007be308e2ede2e18d5533fd1e7dcef22956972c5a6a2061a816c3a9f24ea
SHA512 51a81aeb8f2a906ccb8a15cc6341d790d2dacf08ce078f14de2c30e931c1463a6b05bfe0fb86e1401188923f15c64cc5cac9b4c43b5fe382ef4f625ab5bec9f4

C:\ProgramData\BlueStacks_bgp64\Client\Assets\community_macro_click.png

MD5 dd0e78fe679c83de3615d528e94c8349
SHA1 cba3ea57dff18be49b4e7a06877bbe7df4f9b526
SHA256 10251657ccbf320a64f1459df0958dde2b795d074dfdf56e163559691440267b
SHA512 e4fe351eacd447070eb6457f945aa330c56e7a04ded5b5ce2562827ef15d7cce6b566d0d64759c457089868e5a66ab0b68e18859d63d574efbe58a9de4979bec

C:\ProgramData\BlueStacks_bgp64\Client\Assets\collapse_click.png

MD5 68c072e8aabe82847a71e16e67f385c7
SHA1 807cbda180a12fe8bca35121f0de5caa0f3478c5
SHA256 b03e51a5c7efd136df2abb5d3951cbd6b23d94fffc49c6b874d26d92b33bda3f
SHA512 c28b324636524b2759b60224cd47f8048cc0d34b5b0419154e13c328121209d2ff249b2f5f9a5c3a8259a90f814758a2e6923ad3a5382af91b2c993b2f46e71d

C:\ProgramData\BlueStacks_bgp64\Client\Assets\checkbox_new_checked_hover.png

MD5 0f2de5ff992d59c3ffec1928df9a3007
SHA1 8b5ae0cfac0cd5eebdb4efe14702d7de97b25d49
SHA256 1a9f1d96be0535b40ed6a13ef479d04ee73118dee08be0058f269e4627e2aa3b
SHA512 a9f84bf533c7f4da7592528b0ca59a3ecba0e59162f1fc7da929cfdf9aa8cfd2f582d48e72d01f1a0a55c098d10642530ca9e9b1f5abe552c7b27a9424a14fcd

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\zoom_canvas_active_2.png

MD5 14bd565a951b052a7b562fca9e3532e3
SHA1 834466cb16f3fb3ee7b27862efed2eb114a5fd77
SHA256 5ed72837ee5ab3d3a482e04cfc8a152d1818ded5fbe58d41a474f484bebc578a
SHA512 49f4ae89f39c53ccd8d25eadc8a4e508198bdb2a1adf0a3932a30dcd72dfb92137d006cbef00989df21b7ce0d45d3ee9dcfd158d392798599a9f0c4c761baf94

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\zoom_canvas_2.png

MD5 0a3a216f3030efd65decf9d8bde968ec
SHA1 f0889921322010f2b21ece77c315a4a72d758f4e
SHA256 b78d1081411d1516908bc9cc2d81432e2945fcd8d43ac42ef5957f19bbb107b5
SHA512 943523629544cdf402ad247bfe4666202c61b9e4ec6484d322f85f578f298580feb6023e0429965c2995a572e5d56313675f162d5775b12319b6b55a897ab7ab

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\volume_switch_on_click.png

MD5 cfd140dad274f7a032cfe9ae50407c0c
SHA1 1cc1a4af95648f1e58fc8a17a33d49bbc56f13ef
SHA256 46bb4fdf1652188aa515ad0a9f248c9f7b46f403648105687c2c619d68c5728c
SHA512 c74607d024df40d0aaee6acf026a6504daa734ff6454c4b6d05484f27fef08d1724a0d9e258c452857e0f8f7c4f10dafbc73d236ecfd06f1d053b1ce8d8abd0e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 5a11a2810796a0ff728b3b4bd9587edd
SHA1 519a06a28d1bf2c218a6e51d8c7a17425d8e3fe8
SHA256 a7c7a6059415f46e1133f4d80b85a02a389bdd1669dd31b458c84729646e4381
SHA512 7db7059c5903c89abdc8f4407c5b7ee52faae837de6ab01c995080e804154d17e2eac7fd60da1418a8b56d69e7e6934d4e88362c5bc665aebff92a4d8da3cc2b

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\update_icon_settings.png

MD5 b06d3a721d0f1f8194bb2d2aaee170cc
SHA1 4543bb8dc246207354764fb200e124a3f440c5c9
SHA256 e2162b91bef50b976411e5ca26b9a749e215bc682b4d036c1aac91bad8cf48dc
SHA512 10279a91344fff07406c311e4ea719b56e13bc34b4550fcc6df93dcd2b3a0ad7baf109b6a1594b2c68a48277617e0003a987eba8c0789ca3fe1a8ef9b32d97d8

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\update_icon_big.png

MD5 eecb7563729b38cef994660bb64328d5
SHA1 4e5caa8be94f848c0c72a01e73519e84e749b4d2
SHA256 a330fb00e2623e5f8405aad15c75eb43484b5b3683a8122a06003c2c5bb15387
SHA512 790ceb7c3e41abcf860b7b793ae198086426ca349a8e150cbaa3788c2f67c0cfa95ce759ef5cb80d638a222d5a7674db134fca56e69441b638391d9aac2ac21d

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\update_icon.png

MD5 672691ff3fdb6a121077e61ba48500a3
SHA1 9c60c136e1d2e6930c053a68c725ddcd8b22b521
SHA256 28ddf61a8aa840133753ecf616fa0fce68ecb9950853cf7dd2541e346b5df194
SHA512 8c34b5e468fe2a2052f21ad4217b64974de7f2ad8f8c29bae14474a4cc76d0aff95564f04822c28b5b885c964223959bc56f169a1423513c5eda8cffc029f3cf

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\unknownapp.png

MD5 968154ceb5323d6ea0dfceff9d70e8c3
SHA1 23ac2ecc5add59d955416c0e80046e47d0407b5e
SHA256 993d7db2e41d0b241afa7f9e54e1a243c3414e040896b1387e5f05bd395d13a1
SHA512 04b2dacb63760b598b8c5e54750af098a7387afcfff464502813db89fe1d7b8e6248980a3ccba024b1359f6ab07129490ef2ba9f9aa6af03c080a65852cff6e5

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\unchecked.png

MD5 26b863e961728690590033e99197ae38
SHA1 e291c7339db1a09d0788fd60aa355008777ab7f3
SHA256 c330a6245ee92258b969c3d16f12f160e589e8283bde523eee56ed53fc567b21
SHA512 d3414113e1df353f4f36230ebbbec6afa8d7d3e822c1cb1d1781607089817adac59ff0b00ed0272358f4fce33c3944248742c8ab5af703a10f311165f3594c28

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\tilt_sidebar.png

MD5 3713d8ed019be7dd546409721cecbb59
SHA1 00c6fcc2563b369a9d5a1a4b72f7c218b42b666c
SHA256 95de90e2179251f125414673e08ca85b7f820cad0bc8fc9e14863841e85462fc
SHA512 3401a684ae9032a7a024031a7f673a8773203d861598b24ecde8f24ab58de3ca41f3b9c980179a40d38652adf1a1292b433df40ac0f8303b488356f0bf5187e6

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\tilt_canvas_active.png

MD5 90baf4780ddb128469ebb1fe91c15fed
SHA1 f094a690c91ae3667e94b6b7d17d6114881b7125
SHA256 3ba28d0e418badc393088e3fccb3bc7f31fa54d1ea85b5ac749837621e590dbc
SHA512 d25af2b18b2dcc21bec5fa53b7109828ab8353880e0db7b984bab97887bf16a0e20f0f15299a48dd1dabd039655e4a8561782947c0e031d09db9a0682de8766b

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\tilt_canvas.png

MD5 546d8c0fe1839aa6803bac11d5897411
SHA1 77bc63ab7652764c2e1fae12b9f88bd55858eeec
SHA256 45da7ad6eed700598d70f1c28720c815baccdada0207034f2327b327ef01b7ea
SHA512 b9dbc92c93a2a8a347f304380620e5822c6ac64b5c4452490cb8737cc43e76476579f26b02cb69d797691fb0b90e87d00e4eaa017d8ea5df124af4da5c6774c6

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\theme_brush.png

MD5 ababde4b0968d8cb715d4e01db818602
SHA1 df60ae8af7c4df1dde9c597dfb3a503ae0bbefdd
SHA256 c743c50a2d59cb6be0df734e5106ee03845b21be7cfb858c44905968ca733a8d
SHA512 77b3b84a7203a40a09d9deb42c0991db2c1801328f0aeeb547d3aa76bb22af9e81ae721752e8fd6605a14268152ff6c1c8e08299ca03338fac15b58c30f2548d

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\ThemeFile

MD5 b922522783696c3fe20f862222ca832d
SHA1 7a24d305ba3bd225954e8c5b481bd23112440210
SHA256 86905b34d4fd9f6d103e84979108d2ae2fca308f5024126d49fa3a07d42508bf
SHA512 75f189ba90347ca77c975b27dff41bdbac1879f7332bccfcbcb28a95dd90832e961250a53e1c330852bedbc03d276f550d404435a22439d524535c4a029bc8b2

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\Tap_sidebar.png

MD5 db748d12589d11631a3573202dfb0df7
SHA1 b827b0d6b151f2abef1a49e5fc573c5ce2689524
SHA256 d8f33536de967dfbaa2f3ea591cba4378009791f84134d9667c0490cc2d17c4c
SHA512 c755c7d024dbf76870cf422b95dfcbcc4f4b3a071658ea64cf4f4c28c5ce443cb18823b74152b2f20b78b605739db32aee0a455e512e5ac47733e92314036d9f

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\tap_setting_icon_hover.png

MD5 c602f7e4e24c5797cf4c07a688691b5f
SHA1 7b71624d70d3a883133f3429df197a30ad470ec7
SHA256 2373df4d139e1301902b144e1bec28303926e1f9c04174ba16bd720c4d1a8fa3
SHA512 e32c399a3a48b23cfd0faf593583b1d06b1248c5dfb2dec47cbb54756371bb2e13b00b6648d7320025430d008af8032fbd81f46d74f054527043c20535601eeb

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\tap_repeat_up_arrow_click.png

MD5 8c4b5a05e37e6429474dec95946bbefd
SHA1 0543726c5990529210cffb0d95898e3a71f12f2d
SHA256 110c75c35fc6f1c76a6303ce8a301376a5de2f8b785d94b4b9c8239e754b8bf3
SHA512 2d25d1823ba75722bdd378f2779f4a822f0b16fed24a7004d315be62f88a1ace3125adb18c1cc5300b6a6c36ecaf57e859ec66bbe32bbefb325f52040a7303ad

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\tap_repeat_up_arrow.png

MD5 dd48d1891bc01ad08b785d0f82f36766
SHA1 2285fd6f6e3800858f24f5c6b83e12700ab1b046
SHA256 0c3adc75309e594b2275b1accb6c98ffef92fafd4376e48fc148d62d0e7e6c0b
SHA512 0b8de17c35075151f19a2a01ac90a2d0f5ec269f4be0ae069ed9843e0d1b97dc0b369471c96b55e42739aaf0ba02aaa91f67a80b8873dec72983be8dabf8f289

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\tap_repeat_down_arrow_click.png

MD5 3dd38f7d5e66857365008a7020f475ec
SHA1 1eaecbd6530179c0e94423a0580513878658598d
SHA256 aae7d7febb11aa40ee25ed78947a75fb30211c026e68032dac609cd8fb000b26
SHA512 3a77e6e10b18e1478323b9e82c266406c4fffe5caa166d755927d6a6d0c1ed26a9be37ca002aeffc18f22c61e44084d2a41b2d7a0022f1604eb3843dd6f905e1

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\tap_repeat_down_arrow.png

MD5 52c6ce28cb3a86a164352248b23f535f
SHA1 74ff7499239107a2d82affb16abe23b0082b36f3
SHA256 f38c54ef76ba7f591a610d89d86773d7dcee8315ad1c00b7ef0b2cdbc0e419e9
SHA512 8709ef2e009ecdf6d1e31d190aa401dc9b9d0b8c7e178896779c60b5b06b3ca30f3631e1fd9496f04a2b16bb2050b749c5e0f265fec174c7594094f279854e54

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\tap_canvas_active.png

MD5 67abb33f3433456b9120855beaac88c9
SHA1 52bd136ad1f8557d6f6c90ce3b5a0c7f316e7a20
SHA256 4baa508708fdb0e04f027dda626e2f4c6dffa2c236de58b03fa4bcf8d5a9b8f9
SHA512 88d086196f26b4e803cfd6754cc7e377e69d9e6372ab57663d8aa400d784c8b6578401ef15a6ca9a687110aa3a543f39a077e724f4640a1d772061ad9b9ed094

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\taprepeat_sidebar.png

MD5 249578f672d35e0d07d4dcc1883d8cfb
SHA1 feaecbfc27ecf7ccbd1e39ab5b21214822e8de03
SHA256 f224f1044d36b71857623d2fbc494ce9276f9fc4d926ccc66e2dde7f9eafb47d
SHA512 00e1bed7eac087628264466e5eae116da2ea44f1d8dc75fd7272ac3e6dcaaadef83ea57d71380d492c0ad7bd5f8cb1a829d2d91604416f4abe81334ef62d004d

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\taprepeat_canvas_active.png

MD5 4e143607419a231d74d5478a9e7f2150
SHA1 e41ea9a32ba5e771d926de232170619a67453937
SHA256 604236e07c2bbd69337d9ebe11d849fab05d24c7430cfc8165966da45e8b2a4a
SHA512 d9d8a110df33f0a66e795e6468b59082ebfafeb2a799f4970ad75d5236c200845bea5965335ecd750ab965edfe19c69d1ce04217d651d9c2b998db0f91d18af6

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\taprepeat_canvas.png

MD5 4f2285f123655b1c3ba77ba3d2a25423
SHA1 6219effb129de068eb2a32aa7851e729f51d0673
SHA256 f364e82228d5b7f876af7980abfbf793e1609e40ec5a4aa0a8de9b0470ae48a3
SHA512 ab9f1201a01ec78c436dc0e026749fb95d23a4c3b75aad889e9ce04bdbe03a09a80d8a97194817cd82bfd6f5c98a15137458bada8fc3ef8a929fc991f7b85f97

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\tab_close_hover.png

MD5 97fe0c9798ff7d818cffa05117f27973
SHA1 d00af02f93daa2f8df899318d7e8e1ca028c4039
SHA256 66f8bffb392c48d12ac3816841ebd818f7a8be8a3c9bbb64081b76e76904b0d9
SHA512 cdd137b9b00956a4dec09eb15e539b9fa30434d0f7ecc74312eea204496d8351e8bb1fd0d34eeeab07e684c71dde39682bbbe422f489178278a99bd6ae0f44a8

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\tab_close_click.png

MD5 ffc95cbf293eed8aeb1f6d525ab187f1
SHA1 867069b62fdce10d3ed7a58e6d4f376f002b525b
SHA256 da03395d251996b9da5abc76ebd8ba97d84330879aa00c5982b9b572fc78c8bf
SHA512 5745944fa7a3b48cec8cb64e21916fdb01aa13838a95e710984a2346adc2d88206a234d5e952d3179cdd0efb8effcfb32ffc598d3dbd52af1f62cf8cd942f863

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\tab_close.png

MD5 0acabb6cd69e4852d1e3dcff5a4e2cc6
SHA1 2abf23a556a6c28383b741ce5f533d39ca39ed9b
SHA256 75fdaf829846272877a80589e7d6d38c4ccad1de538578e41656e0a5115f44fb
SHA512 73276dde82a2604d73fd002c8a6ad3336fe23b4dc7c46cbd8eada4b9b0b5010e38e66e2c57100af7b395500aae22f051fda1b292a6097504fcba8ecf3e476d23

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\tabclose_hover.png

MD5 d249621e0df05f4d56f87923d6efdc8b
SHA1 996ad6ed62e8b25664c122770eefd76ab05d4d4f
SHA256 daf1619a173980467029c9a56204c89a71ccaa4e7f3927224e49e201289a58cf
SHA512 33ddd6e2b8af4259396244aca5f4f8deb6cb7557c7d886efd1fa4b468bee6a86f7a5bd429dc376939d50a4ad740c4e10d868951cb225d7fee3aa09f15659849e

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\tabclose_click.png

MD5 a80a99f3ae33c52f2f606b8b76f80368
SHA1 1498d9e0d6a28e2740ce1ba9cc577389b92885e0
SHA256 1efea230cb42ef2ce1e3f8a1babcf9ad4178e6035dda5a5301bc4c8a807cc97d
SHA512 8920aec7da1a18f37f5d76f9ec15b094c99ad7b20547e9c7bd66d34dbe3873457e69663a4fd7b92c049ab3d71ecfdef8ecaf95c479ba68af73d235e34f7f19b3

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\tabclose.png

MD5 25c386b081d39447c57510155c5c0392
SHA1 969f510a3aa7d4cb53f15f68482090345a67a28c
SHA256 0877ae9464972f49dbbfbbf1d440837e3c135494514d51604fed73d556d70804
SHA512 39439c1fe7944609951e31b96c897e971a44f5f0adf34db0d361b62e1c0a667c3588b4e5ae8af2b8a20dd0176586640db6135f76e681cdf850a0b969a04c8a90

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\SystemTray.png

MD5 03d67993d275d2f5de2d67380142a1ff
SHA1 f935e4a627cc4f0fe6ee4e586f47f7e20cc1daf7
SHA256 97bb59929890b010c198d23407578cfbbc53cb9a3ddaa642c15fe8376332584f
SHA512 8aef9472bf409bb7208477d73a1a49b4a2cf1d2c46511ebcd29bf7f0565054a56dafd132f046c1b59e5160e8675e72e31ad02e4adab0d57812a63a4f438ac1a9

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\sync_titlebar_icon_hover.png

MD5 2243c91794ef6648a210b14f4fc38642
SHA1 e94489acb81e422e118662b2688c1f8bd25bc469
SHA256 f64d0564a549c2ef295b20045757d4e242e9f8d9c4469551aa999ca8e19f2961
SHA512 27da1f42aeb4b77f142b98efa78165c59778457c53453e7573e69737ae90816a1ed07d436a6360bd560a21ffff4702b9af1332f0ab84939a9c9443251bac2a86

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\syncicon.png

MD5 62573c66faf92432881681dad3b10cdc
SHA1 e541333ad3f2c124c98c940b427beac19e53c3b5
SHA256 1256cd1e67fff989caa58fa6e54fea2799b3af42ba6ffe235e575ce9dffad191
SHA512 e507d95635b480ffa4229d651c150d3f67ef4f8bece342cc08f806f91f70f474573f32252f2a7d42b1a27e826adfefbc60c320ce07c9b308797c2cc7ea66d1f0

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\sync.png

MD5 c10a75994e51e042040435666e55fd1a
SHA1 21b6ad4b04db106d38433eae91745a4848c2886e
SHA256 ffea7789afe3f21a54175f9eb1fd19e418135f9c6c161e14eab4c7c4e7bb0439
SHA512 43d6d332e610aad1891467f710cba5f1eda1e80e30706c4873e7c6d5bd3505e9ac1b45d90dfc8ec65c20ffb64ae3aa48c78c950e3646df55f2c220dddd192c21

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\swipe_sidebar.png

MD5 e6da618f978eeb22e861bb4de581ba46
SHA1 cb436497b7e9fe96c2391875945aba8d6a1f8756
SHA256 a26f8de292241f5b73c30f8b103bd553c78e9f601bf1c64c112a902dab371dba
SHA512 141fc4f87f93f71299a01d080fbb621ef46221f4266051b2f8fe7585e76772ea6463255d3f8b790c7b9cfbbc2eb1371f636cbae3c79a5c823b2e98cb123e76f1

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\swipe_canvas_active.png

MD5 93799af1a8fa753c133085691dbe59c0
SHA1 604779921bd697649c0a95929c70bd4a5a149252
SHA256 41f434c01176f965795c4da554cf298ba5e2e558da11935b22d2d8e1f4a29b6b
SHA512 a2706b85a9721d5297b673971c7bc31d23b5fc1333fc008f6681e770e680ef1a041145ab0c5e481a7754dd7c1395a7311bc1323de295b00f30959edbc740cbfe

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\swipe_canvas.png

MD5 5f053bfe139bad43aff2c40a65c3ef82
SHA1 8dd4b4077b3312cee8716763d7ee426fa2316c0b
SHA256 27f84a3cdac6c75cf580c321c05479a5c8514c4665d22effec69d079be7019c4
SHA512 ca83345924af8e40ce6ec0f428b30093994a5bd1b4704f52bfdb8f1ee2bb9a548252df5afab22e8bbbdf3be56df330a47456a24cc21a5e2f71782accc2788a57

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\support_icon.png

MD5 dcb1b0b7626a04a0eb37b17be776f352
SHA1 45acf5b942e8818f7b48b332c51d1a7159784df2
SHA256 a8ed15abd56577b81224e0e5c4ff229de8cd53eb8ad99cbc2cee73a9633f3cef
SHA512 3c254c292e4c11784c952e874b1071109e40ff940a66a896510bc2ee56a0c1d24e1367f98d6cc27f961d89e73af4608e0dc634f0bbdfe7451717a6df273a9c5a

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\success_ots_icon.png

MD5 17f1116c03a890a0aad73303def3b812
SHA1 952b6e02803d5be700c233c7e68617d352ac6524
SHA256 5ded2e8c760db9fe34cfc0b1ea93e4b0977c1175a2007871c8f80a61dce8f726
SHA512 6814881ab5e652adaa18cac3d0c649af0fa4c1b91e203a566a9970c92839481ae906ac842f4173686057af117d1d42e0d74ab9d2b7b7bcdfdb54c586c98f8dc5

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\store_icon_colored.png

MD5 040dc6e9b702e0fb060473c9ef26b756
SHA1 b05cbe75114b6dcaadc7894396eb40dc5554a81a
SHA256 ee31b011ad3fdc2252b98af1eb16befae141b999caea0b02b190ca9c9dabc8bb
SHA512 6b1fc8ee9958729f039cb422bfcf0d272ba1977b315a945b7d3d094c79ffe0e1f67d915ffcccafe1f2128a0106cce060d0172a097fdcbaa432c701ba8180e5d1

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\stop_title_bar.png

MD5 52759687666714f6f5111ad206caef49
SHA1 1eb9a5c8ad40a9e77681fd757834362f7c9db6e8
SHA256 9888d3659fcc538e631aa202adf5b9bc5316cbd6f4c05ecfaf5a01798c19efb3
SHA512 650473b908ea86e60dce18cf2a631fc2eebb55d8e5da1b8dc95897a2340956221dd1db536a910ca689c5e068bf422501c94a6dc1a75236800cc59a4ea23e0741

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\sound_Selected.png

MD5 7de1f271bd054f1c5184a3a9b4dca8aa
SHA1 a5b7ada23f5d52a94c42277b58ac781debe78e24
SHA256 ba874b985fe1d83e1467539af5064dc52306a29bd7ed8c155a21dc2bc94ea924
SHA512 e1295f0c0313b4a166dc9868833796d3ba3c9ab4946cbc02c71106b6eeaeaf239694235453c9288db90dee40f70e6504ce9ec5e354477b9f70aad7c7b32ff0f1

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\sound.png

MD5 8677125b5543394d5883fe455ecb08a8
SHA1 457a44f486bd62fc3fb7923bb024e9b1b912be43
SHA256 ed6d09ca60dc8332b5166f4373164d2fedd853c73bb21e336cd7493b269720e3
SHA512 fba4aeedd8c07b05fbff335245717223f3ae7ecffbc1dd0fe6b1438fc3f523090b4a29d61ec00be7d2dc9c4b0fb6572f13237b57ec83fd98834f3b7093af35dc

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\SlowPerformance.png

MD5 21f95eef7defae89155d7253664ebe1f
SHA1 083bf0ab13dfbfbf2bcec8675618fa5a47b51a34
SHA256 16bd45ce6701a0a287336269fcc077520416b3a4b55387451aedba16e98e2aff
SHA512 a8d88ce2221c77e89f5c9ce6b43db8bcdc367b2e4f348af19cad56758ca4ddb341bb5a1fce25293a52025f0f8875fafe02f146475f2c392fa5377b0cf3b8e41b

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\sleeping_icon.png

MD5 d3e62942ee29df0f0ad672eba1faf83a
SHA1 c43428a1d8d732f0f0b78fac7a3e183a651ee148
SHA256 95cccffebce6a41c0cd0b485f8e8738ad45868c22f9f1d9a301d49c66c73dbd6
SHA512 c0788ff6c14d58be121e488c08f3c7a3cf4b9b6eb4e5f072acdefe58426330b2e495d46370540dd02abae69f28437845960b70020c3cbe13e79e02be9e29a2a4

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\Sleep.png

MD5 d34fb5b01cd00d2aa9adde903d99a76b
SHA1 86f80fd556a3093c5f39a670e233433eac1dbc6a
SHA256 bc6a3450c806438a555628075262cab49c9d94d0e8839ae10eb536b2349cfa2e
SHA512 538ee4d18ea0ad08ad0e1b2e1b4e2750bf785a94df1135bcc01c4b7c6d96814ae495293cdac304671c93b8fe316dd908580eae8f98fcd340d0c1218e5d64bbef

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\skins_hover.png

MD5 a59c4550fcc0932522fd49759c22fe84
SHA1 f3c0730108359f2c19aaf665dd23f5bc90fcaee7
SHA256 8d9ae7ae1e86869ac859968ee19472d1e611c74ef230b512893c9fd023120962
SHA512 d6b18892bf69da6266a10c6b19dc42bebf32a2d4cd6862e15b83c47adda653a125cf8913b31410e7006e6493335645a8278defa4f09bd41a20cc3ee8eda2e94c

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\sidebar_volume_up.png

MD5 0c19e461710f3247a2287920486bd902
SHA1 cfb9fb7f86fc09755018a891c2609fb0e453b60c
SHA256 4ba3adaa733ec497f86115f6b61406af64b2753b23e3b7abf686d7172d9955bd
SHA512 500af3a882143229712219fdb2c672f8c6fa614c01386480d31775d4e6905c7cb3e35ba1d9568a62664d229c41b89a2f111d75f73eec8efb7c694860cf8ecefd

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\sidebar_volume_hover.png

MD5 6af5867f5573219ebe912ae1bd238541
SHA1 6b1f91cde386ecc999f045f1ecfb96e901e2cef4
SHA256 8a25334fd7913673bb3c5ba49ebcce5cbaa474396794ca089a0bdc688424bcc2
SHA512 03357406a5966451a71fad589af9764f2ea6c177e421759356ee4d61d4993ead6a5cd73f253b7174387001beda23d928a3f4eab394bfcbeb1b4f7e28daa91d17

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\sidebar_volume_down.png

MD5 7b9111fb08d0a29d4da134c1b6e65dfa
SHA1 9c10ad278deafcedc098af8e9624a79532257bc7
SHA256 19e87d92761f03c8b3d5a3a5a3e1085be46028f47ba4edf774e9f49a418c18e0
SHA512 814bd657f2ead7deaca123a79c8167d1f9ce13102a456748fb9be8c5d30494c23a6687a34d0e667d47565f8d0ac6485d0da33c48e57a8abc99c9abc7efd69136

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\sidebar_video_loading_hover.png

MD5 c463d155a6d34587ea6b5644710c9799
SHA1 9c077eb86c0f7aa48b24c005ed3f7d398fbdc2af
SHA256 ff70b695e9b5781c5c96a20a599e3fd2f77436ca7861058b8e107c0c5793a3d8
SHA512 a65db8b8599501f8d315d0c2465e24d0331fd961aec46dda20a5b59190c05f21452656196e397eee1e8026fc170d0e3bf1ffa7429c48b44b70d1d847883353a6

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\sidebar_video_capture_hover.png

MD5 cf260bbaaf4e6cb41f5ead9127bd3a6a
SHA1 171bfb4247bc2b211fb1bd247506ac7d0c1f842f
SHA256 6f8db3af04f8cdb65784d4610ed6032a69fada70b8d75cf584977bf756f3f832
SHA512 c668fb910b8b1e22a7da5f5d5bebd5a2538df61c0c688b96407dfdbb3f5685206e42ac93d3f7966522c1a2642f01f0b1780f818c582d9f5af8351de287b82249

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\sidebar_utc_converter_hover.png

MD5 97860afc0107ac6ce7f49e6789cd4ed2
SHA1 e1a5151f94245dce4f0410dcce53d0e83617fb68
SHA256 0fc600640d55da2ce4dc67244b26faf751882d6aac13fd4b16b6d71e273ac6e6
SHA512 5773d4b7edcbcaa6ad535aa578d5437002a5e1f65ae3f08c309057d0872449d142e85bc68b038a333c788278e71ac2ab4c284f65b2b350d3766a1f0557fc1cf7

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\sidebar_upfront.png

MD5 f6469c5ec774d19952f4942e78284841
SHA1 62ad3eff61df450a98426c402733fcb926b8be37
SHA256 6a72b035207f16fdf8bccc1512ef15aa3f8a92db123c842a747ee0dc0bfc58c2
SHA512 b887ac16587b9083d45531b91365320d4976163a720d2dba7167a5f76b5bff0c6f24525963012eed4f424e9434f30079a1fdef02deb431d51d03cc50aee5be56

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\sidebar_stream_video.png

MD5 efcc39f34b1c8b70d63a7d5cf5f3c58b
SHA1 3df0ef7c3ebe1fdfda2081137585edd449604499
SHA256 f6c0eb4483c0f6613d26f1f65af5453a1da71657d81f3bd5a5c28a55a1aec5fc
SHA512 9c4be06caec6cb0e8435f7b01917537086b397a5b793b51bc1a1067812eee1ae16a02803f546773fe3b11a78ecde050b8a37295faaf54a295ef00760c393788b

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\sidebar_show_hover.png

MD5 101156c3a0e387fb6e11604f75117061
SHA1 1f9cea45f165d20be571b35c242311a8a03765bc
SHA256 8b66cdd08ac26afe39b0e85515b8dde0bdf8c34d285b41113f15f33d5699adea
SHA512 c8c9af71dee6b9933a43234d5a4e5a8be77e0a9421cd70a0a64bfbd37d263e5dab7fa1a9b22f8001764e344a4533e23e93583be0e5e96cda5cdb6518e3a61de9

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\sidebar_shake_hover.png

MD5 ea891c724b29b894193a38e4f128edc9
SHA1 5f8a2ada4e5dcf0a838abd176cf9029758cef351
SHA256 c327852fc1171a655f37af8be758d6a3ae1315a0fceda974ea3df60ee3cfe30d
SHA512 52443179ff7b18777e301f47bae47123dbccc5bb2f2fa503ec764181ff8f9b7d7416fce0841ef4c1e61026f322e7a566758afe2aecfd271538a25faa818a2884

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\sidebar_settings_hover.png

MD5 4a061aaa82f368730ae47be7799d2c17
SHA1 2f627a47e1d996a26e72910c71c0e7512a3b1330
SHA256 be83dc3a837c542b433990692cdb4c882aca20343ffe9c9c22f4afa69797f5ec
SHA512 ede5c624494a45a1867a70d006357bbee60b452de712f8c9385ac1cd43f41126ce3b616e6dfe93df80715077c19114f3f9093ae866facebf45adc4bacb31c019

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\sidebar_screenshot_hover.png

MD5 da20f552cc91dd7e32fe7b71d2ba5c7e
SHA1 2dec6eb1aee4bef88e2ad38650a99bbc681d4a28
SHA256 2deb16e31640626f61da2c4e5eb6da19f6bdd887b7744fdb66ea308c397476b5
SHA512 153ae5226b24d457487c806e6dc4eaf0fd805f4f33ae7ebfadd68a8bf353b2566444bf81761d7cb2bb0b6fdefbc0e575a23f93abffeb211feefe48e92af299af

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\sidebar_rotate_hover.png

MD5 a1b01ffeffee398ea4e324435fb7fca1
SHA1 9ac4a54b1239d742eaa77d35572c1543db6375a5
SHA256 f2cc46feec05c5870fdf869b67b8511172f36000bc3f87b0065ca3f75d7bf941
SHA512 da95b2c06ea2964ac313f8054bbaf0fd30b76abe2b9ca8c688c7c95d4bfe04d71a30757defb940b948ac5d59beb7271dd736a894032eda2233e3e54793882c75

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\sidebar_overlay_inactive_hover.png

MD5 fd9e2bfb4ce4c10b544474233a3f9386
SHA1 8cb2cee9b365a72d429c36fa895ffd637a7692ea
SHA256 f59d3ee314c0efe9bf15aeb0785cf3ca2df06f125928adb92383056e96adc6c9
SHA512 8e705c34dc979fd00fdb3e8ab1c227b2c2c2369051ce528f63997199db43be7c71c5a1bff18527d175add114b1835c45f136f9a0baa0feb30d58398a458c9ec9

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\sidebar_overlay_hover.png

MD5 a55cc76776e5d1a5e0feec486108c53c
SHA1 71d8d2ec2bdbedb6637d6ecb54d45e6e86a9a588
SHA256 fe602cdd154a282938f68fe9c66c29b9e506f20f277d4ed8b5ef08e274fcec41
SHA512 d9d2b03ac3b07c052256060e7e6942885399c9d67d97719e2fefa62b874baef8ba69ad7f88c086a7cd872cca81a63c2277f07485ae94a4d1e51f68c678d9f7f6

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\sidebar_options_open_hover.png

MD5 e426cef00c5c75f23ce50c08ac3e44a3
SHA1 b40cf60de4a7f2e3b399fa263bbae81c7a7e979f
SHA256 f810e8fe4e426f07539cfc894adc672ecc9f811feb8534e65343e455d7dfab3c
SHA512 29590473c75d85f287a0ad4719e83e9db16f2be8744b06198daa533264655b1d99d93d159c6655a8f538ee124006eebe2161ba937613cc173a201c7d602f5668

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\sidebar_options_close_hover.png

MD5 0f0da51b949a2baa85420c17779b6711
SHA1 d4918ca509ba140b8b53fbee71caa107310029c0
SHA256 e9b937bb8ff30f20ae53095c50d9b32cb10dfe803f3fdebee365a87b77a6fcb6
SHA512 3099b66bd65749e0ab4bcb8cd944867ce91cc94b3278c45f3cb92e4c376b44e7023050265069eaa83ed20d077308e7c4bd8bbe93945f54e07161eede09c3c370

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\sidebar_operation_hover.png

MD5 9603c88dc5bc6c1a7eceb58cae1e5b59
SHA1 4133354acd00d6c9f9b4d5a030d83f78fbb556af
SHA256 bd22ccfc8eb20191ac547ce4e9b39c89a43649b32dc54564dc157f1038713de7
SHA512 866528eab52b5197f6fb621db575db857b9a09a307f6652805537e93bea8f2288ded9c11e0c951edcc63322f171ccbb796d772aeb48880ae10814c6a8b991631

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\sidebar_mm_hover.png

MD5 66b1051235c3c5f4902c70bcfb886c16
SHA1 e6d1a75064ac79f3b6e491075b0bfbbaeb1d8f07
SHA256 a71213dc94bd6d11e061b80e29d02f875401504c5c9ce6a13c3655f297036a2b
SHA512 dd9ebca9715c403fd95dbd4daef4f5567c4e749f2ecf229f1baad731aa795fbb6ac0c8160197a4ad805bb8fa62f3e2756d9382ff036892bb50f33a0651a99a3a

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\sidebar_media_folder_hover.png

MD5 f2cd7810dc49a5e2791ee8756fcd6178
SHA1 d1a53069bdbf48b2e3b62aedd777f699a1b8ac1b
SHA256 f6a7724b32471056e8c069d826b1e36e43fbbd4b1052508e70ae44c86271c23c
SHA512 07598e82585dc2d8c08534a63688d4c6cf92e0107d894bf1e96aa1fe90d9d1ba3913da429e740625a4e6c8461c8c7e2f3341c30159be4e4f08611333aeed0335

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\sidebar_lock_cursor_hover.png

MD5 d581f319895b8618081b89c010e8711b
SHA1 1c6a327f7cde8bcc9128cef3a55f057c34ae61a9
SHA256 343703e5b150fcc11a0749ab1dce4a25220cd7316b6b4c313dbfb3e86a273ba2
SHA512 05d66d40242b2e8143f8b2262b68ffb2f2af43ab9397d7acc998274976b91bc296e0c5d8af9191bb360571ee24c58ce9de4b27ea734816050b85c873cd644ee8

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\sidebar_installapk_hover.png

MD5 f1f8ad531969e0da7948e9b3dd46b5e0
SHA1 bdcf53882e4c6acc94b69d6809b8bac7b6e4adea
SHA256 a235f5abcd8a91b0b0d0b61a57ec8e51de92e8db6e05b2ffa248046b1a37200d
SHA512 96169c2ee07be28d437df7695a85d8dd922f1303fc6507075013b06d986ab07fa32ae9b5f76b2317422bc9fc70e5de19c55fbd8d8c90c53f2873ac8c9b56b74e

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\sidebar_gamepad_hover.png

MD5 8419ae8dcdee08038fa72410083282ed
SHA1 7123bd0bafc0a2d1f6d5009fed743d5e4603b450
SHA256 7c6dca86707d0d289a4b346f04346a689ae01337b072291ff969fb538812ac51
SHA512 db57d49e15f84ccb0e9985056bcdce0984b2f34187c2737254ec028669f1b968ec8580c9576064a1e8306b0db1c3031b780d0e3a343657eea038f4daa314badd

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\sidebar_fullscreen_minimize_hover.png

MD5 f3621bde824509c2db2c0b92dace090f
SHA1 acdda4cb992eece73f96cc5a5e4dc4fa9f572a16
SHA256 be2f86512fbeaa47356c13641d4a2fcddebbb9d4b313501d4d9ba0eba9cac452
SHA512 f739b3942f70f5d27baeae2053a68cb4501d44564f3d519b42256b3524689ff83050a102c240e9fa0826f28cc5cc9cdc0e595d91a4df1c3e49d5ea1caed465d1

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\sidebar_fullscreen_hover.png

MD5 ed8327e5f37c148de7ec10409a56c2e8
SHA1 f3c523e72a69b0e7260df4a4d84c1c200e0364e0
SHA256 131cd5de941a9462c23c48be76d1c0678f66298d43b124ae85bdf331ca262865
SHA512 b0d4bd9cd0e60fcd16cabf92947005055b16bc996ec0d1500199cb9235bb3a420de2daa408eb168d39791dc57266530e474a5565022e6a749e6c1337e66e1e82

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\sidebar_fullscreen_active.png

MD5 4d70530ddab8cf880795b4262ebadbdf
SHA1 f1c4a4e8414641c22476ba70a979672c5b957467
SHA256 127a2beaba546b76d12489e17d3db88ae99682487a736ad0b83d9148f6e72712
SHA512 426348491fa10813627b3402c75860d1081a911fc2216056ab1874cdd35c1ca5b160276ea8c5fd240614be2337c46bcd060ebf722d75c4b4c487f4fb9fdede30

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\sidebar_controls_hover.png

MD5 a46048d038a86b71aacb9a008e333fb4
SHA1 27bd92c6c60aaf9a62dbc50053c192341d4ce53c
SHA256 88ba83c43fddb2f84e01e11f3f19853630215941de294fcad5b41a3b6e6620c4
SHA512 210cc790dec9e4cab733c32fdefcdee3484a447616218dc444fb6b22e99991bb3d916be34c75bc333a1809a26a0d70ffc23740e5f45a52b6fca01b920c734870

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\sidebar_back_hover.png

MD5 41c8392f32054dc78130463f7a9afd76
SHA1 c0346e29473c7a213cb5202270a8aca1c457b73b
SHA256 766985e84f2b89d976fc44ba428bf74b95704af7d5ca06cac6379f5df1c68ef7
SHA512 3087df4c7d6f086869ff18b97cf34d9bd8a8f779501c27ed4d7a1490372b6ebf4b00f55eb4483728f9b7f10c4e7ac668915398c9e8bfa2d05b0c7a5a44eef0c9

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\setup.png

MD5 b0eca4a1c3eb892cc571ff1b2ecf9bbc
SHA1 6accafac88cb48bcc5f767797349daba69036111
SHA256 f3e14839cf284b35b2a6a948486d2d29214e58ef8ec34c59e17ebfbaa4769225
SHA512 6ec7c4ada347d72c542c5e43643be8e703a5429e332e2322ff045a60c7eceaf229a0ed2fe08b5f8050b01f19b02c753106460fbb897c60d72ca548be53e0ae43

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\settings_header.png

MD5 974577e5cfb52b5301bdb06efdf191ea
SHA1 cd98b9b09e3b48b37c9181e4fa708c24de7649cf
SHA256 955de190a98e43eec4d11945d8f233ca19da09d43c9fcdf7cbc85089bc73282a
SHA512 e693b09519462bf59b6a1b860589ca589593a945310feeabaa83a0aa56b9c397bbfc3b560b8c961c1dc607497e0cf7953466199e5b0539fac53cde0eb327bf0c

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\setting.png

MD5 b87460db41e46197dec03c71bead7557
SHA1 5e07a4f50e2ed9b5a5ab662cd303423c6b8bc93e
SHA256 f3d92c16074ecf59645213dca1b4d23739de5853095a02b599a2fd2fa48d6a0c
SHA512 afabf7c7ec5775d1b57f795838604deaf0ab9c3eb39d60263600ed5b052f01b65c8e9bfb27724989a7bb179bbb1b94d3cc9625ea77b2afdaca768cbdcca41c7d

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\script_settings.png

MD5 4a00ca7b485aa11a766b2ba7e78d0b87
SHA1 747f90112d764643242347fe1444863ab66a6438
SHA256 d5b6dbed361a78208da0686d465d987ef3c8b1e0617cc1792c230b925a7c6e8a
SHA512 2bd847d93521650c433df02ab15518701abef6e37430746077971801d6bccad2ce5fec3f4ea599c466995e4e501fccd60487d31ceeca365794c658cd348de8b0

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\screen recording_hover.png

MD5 3b5356e266d80b6fe2a53588fcb11f1d
SHA1 52efb0d34edfbb2b42aa616ec43a240adab2497d
SHA256 8c47287e9c06caae2cb0f42c316dcd2dc4511e28b77474275d3822def1164c84
SHA512 4e2b4c4b77997090856e481463e862fef45d6af7e22b5ac7c0a97387a751092c3e67e8facfd9c272745f00d90fae57290367ed7174b386912f8b9c4fa26ecb05

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\screen recording_disabled.png

MD5 05abbc7b929606039d2ef97d2f02958b
SHA1 a8c05ee841809e9f860c9c55386584b6b02800b8
SHA256 46148a1a9ada17a052b0fc6697fdcac58117c51814416005a949dbc9c54fea51
SHA512 2006e7f8b3121be11d11f843c841ed2033097ba9748d815f1c4294451fb4ecc47b75da95594b9607af075f27755be05153e92eb7cca030d19272692aa2c64a4a

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\screen recordingRunning_hover.png

MD5 d784847337905a0db3a9316f72804d74
SHA1 4d95af9c0ef4df653f251f0dc7489c661bf43246
SHA256 9e7aff822def38d44019d9b7884d68fc3ddad4337f06e11aab6e5c50d2ab498b
SHA512 5e3fc0e8d8116e06e4047a5eadde256848c36923989cb2b0cf36f045682b2ade1c145bda95b600b9212e2871e56f7bfbb5d04447d41455914e09084f7a144f84

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\rotate_sidebar.png

MD5 3bb583c70bf3883e466a49dfb84f3643
SHA1 7f38478d748c3c18601b0d1c4136d0ae80b60d40
SHA256 4643af1443ef05fd12c88470de04d252f432416d27a7bef76ce29ffca2e6dc63
SHA512 8083f58f956256724e28eebfeb4dfdefd207347a976ffde3ea21056fbf7c247be72853c0a7eea21bc4b0b7358b81d5b3565f8e144736591704804028cab77594

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\rotate_hover.png

MD5 fcadb9bc39c0c8d4075ed28030fef818
SHA1 a7c6b69d3eec6cf1f9ed21cf7acf56bbc834ecd8
SHA256 90f5d4f789573527fd875c5f42a92d4930aae88a9871096b622f33f6c964f7b3
SHA512 a61c7ce81e5b26b070d0c4d04b07f7259c8e7749cf5704e40b23df87a466aac58255449acee6eb7ab820a695d18ac58b49db7273cc7b3b45a26b070a2488cca1

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\rotate_dis.png

MD5 f2a5d147b5a66883733afb839dc73b74
SHA1 cd81e5a5b3a1aa4f1d26be692dba2826d3b78bbf
SHA256 f56f5db03b120d6b987badb5050ead950c629c8b4e18af1b98b124ce59a187ba
SHA512 a321a6995fcd126c921dcb99562690cc25636b0fbed5e22d85e88758cb234c6cbd2fcf9f022b4179efdb3dd7b2f7bb34ecf0f956f7e80292ef1673e499dbfbf3

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\rotate_click.png

MD5 cc9341d60d2b663830cd032d6cc5b2db
SHA1 e5236118904ef478297fc93a125736f6e1abc1a6
SHA256 f20fbfa2e3380003aabe8862a0f3a8442c5aee6b6d49d4b028dc39279ffa9f68
SHA512 1a4217db93e3ff011ba1438bf2290a8f3d218e8119989d90f8b0a8912151f9e19014f49d685b3def91e2ba55de90472c9dd59de5ad7f793133e03a06ecd7ec50

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\rotate_canvas.png

MD5 54eac66bf41761d4404f0029211ff6d3
SHA1 2d5fdab78f6f04ddf4d5c6a96d4405beb2ab31fb
SHA256 f8d2f577ad9fcf63a9d8ab279a91799aeea2102ad1f43e1c817b7b67db32de22
SHA512 5b50f7c804b1f936b6e26ec6bcf7e35fc62ecb31fd7f5b60a96a66d959531e9f5d9b2a7e3cef336a035abbc4e7b054542c07868388e52f28d7df4402267c7408

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\rotate.png

MD5 b6faea2513e43fcb845cb87e5c94d543
SHA1 30bb96d223029b7aff1ba463754b2ffeedd8479d
SHA256 2e2c6b7da688b4a12edc0ee7d9127e44cb5e4381acb4a84ac6c05cb528ac9337
SHA512 ffa623bdd29ce9aed39404bceaae1b29e4315ec842571cc734d936ca9cd8147b9584ba0a0e0654c9ddadcbbb5f0ae79c8f6e50422da746daf015b21f72738174

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\rocket.png

MD5 5f05288542da2cd4ff994a46c659a333
SHA1 0891912927f9fb3a1665affbbfe9025c1cea10f9
SHA256 b7d4115f0b0f2e2be7fd6a6d093adfb9b72a07c44f7bd70ff09ee7dbd87f33eb
SHA512 e0da7d0b4a5726b7bd43be79b9a4bcf1b76a06d624731eb225092754d4a325b2d6b29419a118a70ef3b725c0d315be205c77a878fed46e68bae2168df989d319

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\Roboto-Medium.ttf

MD5 9745415b8a2a8b9a2480a12f7e2d3ad3
SHA1 01d4ccbdf1ba0a8e14497521686e1246f8dc57c4
SHA256 02868d6a7e80d4e7836b6263dd50d26a63e923a1223c9e027aad6dc2501c27cc
SHA512 68748e68e2360e4137b1d157c729f3960fd4af00d2a04a3dd5747a3ea5e38d885d361250cc8ce65e27bd1b43439f364e7dfd4d003ae557946c91777ee9c47734

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\right_switch.png

MD5 3b5ee8367f238072041b295677f3bca3
SHA1 01c1ccccd1b72b38f724c5f4fa9f74838b20066e
SHA256 54ad28a58c395f9479a3060e5c034c84f1e0ad5f56d36aa4da474048b85c4a33
SHA512 b5dc633151a0d67d83e271b7753a1e6ce637a40ae305a24df49b869ff85c9dbc271eafebce7b15ece154cd496f6836cc13b204dd91b25b9c1f31908f249056f4

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\retry.png

MD5 5353c657ba3a56f4ab8f4a6580571ee2
SHA1 fc354f2d8a85ef389c905dc207202df629495c33
SHA256 c5aa6ab0773cba3c68168a0ce72aa2a7f014026acf4d9f21f052a7e3dc45d926
SHA512 4f645fab8116062df09611287734f2d0ec47a1ddbab79679d01e522f190fbf2d378f79149cd9fd1876a7fd50295f8b2857ae48ff0043f4e5a209dc7976fd5de2

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\restore_hover.png

MD5 7a5e53144c37c748dc690356954ce911
SHA1 35a7e8e550bee0a4d78e0c1ac5d1f0fbe16645a4
SHA256 bfbb358048892465b1a34d6e9341f2eab056b6d2ba161ca14c0595c6c7f60d02
SHA512 768628956a71d67e9ec430f71c35352d632911fd8755b1e2775b7efc90d4d34730aef38f3ba8f06469a4d10110829c57d9a7c8c3e9e3a1b16bf51ff60a3fe408

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\resize_icon_hover.png

MD5 a1a560eea9f27c7f265e86bd850f7222
SHA1 e5711114857bd40eb28f818b61444ca3f8476f57
SHA256 9d7369cb1bc0ccbced0bfc31066c3f3b00fa9781a5b189a57c4487b4b08c57db
SHA512 3e232ca51cfbc7ea195330c5a28cb345bf4c6c421e4a8f89d1d6a189cb44c625b5ed381ba29ce2f8bc88f6641ac0e4415628f8a5abb406436b69478b6a8571bb

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\radio_unselected_click.png

MD5 4b6665b80bd11e1985d3ebd4f5161fea
SHA1 f3755d866b56fcad6b34b3cabdd4b03f85816e08
SHA256 c99899565261f2830dc9fbf5718c2fdc7ef739f7ddd86078c0e84b5998728944
SHA512 e90a7af403320e0f50b249977dfd4163c01e42b760b38a7fbec1f95701e82d78891377aced31eaa1605b69284ceb1c1c1468eb4a98dc2e791225b9bce2775a7e

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\radio_selected_click.png

MD5 d8eecc46f62fc14fa6776316a105e845
SHA1 b5fc0aefdc6ec7a5a250780992a3ae54667e9244
SHA256 87b588e9a3106a80168bd439779f2eae985e701e91276e12047dce40779e5d86
SHA512 5f5a0d289bf48707f6d3001f583dae70be62e2213f0b6fc249792de4082560e0494bd43e81748e4f2f3c9d397d89178286cffc5d740ee2de77c719e921eedd4b

