Analysis

  • max time kernel
    141s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    09/11/2024, 19:13

General

  • Target

    BlueStacksInstaller_5.21.600.1019_native_37af3e2585987908aa6f7b6cf80f61e7_MDs1LDM7MTUsMTsxNSw0OzE1LA==.exe

  • Size

    913KB

  • MD5

    86b016ee6a71a5219f56779885f691ef

  • SHA1

    1a40a93403e1004f7f8033c5afee8196db16700a

  • SHA256

    a56fd8aa5ffdaddaf58e4fbe8cbb2359fd11f2a93f34d9d0df610baf96972207

  • SHA512

    9f9860782ad93a3a43a9d4509635ac5a08317d3ee60ae314ebdaf4b61855c0a697ca0e5561b5452040763bec719394baaaa1ac4c23c00842be4806ab4dde42a7

  • SSDEEP

    12288:tivtCXQd0gjKX7zuqGKY5Ha3z1cNoaMq+zfxUEwOwGPaGb4hmsLBeJs0RXfGPtRF:tivtCXWeGKY81Oq8wX5RXfGPTSKdvaU

Score
6/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Executes dropped EXE 5 IoCs
  • Loads dropped DLL 8 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 28 IoCs
  • Modifies system certificate store 2 TTPs 10 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 30 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\BlueStacksInstaller_5.21.600.1019_native_37af3e2585987908aa6f7b6cf80f61e7_MDs1LDM7MTUsMTsxNSw0OzE1LA==.exe
    "C:\Users\Admin\AppData\Local\Temp\BlueStacksInstaller_5.21.600.1019_native_37af3e2585987908aa6f7b6cf80f61e7_MDs1LDM7MTUsMTsxNSw0OzE1LA==.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2432
    • C:\Users\Admin\AppData\Local\Temp\7zS089EFFA6\BlueStacksInstaller.exe
      "C:\Users\Admin\AppData\Local\Temp\7zS089EFFA6\BlueStacksInstaller.exe"
      2⤵
      • Executes dropped EXE
      • Modifies system certificate store
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:984
      • C:\Users\Admin\AppData\Local\Temp\7zS089EFFA6\HD-CheckCpu.exe
        "C:\Users\Admin\AppData\Local\Temp\7zS089EFFA6\HD-CheckCpu.exe" --cmd checkHypervEnabled
        3⤵
        • Executes dropped EXE
        PID:300
      • C:\Users\Admin\AppData\Local\BlueStacksSetup\BlueStacksMicroInstaller5.21.301.1005_native_37af3e2585987908aa6f7b6cf80f61e7.exe
        "C:\Users\Admin\AppData\Local\BlueStacksSetup\BlueStacksMicroInstaller5.21.301.1005_native_37af3e2585987908aa6f7b6cf80f61e7.exe"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:2084
        • C:\Users\Admin\AppData\Local\Temp\7zS428021E6\BlueStacksInstaller.exe
          "C:\Users\Admin\AppData\Local\Temp\7zS428021E6\BlueStacksInstaller.exe"
          4⤵
          • Executes dropped EXE
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of WriteProcessMemory
          PID:2756
          • C:\Users\Admin\AppData\Local\Temp\7zS428021E6\HD-CheckCpu.exe
            "C:\Users\Admin\AppData\Local\Temp\7zS428021E6\HD-CheckCpu.exe" --cmd checkHypervEnabled
            5⤵
            • Executes dropped EXE
            PID:1584
          • C:\Program Files\Internet Explorer\iexplore.exe
            "C:\Program Files\Internet Explorer\iexplore.exe" https://cloud.bluestacks.com/bs3/help_articles?article=RawMode_help_Win7&oem=nxt&locale=en-US&image_name=Nougat32
            5⤵
            • Modifies Internet Explorer settings
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of SetWindowsHookEx
            • Suspicious use of WriteProcessMemory
            PID:2620
            • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
              "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2620 CREDAT:275457 /prefetch:2
              6⤵
              • System Location Discovery: System Language Discovery
              • Modifies Internet Explorer settings
              • Suspicious use of SetWindowsHookEx
              PID:2640

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416

          Filesize

          1KB

          MD5

          55540a230bdab55187a841cfe1aa1545

          SHA1

          363e4734f757bdeb89868efe94907774a327695e

          SHA256

          d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb

          SHA512

          c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\DABA17F5E36CBE65640DD2FE24F104E7

          Filesize

          1KB

          MD5

          c6150925cfea5941ddc7ff2a0a506692

          SHA1

          9e99a48a9960b14926bb7f3b02e22da2b0ab7280

          SHA256

          28689b30e4c306aab53b027b29e36ad6dd1dcf4b953994482ca84bdc1ecac996

          SHA512

          b3bd41385d72148e03f453e76a45fcd2111a22eff3c7f1e78e41f6744735444e058144ed68af88654ee62b0f117949f35739daad6ad765b8cde1cff92ed2d00c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416