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\red_dot_icon.png

MD5 ffb028337dcf664dd3de31c08156d159
SHA1 49a93394a2bc144e6c57b6c435d98ec18c171730
SHA256 c8607ec1c25c7aa4dc2450923fbbeac7564d6aadc0a0dadde4aef5fe349291f9
SHA512 f2254d11a164efa79d0fd29b01d215aa04d4b7b4ea25992865f298fe6439dbd74c91b0ad1c2b43689fa645ae1cfc5380c11bcf312b0f8452a84265449515e90b

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\recording_macro_active.png

MD5 0a35f10d59e7a897b9fae1772271501d
SHA1 68225a1693a886d3cb59961b12a1ed783fb31f3e
SHA256 9747dc0527069547c3174bcc15646e867313f73045c9ed5a3902fac479757cfc
SHA512 bcd96afda61fa6ed5a5bb7946449f28baecd7bef4fb7b407c8fc5001ee73e5544add0c7b959f3c164a65b38a7f9ffefa2d97ca6b4eca6da890934a69a45eb92f

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\quick_cast.png

MD5 65dba003135c6defb32d5c689cade3c3
SHA1 4ad0a457ff90c8681c9416a22c07cf073fd2f291
SHA256 abe6725ad38fa9a7d62fcd6fa9760bb08993e062a67163cd55a8eebcef14ea6e
SHA512 d8867fb22c393729af6de9513b2afe5a1fafd6454a6d44c7305fd9917eedd7eb3d51deb891b43fb0519db50c0991f0aa3cf4418948e606beff72654b82f9d523

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\premium_hover.png

MD5 b23517faf9e2aab2455affc50ef265fa
SHA1 124c00e1a58e1a89331b9cc1438b2649801f18d6
SHA256 5dda65a3a87ad7cb92c775ac470c99f2bcebd39c980b7d085ef5cf3276a46a0b
SHA512 0be97bbd433a5d803e57531f5a66d5c629a6df47340f3cf629735d27135af4228fcc77989dd9138e210027d3dfcbc9991db6587ce1a5c29147808fce01ffdf72

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\premium_click.png

MD5 8a3e1621fa2825137a62793a57aba161
SHA1 a1794273b6e6094a28f89540aff955fff0509267
SHA256 2a1360d06eec133c7aa638ad604446e893d502438fc8c6ca7a2dd12162120e52
SHA512 4aca096505b150179e1cc442d972aa97751789d8fa95132d5868e99b47cdb4728a50bd5d3bfd8f9c491622a4742d46071acaf6f2e8eb6add4100fc83c7871af2

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\premiumuser_hover.png

MD5 3e8f548bfc07bf8f522de06d12fb7622
SHA1 322e10a3d1bfe858cf9f976844119edb56606b46
SHA256 b3553f95d17d67f3f99e35abb682ec3f5bebc81a7bf789bfca4a29c546eb203d
SHA512 bbaf914f78d15fd4e5bea85e2e5a715e851c9653e5ae487347f3114d5de988e58a5b52225b2db5196fee93846ab7dea7e0730d739848314162709bab1ae77735

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\premium.png

MD5 ecc18388c1930f8d18bca9c92bb338ad
SHA1 0fcf8d49c0b01efc547dbd5e09c3e6e8e458755d
SHA256 e6b2e4d627d3b9032f1a86288c382d8275a4d0630becb30bf92a419e24e4dd97
SHA512 06f754f9c912e5cccbfbc575f3e7d8b122809037ff8f2ea98ed2300dba98e49636dbda8d152d3577f653c841ee547229a31857aac5f158bee847515d60ec4adf

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\powerplan.png

MD5 7da15e9c3625534f790b0871e8c5b38e
SHA1 a92cb98dace6d0a6f50bd492ed30f5db57a23955
SHA256 d52e74266a1068bc01434d01869d7974c6f34c1a0b79d544d7759bd1af3d88b2
SHA512 2a3a8e34b2d14b656b741e537027a521679a6ffbcffa83896b199845b5bb6836c419045d8610060c9e3f9a7f0ccb126fb429ad745d63199b4f124933cd73bb11

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\portrait_hover.png

MD5 88748b3cbecb1ef6441f28ba470b2528
SHA1 dc52201fc8e5bb57f029b2201af5b6ea93e7040c
SHA256 f68ee1371d7f2d30fdbeaf50800651aa2431796eb859226788ac7f933ff948f8
SHA512 bd65df0404987cc8191f86b65c19191eaebaec60ad7f50fb592d8fb312499d721bbee5b401baa99aa074cf0a1a015b393c047a50f0ebd942373deda5f98e1aaa

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\portrait_dis.png

MD5 d80fac6d07de3a6ae6e0d20bd3e989ae
SHA1 de48b67f4ef8ebb1c7f7b320ab6051726460d77e
SHA256 6111ccd1d4599da8c24895448921718c04c7dcf61b088b8046f4e82b3e30998a
SHA512 2b70150ce16c1b6e36ad88163ac8e711eb396fefff1c8a0ee0fe6aab7933b4f89b7fd37f6acd71952150208403e2cb86a4e70a6c29c72c34c452a206a7e3ca90

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\portrait_click.png

MD5 59f31cd507a0535d4483b88eed7d917c
SHA1 fc5bd7d7e5b9b35bbef3c41a660a0b21fcd006e0
SHA256 5e6fece72db31af6c32a2c48c49a70744c3c30dc01377dc0d7361a158009adcf
SHA512 e707ee3398baff5cb726bd0e44c0156602d30943e4cd9d33bd643673eb918106d0a21bb4e4d9f1406a4b4b3fe6effadc3ac1af51ac5a26f83e451b1533137629

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\portraitToLandscape.png

MD5 231f5de93d3ab0cea1cec1d73f36e5e1
SHA1 a697d83d8241722e81cf61a4157853a24340902c
SHA256 c8e1157c04c02ee9f5fdf99e93640bc74979dcf23dd35faecd7ec3cfaa9616fb
SHA512 c67d82f45c28d7f597291186bcc1e0401db4e5315e41a9ae99c80be9c3e0ca1c33c5db88ea95a83617d1bb7a32f7d238c3ac8230c732e120b040763ff744af0c

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\portrait.png

MD5 73d7d5fabdbff9124b92e383ceddc944
SHA1 46b26c84aef484efd02b73e205fc2b7491da63d6
SHA256 09a726fb629fd55344dc6f897d8e7d43e134e862bfc8c81987edd9a22c4016f8
SHA512 8044cde3e44ccdccad76eaf17dc24ab9864097b3c1c9f63c69db36ca7ae18270b44a21af395f58be36400cde0aa36aa78abb008103e122eeee1a735297bb58d2

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\popup_close_hover.png

MD5 f4ddd30dd3739a4c504c00d9205c5e31
SHA1 bf13eb8710a85878c1b1ba44991e5a9240d8651d
SHA256 3ea06f2c52caf5968fbab8100bad549f5c75879d793f7937c1cf39b55431c0c8
SHA512 8344137485cb5b46735f42cde05ade532a37789ebfc631dd1e7845c3660a90a355095d62c970c3fe4c201840a77b87ffb391801b7c90d2984fe02ca89d0819b8

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\popup_close_click.png

MD5 a3718052a7b4114fb99282035dd33815
SHA1 68b245f528f9a93114fa71375bedb08bff112f31
SHA256 df829a58e8c39121458d9d5d73480c8dd34eeb83e61a3dce42215367aae2e4b9
SHA512 46148b6cfb662f9aa7b6e571e2bc992cf3cca9e184cef392e961b59d923900e4b01fa100687cc3d658686a91d07045d178a3b28c3fcf1f8c13b8b72a29f51070

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\popup_close.png

MD5 c8ab3576d5516e2fdf0f97359d7a3130
SHA1 51822d3f9ccb3b4c70172774c8b26785031f0224
SHA256 4d458e6eee8b11ceddd607d2031d9d6f368c601d03d72b56f719ed49d9a1ab6d
SHA512 a5315f0fcf6d86b4de6cc35c66d0b901bd098f583f7013577fb4cf5eaddbca8f53bf369bdb60ca4d988f1e5ed3a2cdfd2d2bd139d6e6939122a4ff12c0b16454

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\plussignimage.png

MD5 87880a46174274f49827db806f4fb60d
SHA1 47fb4d392eb6a1812da2dcd34793dff25762df43
SHA256 d5f6bd53818abc4561826433e8ceef9f97165842d2e18d998a1bb480ae4f13d9
SHA512 2d397d36e6c61861db2091f7220a0a194d6aa2729eab2d1cf6483e49dbdc1518a0abc8cfb85aa42da37c74fdde048b415a8b071132491e985323a2a0d5e44a3a

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\plus.bmp

MD5 43a7407fcc8f7cccb57164338004819d
SHA1 5fc554aa2d54539b22b520c4e1569cec3e949dc5
SHA256 b5b664cf4f8af1d95264c104612c9be1ce2a22790008aff12fcfca9a69980c6c
SHA512 9cd5b3c2944b43f7b7380b056bf8c23839d44dfb746cccfa93aadf3ea7a548b837a6dee6dacc6e26db0778498a9459a1154d5eef44061b21491d70af0c84526a

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\play_title_bar.png

MD5 128fe795b9e692c86dd906d9cebdf693
SHA1 23fcc29db10599a8010beebd518be5e51a0858d7
SHA256 c1506f3f01ab9ca350dc63ece71ecb3c1d2c66f32fc47888db0f01eb8ada2193
SHA512 b7adbc51a0d42ff3bd6afced765c9e5988ad9abb39d8c26309383830573be71862971dab10d7f13ee26c631fe5ee22abc0c634870550a5ad7090307f631b174a

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\playvideo_hover.png

MD5 4f9deeff0e2127ccc4a73ba10cedcbdd
SHA1 f6aa9938a1c885ad0e0f5524f334a64a7633e6b9
SHA256 2cb98f0c76940455f545a11a4970f922ed20ab1b307f187ee621ef0a85fd4c7f
SHA512 47ea69571e50005e2cbeab6a7eaca09195fc9f7d728ea846137b733e32f20d5f8ddac4918165a2476bb6835dc9066b66764c2fd5d8864f9997a22ee8aed7d738

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\pika_coin.png

MD5 1161cb369081711b2fdc11a2271ba324
SHA1 48a1cd21c3d3f4304f167f650a89474a3422a043
SHA256 2158ef4369bac82a62fa02cda0f9fd3a5a487a965f233ddd192baeaea49b9d47
SHA512 46b7ef194e5f32e940cdbfb270a920f15a8f91809799270a45379d520af1027df10cfd0640ea4150c91d0b42ada76bc5dfa908b1dbf28dba3d8b31a42fc620b8

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\pikaworld.png

MD5 f04f5ecbedc1b689a692ecba5d44cd0a
SHA1 2fd2d21ee4c68e895bdd7f42a18979a21a2fd8d8
SHA256 d7e6d666f3aff9b02d9fdb9f099dfa7cc316cd7c63334bbd7132606f4179587c
SHA512 79daf920888153bc729ad92ca81a84240f6fef388bf3eb5ce8c648ba699e629797114303a1a691e7964e9c690655b617720a45ef0e3e3893d8add3b8ff1004e9

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\pika.gif

MD5 9c5280e70a196f825c258e479e0a5d6c
SHA1 27eb1d4656e220c0ba46ef802d1cc175de150ed4
SHA256 8e3e6b56f722868b85bc7609e9f3be497e7a87def723cdeae3005ee69d6b39dd
SHA512 b7c16c71cd75badf6805cee1363b01120a675599ebe466a97645fec07fa301b47c39ea2bd0737d70433896a93eb7280b2c8964acf2e95d898346106529d98308

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\performance_icon.png

MD5 0d6dcd95c1f7ee7f4e97b12ee001a3c7
SHA1 4ce5ccc6b9c4d72482800ded96062fbaceb3a629
SHA256 c0009a66fe4576053801762071758f0f0ae6f2987977dd74b90b29ab48fa1c5b
SHA512 78005cbb524e7f0c5c0e7f0d6bcbbd48d7f93e476280e4b7d1edd789cd7fe1a957c13d126e73ffb9bbfbbd55577e2895c05a8d15858f64323660fd75038d1101

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\paste_hover.png

MD5 792394a06a2a0cf830f33bb2f9034bae
SHA1 b603b8f523ce168d69126e9bb71068397eb5d6a6
SHA256 648ae8c14702300a25f302d849e503f36bbfc2602c7d8a96c96f4db26fe9b350
SHA512 cd56e5728442b8db8c2f331f0857b4c6e4a315ca106861c266742a684ba29bb00e5dcc3b9fc719ea4636972a9d975310f1738ca967434e9980e7390d5f3ed80b

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\paste_dis.png

MD5 742816061d40bf78a569929d6658771c
SHA1 da6592b40914146804a580f3836134e1c73c82d9
SHA256 16edcc7835d9796c8a85288cae44ff16cda5816eb8be3f75c36524de9900cb4c
SHA512 11c1d946512e5f6b79f637d9df25bd8e615a04e6c5580fe37432c90c573ac6388ff19236fef85a38018c40992c027dde91c7acfdba3c67a0000b8a0e0548fdca

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\paste_click.png

MD5 41ce085f638b51dfabe2ab0c8c9c9260
SHA1 9cb50be8be2d3ec86c05e7498b60a27bcb9ece22
SHA256 57957e3e21dc7c06517a7170dfe0e72e57127d3ce57ff6085c6696e6ddb32357
SHA512 14223a162f65bf02aca3f353224fa6b99ef2ca2d6c8b3ee760a44b3b0be1c9bbfa701130dd23759e83267728d903194aec0f4e3459521fcb38e149409d63b5a1

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\paste.png

MD5 e16167ce6ac93f88bfb7a04d5b0e6782
SHA1 602f3cc7152c102b3db7107ad33d5dbcc54f44b5
SHA256 648fb5a922ecf843b31057d6922330fc3e9a6b1a36418e966ae55a8c54b1459c
SHA512 154537fb683cf5b02a3d178806abd0b84057bb04ac41195aee558452ffccfaad8206cdcffc0a9990cbb2f903df3c766452014dce87433a7d2aeb5b699b65cd64

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\pan_sidebar.png

MD5 15a447605bcf45891929ef339dc7112a
SHA1 7afda9dc2f5738cea32253e8d30c0b1298759b01
SHA256 4d3d88c8d5bdc833106cbb9c52eb1b54ea5e6b2643c0d3201b3247cc965e65b2
SHA512 07e4266245ac5e2a78bb9620e7e86114b4b03b8504161d070038d28f39d0fb519fe208a2459ce86b77950575e67bb7c18b34c13806164aea54e660bb3853ff80

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\pan_canvas_active.png

MD5 dd3930ffc072cabd0de04c9984d6cdf6
SHA1 7e44c2f8d3265da46ab979a4ae1bb8484dffeb20
SHA256 3a95c41e58048318ce63de899dcc5ee743ff07d9d28ffcfb88f0efd6150d87de
SHA512 ff65cea456bf043677ca39d3fbc1aa7c573251b80e7c8a5b35179d632464cdaa7a8473acdf1fbd048918365d92a0fdc32a175d5e4deb80f3d23e73bdbed3471b

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\pan_canvas.png

MD5 4c9d980df53447d8d1bf6bdc9acc0f16
SHA1 1ab39404e8028f7897cb897a7f133b24b3e6fe2d
SHA256 3f09b02ae731ace14875641c83d300a861e6978673f6423d8fce9603c7431471
SHA512 581de311658202eef2be214a9ce5abcc659c8e30c14b612bbb092a1f2bb5c92c3a17bb4c1ae43b08443bc22e6d7b793b300f010020f611342c812418f62eca8a

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\panshoot_popup.png

MD5 cc76752a735b09281f002a079e4d423f
SHA1 002a07ef88cb6d94a74fe85c7718f39ba398c319
SHA256 8f9177189acc43ec9fcd8d9b3cbd500fca57e2c6ea6699847ce942617402ba2a
SHA512 c8abe65d990afad786cf786c8109988e9f447ebda10015537d6695fc127a62f382079273182ab6ee7eaa8377d63136c41f96fa28f2a96da7dcc1a80c81230438

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\PanShoot_canvas_active.png

MD5 021abeddd56e67ebbd418c63bde23eba
SHA1 6d712c7ca4e532c4f90d1da06a7f85122fac37b1
SHA256 062c59ff424feff306a7f15ff73337f07b32e2a2f5bea1a6f2df2c93ad664d04
SHA512 843b83f7441065ab2bea0f42eebfb2ceafa63f2baeaf47a1d72a9d5cc2c0dc152138bea59ac68e978b3d35933e51337472f394e64c59aa52aa5c8612eeac6023

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\panshoot_canvas.png

MD5 e80ba05e97fa783b14d35b54f77d8f2e
SHA1 5bf1b4656549c2fba30c4e3d161a34f1e179ee5f
SHA256 52d128ab300ff5bd12066ba4023d17bf3b12896d82e1e8c9c436dcfe2d6c065b
SHA512 22143a5f30add23abed7f2af4844c15278944ecc721cd5b1b536bca079df653f6b541ee81f392af85628eb60e888c2869f66f6cc00c6ad7eb7b3df1167c3e713

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\overlay_right_arrow.png

MD5 546efe65541387f5047989032718fe62
SHA1 7a542a0d9d57b564bd2201e438acc87e3b19727e
SHA256 340e5dc26f319cb31d8730952ec93724c78d1f085eba22941c78fa1cac45ff64
SHA512 2d05db4d53b9769f3a90db6d5d80be87edaee18079ded2e2f6712a372015ec8f35fe264a1e006581ee4247afd7ecd08ab8109c24a2254c78cc65bc1ee535c04e

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\overlay_mouse.png

MD5 f3d98c4974a1a93ef0cd8214f32d8eff
SHA1 87a6bb27ed037a608f40bf1362d49240f902de15
SHA256 98bb18ac086b8e621ea2249962b96ed280376418899bef6847529be4871d509d
SHA512 4a8bb81d89549ea2e3951ef53f346be8731dfb9ee8dcf016a0ebf7a32bec5e41300e63a8386e9693ed8eaa3d2d0305545d74fd2f07ea60903ddd9ec7eeca97ef

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\overlay_left_arrow.png

MD5 f5218f1f6f260f387e9f9a89c78505f9
SHA1 ac6ae380864a1ecd26139c27bfbfd5204e6358c2
SHA256 14f58fa91cfdfa7c73864c1766085e0a27663218d4578907b7eb5791370fb4d1
SHA512 e5b0e4ff8c372ce7b5d62050b855373385aa44ca4380e254eac6860096a2584d9b1ed4c0e81707770a6d84ce106913f02105d3f75eccc7e9905a3834379694c0

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\overlay_keyboard.png

MD5 13aea4e1b79dc0baaa47b54dda4d2959
SHA1 4bdf80fa67e80f046ea00615fa0fb150b0bcd651
SHA256 fa55443ab48ba9f9382a1a10b8d7493d86b7579a346799ea62b16fdd2fbf50fb
SHA512 3c14b7d7c354a6baf3767d7847ada8e683046b63c0420f3c3b031e335a0b5ff5152f77b134d36238bd6631c16297ee353fc7a5a8dbe0b0af08d87ab29fa9080e

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\new_click.png

MD5 57c4aeceecc6bff976008a1d74492e9c
SHA1 7842628390cd5a3ff731c299c4a6db1c962f982f
SHA256 57b353c6f3a4eb97dd95a3f846caab4e818dd727f6745d47b7565c633ba76149
SHA512 25fad478ff4e6da908ffa4d77206cd33fe784119f6526e2b3b9e842fbe5d0d4e7e780214babe4a6550c0a5a28a40fdeebca2e8780041f492a97e8be0c340a266

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\other_selected.png

MD5 44515ea3ec8cdf875ed8eba60dea53cf
SHA1 03dd6672ac3fade461274cf42b1b8940056e04d5
SHA256 7c10c15de8da691530d94d66c6c10abb166f257609c52326da79d5f31208afd5
SHA512 bcd7bf3bf1ec72c150a8137ab3436add9451227ec2a57df713a7a2f438bea6b19ed21b0c3f682c63bc5abff39a35adc8d5c95acebe1bd153b6390ad65f1ddf8c

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\other_dis.png

MD5 5fab66f085adbd63bd9aac016f52d95b
SHA1 cb004ee103e667908f917429b63ca1844f52bfe5
SHA256 1b1be1f22bed7dc0f5aa411d0d053b9c594eeaf852c74b9c87dfdc673f15ca87
SHA512 ac139909742834dc90ca3513c32494ef2972d9c5a45f1ae5767a19626f6c5568d5ca85c1be021e185dc8d963e984e1528921cc4ab0f1ebe17a549b45c3098c23

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\other.png

MD5 931fa75a63a3be234a53856571f48f81
SHA1 853285a0bd4f6a115dbb4d6a5de2265a3f4fa9bf
SHA256 331cd047dc62f78d9988dcf5fce194d3d78ec850decde0797a99e7aa21727bbf
SHA512 875cb33dde23de677ba893db2e2ea15a8f131aaeb0a3d355803fb8309847d25f4aa4ff329a384a593efaabef57d74295230dc410e249b9bed7ba41b4cc2da29c

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\onboarding_step_4.PNG

MD5 a43432a7a1e78de00954ee2cdb91ecb6
SHA1 a6790c28e89844b7b1e9292e90085fdfa737131c
SHA256 edd454f6a32c549488e0349d6e815e0f43244d192a50da1d534b6ebfed995cd6
SHA512 e4b0ff2f222087fbd12108006c0f6bba980fa1c5bc2123676d7c30156b4ba6e9c0e9c4996036aabaf3f81029b4812e94e6e3ad0378ff630251fa375765f6bf9c

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\onboarding_step_2.PNG

MD5 3b75865ec3c662c84349e28a76e66d63
SHA1 ee2a1539c4362e55402832fdeafe53bdbb237d1e
SHA256 0238e8e93a58ddb55b87d23b437346d7cc54c4d5345e3b0867180b21659eb4bc
SHA512 69506426897c697d0ec85807c75e272bcb64a50dca6ad8799109b1f810c28087c8b62bbadcb2e5edf22b6333f3ad20ee486ac075021bd8dd2b040e11f67fecb3

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\onboarding_step_1.PNG

MD5 fc18229f29e82f99ce35eccee319609e
SHA1 3047ac40cf1878f3fd88755ff46aa03ed22677b4
SHA256 f5e33d166823ecdae725ca9edd7973aad43205a60c0a13aac426bb7f171c8c20
SHA512 82f0a01c3e7f41e41d2f356bd6743ddd9f0b92d36af19aceeec27254c45f74453dde4a254cdf72d001129079efad059bc931bc9b59562def739e53dc6d185a95

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\offers.png

MD5 efc69f2d701b4c4f30b7fa02abc816f5
SHA1 79845836602aebab011301c004915b3d49c8caff
SHA256 b9c89d852bdb01eb2f0054b0b7d5193c46390fd22ae69e48005507ca736fecc2
SHA512 7b3b0a09d4063e86b1153e38482cacca2c1378a39252c534b8a420fd2f481f1345f3d3a2c99e473eda39e22181a83bcccd75b41ce412f4e1c500f9c14f87a9df

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\no_wifi.png

MD5 d9a3f3a6c58cdc71306c82abb2b47d8c
SHA1 d66f2de18ef879a0e72ccb81681ceea317d1c2ff
SHA256 2d19adf7744c0de1e6119e62a0b7d27c4b83407b026df279372c982960519f84
SHA512 73c4fed0ab3cef9c3f232faab30f9342b65efeb38817c4270316728130d22623e3d080e4ca273404f64fb3c27faa4a94426fed6f4945769e94cdb5a49ff72a1e

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\no_pending_recommendations.png

MD5 c42acdeb187fc1532bdaf501092abe99
SHA1 ab7248bd4c536f4a700a22c9aa099737cdecf97b
SHA256 8a9c8f197bb8b940221ac5d2c47bf79562e86041e29fc373b128d367e5b88a27
SHA512 59f5285e0a614a35599129d1a60d089333d3e634a42aa84b9f24fe24e4f81c4ce737b3f03eccb20e8e08c48131b07ac5a92a6464ef048d85234372bda77c401e

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\Notification_Hover.png

MD5 2cdd0d14251603f1f9e2c3acb26a62ec
SHA1 45d5c4d69d64ffe8adbfe2a7707cb07097f64704
SHA256 3511988cd8224a5dab0ffa220837ee5e9b99004b1b9d53f15171596038bed92e
SHA512 fea76c040c81f438d0c3ae6e90003660f2bb1bf4c9bdda45cb1cf7a6c489e38aa9b44c5eb9d2c0bf9bf5512f07a5cb732a65f0d4c3e0ac7bf1e8fbeef0f40307

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\Notification_Active_Hover.png

MD5 23e93ad2ba70e1a842e0ecc340f3e8b8
SHA1 66f434b4b743058ecc81ec1b96228577080ea6e5
SHA256 2e02cdc15d74ea2397fc4c6543b763963cefee24ab3c964b6800c985de0ed081
SHA512 49e4cc934033ce12f3ecf18b1f32b22319bc2fc6ef74bf5a82ca119e73748cd273789520197f0f800ce9cd2b6be8a00f8cd11c22bbe24aa74dcb8a49dd784790

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\Notification_Active_Click.png

MD5 ecba675daa3086f10c9611077711f626
SHA1 db7d7d20cfb8b3223cf0f39c978277140c233e1d
SHA256 14bf718b55a357bd6e347057bdcf11c5db1a2149b598a438783277474179c1cc
SHA512 393bdc0fc81c99de66b2e74817ec001491718fb9bb38ad6f9eca0e0fc06bc2b663838be90f671f92476f316e6c2c0d5c2b638a760965a250faac0431f246bba0

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\Notification_Active.png

MD5 64529839b1e7ebe5a7f6e67ff7ef1a3a
SHA1 f2c68dc29ed79a64581fb171b16f2f674200db09
SHA256 90da6248ff53d769ba29d0926eb1273bd2f7200fa97e2a84df3ca213cea4c1cd
SHA512 458b976831e677239fcfd42c4fe577f60290d2a8bea293e5cbaea06a3c1f62ef9a22d93a708b97bd64512215f1ae38b467fa16b936c90b0017b7e1a7c05dc40e

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\Notificationsbell.png

MD5 558c520751123973604155a60b633032
SHA1 a76b50824a079fcaf633d7f9f6721caf0b2fd15f
SHA256 5ea2efd83502ef69e1845cb070ea88c40f692abe442d0bfa9ad7833d1643144a
SHA512 87ba723909d34090b415ada6f25f267b79ffcd2f851e9f75e155f1955b42139d28c848ddd508f39756ae75d6e1df2a02f30b901dd9126168fefccd25f09fb878

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\nonetwork.png.png

MD5 7738b05617f71fe923ed63180d227329
SHA1 6917783e3391c857bb73e4bfb2fd4b1ef2fecc39
SHA256 ade8d337ca1e82bba9ddc35635e97c9eb9a3ed246f36f4f1c8c9b463f596771c
SHA512 6c32141ee3aeb89b8bebbd27dcf3ab566f94c902571e8b2f3ebd32a6e069674324b8bc688722172df12ea53d1d31e636d3afde03edf80a4a05addc3cd8dde413

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\news_hover.png

MD5 4c07c81ae8da2f5f66be273bb77a68eb
SHA1 21fb81c61e726d914f04a6f4117a1846fbc08115
SHA256 9707d42db3cf27c5536a7de6d9598eef87812663c65def1c3df6dfa21c919583
SHA512 257693318bee0185c94ff60725a082ca42e9b75e2284d9358395efac2edce34f1503817964e6b3c9ea93303f47fb4d5a8d23d3b56b5ddf64f46582ad305e7943

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\news_click.png

MD5 19163a19c970e697970403134f3360bb
SHA1 fb03a12c62627df1cad4deba0eef9ed62125c3a3
SHA256 cfc16245ca72a5094b423d7d453ea7faae14d3815d444371bd5e9ad4bd3cc5f8
SHA512 d8d1337e9e367c793fa88db40997aa6faead3b793e9fee05bb4a3f6eaee77f76c3c240df38ac149a97e59ced34913d65318b7629785fb36f1fb475500573e03a

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\news.png

MD5 6f06e58396f8c2ca7a7c5b32beadba99
SHA1 3f0208929ffcb51974f2e4632322c4323b2a0b9c
SHA256 752c355c00c612736ac845d513e4c436986e31f2b045da8ebfafeccd9855ad1d
SHA512 216bf8db65077d4dd98f7803b710f19b6e6303d6137452d5ae6129e4b8517b49ee9c5456b0c8dd81185ac8ad59ddce4b6b5136a828bb7655d23c09752c8ae50b

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\Mute_Hover.png

MD5 de130b731cc593260876db6361891ca0
SHA1 0bf76161039f034cb7a95e671a8b7fec045acf8d
SHA256 5127901413f4e051c8ef170211262c19be92bb4bc63e42a5c718a0c8f9648b9f
SHA512 05dec8a4b9591d832e7cfde6a9cc2e7da6ecf2d4fea6e7cbb6f37c98cdc16e4d7c68b45fb182f04646ca9bc3aec8a456af29a232e5c5cc32ba09cf6546145415

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\Mute_Click.png

MD5 f10d73f4391d6186b93ff421d0a69579
SHA1 569605e2829d50d2d50847b5ccd0dbde6ae8ee7e
SHA256 ba6f181ae21d323fe97eefaedbb97aefcfa8451f8c77b260fa46c2fd183bd67e
SHA512 27ff773535100c287ea4071d62dcb337e621a60d75e9bd1a92a5f60ec99ab50fced398d6cbdbae2fb3970ca38930c897eace09afd945bf2a2c2773f29292d68d

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\Mute.png

MD5 91e47a3878e3f9f92c5d0788573dfa75
SHA1 6465eb85ec6e1f16e663ba849fbfe0c3c21cbcd0
SHA256 8fb83dca2e2eadc1ec18546087d2b65a161c233d7ad09f0517c3721730ccf924
SHA512 494a027eef83820b444c172af29cece866bda4a09b7e0ab815d0b8e9399dcbea8e71d9b4bda667c0269ec347d50f291458bd53befa1b87dbb3577114927e0a5e

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\multiinst_busy.png

MD5 4055e75ed7c9a522b5f96c0f7191f223
SHA1 ef414b6f5d9826e59604b325e2d3764b64736cfd
SHA256 1a9c5c3c04959d67d88fa146ff8533bf098df1cf0a3fcc455492a07f09922845
SHA512 648492c3e69ccb3c35a1c2f63da15fd4869953370fb733d5653fb57a5ebfc61662551ed494e7cdce4ae005e68149bee13321e08a52d034fc22bb41290c381baf

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\Move.png

MD5 f3666ed4f1d7ef18eeeed97c33162863
SHA1 48b75960ece0b25b1c5a0aa7a08962df2844f81b
SHA256 e00b6baabd9f5695d3427c5cec9773f85746ad8885ddb889ba087be17f811fa6
SHA512 8cc89765be485a0aa92d0aabf4d2c9a198461e8fbd89ee3988689def7b6b5a5ffbf67114c388ae1b87e931bf86ada838d78e73c797fba8d220f433c5f2639704

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\mousezoom_canvas_active_2.png

MD5 33cafc67081f14e399c1ee45a6ea10e5
SHA1 42d85eeeba8ffb56a60bd0ba995db786191a0a89
SHA256 e2ff39560df5b4a23d8d8464773c80c3bf48881c199ca28b2c0c9ef4b13f3211
SHA512 0ed0acadf6071d2a97a72fc48665b2fb05fdf29850fe13230df960e74a4269b6dfb7c524ce847badaa0bd76966c5f9b19e040b33599dc2890d4abcca397e10f9

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\MouseZoom_canvas_2.png

MD5 7f50fa28b5b9199c3cd09a36baa144c2
SHA1 d0a26a80364af59f17bb18372dda4027f49d315f
SHA256 d61c53bfc69a81c51e8735d6cb1d5acb7444777d77a5dfd329777b137b89284b
SHA512 021ef908c2639aeab15ec1d42565850b234fe50faacf7ef15835e3b9f3b967ca7abfcf5afa7778208ddb49ed344cf65a396ccb775645bc453154f0435caef513

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\more_tool_hover.png

MD5 0dc68249a1db3c6f98b579a95b86223a
SHA1 d82b3f77fce6835741fe2fec35b311edfbc44008
SHA256 26252be8e24c47674e4bd9abd0d8aa2875004c47b573c4643b6a8bff8eee2777
SHA512 8371cb2f3d7defa9f8ff160af71e99ab33ca609a7c173f7ccfd52c330df4d1fd143e625560ee37410dfdfc02ce96d78233c7bdd61214aa84b479c77308fe8d86

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\more_tool_click.png

MD5 491f5fb41026d9bd81b3d187fed7612a
SHA1 d3a0b5832b0860c2c7ad79e18a33ae0fe2089261
SHA256 97ee3c01c180415fdca314fc10a75ba18684cb77944af3384e768e848eb3b1c2
SHA512 79022f0ede8ccf589223c93fb9ebbe555a74c213a6d0a4a514b5a12eada42bd531bb6fc52f2c69219cddbce5c26c6c6a948303d1d078fa0385bb7112e867d088

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\more_tool.png

MD5 55f4a3241807b051cff44052ddddde45
SHA1 b4cacdaa623c07b7a214c883ffba62991cc162f4
SHA256 531ee9ef091d97163620150a165973e83ce30936308a7dfdcda3c27f39c64f9a
SHA512 a9a9c07e7da52d608e92ff4da077296bb8ccb25e6a2dbf0098e6277b99a827c9080aaff92e0a98d87e2226ef9e71952d14b0da253ccff66232a06938bcf0a880

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\moreapps.png

MD5 b7d6afe72312f16d3e417562ba5247f3
SHA1 9422d1242b55e55fad70fb4c7f34870fda994aed
SHA256 726a600d0839c55210e1d69e876b5de65e278ff97b9886f484e677c7f14cf47a
SHA512 1a0b96087ba978d99750cf8fb25728a34d98fee7ccadcff5dfe3d17ad9fd8297f90e0dfdd0e5f19fa4e86d690152f7464db33477a83e1116df44ac2eb61c0ae0

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\MOBASkill_sidebar.png

MD5 f80aad8cc619662f87d159fe0bc0ff4d
SHA1 087fc851238b2a27ce9f3cd63a146e8d8ac8f6be
SHA256 1e20ade763f11a8a5fe8d5edeff6a42c59100c5a2295f70b3a46cba8c4b1b37a
SHA512 f5153df943650b39804dced4aa05eeb3404582e5265237f6c5196345d9181bea7de18640cddeec06a1884fe9c93f0eaa94c42e30598ef0982756549782692f73

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\Mobaskillcancel_popup.png

MD5 7fa867c5004185d3e85b7370a2b11c37
SHA1 0a9818aeced40ed4971d83664395fd589bd8e145
SHA256 bd412d5a9e3cd793348388918aa041d3dfe6fc3649fb930091dcb7f75f9b420a
SHA512 559f40a0b83f59b8cd916ba6d1d15b883f27ef18e3bc868f90aa3e915644a9181a971ebe1ddb96cf1c6579ad3cb5f793707a51dac6cf6f3327370c6e4cb3a7b4

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\MOBASkillCancel_canvas_active.png

MD5 93d9d069541a7356a75d219ce25d3132
SHA1 351a41cdf7fb190524b98420df31f36b663ddd21
SHA256 904cd9595272e0e69d17497d0e681f0d2e6bca42bfe5dfb5067a0106d7b953f4
SHA512 7c449af424a3444241f16603c82c51a30ef93c80fb89216d65a7df7ece034bf6cc68cb037e2345546d4da737772137d324de392262bdf42ba8fb17ab23dcedcf

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\MOBASkillCancel_canvas.png

MD5 09d13351063c67e7add592da989ed497
SHA1 b739469f600f6563216975f6f9e758d04671cade
SHA256 872acfdcc7e33146782187b15be354b2f3595d1bc04b6e4cd0a41853c09f7146
SHA512 7529b10450da229dad4c01a5b3f567bf849b10d1a039afdcc6651b9beac32d1838c88a6f3b305f003e0591ff5ec94e582b1da8e7b8fd2e06ec35e94c763a2743

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\MOBAHero_popup.png

MD5 ff604c176ce3a28cd7384c02c29987c3
SHA1 62cce7f4729a1f04d832d5e5de9f169d706b98ca
SHA256 459c285d43990cbe80804d0284775c178b2dd7e88b6781e4a5a3265c0ac7d1d3
SHA512 03cbb9639964c16b575903e0eff9a14c4dcdc2b417581dbef886200d4b9b76ff6980775ccf54607c002cf8c8c53b6b937bc6a5064a995c699b0f1425182d9736

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\MOBAHero_canvas.png

MD5 b4c5029d0791ff7e97aa97461b3a9d9e
SHA1 2cae43fad91e355435329fca153afe7054e56a32
SHA256 ed6a524e0acc6228fd4f80d2ef121305abaa395478b044bef33a5ebeedd2ed65
SHA512 0d050b2fa22fa04da520b3bc8589374d4a7d1fe98580dde7f08f670d27d49ed72fee5cadf6d1955a85db8211a6c259f8d1e3febbf0d60476a44b5ced418d3eba

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\Mobadpad_popup.png

MD5 791baec349d7b0f180ac7df426077818
SHA1 fd8ddc7eec0321a87ff6d36c059c0b702a5402fb
SHA256 f7b21aa76c8e9e407cd8d20d2899bf3c1bcf9cdc2a7c1f8e61be5ae24b0347b0
SHA512 0a0c061b36d9bb068c11e486f89822296085621a61ff78768eb4c3ba96a9c7cb11817f1a64a45e917f8bf813d8ac870c869e6f0e2d2cff3cb4d3eb72d6468a5f

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\minus.bmp

MD5 d0ada0efe709db677f07954da5761b89
SHA1 b2cc4095644f8e98935f69d45299cfea298a153b
SHA256 0c8a6fb420be7f983d5ba494df4daca8358104ea1948df52489bd4664bde74aa
SHA512 2dad26d29abea35a42a8a85aecc3b98be9108a212d81337a4aa94e144c3564a33d5d8d07ac3ee3b7837b3eca9625dc85e24f261783c0f743e665dd4e92bfd251

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\minimize_hover.png

MD5 0220247c31b0b30ecde65f1d79e22e02
SHA1 341195a3accba98955d345c7d9e21a46787e9349
SHA256 b0ccd07a3555daf16d279740223f4d1fbfc0be4be6cd1c69ad92d2dca4802b90
SHA512 530728d47571ba801821aa3223e5624969f07ff1e2e1e94d2203d38c925fad46f22c4a18b2cb7b929a09b557f38ac33b7051396815c25f18e5c95b88748d9a4d

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\mic_button_dis.png

MD5 2aab57d6192add8bca2510e2d130fb77
SHA1 1d0cff2247e8579a180a72bd1e5a5704dd934f67
SHA256 e0ac288d5a291831dcac7cf0cba7882a217f1ffb30c70acbfdec7ccd6330e5b6
SHA512 cca7d670d7b80721bd0baed567cf199fb930a176e871f7a6e5a3d1d9595b3120f34e11cd0f9f9e4336dff7953b1aa3ecf06270a4570ca223f6d20fcd9359fc24

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\micoff_button_dis.png

MD5 0d8ac45aa678ec73d362d539a2ade72d
SHA1 5cfbd35413e54a922030ae843b3dd87cd5b0ea9f
SHA256 eb2c3120f437fbc1931e3ef6951a45d62a1260a2cba90b6461def76a832bc4b0
SHA512 624267200aa2462cf1f5ee32d36df217ff6afbc2294d070ee8c17f4c5fbf4fddd1d8c1b48fe641e5c4d577a58985990c9cb1c430ae04a59a0c4eee7ae1eee749

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\mic.png

MD5 c10ac38258105b1e64b7e5ea9cce1786
SHA1 2b0e3ebf7745cb4c2168c57c9463a6e2749c3ae7
SHA256 1f7481c32929ca04d806d7c24c5898c8d7250915fc543253e25e3759cdb21bfa
SHA512 fb0ea729017eacfcdb8eef3e72016100d18ec96f326b4264d8b4526ad3c49fb996b2d222a18b4f47a29f0a20790ec447a5dc59a264f254ec1b151fe742d110a5

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\message_info.png

MD5 9df6761863d70f175a252950e26f0a07
SHA1 23d9aedc5957845c0f452fee963e4fd0c9f856d4
SHA256 fc8ec8fafb608c6ea6b7bc77b24ca714f376aefea415c1b151e828ddcb936699
SHA512 c3e199c47285c3ef593bf58a5c7321d054cacb9ecaca4e916e379ff38a2fc605181790a32df76deba93326941aac044875854a9be3dae9f7d7072c68273c2f48

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\message_error.png

MD5 4f0cd3c8b446e041deea0d63d485f7b3
SHA1 959eec922365ae3f67d45a78510ba84fada3f01c
SHA256 df1260f9ca7482c836c4837e8ee3491ed366666d1e1e15ec1636a73ed4a47b7b
SHA512 07df354118cfb996f3041e9844f1c6561f2d58aaaf12cd4c883b5821e2475da2c506eded67c746de5db4cab7630799e27ee814a6835198cb5af7fd8853f13784

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\menu_download.png

MD5 23581eea1f097d9ee1b9ddbfafb02750
SHA1 0346174f26c7cdfe9d70c999b5beea5c6de0f133
SHA256 bb97bc4732c8b05771b096e13354294d20a8bc4766393cedf21f4ebac654defc
SHA512 e483701d6543425ccdab3d888e6a46316a75be9bf1e316eb0c8db6914cfc6718d7461a851f22dd89428e26f9348a1e137c0eb0649ff2a435dd0ab2b2326bde77

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\maximize_hover.png

MD5 c57cbb9c3d99c31faee77dd65a57047c
SHA1 aeaf900ed80ff494564f91840a48aa1fd58e80d7
SHA256 645fcf9c5cb8d81072159126106cd5507ba9ccacdd12f4b3a3f7c286a2a63a1b
SHA512 f18fdc8624bf065380487728b0b4169beff3df944b839a5aa224ae5adaa4521d999155626825f973e72ad01e355b6b02abe77c062ec7a9f499131d2499ed44f2

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\manual_cast.png

MD5 039389791a205be2f3920f252999fc49
SHA1 e9d797ac2f1838787cca01bbf3ce2da36cf97311
SHA256 4be6be6338c90822416134d07ef98d7b6b2477cc05e42ff75ccb80e184e10f19
SHA512 e11380be1ceb0940f672af794ff25f34a345e466cf3a289784ad04308a00b3d50ccc6a8eba5cc3649ea8594c4025ae879ce2bf96dac879ca53fc271b1f574e15

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\macro_start_recording.png

MD5 4bda95dfdf82599b1a83176a6c58b93a
SHA1 36d65c7e6a3e1947541a478e3e4af0a905abf727
SHA256 674e00e7192ad94d6ee7fa5a36d5dcaf0942dfbf82fec6c0026d2610ab1c5338
SHA512 7a9aeb9d1b5158a7802c7c7c76d2305dde7ea9b845696b1c7116dafd87a4c3e20da1d3b10196200e396fb97c20623a77e375cb5c2ddc620177f6f5249cf460b3

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\lookaround_popup.png

MD5 83bed3d58bc086789174bb4393fe0ebb
SHA1 383be8b49d9dd4f8a9f626898eaec296939321f4
SHA256 726f17f2234292a15eee2f664741022fda0b5596df3c3924d93c941563f9604e
SHA512 b6bb18045a8595d9976e07acd86d4e95f814f9e83b351d885ecae7dc148b647a3005e307dc7c9c6c269d9d113fd00ebacc2bc6a81af6aa7b7217042fcc38189c

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\loggedin_hover.png

MD5 64eb2598853cb28a383954b94ee1d004
SHA1 e7a84eb70e1d460183eeb5a8c516fb1d4a1925d3
SHA256 8c0719151ba039c68e47b1273d33c7850da5229e0a63c29954f2e9399d355616
SHA512 30c8a5171c247f1ae1aa7453ce2b6b1dd8510aa50a0b15ea9fe76ae7be7fb000729c5e2d34e6a00f8f6ddbc8efbec1b551a63472e7bf76bf799a4bb13e49248f

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\lock cursor_hover.png

MD5 202e92176a440365d10ad6a82a00cf04
SHA1 7421ac4d40e6199477aad9aac19cda1a6ad2a276
SHA256 7988b0f7e0d3ce44417ecfa8544a146a3fa294f561e6f387a05cbe5bb5397088
SHA512 06beae860c542ee30a61679aa1ff755b2c8fa0dabee6f237acc39d80de49de0f269fab7b1f1d4e017f0caab5ed9b95f8c1ca3ee46e6e1b760cecc0677680f378

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\lock cursor_dis.png

MD5 21ecd3a9f662ae55fffb0732764fd51b
SHA1 6fe626f5fccbff911b9b1c89fbcc23a6b664b1e8
SHA256 32ad901f85a573f2bf47c5334c47e51b818759b405c06ab62475a662831d50d2
SHA512 98e82ec97413c5dc9e4a4e96d4dbafb64c702e3eda7e8b1a00f0a215344f8adc4e7406751493c599736aa81e659e0846cacbb3927548f0d8ef5ec2b64360df8d

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\lock cursor_click.png

MD5 e2b8f88fcf694164bc2f142ad92cd656
SHA1 617f162290b73c94429315f00ede33a9361804a3
SHA256 3e05aed6e0fa107d7d727c77bb71b0fb862761edbdc609e9d0eb8451a32eaca6
SHA512 2f5fd9c6ce2eb4e3929bcdd88524172b7ac346ae8f071d0e17fcbe16d163c65397c850f32bef544484112cbeaa247d6b52636fd5d88fb2992b6e91860f602012

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\lock cursor.png

MD5 d485e60ebe2f16a1595f6f7d6e1256dc
SHA1 da2658abe4cd913ddf7412205f889ae6ffd46066
SHA256 363f63a82f7168ab20bce955c7ec834decea1278853e0e68bd6f302de13bd8be
SHA512 0043b5a8e8e45aae07fbf3598746f6fa68869d77a43d4104fb7f0af85211afd41786057e4238dcd006de13a52ca4b65be86b26be6bddc76a03680f50d4960bf3

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\location_tab.png

MD5 45cf77a491644025193ad8e148ba1cba
SHA1 e556b9ea23e64763e1401178d023f3a6629ea7a8
SHA256 584cf75f9e87e44c426a5403625c19067202ebe444a9a4dfa840438a4ad23bc6
SHA512 f3627ee8ba38797642dd4a3c4b4ba4d4123d17f128c46f369dab39b107ab102107b4628607f36b15ec30ee9ce8e7aa626f5a54412e446e50370320207dc06298

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\location_hover.png

MD5 a7e63eb93e308eff8bb4977305d1f74b
SHA1 fcac39d5b6d4c632fecdfb56d6269d4cefd68808
SHA256 debde3d815de87c6cb09e3a455d1d951e6ae3f7c7ebc5080fbc096e17d1d19a3
SHA512 2b48081f8047a4cbc2f3d981c8e7a24a5748028bc7b40a19c0d849aab706b72bcf6b017e083a981f1766bfe2de38d787d30c66e69108f0b06c76494db774d33b

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\location_dis.png

MD5 6c8475f46ef52884940c0c9d798caaf6
SHA1 0d1e41eb8f47570890db4822a84c111858e0339c
SHA256 e3d6425c17e4bc5737d4904e62af8f1fe21d38a24642c003078fea24ce453063
SHA512 ae746c4b08171f3ed8af6a42327edbc6a252133c819588daf9a569a6736cf17459135c5ae78f344a42d6b02a11ef3cf72079e3ef848702f821aa0ea92896ec9b

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\location_click.png

MD5 72ef2d53a608a5eb2c603f0639037092
SHA1 84cac6543f4dfd19c62dcfa7eec98b797646112f
SHA256 3cb137c05905eaf94cba25bb257e961a230d0764ffcddb87b28ebef30d8b3811
SHA512 1463438a2fefc826bae9dc38c7c8319f732008a3e6e27db28fad77b60fb44f7bbd42760ef6841da1cf2041865ee804178df947ce1390eb8238814950dfcc78d3

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\location.png

MD5 144617460c3d1cc57202520bc0741a21
SHA1 dc6ffceccd7712ddaf173c1cb790c185e2a34f3e
SHA256 8ff298c1a0b706cad50fcef7bacadded3e9743543ccc7d00e1f40c9d8e574b03
SHA512 a53a1860bf37721a8a537b442dbde9a0221d676badbf2e083e1f95642ad1d49064699dfb6785c801b5cf80cd43fdfbb60068d2fa8b4cbf64773e481d15d4e2db

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\loading_indicator.gif

MD5 dc4260c1ed10f2b7b58c817d0eb7b560
SHA1 4f1e9ab896d1d47e62adbbd5ea109f02ab817534
SHA256 41e2599625977f4fcb5cd7602f0cb64129ed44e7e9af76b52ceee3de1fcead1d
SHA512 ded7815f4f6fd24bf28e8f83031fd99c56a4ff16ab848ef8f58d5c2803ce610c483636305957da431a9e87053836b6a21484b73d64e218e134d9e2aa3583752f

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\loading.png

MD5 98ba7be03ee5fbc46a7c732f568e2369
SHA1 dd337a6d525cb7ec32b9465f67ceccec24b218ca
SHA256 b7e9a1e2297ed039f76ae1211792061bf7b65717ee6b47e88c8700cb7e283ad8
SHA512 d94bdb55e6dbd19770b97291cb9df4f0d2642727b3b0a4dbf8f1b2137ea3d176a812b0cc74ca3f13cedc95c903785710dc95fe863074982d4d807409aacaa412

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\loading.gif

MD5 8e2a672b0242367cb1ed94442b12263d
SHA1 38840b392b2b80babe02cacea113e26755c702d0
SHA256 78a29db2212fd0765de2702f2504e7457e4ab9c9489482872f2fa428e6f2dbe7
SHA512 4a4655e189bab5a7930e9998bf315cc83a8e1169e6487a55c02e7b2889e973b253fdeec8b691619a5b2cf7803c913d64ccdd4ea3c6af272e435eba65c503f2be

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\loader.png

MD5 b398d336acbadaf91227013565ca74ed
SHA1 610be1f6c8cfcb8359364307f20f17437aedf9c7
SHA256 6c9a59c5f54721cca06a22ef7e8e76f2ba0dff0b7ceb51fbae541aab2be86f83
SHA512 e6a85393c5ab1b105063311b57dfdc77977fcbb5da3258351c358b0bea84e60bd112e5820f7aa11a307fa67285d6244ed4e5a0e82c8fd15d7136e225af07c705

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\left_switch.png

MD5 62cb78f58d63340933a05858053e9317
SHA1 4c0371ff8d7ea1476a51720d164024c2181a2b07
SHA256 1b5988ec643af40216427ff541b2031c2065dcaf763624135447bfff377521a7
SHA512 44e25afebcd41f9abd1b2bc9f4003756bdde1df28c4e4a16e09085d57929e9b4a204f2aaff4c4013b710de871efec2da80646f8636ceb4d43db59fd388a9c4a2

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\launch_instance.png

MD5 83695ee324e1d85614abff1c81dd2161
SHA1 682ccdb7114b353b4a9d9a0b39a9f2278f32c6db
SHA256 5a6a4f91b7ea6884f68e28c2bdda09662ebfa1178c288a9a5c526cb81cfcac59
SHA512 6cf797c4aecc86d028056261218677980440019f19b91266344f1f0368b3a4a5f4b6c2f8017679a349a06cf838f75c7b101fa05e98b80d67861849b89f662e31

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\installapk_dis.png

MD5 2f90ea60634ea98bd09ddf44406be1c8
SHA1 bae40803407380db2747f32537d9b8cbe6f0ef9a
SHA256 7740e6ef61da239d5889bc6ab4f1914e801e55ff0768ee349c7c37c0bfb10fff
SHA512 66023372d906df4ee56705ba3466032aa11dac08e6c0c5bfaac6a6824b2aa5537263755bc722bd3ba594618c7ef658f7de2898e2277d98bae160bfc78cef8e4f

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\installapk_click.png

MD5 625627b757c47d9cba3ec285e1ccf9d5
SHA1 b43c1204c27c8d1ea5a489e67550eba1a6efea03
SHA256 d2bf7d8c6bd839056e36f63af6e8836292626b142c0437bd614b995b1421ae44
SHA512 7df9d91ba8fd1c8191dfb1acc0f82f59af5cc14283d7dce555191d343ef49459b37a7e7f479e384f7ec4ba5a0d7dacdca98948589e990ee2a3aee1e337aba11d

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\installapk.png

MD5 5a18cea05d155022340f734b71c68921
SHA1 2e1d2bc803de18a8067e6d99ba7cf7bc8140fb60
SHA256 4435fb3a0da66807ec87c648ee46b43fcb57c92501688275415ad99b68591a73
SHA512 a3413bb23a429ef9bc8aa60389ce4d2c04e8c2e97bebc87a738acc1c0fdcda62daef85f4ade7b75e1083ad24db167642530b448f578a6ff85a3e36af75cb084f

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\info_icon.png

MD5 4c0599d1d840ea5867212fcd417b0c6e
SHA1 46c38540f85afcb025960a500c5b6bf8869370e2
SHA256 a4494c5596cee132ec247b2d41515e07f7b6b1f60566ba61936818e717d2d15a
SHA512 413a688ebae8b6cd88de5c33ffca110256b37e1b110974901e72825d2366b876e045a34a3b5788931cfbd857bd90271896f5d5daf07047e660fe53059c1d5ea3

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\info_appicon.png

MD5 8f2899c14f506adf448012ed66bee04c
SHA1 179f232cba90ebc278706d481c92e3c91cf6c053
SHA256 dc64349059ef5ac5459e950d526fefd7ecfbbeea27755b3fcfa970ec41859087
SHA512 2c488d61403531bb099d06f0dcb130282bee1b961d39c4c5235a07c0a413ce918fedfcc17bd210b636d12272c88980658a1e7b217aaa4b204b056583672270e0

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\img_busy.png

MD5 e5a83b5763c8abdcd1d7a1e9d3f57e7c
SHA1 6a531e09168ac5efe91c43dd7143b8af2ce8cc93
SHA256 412407baaf0b87007ba11f612f0c5f26b26270c5db6e2e6cdc88041f2297a942
SHA512 69a165f9c9a6bfa10e7c8fb9b8a6bf45953bf4f399db4accf6a9b9801d7dc95e05eff00298a2ac41326eed86301f2e08ec2af90b92bd81d2164946224f90a222

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\Imap_Space.png

MD5 697ddeb484a60498a349dda2e00aa8da
SHA1 9deb6c8b99708923dbe7a6fc4435cc0f291a4961
SHA256 21b4130386e92e0080cf771e8bdf6b503b1934beb5ebfe25cbc7f4d2e446abb8
SHA512 d6a81daa2b8a76cdaf5483280534e2144256614c0997d6c9c8e5cc7371336365db9affb11b699f3a825521951d6ae5cf916e3f0290fb5bb31cd2790fa53de7ae

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\Imap_MouseRButton.png

MD5 6df8bf120b2f4eccbfe3394a6290b61d
SHA1 f854e5f9af116d762c0cdbee687e6b158bfb0aa1
SHA256 0afed9b827c5ee305bd6f612ff775370b92239e9537ae8253a6d12460d5e3cd4
SHA512 a00d498df3201b0d1fad8db1a7a540af97ecd2b66258f2e983ca1d85b26c1850e4de18bcb2ba7a1adde98806807a0ff22908993507b7bdf6f48d6838884f94ff

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\Imap_MouseMButton.png

MD5 af813224560754ee54b8816578b04997
SHA1 6eb99f9ce0bb4533d0bc949a8837f2f5615daa0d
SHA256 e1b2b25943864f47b3be142136fa56ad8010b83169d851545cc2a8a88074bc7a
SHA512 3fc1b09e0e70592fff4572780c10cb9959d421f4a6a6cccdd4d2a6f1fb6399e6808a3b03ff037974792036521da8620805d44aa099f4f2f7a9841f93fc4b98d1

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\Imap_MouseLButton.png

MD5 aab85b7a7a9a96abfa0117ada6ffb8c4
SHA1 057eff70526d0e8b4eecebf0a1520653315e4ce3
SHA256 150c19750ffefe2f2fd9234ca605648ec6521b6f030ae592b72126ec460455be
SHA512 060250bfd5d25f93baf5f96bbe624e9f264d1afbc8491fd250fa1e6faca8d2f9da19f906c1c9e21f20654f6660d23feb85efd2acb9d1439c6cb7fb1b1a6c9677

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\Imap_MOBADpad.png

MD5 2270c387ed6835ad2a240bbe59f721af
SHA1 9a5b590bcebd1afee212e45eb3655f7c363d61be
SHA256 a106c5e95b0aeccfc017f2bb33a86fe01e045042c04fcce3032b2e8d7a3ecefd
SHA512 9109f7d51c740403dfd7f525aa41e00465e3d83ae2bce9f6af32356cb1aa5e81370c052cd7637d837ae35f21ea072f6739b0d6e4a2deee91a5d5dfe09e220f58

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\ico_fakegps.png

MD5 f732c016843f03edac4bb1a5656eba00
SHA1 d586401ad225dc56d7bd2a91e9cfd3fa7943f05f
SHA256 e2a0c2ef275ecef32d0dc4111b112af94935acfce306a4970a7b071ee545d889
SHA512 61b5408cf19e100a5f8f7dbe0c0fd53988288d294bba621137e52151f4a2b0dae3e14186beb547525cf48960746f3e40f2dbd1e7e6fd2a26bbae29ed3100ada4

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\homeButton_hover.png

MD5 64483b92e09ffd23dc92deed4df3f539
SHA1 60405537920a10a674eb381e2b9f945ebc82d2e1
SHA256 826dd0dc5bb1bedf55f3100ddbfa9ae014df97bc0b1a05b74953b410957bb39a
SHA512 20ef712d68d8dc93a8eac31c0de4eb9b5487843a2ac927506b5d2c118ff8df496e677b06be20d2ccbb67bd5ede36ce4e5a7abf87db0160cfde14f3acf6276dd0

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\homeButton_click.png

MD5 b8fea5f39f84ffae428be56ec611fe0b
SHA1 a063056b407db88acb4fcbceab2c231ab5aad5df
SHA256 df80b88c3e13cb1bc0e3c7446bddec5058b9f200b8856d4549dfdca1e1c9262c
SHA512 70fc5579c6043dc3a87b3d9278c3798cc1b42c73f7e5a8d1c2df095c2e2a9f956242ea470ab669944159762a3aa28c60290fc5e38040317b3f2df497120a364b

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\homeButton.png

MD5 bd58f94b255af6f73e2896c141b67003
SHA1 be2510503bc82c1346495722e5b84ed1556ac316
SHA256 8b2031894e3402ef748744d6b2ca95f07332020c845a8db26449a1bda54a03cf
SHA512 3d1fe6c4c2e63cd6f482c3970fbbdef8bead5613406107bf8d358f171387e0f314ff2ab274ffeeaf01b28a767e133d12fc771f001aa6330b3f15dc645387dd7b

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\help_icon_hover.png

MD5 f6abec1ee70e3b63c76b2dec53b0eb77
SHA1 d671c9cb4ac0c357c41b19ef481d2efe698b9ef4
SHA256 9a5fdec4641d76e5765b1e4b2035fe0410b4291af599a2ed8a27bfdadb726cbc
SHA512 8fe7389cadf2f72b7c65657738f3511acb30a54a08f5419db23e17e7c65ae9b843bf789695c2b1a68a511ea36c397d54526d0c91fe0c6f935f9ae906da8d0f4e

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\help_center.png

MD5 f43be024db811e2a70962beb3495b77a
SHA1 6b10b34a4b6b391aa68acb32100dafddf4af6a38
SHA256 e576177adf47d0d25a7d20bd53040917e49e9726823dd3f058284326963ac592
SHA512 362d5f9d785444f9b667d257f48a45ff260a2bfcef731618746324d8b5bb245f26043fd0ab576bba32ae2df66753a9ca67aa22aebcad62a2b4268a64d5435857

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\help.png

MD5 0d298047d0014543bded714be94e551d
SHA1 4009a83cea71e0bee57944dd882bd4d8e73e3652
SHA256 5b841827db5910d2fe250207551eda0fd02abd471e846255e0dd2854c3139460
SHA512 56fe321066b61b8ea976e0fc5cec4387e3f6792e9aed8b5ca2c42fcf871a93b834b6d8cf7a160aa9e504d4d32c3aab8beee0e12dcbfb14112ff032dd7be0fa30

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\guide_prev.png

MD5 106800bf9303eb262f078f73dfdde376
SHA1 4b7dfc982c6cb375fe8767b760ea31f891484eb1
SHA256 24fd82c01009caac424829201685562a28ffb5c3f537a88628de4276c3650c4a
SHA512 56ff91e29d71141d5c67884e6e89733cd60afc321eab41575c1bf1e936a5eb01d9d95c3bf3cee679795c62a12da1e76edce3e918be9f27b84661b11fe659909a

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\guide_next.png

MD5 28a7a947e41513b79685b92258baa4e2
SHA1 eb2d5f285c877eb263695a6622aaaa348cc478f1
SHA256 c60ab74b2a9db23cd855dc046ecb74101723ac93793b28fdf367218a308bc572
SHA512 c7b6c8503cd499b9a1f02d106edf02a326a8486169ee22d68da00c0b12514d2bb63b1f6eb07d02568c12c2ba7d5a80e35246fd457ce31f9e2f2ead48006ff904

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\guidance_quicklearn.png

MD5 49722a0e782bb1ae6e4c62958be10626
SHA1 10f8f7ea7671bca92e498d7353b5b7842b53a046
SHA256 5b8f9f2ae276bd97532699e7de7670ad499dfafdf255344171e31d312ea2b423
SHA512 3745e94bbfd7c2480603aaa7984b789bc714db4539668c7bd19f3586a2045dbfda8678a4e49cca1c8118a11615dbf3566eb113c475f7610e62c926857ef4abe8

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\google_white_icon.png

MD5 d99c5baf3690a5ad56890b30aafd19cd
SHA1 b5973bd3e9e3d90c7c8bb6056dd4bb5242df0796
SHA256 a9bbcc130b2f78ad9047e73e2a1ff2b3fb670b3f26c01afe4cc93ab99dabaa09
SHA512 5de3d1d62f1f024fffa5d9636cdd2790a4e586e9508eeecc73abbd0ec5ee6fbf604c5008b9ae462ae37ee662387126c893145c70e08beac23b85b4c77cfcb06e

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\gifticon.png

MD5 e5de71a3d4fe543d9db06cbcc2fa9663
SHA1 8c2f1fc10aa391d0b6656ea2ee6f7c27853a697e
SHA256 b072d09087afffb302b8ba24e4ae7b944a5a1c23146c6edd225a59afddcc98ca
SHA512 ff3f747757eff0812dbd509ee508dc0855d6fa969755b25f00381a97d57817f161dd86c085907326ba49b3d3a49fe4e37b416bc495c741673ae1ae647cc6b3b1

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\gift.png

MD5 0c774ca02d0861d3d50fc0f4432a23f6
SHA1 09e38c1f2742d87de666d1f752c75b58484a6e54
SHA256 5186fad1fb707938af010b07dc375f5b946c4f993e84c2dc7c819ef844895d32
SHA512 6a6baa44ea5147e984e0d7d8da673676720c3d785f92c818afcf5d915631681171dd6dcc4a7cf7497757462161d07282e52f280b7b92e39d9f36c504d383808c

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\gamepad_disconnected.png

MD5 8789f5b388c4b2f5368db03bc76c8c83
SHA1 4b458f912bd458f70ac7564793987555f390f0a3
SHA256 c475669c87c3eb796cc57ed164b0fdddb55d19881f9660b214141860c11dde00
SHA512 0a4a03547b1a8a43cfd01b3830a2d88a925503e8ef8426583476855762304732eea04959f2a8ac8ea15ef1ef164fc4287092a016df9e67e0f148ed5cb23aa504

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\gamepad_connected.png

MD5 64d3ca28cc7533067e7b9d92faa4bdc7
SHA1 3d17f905b07c79e4327c1b2680b91bcf1b4e712a
SHA256 f6295f1690c02b5a6df48fe7370c1dced8fcbd92b5e089e138cacccedcfd8ee2
SHA512 cb382221dcb4a3eca02e59d2085c5e1fb6e7197e2216afdfa9d1784ce5646d6750ffc1e18304024408460b8e8b2c1a63feefee42df84ac285a95274e6d6ed03c

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\friends_icon.png

MD5 4717b5e42f9667ba7bf86df1ac566b15
SHA1 1bb444583942e08dbd8895bb6ace1f695d025e96
SHA256 225ae3fc14544242ef3bbfc22e9fcce85cb9733b1449680bb30fff7671d1d560
SHA512 0499960bfe3c7f6bc3bd0ddd71439da307353064e439762724592dc66e90930bc982b8b42f6d8b7fbc2f474f4cf7f595861272b1254ec5d7657f4bd127294b39

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\friends_hover.png

MD5 16055ac5d9ba103ea7986c040252456d
SHA1 5e1a532f0325cf4a3790090c9cdffd8d34ba2c69
SHA256 0c8f41401a23dd5effb4e955c7388b7ba05eb872c02db6433f528f9d2c4ced97
SHA512 25b6404d6fe8e7467cbce7eb341c215bb3de56c80e23eb7c79cb35dd17fedd0d8a894b961a481d0eaa3abc7d42d49647a472aa721e34512d8af0168fd0993b69

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\friends_dot_logo_hover.png

MD5 a32d69b9f007058e5f16ddd2f4ad1314
SHA1 149c723fd8d56f329456a13c28e4683946111a3e
SHA256 d53657c51fa639b5284c97a05e0e8509b37097aec073cec56e4d19eff505ea5d
SHA512 2d9076bed82d6c881cf2842879c6f3536cda71f5c31a4302b80ef6d7617cadcbfc4d9ec2a3db4155ec05914508c2d85037e97049394af028ce127f625624e2ab

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\friends_dot_logo_click.png

MD5 6dad16b32766c9ee6891db4ba5f52235
SHA1 28f9182c5ba07ae0cf47d0bcbc81b916979f41d2
SHA256 dcf0730a55e9c18bae8509ad659e4e435df21878699f96dc7cb5ad6efd8f38c5
SHA512 b095497c24815dd28f049c4d41708402ba9e0627ffc4093ba7e51dd20d2df1fe7d011db3a0162652c96ad5e2686712554e91e26a71e2599baf5f7db4f1641492

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\friends_dot_logo.png

MD5 0a501c856a1b34bea82ac134939aed9f
SHA1 0b0f1f4cd1dc668c8d990d7521d7c56fa8604b3b
SHA256 27c0f9ef09142b1940b22cb1d07ca45bdd9aaf658ecf9e9e95f510a7e95dbd63
SHA512 7d0819daf65780b56494ae91ccd4805dccb84b3b83fc4d97aed9fdbc665cf6b44adacad9572280cd578763d44d3c512260998f28da236bb09afe1e3bfed6e91d

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\friends_click.png

MD5 ef7a5f109e6a4afdfecab9e51ba2fcc5
SHA1 5f2e3dfe81c84092f7f62f1c335fc26f5d6ac4e6
SHA256 b8ae9d8173960ea6cab241e9e5e38c3bc77cd65c0594282a16c649d3250135e5
SHA512 5d62cd54260a957d064dce1220882224fac11809eab40f5cec8711e64998db8cb8bffedfeec1cb85ded5882e19eb5d864e240cbd44e6e0188e1f9645a2e8878b

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\friends.png

MD5 533d80946004f5b930bc7b024cc07a05
SHA1 8c85e775fdf97b8a4fa2510e2b7bd432d5a71317
SHA256 e5fed18bed38c31204b2eed0a70cdb383937ea6eb959b9d2bbfd2259716fe0c6
SHA512 e3c7704ad69bb32e882bb34df002ef0dc94c7a65b6c65031966bf2516c98a31831b37f489644c2de9edb024cd8aeead7b6f2971c1a1b1b83656ca115c0711724

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\freelook_sidebar.png

MD5 2f02220edfcef816ba50b771ab3d9004
SHA1 143153285586c6d6f0a8d18badedc30633513816
SHA256 924a4b7301505a4b3034d7557ce65491d6104f7c2e99fcadedf0d0d42d6e677d
SHA512 df9c4bbc42c9553d5ffb454f946efab76fbb6fa07c06d7a24f640719f0903cff50b6bd35e4197ebfc38921aaf16118f9fb3aeea8c028e9e576153bcd372b5708

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\freelook_keyboard_canvas_active.png

MD5 f9c32084bdfb754921ae90ba3bc65619
SHA1 bb5c3f47636a15172567e331ce6172a559e12d35
SHA256 b47ca64a21f5562646bd426f2d9c0a268402d39fcccc2c256ede010d2fb1f117
SHA512 94a285e311186f154045a7f6afb95edc2a1466223b01bffd4b4557bc0af4e00a7d5ec749a782ef8e42318f2309d1bfcf8c13201fbe23e93b536c16d1da05d28c

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\freelook_keyboard_canvas.png

MD5 137a17d88b43fde9504f34ddcf2d6aba
SHA1 7eac5cb28e7bc6eb1e1b382b87660d7772e7d5cd
SHA256 b13e256a9458639c8e08d31082c2f6d612bf2ac01f4cacede060bd0b0da00c31
SHA512 6d35972a8ca1bad7f4236ddaf74e4bf76611952e6fcfd96d488669f766ad09a2cf54b2554592fd7ea602489c6df9ac640a9c8a68491ccc1a184dc1ded940ba49

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\folder_hover.png

MD5 ef8298b92b510e71cc7ad26421928ce7
SHA1 f2e92917e2dfa13e8c4f133997d415c7856d1234
SHA256 5ac6c0e50bab82b552d42f25274f5873a61d4af02c9d49504cbb9f854306ca69
SHA512 f4c60685a10e9c21890b7ee01b18e5d54e75ff008a240936b37aa8413430da8059812719b3229735aac9e56f79cb3c40b1ef585b7e41a0b9b08c03e4b3cc3476

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\folder_dis.png

MD5 7e159af04742238aaa2dd5bbf661c75c
SHA1 2a74f3fb4ed3d2fd24f3b4cb4210fdc1348c0f3a
SHA256 6184e91c5a1d4a8d51f967ad2a666cb3947aee80fcf0091ffe24e40548efdfeb
SHA512 e0fe10c8a25655e3fcfd25ecbff8016485606034f1d3c0651bb819930ca24e5436744994658ee6f38eeac0f1bcb23e77996aedfa742ab9cfe251fc043141fe5f

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\folder_click.png

MD5 dcf3591b59e2e0b60923e0b848aab88d
SHA1 2e4ec5c8fc267c10ce6880cf62ca7622801e341a
SHA256 30d61a784b415b5096b4158a892a54f1e38558b0391245d5106b2ea91526934e
SHA512 b5f8b2041c8e8ee6845fd1880788739721a924fec4ed583ec883b3b8d6a786bde43794c54fc4e8f5e9712e85ff7f9ab45f580b944f0874b67b7ebdee48ef5db0

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\folder.png

MD5 348e457bc148f36cc2dbfecd1b1f3917
SHA1 d36293a8d038598f58262c0a0c9b70cd5ebf56cc
SHA256 bdb9786b9f13720b79f39c5a34c8e1d58a0bdc327c855ac5e4e59215267e7898
SHA512 63f22d23193eac6ae980745edae425ab39f352173a50bd60b61e09939004d85d7cb2cdc43f06c7f4987c836d3aaee4e33c2f7502f0495832dd063638cec95fd2

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\failure_ots_icon.png

MD5 1cac6992d661c949b3996c95edd21087
SHA1 a3004eb880136cf3fb93a809bd6aa29398b1e565
SHA256 fe3813c010b350f632de9748ea308d5ef86c8deada48f682621df501b3488f09
SHA512 c770dcc61dd091c076355158959cc939398a83679e4c9a71e80b7d869595870bac0de9edbc4f0b5d375c89e5c346c0feaa744216736bd0c604ef5f317289b6c1

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\error_appicon.png

MD5 493620201ea3703b193df72125adfbd3
SHA1 bbb7cd3e6fb73eb92774c181ac4d8c7c3c48e86a
SHA256 e61225bf0d3f570a2ec237f2874ffcbaef2c1c25f60968c19f7ca768f2115fda
SHA512 3ac7317d4b9666c6a2b67173dcb4085c965df5af88bcff0e3bd615478d82224f4ae6923ad05f72295e4c1b121f5367bd5f86836f6098b9593cc1839c7264e949

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\error.png

MD5 02f212f79920399a9ef05b85b289bcd8
SHA1 e1f8954ce860dcf267ed8f1bdb67d97b7ee7e74c
SHA256 5cbb26d644a1ca47939c03b75bbbf300a96d160cfd5f5e54e844640c5abbbe82
SHA512 9e13e8ee716e0030da41716e9c8099fe803c10a3eb8b20946c224ed6a2696b218a524352e9c6f1c1f56fda50226e0d2406d3d91a3c6021f4483e09ff34c31634

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\error-icon.png

MD5 b7132de54577636a35438555f354c72f
SHA1 e746bcec37a5e19b8224d374bdbe1bcb8d9195d7
SHA256 993b7429ba24d94cba1fa2075e343de9b5ebe18cbf7e0c681f50c5867a5b6ffc
SHA512 8156f2f303b073d4e42b28ecdb2e505f37849c33d165916601ec6a0f5bc34b9d030d9633705387e89f7dda6604f4010392d8d7ca5d0842df53dc981a1d838271

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\endstream_popup_bk.png

MD5 bda7a1b34296ae8dd8e51a7bd634e5cf
SHA1 d3547a745b6e28528da6276796a3e53eaf8168bc
SHA256 e0da495068a2975d963945b40d17b8df3ffd6e919d0afa00da688d1c534fc42d
SHA512 0a5184b901d456ac8aba51d2338559332301940a0943788eee048dd99553d3a080dc1887977715481104e66f4d29b5514035f18aaf2efc4cee8715ebfb691de9

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\endstream_button_hover.png

MD5 d64a0d860ff4dbe0acbc566c1c814c03
SHA1 d309b6aaf1099a3208b49c119960d665c553d793
SHA256 9f9f4711e47f60443bd3a3d5ca99596925ccda8485013fd4dbec8a874be2b39b
SHA512 00085c892b999e2edb8141546ee4ec1b0cd1c23861e0b6400df77562b2466ff056db812bf536b0d83fea7d814c29f45f2cfc63b867f156850a3ac4a5c939ab9a

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\endstream_button_dis.png

MD5 2f0d8d9ea919f4a085e67f92822cc311
SHA1 be2cf9ad1beb995166d040432292f7ce49f58e93
SHA256 785dc3f87e1ea0a30eaaff1f3043bfddaa5f57c53007b946b7ce58f7ec5134d8
SHA512 5b4ac199f1509e87cca275baa8096b4a4cb0bbbd9be8ab22f74003789fd70ceff7e7f08620a2b28a266e341cb7351fa356dfe4dfd3cdc41f3bdb07e9f284c7b3

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\endstream_button_click.png

MD5 9e7982ea425f3894200f58ffb927f62a
SHA1 12d5c2f29d843fb66816a1d804bc02e8a43e54c8
SHA256 91912fc0dedc2cdf81070e9527e559ab1cabecc2858dcd9821b73cd97d319487
SHA512 453648b603b1523ad2d43c43b253a76dbd4fb9608161093c4a0337c9e1afb63d10e898843bb415fa7925b0c395ac2dc353b3a79c05de41d676996da4160ef89c

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\endstream_button.png

MD5 53cda502a317c70a0c615a7e0148c2e7
SHA1 fbc9c9aa762b6aad57d4cc9a8e9d8e36d3d47f19
SHA256 bfc75b3b56d4a7bbd1b95a7cffd7ca657ac99ff3247a27b592494de9bf07ffc0
SHA512 f3cbb8eccccc79d046af573b9ec70de69d6bf0dbb16fe5c5335a92d45b642db359166b284bfd4037a9a325848c38958ad7ecca0877abe6a91787b5c5a983794a

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\duplicate_hover.png

MD5 442d0b66ae4b4249a91d8dbf9a1d089c
SHA1 98d978e5a6f4d6ead28bc82690a76709e83a61b8
SHA256 80af2eee73323edb7c34014f5ae9f7750776c6dbdf264ee84f5b3da927521238
SHA512 daa44ee5175cff440c1882f6b5fbbf6966cceb1f9c5b8dc7a1134111ede2525b92c3e9ce02ba0a792f004af3316df5d25920894af2306f05d3b2392feda8ea11

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\DPad_sidebar.png

MD5 16627e0e73f30dc8ce4aaca233961598
SHA1 025c6357e9140ac88e280f4bd1cdd82cd56ff0d3
SHA256 719c1e71691e45abe2f0c3c86e79a9c650646aa3cef56559a166f1c0891baa61
SHA512 f3f86d10cbbc9753c29349855b65218857c042e1ce22118f5c87894a845ef7d3ee40e03218524535bcbf341c07313fad382f5050d37c67944e843bcc6b041f0f

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\dpad_canvas_active.png

MD5 55fa2df4996aee086139403e3bb7f88d
SHA1 23c792b20eb266bb94d4edbdd8c7643b1fd41dd0
SHA256 360f131e3db8994547340a07e7db235c62705f4947fc85d8a8b8829fb112406b
SHA512 bdf8af3e65ca447aefc3607b351c69e6329946026706a02afb66a30019c8eee08e3b3b0ece3017982fb2cffb697c6b4cc1ad09890bbdedc17bc256fb18b3a03a

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\dpad_canvas.png

MD5 2699860f48e4cadc20b583ca7f4dccc7
SHA1 833f9f769ff2ecbd9a115c41a85010f876f867a8
SHA256 bd77afb814d32df4d6dab06c02a6c417ab2f2115effd96905d4c5d545d99467f
SHA512 8b486afc6725f8fa0af1f243536f4d8f139f4acc9b10635731d312e6538bb04645c72ec2709d94256b5b06ec9dd01a36cea2f83d0d99867135cf11cc144522f9

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\download.png

MD5 3995552645aee73d544d9266312bea1a
SHA1 c9f580803248a894932d2fee0ee98fae9a097fda
SHA256 97b730c967d5b8ab2db3eb5a3ea08e9be97bcf4b9f33da317969a32b040de0ef
SHA512 33be0614a1828e7a20556f00793d1b2f4ff6f1250e675aa5ca3e7679d8d0308e1e44886d09d388e83f4b7c7c07424358cc039e020ca2fac39ef59861dd0617d5

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\delete.png

MD5 35cd5a2d3ac33f534566a8aaf27d3f0a
SHA1 02a4ef6e30a1cc20d18fd5aa097edce63fe7c72f
SHA256 005f54bed649c068457e33fc933ddac0343199c34ce2117341b175e4997bc609
SHA512 05161afce5af4772b0fbe2e4997edc49c7cab4e9cfeb744ad781a0436a863195d3b14ccdc29a04e6af5252be76cb4a0f04d41ca5b3f0081c527f660e5c7fc248

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\close.png

MD5 b6ad80ca82d447d3ecb748b22cb28e07
SHA1 f2968dc82fac7136a0820904277c57a4d407b3cb
SHA256 a725d4b8ab17a15de53388f9814a1262489c7ca14181033de6d2a16355d0fd9b
SHA512 df80fab67561e1d364d17df243cb43dfbbd51d2eb73c5144c5a09be9bcd85c8ca00628e00a7ec2695ddb2dbd9e3e4e25ef2635d9ef5cebb20d9e30e4eb725b99

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\clearall_click.png

MD5 1d1ed8d6cbbe90d59a715f77ad9efbec
SHA1 5a592f24e6051a91cc8599d1488c6be59ce73c19
SHA256 96c52efa4d4fabb57f1059f101e098617292df02e9752fdd32a331454c7dc282
SHA512 dfffaf7276044293b6a9e257513626dc1035cf282bac3d8044708d01e0d7dd27b0aae1a9eba1111d50baaf2c5bd1f791df8d6d4a93fd4a5a56d08e2e1a9091f5

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\directx_logosettings.png

MD5 b01128a5e80c321b8b61544fcb1b1d02
SHA1 94d90ccab8ad4b1ab0c98e47125b7816e6f3fcf2
SHA256 f9e3d6c9dbe6021572b44c3e9190eb96841f71daed55079add911b3ae2266af7
SHA512 a8c4498b1fb9b712158b09956bd0df63a7431fd91c3e1762b07a2a1662094eb75adf4d14ca1052c0fb689ba71382b185d183086858d6c192c5f0dc2812ba3eb6

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\delete_canvas_hover.png

MD5 3146c13bf25387b7ddc898ddf29db934
SHA1 7d32f4ce77cf12588b05948a9202513b511a065d
SHA256 48f25c689b85ddfc9171c949e63c637684a0eede26abccba19e9166ba02e35a3
SHA512 e8b4fa36d9129e0cad67bee44f46b7396d0a863f69dd7d4db7e2da8a42f681367b53420e055eba2ec70b394a45dfd75ad6291c702c6f6ede3b3ed3f4866cfe58

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\delete_canvas_click.png

MD5 bb4357f9c4908904456a47e6791b5f20
SHA1 765cdacf99adfc4f9f63238ffc889d7ba32d0698
SHA256 4d66a911122e0176e61b96fb128a312b006b60a4c0f9bf6c1bb68a25dbe8cdf6
SHA512 47a5d1de6854b2779895a388bb03cb008c7775096baa445e44c65840759f1bed99bbc684cbb60543118b18775c7157bce1051473e54bf6411108a4c63d5e8615

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\delete_canvas.png

MD5 ea6e4d83bfb14294c8e54750f54839ea
SHA1 82786b569ab72eeaa83c92b6a293dbadc93e4832
SHA256 9738c4581045c9a05adcd26b9cf2decfae75e5a6c97e07f318247af09f6a56e4
SHA512 61de21ea8cdf2aa142175fd442f2d0050630cc906befffedf7d695e72a44a9f9f1e9ca20804afe58d07871c7c5215e464cf4e65c1e6318fc431171cef182f03e

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\Cursor.cur

MD5 2d274883962409c27cca3f1a741e1114
SHA1 3fe9011420fa9ffb84d92bc38de077d4aee35b29
SHA256 e7d973bffd7c966b677f05b51f322679abdb5a9373cc4a2a2821c839bc56bbbe
SHA512 53dbc4bc749618b30bc851b34ce6082ba9ad73394505553b6b16344cc12ac85014b1ed3fc5640e6fc43b8acafa54024a8276bad621d04eba0458fcd2d41c93de

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\copy_dis.png

MD5 339537f7b11b891dfb2b2bfee7865d82
SHA1 cb8e78cc648a2e8be9073b042368d1c660f5a63d
SHA256 4ec449c49b0acf9f8d1e961aa372aa4077a50130a09ba58b55ca635d0cbfcdb9
SHA512 9f345442627193f1edbc81ea2fbb0f6e0aa557e8d376a33faa9e84d731aaa1c77cb1022b80d4527d7775654934d594bafb7ce8727212bcb9a1dc190794f2fc1b

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\copy_click.png

MD5 dd1029190ee33d71f7d0f0004a5e12ca
SHA1 730340104d48d89b763d059b2f69f5774d6db986
SHA256 87bd2942a322bb59472acd3fb10bd3fd6a38c8a0f5cfb4b0b7ebed0492e0034c
SHA512 02b2a0f5a7b3ea65c2fdf48a7aa1a3cadf0244808e7e672b58e3ffb77a32853f224984791a4287a28ac50230dc95cd90f74363c2e2976ceab5a3f39966d26759

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\copy.png

MD5 d1506773fdb93bc816a001bc9ac48f64
SHA1 f7d6803e87c8b7e2627a6f4d0ef8ba424c9ab92a
SHA256 0ed47fb44825a8ff5db2216ef7c681f63daff53f05bd9cc0d3668187c20c98ef
SHA512 bae98d1f5b5d868aeaf1bf099cb1e96fdde586008443cc40671de1c8cec49904e86dab590073e179cc6a87636d9d90735d2b9e5b7b991b5f5b34ccbc60593d60

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\computer.png

MD5 a3b746c6918bdfc0d56a06a249386c2a
SHA1 10d60ee26c1440cb1d98815b495972e56adfe9b8
SHA256 d6a10bd56b39428fe0fcf8c95782e2b27691a8a936623b04ee1a04b17bb63602
SHA512 6c86b0fbbcfd5dcd543d43d474503ce3dbb08cb5d1d2a5332d0ee9e077b4f5037ac9f85fe2d65a26d41c061845fc27b0b24d83deceaacb4e2e2417f3fc9fb539

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\community.png

MD5 8119061a94191f18ddb4432ff056d65f
SHA1 c5fa8758fe32167d5c67284f009d7aec2c519eff
SHA256 a6e8c1d1ab6ca0fd6cdd61f2e435d3b94aa534be7c375a1695850d4d68469f46
SHA512 8252f1d99df7eed0c5316e9a9b220d2c2a5f03386722b9576af931c044247e7505c5e7f10e0bd5b07247213b152a58c324bc1fa0dbaa76e4d124a927940474ff

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\close_button_onlightbk_dis.png

MD5 101844295edfd7be4e85d08491b81a03
SHA1 a0681c6ece6c66950c559225b4a1e40c8fe0bda1
SHA256 c605300a72fe869402da6544b71abd9222956289137b88306a2ab804fa811c0c
SHA512 f672d707eed3be8bfec8bca55e53cd31b764b1ab4310f0c30d533dc34029108f50cd3b2f1f9cc26da50af3ab2ab4b215a1ad0ccf9e72deafaeb6b76869a349db

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\close_button_hover.png

MD5 9ff025e3214b099ee687e111349a1383
SHA1 23cdf4b73b55ac91c27a28ae2d9b18d2b1382449
SHA256 ea92cd390048a54020ee42f433415d13f9a827f0f03a2d71b84abb94a7b46638
SHA512 a2f1e27f7677ed9ff91522dc955ccaebf8b1980f38a6457389f39b16a75825a94e2c09146040b20ccbf35e21e74e2fb742c366aefd324120e8aa745a2874dba3

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\close_button_dis.png

MD5 61c62ddd51628e74b19010dc4f28fb18
SHA1 818c9da779833f7ffe37ff01fc56cd7defdbb8ce
SHA256 49854953e1e682dc89e59f3e2cbda24de8ebe5ef437ded6108307402e3966412
SHA512 dbb78a70879a78a0b267e8bdda0f169cf0e66e98f922a982912b83eb84a93ed8f2996cfcee51677481c261212a963278fa6c2b15df74e06a0f8e3e03e36165d8

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\close_button_click.png

MD5 7fa6c033651034b4cf3281917900c581
SHA1 58c8d707b27e3da4ac2d67048039be808d9d2c0a
SHA256 1d3534f89de59741993b3a8b840c8d4cb0d1184093deacae8924eb6049d5f15f
SHA512 32d847996207cd7227a3500c160067ecd19db8fa1f208f538af30cd3c636259c25d4e39e015a23bde54be4736137ca1577811c614b7350fd83503da2ed0e7b16

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\close_button.png

MD5 1d5c1eadf74e6c3043bf010373d08b72
SHA1 a93f798272318c5bf6c6195914228e6a6699edd3
SHA256 713e22ccc9dd0b42096ecfadb9b43cdb1cc71694da2c4d69c18d6c5ecd2defc3
SHA512 03477132cf26c2eb7ad86e9244c01eb492aeb5aa14ec23d84112a31eec6251e07373ff5d7bca339f2b53b04dfa1b0dc9403e5754c50a712deebe1a1a832a3b5e

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\closewindow_hover.png

MD5 60a45ac0a91aa6ab1c5cfc9cb5da89a2
SHA1 9017299081a9b5f6db0f23d26fdd90eec07c32ec
SHA256 b1d6684c2714d9571e29804cdce0cdd511f8e88513f9f0b26df1c9d580cf6371
SHA512 dc43a768b3571f75f404b00d60ee33a8708921ac0e335f28a896b0b25d69d9475d332f6b52c6a3c2b6aeb73a67b5b621a895d86efefa5f79855d69f34196aec9

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\closePopup_hover.png

MD5 eb060db0e8c088b65df3007fb4a2ee61
SHA1 f8bb271d3e3b044d56223784c4deea7a0f818608
SHA256 2f4e669ade4d97c7ce86ab02dfc240fa705edfd0ce48612fcec574e6b4bca229
SHA512 c49f0edc83868ce5a626f66503038c07effe41e5b5be84fcb9a29cceefc9a9e227ec55368c523863d1c9cacc8193d0ed6ad2e2843887766526bebca5bf926227

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\closePopup_click.png

MD5 f5569b61514f6377b730a114233265b2
SHA1 7621385969c7caa67028e6fd1d80473cd7b45a45
SHA256 7e2c6182f9315bff7c633e8a971bf9791508a42019abc0900375ca6727f26743
SHA512 1fb941b7d7290cf4e3d5f8308bbb2254fccddc1938618b2509abfb9a7daa8dedabfa28604a6702195050f133c7a3a3802f71ab35ea174453595d29c6bec27743

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\closePopup.png

MD5 83b1fa565d074bfa079f84c71510f0e6
SHA1 5088105a940bf83a37acca629ed8cbfe630bde22
SHA256 57e7355717e8b4255a1b4ca72d08561505496ff1be551ee88e40ebd951d4e9b4
SHA512 c54652f4f53fec65f2d2902efabd9a0e760db0e8508100f4357bb2ca57171c405c4b67a76380d5846aefb22ba107950304921c51d5df93451bd97e2b2862595a

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\clock_icon.png

MD5 5c9ace209271dd3c013f555567bf407f
SHA1 10f73f54acddf204428af6481e7922893dec8a9c
SHA256 0a158cc11b7b8555ab55c6749bf2de2a444c0474b3c976bbd0bf295a12cca6c5
SHA512 399990efd351182e9f0e40ffa397107be454e040c9b663154ede80f4798176051923e3d203fda3fc0497f61ef0e9a7ce4c61c0f6ae0adcb73b4de02ef666b46d

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\Clear.png

MD5 9bbe35bc9a5046e763e67dea0dee1722
SHA1 61ce4cae4409c34238445fe13fa6e1814ad3eea2
SHA256 09fa8ef69180e79ada75e11035694098bcf3fa3694aefe48b588ff50f8a35be6
SHA512 9ac800793f77dd0c97eea13d4b9ee276cb928ef861d3b79c830a6751115920bfc63d48eedc95290142811de1283b81b590349f3527ef771ae4347787b008a9af

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\check_box_new_checked_hover.png

MD5 58348c563f84eb55aee6baf3745dd05d
SHA1 171c4a4e6853f0b680616203eed15115effdca28
SHA256 6d59ab5df3ff4220234f37f22555a991e1d9ee6177d2842dd00837d4221d0a3c
SHA512 9297775a2dd19f806d42d50ed42ce6f2006705aac5ea5c8513d5e068a5ee37473d9f93f793d84ed67898dd6e650e83a5c5bae76deab9222dab675e7a907a3b8b

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\check_box_new_checked_disable.png

MD5 88a29bc7c1be71e2923dada5bff916cc
SHA1 401e35f4bb61f8ea11399314208a4461e0f87c1b
SHA256 a97ccdec630b6f607895f625d3a9ed10fbd2716bfa7c7b8083aeb1d9362254f5
SHA512 bb85da0e0288762e5c947ee246f8560b9ce5961344abe10874f7173229b5bd7ef205e7886de6fbce1ebf1b1234f003ff83184b29b3a4eb025a6d1248c69c4e39

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\check_box_new_checked_click.png

MD5 8c3428ed4ef5f6cab7a0f36cc4a65d86
SHA1 614156d3d03041d88463cca78a264ed66cb65568
SHA256 7ab12cbab4736dbe9e0edfc5140828f9ba5e6799cc3132d22671d7a3d4754011
SHA512 7709180b599037791a3fc4c772779c5404b7550ccd7852574a81e6abc1d876f5c7940fcb302de06877d2f96336c62b7934cb5698579f3d331d6a1a47b742ed20

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\check_box_new_checked.png

MD5 0581688afc6511fdf1da6b8667a4e6f9
SHA1 15bce00d7a1fc9bad43bb40a4246cda0f812b5aa
SHA256 da8e77768386e9409bf76173fffed9d02e6c2db57f16486f93e4876583535de5
SHA512 8764d41c357513e252d32c83cd3474d856fb41e4f451ef66a78acb75cd8b2dc5d62fffdcff7e2ba572531d9055f05e15a970657f85fcd252b5f0770e83d8e6fe

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\checked.png

MD5 3fbddf2752a84dbc9b933615ad6c6eaf
SHA1 c9490a84983fe6597431a4c40a5c6a2aa79d33a2
SHA256 e278ecd0a92dc52072cb2f50e634c4bb152881ade490173911a031b9587a58c1
SHA512 a00c19dcf7a48cbe2919f956c0d10082736c26ddda11af46db04a7db013b8c2cabb5ca9e48cf857611791656ef030a3c150ae0792b57ebf64b87859690227823

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\Checkbox__Indeterminate.png

MD5 789285458726983c0ba48406589e30af
SHA1 b920ccbdbe1cb10cc71b264a57bd0286a54a60e7
SHA256 1af285adc2004a3cc774e9af110542541f2c6c9f703f22ab5bfa8d3fa9e3a8c2
SHA512 78036cda8636c8db0422d2d65789e19dfb4da32c6932db6e2ee424696d8df048f28904b9ea7fff99827143a3f45e352c561544eabb4f30d5e986cebeb051a923

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\checkbox_hover.png

MD5 50f211dabdf7d1cacd819cc3421199f6
SHA1 18290be76e6f1a884b8595b70defc42a6571ee55
SHA256 9f0f552944070646932fd9162dc0eaaa1a07cdcb46d09e27037d8d447cd09b9f
SHA512 81e6d89c3e4ded4ce710a9766d39225053c8e70631f4699048778086128c9dc6a2ebd8c096090118cf65763dd18a5690afd7dce5082e6de393421a6a0b7e3cc9

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\checkbox_click.png

MD5 ba548a746a380c9e52833d6a0080fcd1
SHA1 b648de53e5fc3f54cd14dc5fc0bda0e03664a0e5
SHA256 7d800b3c8750299f4b0e31be5bfe67cbbaec169908e3b5b57edd7db55cb824b7
SHA512 876318c88f02aa044e1c16a8a0a340755c5f361b32ad9abdced8463993277215f3a5ffe9f3e840d944cd560edaef8cf0f3bea1827c6d93f456b1d914cab6ad49

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\checkbox_checked.png

MD5 0b8688a85f7f7948bed121f758ed6406
SHA1 c0055895839cc2cd8e9fc316a7ef5101444855c0
SHA256 84ea22653b2836fb168a580c4db0c36b617423b43c1d8351df1fe4c67050ed85
SHA512 9dba6333dba94881e190637cfe89ce42360a635939f69ba0239ea3305ee1774f98d6ca71f0174610919f9283540c02b645e38acc63031c19d6bc3fae42cd6535

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\checkbox.png

MD5 5f59809e60c681867c9136855191d186
SHA1 747e4b3b8836007369ae598dba6da0348e4379d0
SHA256 6da6152e16e09aed9a70ef4e9308662b24626a610247bc17779f45cc41d076f2
SHA512 6f04535c38c7ead2eb968fc8edf7224c8e239348184c7ad2196c8862034170a034a3488682a6233d42c0b80b353b5b0cfeb8dc9da63346e57baeef261f19a6a0

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\cfgmenu_update_hover.png

MD5 88f479d41e14203078d213a69657a042
SHA1 eb5cc5ea997e3fa943b758d70adae070d894061a
SHA256 9652343759b3560abc919eabfef4cfa8c914cf7d4eebfb91e443c19d69ad8b18
SHA512 5264cb6cad7a3f64e5ac74bd8d899f4c324ea5f2a5ff448908928156271fb3f3bc7738be867384aebffc3984feb7bae40de46c14b566044d458a8bd411244fdc

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\cfgmenu_hover.png

MD5 3587d90a80512fbc314bbc15b23a56e0
SHA1 f05d637a9a42c6470430f14758bf63014d14603a
SHA256 8e263be79f11b879080013b7c5fc422a8f831dc445bd84755cf90458ce2bd448
SHA512 0496922a5e3241c8e1b51eae3801c43f19b8a7d915fb31c0aa1d1b86ac606d4d26af1d68d2e7d3b3d8af2da81b993832a029fd289d6fd5bb22fdbc127e765982

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\bgpcheckbox_click.png

MD5 1c83b17a9c700b119128c21c75b1b351
SHA1 13977f75ff4d27f317767e06fcf5bf3d40a14ab6
SHA256 001bf26ab03be5cc72d7d699020fb2884dcbcf0b9518f694b3a4e1a3aa3d493c
SHA512 9ac1d97eb37de535c979da61c34913c8ea886c018e823c986c8638b3fe7bef61a8748c861a56bfcd6d3ca23da9d28ecf198265cc3872a08631b199f404c60861

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\Cancel_Hover.png

MD5 95de37ca4552cf6946abc3addf7eba6c
SHA1 00da1a9ab9dabf9234ab0af372c29190b742bb3a
SHA256 40e7c0a144d18b5b6d2a260e38a7f9c3c4e3769d4b3aa881dfa1375d61805798
SHA512 cce74144e28ebfb42a92bac697fd77472d5d4972316bf1974c9536ed314ce0ae2d5b2d830cfc36a5cb6d86e3c42f5a3d853baca88d2800fca2a043660fb26f17

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\Cancel_Click.png

MD5 6870e2aa610895929a820148336006b2
SHA1 a0ce90fbf2df96f4295339c8da842c653c743228
SHA256 14dfb4be48525aba3395674653c53dcefe081ffa040118875c5cb2d94b0fdb64
SHA512 091d41dd7ae5b53623b6b5c05a3782b2d96174aa971d6c932cd1b5eeb85ba6f10afa7d4e415401b09b619c0587dd89bcefd3a217620c662780edee00c5c56992

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\Cancel.png

MD5 641fb46967ecc5236863b66007a9004e
SHA1 867009e47ac2542ccb40147da154e7f3878c2ca2
SHA256 41fe285bfffc0d2ade8d077b2f0f14655fa1098a6c05140e8d159ec5d0d3d7c9
SHA512 b4504dabce4b2f2a25d49b9f8c4fc4e3b4c1869a5963bef3d13bb567aaf354cf3c9a616f72ebec4443437de2c7c573a6f3ed4cd2f93eb50a7fa2c6a59bd5f44f

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\camera_selected.png

MD5 6a17678ba3e36a08dbfc2f49d6e10281
SHA1 9d86cd9fb09c1d6a0dca73c09012dc85563b083e
SHA256 63afdb3a8baec5490938b14335a8f541c82f876469e0fd1d8fc32044688b9412
SHA512 65626d31b654802e3ea806fbf17034e06e06a48ddfe1d2985b76bf2cfee54ee474a856cd98fadc6fd6abcb0a37638a62fff8f007a77f98467c22a308e52bc52c

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\camera_hover.png

MD5 a02e8cab044a4757da09ff419399bb67
SHA1 8a7f2cac100f204d933b97b7210be2f8e79f4b3c
SHA256 a7aa41b2a1df78595d390a1590733af1c481f21bb84b3fcf287c509fb721daa7
SHA512 02b55919c5854af26e5f0b03800b82d9f86deaa4ddbf07347050f6448c76a677e300383150a54eb4b43e82859f4c47bc5bb8d59f9e70173a0cb1650f2b5be73c

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\camera_dis.png

MD5 e16c34c435b74bacccf44b3bcf33d6d2
SHA1 5b55c0d6a7ea7ab533d500a83e7c25d95baba83e
SHA256 ee03d8572c82359a5145b4ff9f8d5006a10c1363bfdb06f87d38d0a9bdf19385
SHA512 d5048bf1de9eb8fd97a3751555e526fde997a2e5599b262f7a7b7f591416575b4548080730b46615d40ff5873db2aaac3e70983954673a03d721c8cba4c543cd

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\camera_click.png

MD5 17b09ef344151f96f6883fdf023e9695
SHA1 20bc6fed7f1d7d044761fc581e45eecbd6575978
SHA256 148f68e903b070f4bd4f6d0d93be691465e825c4ee067fb3f6c16662c39f86b0
SHA512 08b4a9e3e08a187fa78df8eeaa7505a1e08aa78a7a5044d085c909387fceea96fe8f197f3bc9628349697680955fa3065c0ef4f677d318df93ec737b5db34271

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\camera_button_dis.png

MD5 f18dc0ca2c6a40a02e5a814b6e8a13e7
SHA1 807174d5822b4f71130b8c17e578ce72aaad77cc
SHA256 b674a71b86f659efa9741871143832e0e549d1de7de7039864eaf4720bf1c275
SHA512 8d4602dbb81ccb475687ff4e7eb6df7e144389ec4bc4741f360adf707cdd70d8f585fbc1eb18c4f5a924fd6ce4a3f97fe005912921f54a82a968f683a80218ac

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\cameraoff_button_dis.png

MD5 b064f97d9c449167105b2f343459580a
SHA1 d37df6c7d1a78a5f8cd57d8e80bfbce5406126c5
SHA256 13fbb3dca6c02ceb6ca78c850977700ceb4bba5a46b4b950ee325c5877e86d0e
SHA512 88d19fc4f0733622571329f6da16aae7b7c6ca855bac304254b8b62542767a00c9296c5796b97d32bf74161f4962ef178d7840360377c9156e32eccb83e4256e

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\camera.png

MD5 1e292c26fb316ab53be7e6d8e72d3e13
SHA1 a2b3ef7309f6c25e652406eb5e713b9ed8ce5113
SHA256 3d01e10563c7ea2f48a83a9bd27bdda58406d4cf4fb5d156480c6d8cae8cdc79
SHA512 37c1f23555c14a0ab6733a21f3be23adbf50be357fbd8fc48f8f9a2476f6abf946d35623b6bd67ca6c73cc8fd7fdbeb0c8e06372cc33b9f45e3131c6b9f30e21

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\btv_logo_two.png

MD5 719c81b9667b4f5080945e793c705dbc
SHA1 d17ec9d5dae304a8a0d54112ec5abb769bc9b455
SHA256 22ec8b03a8841f1c6c571d5e867b5945130ba4417615a4c3d108b8e374819da5
SHA512 a3a6e08cf7298c5a817980369a8d06cbdeb5b1ae3fbeb86d9cfea2ea281de85090b00a0f7574de564421bf470dfdb98e60e6215d218409ca5fefca5eaa0618b9

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\btv_button_dis.png

MD5 7e5b9e2ce845a777eb637c84e1c33019
SHA1 a4f5c2f20530622c6a96f8afc3000bd1efb16f15
SHA256 cb56300f68667d34d6db22943ae26d796b6548d66a8e21b1d60c0582b983eccb
SHA512 f0a02153c231ff7689fec34597cbe5d404476f06f9e30858bccf5af2363054d47ada553c4d5e6aa5699043e5ffcb9c86022042f80de9fea01febc6bd7a1e139a

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\BTVTopBar.png

MD5 551388729bf7592073311bff3df6e197
SHA1 2809fc6377e1f10f685f8d8a5771f5d54722660d
SHA256 9442479be4356c0273a168f965744f53c428d1ea941fe1af4b4d0f14321e12ee
SHA512 c8073febb5d908a699db67cb28da11f7cd55b50ade6c5aa01e71bdff6a2e0d3bc006b90acfaa11dba5c3e7a3b96937f9eaf06e336923eb4d44858afd3ebb867d

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\BTVExtensionPopup\slides.json

MD5 1d050f2c37e7eca442300de068773ea3
SHA1 94e983846a08fb23b6ebf8eb1c654c552d0dbe68
SHA256 57269f7a52ec3486c9db970d229844f0792776ad1a3836506b1c383049dd65ce
SHA512 2565376c13e8ba0dc9218d8b5b5f194ec85df0f22470ca805efe48dacbbe2fccaf11548fb53a25fa5d414e9d3a99afe0575fbfbfeac2f07cc444c8e2e7012758

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\BTVExtensionPopup\Screen1.png

MD5 82a2e34a161a11e575c21c54f7030a10
SHA1 e99ce580776df7fe21aac087ec638ad9c585cf21
SHA256 ca5f4e409a928328b06c2ceae3c9513b99cd05a71af33243b05271d16721b617
SHA512 bfd0bce6d3eeb7cd4a38aebb93c9cf0252ee0bf7fe874bf1371e197f896f8673a0e23028bd5b8b3cd70a25a867570a8f2c464f671a53548ba9102d2038394ccf

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\BTVExtensionPopup\extensionPopup.json

MD5 43cdc5ecb2c25d076717650b907b5918
SHA1 898a55ee6798950b5269d3971e258ca3a751be5b
SHA256 69e046904fafae161752a39b76502a26f64121383cabfaf390e4b3721a0a6d70
SHA512 1a43b34c0d9c0b917d518a1f987ec5142cb5faaa0f4ed8768220c24259786e1e475ee27cc89bf17d8f37473273f5479e437f9e45f51613155365e964547c7404

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\back_hover.png

MD5 8d77ca36c01075779a836811f7ff39d0
SHA1 e5b766ece8e6ff2bbd7df619b8ff2746588b06c1
SHA256 e8b2981cd7b5d5c493779c1de32916ecc8c0b3905075c090d5eb6ed3fc43005f
SHA512 c1a2f3dee2f100b3b287d1b969cdc16b4058389e3352662339958436b21f249e7e0766c7336f522b6301c9d86959645ee7a8004b1303e9319bca62f89f378fd1

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\back_click.png

MD5 2509b2286786eded70d72dd92556fc65
SHA1 13e17e0ca9a9417c0be7895c67e7e8aced3b8058
SHA256 484600f27e434983c40c5785a315d53f08081c5c0d1a258b4b262b0ef1d268fc
SHA512 3880c1a1e40e2b7a936945f095c1b050e45cfc0b2506f32d49e9df713270791d11ee1c6b34dcfef84d2b668293f145c332a346275bbe0c0dbd3012eddf9a71ee

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\backbutton_hover.png

MD5 000ccf99edf8db1e7fe02feb6035b1d0
SHA1 2ecff8541e9de96de6a78108c3cd25d8538bbd4e
SHA256 c01f397b417880605469866793161ff25413e20304eb58c79c0d04aeac364766
SHA512 2cfd584d11a221dd7017e4c632c9191244738d8b7e3b83414b1b6ac1e29203d469912b6d776cf71fd2a1ece5fc682ef82b7715fd908892dd26eda5698e97e38f

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\backbutton_click.png

MD5 91bcd68365efc83267310c1c4bdbe844
SHA1 fec71857cb285b84c382f2caa082ebcaa5a7b4fe
SHA256 fd9413c4341858a62e8ba86decbfc074fe92600b82fd509fb6241df4e2d0f6cf
SHA512 956ff7447a873d093ba3fbfef057f0945ad98bf544c883ce0884001a807a962d162c0d0b30f2500badb530719286158cd3bfe9a1475d937760de73ed221cb153

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\backbutton.png

MD5 968cae830f7a3b8911849887ef804168
SHA1 f5d1158e3afab89964d18462517b7e5163d257bd
SHA256 16eee17a1dfee3d6a195e05dc376f2b4fe917fb2e3bf590ffe1e285a8b37db32
SHA512 7974ca1842d8156c43ff5368763105a17161f4c326eb6bc0d7bb5c0ae1398ef61eab55ccdfdc091ced47c780867926d7becd415e939043568d9d0a1de8e1778d

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\back.png

MD5 0cdce353c480e41ae14333a8635da412
SHA1 fd3833407930ae64ea6db9b187c2e5be0b77f780
SHA256 745aa07acca681dc5d304c77b9ceabd4db94bcfe3fe88af47dae12dc6e783aa3
SHA512 f025960cd3f5fe8ef044f6441a6359d6f65981058c6e402c1ae79f3c8236f65cb6c6adc8aa2f4f791c2001e7aadf83fff4f43e4b45cca57a8e3daaa07bbc7d71

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\auto_cast.png

MD5 bb20eb9126d48f7da5650fecf087d197
SHA1 36c47b949627d5a67c3d887edb1596e1e38a1bf4
SHA256 9471fbae12c7b2538cf5b3e9e77f67b20e22e347ded000d136c109d500cbf24e
SHA512 ecd2750f0b7d401330ad714e7ea4a8f01921fc26220de4964fada496c7468e15ee5e8c0e3b59cb158378a7ec05454895018584439c9ed416a17d827bfa8f6c71

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\autorun_macro.png

MD5 807f49524a817a370c17b8ba63c17747
SHA1 f810f8f46be83c268d765d1803a7b2221d30c956
SHA256 f0836ddc88373767dfb8e3a9abb101e7e9812fd4020959531ca5cf69d8544fd8
SHA512 e59e77eff424750dbeb75a64b4da11823c47421f116ed085ef8bc8bd41684bdabcd9db248fc86206e65264f13ea774d3ca480a9d22788640ca082e31a51432d2

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\arrow_hover.png

MD5 eae432e28db507158de5bafbb053fdec
SHA1 cf19e826c4617c63a2cd6786ff4ab6131978a4eb
SHA256 743e3e7d2aa192d394ae1c8d19cb833527e61a093ab1c36bb7897673e318dda8
SHA512 d6e352f7489d9acb1d910f967b3c103df08b793e120761097486cfa73bd99311f08d9c9010d5b5b733570831a1ecafebfe28d87d36a6d59ce2cc73bdebad323f

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\arrow_click.png

MD5 efbd4835173314b1271a0d5def77d872
SHA1 c859aca6691668af215f34c373f5931cec349abb
SHA256 11b9b9c1af8f777cbdc85267f75bafa9b900f664100d4baa682ee74ed34f7b1b
SHA512 1a8b9b0bd9e44b896f3ad7b8785ed8b6afccd6588d4e9e9a91cf9c6dd37b81b337b6761e4bfe11ed3854487013e905fad64deb91a970aaf5d71f097c22bd9cee

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\arrow.png

MD5 f6ef4beae5b73b7d9c1cc747d1d9e594
SHA1 a8c26136ce689e23ad1c8483f48640091c2612e7
SHA256 25eece8a8574fcb315d5685006cf868acc68b23f56a04b6470721be184c21bd3
SHA512 447439d030d34e13247f7fbbe8b9c0d4969f9f6c611cdc725248a4dd32c833f88257c64d920e6618d93ed25f9b683c90d1ca8dd655631fd337fdf9fea36739c4

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\app_settings_hover.png

MD5 b8712694fb730a23dfc30e42e870bf9d
SHA1 12c63698a2ad21ab4682817ac88c80ec6fec5794
SHA256 1462c309d5ca56ab0067da920a10796145183ba96e964d8757ea767cea7fa4bd
SHA512 5e64e80616510ddfc1a418dce2697d7d804b7ed78480b580bfc42297b4203370cc535392f8452c65c5470d12d11d1bad9514549c2ee6f4154c7deb38b71d66df

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\apps_connected_icon.png

MD5 5682d7171723cc089b3d0f728b657125
SHA1 337a6e17c1fb9f78fbd4555c426047f6b5df2c7d
SHA256 0fab2c2e8766282da8465ce83a8082e32fed9b87598f6e1e7a5231042dc1c65e
SHA512 82960c570091065c1d523bdb2f2cfc49b4290340ded28fd1ec9e4de4c6a8572f6ada136f32b0d2150b0a4079438bf03355dba97bf50f9b2b22e876e862944b68

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\AdvancedSettingsClose_hover.png

MD5 11cb5a84cea69f4994dfd8fca484f838
SHA1 9d4e05da2d4882bf31964c02eed5f21cb19f8960
SHA256 88b5574f0042164e90e2128c70392345c9651f4b14c12cd8c80781ac6cf70809
SHA512 bef89b99ec80dfdda6a47446e6eea9e5e491fc471c7cd41553b593d6189e0b3a57f683fe65c60fe3cdd181269055dc7a8854c5c46479c3bfce1c81b15af31067

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\AdvancedSettingsClose_click.png

MD5 50597c154f40d039a2ccdf378751961a
SHA1 f586f7a5ea2554f515dda1b5f3764dac2242df04
SHA256 8e239fcd8b5c3b49b7c10c00b97a0e9ab3d18d4824989321cb7ebf4e66be0280
SHA512 06626825b63a5cdd7a1b78f06a454b073c50a38b56190cc0e317d85c1a7ba3dd4c795f49cde3348a64e3dcc0d2c727ce2fdf2ac12e1cc1e8c9ff984155328d1d

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\AdvancedSettingsClose.png

MD5 1411b38ab8a9885bdb91cbef89f516fc
SHA1 0a022977a6be07d1d17707f2455bb9b07d6e44e1
SHA256 ec6f7ba0291f8353c12571a2408a5d8a1b31b8042bf1d1cdf7a7d6ad70d94e3c
SHA512 5e8fb97e053865cde9f29c973ac07614a2530bf32bc5cb71b4811845cb06a964f410b97a156a16f46a0f3a6ddfe0de47e46ffac2c4da41c200a248f44c9350fb

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\AdvancedSettingsCamera_dis.png

MD5 3b859db9e08970262e410ee86054a5c9
SHA1 7cb49cc2e2f95dd126bc09ffd8007c4b4c57a71b
SHA256 9cec1f2eae93be5fdb83e75d2792e648cdbfb8613a212416d0ec941d10c5bf12
SHA512 6add5ef05bb3448771d0da5554250a8a159511e73b7f7d6ee51aa7ca807e412e600890a8db254efe8e6b970f02e9bd7c2e53cf075bf326848d4c74cb7b3bfbe7

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\AdvancedSettingsCamera.png

MD5 c3d620169e58a4ee46b01da74a1340aa
SHA1 72923d474174441efd2339a7ec78b23745a55595
SHA256 a862a621e4b931c21276a8ca6fee50733cd0dd0910326c58da8196d614c1b64f
SHA512 df18396b780dd26023cb158ae1f2adc1ee3b68955a3f01b9e42de6abee2dd0ca7848e1e09a2ad93f3a765bcc6f1125469e6fca6c066a98ddfec1e063c0bd8b5a

C:\ProgramData\BlueStacks_bgp64\Client\anime-pink\appcenter.png

MD5 fb0a2b0b975cf3fd5a18d67f3c64068c
SHA1 66c60f4c05acf14d1c55927b6e93ff34ee195de9
SHA256 5df4bfb216be2600219874e5f54963f4a069d17cb2e32b897979e15e20ee31e5
SHA512 22957790d8034bb4c57631f1a298b6b91ba31e8730580a90fb95c22cfc1b0fec5312a33aafabb4274743abf2c72f68214c0e6c06f9efbaf810e7ba0cf77aab77

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 66fa2040839e2c7c4b2cea6aeb9bfac3
SHA1 9f8dd84ce2e763d15ef592ac2efc71d485c35e8e
SHA256 c8cf280f4cdad4860696508626687f5f5b97736050575747b92662c50309dabc
SHA512 5c1cd6720557a9c663aeb50df9b4d61c308a6568d4db3ba3a9e510abb434b88c0598d91b8d32df5d905d42c973351d7e825622a834235e3611ea42807971031c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 894945a1a7da570a333fde326ba99af1
SHA1 7c7c86cc3632d3104a66ed9abf6f6534e655b9ac
SHA256 9b285407afe17ded93a5bb9d7759e5e8d1b98672846a36f8a094d60e47e156f1
SHA512 53ebb3bc34ef006272216631e54a6879e89bcd1d50c3a2a350a4dfb72b1d5e5b8c35aa8c34b8d826afa95f1dfe98b2c082441f8979420b00e18c32aa5738f6b0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 f54e84be7dba424133e3ac6813295e67
SHA1 339bfd5c5bcedd195bd47846f863d334d5616f6a
SHA256 7a19a44e1c70c17d296eda3d2ff7a0250df1b57fb07665f83e4c6f8c103f7879
SHA512 2edeb0bd5b87e5a853ecbdd747abe68583653ddb8e58b2419cbd2dd4f7392a7539ec2fce4900270ee3fc56afcdf867aae58f1b2e9f079e48f9c772dd43a03b07

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 338ee0c438e332d4b0f073ce099bdcfc
SHA1 5d2b43e26a2e7384e36bcff7ea70bad076d0936a
SHA256 f355d143e8a7b4168f2bac6ff09ae867826188082b864791afa5ee51098b1d19
SHA512 f2fe46a58c517a4df661a05318e749e7acaa7cc4c9240f08981c9f809240e49353ca864e583048445d60678ea7883f295683af350d275ba0ac1db53c321946c0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 620fcb49134b3f7b84b334814d24f4bb
SHA1 30b7ceb55c175da5d98b7e5af1c6eec7d63cb822
SHA256 82c8ff0953c51faa138c814f4cc7025f84e26fc51fc455d49ba93866bbd8a5bf
SHA512 eb7c322276a70b7cb67a4e50ffd603d6efacf5ff739aa94c4e853165d12e9c9b345762772f01e7953874c7d885df61c65f76dc6287b0c38e5e0be0ab30bb1ca7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 9b8b4b737c1e346bdaee0c46a06e1cf6
SHA1 28e78b5e58443c918feffb7fbc128188c1c2c1b5
SHA256 cc6e27406bc5059f026bcaab44b931e16566366a85be4c489c0d0f0c21051852
SHA512 127a3efefda5a5b76d95bf8343128d4de4b4a4ee014c0bcb8951d0e1ae7191622cdd5883c534eda613d55931f386dc3d3b12d23c6c16f7b71b363c8e86d408f2

C:\ProgramData\BlueStacks_bgp64\Engine\UserData\InputMapper\com.diandian.legendofhonoursea.cfg

MD5 0365cd98317714840d151f56faf1045e
SHA1 8b2155ffa97a4c6c04b46837a18bb4b316bbe101
SHA256 56458df258a83b9fd44d516b9d5a89c841c76177eec4f5605b1862cba4265314
SHA512 4ef9db16541550c35fcfae53f591c36e7c601420f70185d1d23aa5e6460391d7df88197ff684b4ca593fb6cfed24cb5a9ad8faef5eb53963b9fb95dc9ce37a98

C:\ProgramData\BlueStacks_bgp64\Engine\UserData\InputMapper\com.ea.gp.simsmobile.cfg

MD5 390c619d4e0d624360c253556d9b10a9
SHA1 da0d73147fe03f7618785115520318663f25ef93
SHA256 6aad8ed62ca50c98bd95f67dbe20f1797f9a3a6f70e2c3c85d01723cd1a10da4
SHA512 5c84dd8610a901a2c45e026ebc3457368ce279d647123f8cb986090f168306958e2e56f51fa6f1e89678c9b6e07c52a4f2113a101eb578e288d73d099a69e3fc

C:\ProgramData\BlueStacks_bgp64\Engine\UserData\InputMapper\com.garena.game.kgtw.cfg

MD5 91f47bf05da9e03f616e7164988019bb
SHA1 81ccbb739123f4a0984d8968989036efe27e1739
SHA256 7a8bd825781732091842b27685ae6b68f954535ed9732c8c8624b1245edc24e3
SHA512 2a9894d90c5a13bf58d0189c0f0b5470a9ebc6d2108e0fbc5adcf1b79fda557f40f23ff43ea0bf4380a6dcc538018082cf5fd05fc2e62c64eeefdd813dbe81c3

C:\ProgramData\BlueStacks_bgp64\Engine\UserData\InputMapper\com.garena.game.ftmth.cfg

MD5 8ae30399e97de5c5ee3e403e27fed933
SHA1 8635f1b01bc59355c29627b5013dfd98351a57a7
SHA256 e300dcfb988817012e210135ec8870723739cfd374e9b48b6c4c3b9241cd3565
SHA512 6ad1c9e662e952c60525a9cdf317735194e3e26a19465d2b4f3ef2c75d3f6b46227fea19b2906d88cc4764354da0fad19ed73df8f20769e961df5b0d71ef9bbb

C:\ProgramData\BlueStacks_bgp64\Engine\UserData\InputMapper\com.garena.game.codm_mac17.cfg

MD5 cf7dd625a3d8bdd76c887a1249172ab8
SHA1 5e8e01839d2aa7e3799567d470c8bf84bd3edb2d
SHA256 e99354f58acdbeda6bd3680214e686f7340c9bcbd1a3b7c551a2c114458eb106
SHA512 eb96c874e5cc01f2659fefbc8598e54668347e7fe4b0f8103ba572d5aa887adeffd3af75fea886f1bbb63effffc17db1617d8ff0272ab79b910cda078c068dc5

C:\ProgramData\BlueStacks_bgp64\Engine\UserData\InputMapper\com.garena.game.codm.cfg

MD5 bdb0f4d9f5d9045bcc9e28573eb0b103
SHA1 417adc6c63b2890fc734ed3c08ac4ec86ac7577c
SHA256 50032d60a615f14c57902963a0b90d83a64a19da8007089d3aa24f60fb4319df
SHA512 ec68d021d0d21169c856da6eb8320e206628ebc2589803b1afa8e41f69785ed473d7c5d77f3a204eab574b6307b840f3146b6dc97cabb339d847c290c347977f

C:\ProgramData\BlueStacks_bgp64\Engine\UserData\InputMapper\com.gotgl.kr.cfg

MD5 f654f7ffae08df01df13ca5a4414eda1
SHA1 f547a0d7c38c20304dc49f56972d042f86b0cfb4
SHA256 369f05b655da2ec8996a1556952b7b2ae0a5fbea8b8d47918a421dffc38a899e
SHA512 1f2e2d17b4857d0475b3d46c7d8cc57cbd84134eb86b1df07bcdd4e327dfef2d7643b833aadc5d4693fdb68e9373b3b9feac1e4b5b7c7d951a9f2e81239550a2

C:\ProgramData\BlueStacks_bgp64\Engine\UserData\InputMapper\com.igg.android.castleclasharb.cfg

MD5 55597330ce6c2225b7cc1294158dc3ce
SHA1 f308a5ada00e3d62e713e1b872663842fa97e6f6
SHA256 a024e38ee01bd842a02a26b515c0f7f0a0495ffeddb8eba5b150a2e9e28f5917
SHA512 f903ad3d6b26536aba872397b554960913bc71432c46fd1814dd4c9f8d1a4602e50f02f096ef00b49fde0487a6cad6370e97f842adfa055f12d626e26723db2d

C:\ProgramData\BlueStacks_bgp64\Engine\UserData\InputMapper\com.igg.castleclash_kr.cfg

MD5 9346c5858c1e1ce56cd918e9cc2831aa
SHA1 ecaa89358e7f8a8f21ab7bbe2cfeaffff564346b
SHA256 d417b9c7b8f304665c97f89a6a87f7a4624c9a3068ccc64065fdbeb7598d2ab8
SHA512 3e83f64522c5ea2ffde8de5a93fc9b0083bf69c99d39fee6020edf7b0939647566903ceb82fb33a665e25f7d40b1434b100cf876a3248baa82d55e2b8aba8d13

C:\ProgramData\BlueStacks_bgp64\Engine\UserData\InputMapper\com.heroesofchaos.ggplay.koramgame.ru.cfg

MD5 9be971cd126fc550b8d7b38364ea534d
SHA1 7acd277f59621cf84ff63097974d9c6a512b010e
SHA256 95083501e00735ee46c9b064637d3580bc72847bc23784bf1132c4a919756ec0
SHA512 411a1fef513a06b7c087496d1cb41b6f1a91760bc01d5527bcbe73676afe74fda370bdc24934893166ce8a38ef8caa88ef955b45492f9abd6c230a9ad7d7cd0c

C:\ProgramData\BlueStacks_bgp64\Engine\UserData\InputMapper\com.lilithgames.hgame.gp.id.cfg

MD5 0d3922c2c6bca783f1bb35363e947477
SHA1 9766239138fe896c88d0e82b8864c625b3519813
SHA256 2e42d2440ee55a29bf69229006c62593a00a0e476656607bf0804bb2440acd0d
SHA512 0f876f662673c473f03a486c014be87ca0b261985a0d836775778783125b742610f30729cd2fa60b6fbf70de8f2063c66c4e162c9b1e0894cf514465f23bf9bb

C:\ProgramData\BlueStacks_bgp64\Engine\UserData\InputMapper\com.kingsgroup.ss.tw_250.cfg

MD5 9d3a0b45861aa60e8405b5f16a96a36c
SHA1 6fe692680defa1bb559da4388474b7f72b13ba82
SHA256 a9b951b628aeb5f38ce5a602e7cb62c3afe63d537b7851167d6bb40bef7e30fa
SHA512 13c78fa0aee97bffb9ea739ea40ac8de1ee43d6393ca4306a0727742e86716d095f4bc417625fd322f0b9a27c09d3d7393a568e5e49d32e4070c271b5f0ea1d1

C:\ProgramData\BlueStacks_bgp64\Engine\UserData\InputMapper\com.lilithgames.rok.gp.jp.cfg

MD5 defdd1db24cf07646e2683679da30a73
SHA1 e13525247adea8979ae0b97d74415b1a2a12fdbd
SHA256 4d38875de42daaaf9f42719a2cce7116a448843954a36d665834b26fc07103c8
SHA512 7629236618faa614969f5adc87c30217fb26e8d463b377c75d3c06dd9c4a836df3b22e632d2fdd1a857a5b8273b841b8507535785a15b968828eef261d53f66c

C:\ProgramData\BlueStacks_bgp64\Engine\UserData\InputMapper\com.lilithgames.rok.gp.jp_260.cfg

MD5 1c77c30be398b6db87ce872b029c520f
SHA1 24bfcf81431d0983a6968d39c9f48d56e2d992b1
SHA256 7dfce60e9dbd3086442b84484b7b2832865a3f4ba82bee6a001a688d0c96573a
SHA512 89545bdf5b6369f2dd83ee1605d5c7d5a4aa25fbd5ddf5face0513764b75a75d3f9883b2cfb549ae20af35ef6867f2c7d38ed1da7f646a20b1c68b7c81316be9

C:\ProgramData\BlueStacks_bgp64\Engine\UserData\InputMapper\com.lilithgames.rok.gp.jp_250.cfg

MD5 e807d0b95e398035ee798ee43a3fdcc4
SHA1 4d2a8164f88627c38644f056f0ddd50bee38f783
SHA256 de3260c15872345e89396732d8398fa5518515a591f010fdd98156e4d70a0ca2
SHA512 a10883899218e709eb42a750f999b0187e77062d256cb43866395a1681159e0091959067efbc52213cf6dc88415bbcd30e8bf2f09a0cdb895d1772b1e53afd12

C:\ProgramData\BlueStacks_bgp64\Engine\UserData\InputMapper\com.lilithgames.rok.gp.jp_230.cfg

MD5 48c33e5dc6fcaee10c8a9ab462225295
SHA1 dbe980817d6f27f266acda0945a386f919a283d4
SHA256 5289aef3a233ad575186fd49898d7cc3dec5ddfe495c3fcec17f6f1d874e1af9
SHA512 5b4bdd2291a3831eb7770a1a1906a78d18f829a576bb32f834bc55fe493ff08f69a0af35c5816be4b5986bdd63c3254953c39aeac184c061ec3ed6a39446cd9f

C:\ProgramData\BlueStacks_bgp64\Engine\UserData\InputMapper\com.lilithgames.rok.gp.jp_220.cfg

MD5 0793614a8407633c07c1198b3129359a
SHA1 42c3fc8c9220dbb19f161b1299c59a351ab68875
SHA256 8717aa2be993a67fee174d6247aeb9b56344f82ea868e2fdd5c98036d7334203
SHA512 00f93582a5eca280a24d615f8326faf54281b4fcd950028dd99291b470b16cba4608746a1fcf3e2274183bac049e1a908de5d1473a862a639af2c9fcf455d356

C:\ProgramData\BlueStacks_bgp64\Engine\UserData\InputMapper\com.kingsgroup.ss.kr.cfg

MD5 da38cbdbcdafa0901ea875c165463874
SHA1 dfa80acd254ae091974c79ec8bb810496b8b689b
SHA256 0aa489eee06badf6fe9d4534e5b7b64a5143f545a239e6cf2c2f47c23fe01af3
SHA512 38b8306b58bbd139c9e1247ed0a1f4f6214f045a9cb9e90d34aa0f67f20ca4d883689304658c9fbfad39cb9a936d78afb905b5fcc66b4011f54eb21eb7c4d53c

C:\ProgramData\BlueStacks_bgp64\Engine\UserData\InputMapper\com.miHoYo.bh3tw.cfg

MD5 e1a4e8cd5b081f411097068597fe1a6e
SHA1 79fbac2a17b8f4f27ad10a244d828c773c6db374
SHA256 850148e496165813cca1c3ec4f3a692772699211b2f03651ddce451dbc0add6a
SHA512 1af346b63cec10ccd76f6eae3913a82d062247fb6268fe6ba37a3dacfe2fd58e98c48d6066665906f8263821e85cdd76c51e46879effdee25ec05c6fb8291833

C:\ProgramData\BlueStacks_bgp64\Engine\UserData\InputMapper\com.ncsoft.lineage2mjp.cfg

MD5 274b41c260326b54681bb32654bc2b3b
SHA1 9985fea8903a68a348db53fd267466496080b1a4
SHA256 4ea1a8da60cce2d08b148329efcebce4d0df1b9ccf17ab7b924aeab401a5ef71
SHA512 cacc98d03104322808342cb54d3f68bf458898bd782cc60fec7e2e5b469b89eea6d00c97bdb034b51706fb7d2cec017d84b2e0a4ce4c4ddf4643161ccb1c1462

C:\ProgramData\BlueStacks_bgp64\Engine\UserData\InputMapper\com.netease.tjglobal.cfg

MD5 3568fb6e9cb8103fde1ee2dc03c3c942
SHA1 c718e9be713cf467e44d4951df2ae57033ca3b43
SHA256 7a119b68fe901f60e80d97e6f8306717aa8c9f04e3d514f0b7adaecfde0669a1
SHA512 b22b3fa3be38e382eb457b88f54b5c249492bec1783125d7c8e541b7823214e77257462156aa3b8492a38805bd530d83074555232385d1bf8d788d402ec23394

C:\ProgramData\BlueStacks_bgp64\Engine\UserData\InputMapper\com.onepunchman.ggplay.tw.cfg

MD5 3d1d171c680fea93faaf8ef980da7732
SHA1 519b3d8f703da1de57638b843ec4c356bb2ec975
SHA256 5ca0d49ec73cfe928291092c3f0b21174e0ec7bfc66ceead945c6580a8d6ef90
SHA512 a681bcaef934cce9b0b3f7d72aa2ee7a040b431c95fab72363a55dd1becabe77f37bf655ca1ae26c0df65cb96600b9fc436d45560542aa7ed1ef2f0c03f3286f

C:\ProgramData\BlueStacks_bgp64\Engine\UserData\InputMapper\com.pwrd.pwmru.cfg

MD5 1920200604b372fd4fd594f94a7ae849
SHA1 0ea4fc70c3ccc88a17ec1415daf9bd7637d5eedd
SHA256 586d48fdce171aa9ca55aa3b261d4bf4bc6b6d66a22d6d3e06dbca363c2d47f6
SHA512 457e925b961d4fb9b124c7aefeaf5e1d5243ae55e548524a9351ab42581351936aa9c45c90c7ac8572b70274a122fa2c72fff40861092815d70cd9d6745afae2

C:\ProgramData\BlueStacks_bgp64\Engine\UserData\InputMapper\com.riotgames.league.wildrift_250.cfg

MD5 3af89d532a7586e75958e09c3ca2f448
SHA1 3523b3bf00374eb0855da2d9be8b77fa7f8c129d
SHA256 45d154814c4db13a86a4ec08f35c1807ddf02ee3d576f81eb6be3e727565becd
SHA512 5d5488d9ceba25eab757e2e4c38662101241c72bc2a8e0f2fbce576f32164247312e4823273a9d7107018f15e1f47bdcb839dd310d524b82f9491596f66ad6b5

C:\ProgramData\BlueStacks_bgp64\Engine\UserData\InputMapper\com.riotgames.league.wildrift_275.cfg

MD5 b7d054c708a1edfc38ad7822422d0b14
SHA1 4ae0f291a7f5f5d3c98c9fa2ac43b9b534236dac
SHA256 1f5db7b004c4731d02ec1175fbe94c39707b658194ffa56a8b6bfa51a592e1e7
SHA512 bbc2aef2ba507ec03a37853e15c9890f32b553e6f4178b2fab72d633d3aabca0563531a25368d15a7ac1775f6ba5a2efef08dde409442052f17172e60eae4f8f

C:\ProgramData\BlueStacks_bgp64\Engine\UserData\InputMapper\com.square_enix.android_googleplay.RANBUjp.cfg

MD5 692000a78407f623245bfb4eb1e634d4
SHA1 a453a8ca8c781ea90f3c48c39aaf0a3532e6a064
SHA256 bb7d621e7f0b4ea3813ed22290665cc4c41e567f3262c31af8f06ce62282d7e7
SHA512 c95ee767abfc67cf2ed4110f42022c9a93fc0340dbc8a36d00c14369c5148dcc55a000aa58b44dd1ea65f52fae8b8343fca209248701d9d1dc3f8e97b0b8d4fa

C:\ProgramData\BlueStacks_bgp64\Engine\UserData\InputMapper\com.tencent.ig_14460_210.cfg

MD5 f81e2636923dc0047eed15ec7df3169b
SHA1 169678848b348d23c0f1fdb48f38afdcf22b13c2
SHA256 54800071843d824c6a7828da79bb15bcd22ee64c568c78452e372e6869348a9d
SHA512 a9ad59ddfb40ae7a46b90521d9bd405ead1570a102dff80e8b9dcbb8bca0d800c3c2ec9ddc1fa1d3b3790597c39a3dc1e86eacced2456213a726dc15512cfc03

C:\ProgramData\BlueStacks_bgp64\Engine\UserData\InputMapper\com.tencent.ig_14680_210.cfg

MD5 ed85cfa631742843d9ae5fff3e450e36
SHA1 98d11342907434eae8061593da42a0f1707828b7
SHA256 4012c37b04701aaaf69678470729e525c171ef408c2e9e13f7023b6abc1a4171
SHA512 692259ff3d90615aa447abc2ce682a5f45601baff37ed7601c067e0986a2bd581b40a7f90c818ff64d052f830655d56886feb497c206af86034a1468e59c8d89

C:\ProgramData\BlueStacks_bgp64\Engine\UserData\InputMapper\com.tinyco.familyguy.cfg

MD5 4d35806934f0d246822e3efdb2cbb49d
SHA1 580b93f0c59fed4c166793d0f9166b26c9e31e12
SHA256 9e07436abb891b22fe6b05bed5f072eb540603111a29fa548df40ee40378fb5c
SHA512 7054d8729cb340de6bb212e573c13f12531fbe9f6e776841af3d7b36b7fb7c342fe953ef815918c9aa9b07bac614b688bd1d9e87a937026e0e56f60d44df8007

C:\ProgramData\BlueStacks_bgp64\Engine\UserData\InputMapper\com.tencent.tmgp.ssksea.cfg

MD5 6b158d56f8714987a8fcacc66f184d75
SHA1 4f9f0fadd1590978edd81b71748d62dc0745e253
SHA256 a0497961c46426106d8f027c7576029b018c6efc58effbc40866e56952a56be4
SHA512 e0f73a1481d19ab0c104a3408ef766ce66786d77c84eede4eb0d6b512fec3989156d2c5ccba2585a5f9228251e32f2f1e7892e29d8e10cc41da7bd9653357460

C:\ProgramData\BlueStacks_bgp64\Engine\UserData\InputMapper\com.ulugame.with2KR.onestore.cfg

MD5 4b15ec1211a81cd8dab02cbb0ab4e9b4
SHA1 903f1baf31f1c2d492fc5c56f3ac84223cae9ac3
SHA256 b28493be343145b00ee05c7326193f222402b70bf5ef5a8f7dc0e23416bd39ea
SHA512 bad0b6c65232edfcf32c12b0b979759ae3a650357e52e5fd4a646c14b37d6bf670e15c3880e075a04017f678efd1da8ba893be9854d9f1cc3a44f4b36dd7900b

C:\ProgramData\BlueStacks_bgp64\Engine\UserData\InputMapper\com.userjoy.ujsgc.sea.cfg

MD5 19192e7ea8e9660f7460068d80630423
SHA1 1892043cd6f02d46d80044a4f0b9aa6656890439
SHA256 4af9b2c42b3c326a3789467c8625d14e0f190e2ac49f871cc52542e78afd9425
SHA512 16615ae64464736197b6ef3293f581c4d1df1e85d30c2cdcee5271406b9ccbf1be788e19dea32dd4d1da486bcf359543d1b6a953737e17f7211cc759093b1987

C:\ProgramData\BlueStacks_bgp64\Engine\UserData\InputMapper\com.vng.snkallstarTH.cfg

MD5 098616c87ae5ea3e240d7a4cfda1f99e
SHA1 eca8515180917c65906b7c8b3c4915b9cb0fd60f
SHA256 b0f2f07a118d3602bdb91fa5df065afd850429e6b2c4e5443da71d61544dd2ad
SHA512 a5bb13c9ba510f29115d7e9a0fc4f77fd4599fd257b6120ac9785afd896933dc48ac9399a5a1c8f664db24d664dc28c43831832a9dce8b3125a3010b5496bc3f

C:\ProgramData\BlueStacks_bgp64\Engine\UserData\InputMapper\com.tencent.tmgp.kr.codm_240.cfg

MD5 9fc1e6272d596e13a5f8c38bb3386756
SHA1 cef8a8d3a49aa68aa8045e43ae6390c7c344e969
SHA256 c08ab9122c421f1dbe54bcb9a2750ebbc3f430e6c3dcd7f79862c2fd8df3cfcf
SHA512 02436e600098efc1439a77bbf752639bb234d858e6af3126ad5a33697dd33057988957bb7f25273e175ad907abc74853563a2e9a3d83b2533a45f6ffc44f992b

C:\ProgramData\BlueStacks_bgp64\Engine\UserData\InputMapper\com.tencent.ig_210.cfg

MD5 84602f3f691e0d94dce6fb9bf358660c
SHA1 2c86b18e59b2fddb7d7d87eb370ac5dedd776721
SHA256 49764b4d3ee8f00fa334450146a5ada50c564750fac3f9bdd0808594355c2495
SHA512 817c77d1f14d5fd82427f99184da5b025b8b3d154dd1b4178cdfba9646866084deeb0ef606973790d288cb975f273dd2db3c6d485e73e04a5e685c20f5eca8ff

C:\ProgramData\BlueStacks_bgp64\Engine\UserData\InputMapper\com.xlegend.aurakingdom2.global.cfg

MD5 3a4385613ab8013261c8dcd7d38c44ac
SHA1 0b761829b2f8c54133df46cdf9b6ea1578f2bd1e
SHA256 e6c03369870992bbf4d8fe9c670787663db7c328a2d0212a8c1baf0565f8ffb7
SHA512 d9a7075fced173613f619cac0ea3e8a65fdcaf975ba21e0507f8bdcde28c6efc3793892cef5ad980b6f1aba24464e11c589e0fb48b9865097efb75f4b53c6d08

C:\ProgramData\BlueStacks_bgp64\Locales\i18n.tr-TR.txt

MD5 36b712f701d370cc852cb5861b10374c
SHA1 a3532c5e35ff5b3093f5599d0cbadeb4b278ac11
SHA256 5350811445439963faaa22fa334dae2206ceee80baa9c7114d925f300f6f07c2
SHA512 95282f8fc1bb698cb465b25cc4b9f6aed5cb63c408b2cbd2e0bbd9fad9b74e93b096f3007e474bbe89d5356a953eff5c8d10bc0c7f3ce4e6d61cab5c0894daaa

C:\ProgramData\BlueStacks_bgp64\Locales\ProblemCategories\ReportProblemCategories.en-IN.Json

MD5 9e1141a44519e9359739464310857bf8
SHA1 abb797ee7b512c77741978330292287d9c0d92e4
SHA256 42d8b6964164aa0e53cd0d5b7c59541bfca32b04f54b3a3cb07d9080eb60bf0f
SHA512 caced755aee6096103a067648ab069d517769bf4e89634cb0c96f00d264af786dc1e236f09652cb161c62c48df5fc30504025d0dddde709a05c87497dbc0daa2

C:\ProgramData\BlueStacks_bgp64\Locales\ProblemCategories\ReportProblemCategories.ru.Json

MD5 076ef25a7a2fdc2518e7b44edc6b0f06
SHA1 8d5c27517f566005749c08ffd99a7e60d7e74cdc
SHA256 8a0565d7fa5d731751b8d3aaf2c566e69c85de161973357ad6487f7cc80eae27
SHA512 4d05ff2a6e340e9455190beec93eef8b9d5679f28e89dc7ffc70de3a65a05a7cf650cf317f4b60b95ea332121b2ce5b022746b96b7ced4034f72e586420cf1f2

C:\ProgramData\BlueStacks_bgp64\Locales\i18n.zh-TW.txt

MD5 8c679a23a288a421a3fd22297ff502a3
SHA1 d9a6e9e20aa9872d96dc487f78e6343f6af66027
SHA256 3bfb945a12fd919d800782c7ea57a7019917dd4a424d25ddbd3865b939ccf1c3
SHA512 18e00c924fcb0365a6eb23a10bec49c9aee34c06ea5e49cf1d8131cab8cfb6a985200476459b8ca15e7398383a1c9e82587409c4dc4db92e86114576858753aa

C:\ProgramData\BlueStacks_bgp64\Locales\i18n.zh-CN.txt

MD5 fbf8d70b1ffb407ec3593a36014641c3
SHA1 22b68575df602cd0040f8335a3d4502188401fe6
SHA256 d224c4b7521cae873ad33f15ffb5725e97869d5c3bf51dcfcd110c02c06e075c
SHA512 3dc867b01df3eae28fd6450e4f68c5c71abe929af6003f55de35aeca60b91356840e25a6a0279123b92721b67735351f0f7f7d9c46232c7f7ba91056581a31d5

C:\ProgramData\BlueStacks_bgp64\Locales\i18n.vi-VN.txt

MD5 79d6e8a11ac18ebc55681c395c93a96e
SHA1 1db4b8d792675807b34c4bf13397eba356a97d04
SHA256 b0d180502393876ee100f88e0c6432c5e6143462e21768af683cfe768c813b70
SHA512 85cc6dc6a3682c170cbf3c37cc3c3fc9275f9b31ee1298767fa0277cf37ff87547db09b0c3b4e4a3f65e4c3ba826fccaf2f005fb1bfd0547b1e2c63b59fb35fa

C:\ProgramData\BlueStacks_bgp64\Locales\i18n.th-TH.txt

MD5 04865068166064e5e76ea7f335e58fec
SHA1 9cb0818fbc4917c0ca7b4ee74cda333a71bfbcae
SHA256 f7c46111ca94ead48dee513fd3efef3c0d047960fbfa8176e5a19a6aa5f032bf
SHA512 2c11e27d7c172da3a21564dbec5ca709e4524f1e1e94a51703b84ade869ba5a19f9de17ff280e6923fc0226924ccc9a36508810dfb921f075250a81013154abb

C:\ProgramData\BlueStacks_bgp64\Locales\i18n.ru-RU.txt

MD5 fc0d5a32b4c03b6b23664ae7c846598d
SHA1 0a5be0946423d4af3a9092d55661739180681d0a
SHA256 1c469119773a6d541b94ef341f316cc4800fc72df6f3bfcce02cd93b9bedbb76
SHA512 184ce3e922d5898fe816ec743566eecdc37ceb94a0a298f33976695013f09773422c363144dd700cf30ab972c6be3d06f08560825dd25177d753ba82f7eaac9e

C:\ProgramData\BlueStacks_bgp64\Locales\i18n.pt-BR.txt

MD5 6ebe54064dd9d9943c9e8c63917d8524
SHA1 62ae5385fbbca57e239db94b169e2a420749e440
SHA256 755402abaeafec229f6d88fb7d4b4c174beb6c6ccc0f8c5505ceea344f441c14
SHA512 952ff48ea5ebf2568b5e1218aa9eef9bef79838984c6e899e743798e3bbe3ce8b5b030fa323b4f3423259eef3f30bf651ba36bd11fe22a4bdb38e4829cd6eb4e

C:\ProgramData\BlueStacks_bgp64\Locales\i18n.pl-PL.txt

MD5 426e0c81ae6118ca68f0c61f542821bd
SHA1 6b563d0e6a15f7ac00e892f819f7c53044c25b8b
SHA256 20e1aca3adaf5a87051b766a03caebda65c1f047f0955b8d7811accc18dcb79b
SHA512 3e6ad42b4af9c163e90ea67e94c93c69e97077888c915110ed9c42a930a87a9a3310f497b6315fe994d79387e489024dc23b70ebd07720cea29a9bb847200073

C:\ProgramData\BlueStacks_bgp64\Locales\i18n.ko-KR.txt

MD5 2a7d29edbb33022b4b272f856193e24f
SHA1 ee40110675b67575996923cd204d612fee1cf9d4
SHA256 4f9357a3161bd34ae431a95d657b6f85cb3e6281c836c46bbd5c46b5e3327bbb
SHA512 4aeb258c2087ea4a0d8515ecaf859841d7eeb344a6c8a990d50c32a3bd1d40ad3253a8fa00459b4905608bc348e54a369aad104c81affb20cba87a9f1b93055b

C:\ProgramData\BlueStacks_bgp64\Locales\i18n.it-IT.txt

MD5 610ccfba5b28b9063d20f163edacaf92
SHA1 bd640efcb5a9ec741af399ed15874137e59ac3f9
SHA256 be1c80202c7b1340e0b2992d78bd2c052a56447d851afaa923524e5f21c0e188
SHA512 994144080f38459508a2a821f819e675dc9a83ce2662b1a99ed97b107f3acc6ac82acdf005c51e26fb94b0bc51f5ce0cc8452935de103aa403f92ccd828db85b

C:\ProgramData\BlueStacks_bgp64\Locales\i18n.ja-JP.txt

MD5 39f7d7b84fdaa2cfd6b175ed1ae67ee7
SHA1 22cb5816407087716c6eec90a3007f1f36d16af4
SHA256 9d9b6fa542011e996cd10efa96921259e81914a16b1f5fc689fb4dabd68b77ab
SHA512 c5aa140b001062d45b25fd2f5f06d8c725e02cf901c06fb371312c8aed0ba61a765042c944742dacf4a16b6be7d2e51dbf948bb70af47eec82d215b4e7d4137a

C:\ProgramData\BlueStacks_bgp64\Locales\i18n.de-DE.txt

MD5 bf7058a3577d25528bb30d8162442f7b
SHA1 ef1b85ec5ea21fb007b0694883b3222c22b3e21a
SHA256 76bcf0cdce4760e937c220184c2ea54d021f6c483892b531f1788fb9e4f6f229
SHA512 8689c2569102a8bc7ad9dbbbb2d34d0c46b3b672263a4e65f5cb326cadee350791a16032e7a8d6ad286853050e0430f8e42cfb1771bfd7c0107f76dd0e6820e5

C:\ProgramData\BlueStacks_bgp64\Locales\i18n.ar-EG.txt

MD5 8652728e9c79facdc10673f0ff798b56
SHA1 3c2fb21107ccd2bdff96b72492431837e51a94a4
SHA256 f300570f8ec9ba3d0e612c9f46c953d2cfab102bcdd66dfe019ee45e5b889940
SHA512 254f1a680148ecadc224e33361f1539485fa8243097dc56d5f21135d4e9f9e9a6b5a62523308ae50b559fbc8d7c71a492e5a4a92630af075a2fe396bf960d7b1

C:\ProgramData\BlueStacks_bgp64\Locales\i18n.fr-FR.txt

MD5 a5206c0d53c150e4e84663b412f35c48
SHA1 fe4b3c73fc27196ef2b5e30b93e72d6795fdb85a
SHA256 9db4b9fbb4189ca1735c131bf6f0954c74a4f66935f1e07d682c50347ee2b12f
SHA512 97aa2dcbb0f600be4fab83c0fd724412b18ec99ae7a5a33ad34b578f38397ced75d0fbbfbd7c6d2a301c5ad6d711a57752bb6b00c03ae1186ea615e5efa7ffb8

C:\ProgramData\BlueStacks_bgp64\Locales\i18n.es-ES.txt

MD5 fd06bcf9302c91997fc771e7dfc63c20
SHA1 382c5ea0e2f3d2a8c56bea88b2495b53787c418c
SHA256 13d30c7576ef3b20f8c2234cdc7cd53311a5b96e2427a2fc359074bb3df4b0d4
SHA512 598682823504422dd0042bc24c0ddfbced663ee095b3dad166e47763f31723162ccd0d58f23c2478976501171295d4c4ef5b0d78f9451126f2884d59e7c29b3b

C:\ProgramData\BlueStacks_bgp64\Locales\i18n.en-US.txt

MD5 bc06cc543480420460bbff56657f4bd2
SHA1 1348e68db07101fad6541b0a680076ea9fc152c6
SHA256 b542578fd373773958d24733c979eeafd057db6fa23e9ef571c4c95a5229a96d
SHA512 e85f6b40b7d51b997d7c65b9a5e8152cde6c940e6f271c73c7424650ad3185da944c3f45a25a2be85feb014454d2c3949bb8eedc6dba785ff27e5b38f6c62895

C:\ProgramData\BlueStacks_bgp64\CefData\locales\bg.pak.info

MD5 86abbe39a0ffe4e221c459d98a409765
SHA1 7ffa8bea41bb8c7b8f958681ec097556320d5482
SHA256 81aca701fd815152b02b60d814f5df72db4a70f43475b8bc97aa1af5851f4652
SHA512 66b6a6f8e7f7d857a353244d372b684886830e902cf81678dfd2b8977f1007af0596e94d27e27c930309cf12b14cf1f1af0f292e7da305c58a44f9dde0e5aab0

C:\ProgramData\BlueStacks_bgp64\CefData\d3dcompiler_47.dll

MD5 898b3b792574a266c0f60a87244deac5
SHA1 af5f4d815d21f2272ce64a7b414086a6e7eb599a
SHA256 6bf1b5cd6cf5316493a2419ea7ecff44de39c71f226cb1b0dbe18e940f3bc988
SHA512 e1ae86e56a1e6f7d0b00d33667e01afea6b1a65013f9247a2a48ed118a31ed01ab1c51881c246378bcd58e6584143d7b81806783cef96c6251a23ca4049cecfb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 55cf23658132a65b1423800cb5146bd6
SHA1 623e59b00b2607de91cd2c39cd81e07f4aec18e1
SHA256 120e1d3d5bfd1004c5f2749bdfce0976c2520344ac43f469292f651803f292a5
SHA512 eb5cdbf1932040dd31c29d7b954c0887553e966450e1d1b9c72b7c35b64f96e6569be2ac8116ce45cb7e9db7976aae01ea670b4b8ac5a666c4f1ae7a2cebae0d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004a

MD5 05f025dda7b8472822acc3b315e1681a
SHA1 eb52f245988b43842e79343c094bee29d7f97647
SHA256 79a40bbd070fe834d0ae6b06d4a53eea55bf6a8dcc59c1a51198f69f56418d77
SHA512 c4f8e155ee9759d5ee3c817e62a12183657285e9bc3741b77cd0f81ac0a502a8e854953d45b738633ba210d671d2c57009d370bae9df93b122109c75fe42f468

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000065

MD5 0f0c41df994874f8d5256926e3e6c312
SHA1 8ccdb66cba4b0f640983511eba93acb64a88ae7d
SHA256 d36adb6803d1f76d0ede840a6c50f5dab4c6bc38481aaf8325d079df966ad57d
SHA512 c3e96b54693336941e924db6a5365f396a9479152c4ef56eaf6441ba91ab64bfb498f95023175c360995ddeeae7daed3d3928036c757700342a9863fb6bfb3bc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 8a3da26d9a265ca0cbbd7bee20f2c146
SHA1 fd4b526254f2a721d696f024773df02206e45353
SHA256 0ceb3fb23b5f0a13e64d768a35d2d87ba4ffecfa89b41ea28f981ec3246f7d3f
SHA512 5f1f65cd7596489672cfedac651acbaea6a76d012df61bc81ad5c7961f3c2b909b20ca632942eec6fda6086ef2728c923be7fd986cda4a178d25feeb43649972

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 00c1884255ef260666a5986134542d04
SHA1 be6b22f5065ca7062b5c8cbf020dcfa45e286920
SHA256 86b712ec034f45b7a7be896d15aa62bb2ff83d4a37a2c1a2fc10264128041517
SHA512 f7c9c97bdd601ef0a46d6d9313a3d676cd30cb140646f6d300423160a7d682c7e9dca9f872ac6fa02a92ec97facdce53b6c925af4466c1d98a818f5504bca4ba

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 96dcfe94a82d8382aac6f3aa21fc7606
SHA1 6699180ac9b2f22ed4e6ba42e81f750767521fab
SHA256 f2aec80184373c7dcaba7c5c2bc02c62799d8342e23df5bf8f3b06b86a54a2ed
SHA512 d23677ced317d2664b7f8b3abcd83f2ee718534b18058dab4c03d42662a29c109d8f330fd710f526a59469c37ddfb1c02a0560fe6b874bf101af9f09fcbbc974

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 7b57638e94c16656aa3be7b919ff0018
SHA1 23ef226df5226c1d812b1ba169404f8cba220e6a
SHA256 a4ada37c384e2841e8081bb91d3911968119044a8ffce5f9bc1dad69ad2c85ed
SHA512 e603e642dbca541b7b29a14983a17c8b72b4579c35bf79699770fe5576cc3a2466d76f8b00bba71d8d3b460baf7d0a73e600103221d35a3cf81ab3c3c105d98d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 84bf2a494049fe188fdc1e8e942e26dc
SHA1 1598a2cccf5da8621780594eaa87dcf4d727ed9a
SHA256 05cc66543e1c6098d2a72b8ae3732887f5bf1c350137b05384f05336095f59f8
SHA512 ac1c43df9b5194a9c01984cda64e0097479965ca54a234319ea1c793368c10090c73ba9e10ad86c23227384646065b0310e52cb06254aae1d814bb5e9b2378df

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000062

MD5 bed91308de82fec8bd902187e6155f9a
SHA1 2d8cd378a2c3551a1d9f9dca5d57cfe531ff4bf6
SHA256 0eca1111333de8b0ef0bffc3c9539c8679f1561c11a3cc05f4dfc6f767e24a48
SHA512 7f67e64472fab9f4d799ca1c63c84f59335b42695531dd7c9a640822fa99059f775d7574630e8b0e26fce225a46f21cddfac11ac219ed210920dfe79d59ac327

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000066

MD5 d0b0bc4f725f8e2c71589dc3208c484d
SHA1 a78690e847121f7ddc62ca6582b3b9cfd1f03d3a
SHA256 7ea2891f6c8b1c4705277e24a457d0b3e0157b1e55e1193910acb946a40ef71f
SHA512 1a946d7fd4ac99213c7b6f8ab77940da982e1b51e318a42f87cc179298f32f3aac6081a13e3a0d59cd9d3a8d1e444069ee0cb62380464e188be7051010108f48

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000e2

MD5 e1b283ecd774735e8c12015c77cd5bfa
SHA1 6547b6ed457d7c8b72bb18221a48995a2945e3fe
SHA256 c03d99c9407c075f452c83f31aee45389e4e40aed75c4c0fb054ab3a207ebbe9
SHA512 edcbeeed6cec16ccac1bc9c75a3790bd68f88cd74ac8efd869e4d7326b451e439c14b5432938074114241836505d29704a6941ed35fa50d0eb0a65c88b458603

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.base64decode.org_0.indexeddb.leveldb\MANIFEST-000001

MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

C:\Users\Admin\AppData\Local\Temp\NOXC066.tmp

MD5 f529dd5c9109598721d753efaf306acd
SHA1 69aacdef7ebb9a1f974b659c8831a59107538dcc
SHA256 dfd55944df560ef7d1d9bb058f03e0d80e53a9d4eca0461cd67077da25f680c0
SHA512 689d35f0ca1889e52e55dbd50d5ae646ad8b52ad78cd76159a96508b7a4837c6d0a632584a462b4bfcd4676e7fbb62ac78d4b839874b5ed05ff36416dbe0c514

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 798cd5236818ea74e70e4e67258c9373
SHA1 39e617cf2155ba13e1398a035303d81a6ecf429f
SHA256 9cb78cf7fe7e69e97a21e8431c80598cc74ebec13ce384fb8b4316775d76ed9f
SHA512 e2fa030c7250512a4f97cf3b7db250d391e84087c73d05ed2d6c489f04ccc51cf9931c646c558eaa5576cd64cc65c0e0685724bcd899faaddba264149feaf60f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 dc85108ff510a9f817e2a44536759be5
SHA1 3b9d46765077ba5d80191438258343483229b1c9
SHA256 d6b845ec88d2024ca21435abee68dc1f4e5abebffd4f347b3c0c9778e9cb3d8a
SHA512 aaae53f05a71964e3beef4e3a0b89988a0615dabc8434797267fcb033ceba0a3c812236464a97a590917ea11cb06d3d5c44f92d87d168cd67d6736ea8e484420

C:\Users\Admin\AppData\Local\Temp\NOXC087.tmp

MD5 90d2edf41c693375a6246787ab76987f
SHA1 874d1df6f6fecbf714881134283af3005a1de431
SHA256 a1e348fd9ebf170ee6864f960c010fa89de32d992c6bd52c3960e7231ba04b74
SHA512 41f5028f4c0a41686ab77cd09770bfa38294d599bbc26db9c2591592f93f9c935ef0d0ab8b1a7a7fd83aac74f859a36b169d5ab59f484652f09a0f854cd3d4f3

C:\Users\Admin\AppData\Local\Temp\GH_F196.tmp

MD5 c2632b218b64cc59b9bc02c72035bbb6
SHA1 d7435d4490c1f47769ba1171f3b99021ea183333
SHA256 9989efd33ca94daa09b8109d41f71f2a03e4c0783df81b7661896f815454f560
SHA512 270f4bf006eee21ef037cfcd3b107fdaf4b8dafeb3fcb78698a54ba3959742c8c243fe6b9bf3078d54759dece7fb21260ff58f7f360f399b0989e5d8fb07cdd4

C:\Users\Admin\AppData\Local\Temp\GH_F1A8.tmp

MD5 5403e887506ae5c047ebe25972670b66
SHA1 386f09377ffc3c3673ecfbfa4832f5e99e716d10
SHA256 3a6e8572254fdf7754aa84e757b85cdb0ec3e62699a8590afd433878463394db
SHA512 a897942f5357f5377c6e471582500d61cfce935634e9b291a5ab03df24a439e1de31e27b0e0d68597946fe8b2ac67c6e7556da34adbf27ca8c67b68356da3b12

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 88b2e550ed1a2709db832d14b577a7c6
SHA1 4a3b14fd98b2aa4531c99601097e57312c73f210
SHA256 066fda896dee736bac89d19f7ae5396066a5e665a32b825b12ac5db909d794ff
SHA512 ae1460a672e9d6ec5669ae4fa9324026a4e3a716cd32f3f172bc42e92a5f3694a04d5be08b12b9a5f220268e6851b2938baa2da475305e57d4ad050624d9daf4

C:\Users\Admin\AppData\Local\Temp\GH_F479.tmp

MD5 4c4dfc3ab83a7c35aacb3f1e7cb80aea
SHA1 f39dca817f66d56de2cb89fc87a367e9ef38f76a
SHA256 03c8de17df32a7de5991ff16c19d77de23bc9038096aca509a52ca21722b110b
SHA512 17533b887b6174fffd86976713b05082bdca7d145a78120f80b581febf3ad965d10b2f0c6b6fe8044e9cc265d56e6f6acae738d9003b901f7af31f8bb50b43a8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 6aa429a87f7aa3aaaed3e046ee2c0506
SHA1 c46fb1a6021360229c44c290d2909d7f7bab859a
SHA256 6e119916988c10827de6eefe27a89b7655dab2f1bc399372ec0bd0c361744697
SHA512 05c6ad789c2acc3007bad906070a029249b286daedaa2faa7370eeb910af0ec4cd094f49f4da89c55d0d020ea5d78867f307fe570c34ec0e62f7aaf5c0166b69

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 ffbc3a0875275f6e29f1f3ec86e61571
SHA1 e4c2416009fba1d93dae4c965b515698e613d70c
SHA256 3a7254757ab8d5ec272a4b246b863b52de9dd2fc01a12664ddc91eadd131bf3e
SHA512 bb2e1068647fe260535087f76dee4987a6ff6b900636abdbbec52a1e87ce70779d2cc115bace18219e380f15ee10567c82365169141fbc84a9bbc89b240c8863

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00005b

MD5 935b2a1b26934f1d5e151589a28587ea
SHA1 b88d0b3112c29e8e0155dc05ddb7e43832791f51
SHA256 be5b3617a6d98e0f08e6b31eb682d38601ff37ddfa64f0972e1aa5dc069e5132
SHA512 85cbf7dde6dc3f78e03cc8f3400c7ee950cb1d288291d6e55b848c081cf89b3e310a63975523543bde68fd6c4a18a2b4e2ae2f55dca5ed03c21986e9ba79b640

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 63f12e057997544806419ddb885f78bb
SHA1 9c2387a7a17b0f3b1c395bb17a3321962bb98059
SHA256 993b3e1d1f48c7dca1c3952c4d04c9100e0a8a0bb53e5c3f9c44d1dfb056f22a
SHA512 1c1a572ece924a51645d3b211fd9cc5b7ef2d22793a6756d6339d22dae10ee9c0bbc6790c0466dd51cac90c4ee7dae7e6d67a0dc3569ad336014eccbb744642c

memory/3968-25831-0x00000000002A0000-0x00000000002AA000-memory.dmp

memory/3968-25832-0x000000001B1D0000-0x000000001B32C000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 79681e59a6878aabec3b76a29017bddc
SHA1 4b80a98d62a00bc9ea9d271408daa9faf7e66be3
SHA256 f94e63493213e042a9b8285c84db45719c42e68502ba6bd1ea72740588360842
SHA512 ca5435966296cd1e1650af82638270dc7989f240fce10c7ffc1aa03ef60f01dc4e7671433abbfd50324def0dd10a0e25477bc204f143bd1ca232ccce9769028f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 96ea87025314c0e16d498c1f32622dbb
SHA1 d518acc6cb5520e3377ea59f6bbd7e0361ab38ab
SHA256 001ca784b89affe58e7c6a659bcc266848cead978958358ab7c70546ddde6ecb
SHA512 fa0ec5e816ae2ac517a016928a911a2ca9363e9d38e4ab0cf6ef7a533174b72b0a13c36de845f030e8c78ab622ee778383823bb4a142cde27d404bf2144ac9e3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt

MD5 eb2dffaa0c7e336d5e6900005fdf43ca
SHA1 1176bdcd12510854fb5944cf692d8da0cb71140d
SHA256 0f6ffb448ac96fec5976acbdf9ed3762a6ce1325e6704630257c044d837eea88
SHA512 b8ec4ba18ea626410459e375f3a6cfd320c17ed93a3959da08bcb6f32a56b472745d600e76ce91c86bb4a16f3a1c661b6075993b2fb135d4d4b2552956682964

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 7bd215cae34325f7e3ca3d76c054c4cf
SHA1 7f98525366cf0ac207eb2326cac0073cac8198b3
SHA256 8bf170d92bb8ec9556b0b0f56f4295400807078ce1445db86e1c4065bf141533
SHA512 fd73e4eb7e3c572602008ed19969104a21c200e8efb581d0319b1363c6427a2438f9c2f45eb1bed3ad1e3366081b4d5b75e227174d6749cee1f4a75273e0166a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 8f0e7c3779d5cab43be856d3b7c974da
SHA1 2441e41ce7436d2d536a450328f7441e405a2ad3
SHA256 58bf90fd3ffb5c81a54ac3b8e0b628226ecafff7a15e467aa6a59404159b9cf0
SHA512 03ddcbe0783d8f3e1255ee020d7084326410619a204d145d6f58536353377aa7db6724050f21ccb2a743f757c768ba4f6ed6e7824e768dd1cc26c3d7ab5fc192

memory/12812-26091-0x00000000001D0000-0x0000000000224000-memory.dmp

memory/12812-26093-0x000000001B180000-0x000000001B19C000-memory.dmp

memory/12812-26092-0x000000001B1B0000-0x000000001B1FC000-memory.dmp

memory/9792-26094-0x00000000008B0000-0x00000000008E0000-memory.dmp

memory/12812-26097-0x0000000021E30000-0x0000000021EB0000-memory.dmp

memory/9208-26099-0x0000000000420000-0x0000000000444000-memory.dmp

C:\Users\Admin\Downloads\Unconfirmed 140402.crdownload

MD5 4b3458b9c6aaa39ef37fc290459b6908
SHA1 ba8b683eca181784d049efd008f50aacf5cf4079
SHA256 9bb59ea13d91b11739e9eb8e39ab243d80935310838b0f60b450ac2a906aabee
SHA512 0f3977bb0b137ad65465a38be1d97acbd50e1f57078c7bed957fd0c210d1bd5f4895b9afac8af4c202a3f905f021cc7042210fe030ff5de6e6cb7c4f90591dec

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 73440ea21ca75beb1d031bf7e810f645
SHA1 9c471a6b7c99116e2560faa8dc7f972dffeef24a
SHA256 9787844a45a7954850d8ad34b99768c8820ef9e901cd945f0af751d3740c75fc
SHA512 6bf6384c2d41af6d667762d1b061815e2231a64c7c783b434ea9996a3b0dcb2b58dec59561312e5d2a0f2e9f6f6b7559c7cc623aeb7edeaea1446f580f7ed503

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00011c

MD5 6d08ff4f36771456b447137905151406
SHA1 8eee103d7f57667fcb71afc516d291cc6bca9661
SHA256 d93fb092d54627b08e5374c7215c392ab8cd5502c4f5e8666a5f63ecbf731292
SHA512 14c4aed7452ce89efe8063092f72d16355998bcdad4c09fcc69ebdc579688f88500b4c6d4f04c3f43be0a2972db1c02c8dbc70bf04f01b642f58102beeec6a7e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00011d

MD5 16d21bf9421f46980a44933c6ff85d0a
SHA1 737c5e77541129d20f0a99c070abbee4ec0b4055
SHA256 a9ba4eb5e99489bf51c73a7958b56f9da7d8f813a0b9439ab2d064a99962ccbd
SHA512 3e50f5ecb5863e1dda1477f9f865efe47c94934deeaeb200192a3ada8484f409d3fb90e3c0d9f0920aa5922eb2415c4af091e996fc057b0274bd18a66145403a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 14c84c1035fe679e6e52d2c010fc63a2
SHA1 e8b736cbd06531a33d4fe58144fc204a37a8eddc
SHA256 0d00bca5104a393a598d8dbb4c727f6a1eaacd87ed2e39395725b1a3d41acc7a
SHA512 bb3bad8f548e0ebbedf4b93b15cb071bc40aa10c82d4e0fe72b5661eabf27f3958be383f78b5573037bbc27d272666954344cadc0209e5779ce3cfafb1f9df39

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 c1d47b8ab0f636849c2800a882277d9e
SHA1 d60c8f501ac40cb88e659469c28035cead279667
SHA256 232f54d54a2867f2ceec5a271a659f7dd44a0b835a5834f287f7073085ed7d93
SHA512 2d7f0d6e3fd2b68690e4896376445419a7ee423672a5a48413a0e07fd20637926f938bc42628c4a7b4acdbdeb3fc274924b8d7f7de443eca272a6bf81cbc97e6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\f89b830d0e7f9e90_0

MD5 e3b7b8da9d1be341005ff7799daee986
SHA1 fda7a44dedb66351c1c89197c279a72b3c07c4d1
SHA256 af5a3410fc40fa74f49b049e18f7d59f63189e75c3003ea26497c52562f2657f
SHA512 b65da3b7d6e8f73725ed29bc56d4b672f126b384939b0efdbab1bfd56809f7fafd73c9173ba72a434cc5702f9101a4f8c21261e1009eb282c3201bdddce71dc2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 b68b465519d77ef25f1d075b93068a55
SHA1 9f7acce342850095958248f6728cf27a6eb421fb
SHA256 3941187c0115011a072f4ff700f2f0bd4480d9755c3d8b204d082e00aadb6f6c
SHA512 5cf5558aa72f88b86680a049485bdcd7316cca591beeb2ccd72e421da038b0ce23f8ad34582cb12879c13783f10c8fb54dfc0c7ecf0dcebe353f955d76f88f00

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 5a99d5c512077a1249e64466c2db7740
SHA1 5424f79d65e15ea4a972555c996566b19d77e1ce
SHA256 46a3ff5a17240a826a50f98215bbb475b9e8e2e56a3c05b8929969f9a7653d94
SHA512 b2d7360eccbdbd162d0202927cfcfbd1480d6cedad67430fb08a6a9b7a6165afd3a994140a8ef7101946173a8db616a503d3628bb37400e73aeadd3a54cae970

C:\Users\Admin\AppData\Roaming\bluestacks-services\config.json.tmp-0996388327c4d6fd

MD5 fe883170cf4676f8a97cb4275554a7f5
SHA1 0473af94096e34ef16f94db830a35f7937f87d9f
SHA256 52d8b92ac476f06988b416f4ad4700e160afd2a273521c6ca589d1e70586bb1c
SHA512 cc92f79889702dbdc43215a79c8055e8db57372350dff2a9949111a83ca6f8a40f4209db3b2f94edfc0fe09d2034ba490fc534cc065e0d7b364fefbff2a70ac7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 9e9755bd20133957f0b72b4ef3c59b9d
SHA1 86192954d1a20f77ad79b4d595c9266da604c050
SHA256 6d55887c26769144b009d2be4e5a2267544c597bc4b498fda1a40ee2fb93eb11
SHA512 9a7b8cfb2ba14136c7758d3a59ff524d9e7b6f9659543a616e4896517ad7c22bd750222da71cb76f70aab3a1928eb8a2371f1622e4f386eafd5b6740dc389715

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 3d726c262b2145dd30b793608ef77e7b
SHA1 52816dd2484e17b258078efa57290236aa3e0164
SHA256 0418f8d1eed6942992df9be3e4d4989df99f24f825513fddf6b7ad154bc8b6f9
SHA512 c4683ed661be5540b20a266d069f52486a1f1f7ef8394a7c1cb963e144a0f99952319bd26df943fb31d0b20ec94fb52817a11f64a9cc147211dbeb5e9aec0df4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 7c8c314cc3f0765a71f01dcc88c5141a
SHA1 1a0b1c5e4e278245cb1ed5cf41bc17f5d500ef0e
SHA256 7c0106e5faf444259d128afe7d039e048fbac308f883594d4eee40448180d2af
SHA512 fce38ca2ac5b24f4625565648f0184b167e67230b7628c6c7439915e6535aeb09c4b70eb332fd67a361aec329a271bd265d057bbe5bd78845da6387a30e3428e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 83b1720d6316febbc34d6da36a30c485
SHA1 b775687123ec4a86d7fbb579499036d7eb0df97a
SHA256 9796cc72cbedda7d243663a2c7099c1289f2b7d9912888097f2a685b4b2877c8
SHA512 39e655272c67af65ed41d0c888a77147efad9312e4a409a7beb8d47be025ffc225dffec9cd54562be40c783b9d02568a890f8f660404834de1cfa38922be02b2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 8cd4bace519b8e0797b4703a42be9e77
SHA1 3612fbabbde574a7bc49b6b9d4eda2b388e606c7
SHA256 a78de58e305ad46b38ce5745bb51cc23127e5ae8d93573d82054c76657d4d6e3
SHA512 c7c6503a0668b08c0ca9a28d7fc073d755676d0dd926852f8103fe1fb2dc50a3b84542cc4bb9db82bb0d0e65713852a15e67ed548f7b9409d541bf1e868ff84a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 0e6d779e8ffbe0de6c0af99eee725880
SHA1 0eceb2f52b9a24c9b6abb24f04c91930520e9632
SHA256 0b52173239023312d5ade07b002885e1e04f89fe92414df5378a69e5a6585c01
SHA512 d9eec64b02aa950e6395341c33f20a018de4025ca02fcb22b796c0327f8d941f0c3da799c18aca16fb35e0d0ad0a108f70555700146c156acdf8cc2e2197c6d1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 0678ddf81457c9c8c720fef29d55dc5c
SHA1 46f6c46bda0b9547d68b0daf3ac9a2376239e8a6
SHA256 9a977a4e13f0d7663ed6e07d2e9ee2b5d4494b314441ae485ca7a8d3827a3806
SHA512 7dadc8e6afaac97848ad04d378b97a4e17ca0a4e0f93876b4811c620e538405b9a7b08a66d1bd4550c79ce6ebc96c43761ebb4115a3ed34f696d133589cb2a85

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 5cf9fe7c36cf551131606cb19ab7c34c
SHA1 1e9553d5851eb9df36cbe50dda75141a73da9145
SHA256 e4edbee850c3be512e7d8a5a82d2a3076d016c5ee01433812030defea802b094
SHA512 2352b9b5e2cc2a3601a314a3ae86fb5dbf8c5730887ada41d1cbfdee07b2e062f3fc71bf70a3cc0d14f2ce983828a678c4b09737441f49c80c9709861126ca38

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 40a81fb45c10b73efd5f31891d989252
SHA1 827099393966f85bb11706b8825a87ee8ea835e5
SHA256 26b5425ea37b94bbd0d73ebc47b60cbbabf279c2dccb2629901bcfd7869d77eb
SHA512 61a1f46ca58a38548cc18e102728fd50bc405faaddd8b556837ff19415665fd9d403bab3bfce54474cfc239a2c782b50eb38a435835199861ba495689d96912e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 abb9f7eadd9a34991f4fc013c43e4358
SHA1 a80ff550b4b157b335325ff90ea5edb5af90f032
SHA256 28a7f02c72741c930183c5671a163e38023b8031f47e3f0e0bd9eb88c4d32fbe
SHA512 8a6719f194885b248ae14a3b5e55eb9e29555a3eb4f7bd8d46440c23ee3a5fb950d7e91c3408e58e667974e345e7079bc60d16cb7d5f6760d2657cd170be3e2a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 3e8b387a7df80bd24ad9dcfcc83d29b1
SHA1 de2e190aa4ba7392c1e854ead7a86c05c02055d1
SHA256 e939e9304c712beff8c4a55107de1c7811c8db90ea9065caddd9cd648b9686a4
SHA512 d099c49c640928f282647be06e02b3d0296682bb6a59913986d56bf309948994fc516598df589fcdf437b74af74d4fbc14a75222c156b130991979a39ab3f1ea

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 403ba80e2c0227fd154c8c134417890b
SHA1 dec0172ade1d3436db48dea5124a314eeefb62d1
SHA256 60caba81dbff7e4cc9c7dab184343598509726b8e429aa75c50a17372cb82e84
SHA512 b172b42cc022d41254904222da8147fbec15e27b82231029ba185226e757a033bc472e8215357c2174229e9f7cb55dea7794035444ad0530998fb6f6798a9ad5

C:\Windows\Logs\DISM\dism.log

MD5 80827e6a6ac5a537bd051ed0f262ca15
SHA1 7a95df2ae49e11a66afc3ddeb4f5f60052eb171e
SHA256 a38e710d8c2b3fdfebb2853a34748748873f289ce5b18eb925223bad40ec1b77
SHA512 f53bc7ca5648bb792ed8b5c96d9a40a83b1cef44a46d1aa2fffc4af8a68455958fb7e8a5b301fe80935dfae184f8ffd9b99f21f9db7cd017bcc6b9fdee5fc32f

memory/5948-27424-0x0000000002E50000-0x0000000002E86000-memory.dmp

memory/5948-27425-0x0000000005B10000-0x000000000613A000-memory.dmp

memory/5948-27426-0x00000000058F0000-0x0000000005912000-memory.dmp

memory/5948-27428-0x00000000061B0000-0x0000000006216000-memory.dmp

memory/5948-27427-0x0000000005A50000-0x0000000005AB6000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_qzykarby.gsi.psm1

MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

memory/5948-27437-0x0000000006220000-0x0000000006577000-memory.dmp

memory/5948-27438-0x0000000006640000-0x000000000665E000-memory.dmp

memory/5948-27439-0x0000000006690000-0x00000000066DC000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 cc84b7844d2bb1935e5d29ba8b7e4340
SHA1 94a98f9bcd0ae5189d2247c5cff42b4e248b1661
SHA256 91f9ee2fdce0f213e734053a1cd30ff6e65c412ef2827aac455f863bc10af817
SHA512 16e22d66a4e04bef63e8f789671e89225396afa358b5c5bc33ee4d1c88aebcbdb320ba6052128ad8727de3918eb5fc4e2a9e2d1bedaa9911c0f0844a7f12d323

memory/5948-27458-0x0000000006C40000-0x0000000006C74000-memory.dmp

memory/5948-27459-0x000000006EB30000-0x000000006EB7C000-memory.dmp

memory/5948-27468-0x0000000006C20000-0x0000000006C3E000-memory.dmp

memory/5948-27469-0x0000000007650000-0x00000000076F4000-memory.dmp

memory/5948-27470-0x0000000007FE0000-0x000000000865A000-memory.dmp

memory/5948-27471-0x00000000079A0000-0x00000000079BA000-memory.dmp

memory/5948-27472-0x0000000007A20000-0x0000000007A2A000-memory.dmp

memory/5948-27473-0x0000000007C30000-0x0000000007CC6000-memory.dmp

memory/5948-27474-0x0000000007BB0000-0x0000000007BC1000-memory.dmp

memory/5948-27475-0x0000000007BF0000-0x0000000007BFE000-memory.dmp

memory/5948-27476-0x0000000007CD0000-0x0000000007CEA000-memory.dmp

memory/10012-27479-0x0000000005940000-0x0000000005C97000-memory.dmp

memory/10012-27490-0x000000006EB30000-0x000000006EB7C000-memory.dmp

memory/13008-27500-0x0000000005C20000-0x0000000005F77000-memory.dmp

memory/13008-27509-0x000000006EB30000-0x000000006EB7C000-memory.dmp

F:\LDPlayer\ldmutiplayer\fonts\Roboto-Regular.otf

MD5 4acd5f0e312730f1d8b8805f3699c184
SHA1 67c957e102bf2b2a86c5708257bc32f91c006739
SHA256 72336333d602f1c3506e642e0d0393926c0ec91225bf2e4d216fcebd82bb6cb5
SHA512 9982c1c53cee1b44fd0c3df6806b8cbf6b441d3ed97aeb466dba568adce1144373ce7833d8f44ac3fa58d01d8cdb7e8621b4bb125c4d02092c355444651a4837

F:\LDPlayer\LDPlayer9\fonts\NanumGothicLight.otf

MD5 e2e37d20b47d7ee294b91572f69e323a
SHA1 afb760386f293285f679f9f93086037fc5e09dcc
SHA256 153161ab882db768c70a753af5e8129852b9c9cae5511a23653beb6414d834a2
SHA512 001500f527e2d3c3b404cd66188149c620d45ee6510a1f9902aacc25b51f8213e6654f0c1ecc927d6ff672ffbe7dc044a84ec470a9eb86d2cba2840df7390901

F:\LDPlayer\LDPlayer9\ldmutiplayer\ssleay32.dll

MD5 0054560df6c69d2067689433172088ef
SHA1 a30042b77ebd7c704be0e986349030bcdb82857d
SHA256 72553b45a5a7d2b4be026d59ceb3efb389c686636c6da926ffb0ca653494e750
SHA512 418190401b83de32a8ce752f399b00c091afad5e3b21357a53c134cce3b4199e660572ee71e18b5c2f364d3b2509b5365d7b569d6d9da5c79ae78c572c1d0ba0

F:\LDPlayer\LDPlayer9\ldmutiplayer\msvcr120.dll

MD5 50097ec217ce0ebb9b4caa09cd2cd73a
SHA1 8cd3018c4170072464fbcd7cba563df1fc2b884c
SHA256 2a2ff2c61977079205c503e0bcfb96bf7aa4d5c9a0d1b1b62d3a49a9aa988112
SHA512 ac2d02e9bfc2be4c3cb1c2fff41a2dafcb7ce1123998bbf3eb5b4dc6410c308f506451de9564f7f28eb684d8119fb6afe459ab87237df7956f4256892bbab058

F:\LDPlayer\LDPlayer9\ldmutiplayer\msvcr110.dll

MD5 4ba25d2cbe1587a841dcfb8c8c4a6ea6
SHA1 52693d4b5e0b55a929099b680348c3932f2c3c62
SHA256 b30160e759115e24425b9bcdf606ef6ebce4657487525ede7f1ac40b90ff7e49
SHA512 82e86ec67a5c6cddf2230872f66560f4b0c3e4c1bb672507bbb8446a8d6f62512cbd0475fe23b619db3a67bb870f4f742761cf1f87d50db7f14076f54006f6c6

F:\LDPlayer\LDPlayer9\ldmutiplayer\msvcp120.dll

MD5 50260b0f19aaa7e37c4082fecef8ff41
SHA1 ce672489b29baa7119881497ed5044b21ad8fe30
SHA256 891603d569fc6f1afed7c7d935b0a3c7363c35a0eb4a76c9e57ef083955bc2c9
SHA512 6f99d39bfe9d4126417ff65571c78c279d75fc9547ee767a594620c0c6f45f4bb42fd0c5173d9bc91a68a0636205a637d5d1c7847bd5f8ce57e120d210b0c57d

F:\LDPlayer\LDPlayer9\ldmutiplayer\msvcp110.dll

MD5 3e29914113ec4b968ba5eb1f6d194a0a
SHA1 557b67e372e85eb39989cb53cffd3ef1adabb9fe
SHA256 c8d5572ca8d7624871188f0acabc3ae60d4c5a4f6782d952b9038de3bc28b39a
SHA512 75078c9eaa5a7ae39408e5db1ce7dbce5a3180d1c644bcb5e481b0810b07cb7d001d68d1b4f462cd5355e98951716f041ef570fcc866d289a68ea19b3f500c43

F:\LDPlayer\LDPlayer9\ldmutiplayer\libssl-1_1.dll

MD5 e8fd6da54f056363b284608c3f6a832e
SHA1 32e88b82fd398568517ab03b33e9765b59c4946d
SHA256 b681fd3c3b3f2d59f6a14be31e761d5929e104be06aa77c883ada9675ca6e9fd
SHA512 4f997deebf308de29a044e4ff2e8540235a41ea319268aa202e41a2be738b8d50f990ecc68f4a737a374f6d5f39ce8855edf0e2bb30ce274f75388e3ddd8c10b

F:\LDPlayer\LDPlayer9\ldmutiplayer\libssh2.dll

MD5 52c43baddd43be63fbfb398722f3b01d
SHA1 be1b1064fdda4dde4b72ef523b8e02c050ccd820
SHA256 8c91023203f3d360c0629ffd20c950061566fb6c780c83eaa52fb26abb6be86f
SHA512 04cc3d8e31bd7444068468dd32ffcc9092881ca4aaea7c92292e5f1b541f877bdec964774562cb7a531c3386220d88b005660a2b5a82957e28350a381bea1b28

F:\LDPlayer\LDPlayer9\ldmutiplayer\libeay32.dll

MD5 ba46e6e1c5861617b4d97de00149b905
SHA1 4affc8aab49c7dc3ceeca81391c4f737d7672b32
SHA256 2eac0a690be435dd72b7a269ee761340099bf444edb4f447fa0030023cbf8e1e
SHA512 bf892b86477d63287f42385c0a944eee6354c7ae557b039516bf8932c7140ca8811b7ae7ac111805773495cf6854586e8a0e75e14dbb24eba56e4683029767b6

F:\LDPlayer\LDPlayer9\ldmutiplayer\libcurl.dll

MD5 2d40f6c6a4f88c8c2685ee25b53ec00d
SHA1 faf96bac1e7665aa07029d8f94e1ac84014a863b
SHA256 1d7037da4222de3d7ca0af6a54b2942d58589c264333ef814cb131d703b5c334
SHA512 4e6d0dc0dc3fb7e57c6d7843074ee7c89c777e9005893e089939eb765d9b6fb12f0e774dc1814f6a34e75d1775e19e62782465731fd5605182e7984d798ba779

F:\LDPlayer\LDPlayer9\ldmutiplayer\libcrypto-1_1.dll

MD5 01c4246df55a5fff93d086bb56110d2b
SHA1 e2939375c4dd7b478913328b88eaa3c91913cfdc
SHA256 c9501469ad2a2745509ab2d0db8b846f2bfb4ec019b98589d311a4bd7ac89889
SHA512 39524d5b8fc7c9d0602bc6733776237522dcca5f51cc6ceebd5a5d2c4cbda904042cee2f611a9c9477cc7e08e8eadd8915bf41c7c78e097b5e50786143e98196

F:\LDPlayer\LDPlayer9\ldmutiplayer\cximagecrt.dll

MD5 66df6f7b7a98ff750aade522c22d239a
SHA1 f69464fe18ed03de597bb46482ae899f43c94617
SHA256 91e3035a01437b54adda33d424060c57320504e7e6a0c85db2654815ba29c71f
SHA512 48d4513e09edd7f270614258b2750d5e98f0dbce671ba41a524994e96ed3df657fce67545153ca32d2bf7efcb35371cae12c4264df9053e4eb5e6b28014ed20e

F:\LDPlayer\LDPlayer9\ldmutiplayer\7za.exe

MD5 ad9d7cbdb4b19fb65960d69126e3ff68
SHA1 dcdc0e609a4e9d5ff9d96918c30cb79c6602cb3d
SHA256 a6c324f2925b3b3dbd2ad989e8d09c33ecc150496321ae5a1722ab097708f326
SHA512 f0196bee7ad8005a36eea86e31429d2c78e96d57b53ff4a64b3e529a54670fa042322a3c3a21557c96b0b3134bf81f238a9e35124b2d0ce80c61ed548a9791e7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 33253673d598550bb7a9f20a8aef3ed8
SHA1 f27f289305417f122af09bd9285a14315506d8bd
SHA256 7897dd83a057a564953c9c75584b7c0f689273a4664bfa6548abd6edfa50c8d8
SHA512 65c0922e039ea2c0ec3d30c0bc02371aecb770eebe5a35213132b43fcdb04ef894f58953a72638ed0c7cbb674d1a95444b3ab4b5495c385ecca3952761e74b55

F:\LDPlayer\LDPlayer9\dnplayer.exe

MD5 2c8986ce6c1c5fcba4146f642e95d862
SHA1 a913254e6a9bd1db7825f9880a992f21a6827bd7
SHA256 07285fcc8e65f164c8897ebdb63dc44801dae28782a6b2ee5f3469c64952efd6
SHA512 a5b074ad394b75f2597007ca732f5e1b877fae483122332dbcaecfea0c6c52a658df8b5844e60280766fcd38333dfac3a259c159c405a83ea6b78691405203d5

F:\LDPlayer\LDPlayer9\dnmultiplayer.exe

MD5 03746b5d567927bdb69499ec30039d8c
SHA1 93b08624bd80ed01c370e0ba9a2ee3824edd8733
SHA256 1e3b7a0ac94de0e7209b19b709a0ddd2effbc1b98437a81b3d3dac853ef54b77
SHA512 abf608e020e732407524b780bed7b894768f9828dbbecb1a66c9b6d8cb079380646bc228dce5f1bdbef4b089b241574a22c79eee3271a623cd05e7754ad83e19

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 86235b5a657c7552bc3756e084e5e446
SHA1 e1eab22f8110f03152c78e03fa19347b417507e4
SHA256 1b850c834606bdc26fa5ec11f0b132231655cf1db24a8bc6e71a98346b3b0d33
SHA512 a4ecf9d08a29cb372148beff4e4ece969b5a78713d5e36750231862658a5d0f4287cebf1ab67f74d0459f00f95ffed3961762d4fb603462e41d191616e7517eb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7e628e14-2d07-4ce1-a0e4-9df205fcf667.tmp

MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 01451050468e94373d45a5808a86d6a5
SHA1 adfe94988a7fb026776d5ed95a8199536a9da911
SHA256 30ec92905e2705875ee6668c761f9f0fb4b5e1e67af42fdec513f847b4dfe229
SHA512 44a3230da39bfcbd2ddc5de94cdbd97c6249b65720f6f8b2515a3dc4ce142220b0758e8dc490451323569bbf9090fee97157493aa08d8329d7b123c82cdae12f

memory/9108-27650-0x0000000035860000-0x0000000035870000-memory.dmp

C:\Users\Admin\AppData\Roaming\XuanZhi9\ldopengl32x.dll

MD5 b33f2e65677a256b37e75340c167f54b
SHA1 735c404466aea6a70e653a6706cdd0b4d65c0aae
SHA256 77e81f19ef02e620898b53a308d502042b9ae732d9741b99062a1baaa164dcd7
SHA512 cf1bfefef47d5cee5932fc9cccf323f87640912225cb5b0f93442929fc96f32edccad48fd8c95def9be64fa62c750add4b53448e3e4a2e854f8940be7aaefc8f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 705a655ed52786120a98f6892b59d951
SHA1 405014878ad9177239f985dcdec6900276d9a476
SHA256 f69aa72553f50624b748d1c85633cc66c36be0f6caf87cf3412beec63a6a0a6e
SHA512 0881011f1acf2a97375ec4ca74f1b01fa44d494b319e2169d5c4a28e41d9cc230bfc319b7c2cecf3bd1f7d6b915c95b1b822a72ebb5848acc93ee0e1a375899c

F:\LDPlayer\LDPlayer9\vms\leidian0\sdcard.vmdk

MD5 4d592fd525e977bf3d832cdb1482faa0
SHA1 131c31bcff32d11b6eda41c9f1e2e26cc5fbc0ef
SHA256 f90ace0994c8cae3a6a95e8c68ca460e68f1662a78a77a2b38eba13cc8e487b6
SHA512 afa31b31e1d137a559190528998085c52602d79a618d930e8c425001fdfbd2437f732beda3d53f2d0e1fc770187184c3fb407828ac39f00967bf4ae015c6ba77

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002d

MD5 d6e1aab542071e0cc9aa467e33be0444
SHA1 dc3b3dcddc9787c2abbec16e5c9b5248382f8e5e
SHA256 fa856b30c0437f0fdd08b317175d55470dace8542d6d051ec34d3a635ddc2e70
SHA512 7d979755e27635bdb56b1ff82f532b904ba4453c1d3d9c9e3e9a7dda4e8d7bf61ff2e95a8308d289fb8d26a6fba410ce453297f9f6349a395966bbdf9f0c8e1a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000030

MD5 cc5ee5dfa461400fe429a320f8bc6e6e
SHA1 4452e78c30ba2e420d1d8e7a2d298946d793bc98
SHA256 d6cd657fc67be340c8a15a33e215532de7751760c913615c781c4787aaf74a70
SHA512 afb533b34bdbc4568dde18548a8d12f26a34df8dbeafcf5967d54a951a41a325715d098b71ff402dccbf05ce4c7a2a2d6f6527b6a8e40f40376f0471459f5913

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000043

MD5 08b6f03f4fbab1be506f5a3a7f3db1eb
SHA1 1d43e60e73abe02d506da5c72fe99c890fb003e9
SHA256 b2e07c7b8f785b34f1e1f5fc0e1514538e8964448c47c1b94ea8325bc759a2a3
SHA512 a59a94ebe31d9945612e653281d03991e9bc1a3a87724c4a1c42a95c7c28adfd52534345950d4c564356e2c3eeea0f07964631eddc316089df0a743528e34d6c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000049

MD5 0fcabe8a9008c9f3c28a416eb0612fc9
SHA1 f3aa1e865dc30ac8606691e0f90e98c5628d25ae
SHA256 f2077d5d664bba3c7bf1613120492b819c9283bb62c9e3ae24d302dd51d7e995
SHA512 76f7a4066bd8ff01300f72e261c202f53f3ed41a04aae16afcec434d1035303c4fb0943a14fd9e2c8120a12d0ec3205f72862c91c9764140b8fc51d910b7f851

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 4f1e9aa498523ef57f502d7ac4115829
SHA1 ddb03f6cce0a74791d32fe272ff68b880b6f6560
SHA256 84aed51dbd3aee66cb91a7088af5b252e0974884574f3830f877d3db4c7ab3a9
SHA512 b9784817280dc7793d3a5db6895848d9c11ad1a0be3f57b17d385cc8f7ca567527512b7a78d2ec61d2d0f5235d0c7c532463dea0a68fdf63f9bc8745aaa89938

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 680b43a58e38d8fcad417c43ed535f25
SHA1 f00903233110f3a1162969c71280c6d8444e16f6
SHA256 51e5c51703ba3a65654e1b3f47db8f0d1b397536d6c7f4255eb4b4c37c1a3a6b
SHA512 a2375e9f524bacf863fb3a8bb3457ff198412902e8f0108419491b667f0a705edcc13ceeee4e990e5f1aba8d1d7e637bb72dae91a547a8c5abb3fb1782aedd2b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 8f6544d4daa51585703d464fbf4f6eae
SHA1 980a8bbaff7de1629b80eb9239373892fe8bb4a2
SHA256 3f77bd2cb16c403ab93057326dc2e4e964e411d06973dd7a1956dfb2cd7b74d6
SHA512 aa205aef05d83142a128d93f33555372a9d3f1054e89a977fb9a8791758db1b31c263b4531af5edd28c30e4d265e16f2495bdff683dd141fd6fddb6a67aad319

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 77c60f9804c96b6840fd862ede1e6c79
SHA1 029cd6bd2a0508454abe435668b20fa144238eee
SHA256 eaaa8d62cb2dc473de4742bb53869f10ddc7ff2e9d6e0e1eb53319e2810e59b9
SHA512 2c4d1e502600edc17ee889f50e86d5dd1fe62f7fb6bbe9edbebce5ab373ac8480186705f589c24d40badc7124176c05d461ca39708fc31614d296d5883a07f7e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 88dde1707d12f453c71113bc2c8dfe5a
SHA1 86390d3dbef1894b3d237b388ce6f1ac777c210f
SHA256 f1a456c0326b6ecb6a2da2c27fc2267d2b83dbe7f507200edf437d7940c2dd86
SHA512 2f30e8998cba59db49995889f7d0feffbf562d3ecbe39bd89615c8338a31aaaa242a816af3172d876541d2cec80b64977713b3daae9add216b628257a4d2eb80

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 d7a895ee99583afaf644e2af8d2f4d35
SHA1 e0d86ee5d89a9a15f3ef9d703a6a6fdf2eeed302
SHA256 436052bc381716ab035738cdf7212c455857a8dcc5034133ec3fdfb2d26de651
SHA512 9194a77ea67ec58a90341ad712ba3dd0ee963a572cd1ae024b09ba8254f0f5f90a93575b023d00d8cefd72d150980f50b440883ed31325a3a864cc1e47bd597c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 642ef2e74a381f5e6befc2c531681747
SHA1 1730fbffdb8e1b63c2e669915cd66f13e58d37f5
SHA256 73439cbf3a5e268568dd26028b5e4f6cd48ee6b3a5d5d15604a5cb556a041a48
SHA512 25b719da8d9a1133c7b49a35533a033ca66900b9a165c4243aa09302b34300c6eeb11d9051fc661a71ba0bb8e53e53910dd8a08e8f9fd858903eb0e78483a858

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 d115690f249372c958e64cf8e0809f81
SHA1 61568dc01b53600ccfd4ccc19e8fa326e0f9527d
SHA256 791e110b76d22bec7e77c8def71611b699a1137f6110e58e70c2f49a2622a578
SHA512 76fee6dfa8aadb344e11d3af76b8c5725b3f31875021b94f759a70cb362d7c0665b0fe9a6a3b8a194bb4d7722b23cbe7a7853f71318424597b64edd846af1ac5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 dd8163ab98e8cc6c5bbee0753db5905f
SHA1 89c8fe6cac7e1f41b3e09c42374ef969cf908e06
SHA256 1f403303db92e50823e82d3d73f28f893400ebe8c22f7153595b7377eff8cbe6
SHA512 8770cfd4594276bc9f79b9b5ed15223538354aa1e84f850a4e44c6a02e0e316a84ca25815244f2190e2697fe41918ad41e7ab7e6dfd86486e36999debda332ee

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 bbb528e36d76b74d59c19bc7d81fa870
SHA1 75b9216bf1c6a2352b07c8081e51e94e88920513
SHA256 41b9f9b1618ea8724ef9493ca4be80661466a68d404c8228f772b9ec55552d91
SHA512 e6bd8843039380689c4a0e5ce687a0df327c949dc900a0b3ca4facabefc7efe846aedf63dd453a0e5ae1df3f056891af0e732cb8ef118eeeb338ac323f184ce4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 52e66873d2fe881df5d3f9274f1c6de1
SHA1 82f37a7a1d573caceef460dd4adaa8876413117a
SHA256 617a4cbf6c6d95c89a30da6eb320f380a91a7d4cd3ce424e9a5d125ebfe4c18b
SHA512 fe53f2ed15ff53cc13618ba51c44a0cd75cacbb7dd936cad7d41020873517458296c661cf5109b47cdc98f7658ae2346d9d0741146696e9db99f9cb2c234169b

memory/9444-28178-0x0000000000660000-0x000000000066C000-memory.dmp

C:\ProgramData\BlueStacks_bgp64\Logs\Installer_4.280.4.4002.log

MD5 1c887bd1a62235bc93859aae973f8e08
SHA1 80ffbbbade61b073c6006c3246ef9b655b9d2d75
SHA256 38ee63fb6079f23437ce61acc5e2ffeceb6789783f2cd1596d6d67ea93b0ea58
SHA512 bad711c77dda45f2abab2820f8bdff888f701c106a7f75f7b674898f4a9bf1cd00e40df54775c5f962aa9abf7c6a71a1f5f06f61de86e8b28a4ed750120ec97a

memory/5136-28221-0x0000000000E20000-0x000000000101E000-memory.dmp

memory/5136-28222-0x000000001C1E0000-0x000000001C296000-memory.dmp

memory/5136-28259-0x000000001C400000-0x000000001C416000-memory.dmp

memory/5136-28262-0x0000000023DF0000-0x0000000023E02000-memory.dmp

memory/5136-28263-0x0000000023DC0000-0x0000000023DC8000-memory.dmp

memory/11480-28282-0x0000000067D80000-0x0000000067E8A000-memory.dmp

C:\ProgramData\BlueStacks_bgp64\CefData\Cache\Local Storage\leveldb\MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

C:\ProgramData\BlueStacks_bgp64\Engine\UserData\Gadget\requirements.json

MD5 fdaf133263369980df600fd06ce738ec
SHA1 a0b6262ba8cbcec6ff4deaf819c552474b6f8f2f
SHA256 5cada29124805d8e0454dc5b67225bbf87075cffd53418e9c56f674708220e2c
SHA512 890f0df02a824ef9c2cb3c7f9e63ce74846524d8a6c6ad0c6e17237fae087548fc40cde6c54dcd1e4b780c0f05930a6c0ef042b8036f076a0983bf5259fb6056

C:\ProgramData\BlueStacks_bgp64\Engine\UserData\Gadget\req_trans.json

MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

C:\ProgramData\BlueStacks_bgp64\CefData\Cache\Service Worker\CacheStorage\a7424657c282808a935654175d0054512e29e086\index.txt

MD5 865692f8cb9a2b912930ba4267367814
SHA1 ee46bae0efe189e018468ddfe50e9e1145f17bfa
SHA256 02a1fbbd36d35289739f5dede638ea8dc5e3a2318a60208272cfaa62c39aa394
SHA512 f55f9c50bdc275e88076726d68e485bc3dc1bb566b64bc390e2f3e44da9484a79667b1bce798cb018a229a078574e6c43e223e458f625f2e45f8bff294848bac

C:\ProgramData\BlueStacks_bgp64\CefData\Cache\Service Worker\CacheStorage\a7424657c282808a935654175d0054512e29e086\index.txt.tmp

MD5 47e6f59ec15904bfe0ad3bce1c497a82
SHA1 f95d66601d254cdaede7004f0ed524ed1fa354c5
SHA256 fac254e781371f16139cf670740b6db7ac6d0600a1fc9eb375355b3e7f53b04f
SHA512 b920727e716ab6d9488b5f7b69390326a73998e966d5e8821e53533bd3771d4a1d5d21b3442ae33ada7df1baf779ecfb2f3cd6b8fc2089302559e0c48ebf9b79

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 924898bf8f3fbd871b7733ac44e67716
SHA1 f8fc7168f158bf1ab0b15fead6371c25cf232eb8
SHA256 f2240d925615ba2507b2620bfa48c0aa026b3a616842761c2a9ffb9c1ed65246
SHA512 df2fe1a3aa4e12bd774be9055ec0b6e365a466dba16c8d7a33e4bf24178c8fb44c62eceac2092657d951352dad32765c320dcf6b5e561960a2262481f02e31e7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000136

MD5 777a63c7bb73394365962e8e0fd2dc01
SHA1 2ca4ef52bd745378018eb30180ffa208a76b5c04
SHA256 10a7f1cc102eed344c455765969891f8c4ef071626036419fba5f17fa42810df
SHA512 986adc9a20bad40f8cace5dd9af3c3ac58e2fddfb30363ef61ef51d2493e603e28241da0144833eb62cae3c2d3fd2a38ba0a4822f01eb890cf58c7d7febdb8fe

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000137

MD5 9c5456eaf7baf7edf250f27935224370
SHA1 02d7711bda2badbb307c03740d580fc068f5060a
SHA256 e376f7f5741f2bd8973489a14ef5011c4c3738fae9a9fd93d6dab2a4719710e0
SHA512 3877cac24b62556f909ba6cad5193cc1d6dbc4de290ad748a41feb328ced8eb0f332c8c1c6f6f2a6d2cb1cebe68668b29eaac572139b02ca28afd3aebf0d6290

C:\Users\Admin\AppData\Local\Temp\REGEE38.tmp

MD5 513c8f189364cf1e442de73889e18367
SHA1 38ce025ab8bd05583a0b212e4ca7a488d0b20079
SHA256 07f6ed22d4d8e46cb75d1bfedd2bb3d8b99270ac609ce6ddf863d18edfd0b9d8
SHA512 cba3591320c1a14bfaf50eb20d363cc3d68f49be09477f9efca1ae254b5cdaa481bd18e1b031dcd62757c9b2de8999345c74cd21a414c9426689e7d5840cfb62

memory/7796-28623-0x0000000067D80000-0x0000000067E8A000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\5c930efa1a048d39_0

MD5 268f9dfe77c956951f22b6e175dfec35
SHA1 5f943d682196650803b8fb67b820b9e268450114
SHA256 afc21bcbc8c4ad9f59627c33e6f3f2720e5e1490fab005af789a2c5b0d1635ab
SHA512 2de25c1809e77209baa011b7f0febdc93d2655ea1e67440a250a8b5f8df23a7ee785bef4f7499315f78e2eee197e81d0c6a490f06f13c79ed695f8859662945b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\5790836423592bf0_0

MD5 d9361a029be1e6ec0ea52c7f86e9e4f3
SHA1 ab2a5d5d00b545c42ade8034619ac83a4d48c15a
SHA256 dbb4372f4995631dde2887ba4a9ea8f3d6de63f85dfd958e876886931abba42d
SHA512 abd1569ff70a682f8d07fddf895c4258d6616721427da2d0bd23a3e7ceb698532f88775e8033390e13fa91e2d36c7f1a0602cbec4aab4c07266af5dde36b1cf8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\db7227061f96813c_0

MD5 fc3754325b08da39b40b48958705ff20
SHA1 2fbfbd602d577bcfdb758329f8619a26fe339896
SHA256 ed77572fddf6f8b7f22111a6bccd7aa2565e8f24f5e124b497c698664446eae4
SHA512 79e419484a0278fea5f037fb069a8a421f10c9173e3539dc1a00a500666bda0fdf5d9f6919db5754d79a24914d7f299ce44db9b16129310a4b0ffc1ebe5edd50

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\a458a07a4ef00513_0

MD5 aa29f23cb736c24f3d1237187b8ebcf9
SHA1 8a23ca2f781198618271a70cd5b6c5109fb6fce6
SHA256 7cb27c9e6c3015c3a113a31061bd38ea0329224c1c963f2e3ff72fd3cc34bd20
SHA512 55cd784957212b8356d285f1b2330b0ffb5749f2575311fe446778c0117c06f8016c2bfbe305310a178156f1915ab77e4380b52c2d7f1a38cb48c0c6398f41e3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\3617dfb5b716a04d_0

MD5 2152e5a00159ecd93e4e09c2a2f7ff1d
SHA1 211b5edda995df367e34987701268b834e7c57cf
SHA256 4dfa867c8743d2d8002f6aa73f69c105e2deb25c41a22bebe1da10d0e4d5cff2
SHA512 810876a30a0d391b2cc59689317b5722ad60aaed0169b28990af947491b9887a5d07c9291c3e02f8cc5298d831f0a321e97c1b2ea667bc5fb288da1522a232e6

memory/7620-28703-0x0000000000400000-0x0000000000F3E000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 cd1be3ca519fe3865c76ff9fd55b8f24
SHA1 260a0623b03d0e97e363d74e0e9d824dd75c5258
SHA256 254358ecad2c28a2db79d73c2cc6d3c8d32af589b82e816bf898605ff26dcf04
SHA512 af08c307f0a46ca9d905c9fdb262ddeafef0d5188495861b48abe22ca83f8bd7e2aa14bab7c0ea900acede04dc1402e0c986cbf144eab205c0e5faf10361a9a2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 bd380eee679cbe74ae83e6b4bb66c30b
SHA1 a5ed6b0ca346e62ad5a75c14be063188e7cd17f3
SHA256 6472404951f86ed316eace4fbf1a8ced7faf5ed511ef9c5939f822f74e85f0e2
SHA512 23e0794faccf83aec27cdc8e5dc3b5d19eaa72253a55ad0d1022414bfb6ddf69fa48f9a37b5314e1859754ea1e12b8fc95ca8e58196d873dd2b8454501121afd

memory/13012-28724-0x0000000000400000-0x0000000000F3E000-memory.dmp

memory/4056-28726-0x0000000000400000-0x0000000000F3E000-memory.dmp

memory/6268-28727-0x0000000000400000-0x0000000000F3E000-memory.dmp

C:\ProgramData\BlueStacks_bgp64\CefData\Cache\Service Worker\ScriptCache\index-dir\the-real-index~RFe621a1a.TMP

MD5 de9ff2639f021d1121bc015d7e9be3a5
SHA1 20c1a25a17bcb4f0b9cd650358926c15e90dbe8c
SHA256 15d8d2cd52f056f758d4cddaec4fadddc57036c11c0e64df751b60ffedcc7d5d
SHA512 9add83a5c91043678c2aaf721835bac903e8e1a8e8748ce5892dd3947edd3df4975e633df9bf59f26908272c5cc1fffaef93ddfa90e5afbb2e617cd12b5362a3

C:\ProgramData\BlueStacks_bgp64\CefData\Cache\Service Worker\ScriptCache\index-dir\temp-index

MD5 a0301178a9f69f24d85647b68343434e
SHA1 9cc49bf710a04865de6765b6d60a880d75ab1eff
SHA256 e8fdf87a1b922d748ea90c18404221ad60825ce1382dcf1bedcfce0231a39698
SHA512 8ee36a276da9eecec84402bdb1688ed16513fecea1eeb02a6a2abba3c0be5ede32c94037878636e809c33ab83f39c678295c810578de570394ecc897267bd418

C:\ProgramData\BlueStacks_bgp64\CefData\Cache\Service Worker\CacheStorage\a7424657c282808a935654175d0054512e29e086\701eb46e-fbb8-481f-aa87-9e2cb61f7a0a\index-dir\temp-index

MD5 10772c81e729f5d74be84964b8acc65d
SHA1 687f10b5389f5356d6c5fd075003131edc1f1a68
SHA256 d1f6555e749020122e4fb45f8c0ea073befeb66eb1f632e89aaae7de8ace368a
SHA512 578e033d3cbdaf8de25da7b9de2451cbcdc3532298e0c1ebc513261847aaf70182b6a8bee911c34dd0af5508c0302370b8bd588574c9833b9cede88967c9bb9e

C:\ProgramData\BlueStacks_bgp64\CefData\Cache\Service Worker\CacheStorage\a7424657c282808a935654175d0054512e29e086\701eb46e-fbb8-481f-aa87-9e2cb61f7a0a\index-dir\the-real-index~RFe621bcf.TMP

MD5 02fab0af602ef6250363d7cb7b82bea7
SHA1 8461e6bf5816727414853b1dcf59abe706f9c213
SHA256 c6371bf83eec2e614c5166f41a4afba1684bf20f4870dbaa87e56056b9a354bf
SHA512 af9a9947e47d260a88175d35b1b181bc5e68f47689f6505a50bf8ba74db93bfb566c1c731734751814d53cff5b8c3a7560dfc0dcd300f8601b20f7cf1f263005

memory/10632-28750-0x0000000000400000-0x0000000000F3E000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

MD5 79e90b79849ab24f7077995c4e45f1d5
SHA1 3dae744f25bcaa1b690d61b789a8b1e58a790953
SHA256 3d2a7a2b6c89618f30d26fd5dac9ff7d52d6cf1d3651fd7aaa1d1229464b1507
SHA512 6169379e245102bc4b1ff74bc2c7cf356f24fdef55e5f3f8a7323da36f6ca92f1ec38bf230cacecc89c33e12e1b201de417a570a998f31cb281bed3ae8f8deb1

memory/6940-28767-0x0000000000400000-0x0000000000F3E000-memory.dmp

memory/12368-28768-0x0000000000400000-0x0000000000F3E000-memory.dmp

memory/7752-28770-0x0000000000400000-0x0000000000F3E000-memory.dmp

memory/5028-28771-0x0000000000400000-0x0000000000F3E000-memory.dmp

memory/10320-28772-0x0000000000400000-0x0000000000F3E000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\Bst_Logs_4l15ixrd.c2q\Oem.cfg

MD5 172d354bf1a8f5a3a2ed2c7fa62446a3
SHA1 a975df06252f21a937b6c36aa205e3a74091c598
SHA256 8d65aad61d997bb52a4858dc7ea21ffcd3e671f409687dea09f9fb2ef56b8c50
SHA512 86b47f32ef734a75d23043ffc3dc5f1df4d439ac7e0a11bdad0ea50ebfd03dec17daa3c000e5f305769a9e7f3f1125e070433bd3e796ad3e792f5a8e296ba8c1

C:\ProgramData\BlueStacks_bgp64\CefData\Cache\Service Worker\CacheStorage\a7424657c282808a935654175d0054512e29e086\701eb46e-fbb8-481f-aa87-9e2cb61f7a0a\index-dir\temp-index

MD5 cd622dc0a59852d3ef78a7cca6a85164
SHA1 b36152d531d45c7934f470b74220ae597ffec21f
SHA256 9a49fc8117d8bb5a3b5ba9a930e1b3e390415fcecac1bba7dd2d78e665c3f70b
SHA512 92241cc4251518569e00e0a616926f8e0023489291c4e09333fe1f8ca261b196f95a751fe742b967eed522e51c40c68999eac2e25acc22a220874dce9f9bda5b

memory/8612-28793-0x000000001C440000-0x00000000224EF000-memory.dmp

memory/12836-28818-0x0000000000400000-0x0000000000F3E000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 0e79f3bf10065b3be70524ac24ff7c47
SHA1 3373e3dd4443229e3b8ee98c2d4b6109249ac001
SHA256 0b5871c94fe5a9282c8d080eaa78bb69188fb0e2dc689c78e7b27163e5321f21
SHA512 125f319dfd63c69e0963cfdcbb23c854b7f37b910696eb072a49a77c4f770568244fcfad055e97ce48b71f63d031f4ae943bed184f927f5cce76e12933b303f6

memory/5136-28817-0x000000001DB00000-0x0000000023BAF000-memory.dmp

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms

MD5 4992e4b82109d43b934ee59ba85dbf78
SHA1 6b5c56fa745fc8f455f49fec6ea9981d9c64f9e0
SHA256 2b2ce10fcf85a1054a7a56a9642e1149846a3dfb9e178f1dc70fb74c6363c241
SHA512 963d076061f2b7cc99093c842d7a0d859b0517d0f1528337d026fb4c853059ec98145b84e4ac5bc373b073f7253b5fc2a22a0cbf685578dadf2f38798ecce17b

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms

MD5 db5edc1453b4020a5121d9457784dcc2
SHA1 330bd1f1e7cc15949a3c632619ea8964ee4e4e6a
SHA256 3ddb2f8c05bc0eac6d5141166752a69e606a3dd1e4eddada6d0af7b3d61a1079
SHA512 44e18ecb7a39d3b26f3f5bac85005a8196b36bb75f40b83d816f9091fc1e6669067e09ec870c3c82e7cac4999b0d06620ad3c8c827e8756937b3db8d5a8b6269

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 78c401b60adc9853d9b97e0dc58f2875
SHA1 1abbf8a981a868ca7d99a4ec4638bcf58e662e11
SHA256 6b9a8c1562083a2bb4502ddd27e4728a11ec95c9209ee02432b0b63f382cb863
SHA512 8bd6358e3753be7202521a311ca4b594c47b3e62d09ae28cef5bd97afbb295e69c4a21874fe11b51e4e5204ff6404a462c2f3a29d45763ba4c43b8012ad4844b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 92d3500e666b0dafa86274cbfdbdd0c2
SHA1 b8ca1f7acc1b34502c61a237c8dc6b9607f8212e
SHA256 ebdfa154c14ce7a8a8480e1528a00a207435cd3590d0458f2d83abb9bf27bea5
SHA512 4462a66cc7690a34dec7d9f993132ed7c40eb8d1b16b71ecb014e6e9609531c4f54d0bfe96f251d28b3038e20a3401b8fb0054aab1e3a8f25b934b1f2a50504d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 db0007fbe44ee76dc2acff669ca0b8cb
SHA1 948188baff740a10e93e7636aa0d955731476930
SHA256 8de6a6e8fea621687af05b038ce430ef4df1f6f175dd8112cf9d949038a848b0
SHA512 3cd72fae45b1566f49c2c8d7f0f72130eb7efe906af6fd42065d217d9e3f32117c7978695032fbdcd12adb0ae19515ff891d43e70d91e423dba900be647af66a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\4a2fe8bc846c3d57_0

MD5 638e1145c23d8631ff21e9e5c6c16b99
SHA1 b4909ba8d7ce9809b36404134946f7d5a6a8548f
SHA256 25f4211f5b371e27428362c2b82fa5228e9a71a2d8191ffe6763f83014aed3a1
SHA512 bfa0c4871a01ae0636da56715795f54d7f7a3f27450e23da0b5ab4203731dbe048e62af55445559ead11ad75a5e06e843326061d2613a07c535a3a9974e26932

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00013e

MD5 230ab95d87a717be265134072eb17c25
SHA1 71a3d3dd6f952057ba0c6025d39c9792ff606828
SHA256 3fdfeaa675697f08f1c7c0fd6b77512f4bf9465e670637e8e332e65ebb9db068
SHA512 9b0636421ad14161f211e846521149ab0a7c866e77db309dba79718487835204cee3821c9f4678e48e134614be6a02421c155a34b7c9bc424012137705960b11

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 726dd3a53ad9c2c63cc360afface3f1b
SHA1 fc7c3f834bbb28d9f0589df23973d48630790d58
SHA256 11e373a464ea722fc2ca9fbdf45bcc39a687cf7f24ff97c29ffad2098a2a3513
SHA512 81d75fb26f25b66e7fe18b36f3a4de86a0d9801e0651dea5f3f677f7146156f672722803e966c8c7cd7ab51f0f520b86b73dbb841257e2907367070f124a22bd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 35171808e75715834d4bf1b35497d977
SHA1 ca499df4be31fbe968baebb429a4059be9970378
SHA256 e7ac258c1dbf6b1022fc70eeb04dfa4026cb0ab60e00be7796d381016547e059
SHA512 aa125d7dbd1df404cb769d51da988e4acf17743ea82098357477bfa423627610291d02d8c0495d497e8d9380174d06d1c14cd5786f6de47a06238e85c4e18e37

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 44a28097d7da50014a18ca9b2403d9e5
SHA1 fe6eda66ffcc315a0624edb408e2917d9ee9609e
SHA256 8300fb57c11d596c352a910314cb714e07b31e7b7b59e3cc105b7ba2898c8008
SHA512 ccebe56087118d17521c4e951c9b7b3552c2658c212c243226cfe2bb077bd586e168d78d6be09fddbe22a6fcb03208027acbc2a6ba06981ab4a0eabf24e2b413

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 f40a30fd65116cf41a8bce71651bc345
SHA1 64dc2f7e846251d51c275df4526a24269c52f033
SHA256 a01648d6ebe234996100b31f95ed379929183571e9ea510dcaea0b7ec601d586
SHA512 dc1b44ba8d533a40bed8e8d94453951b7a276ffc33fc517ef9fd8e358638ba26a43656822c943bf7fb9be7461a990dde62668dcc3083a7695464e5c72f26e045

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 d474ffb3ff4379c937eaf03e589419ca
SHA1 d5f7d611feb7aadd51e3aadf412613ed297807ba
SHA256 00fded327235cf1dcf9aeb4b08c3d35398eeef42f250c6cdb52791a4856a580d
SHA512 02a631b53de166971122a25891c2e935ccdf59650415280346a6d5218c1caf9239f9168e30bf3c104134a665e882eb0c3145dcacc7c975b2d91d6d564f95cc20

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 24c0ece8acc6cb4874f4a0e93ff7d33b
SHA1 29d2529aad203b1377d196db5124b55608847b98
SHA256 247773a01e647d367909882ffc3b9663cf86a005a677c55c69ff8abb63166fd4
SHA512 c40c7c88104ca926a81d8ba52154e6d591a4e23b1afd9e2bb6c239609b6654cdfdf223431d6dcb65128e63350feafc549e5fd4c6748f243fe9fb8872a61135b4

memory/9108-29021-0x000000006FFD0000-0x000000007004E000-memory.dmp

memory/9108-29023-0x000000006FF50000-0x000000006FFCA000-memory.dmp

memory/9108-29024-0x000000006FEF0000-0x000000006FF49000-memory.dmp

memory/9108-29022-0x0000000070050000-0x00000000705F6000-memory.dmp

memory/9108-29025-0x0000000070600000-0x0000000071FFB000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 8508da5c06c7bcc5675a7ef2de75f75d
SHA1 e6eded48b0f1bfb305d9fea650d67ce737b8d29d
SHA256 4142dafab439300f96d569830a8e539a365e9feb48d1d9c1f5541576325807c9
SHA512 b711e32ca077e4731a54813d5f7a0563865eeea09a2f5d7c9e072198cbdf8eadcaf5d42b365fcb2f14aefeacbd94053d0757058aaee7f3ba802ede9c819b71f5

C:\Users\Admin\AppData\Local\BlueStacks X\Log\log.txt

MD5 7cc4418b9f5d3a931c8067f21c0b7d67
SHA1 0e69b4543a4ec5a5d658bda956c280f5a5e1180d
SHA256 1f03c4ea8cbddd6a2abcc1863dbfb616cbec60dbd4573993ba16c7430d0bd24d
SHA512 4e3a249a52f8bca1aa97dc19ddbbcb60f138691ec3aa02b0f7098cfb0589d35b199d6dc6996cb745f26281ab545073870736d26f7ba8950bf3b9f235b855aa0d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 332e502edad0152cbe6f82e5adc09a03
SHA1 1d5d6daeca8ab63779ff24dbd1095da52ae67823
SHA256 a5cdd2ff08e381d273b794c2494e65f769a5a437039182b00dab1a9c753abc7a
SHA512 e8bc51aa1962e21dc1ce36b79a6f7dc7ce533e009aa1c7fb776292bc50bf62fc48906224b7a9ce22ef8781233d8d435617d53c3775911e44b522900b3ab5490c

C:\Users\Admin\AppData\Local\BlueStacks X\QtWebEngine\Default\GPUCache\data_3

MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

C:\Users\Admin\AppData\Local\BlueStacks X\QtWebEngine\Default\GPUCache\data_2

MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

C:\Users\Admin\AppData\Local\BlueStacks X\QtWebEngine\Default\GPUCache\data_0

MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat

MD5 38aac45d090f2c41c14624f456d1eec2
SHA1 76516fffd6e7c63fced50b20d19fe66f83f69328
SHA256 f429eefc1c455492652cf7b3aae15b326a7963de547e0ef2d71f8bd6c53d93e9
SHA512 f82e033a4c794d98d39c508536c0fb245732bcee6e723b219dbc3fd9f800c668047b1265ac1f1a798e29af51179f84d004b1a53acffdd53e3fd5604b8b6def5f

C:\Users\Admin\AppData\Local\BlueStacks X\cache\pcGames\com.com2us.starseedgl.android.google.global.normal

MD5 316b83772540ec94552e8cf698712e0d
SHA1 f93da56fd473d1809161e3286ec635418213a41d
SHA256 8bea9470f281d31e88bede12dac31d34e0a817a4561c2c2c209598cea69bee25
SHA512 43398558790728afe9a52143607926a552a8b18a337f5e5d6c78858535f7ce2e370c79916b8ba3fae53be5c36488173e700c0a03d733d1f1b8362a1e9d5608ab

C:\Users\Admin\AppData\Local\BlueStacks X\cache\pcGames\com.proximabeta.aoemobile

MD5 a5f3f159f1aa3d4d510b3eb212249ad1
SHA1 6d7d70e390af5782edb41b7e65dd071c46ab9fa1
SHA256 785c1177914dc695d853da62e208aaee82c7664a749f9e66ff43f90aeec4e2ca
SHA512 73fdcc96a41beb0263f3a9e2f4fd34ff6e993d9560487957573a79f8678538c20d24ed3a8cad8d13876e9a7df454e2f902ab47afd0307ae02b3e00ad87b8afbc

C:\Users\Admin\AppData\Local\BlueStacks X\cache\pcGames\com.plarium.raidlegends

MD5 e51001cf84f6820bedeb7d3b8beabeb2
SHA1 6b848100a11ae03751cdd4c4f6647100d41222bb
SHA256 e251f05da4a840bddf6b9212a4c290117b0b0e5b44ab6b84902ba9db9b5e646c
SHA512 4baeb873988b7fcf64f7e535bc5337392f6e20e7f8f78a812e76b66249a17297dbc3eac3ccbf85155eab3da140b80b9b1a284835eab876a02b7289987893126a

C:\Users\Admin\AppData\Local\BlueStacks X\cache\pcGames\com.xxx.rpg.en.an

MD5 8eab831074a5c3ba808096aa08365c15
SHA1 137b86a463f39db6b45bace79ff3187998c0e247
SHA256 175aa9c83bf429db91313711fd74b20f0e143486f8e1ec4754b4a04b83d8b850
SHA512 e95535132dff4a6ba658932f22024579ad548696491696abd9c6de95752dc1bbafa13ef4cc9e67b6082e9806f201bae7dc5edc2592c7c783aac9a659ce2515e9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 1350d279534f9e63b6120b0a0ef72ca1
SHA1 32b128f5dfcdb11ac2ec442aa26c87b7b0287bce
SHA256 242abfb84a59d28ef05bdd0fc8449e889988b913d307d1ae4950bed5a30b811b
SHA512 e69deaa0f32a9d2a540fdee7c19f5825ddaf70f67cda3d25b4cfa370d362379acc7f20ab7412478af02d5c0c8ae6ffa6b0668515db8fb4e501b5a2a81d326186

C:\Users\Admin\AppData\Roaming\bluestacks-services\config.json

MD5 1c0f77d54060723cd6524a86dac9520d
SHA1 a08ca36c4920a0892344fad2f6ab542d2ae8715d
SHA256 3e5118ac8317b4fe7936b0a6ae924f2f198ff70497a6793b871a032e2871fbb9
SHA512 dce8008d01eb6c29d69facb64255fc4d8a4e26e061460e334f7accc34a4c78659338a2454e9176de56afc2379859d24afefa12354a4a67857f6a8a570834db74

C:\Users\Admin\AppData\Roaming\bluestacks-services\config.json

MD5 1c67e1730ae52d4153312f9f3eafe9de
SHA1 ba60931a501accbfa5b3cbf268972f44b699b03b
SHA256 26073b4592bae177f2ed1dd4939853d6472b776e8715852b50a59c20d35fdc84
SHA512 46a75fdf57c154318b2bc492777394ff808815807db3c44e9a394a2aea3942e68a421327b2018be6bd29a48cc458aeaaa5b2ba59f47dc6feb374fa9a9dd02912

C:\Users\Admin\AppData\Roaming\bluestacks-services\config.json.tmp-099668075024c4b1

MD5 df9193b732673e0d3b08900e7ee7046a
SHA1 52f3da0ae2b173f7f986d6031a9a5b18c36a1d16
SHA256 8938976448a627eccd83351a82b5e3606ebca500b3d14d263098ee673657f6b0
SHA512 22441008f6c20a410d6547b474c079bc163b6f98ed66253084d4aeaee4609550ff1e5f925b19a146f97ad38a8928b38230d1897688f0ea3a831c5c47d008dbab

C:\Users\Admin\AppData\Local\BlueStacks X\LocalGames\Impression.json

MD5 6faad6700fe1672ec9b8c8078782d9e3
SHA1 78c88feef8912dd4b2c05832141225020467293d
SHA256 4b1c5b8f7639a8e598aa07a735d35627a118458b068ace4f2e323f31d3a5abcb
SHA512 79449081cd3df500163c4efdc4e8f7763245e41f252f7d35353973b3d670d70522534eac37527b9e2864a082f21fd47d551cfd510e8bcb377a9c1f4e86fcd159

C:\Users\Admin\AppData\Local\BlueStacks X\QtWebEngine\Default\TransportSecurity

MD5 92fcbddfec3014dc47edfb1702628c26
SHA1 6ff0a23439610a9eab88753ceb57b6cc3f5de12d
SHA256 6a20e05938da25ffd0f556f44f1a591b58ec12c518fac6b18d4f848d53b765b0
SHA512 489114be946eb37bfd45a3c67945302a99a2345f4b4db8bc8325170d5b13f9583fadd31ea63e6df6e3e157be6d4304e9511b9f726ae801f5eb570d1d2ec516c1

C:\Users\Admin\AppData\Local\BlueStacks X\QtWebEngine\Default\TransportSecurity~RFe635f0d.TMP

MD5 f3d67195bbce89fd6de45ecf8f694d4a
SHA1 e28b0af88399b85e08170f1294fa6f752d7760e1
SHA256 6cf8bba4c72db5e8b8eb8279b316a860776fab29091aef5506a55deac3bcb6e8
SHA512 979d7cdc890a9246a6fedf157a9d0a94d9875d0c08ee2cbf24b779a075e376f1541b4eb5554b1e2f1b8ba55d852b611eb248d89814f1e19cf9e5b19a5ae53e40

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 8a5dde792863d573c625ae6933f96245
SHA1 4e95020bf4128a329796b49064dbce73b495c654
SHA256 626939d5e484f36a499941619c345e268ff480b1be663dd5be3bf9f283209678
SHA512 fba5b4a750524bbace097319a48d5d0cff5b155a0a425c7a168b4214a1575568a64a69675c11f840d0509b201287aae549ab0098146c3af1eaa9c3bc4c3d73ed

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 a398e09aaf4b98103c941d0ec3f514c5
SHA1 0fb176d1391c0f295180253608838b1aec4c6436
SHA256 6d7a65a535f827bc2412bac23a11fcb5475ed774ba28ecab3102e2050fc181c4
SHA512 e65efe2d6a166ef5ff1a0054618aadee25f0adea90ce96a7373cfc0b4c25299013831570fd79d5cb7cfe505aca63618febfacb30c3096ab1e6a46088aa959ee9

C:\Users\Admin\AppData\Local\BlueStacks X\cache\QtWebEngine\Default\Cache\f_000019

MD5 62781e811f8f073b1ee172e0311d65b5
SHA1 8f93b36838cea94a6fa253e74d443ce15f31965c
SHA256 91f7a2e2a24db780d04a86d9dd636c3195161bb53657e4405de5c913d4a77e08
SHA512 8e43e21c13b22c242632af9770527d957a073d42ed74d340919212966f93f00c43fcef801059196ab4406b7d09f253ef78661353feac5cf1aa917990008c6891

C:\Users\Admin\AppData\Local\BlueStacks X\cache\QtWebEngine\Default\Cache\f_00001c

MD5 21bcb123a819c38531c09cbda0ac0714
SHA1 dac0d906e66abd189da10d1c3526316f9e5438c7
SHA256 86842f28f94609edd2b04e17396d42f00e54a2120f83b199d6488dbcdca5b33b
SHA512 1ab7d772736353cc799f17b49ae6ab07c339debff3ca7307fd89db6543889aecc3fca7efb2d5b14fea6dac9ebdf65f256ae979cb3ceb5d22f360715f8b041f5f

C:\Users\Admin\AppData\Local\BlueStacks X\cache\QtWebEngine\Default\Cache\f_00001b

MD5 7cc00dd408f9ca6598900b88ebc92d50
SHA1 accb1eb2fcec11ac20361cc0044a4c638cee17a7
SHA256 1cdb9c5e458aaa2e15ae791e46f398781095eb722e5205c6da4b9a7bcd01ff59
SHA512 c4a251d761098111fa1903685024448072f050f5a9c2d71fdb67693c03a4aafc769b06c7b04440c4be8267005edd21d619214649540488e206b68262006c42a3

C:\Users\Admin\AppData\Local\BlueStacks X\cache\QtWebEngine\Default\Cache\f_00001a

MD5 f84d0390f4421c0ea5a459aaff484a48
SHA1 85db35d470cfb4b9a05c6609daf47a0917365dec
SHA256 8eb99c63b582be96e31863261570e99256882fc2fb4e9f081edb82faf73ebbf9
SHA512 bfb52937d9c2f9590655fe8adcfd988aae906973a8bbb0160f8af60ffed465f63bb93a5d4b8cb531207b8eb5a2ec9668d8372696dafc1226615676bd6e57b991

C:\Users\Admin\AppData\Local\BlueStacks X\cache\QtWebEngine\Default\Cache\f_00001e

MD5 bd7ec9f2511f817f3f547fd9c3e2d1d8
SHA1 386d58c8e738eca5547d3d5b9c142068c8d70732
SHA256 9806a1f8466d4a1a051929438230b8d90436f8fbd35e725dd2b4f4102f82e95c
SHA512 4715a972858f4391eb0a804da7539a36e3a5dbba4005bbd364d3c803bb071062d29c544a39ce2c1310c213ba9736280cbbcd732e93340cffd40864a4b4847db4

C:\Users\Admin\AppData\Local\BlueStacks X\cache\QtWebEngine\Default\Cache\f_00001f

MD5 07517b2a35333f6d4e190c33ea0104e0
SHA1 1d7a749c8fa8842997901e983d1941995f6495d8
SHA256 f38445d54242f865cfe402af039316162d383986af9193861d86908bec42e9d9
SHA512 9bb9f0d2efba9b8ce3aea34b40a53975ef7f1a7c6ddbce308fc3c1bb79daa16f11ebbc92f4ac61314ca88470bbd8be424ccc3a5063b6a699e54ce36872f21ba3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 2a3ddfefb81fe7f24d7222ae3172a133
SHA1 c704ddee7d55d89e67cc68d15c3df9c85d372af8
SHA256 045ee32b54888c235c0630fd6516ebeed4dc29884b7d27b09d00901913b97b73
SHA512 f4f627a4ff6945c1a9651c9ef0f8df9c01ef977b4cb05d1278823e004bd04df1c1070dd6c10e13b65dc969b05eba49e300e622faeb78ce7ddc1f0043f31e0493

C:\Users\Admin\AppData\Local\BlueStacks X\QtWebEngine\Default\TransportSecurity

MD5 9604cd702b24c51ddee11ec22c727c40
SHA1 ffc108deebe229b65d302666eba9f7e8c9dc0abb
SHA256 0c2fbbfe550bf70ce7046ab1b06b26221d118d18d98c47078704dc57926c9c9a
SHA512 fc33b188e9e2f0223a4f87dceb582ce0cf37df47816cdfccf06ad9e67db6f2033eeb787cd1d0900b089a0fcaec6ce7596487201ad05f3ed5b4bfa3775c1814f8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 54327d9fc172752a22b060c01bf7a0d4
SHA1 bdb4dc81fa53403e18bee750c7204fb76ad8b12f
SHA256 d2668f9397580b2cecb75de6143b8832e0e75b150421895e4f99c03e8adda3f4
SHA512 511143de402925782c793d76f692a5a6d7a287eee806c42f0a70e12ace6b0abeda44780a31ed214007928af22d0a9283f5d55d475df73a4f098479027e6a5150

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Assets\loader.png

MD5 03903fd42ed2ee3cb014f0f3b410bcb4
SHA1 762a95240607fe8a304867a46bc2d677f494f5c2
SHA256 076263cc65f9824f4f82eb6beaa594d1df90218a2ee21664cf209181557e04b1
SHA512 8b0e717268590e5287c07598a06d89220c5e9a33cd1c29c55f8720321f4b3efc869d20c61fcc892e13188d77f0fdc4c73a2ee6dece174bf876fcc3a6c5683857

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Assets\link.png

MD5 ae2c73ee43d722c327c7fb6fdbee905c
SHA1 96f238bf53ac80f5b7a9ad6ef2531e8e3f274628
SHA256 28c0abc6bfe7a155815104883a37a53dd783d142300471064c95eddf3cae0eaf
SHA512 5a1e341f727cf1cb4832cced8e96c5a74971451629603c48bfb91ceb4561d0122ab9ae701f8b34681d5f13115a384467d430ccb8282494b40f4577ebc3ad825b

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Assets\installer_upgrade_image_bg.jpg

MD5 3bb85d2c8cef28c89a2d07adf931e955
SHA1 596d13e7742455afce8a534382b28cfd2f6aa185
SHA256 b7f75233e633107d50f24ca82099225c83a832571cd2ce92901f2db3897f058b
SHA512 7075fe989d69ad5f0f4cca5fbbbabad16e0949c2ab8538f3f96020b831a4ec1cc3a701dcb7332e577b5eceba230449efbbf8e288dad47a53d76e40c2337dc730

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Assets\error_icon_72.png

MD5 4aaf83d2b3fd56ad806708e60474df39
SHA1 144777a265879b69fadea3eb3ac6939458918578
SHA256 84e59d14d9433e6c3d92daeb8c443063b5e3be6c0b297f0403dbde473a05cb3f
SHA512 3b8485f054fe6ed2374bc81cb1786f09741219fbfcb22503707b11cf5db1ab262ba4349633597d5d9ddabc3415b170fa8eebc932f58d211d7092b8fb96fa1304

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\oem.cfg

MD5 880dbbc36b6f1d4a6ca9a73419564776
SHA1 1b4eaca846ca50a9fecb6a741dd19973eee9e557
SHA256 0d111e0260b3c11e1dae2b5328bcfd2d1fb21f15f5b49064bd07e272a8bb0822
SHA512 19980cae5bd279216d737cdabc9e9980c74f8918234879b9d5fe9aef1e265cf426931e9db798e2582399272258e18dc04d817b0dad6557010d04b6ff7a715322

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Microsoft.WindowsAPICodePack.dll

MD5 6f43b53979d9b3dfbc36ce64dfea2f39
SHA1 c994261b328efc24679c32cb076203e5abac61ef
SHA256 6d01be84aa7aa4f8f8f843d28fcfbb51c2f60207a1fbbf69c2db12eb3f646468
SHA512 e2b7f3f6094a381715598c03044a3226d9232266be5b2b79d7cdd953fc7aecc14ff5834ac53b75aac66a6993c903550a80eff3f4fc8b673242b5253bf466ea8f

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Microsoft.WindowsAPICodePack.Shell.dll

MD5 c8fc2d97ba296304fb0fe5dd8eaffa6c
SHA1 162c135543ddd03e98d58f814101e3cc4006f86b
SHA256 34e9e9974cae688bcc111646ee62905b5b44693c44bd3e24c6ae379af9841c49
SHA512 d66fdba350a6661a5bd7a81b4bc722db75e150a59e2a06f170a43d143675eadfae24e9f8e3745c409b8ad4a82d97587077e1802d838b147fb2250f4f86e0273f

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\HD-Common.dll

MD5 1ba9e2882eab4e7d18414d754d10fa03
SHA1 27dfc682e8e8c01fe34d4b87649f9a346f487486
SHA256 b609693e1a93329068bcd4cd8017c69635249c9ca999263fc868e77a87639949
SHA512 3a3496f2d59c7278a9258f524b7e929e393b0a2caac121cb67eebcd87ae2416f994b66699053338b572d2f4025f91097dff11eea7863b36d29e67871dd77c478

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\HD-Bridge-Native.dll

MD5 0d698c09a4702ee980ccd3c2d0b69028
SHA1 da41a381e2e5fad4062c48d71bc0ad2a69fe53ab
SHA256 577cb10a7063801fdd461f2ba5beed5a93fdba82d9d57587c9fdefad0b273fa5
SHA512 0ba7215069e2225664e9367a0e7b35b0223821cd05c310ffc8ee78b9899c219fa86e02b640227c3da88f9ae596ca1d618105b0719b5218cc686da1dd6154cb07

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Newtonsoft.Json.dll

MD5 b300fefb4c8969ac194f0b571196d678
SHA1 1ccd7176df5080814a05b89fb26ddc0bf150a783
SHA256 ada5ba2a949c883de7fe9dd1a74c1cf6e688a0907326d11ed37682f2ec65dc63
SHA512 7fa8b3581c6325e92b0ddddb8a3b67223917647928ec65d7e12df52ad8bb7970364d93f91f06dc85dc282b527555dbb933e5d3d753eb051ae10ae2f789ffa4f7

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\CPUID.dll

MD5 f57ff1a4b3cff90aea1a13efe71d79c5
SHA1 ac478750fb59bb3f0a88cabd0e56550e8a085357
SHA256 e7147c3e38950fe7e7ed2d37e5eacd6dd90046c9553fa81e2f2abe604635f79b
SHA512 e978d8e29e9788647b577d26506c28705cd7de0226b0e0742905a4d71d871b44c4629f821a3ba06358609186f7915277ec3cc6b5341f8e584ea01424823960a2

C:\Users\Admin\AppData\Local\BlueStacks X\QtWebEngine\Default\Network Persistent State

MD5 c680ce7cb0720f78ea4cc43f08b7e243
SHA1 716925d121e2620c7182c9048d84fa138c1cdf2b
SHA256 706d1db86f136d8b7f1b11a7ca226bca116a2e4b40e5099aeca7c596ddd435b6
SHA512 ae8ac271edb2fa16ef49a9d13b7d6df245a73ef9a3512618738c59a5962b47d22691a124ce5371146498344f856a0711bd55ff09519d96296f2ba8825ad699b5

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\BstkTypeLib.dll

MD5 14eaeddcdf2c09f7fb65ded924189684
SHA1 479e6d68e8498d841089b6e16b0492a0a54b570b
SHA256 a21e6b63ae0beb3e3e83fd0d845736f971375107278028a6c1b4ebad56483552
SHA512 8c438ed3313e18edbcc597ec0ca85a48c521f2fc9cc59102d3401f385f0a4cb88c1b31a9427fb6fac494cc55fb7eb52078fdcfe43c678c7d372c06afc4b79639

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\concrt140.dll

MD5 c4fe3f03efd3188252caa101f954ffeb
SHA1 98b613aee45c71aed9d2be0d61d7ace323929e9c
SHA256 95bb425be3d515a6a58f7399d44dd9e032baea11667dfdba29517c460171880a
SHA512 80018e0bddf079367d3568433a5f89f0144aa0a75286b0105fe32aeeb5d80876c9b2e1ecaafb70fb041271e27a234a2cb88a2d3d160a4aa3768ccfcfc574704a

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\d3dcompiler_47.dll

MD5 5faba8b020b313253703b07591d00379
SHA1 f5ea546901c3faf60122a4ec2d15a86b916d5d10
SHA256 bef3c125122bb459434bb02e763454cc21454257a78e63ceabfb5b347d46efd2
SHA512 b23f0df210b25996953e51ceb2304bd85aaed33c41c75ee1577f6d76f37bbd2a2e96be0ba7561270e23b26cf0db2c8ae60567cdf91fbbd2d0577ae88e9ce3939

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\HD-Astcdecoder.dll

MD5 6659af53b2836d8ce099b6fc02ee759e
SHA1 ca71bc06b27970b5a9c4879a27b4c0f067b07bc5
SHA256 8abfcf60a8d96372d849b6be5566841e51ceee705376ee7858de35d226cb2054
SHA512 cadc24cde38a2f12defa8dd73f3dfabe23d074dbfb00265e7b7e5c966ee88cbc39b9064238a3379b6ff9300a2dea6da1de80bb0d3bb175c5f7cc0295b50eb0b9

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\HD-Opengl-Native.dll

MD5 437bcc640a44468f44cc5cb1165115ee
SHA1 c05f9d1dc461e66d733756ec537a597f6d83ac15
SHA256 1461cd4aa3e024366ed30ae194e5259804bd6d78f61e3bb788f31c364fe5fade
SHA512 586ac9b8ebbf0e116017366d435b3cf9d2050ef1f9ad57478a467de8a90166fd4488644df5dc63c3801746a49101b394a25ad16ecd85c92d8bebef3a76ebf1fe

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\libEGL.dll

MD5 be6ff0ec680921380c04331351a1ca2f
SHA1 164a58758bd929d3f61f5193494dc4ea188c34c2
SHA256 5e287e7e884504b524dc4610bebe79e013f0bc6f87fe788dd1f5562b70a6dd65
SHA512 8603d539b08c32a9777eb5749ea9707a26a025dee72e8b44a34bc7e5270d8d88004a3dc0625986b4814402a3891ce32d815a27c6ec7e0079638a36b68d13890a

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\libGLESv2.dll

MD5 35b10fb121ff7c4f85636c4ac075307c
SHA1 ced4a1b68ec66eb8bad69651e8d2d7ea63028f8f
SHA256 5b0acf994cd091c5c07d707219a33de7d5d9ce2038bf93644a7c3d8d64de48d5
SHA512 14fad63bbe5bc296206656b1b6075167d4d86278e2db7afe5ec68144e7896227a07ea07d93e3a5b042deae6089984ab1ff9f38f80c9c9b128787871d13f28d71

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\libOpenglRender.dll

MD5 41562b03c5f2141df9e2247f6367480a
SHA1 8739b573d0bca6195f7323c0275196b14a5b47c2
SHA256 df968783c511f6bf676852f481c99d856823bcaab46d9750ccfea58f300d665b
SHA512 bba8f662e1fc647239d1db473737662ce78fcf0e8f425941b732c41f14b3daa43949ea9e48276b5c79526015cec19243acfc1c3a56dc1963b0ca73ffae65d3b7

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\msvcp140_atomic_wait.dll

MD5 1d2a0d23e35b93464bb5b09e5e4c02b2
SHA1 04d1a1eed3868433c5b7652ecae0fdcd29e1ef39
SHA256 a577b5fc4e3a14ae141657c30a38d11ff8593135e51e55485b252eb821d47e75
SHA512 18a0db760e4c4d9c4e014cff5ee0f433b298b65fdeca95b8f5f172b9bc534a1c7f64a1b2751b90e89cf76f41ee1ab468415466d2a657905eca9835e41cae264e

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\msvcp140_codecvt_ids.dll

MD5 4266e7bb9bfce998083d2f4f938b11c9
SHA1 23fc9c4c9de9fd3e71941df86e26c4dd44f2a95b
SHA256 e1ee6d29e30708ad5812035626bbc1058ea12fd5503d5a79d28c9cb67fab4a14
SHA512 5dc1e769f973aec3f0f766ad7c2364a184b9f71c1266f5e5a874c3e63ca7082e9a2c38346d387aa516e2f23acaaf62979434819697b2695644883ce07bbfd867

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\vcruntime140_1.dll

MD5 7667b0883de4667ec87c3b75bed84d84
SHA1 e6f6df83e813ed8252614a46a5892c4856df1f58
SHA256 04e7ccbdcad7cbaf0ed28692fb08eab832c38aad9071749037ee7a58f45e9d7d
SHA512 968cbaafe416a9e398c5bfd8c5825fa813462ae207d17072c035f916742517edc42349a72ab6795199d34ccece259d5f2f63587cfaeb0026c0667632b05c5c74

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\vcruntime140.dll

MD5 11d9ac94e8cb17bd23dea89f8e757f18
SHA1 d4fb80a512486821ad320c4fd67abcae63005158
SHA256 e1d6f78a72836ea120bd27a33ae89cbdc3f3ca7d9d0231aaa3aac91996d2fa4e
SHA512 aa6afd6bea27f554e3646152d8c4f96f7bcaaa4933f8b7c04346e410f93f23cfa6d29362fd5d51ccbb8b6223e094cd89e351f072ad0517553703f5bf9de28778

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\vccorlib140.dll

MD5 7ef7eab654df53e087ac4703c9ea0b16
SHA1 743dc76d168326b60f09347945fe1342a6effc4c
SHA256 13e568fdcde1b7b7f2d1c97a474bdb8858f5ab761157f0fea7201ccecf84b9b8
SHA512 0b860f10c03acb3866e82fd6044c29d63a2c6a1d5f6628f3d31f1cd1e44d7144e3660df3446b7a0b76b7811b261675e5aa39fb27efeec060d287fde3e630edd2

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\avcodec-60.dll

MD5 5c9a91c44c5646c0d7d2ee4cf990cb5f
SHA1 65c34751b36fab3d4bdf6e79e34d1e9ad50c3291
SHA256 639f445c807dfef8a42a5e1bc0b1a19f82fcf2523b46820c60465bd47d8e47a5
SHA512 11f227a0431451e15426e5fd34fcdb69096f50d589762e2f17ff834b32f70d5305c5e707eb61efe07740f2f001405c905a7ebaf5b0e91b4b040a8b14062ede3d

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\avformat-60.dll

MD5 aaf5e285e8e8ed6a6e428b52728ed18e
SHA1 89794b8e834a617724f24aa18de745f413221045
SHA256 17e49a141502a26655cb3adec68c45ea19491e713eea13b1c3c35e458e77cc1d
SHA512 67cb2a03ab2740ed4f10955be1c2b7025f5e16e1eff7814fa6176458cc676dc892dc4b6d53ab0ac94be1c6176916f29b49d9dd3e1dd8e08c002d968c90eaf051

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\avutil-58.dll

MD5 203009102eef773a714cf83515723b4f
SHA1 7d3a4941e2ccc42e9d313a5ec2f1f7bad65c1a61
SHA256 a8da1bcec215e8b002c4f8da2ddbc340d93937c93c480cd30d42b1d506f77a7c
SHA512 919b8badcdb3e1a78b5a96ec81dcacdf5cc9b76bca53d27dc7916700cc1e77e416642338d456345a617118bacc6913fa62bfb43c8937048ae346c1d295b5d8b7

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\imageformats\qsvg.dll

MD5 b90e88e9952dc0a930895feab50348c0
SHA1 768a2797e6d0732faf54ba3994a804374dc9bf98
SHA256 f04ec129d462e1bbf3fa4b8fefacab7fdaceafd4a2ecfc50a677e8c85f7238ea
SHA512 3d573d87bab03edf59dad9c30381e1f6da140c016967cfec801ae335cd6eb4d8bc169c03602d457974ce1d61667c13973f7c6ff57881c7ef416b20ece7039f15

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\imageformats\qjpeg.dll

MD5 85089a44f0a801bf0df3e529d5dfdfe0
SHA1 9eaf3133ee6e4f504092bb67ab86241b5734cbc7
SHA256 ed785d7a87abc60ef8e9df6fb9a68eeea65f354a6959fdaecd325e56182af7de
SHA512 f95542b9357a911dcbbade0545f4121847c5bf64fc7fd01592bef7faa97b9a24af0ccb345893d14462a0bc32d139cac84849ce12ff02578f739041ada2001adc

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\imageformats\qgif.dll

MD5 cda2aa5f7792f7f6989fbfb976c76107
SHA1 6f1f2a75b11689adb68175d2b382e9cdd435d395
SHA256 4db6e6109b1771f966deba62abdbb80300fb7d154266a2fa8c77e2fa6d4abcb0
SHA512 0068f8ba909533b2d876e80882a0ad10bc8323afdce405fc273b2c8dcae5f34be76bb2c04ed816c136c8dedb513356af0cd92d0cd832b066ef4c26f3149e138e

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\BlueStacksAppplayerWeb.exe

MD5 33f277e986149e4b3cb590e052c4904e
SHA1 00d90936afc6183b612d03a3ec12db2bf4b0c8b0
SHA256 a753fb439c724ccfc00a0d5218ba540ed13e287fbaefa55017d2a96c6b616c29
SHA512 7aa2f723d3c042d849ac771c190f2c06de532a8f263eb0ba3468f0594a1dd8c58ba545b58a77f611d1c4feb519138dab455dd47dcf483907660089c8f4c82546

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 aed791997b4f0efa09394b86e4f06d2f
SHA1 f61473a85b4c79bab62cee3ed4e39c615ac61b10
SHA256 5868fabeae22c760f4f4d16309f95392a6981979f30a5e08c08357c43331357b
SHA512 39900985bb072b67fcb37db2825d7d63ee52cc24bc69d9325709336f959313ee78d8d1429e3f643b1548cd5a72f8bc80f99b4f030956dea5aecf6e991c6f01c2

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\multimedia\ffmpegmediaplugin.dll

MD5 200a2431241ea2b1bebf61d1c242bbf6
SHA1 80a6e9298c6ce3af44d7f829d5359534979de266
SHA256 5b8b003a86e49e3c4d1c750c940c6620fe6d8f0c2cb4e35b01eebf5899c958ff
SHA512 b4ce3565d780a8201a7f01f74cc830e577a026d1002f60c9de28a13491160213dc76831a80265539c8148044db92f9e4fa76b77f86fa82d0e84c93a3b09f5cac

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\multimedia\windowsmediaplugin.dll

MD5 ecbfa8c49ca2fa398553fb71dbc3f2f0
SHA1 c20cf6528683d7d85d2498bdcb99816466b92c33
SHA256 d1ac17c7c60869dd6c974a443084e7b5956e8d3d15b36327d9ded665118577cd
SHA512 8f1604ea33b8a6363af531a4b8ce4ce8564a4e18e9c796f9a311181ab970aaa8339c286e924671b69b06fddcbd5580f40faa6f63b21e91124694fcf422b929d4

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\platforms\qwindows.dll

MD5 b3c0fdf5e0c90b2b11ea47ac30d00dcb
SHA1 f0e77ea6359b825483807c4791cc802afe584839
SHA256 82886475a18ea367f9d409946c8d1ad99a6d926e20a40a6e2ff8edbff0dd3b4b
SHA512 70815fbdd030c0b174b186bb59ccb2705c4a9d5e04621c24f9c1e6908d0e223e7f5a3284c874ba9c3a34be92779ca3480eb6cfede5f4e2e40fbae59fb00432b0

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Qt5Compat\GraphicalEffects\qtgraphicaleffectsplugin.dll

MD5 40a9f3952037a83b01bfed728be9b2de
SHA1 61c643498ff17937e3e42925733220e88e207551
SHA256 34e10130fb528670c01c03c3ab9e1ae7171df0de477211a050e797bf9b0eaf2f
SHA512 76d8b87dbb1ef249f9b46ccc57014a8d88b29c9603d2502993c30bfc8d394bfaa4caa2b7e1bc05de28ce65a1e82aa71e3ee493426b929ca1218f0d6cc9e77e66

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Qt5Compat\GraphicalEffects\qmldir

MD5 dff2761c6a369bb68fb64757f2ce7a1b
SHA1 1b8f6975a6ace9a806aa332af0f90a92d4cd3b38
SHA256 746e523c5ab620100ae9331b0736a7b76013b432982c9aa68c10cf67fba0aa89
SHA512 fae63c67b220913fc81f385e9de05f55377eb3bbc1ca3c5d3f51a2aef05532631c1c9d34013eda3a4bd88b98cb86d5e5f78ebde6ed48f0737a16b670daf202c2

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Qt5Compat\GraphicalEffects\private\qtgraphicaleffectsprivateplugin.dll

MD5 329586d78bd77e76e91c50602fd2c956
SHA1 0a9aa198a6b1cb7dae7dc6d9faf8242f4e1acd7f
SHA256 19922327ad13710715304f6734ada287f6ca3fcd5921e27d5daa155381d03cb6
SHA512 f99747692ca92a1e5df9367d77ff20164e81fd0a3a986868555f935667bcffe290374a4b90c22a0cff6fb4e56e5d30da7a717f1e41d91fd66f94cdae7e9023df

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Qt5Compat\GraphicalEffects\private\qmldir

MD5 f1a067104d9bd191b0f3d848a0fa6d64
SHA1 53b15433f57c61c540c493963aff6a77f9fdff45
SHA256 bb9481e3e26069623c4dfaa9cb9c415529d084edd67edda1595854421bfac5ce
SHA512 71ec428d3ba43ea5c544f25dea40e58cc3f8605b6a15ea4312427003227637a99e74cb0e8f04a4a95a726026a65c2c02a31c1204db00dfac259298b3cf91b381

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Qt\labs\platform\qtlabsplatformplugin.dll

MD5 5995705b62f1ca954f74b0a59dcc99d5
SHA1 342077d1b46d5bba36e4f0333dd7258f55ade651
SHA256 8df3e0528be697ca08e5c82cb2e77131bacdc8f2ed9324d14a3ce7fb8d2c7b25
SHA512 5d391cfaa898a0501f54b5a6248b111f63950731427944d4d40341e4c0552692e8178297bc31e63fab4106d30099defa50785565eba01e23bee8215b0fe7f493

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Qt\labs\platform\qmldir

MD5 e49a668b90132546b4d746fde6428b49
SHA1 46870297a9a52118a50b846db083215b3233b2a7
SHA256 a56a9f3e36f099d7ecdc2d0f12bb1e4bca34f0c9b6218850a8dc676c29280e83
SHA512 1da70221873392cf25856a76f2810a0290c4ffd490cae22bc8183a3b165f645a10a2e47eacf373ff34bd1f4ec7d9352fbb814e52bc84c1bb514bc905c39134cf

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Qt6Core.dll

MD5 b5fdc51aaabe8c0f1b611e003817b3e0
SHA1 e856cfb754a1f753c85f10e3e51914b76c916f5c
SHA256 8a1af6b5ea341ef0d01573a9005e5c68206cfef6853b5584e8a737c26c9d9ee7
SHA512 b9d9973d34087dad86a0b6fdaa0a8ffcb1261c73782459cdd16675001bea9333039e9a75da98c4f2f24891931fd4ce7dfdb090dfe046d47ece6b5ada99368afd

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Qt6Gui.dll

MD5 817b182e009f388672445e69144f8543
SHA1 a66cf9f9909bc2c4306dd7a6382965eedebbcde1
SHA256 cfce665b7c477ebff815fb27a9b55d0b629183c0cecb5282a87bad666d76daa8
SHA512 3e7ac5cf005a11d0d0e23084efce3256a342fa559c393f40bb81ced616898e03ebdf265fbbc855864d402665471010210d6ed12a2688f9fdb4383a0c659043b6

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Qt6Multimedia.dll

MD5 bdd2401c24e694769007d290744fa00b
SHA1 b1d5b2333a643fa3010fd4d1de8a403f6a42f033
SHA256 d65d749813c1778264115ebd03ecccd87628dd1432a03560f13b009330459306
SHA512 922ebff563f4c9a2c04526ae9b3d0eb63a4a3e2a60bb3843c08aeded55f6cce4dff247ddb70b44ff31de9c6e49fd9af78cbee45b4b05b2b8e6264fcb86ae134d

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Qt6MultimediaQuick.dll

MD5 b5a48a332e16e6728a2d26714c126c49
SHA1 5f6b55c7a2eb5afe58b5c09185d2ce1eb97e4518
SHA256 c87fa93fd57a6fb2f7d10e9c45ec09c9cbe1298ddd5f4d7458ff896e99b17b85
SHA512 4a5f92f87c6eeade882d088ef6c46cc93a57786fb740422806e6a603db4dadfc9ddd018829add5c59db40ed86a4d5d25c933d97b712cb2b757a32a7c8771037c

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Qt6Network.dll

MD5 794760c25a8de30dcb152808dd5b7416
SHA1 8a4fbca5e2a29e56e5d25db6912a23784fe1a644
SHA256 f6702966e341d9a2f1707df5833db984205b3717fb5ce3cd2a37383ac347905d
SHA512 7d03a3077644e394aaf0e9ebbb1dcb28c4394139a508006c4134891670541d599216a8fcc1e229debb84ddfd0c2248392510597e2fa1073675e01728a0d8dfd8

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Qt6OpenGL.dll

MD5 7e0773c305ab95833cb14884766fdad1
SHA1 566c5942e445e42ccda7766bbb2c7a5ec7219948
SHA256 5180dc9d9394d8c4de756d6e97e6f12e4f27639578124236589e08ba837f0d3f
SHA512 809599445c48b9fe486ad157891ba0459d446cc268374419f64650dbe2b11d3848d917811115aa11ad613761da9ff556a788a81cb2c5f390cf7150fd2fb75c39

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Qt6Positioning.dll

MD5 5918eade11bcca3d515081fa588d8483
SHA1 a83686f6612786a3749431a810b90cbbea6e4926
SHA256 ed4660c36afabf34e5ac18430c94ef82122e770c28a3f71b88a09fff0cbe7a69
SHA512 78167e577f241d0ebf2fdae86bf4d89410c36043ff8bfea7544942d779297434e738db5c8d8f928d13244515d9fbf3535c8e8adbe99d351bb95242cf9cf73bee

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Qt6Qml.dll

MD5 903ee7dcbc454a86d6eb9827ea627966
SHA1 2fd693ba9ea121e2055f12a966028f2264ce9275
SHA256 578afdb3822eac599b48f6e101a35d40744afcbdea8f35bf3c69b57004c8ad51
SHA512 042bdd2283578faeee87d8f338e47db5b138e0118de24fb4533c353e8a4c7f5d99c7dd6ff699a8d9da706dfc56e5d712d285e17e2088a0c56b531206cfef03ae

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Qt6QmlModels.dll

MD5 3d185167828e5b21ba37d2f7a366aa6c
SHA1 a865604239a8c960695512e494b6a876ba052720
SHA256 846d37da5d81570c08824fccc2a1fa7b10b40dc15bcb2a71b9da553b87680992
SHA512 8d41b405fe4c1881b2f6aed9a4d655ed9a3041a92b977ef7e48ab7f27af1e61f6b8c97b48946a15ba7ac3b99ef06186670d42bc9f0f68b7f8e02ae79e0de8f55

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Qt6QmlWorkerScript.dll

MD5 48f041709a6b31471d6eeaa090232d19
SHA1 feb934bde6bc8d4042e96b579b7b8a2b01af3679
SHA256 c52c62b7feb5491d2d914ae10478f3a0bfa3fb58cb75189932f5dd5ffad31b1a
SHA512 efd6169527836c8088d78741b2d813176ffd6050536187323d19e41ec1ee58eaf28ef51412665fab2425709955d046dce370f5d7613c64d2713e81111140482e

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Qt6Quick.dll

MD5 59511eaa8c0fcb1af74123efd644e849
SHA1 3538e0948e97f898745b0abd268ce15c97d00715
SHA256 5deee180c5947e3370cbde40ca5151367d8cf48879fdae1d748fb1ee995744f5
SHA512 e2373982457febcb021e9eff401df3092d9edad7134e87f2ee6d0717da2df8ca47d7d089279c396502235a9ec4cbe748ac53a6613ee088f1fbd0814e49f63bf0

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Qt6QuickControls2.dll

MD5 c6a5d1d04232d1f649ecec45b6a3f01b
SHA1 3a11301f621170b0aada088753f83b1c917edfbd
SHA256 3e8892f343a7850884d88935cf67c28a97e186271c34d33dda7e5d0c83ab22ea
SHA512 39ca3971179a6b11b1293d473f82cd22f8bbe0819773c96d9c952a42c93cff12e6050eab6b5b8b618c66ee93f72fa0862d271c1318e30c305e1a8cb828a2303a

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Qt6QuickControls2Basic.dll

MD5 0efd67dea0c545954384c802b361830a
SHA1 fbc6f799b9d048957dd58975a358f0c5706af5bb
SHA256 241f93951bd5354b645dc85db5fb4f886e7486f624bf007ba7d233a89e5e4f0e
SHA512 ede83a52bcc79014fc752360f2cc72d7c82cc2a4a3daf5764758b5a200c434cedeafa299012b4f47f84a38004f449493010faa7e5dfb734327041d42cdf2e0b7

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Qt6QuickDialogs2.dll

MD5 8edd41e58cc4203d53ff49d823afef39
SHA1 38dfd9301113737d4d6fe3444e048d1bf4dd3dc6
SHA256 bfb0dc7f2d715f203b19a0a39f16542f00892c7c7d2c9789d878f97b8e646b2d
SHA512 5f68ef40292ba9133d43b259fd1441813ec130b935fc6a664a892fda75fadef38cd332b4175dc038ff75e60b4285c4992c0e61f6267e2961a2e0b1dd32045932

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Qt6QuickControls2Impl.dll

MD5 cd9c82e899b96d90664d0fdbd3b9b328
SHA1 533d7cbd433d88aa815e530c1898d2436c5cf26e
SHA256 b1f431714c90b70c990378f4ed8d598f333125803a8f891b5f5d49d62f37045f
SHA512 539e7f6ba69be8d86187aca70af18e59104098a7979b2258e6a6b6459d3a40b34c70ea26af524d4961b0de3da6766ec672d36d6f8766b2c17758661e5d448b9b

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Qt6QuickControls2BasicStyleImpl.dll

MD5 8a6e9a37ba9e1b09c20db8e36ceca0b5
SHA1 fd2ab3d9e63dfdaaad1c5e0913e8b8988920fbd2
SHA256 e584ad5196ba39477c82b53c4494e2634f1d680662366e13e9d196974f4b09d9
SHA512 462e37a8d7f49f15c62c495e4bef728603b37e3d521637c04c1f009b55acfeeb9b3f782f43795ead5a280663f086018a2197b665d82bafc275b3617b17e9e1ff

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Qt6QuickDialogs2Utils.dll

MD5 0206f58a2b914da1ac21bec6858cd61b
SHA1 b0169cdba3e35229d29809e7da759b1fe198707f
SHA256 e54f5c10133e2b331c5da0095dbee0b3df4c0f29f2341db9d3878ff5a825209e
SHA512 98e390617a5cc898d45ab3cb204a9c9a688158487e1bf55f47f3e492d9a66edc9e47a99d4610c39834b2488d06a8c0edb634a703f0188293eec6094fcb77c9bb

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Qt6QuickDialogs2QuickImpl.dll

MD5 1fed3fe9d304c1083e54ea30b383635b
SHA1 aad2eb155460089e8d6d3cb00821bac8c5d00e7c
SHA256 2560952163e1de8d982e669dd271bde723e32b2c93de6721e3ac6174fee91cbf
SHA512 1121193477e8218e9aee2fdbdabf5b43f42f922b2af72143240e013268b6ba1fa4a42bb13099c7ba6e190715854798488706c44158408e2ebabc4c0983f7b099

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Qt6QuickShapes.dll

MD5 70b3be941970285ab6c5df7da09c7995
SHA1 9e9cf814123537cd6b4c2c78821d639457172e04
SHA256 96c7d04941ce1e2aa053756c24cf770eb21d5d87488d12e0e52ff1aa23f2120b
SHA512 6a0094d53fd076e45ab445435590e3c36243517d97e31b054180298d9873d67986554be182e07a4c87f7ec03346c567ee2288e12d0c8bf7f9ffa2bebe21983e5

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Qt6QuickLayouts.dll

MD5 8a386180bd4c11a96a1ff7b2a9b47320
SHA1 3a25f58ac2dd640469730045f77a1c8d36349c84
SHA256 ba807b732f8b380118a0dcab28aa75c2df3bbbe1952f0b14164430a7d348bf30
SHA512 6d0ccec63889f4d7b54aac8ed97e11b5ca2179ddc0174b0fdc111ef670497f349e81e4a5961abd1d4b260ad9cebd25a1ee2c5ad8dde7a9a06192c52152498e4c

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Qt6QuickTemplates2.dll

MD5 ac8c3b6ea0500c236b1f78f7084bfa2e
SHA1 3d93090b8d5b4023287fad1834413cf9ea838ae8
SHA256 9ce15041acffb2a9c2967cfc8144f4353f26b70113ee7e0f12ce582fb6cf4a74
SHA512 269d7fabf3dd5819402a0dd7fb2b7ac81abeb775ffaf4995f00acade78cfca81613d89476638c110898e9e1522ef3c2a477f410efc33860ccd6907b27e1dac4a

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Qt6RemoteObjects.dll

MD5 d1996fa4136cd8c2f643a3770ecf5f5c
SHA1 74cf4b91731a518ee3124ce649884a2757d9c615
SHA256 f3e3ae32eddd2290021c4e55ce3b519f2000d20e7e648102a1d0a3976e718e47
SHA512 a9f6af09fef0f94fe7cc50a2f98e28a8148d91dbbef081ca73011f8335bc9a746e74d55b7a94d879a10ce7a3cf50e69113a9296d29beb8f5366f5be8c9d788c4

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Qt6Svg.dll

MD5 3b75cf39102e5152a34bab94edf82167
SHA1 ff99d035fba6f8e20e7ea5fecaa3435dec919cde
SHA256 cc8fefc7bff06fe18e7994039b0943a26b3fed4d5c9b09845e464bad3adf4f66
SHA512 ff46d4a54e4b4c7915ee5172dc8e6b176039fc6c180cd49aba2308fd7143f49529f96471d0c7e7a0f9abf101600d4414a765fd0b9b7b80c5698918b1a62cefae

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Qt6WebChannelQuick.dll

MD5 ddfd4bea4e325844d083ca06be370a61
SHA1 85ac85fce3ed43db9cb8286b74a33e01b4b48b65
SHA256 e842737a7a88fd6e7822d85a93a8eb0b7873f09cf1c5ff7bef21b53d2c4dbf41
SHA512 e462089d9f01b93efb769bf75dc64fa8fb275aa3a37fe48e1a3d1bdd33a9f7ac9125f8fce538d39ec05f493a673611a69cc126d10e7e55212472d9a7c4c9e37d

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Qt6WebChannel.dll

MD5 e1c366b3a51c734adecc49be9a0142ba
SHA1 342d3d3f03f3b56135b0f59a6f2b5191e3900b20
SHA256 52653500fd113610125240f5d18b64c5373eb0b75c8fdcb2718eb68ba02acb70
SHA512 b84b4e3c1335277f8e94e297ea827cc1ea787a6d4508435b77d7c93aa093ee3aa81b2e6b6b1d87058acca4adbc42b3182e08db5d9ffebc4e683e70cec106dbfb

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Qt6WebEngineQuick.dll

MD5 97814a8961992936598f1b7683aca5cb
SHA1 6644cf3079595f1337116881e9cfcb2ef11c818f
SHA256 1585dda7eda1e6cca66d840257b23fc0b25b0f4b448b25c0896de790ec744cb4
SHA512 a6c2b88fca842a8aad3b3b1d878f50b90f573830009d0499248f3f1a38a8ceae42978cc106894855eda40708f09a215c77615960d06cdd1da634e280c94ea448

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Qt6WebEngineQuickDelegatesQml.dll

MD5 93c0440d85f375b171fd01c5b43ba85b
SHA1 f05aeb8c34aa2269a1622d1748c6702334774fef
SHA256 efabaf7879040b2ff01dc1db582f15ad1d28e04684eb67f3907e24c780c4e014
SHA512 b9b3c2af9678cd6610317fb7a64fdb2e1607980c515d213efc74851e8580301c9b9520bf6cc8a06d8abf8ceef47f169048dc7cf1bfd31ca268384c21752f4827

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Qt6WebSockets.dll

MD5 04cc26f549ab23a726f5625d773f659a
SHA1 66f7b72558335121d676fdb276e3679fe4b5da17
SHA256 d955e7ffdf0f3ebae045796a242949f851db07ddfac9cf50df45f601e04b0e57
SHA512 b3f8f4012f683444f09e3a7a48586143e3401e5d165c6455af4bebc04c6e01d92bc3255c3dbe3fcfad08f7b55f6badb3216b342854d1870951cb153ea50c5640

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Qt6Widgets.dll

MD5 c3241a2e538115dbaddf3a8c283c7966
SHA1 0833370c511d9e44d6a9fd44eab950a77e6908e1
SHA256 6a97350bbfe5518c5e41453062548f493014f8037a70645246549de33e6cfc17
SHA512 3ee01be6b0f3f112cf0f64ea3d446bc819f310a9fa23b96e6839d4a4c007a70603a7cf595c25c107f04a65110639b3d617094c1b0d1240dbae9e54ee42e6b148

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\Qt6Xml.dll

MD5 8169c439135d3453614e28466d0f3e8b
SHA1 14cfaba32e6f878e94ac2137852dae5dcc67e3b7
SHA256 fd6e3dfc8be003418f40aeedd90aef4296ce39aeac544a3f4c04bc86ba1b06f2
SHA512 6d2655020f76412a45adc3b6da7b0c5ea9e15031161f346ebb8b8875dd2356fbe0d66d9ef829292f5fe5bd6fb495e003413b4b6cefdd348188b8cb8892a66a34

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\QtQuick\Dialogs\quickimpl\qmldir

MD5 a732e1b574ca5ab3590b8c6d6de8b2a4
SHA1 0bfcf7f7af86f82b196446e0542c367f88023f24
SHA256 947b7856d7f3ac5e731045d2627973df06744aab3ff392248ef2eda5d42a6279
SHA512 9dccaf5a9258c8907d58c0d72c9ba315e32d4878d3d31168a58e3e5c4cad234d34d668f6979d57e9e47bb5c5fbed538f4e4f7009ca3c17f614f7367addbda4b5

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\QtQuick\Shapes\qmldir

MD5 29545ca5555980969d58494c03e810db
SHA1 b56a6150c8d39708e502b53d2c7535438aa02568
SHA256 de2dab12c07574207db93315ebf5bd6ec6656d1aa506df756328f73342b2a7f9
SHA512 6715f3b9f144ee65cb37cc200c1be14a827cc40b6fbc47e456a5ad04eeb751f69b1cdd8d4c3fb2a5ace30173c2d61b6633958e7b8753a2c6bd9c3d27275941fa

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\QtQuick\qtquick2plugin.dll

MD5 0c90675a28d95f6bb1050b69f6477de4
SHA1 bb8518a467430fc41322060361534ae73879f362
SHA256 e9f4fa73ea93efa6883c8256f74e4351c7cf808db721e0e1d49d4f5af97cdcac
SHA512 c338061443eca85503619b9b9e5397a480ad60b2478cfe3468db360c88d0d5f938fc577e5393d8dd4ae8c40c335000bda9a7fbe9490f112a5ed0d2346be0a605

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\QtQuick\qmldir

MD5 229c819d9d388357c948f58e96513964
SHA1 9580844569cb3de2d0f728695d9c83c6713d5c74
SHA256 137c386f9b2ba49fb3a3417b55096f6f1bd15a794a98613a862b490a6fe4fa79
SHA512 61fb9d95be728ea658b31b137216ca2db2a52ae4523ebac1f7bd7b20fdfde4442b6570b03c7defe9047a96905227cffd0160a6e3f42940e27ad58dbf3b3383ca

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\QtQuick\Layouts\qquicklayoutsplugin.dll

MD5 fe46bb3ebb124f1a49f3b057f53fc117
SHA1 c0b2d468629ab2f517d8bf91916b3d1361526a2b
SHA256 8b25efda99d9978b84c99fb5c63b423ebdbea40061611a835cbfde745e6892f3
SHA512 74d428d7737f6d0ff723c92ef680f9807c8b5eafbc472a3ba021217e0d61e74847930c7a46e598b39bd8e792c205988da51b1776076a2be598dfe1d316798863

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\QtQuick\Layouts\qmldir

MD5 59476cc514bb3c0e6d94b0450fde47bf
SHA1 ceddc40c1c97d5f88831e76460afb127b808fdde
SHA256 be7bc0d0defd3037fd4493987ade323210f191bad527255eb32d1df15b1b8edf
SHA512 3331f35f7c6c6e278192017b73ead6802ff1c394111c82c061120cfc7cffa365c407328a5b31d239f847fd3567ecc2afdb3f005062ab948c504bbbae21a381c9

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\QtQuick\Dialogs\quickimpl\qtquickdialogs2quickimplplugin.dll

MD5 abfd86b2b24ad23f3aab3edd952ab053
SHA1 3f82656bff4f357ea40787d43f9610c9e4a2337d
SHA256 c5ee749b4f347a1e00b1f912ebf5e4a4e6c34ffcb8877b5db556742b0c46eedb
SHA512 9768741702df37fb2bccade5d0118c114cd6440bff1bd7e76801a51c34c86b82e681cb4b195cbfceb4cb2936c81eed0b40b14507084ffbbe653b1e0f68ee27e6

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\QtQuick\Dialogs\qtquickdialogsplugin.dll

MD5 3d45a03c422d0604517d735180f32b65
SHA1 cdd53042670df5cbd2a94b595553658ce21ab2bd
SHA256 00edeaf6b5447c16654d1e8f010d882d909aa2766afe44f4b6e38b260a9928e8
SHA512 54e288db318376cbf782890bf46b51160122e69fe4a6a61cd6ca42b614c37ca74d38f85f24717ac78efafb6ee14d844a2240dd94a41597c09875d7d651ee3e6a

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\QtWebSockets\qmldir

MD5 b37b47dc81d0ddd5733d3c3df54a0ad4
SHA1 de3b51b3fe652e502ee44061552affcbfe6448c7
SHA256 4ee99fa9bbf2dc0c4526df9f10c54f7833fb503b508e6b2cccbe573b422128d8
SHA512 f3111cffb73bb28dc43afd5cb5ca6ba2ce68620ec363caeb7b86275def0f06236103f2d1753c731166d222918b0fb059b73fd5d6298a1a078b91a5ac038debb9

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\QtWebEngine\qtwebenginequickplugin.dll

MD5 fcc2017d74e088cbac65104c90474063
SHA1 2b4d32cb48be3cad1f2bef4c6786065f5fd0b733
SHA256 cdd3e9f9c1dc7cdd1f20b0d932064f69081e84aa32f1061322dd84d4136ffec5
SHA512 83a53d4cf8102131e2d400daeebe700da4964d80262848a72070931ed8046f2831f2bf9d37a53917ab36d25a31efc7f96e19a9495735d9985d32dee4a7afbbb0

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\QtWebEngine\qmldir

MD5 305905ee8126ed39d5f4b5312aa2c99d
SHA1 46a27e297e6fc3846f64d23b6b54512c70ebe1cf
SHA256 9ce4a1ac66b6a7dc6950b0abf7040117c107aecf0432ede1d015d45a8883bbc3
SHA512 2b2c9a56f77f5581ec3758622ae47adf28f790a68da61cb1759af3ba2c6c1906940d2cc9707b2ab4a2b564096dd144eb4eb453a864e36600a7ff8457be13becd

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\QtWebChannel\webchannelquickplugin.dll

MD5 42d0cc66b8adffd8db1c44d4c5ebc188
SHA1 092487413fe9e4cc7d65b7fa7e7540a4f5761055
SHA256 89e99655ed1de0d8daa34f7fd550509f0e64795ddbe4c866c66715adbdec97e0
SHA512 fdba365a2dbf7dc34bc67313ead8ed406f98412d87cec2f2c95656861c61e606929c15a834a9d8b8e339b11fb8db2deeec617a82bb4991b3f3cae268ac6b0786

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\QtWebChannel\qmldir

MD5 e0e05541afe2a4120f98b955aa43f663
SHA1 8ca6194e64beef2352bd3df18770eb7cc478744a
SHA256 0d728adee8ed1308524a8b3e5234781d8207a15dd6c738b74e62246f9679d21d
SHA512 0333def621780792272b2c9af8ffab76ada8ebbb4733ecdcc6353cbceea94b83b25c861f424b9d5e37d4d63f198da76f58ed6d77196ba29483aaf1dcee786a71

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\QtQuick\Window\quickwindowplugin.dll

MD5 9703533f14281d6ddb3635ab0fac97f7
SHA1 bc26999f82b97e56aef84fff6b2adacfeccbfb49
SHA256 9aea4a0ab67426a0ca989e62e8a5cd8290cc169fedea5dc6912be3d32144ab0d
SHA512 3a4472f522924f3e9a930438e514d034141732d9c0df76961dfc8ff4d8059ddd89fb89ab85bfabd5ce7493b15d3ecd4ee4b61110be4ce9cc011aac1d7612c938

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\QtQuick\Window\qmldir

MD5 94ebe16c3ede17a27d79716cf1b00d3c
SHA1 34f50446b26c05a86018c2fe587d0cecdeb7db29
SHA256 cf518c3574e25f91acaec7ad8831e28c18fccfe15411672ea56809b2eb94077c
SHA512 f19b2326600b902bb124a8c5b07d70ac2e6b6f65a02be9bf7f95b7641e9c44ca3faaf3a409b5e47b4203fcd1fa62eb49ca4f09eee0e95c7806428e58971ade6a

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\QtWebSockets\qmlwebsocketsplugin.dll

MD5 6162f3f09fc11878e4850c1c0ca57d06
SHA1 c454f1985b65b8ff64ff133c559ed9528c8cbbc1
SHA256 0935f9f612bfd0fc905e86535193663cffeee560a8af83433bd67cd7291eed1f
SHA512 7b5ffa2d36938585565954b564abcabd15ea3dae56495b199f09d51bd92421e2f5da26e5e99e6a79dc24b5ab73a155fedc147a347aa4eec77a0d88114ae74f73

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\QtQuick\Templates\qtquicktemplates2plugin.dll

MD5 d804c42ee7783da45affec5016be7546
SHA1 7128d899253257f14829ca2f28fb9b7606f38d15
SHA256 e931944d5eb53bd373d2b4dc9e2562951a44e49c40e177670aea7735f3a3497e
SHA512 0508477329365f2bc49176d358df4c5718eeab85ccdd74a928e2f8df23eb75203115980c6f3b9ae948cc3b9f3cf434b27784933ba36f89f43cee9ea77cec4a02

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\QtQuick\Templates\qmldir

MD5 d6238b74f2a445964a7f223b96bc6442
SHA1 a7fbbe96872ca73d293470ff50f4a0a7278c10a7
SHA256 60e185a2a878267d15f2b54f6088e1bcb3c7e66b67ac016b121b9e79b305a9ac
SHA512 5cbe2966e26f6ec1227fc36e3baa363fc9997e5e2322100d8f7dcb0faf520d18c210568a7682b85156d5d73c90465c4934e557de08d82a1ca95989eca1257d2e

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\QtQuick\Shapes\qmlshapesplugin.dll

MD5 cf18f633aff01189246c1a2b257bd8e4
SHA1 e782db1781c57ebcae62b01d594ecc81022e6379
SHA256 6be600ee9189a6c84e35eae24e91534ee5eecfdae33797e15472c6ffc8ef039c
SHA512 78473cc3e4d2cde99759988e47d4387b44a5b34245d59d0b6f2dd9206f96ccf7aa2f06d841c546fcfadf239fe0a6d1cc8d775f74797328bc4bdf2746345b43a5

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\QtQuick\Dialogs\qmldir

MD5 82ef8bdd05ae26b81ed33e11d06e28d7
SHA1 18fc845d32c1deca96d97d47a5a6900ab7f99747
SHA256 6b547b8e506fd70e034967fa4678368a515dc8e7cdbbdd0fd2b1f263b28fe46c
SHA512 4541c30ecd7178dd6c238a99eb3f0a9fa46029e2366ae3eb1ea9684619038832534e5a4b0658973d47597ae7bbd6e344c8cee2d74e1126c2657a6be8048cb393

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\QtQuick\Controls\qtquickcontrols2plugin.dll

MD5 603a83e1eb93e0b4e1c7fe1b768fd105
SHA1 3f5d29c06475ec16b7436a121fc23ecd861f87e8
SHA256 932a269dd90d509b03f32abdd2d2008db697f4750df47bc25eb6b02e965f836d
SHA512 0f39d3091eb96348222a935f567509c7f5edfda74f7481453386c3e7053405517296d28cd264872fd1a50951d3bd417b4a40df24dfcd425d4077a3a78d4a0080

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\QtQuick\Controls\qmldir

MD5 a098009511c5c0a59833180919453a5c
SHA1 90ecb87885d6fd7aa15cafd2c8d67a68c4d43f25
SHA256 9fd5547623ce4b95247351517534bc5b4b29d43f36f57b7f3378b24acb58ef0f
SHA512 63ce67b9f9285453f5263a6b1ed612b9434c804cd0097ce56ca31448a45ddb7befc592f2901b83e66211b33cea7ea46635d9213277eaeec8bfd683ab65e62c8d

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\QtQuick\Controls\impl\qtquickcontrols2implplugin.dll

MD5 42cbd88fe9d6570f24b4b517e5f30694
SHA1 f7109c9ca08efbd9040d983b3f7b1f6bb6c4b1d0
SHA256 0736118554729f3a01528082c106c0717f92e728dd93b4f9761e7d39b050d64d
SHA512 0f6e8f4c1b1d23197608d1a35827665454e3cc439b2ad80c6b358a8238ffbe2128b5196635e2f78f0ffb0302958c1b7a54eb0e8d5309a91c1ba00ad123093101

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\QtQuick\Controls\impl\qmldir

MD5 10b88077e9248124cc7eb9a17b5d6906
SHA1 a519e508367c7e7002fa17fbf1be61a0c7242e5a
SHA256 d968aed9b217c5a95b8a0d3d3f48635302696b9b2f5f7e73ab16e8be6a9fc66b
SHA512 90c735b12bccfc14c8583450a7df0e0a8a0d56173e2ffcb377aaedf18e6d9960b5b52ad53494da8a53c69420175b56766a0cca29b096dcd2918c533f7cda5ab6

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\QtQuick\Controls\Basic\qtquickcontrols2basicstyleplugin.dll

MD5 bbe4d4b6f282dcdf020edea17fa11234
SHA1 ea871074fb5abff1baa4087f1aaa6409f6a5f10f
SHA256 4907a1cd4ad812637b1c5f7359b12f1219c462962eadce8e6f8472fbea628104
SHA512 50ad4997a84da6c272c79d3dc820d83438d83512f5c35c8250e319577863903f4a8eb4a2e995b6c3d023c15aa5aa147f8345ebf573dd5083746bc25521a57524

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\QtQuick\Controls\Basic\qmldir

MD5 3329231d19c34ec08997356bd2df27a2
SHA1 9f7214d9f3b15263ee2fee5568a9940b3b023a06
SHA256 142346c196c2b2674fd0f0e7f8c1fa23fb9964bce47c02d5029041d6a9248c69
SHA512 ae9a06615a5037a46eaaca120b4ccb176466d8aa0472fefea59dfcd7d83e5d05a1773f941981f41d268d8fafa421cb0f1b21bbb28e3918a3f548603a1a939c67

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\QtQuick\Controls\Basic\impl\qtquickcontrols2basicstyleimplplugin.dll

MD5 5bf2a01e2dd7ade5616ca79170a8d23f
SHA1 cee7440be25c58c73600a50cb11bb6fac7136a61
SHA256 554e784f16b2150058eaf4cd3003c018e980b4fc5cf93ce1e93f3eb14fbb74c9
SHA512 e42aea99eb87ea4a2bdd815c95c53b91b80a0df5603d7786e0d9b1c3fb0031a5670574f9360f17c5fe35582118e73595f4a6a5f2b830dcce32a6b8aeeb0329dd

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\QtQuick\Controls\Basic\impl\qmldir

MD5 d6b02bd0093c8bb00347b387e01be80c
SHA1 06ad73d6ebf391957932c537f8b933ebc82d1bae
SHA256 89daa248ee0544aa92530173d3e969d4c5b05ac2122d836173cc50d069805cc8
SHA512 3b0813529bf0b1fa3541798a1c1b8a738f13d0a3f769b0d49aa242aca18b5ba8bd3e3e2746ab7ac0d5cd680d916777814fdda5420bd31bdeed270be8e4428fe7

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\QtQml\WorkerScript\workerscriptplugin.dll

MD5 9db78074c4e988c40441b7f318d31a29
SHA1 b507f2a12d6698cc4acccc14423f8adcf6da5dae
SHA256 e478700ec9dd0f1de166f43eaa408a38b9bc2f8b994a80846649ff934d8c0e07
SHA512 917bc4a6f347b81e0b0bab1b6a9782d0a021771b98684cd9f9c2abedf155491006a01e3d56b5265a01ee7aea17965bdcee0ba290dcf92e782937aa816d2b041a

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\QtQml\WorkerScript\qmldir

MD5 2d775cb02542905e995fd826dda7c026
SHA1 64ecb2070786b0d83f8f01b4f0fc8b44fe0a191a
SHA256 516dd5663b9e122cdbb2d212509724ccbb826b0774b1eb08cb96c5f82fd38ac3
SHA512 3b2aa32bac27b3b384a518926d4e26d5655a4434a907b327cecd61a0c25ac5931f81fcc49d16d0b25cfc00f98d346bd269310829c6064a54df2664c60f43b718

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\QtQml\qmlmetaplugin.dll

MD5 852714229daa6a278feb0d01f8e34375
SHA1 92e768efc89624434a610a7201721e74db49f0b5
SHA256 c02b6e8fa0a1b93c50096f56218d38e0d15099c7e1b58ddb31b24951d3e1bcb0
SHA512 81152863a5758f73ef72f852e4435d5b147fc130805272a676dfe3fa415eddffeea9193ae70e6834513d0bcf09cf2881bccf18a98404f27bb3b84a1b466d49f9

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\QtQml\qmldir

MD5 d23134f3e810ba1311f1526c8e784685
SHA1 409d8050b045777b22529a814be8fc7daddda2db
SHA256 872dd0ad9c23701f8e551ca98f6b15b1551b3af0d4fafd2ceca61b328d45df60
SHA512 3b113ace75caee2268f196aef8c636482b3ec84de6055fccda50eb518bec03f9b4db2f4930177ee3d4e6ac896069a3bf27d596d9c45475428c2fcdb1e3f3afd8

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\QtMultimedia\quickmultimediaplugin.dll

MD5 006ce437705bb2b7b296dec8d971fe51
SHA1 e0f334a24c8710c044f5752b8d958885a49dbac4
SHA256 46af14e6e6873f6c878ee68def05934a30d1ae4328bdf1904cba00d354322c5d
SHA512 a0ea63d3bbc4f072449d9a5390f8a4e2394ec927ba390084c786446a72c8ba4cce94f50caa910a2ebca8b70d8ed5148542b08aac746db2f18f2902c4b2ddfcb2

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\QtMultimedia\qmldir

MD5 b7d5c74f4485b2550ad065e16252976a
SHA1 af8c4cf1a294e7efa6bffb00bf3a66ed9750f18c
SHA256 2a0f427a8594e31ed6b3fbc1b2242856976a02131cddd8c59b23858dd3d67cf5
SHA512 25581e90656d77023d91e2ec5797b6290e805caec2996ec58be98c618e2284c3657be93f5cc18dfabc6ecf662279a1854be08f888805b217628172ad040c47f7

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\resources\icudtl.dat

MD5 e0f1ad85c0933ecce2e003a2c59ae726
SHA1 a8539fc5a233558edfa264a34f7af6187c3f0d4f
SHA256 f5170aa2b388d23bebf98784dd488a9bcb741470384a6a9a8d7a2638d768defb
SHA512 714ed5ae44dfa4812081b8de42401197c235a4fa05206597f4c7b4170dd37e8360cc75d176399b735c9aec200f5b7d5c81c07b9ab58cbca8dc08861c6814fb28

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\resources\qtwebengine_resources.pak

MD5 f249e5dd0eaf7ffbcc2843fccce85ef2
SHA1 ab7449a0d3fc68daa29f2cce08263fc290c4b046
SHA256 7e9c3c381c6a1bf31b4fc75c68a9c2f30ca34d9999291ada1d3eaf0b79618d4a
SHA512 be88d39e01828788e5a8b8c436cfc73d2863debf7251b92323d2ca3c02a8737d8edf1c70d24b98a9b11388cb3650129ed46e8134ce3b168a8564e37c3c67e215

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\resources\qtwebengine_resources_200p.pak

MD5 09da93dd890313c6051e3eb31cab562e
SHA1 ca4281451381360393c0abac1029aa4c632b5ce1
SHA256 70418cc40f2078d59972bfd5d182b1169beceec2a828a5b81cf6e77933adf6f4
SHA512 ad00145b99f09ba25ef886ba89e3339c52d09c8080d0d9cf33707f23091e9bc8fde035ba99be291303f727b99cfd798ec3c77644e9ff46c0c6bf64c8d3e91856

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\resources\v8_context_snapshot.bin

MD5 38a09bcf4160f5b345942462b63c1c7e
SHA1 c4de02fecac708d94096d6e3e16cfac3472781e0
SHA256 3202f8ca18e49da8be573afdfe3ada8b98b351f8c5f1ec08ee92e8f00cd8d9b2
SHA512 1dfc511b0b387db1876989d4faa74bdcfde66714af76379bf768f71252874a6743bb803035a137f87c530d120aa180009215e8ce1020dafbc6f531381e891995

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\resources\qtwebengine_resources_100p.pak

MD5 698db9c6537b8d9dec4869a11355af2a
SHA1 0d2450a12e0b3405ae30b3c7f5ad233fd6cbbef2
SHA256 c471280e5c2b50d0089c069954c84b121a70a7c50a2865b061e6c5eda329e634
SHA512 deb7faffb6e3c28616e200d10e18707df229a649c9d16e6db8921c3eec7381aeb977e1308dbd07bbf2c2a839b19de25bb6f8a9ba9d094f1243c3aa2d2ebb3f16

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\swresample-4.dll

MD5 7eeba1942a05fe865cf997fc90430093
SHA1 b63c26c162b77f80bff2fad565d07b34c8051310
SHA256 baa987629e36f324a77a8922ddbdea7652a3ae8b5eb55a0f03b475facdda8293
SHA512 e466a02df89336002f2f2cabdc1b9f208c150702c5e1b1679d5012fa791631b99443e25867940e5d60e812c64874a5fb2847716e6712ea6743b6ff8a36cb8ea6

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\tls\qcertonlybackend.dll

MD5 5240566cd1d97774f03c319606396659
SHA1 7715e321e912f413561e0e3e5f6316ba1ea77525
SHA256 9039e7af3cc64ff8d653b71f8bf9a90549ef5f35de6beed23cab336f4e3102fc
SHA512 4958b92c632253fd18c2816a3dc288285e92a96a265766679881efac284a8c49f9d49ad5596206ec374506e4341a9e10f5d66354fc8120f29375ed0feffcfb2e

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\tls\qopensslbackend.dll

MD5 2ce461340c36cefe018d18bcfa0bc943
SHA1 f4116728002c0d1e1667af27b359ac0d90fdf356
SHA256 d78806f6c92310172e095240b112bc966c60c7a34eaaf3aac8497ba31e6cd95a
SHA512 ca0822cec7e6f49a2d9f8ba889fe28d5309de4b6f25da585f1fb4d10420a815d2817f3e39cd82207fbe68e755ee98a9700c6053d5950e3442d865fe0eb487893

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\bg.pak

MD5 fcae54e530f1c0b4cab64328c89e4128
SHA1 bc54613a70daac0cb08dc938ba830a3332bf5656
SHA256 bb6107701d4184539f914a33634ae0300d0a9e2deae979b88a3ece53605c5179
SHA512 00b32d37822a1bb74a8e7fa22157b5034655c4be523df9060961bc81637b554fa78b3033b51253c2be9312e0caf3a0e30d8794d3593e038b24f8adac87f64322

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\bn.pak

MD5 e5bfbba7a15e8d989257ab6f4cc65550
SHA1 40726da19598b58271c650311039ab6f7d7f2bb1
SHA256 9d9bd667d75539698c1e1febc4f0d9f37accca2cd0813314fde01df8d130a20a
SHA512 7b26b407d51d27c73e3337e8430ecd5e53f07293edbd3865774f0cd76efd615d4d699bfce6c05ab3d44ecab6fae13c80359f2ea94a08ffc1d822d10033b82ca3

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\ar.pak

MD5 3368204e7ff3e30e61651b6872f7a6b7
SHA1 ef64940a8b0d955e4f2c441a967166fa55064137
SHA256 65266af2212453cc9cab96296a516070375924119ec55754f41c8053af3d8048
SHA512 2d0b4948e191a22837ef2dce2db59ccc12aa111ec378de6efa7281e875e98c9c160adb94b4b373e16744b65aad5c85eb1fef0fc7a12d2cb49ddcabdc95dc6d9d

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\am.pak

MD5 bc4c700b7c415ad4c92e3bef4ae7c4a8
SHA1 345931d353f78872bd3b516e2252acfd72c534da
SHA256 ee3bcc0a396a18e14e6ac1b4f2310cd6118c7fa9a317e67e273d5e2b8ca01d6d
SHA512 fd0ca4632c6a7c166c226c8f84f3a39448b3e21e7dc1404ba912470eaaafe2c891e435d5b2c3347a7017aa5bf34fb45cb74abaf1bcb8a2a02946681ec49070fc

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\tls\qschannelbackend.dll

MD5 a79fdae77d68c47599a2501224a1bb1a
SHA1 11d3bf27e0e54eab9c8cbba8639e37fd6c2cf647
SHA256 8a25fc4b8d29ee934fac2a26f85f98b82eaa4eb5b0ea924a98bfe597cbe7cd71
SHA512 5c2941da9cbe7973abe90d25b4e5e56a0bf94d67d43c0d5652859f032146461f9db5b0de5580e97abe0de067aa82bf213ae32b98c90ad1ea3cf25d5bef0743b5

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\swscale-7.dll

MD5 60ee6404315f42cfd111ffda6d30a1a4
SHA1 14aafa75e18202af1a4bf23d526d1738f96c4156
SHA256 331c66b7974abbd85639c63e9ebf63c62858d5b1d8a47ba52c7bc10715aeebe0
SHA512 8a4d858ef96a9cbe311bda94492d6759460f93751a79dfae826fb6b63748626134b11e3f30a37e19b6fff1567556d6a3f51d22211885bfad433f8a4451d2abea

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\ca.pak

MD5 dd10c97f6c8153faec769dec63aeed67
SHA1 37fff3ede19be23bc01c4d297372ec2a4f4338bf
SHA256 beec5dbddc73c0d80faa6677298f002c52dad4991deb5f533da8f07cef775be2
SHA512 a387606c54404e2b07db9541d23124a3d8ccdfe6e3f6f27492f5bcaa0fb5be4de59b50b3fb288c5261d02b719e4ec05ec767e53469ae96e6d943a3bf2920f412

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\cs.pak

MD5 2fa44a92c2e2304f8180f703e2363d2c
SHA1 73ffa3b6999acba487a76b77e26d52d10a4ff69b
SHA256 6e6e158da321c3914399aabad1bb68f43d907e21c5568c182ac12539ed308672
SHA512 3377284037652bcd9a7cd1b9397e0c7acf084c42c7ef5170cdd92c8e1eb2005b6cdd818abe6b9f24c1cea2c10531c1571c351f331da42d68320267197b1d21d1

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\de.pak

MD5 ef63e015c168179a884821c9db90bfe4
SHA1 2dcab43076d76cd723e6d01e99fc6ac30271eb99
SHA256 4fd6c23374b3bb860a705ab343bea2905cda824953cf2729f2da7c86ef314f99
SHA512 de21ce56b1f47fb42b671167265b8d493f6d0d27cde4bd97e1fe6d86f26ca07208a864b47b0d1ec7a3b2163447791c986e71fda255b1702f2f0f6bc7f50235f8

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\da.pak

MD5 18300a43e13aa570e0ddad7205e4c528
SHA1 3a13f35888d22437055347ec0fd8b2e67cfbef28
SHA256 dcf563b44cf1bce09dfb017a8e51da2e5653e834e312e7d9c3a868c4b90b5a7e
SHA512 a1c4d8333461c723bf6ec51622759f9a7f3a89ffe03f63b3223d296ff99ed926d2836c819b5ac4da2cd33eddb8adcabcd15a18d5c9bf41d399da17c9bc65702d

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\el.pak

MD5 800026f5d9237f49835886db2c53b295
SHA1 8a957b90218585fefb8c11a7d7fbc1e0dab02cc1
SHA256 b5e5c07f0a8837eee32bdb0954c1bfd5ea48e069a7fb50a97610457bb2d96de8
SHA512 c75df40d4e5be9c56fc3c5d1b6a0c2accf08ff714c62091165ff892655fc8dcfa28f3ce5129adc004b270c04fa3f63188f40320f1f235e90cbc720651b730e3d

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\en-GB.pak

MD5 1d94e3d6893a9f8e54962482186ede36
SHA1 357a64334864a48d72b7d3ac8969c28fab065505
SHA256 525d94f828b967070b72e6043e0b9d1c55364b382be1f040b010b90a41b6a815
SHA512 3be8fc06e379df5d6389547a2d3ca122f367d8092c00e87089b23fffec60e6a4a8b1edc281bd96fbbaf3ff02b77548259d44edc93d7e5af46b0b32ce78f2efd1

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\es-419.pak

MD5 41a4b6343b952185a4fada57ee9fcbc9
SHA1 e2475227c6f62da6f8a1467b2035f89d9741a132
SHA256 803dd9d993d27ee7ada530046f6933dc5eaf35af1e43cb678b1f82e41375c5a2
SHA512 66824110cff65417d12a46ca3d6c42030038dcf1032aa6dc6062323513eb781778851849f84f37dc0225f951be29bc94534a33f74647910bd4ecabe3edfc44c7

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\en-US.pak

MD5 f70ea9666c4b2d503da8e0237c46eca8
SHA1 f150561cbdfefb7327b9824fa3a291c792a44d26
SHA256 2ba506930a8da5c3389d0616ada76630dd7f41d5cb8ee850f2406028f015d3db
SHA512 e8e4b03c6b1e5b7c6ae082e372f903bc78f61fac0c2308e7c716b02ff2f8275eace5f541d7ada90b9fc6d33ede29008fdb3e6994fdcbc736a705244d360eab98

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\et.pak

MD5 03aab03a3d067c79b8ad078af1aff9f6
SHA1 c5e402fa5b148f09895bfdce750033fe8e5c3e35
SHA256 7b301a55543e15c5255db083b7156a5cbb1bd7669c863376651e7c536a0d3c03
SHA512 3fbbf675a1b26e92625f30a245b92c80ab5cccbe3559e4d79bb81b6bde33f796e82e128bbfebfd29b324cb6a0718edaf4fc53be28648366288375fe615079538

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\es.pak

MD5 7d3755aa3480aa469e6172b451ebd0d4
SHA1 f91b913cd06aac123678ccdaadcbb4f0cca4a5da
SHA256 97ed628a013d27736ab03547e5e68e25392e6b47d5b531d4fa8abbf1544a65c6
SHA512 8613d17f6234ab5cc96cbf870e63a6622994b10ab4d135255131ee57b1757b1abdcf26678b978faf49175db183300cbb09613eabac82c6691179479c1bf1bf4d

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\fa.pak

MD5 4003031412d00fd89eb2700e6be45b66
SHA1 e903cacbbcaeecf37773f1491db4be0c727462f9
SHA256 9915278c25a19420b400f28859c504e3f82fc8d44046d769e586d6b97deb44c0
SHA512 8e72aaa570652d3f95ec5b963a5fb534826c3b32b0ef88627bd099934ec849516bffa43e3e3cd074eefb53f63ae9c1a9fbc9df533da82f62dd099dea63cd10fa

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\fi.pak

MD5 1fe6aff5d58a2e9078125a3eba51310d
SHA1 bcd0b0afa94a51281558abe598ecd6916def3600
SHA256 55fcad7f30965e07a749a79d4e304cb8aff79afc367c6870738b8dbe78ae3ced
SHA512 f6dcaa2890347f05096de8f70e0c657b6c4c8bb1e428f3ed4d31c942f214949745afd5216c44a7f5cfa875825dd41c683f1156583646eeb1efab570ea3ae1dfa

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\fil.pak

MD5 3a9fe4cb75cbf95a747e4a98e9a5134b
SHA1 1a39f169d11ee06ef63c028a7708af81926d7918
SHA256 af5917413713e97363a62aef1909cf7a800f031ca68bbf211cb243032a68b461
SHA512 bd2da49b2b6425708206aa4607a1c40c4da68847becf59ed9092ccf16a79f967c58428d2bf7b198bec0441358ef05141a56549572e206355a3bec7ddc088038a

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\fr.pak

MD5 c63cb62bf919064b0b6326a0e598da50
SHA1 b3b09ede4892391fcfe51288e55d9503b8848aa6
SHA256 5b88cebd089e9bca4978cb9df076ed06f97fd5f6d496f6a47ef6d42441726566
SHA512 dd51706d7150367303dba7c99029d5468ecd1d57abdb28c1688b5937700547e14d707440b12f2040b4120cbd0f4c4dec67e99f175761b58c9f14581aa0e0923c

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\gu.pak

MD5 e3074b687e6a6deb35bf1400caffb425
SHA1 5e524e883b510a67e05b1ceb082f3661b5890341
SHA256 b558039d718858f3a15ceaf9c2ba5a89282bc5f6f15ede43a1e552fa458114ff
SHA512 489d922276ee9e7f42ca0d003caefd97e62abdb712d678d1cb8e8c756be707a1d07ce080201c6957b529c2b7a9eba26e7d0a5ffe7251051721ba1e44160f8fb0

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\he.pak

MD5 3d3d2134b30ef1d443e07250229e2678
SHA1 fba103c120d78c07f3000ac7709d3681688809a1
SHA256 4dad9b698b48ad90553bc3c82ce8faca6e4f8264ec6ac5b9e1bf2cd20f2ecce6
SHA512 c806b7f37d87957904c5f0097fa4951874a115f06392857a482ae50af6b19178acf478296a8859d031a71493960e7b807b6a772fac04bf56f88200d93073872a

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\hi.pak

MD5 248182b1fe577681f70dda64b046e120
SHA1 3c3f2726be0921121486f5dee10886b74cb37556
SHA256 eef6fc72fe85670200ca23656e69804d9d02d9ef3d0c1ccf7d129d71474ef400
SHA512 86365716669d960fb67e96e0ab903e1412a7c5387349b49cdbf8d0ebcaf118c0d99c93df0f166089f32aae2d0b5f2c2e34734506f6558c9a8819729abf7f55e8

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\hr.pak

MD5 b556be50b983d7d62a8f44dcb24efea5
SHA1 6c6840dfdf83a69dde3536e8236358c32b6a8535
SHA256 155a03a996003ae7cf7ba22894b0fa479f0fc6a04578baf6a888ff1b2e8473fd
SHA512 4dbe58000c5fe799be609597078535f321e62210dbfb6ec6e9613dfd569e04b16dc305e5a827c6706acafd250fe5c00eae2f24e9784ec304ff5d0446c194f847

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\hu.pak

MD5 10f85e5fede463e2486ed890a561bed5
SHA1 bd0113b5573d79119fbb15d053da17fdfb4e2d50
SHA256 2e6795aac09546926d93180082a3e4ef64b08a18ac513d79493ea8fa168e9cc4
SHA512 cac4858b1ba904d893250028afc8a10bd9ffa99c7301efa0448e316585a2a817db1936edfd325c1d6dbca5fa21af0f0a8f4b8ec0c6506df035d8d582688eaf08

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\id.pak

MD5 e1038c2d0ea1eebfd9e25dae192a868d
SHA1 6be7fe8751880e14ed8322f7d29794a8cdbc7467
SHA256 3134fa4e6e3745d206aaff3d8b4fbc289ca29b687ef1d8f16ff22012efb3dfef
SHA512 5dba90a2850b2851314620be62cff5d593a048338cd984731eb4d6e5e77d806296c6e1746b5a7c08be19beca1695ff418d5cc9e1b84fcf5dfbce5e7953a6bdd4

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\it.pak

MD5 84030ab6437d9279b2e93a4e83ab5d56
SHA1 7cde75bf29eeeb84c6226983130e7fad0442f777
SHA256 6f1cd9d09ec1be6033bcb0c2efba08a961214f1d6d7a9844b88e7d612e7a1860
SHA512 86aefece3ac2862144f997ab3e69b9aed98be5ba5e9941baa02600ef63ca7ab9099b6e083f3263d077e4cc014df308ee8231c0268c06ed846f6c59f6f2e6460c

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\ja.pak

MD5 286a4d7ee7e011a524e8f4c70592d1ff
SHA1 f62452ecbbc5633bca65c6485dbfe9467333c290
SHA256 87831c3227dad088afaf94a2dd03dc66fe14aee7c2e031c7b7798ff4b11b30d7
SHA512 86bc78f53175372dba41be8ac4867f45e2d962eb3dab5798d9a71a22e450f6876d335fe347d07a86621d1560aa0538aa3c2180452f72076983d57d9db48d4c1c

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\lv.pak

MD5 84509c858c9da5347db91821960af8e8
SHA1 2e4edff02a0e429a9f4a633cbe3877e5ad7bb38f
SHA256 624c7917250b498c2e643421212989b7dfaec944d06a5a0954568f8e9e90b0b2
SHA512 9aecf65282432c8b7bdb327f373b715a48438fd1730bec5d2e27270810b5ec880b98d13e8f4a0586a420a42b700feed50abd844fa7e3d655bf9f723bebeb8365

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\mr.pak

MD5 69217e4bad9444e0b36b9dec6d13587a
SHA1 21d7c31c656add29346bf61cc5f01b99cac4c24a
SHA256 ec720a494da509c7f6d6581bf83a7194d20a4da8fd260c4cd5590399506fe89a
SHA512 7821f7291cd3fc1fcdd5a92cd189c5238fe2bd0806f58c2e6786b253d4f67924bfa63542511a40d88edc29418fc70db64206edbcaddd5bee0c0978200397123e

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\ml.pak

MD5 3f2d7238334e87c1dd28508ae42ce499
SHA1 f368408c86e61a2fd972876f659247dc4f1a2090
SHA256 c182a95c3b75b2bc5795bba0af6badcb2588ba2d84cd68925e75cf5ffc0168da
SHA512 5f0ac10d7fa2e6fdb0d9f8fded6f055febb1a3926013e28db108f8f8a8ab8c24216329f1d4b0e8bfea6da9220294cccdddfab810e60253455e99d52ae26bfd44

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\lt.pak

MD5 82c786051cc71dac807c37fca436a91e
SHA1 7c663b0225b90bfb1dac4cc10f950349c0281b89
SHA256 0050421881174da761b3177082de0862eeb1f20165169eb057ee74fcbdf95eee
SHA512 dc8887aeeb5d2f88f5ff01a2b417c7f8d471ec386adeb848f4af2af32c97152eb9bb50f7c78ee9cc216cf64821f761c2a25367e96eb2064e4ce2d00021c7fa4c

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\ko.pak

MD5 bd258202d84cb6cd398c38eb444d7c13
SHA1 4b03cd62fd99f107dbac2f600130ab070cdd7e64
SHA256 d1e47481b8775c11c7b4b42fd73c7fca614e16950581e892ea739def6cc9dcbb
SHA512 0a0ea62530b9e8486b8d081057174b0bb6211f5ca4e23f1db4ff7316d252f4c1ab09803c33368b1c068045341d35977b1fd8d6b18efd068928b170d7adfe34c1

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\kn.pak

MD5 3638bfec55b3e6146eaacff7edac9976
SHA1 0aac7b431980d1df51170c2ab5e5e960604364df
SHA256 77b514e529b8aba4da86653bbfae0fdf3fc4eee0d84caf40530a23bfa58d790f
SHA512 477410a6ab9db7b74e82e5de5101fcdc13a42fa8c9a9437419fbebe66cadb9b57d61930a3938b53135d90527419f30bcb5381997cfddc2cc51f65b121b5d5482

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\ms.pak

MD5 7321194b6267c9cdd0bda30e4203b859
SHA1 86a4f9299ed0ddcf70b44aa65427a752af2dae35
SHA256 47f77f32d6f18d95c15c0e4c04df8ba1a05784c8c671360aaf2db487520ddcf8
SHA512 6a831e9afd3d50c698b1e6ddd18f6ec95bd07bb8d3f4d6cfa9a19b65371a430c5c63adb5276f44d3e9a7c2b4e1502f239ee793ee5035f60f57988685a918c110

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\nb.pak

MD5 bd58803d4cd991cc7b562da68428867b
SHA1 fe36b791388d2a1137ab2377b72272fc8dacec82
SHA256 43fbabc2a7b4ab2dddd00fb511aafa241a9905af40409b7c3f54210b6152302f
SHA512 6f546f39fd47f81e73bc1de8e105882c91b56d32d6517ac115401f173c4c7202d8db9de72bd131526ab54feb3aa3745d8550c2f993dac211b14ee99d71d4801f

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\pt-PT.pak

MD5 c21418f325ad1b9d86b7957b41ecbeef
SHA1 27fef99b33f81f53cbb63c326aa386957db177a8
SHA256 98e2b6e8c3e67da3a2069040330461f0a4b6feb05c6d3981d07b748ac191182e
SHA512 55c340510d92b938d2c696ed5c73ee3d54e9d931cc97ac2f425a83e4a25b2ebf48aadd8a06fd24902365da3ca2376f36c5339d8fd4c099aa3da8cd150a8328fb

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\pt-BR.pak

MD5 fc5c376e32878058c7fb3dd691de3338
SHA1 4791055d548d678c76fdbdd50c412273cf935630
SHA256 e2a95144584d124e754f20c743ea91ed31f96d375bd24df8b0df3c411c6e08b9
SHA512 ebd545258e4c4d1448bed9a94c5e0527df06527717b0f19edf83866673705859dcf13c53af8e5151bf50da024128da28f1d697a51ae4fc4293c9d9e55dae3004

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\pl.pak

MD5 1e6a60b03abd6dc4f8c869dbc774b680
SHA1 f3d02e9d34dd05bec55fb69846342282b32ab405
SHA256 cc4775d2d1a1751cd6ee4de5adc7d4a13b079e7b132898595cb2865e0a57c823
SHA512 54c2d9eabc73ca873314336df35e5c38302dcc78da5194b097cf16c0bcf3b64ef4a9bf7230ea7367b23fa9785d1a2b94bbccdaf0f38eb45b3b4226f32be5a2eb

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\nl.pak

MD5 a17f9d1ecc10a7da391a2fa71220e123
SHA1 025d8fc0ee1eba270973fa2ad2f10701bbd708b9
SHA256 bf1b04e7fd896333e4e2ffbc411563d5de30e4c241e3f7e0c60548af1310bc1a
SHA512 47079ecc377e85e907ee779a332fe6dd8e66beb39c94dc0643a8b5baa400b97285b42d727ee32efe88fae26ff59e18671974766e9ed9b744bb7df11a3c5e74b9

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\ro.pak

MD5 3f570679307286594588bcad66a13f8c
SHA1 dd3d0a1d51ed81e8620b9625ea5d43ad513d58e4
SHA256 f916fe52080eaccab979a8b527596e7196acde3aa90b1f836801d9f7b90df1fd
SHA512 11eac14c5a26810ecfe9130ddf96732dd567f222499ca4c7a5cc363ba4e29683569e9abf37f4fe695553fece3dd9a97c57a84376340f33ac7b463c03f14a3fa8

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\ru.pak

MD5 7cde65967d57746972a785d73223a7f0
SHA1 16bddf07f603fa4281335a9f6c60e543aeefc0de
SHA256 2d4583e3bbe119224a4dbd80ece065a978890d294d0bc1f3948a10c33ea7f06d
SHA512 c4e9a364bb1b36685d03ee7e5f1e847d99fb875151023c7ab2da446ad5d91bb73fe84622cb46da3b544854cda755912262260b445667da1d018f597f52653bf6

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\sk.pak

MD5 097248216acaad35198b979dd2bee4fb
SHA1 d8d51024575138afa55217960a623469a7e65cb4
SHA256 c7609346fc5d8cf34d3f6e6b5fe4366f6eac06731e14e6453b7820f02c21b635
SHA512 777aac33755b874e853f5f2189babd99d0d9408d182e4094f27af26f4d451d8ac3e6efa6892307f90c51df7008394f713d68efd76ef1963b8593c201031b8846

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\sr.pak

MD5 ff5e1f8f679fcf45ace4b095d23841d0
SHA1 dcb7cc4c3afe6a4c9baee3cf7e2c900f530ce3cc
SHA256 b8d0bb2ef02f21acd435e4e969bce77b7b3410263763d2ed76a2fa73120e5e1a
SHA512 fd4940cc1e3106eb73b35ce13a63556e5eae05fe03139dad255472d25d37a223f25fac85e5e45b468383edcb174e3d8bd342574b0a55ddd27bb530a1ca614a2d

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\sl.pak

MD5 790d7c9113c73b8a0274a1b5a43fd7cb
SHA1 e1ed463fbd33e0731bd0c27acbe6a72841643e23
SHA256 d56f8cc78078bc7904203c078425d7e5ca943509e6ccc87947eb866671e5be7a
SHA512 177903a73763eca159cddd45a7b24b01f8a8867d4edc2befcdfbffc69af8191f6f476b8d6ebe0b0ff330343f005478fd375bb083288635c1849bee01ec12edb9

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\sw.pak

MD5 a76199fc5387610c34c10fe432de8ae6
SHA1 78beef278932682c53755d2ef2ec7bb702920fa5
SHA256 8e37295c46adc0afe92ca7f4a1a2ed52a97e14423d11eb05e8a14b543493195b
SHA512 68990913627bbe34292b65074f24f399c0172282cb6b55a631b2aac1c2b12109135192f8eec22be5e533ebb25a590a69d91caa4c8bf304a2c26e512515610eb2

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\sv.pak

MD5 bcaa22655669b60765b38521b21da875
SHA1 f34e37dfdb5521ebc332a52baeab8c568722ffc0
SHA256 9ba97cf45ed07f4b8b3304c55bade120fd01f6ef0c2d7685765151c40b2b3acb
SHA512 9e8d7d7d58ee7ef352d850ec14e22f5017c0059c66d7ae7ac7b3ae26a0c5cb7a11b90318e5cf189e2732928f658868fd5e13596369513ae45926e9dc1c0e8ae0

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\ta.pak

MD5 984e4341b5b8077e4d0c76fdfd14785f
SHA1 2c41c6f0844c8e321120b8bd5808594ca686c03a
SHA256 3683217dba2149b98f418cbe50920561c6dc7d702a85dda98efe8981da669585
SHA512 29823eb9c37d7c26324536a50fc80ee985995be8f0e59b57794c965f3b06b3e8d1fef6253b9afb4c7b8ad89386ebdeceff5920288b8ff7d5a59e626e4c9ea889

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\tr.pak

MD5 0b215cb173e45ca6b3c5b117380249c3
SHA1 54713fc7a589a39fa51b0b724e3b79f6af82846c
SHA256 c85fc7d5f699150c5643702e694ba82f94f0e630730441223a214a9d9437242d
SHA512 7a62fdc6e19613192d4d80f7e59aacd8250181f92766603eb92320a1b9391781a7ed4f058094ef5b91aa42cb92a802b37bbcce95ffd67f654d9ff690a513a497

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\th.pak

MD5 3c92d82202b5169d4de9dcee45708772
SHA1 4a7025840bcb20955c655528d23d41c155ba8fc3
SHA256 719d26daf93fb83bd66e97984cc907a55210e0cb0af3a226bec535451d38fdb7
SHA512 94c832de7b33e69ca8606d79ebc6a0b0b37bc61ea5e5be223bd639b9295300a9b1ba2b75860949fa7d452122bdc81f402bb8091035e79d5b2761566432ddeef7

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\te.pak

MD5 ca628239fb9568e6badcdb848bf764de
SHA1 c2d6324d2605a9e6186cc7e8dd7e341bd08010eb
SHA256 294f64705018a555ef7d76f82dfd783fd81d2bcd99d521841be0f2d887e4d3b9
SHA512 859d07b604081925f3277d49586af78299313ddda6abe280dcf3f7be4d10a1ac65ab23db61d9babb35850fa48ef27b9aec942b049701cb251bd7c0149dc655f9

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\uk.pak

MD5 42f48e833a462cacf030bb0a0e9f9439
SHA1 31f08d6fec67b2c296ebf2dd2193fb8d4ecaf7f4
SHA256 dee2afb40fa3b7c6788b6d8e3a775953b9b0589a131841ad9b520f580cf92881
SHA512 e24ece15476c9fd77aa84c7139823bce7216fe06e7f8040db94cf46220cbe431dfd634696165950621961bdd045c0365287693b807f54bdfe5f28d56b6365f64

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\vi.pak

MD5 844b68e44ccbaac773f36d442e59a339
SHA1 915354dc412fd0d2a60f99520462720e7796b6c6
SHA256 8b98769b3b97df10ebed4f25a0b115f2e0b059e9adedebb96c444a71e2eadf17
SHA512 2107bf5ee8317c7c7e9b279255df376e53eeba56185071168a8246bfc50aa738329b2886711164eacd877c7f0bc0fda7137f766be03e7fd5d3fc3e93f7df60bf

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\zh-CN.pak

MD5 917ab791cb4d24be5f369956cd059e21
SHA1 433a3aeaa06d6066ed55718564f5980e8c6d3ce8
SHA256 331e9240251d1191c599b09230d7ca9f8b11e51e5d94ff8bd63108512c0ddc58
SHA512 969f4662eaec6e3788fcc5823446135657b6816cd2419d8a3839acb07bee629d3c9ef69b2bef48856e16975fe31b7ee5d0d390ce4fd121a700d096348500b2fc

C:\Users\Admin\AppData\Local\Temp\7zS4E145984\translations\qtwebengine_locales\zh-TW.pak

MD5 ba9709f6d6363aa06a4838ac8344e262
SHA1 3544dd9c7ec8720c3d135b5df32e71f4b1c88983
SHA256 b81e24415243f7470f714379363157f2bd7b2d22e203ec5966878ed4b68140d3
SHA512 9ceb5e9340a3a38507419972754563823f0b3f808b39e17d78d8a18a171231100ed2bc0c677a75da16237219071996702dd7fb8a6a6dec098e69bdad0b3dbf40

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 108c1ed3140d4985485b39d0a88c4315
SHA1 adf57af6f1f30b69d6638a37ba564c8d3d8e0017
SHA256 0d4cfee18b2fb48bdd7578e0049ac88adc2a666a0026f6d9103740ece35b7319
SHA512 e282d675b40c1882d14e28896769d928577b4aa93c1a9f0a07a710297680c937b478ea6c608623376792e4d9f31a9b2a6c455071f60112485ba269798222b22e

C:\Program Files\BlueStacks_nxt\EULA.rtf

MD5 76fd1d75ca19601ac6138e1ce7e00008
SHA1 ec20f1186884ee2aec45afe827541cba0d875c8b
SHA256 2a9b1cec88d294e0c2f137bccec770ac316694883afb87289beb27e80bb20512
SHA512 16c578959bde5ab081af2bfd9a6bb5666bdf71c101add791cd0ac25571732707999fdb16e7f0a6e59b3c3d9e9ddb4f3481249ac7ab3c504a0e7ac6f8f734b416

C:\Program Files\BlueStacks_nxt\HD-LogCollector.exe.config

MD5 ed64bb001fac9954376d3f3626a02aa7
SHA1 5a1b3d3a0f54a7faa6e37d1071214bd293f47a84
SHA256 1e8daa96aef1fd4b5ac296019066feb5ee86ce17fab625edb16cafe5ae89feab
SHA512 2fa5169a4cea7a0632895c5ebd42a4e027ca6d6b0bbf3302a898623178468b7b65cc2bac25fd9b03ac9662567bc78aeb6647052f0b0f810044372258ee0475ba

C:\Program Files\BlueStacks_nxt\NOTICE.html

MD5 6ef5770dabe23dd90f24ad08f82c46be
SHA1 f7c8b140eb6894327db4717f48cf2ed485701fb6
SHA256 29a1b004a424ebc82d0c3d9e78af48b97aadca403697f6ec5954ec535d6b14d4
SHA512 86699a2e6d3f0fbee9eb5df3d1324ca573f799e167b78dc96c7bb171b9a9e05ca87d58c3a8f222493f47e9fa472abf548d76ec911b1654c634502448641c54c2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 12b2d3e1a5e5048e32bcdf623066196c
SHA1 573331418907cd034d2f2db48876afdb00a2389c
SHA256 dde6e0deac37aee43a442407140d778dc4b037232f1de8edf70c0194452240fd
SHA512 d2304351d4064c772be553a1578846ab6f93ffeffe691028b230b644a16e27ab5f4d0c162f0010df1393b9e248aa47111ac81f0ce57386997419ffa015d34127

C:\ProgramData\BlueStacks_nxt\Client\Assets\minimize_click.png

MD5 29277db7c9bdcf07f35f83daf0077566
SHA1 9c0f28a8a258db62d78b209cf2d7b3c15018fafb
SHA256 a3c3421b30c1c6237adcaa12dc5602aeec722b5a6d415c322e99255f1f50581e
SHA512 533e1707a37fd36fbef9f846544f7e7605f556d32558f39575744c01319b0f62c93467296ded66e960375bd12e63fb4349236baed229b8f1470d2530d3a8fca2

C:\ProgramData\BlueStacks_nxt\Client\Assets\message_info.png

MD5 88d0e2324f44a7acfe40f09830152fdd
SHA1 4e6dcf0df1e6fc2a6aabc4093de655abc996af49
SHA256 e4daa2fb4fa5cfc8452591fab418f67450ddf42298155538ca762ba57bd68c09
SHA512 b7f18c4285c9763792ab53295d589d3cd9c6873c5494b5b1bb931559e837ab6c961ffc7b0f575feadb57040de873312ce58359644ae0deedce633d830e994ac7

C:\ProgramData\BlueStacks_nxt\Client\Assets\minimize_hover.png

MD5 2a62067472463072b8c5bfaf115a3b98
SHA1 af94a3f6805fbf884b5a04bd615bb4c2cb57672d
SHA256 b64e37462471229431f67b0789f4c1a78ce9e2296f8e0f5d5d3206d6eef1486e
SHA512 3892c8b74bd5752f4e5df3e73427450f42511624c1cd90ef278f8eac235c291d6aaabf96ed314e2edad4b3ba57681804bdd16652ca2b0427c51b5c1a1f647a02

C:\ProgramData\BlueStacks_nxt\Client\Assets\minimize_progress_hover.png

MD5 c81c4cc1512d2eed5b3ac8d87490efad
SHA1 2f37ada51b8fb5a9d1ac84ce312a5772282d1754
SHA256 1498c4bee1c24693f8b9b16a60238ce09a4b8a5ab920011509d77d5e2fe20032
SHA512 341733fe73b2823fb5eb8eff02b118867fed46c6d6080c5a405dfd3f09b156bfaef2893c16e03f9d2b3e11904e0bea2a910f9e7fb7c3811c7f178c7b89b1f852

C:\ProgramData\BlueStacks_nxt\Client\Assets\radio_selected_disaled.png

MD5 decae1c2fc1e76292ec271ff2c0eda2c
SHA1 9fa4d710efb701547b938f4912fd90533bf30b4f
SHA256 5ac492f99c8e4dec0c979506d351d389b9afc7cf0da218064b0514bf7a5e11fc
SHA512 b789b3bcbb1c5f78a474338ac95986747bb0e961e6d7416753262aa6e59db91636e154c443375e13c246a8750b8dcab2b76f3c7724e20bd242d4829ba7cfa07c

C:\ProgramData\BlueStacks_nxt\Client\Assets\radio_unselected_disaled.png

MD5 4d467a8eafa6d3b1593bc69d583a068b
SHA1 a20b3fc85106059ae15cd55228bae52b6536f9c8
SHA256 f81b9744fdc87f280e45fce2e7bea078d6a10dc9ae1ae1ba86618e4e78f53753
SHA512 c8e7dd43ae7921e040754a49a2a513f9d7cab59ff6c9d52667d9731a24c751128a972901da1fb847a79e32fd8270170fc6a787a3668152ee90e9362a653762bc

C:\ProgramData\BlueStacks_nxt\Engine\UserData\InputMapper\gamepad.db

MD5 cb01636703334c6f2e16fd98be3ded94
SHA1 e11adc8535d854305f7bde47f57ccd2597041740
SHA256 bfdfd2195364fd86736d843c1ceedee2d4bd82a027e9ed8a2a6c40d6d92a998c
SHA512 92e032b345deb55a1f239b957854320227f63b1579376081317ad5ea1e9d1d123e015274ac4cdb901cf411de1f180a6227564c7c5097dc6e978ec766f29368c7

C:\ProgramData\BlueStacks_nxt\Engine\Manager\BstkGlobal.xml.in

MD5 8c11ed64e4cb4e992c891a1685f5e0bd
SHA1 1b125f8aa3f77ab5e23bcf18ff7fd9efa5232bc5
SHA256 4c64d4ad8897d3198cc69c27e54c9ad24aafd70ee2818a4eb3a970f24b7cd535
SHA512 c2eee227704f0940bd46db419e42f15ce0dff3b006753c94005ac4c063fe2a2f0f24833a6674e9bbe570adcb425277a78bbbf398d600017e05357f33661d7c7d

C:\ProgramData\BlueStacks_nxt\Client\Assets\ThemeFile

MD5 097aaa2f03fb29cb24ad9e3f05ce115a
SHA1 df7cbe3eb3026ee513df465579b55c0fbbb1d2c6
SHA256 cdbf4deb03615bd13182ebcc6f62a661cd9e57b2db0e71cd1afd80f99d6891cb
SHA512 1f11973cdf9584d79b8f6af8e13240ba086c26f49657f9bcbc0fa7cff485cb2bc6de9bcd68c1e40d42e213362f1a6b0f6de573672cc7ac1498a2919cb99fa4f2

C:\ProgramData\BlueStacks_nxt\Locales\ProblemCategories\ReportProblemCategories.id.Json

MD5 db6cc8538209e0cca8acc037e6916fb9
SHA1 b54d09ecaa11d292c642ca3ccee3e7cb54ac09b0
SHA256 5202cb1710ee8fe7134084d1d65fd3df73579c4fa91b2e8c81a8c42d6a292b5c
SHA512 6c5dae01bf82985a0eadfb683a5ae63cac8ca5e1e74e4a222df5c7b5dccb058055bc94978984d3a492f729657c91cff74bb5d06e85c83e5d2a0554ed8a70e719

C:\ProgramData\BlueStacks_nxt\Locales\ProblemCategories\ReportProblemCategories_vi.Json

MD5 207a83427ef56f9d8dc7ad073f8710a2
SHA1 7731c398c4d811f599dd64bc8cf38c978482f958
SHA256 7fd91e5e65cd433b44f40d87a440a83dd80e7fe94881fd16aa842cb66a11de66
SHA512 e2bd3202c779b8faf29fc36445305d9cad95850a1860201b3d811ce3f5e57d44a86c18cb717139f8419de7fa543a3293d4979b92a2c938f3ef422b6e5759cd3f

C:\ProgramData\BlueStacks_nxt\Locales\ProblemCategories\ReportProblemCategories_tr.Json

MD5 4554f8757900aaeb163f438722510211
SHA1 d9caff5b615ba416328f904db32c4bf1e0fab971
SHA256 7728d6bf5cf06f09aa74085d76d2cc122994e4c4e26f9f5221a5f7a01a48ecfd
SHA512 a2931dc79ddc759a13823317e62fd84248149ad616c7cb6052ffae6ca0b50b589cf7e006d1f5df983852582f34e19485e2f885ad9616fd103e2fda63be8db01c

C:\ProgramData\BlueStacks_nxt\Locales\ProblemCategories\ReportProblemCategories_th.Json

MD5 c513342ba005f907c1794f9c03ba36b3
SHA1 51eb1fc0c74415bf41ffe41ffebb94b3792e2202
SHA256 d0aae1a614f8d8c475c6544bd649ba60f5e2e89b38725de6e72173f8bf14bf6c
SHA512 6190f4c0c63a5ae724c9268a84f1273a82a480cd4b49d1d6b4eb76d4862e2dbfe21cafbc4baa9333ca6fe34dcea283d9c22764291f4c63f1701ff963eeb40744

C:\ProgramData\BlueStacks_nxt\Locales\ProblemCategories\ReportProblemCategories_ru.Json

MD5 75caed5a21f1d254b7a166767b914b0d
SHA1 a6a8d5588583dc5b240c0e1314c7216c502c8863
SHA256 7e5ce9a2c76d527ecdd06db24032161468572f89b6a796048dda2ffbb2f4daff
SHA512 c51caae487becaac5e195028293698d836943be3d12eae149f30a8581356313af9242694b664e038423dc9c5ec3142d25d84121460f226d258ae62a1f31bfdde

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 3d406383b234270dedb845a6b23cdc5f
SHA1 ac4de8728a478ec7fe9eaada9bd9c29930006e93
SHA256 9b13a4cb69c7736dd4a8f8f8a8e2396ff48e195dfa3f1926f186ddce46c789c3
SHA512 19095646ea3b1434ee3aa5a3b79161b970fc46d4f12241579ac03a22eaa91ef548bf9c7f35def1fe481834820c8d90d4b98cd99935c96a963a0d244704534706

C:\Users\Admin\AppData\Local\BlueStacks X\Banner\https___cdn-bgp.bluestacks.com_bgp_fullhd_com.droidhang.ad.jpg

MD5 9cc25025cc25e0163cf39878eeee4399
SHA1 f588c97aa5cf7d035ec03c1bbd7ed52ced60935b
SHA256 67858c85c4b90154c40d52d198adf802167c155c30363438625569ef37816e3a
SHA512 70033655d572248fd66b19e1ff430593ad2cf3d892c786f06c5a91737856def6c4d93fc0c541ef23793d1bec538b4204571a353f05695771ac43b4e021711a8e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 d077e1dec494af1750838f4e8c2ca2e7
SHA1 7fa3a11152d6566ab9d7c3d85d0d7885fcd7a516
SHA256 d90878bb70902716ecf3926f88e4be44866a6bb23640cb410299ce7ac434fde4
SHA512 5015cb3c576410e2214aa3c9041a61161ca17bce1ff84461c22773414f4eca69b394515f965b461fb81b453a8dcbca250a7e4f76717c789272da4bef2c9ae320

C:\Users\Admin\AppData\Local\BlueStacks X\Banner\https___cdn-bgp.bluestacks.com_bgp_fullhd_com.plarium.raidlegends.jpg

MD5 e61219d42eeed7f6d625b81c0f234e73
SHA1 6b521ff73dc8e22e3fe40d3988275e384aa083f7
SHA256 b5b425ceaa0e8c4ec1ce81d0dd56b29e2dd23afa138534c4e944591d1f9bb7b8
SHA512 f9762e9adbae1ca50c6c4e7634657c2c0811931a1f016fbb34d00d6c2ef0584c1e996af051654f496f1a6629a4f42017eb5675bc7a8fc519c22c36ebcbed330a

C:\Users\Admin\AppData\Local\BlueStacks X\Banner\https___cdn-bgp.bluestacks.com_bgp_fullhd_com.ryjd.cw.nowgg.jpg

MD5 b1e1c274a4dd21c949975d58df503b24
SHA1 d7ec4b0477b45f61af798f57c743679440ec1047
SHA256 1783e0af5fd93c8762a6f894d2fa823674e56e4bbc0c889750d7714a14d751a9
SHA512 9358c83be093f3d19556f3e4e455c57c56498b469e98658e23e8999b6bc0f8402a3a0f099c4f7b2657742c86a1049dfb04b3b42163d01eb73428787eafe421dc

C:\Users\Admin\AppData\Local\BlueStacks X\Banner\https___cdn-bgp.bluestacks.com_bgp_fullhd_com.crunchyroll.crg.overlord.jpg

MD5 9c1dda0896b98cfaa9aba7c3c719c574
SHA1 3cb6604c71ae4f32bddb61966916421b0f912d18
SHA256 236cfd29f6eecc9097286e21f9b2a500420cb09bd2bbdee0dd32a2ec16902d3b
SHA512 2bd36dd513a051d3e0115fec608643c25104576e3b6012c57d16c16b22e9a6cfd60026d8c6bd2645fc1a2a124a635a3945db5a9e4dba1b9c17717a426a0c5d2f

C:\Users\Admin\AppData\Local\BlueStacks X\Banner\https___cdn-bgp.bluestacks.com_bgp_fullhd_com.overseas.totnew.bluestacks.jpg

MD5 f91b96ac2ef5877c55eea0d262df3d64
SHA1 ce8f39ffa48ceaab8d57bc53a20f54b05e6d75fe
SHA256 5c01278d970606e60c8bf63d47aa32614991d0016dff2fff41558a930910e78a
SHA512 20c78b514d94812aa5dfe63427d1e0b59cf0f843cb6979499c4c585fc6871d678c3ec9153ba21305cc405ffce001fba769f575ea13973cdce24899463d949b11

C:\Users\Admin\AppData\Local\BlueStacks X\Banner\https___cdn-bgp.bluestacks.com_bgp_fullhd_com.gof.global.jpg

MD5 bde17b5d60730e05b66d610bb60947d0
SHA1 e34bf44cb6c0f02c8f2ce37fa4380173f4c0d4cc
SHA256 ad463d3101d33d4f68abe30bf2ce60ed331e83fb19bd91041b56f68d14f9d664
SHA512 84b0008b1ff0c7bde982cd8492d8f86b8d4056c27c74a6082cff37b8a02ac4919bff06844b143295a102fd66596d4f2a5c5845f57c3998cef5e4478ed3ae1e94

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 6835b7c6cb700b6403bc968d9c177a10
SHA1 56f83b4dd55b6b784083a64ff9c4b831164e713a
SHA256 efa881f3b6d10ec6f13fcc8bbc578a4eba9371de77a42ce3945b794b57dcfd26
SHA512 3d8e950cd4afe23ad07d8ed7f6fa52a76808212a0d27a1c9d08f43a6e90d49bf0dae8028b07203f8eb4be926892e822aeaecbdd1da0d9b44d43945606ab40045

C:\Users\Admin\AppData\Local\BlueStacks X\Banner\https___cdn-bgp.bluestacks.com_bgp_fullhd_com.farlightgames.samo.gp.jpg

MD5 069c21287882ab5016b98ea93cbb2cad
SHA1 217276cd053ecf26370a56d78ed5d2b6465df5cc
SHA256 82ca4ef5c4251a4691c2afbfc55fe973755aa0c294de1bdff26068ef89c8f808
SHA512 2ce9273a1cf6feea1e41d17c320fa3fc4a9efd45ea62ea8a9cd4f68955ee4654161181da60f1d52c734e81b052f76c97c65293b5ddc07196d4fa5f719f6850dc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 f3e13caed0e88283af74ffc6fd5ced73
SHA1 17b20347132a8d36d69fdb3f5eec3ca8b1064e91
SHA256 71bae08da1193ea536b19da7950a6afd98fa4a08c56221cc60dc652af6143b7c
SHA512 30598998b5572315a321225f67f496c8828ba400204727606b99f85920d28852122bc84be98a6f127e35c43a272a090aae18eb8d09ed63f6c1716217ae21013e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 59cbd92e1f35948545492a604e2157f3
SHA1 4269e706a2ba0781d875f110fb445bbcdbefb205
SHA256 90c6b241784af38a95965c425ed4ef1a4d700f9bc0267e983aaf83bc9d40d6de
SHA512 dd3cfe2d893ec6e5b7ce6a2a96eeb40a90605639ae11889a12724c24f599f71cca55dc01edd7132d49a32bcc1baed7b5fe168c3afd9e532dfbba5502aad9a7f6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 c12c8dafc76c5366e2629e9bff42d1ac
SHA1 7f1d86163961afa8f66e991756721fdda74c8660
SHA256 2ca5bcddc3ceda35ed883a5afa37e54185fc371deb4105100572c892b664889c
SHA512 8a4499752c29cf9c43a91d63dedfff0e97ca55b8bb4b4d2e61e9967a0c8e81952fbf5cb728f9e2fa4f4d5e75329b5f5564844c1bbe52e15f0c0e88b734d6427c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 b4216a95c4724a9578cfef5f936df817
SHA1 9177027e510a9d10453e629369be1384822ee940
SHA256 24d36ce9d0dfb91f1ef5d05486f536fdba2135e4fc7df1692a3ce30c2af538e2
SHA512 35c1b5b4ba70e7d08afdcae4a8e3a103612261529237a81952848fb3cdad2bfe44e6fdbeb8493b20b0d29b73a32f424b707775b9e095c95ed441efd3a44b2e26

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 27a756cb2c62d7533bd9d14588add2f6
SHA1 f9a601321bd58de0a6f6d0ef97ea368db35ca2f3
SHA256 075c23fbb6bbd34f0369a780f2f4b881d08e057656f93f1f0da1b5ecaea984d0
SHA512 4212fe2f941c6c29b8afa9c5bf03b2d13e20c5d95292b79c3217b7e6cbf6d9904cf58ad4da4590a1bea8596f4edbadd6db42993f87013cc27226f1a76bc94848

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 15d04e0c43ab27e550fcc2bec9117ce9
SHA1 e9999de9e29641fbd52ad9a79aeaf021d3cebd7f
SHA256 643bef46664a5507135d95ed02fcbcdbe4b5a2b473f259dc93391da269166f8f
SHA512 c74f9201e2b7549512cff84ff62292fe726cc094b0cdd25e800cee18780f64a5c5df400c7b58b9ffa0191668bdfb95df8926b2a6ea761213055806259f3cc45f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 6d05d7b1204867ea6a4b6860956e44c1
SHA1 3928668d265fed8a9c03927477a736c427440609
SHA256 ca22e98be3904af12d24e812e7d0a957251426ef37dc85acecc4b18011fa0ae7
SHA512 d3635005777668c205a221b1e71d37802be0b16981405294208322f8ee4e89ece389f0f020050cdd38189467fbc846e1daf320aca34956efc74e2576696fffc7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 3861ccee28d4865021ec043cc61981a6
SHA1 8043b03964d7372745478ea53213ef0abbdc6080
SHA256 30a858351967f011b048390c5ba56ce3cbf1b2680fb664179e3f8c778428fcae
SHA512 0e13ee61ad49ebb34c034a852b5451c747c50cb390fabc36434626fea5bdcb1f497a62ba03dcde0dc6a840ed22975c8165ea3d9114bc367e341ec15346a35d63

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 467515cc73056244540d5d577550caf0
SHA1 771e3f153531d7b6e2651331a68a74efea24010a
SHA256 ac89975faa5c26a5dbf66b588bb06c2daa0ba047743a594560f3be1509798648
SHA512 9d5725d2368376f0387d0f95d472f516ec0d52caa929db8c19b94b01c592ffce7fb373e8f43953d2f2643b690a549763572baa2476563b4eb4777ef8c11ebd62

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 1b4daf018810b42dec4f911a0ba83807
SHA1 361afbda2c78e7b27eeb3c6d62c3ca1c444e3e14
SHA256 822887cf7376dbbc7b613b52565af5f522826e58616fcc545c32083eff673427
SHA512 1196445a7152b6a5ee6437131491c2965f607af7ad126a8650c29b009aa02aedd16f2a6f22c96342b06c60d500d5bca9210b1f3f9c067f6125e2599978d713fa

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 7a66f27bafd9ffff8242576bedf141bc
SHA1 2b5ce5f8174baed2d56735d3cfa255e27721e3e9
SHA256 7b2c982c8f810935292f5c7bfb70a11f69dda442acfa6797aa2633d60baaf6d7
SHA512 e8b2d7c46f5bba5b496bbff3de2e29fc16d04159cabff6a037d56dec00091bb1a521dd93db51d0dc256983718b2bf4e753b540a7c274091de6c55f460d3afd5a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 2d1b4b297374b70ca9420ffff9de89b6
SHA1 d30a0e6a9980a4c63b396fb738f468605c7016c8
SHA256 d52a0d99ba2e4c17d737a84f41847d9fe181fc9a357d652781643c7a338792aa
SHA512 e4cfcd5eee78ab3ae2030ca5bb583a5940ac29f2d0e76f4dcf4585a8b3d8375eb1574633f932f506894870b06e99fda89b92c9c8a1e8a052ccfbf681453a6c02

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 7a00213c6dcbfde447a6241039a54a36
SHA1 1a9eca26aeb86d9734dfbe85ffae58c123039e42
SHA256 5e47c1e304e9d4eb7fa766961638256abe246a36e220c9b86acc0d1b2b7bc9ae
SHA512 65a665db377847773e8e6a29ca5ac9335cd287a0afbe1c4bef7cce9a32646bde3c477b5b66fbc9212fceef7448be63a2567e54af29c81671f58c1839d2f8106d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 de526957f0ba585530281df791b3dc61
SHA1 d1a5fff74751012a8426da5a43d5c101052ad1a5
SHA256 9567059a800993d711fae7d14411fe2d73a073b6851567250c5dd0a78ae6bf49
SHA512 41193065d7558b56630d6bd6fb4572b788986b12b88445c7e6e2438725fe74cde4acf93134810e7912f83331275a0d592f9748ebf57223ae9477077aeb680729

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 86b70b67c27675a8ed778721dead70b3
SHA1 e06d8b215e0f6675974ab627017b78dacdf4846a
SHA256 a60c219ce3afe2120ba23f056856705159e2fdaf2e23363b0023205ab38cfbcb
SHA512 9a90fb18a21b548960ac508506925a2b42f013cd7a1c3e67e5adcc2bfa2de497ba0a2b67e52b45aeb0a10bfb22a96b808fe2f5064f1d4838f039517818687b8d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 a4fdba99f89b35ba98627eb7f2b2b41e
SHA1 dc1e1998bd71ee9dc5a7d88ee25bad0880365fd4
SHA256 9bdaf11a5c76a26b651e11bd65070dc22ea600614dca6aaabd0a333a44cc668f
SHA512 c3599df10daa9bfead8a88e141e8b30a0c1567178ad092af440649e9b933268c7188a7d071d885f9dc01785a68d85d6b56a6c654d2fbe54e80517d9978979038

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 2795b1c55f4827b7149df502358121f8
SHA1 8acb1da6a2d5f0467545de72e80dce263a65e0d0
SHA256 4dc288d8b8b0adfd3caa36471e49e161c04d293c9b7ce848c1dd02d797031e21
SHA512 39bc7cffa72033c4f23e8980dcf9dfe5c13f1a57214b42308c446548dd5ba5184ed6ed4cd391d245a15e9dd83682c7dbf5f3dd463706cfc37fe62c0b53aa41b2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 14b3eed4986ba815ef6032b427cd0ed4
SHA1 e83571c5165cf43dbd137efe52fa54458a51514f
SHA256 097af87772224e7575aa9fa22c737c2a43dd51dae0d5dd700668be0427196cb2
SHA512 e1c383a8a7ccd293b628e0494eb9d158cabd773b6a85b929331ef206332bc1f8cf6d7dc964c4631750ba98b77733f5db347016c3fff775cc7f55808aad0759cd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 b40aec8c0c23ec435a6f038e434f90f5
SHA1 d41368482cd32c96b319559c38c4e548cea704de
SHA256 148bd40a38a3570fe4a12424a696bef4746fb922f7d4a9e672bdf42d6067539f
SHA512 0e832003986beb72a8366863507e3740b574f4c897596fa42921fa0ffa8f6a1df886b74ea080e9d372e9f9f1aa434e88235695d576354346b9b8b8dc4ce9c979

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 262569e99a64b458a8320dbb50fb5531
SHA1 d965ad47332938c54a5099ab15e36b0a2d6f3bda
SHA256 9b356f3c91ee87fd3fc6a74a2b73a0b7753054a01f123247f6edaee6d39c8f0a
SHA512 998a8b9ac396a1d3b81b45ca112d9ddaae03eb44bea61cf73686dbcc07c0e9905a9161535c1d6bd652d935995832c6661a250420ead4f3cb8e48d861145bca53

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 10b864b79aafa1d8ce4bf3aa5fc4e2ae
SHA1 03176a2198bdb28eb671d019971afd3cbfebe597
SHA256 01c584c120af781f3d8ab373fd849f6aeaae9488b5951ddba6a214b4a6f2bcd8
SHA512 673bf0453bdc66ee8ba08622c33e07f520b76e22a4abcc2f1d8e7b2a4b27d909a0666110192e39bec445359c80cd41e8835216251ee1fb11cbfe4fe2cc36490b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 6ddf7ef75edd6105709fd4690cb5a924
SHA1 2ee544a8e28fb7a8454f45bfa836613b40c73f85
SHA256 01cb07cd802a3bbbf6237e3859fa6d0b4c0dd3651c0084984e40ca4e36e96720
SHA512 6e833c2d24dde8926c9baa1fdee0101bbc4694a8c7b709b2cf671cccbb539bde7d983bfa38c393417314a99c78a2ec9d295e8d33bca48812291a1db91962e2ec

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 591afce24bd3c2b8c4209972a5fd9824
SHA1 f9f42a55eef2a800a5018f5aac1964cbc95483f8
SHA256 2d2f28c352aa79ad5f2d7ea4556bdb147e624008a13aa0106be9af8af538fb4e
SHA512 0f21879ea63a2d3a576eaa72344363d3faab7f53247e69a422a9ba879400e7dbbde618b122af0be208d40d1a66417d6873bd8955157ae0d9a462cb26013903c6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 635b5326b4de0343fdab9d46191a6aaa
SHA1 5e65838e14b6b40c71ffc7ef844cea20e0148b54
SHA256 47da86c2644d1a050c1a8dec5d3c27640dc2889652e82d1daf7e244757410f5a
SHA512 1b98e93fa8f30514c0b30238657af7779d0a350a9f323c091969ec35759f6826c92243d39c84e73b04856e5ffcc409c535837830912ce1b1af3dfebcde7def01

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 af195eb306bd7e9dd27fd338533ce782
SHA1 f7a205940080c78f893d973607c4784421b60d78
SHA256 a1535da6672bb7c09f3ccac5822181f76d5fe441b95b19626111f12065591a68
SHA512 9ddc0478be74c1cb726ab65cd88f9dc63c4d8ca179fde7e23f3992b61fe700179b2bd0c6de22ac202e3f2c09069a8a50cf220dc244fd18a686d40102deb23d6a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 f2250a550bf48538a07188397171c00f
SHA1 2a90c4af4c793f98578878f7daa51fbc0ea0f746
SHA256 e27d1e9bbdd16f4b6500fd99fce7a409e01a4bc0451d8dca827a19f0654e9b62
SHA512 1f4a974820fb7ef886d42877f60ee4dd1da542d977063550b7fb9931a75e2fa49750c6e89a2deed7784a6fcba4269c43ef27860e8cf7788da73c74c2f52acdcb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 3e20550ac57b5732c110b00e553a9343
SHA1 3ed86c3adf539896c9359ab595e1a2d11ba6cd7f
SHA256 434eb138d459388243c68fa39a5c954c99302cbde10534d3754d8c86bd54cfb8
SHA512 fa9cc6cec1ffd0a3dfaff0b1501ef1384b6983a6ce7dc32612df25d915076eef17d574d8fc8d46e04b87e00177e7258ea1cbc3348721fecf695ac4d714f9c066

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 f087c17abf2c11ba71d894561a1b78af
SHA1 7aaff1bee821839a0367d4592f394ec6f79c1bb4
SHA256 6347150e79a563818507d8020d61e29d0fba19979e244a19f1533c172b608a08
SHA512 7e970c7cdad54e9c18e29efc4b19f7149d5f009acfaaf5400ebd872585c9d3a5262be332f1ee80af87ef86233052f9126db32c59fc91f1e15c053cec0783afb6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 e327d0cee23c17c9149411e05141f146
SHA1 1f1fa3d128fb007ce954d3a48b64b946cef709ed
SHA256 9129ab3a1f7b49154bc3834364102325542bbf82573af0fd260ed5e9b674b3a9
SHA512 5360a70c1201a207489ddf2f929790f0c55ff72a787cf58128c8066cfc100f5545ce475ebf8dc463679d253f8328e5c236b22ed0e9e24a846bd904dce527a437

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 72285e561eb89836d1c4c4b80826934c
SHA1 8a871586c2ae38c167e8a58357bcbeae19007fce
SHA256 dfbcd4da7745f7793d7dd07a3074a70a58d2383f4d7790f6214744cd2e950e76
SHA512 e7c07121650fd3dee7029e8a7f8bc0ad315d00584ec6e6bacf5c2f71fec5ced8c754281b02a53dd526b075d49c8d457993368e51e33b3ba6a3fc8d1cb8b7bf6a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\442692ba-90ed-4fb2-a518-281b947a8d2b.tmp

MD5 a1f13f09fbd470c55da24fdf5c64c125
SHA1 b598af1c68e87414e1336461b1c76fc5e62d9b10
SHA256 d7e0fed4609ad6c923b70f43b00ee3102437815f1f663adb902450d55e1d44bb
SHA512 39623827c99883151049ef3457372a44d04970d3d505ff4778503304e647e3749f940429e7aaf12181b7d48261a4d877a5ad07c782c1e46ac5f553b2b077ee8b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 e670c71d98487fd0927230aac2fa65b6
SHA1 e9772c926ffb5273ca3afb65c78b39200df0b090
SHA256 f61da2f1cef14150fc721711b06558557ae5ffcb7b400f7eae0b11a7ef0df177
SHA512 8764b7c33c8165a3a179378d0ade422d735c34dfb966fc08b7646002940a0ff3f600d41f88a09a668d1c62babd1b4f5aca8b852f2c28d59f86648b780ba04f7d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 bde38f4f26c53e67bc49d3323cc78fb6
SHA1 4393ac319eee518a0adcf02c9dba6ae51e2a73b1
SHA256 c45336e744ed8639835b5a37024071df1e59168e056f1943a791379300939abd
SHA512 718fcf29a052e0ee9ca2a2357fe04e4931dff2d904f63bda95d1b6218663ebea762e0b773cb5ddc2188a340a6102c4c71a1d8e885bc163be5e505610fdcb3aa6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 1dd198bfd8107a23746d01b7d384d1c2
SHA1 8945fa3a788c96bac48d31ac1ce862c5f56e4cf4
SHA256 35d1bb3a335d6e4de570aabf5f35949da78a596ae5603624abe53160a4d3752e
SHA512 2616bdb06dadab7df397ba13947363b48e09c8b14587680f01a00db0ceb3f15a662c61f7d1fdb3e8c31f3db6be9207e73f993e5c150976f1f75d04e9aa6ef3c7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 275d641f29fa06d8e677893d683c49c6
SHA1 9eee27f61fd75a6d27b2e62a3b6bf355ff611696
SHA256 cc9de3177845d5852ab453fdccdcefbd41a0c93eb559a8b69e2e62e2259e21d5
SHA512 c1896369faab660a63c7dbac78bbc1253bb4426d4b2cb174cb0db08b9a7bafef129f188ab8dd67bce2279633fae07792e7a68dfc9798e6b07cfd3b55601553cb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 fc06c36216cc62f0fc15c0e7698cc911
SHA1 d3e091f7e332356b9789e4c39a3cb5dea4b647a5
SHA256 d48bb5fcc46686f1a91ef46a6ece532defded35c2ce84140e8b1a555741c2925
SHA512 58e24ea0f06ca4ff37c43526e9be890ce312adb252cf7f169075a3fbb2f3fed69f7eb95b3292a5160d12f8b53be4bba4b7d9a299ee6cd6f51bcc55e1fa128afa

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 1e8953c235c9b5092269552cdac1bbff
SHA1 3cfe98503421fba6e8041f3563355317f8b0e91e
SHA256 477c4c2d377d65a1b72431e449dd7608071ff260d925aa61593f1c64408614de
SHA512 fe91361aa0901c422734816d7432a928c52ccc4acbb5743dcded2c00cb34cbf51f03aef6ebb550b2089a90653d59ea74143b7aee488275d2f5f8128c440dcf98

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 5db7652e8f53996c3e39d86c5a0c497c
SHA1 251a4d377a9e4e1efd893bd6ccb832af77770d98
SHA256 c84a8ee60d47cda88329f26d394779d8a530e78cbb8d447b7d71e9e64c7db0ec
SHA512 fcd9d9c546bce44c3d9cf539317dfe1466e021a3dd439fe7a7150dde50411d0ca1ed5a2e7f1484f0d22c7cf0e970dfffdff21a520c87cf23a1645fb46dc2c491

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 05fed856415ee6784c9aec97678f1a50
SHA1 5ce60c54f33f5e055df5acc4b0fbc148cfe05edf
SHA256 94e2ed0a1aef465fb4cad8021ad351c4b9a700b21b4ff666ddef20bba3151dcb
SHA512 90d65aa0cd36f7b3291287fc2de8d5d998091e5869ddbcdd3f0ef85f64a5c5abc68b22270c0e94e445cfd3705bdd8697d5b55149484cb68c7dd6e88248561055