          Filesize

          230B

          MD5

          8917fda047b7f712e168a335e18a375a

          SHA1

          8f945df60c912e3ace44fc5af90fb21a9f803539

          SHA256

          0a7f9216ca2a7a65fccefd75fbd47e16f37b379fc598e991b1cc3bb739d2b850

          SHA512

          b0190ebe3c0da33555c3a07beaafd52f21ee1d51aaee14e8920998e4eb84a6e121d3909a5fa9a993f7bd153d2232492f3b3dabbd00b6a6158aa2c21a6d79ddc6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4a1abb6f374e66f82a123db51d6bc940

          SHA1

          ccf4eb126d54001203a88e8a5dab603c71fa3238

          SHA256

          3baf5366010d009b0fe6f77dc117c5be2e166f655378671dd4c2f09ec61b2ea7

          SHA512

          ca275d510e00502d27d1f13d930ee7bd01fe9b0d85655bae714a67f83ae9123bf744ffa307073810eadeb252144bf08561f3e3a46e514e53fb872b3c74fdd8df

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d0f1005157c09290388580f607aef93c

          SHA1

          35ab2b7a4f3922ffa8c9059c63e613f18607d771

          SHA256

          4a985e23299b72b0e321b4a761ebc72b35fb4de91c03ccb16cc8ff417959aad7

          SHA512

          004b6d1cd22e77d72ba67cfd646d92be0dd5ae31fe5a119f099981696f398f12b3b05c14c2ceca1ee22eebbba074b1fc4faeb3dd777c39d39e7e3b57bfc5c5e3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          dbb8da159e99fbac56c0b0949cb5bafe

          SHA1

          9b66ef03f7884f8ce9698ef9ae65851a7352cf43

          SHA256

          0c94f0705d22ffd59d64ae2559eace77df73765f958e1eccaa50bb44440207b6

          SHA512

          8ef260ad70adc7dd875aa324c951087a4cb1662fbff34c7aad8a46c4b4083661cf78586a35ce094fa3606ed72153128cbd77ef55fdcea602176e2b0dd45f4fbf

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          265276519c9c7326a1925891ea682014

          SHA1

          2f22eef258365c002a8d19afc9b2386babebecd9

          SHA256

          3ad2e67de13d15fd0aea2688250922776f69778e1bd1e88175bcbd6c042ff175

          SHA512

          11e057f17e6bd3d65e00b67bb07713fd0e9a9a8a04b2096cc295f87938557dcc2897dd31ff2882b62e2c91abac2652040487f45ce7852f1c23390832dc0b4bbe

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          1ab0cd7284931402dd92c2d118c34e99

          SHA1

          e80bf7006dc04ebf87e6167eeb381554a0189921

          SHA256

          8a010b805aaa1b18bc5c5d7337911a4189a69bbe26f3fbb5713b4e50aab267ce

          SHA512

          069f2f05356b5598cfae4c3290b3556ecf072a06f127cc91bf297a94d110caf8631ed4315d98a0f4886d45dd7d6f94e3ce9c6096986c61a6f23db389e60b7e46

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          28dcd2e11b74a7cfd5ec538cd38007bd

          SHA1

          5fe9f4058921a2c9b9ac0446e9e14d8b6951a64d

          SHA256

          5a1be80f52278482ff444c52220626c4e83db2f8aa2d05c4f62b912d074df7eb

          SHA512

          d85b1f072e55b3b1fb6757e4e8546ff7f0817f1b306f72de9f4ad9f9ab85af27f3f159186d999bc49192c121a1a18405e554312221219c7c5a5f6d46b93ca555

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b064651241c2c7dca36a8dc22c25306f

          SHA1

          d65865cce9ab45c440bcbf676fb704e38c80f932

          SHA256

          d53dd5675b96b9dd07b460a37f6ebccd0f2ce510ea178fc4260b0723f683fb04

          SHA512

          41d2d2f94ed03fa22532e827b308d668b96b18b1730c980625739f689c5058691a19e0acd27f2728f25c7a8f0a049f57785fe0c928c235d15f91e5cd0667fcb3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          1fc302660a8b2cb2cea1634f29785989

          SHA1

          aa9f0d20d55d335a9c213e1abee8da890a5e1206

          SHA256

          ea6450530871e6a38217a2e36771d2cca3a73def48b05a68e9d68b5dbd0d3619

          SHA512

          6b6b04b263e3c9dc745e407e6ed63a03f44cf3da0670e83c980227186e130f7ca2770514dedf19ff157f302eca98d90f798064d30962c6d2e63c1bd931405120

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          7d059c1e86ff6eaf3bcf80ac760378df

          SHA1

          f85da89eaa1744c1dcfffd33dd41e260b9fe6f5a

          SHA256

          9a36504cec69ae97ecabc88473723d0f032a14d6e894ca768e9c56538054b832

          SHA512

          21e027755f716f6eb7866f5edf492b371c039d8e5c9fcff5fd67676debfe73d9ae1c0788d0da4e48b1bd6d77951f55a9d15c8cf2b5de04752e6656c50020cbb5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3264b0d09f0c62907c4b10c121220295

          SHA1

          83e18a867e8075642717932451534df9ba9d2b7a

          SHA256

          5901e3de28b733e88c3e536b02ee046f681d951eccffff38ea97bbbb643e8005

          SHA512

          6854e95b5c7f92b033a23996d915f64d3ca40f4ab6a7eb0b8ae9481820dd7025a0737661a7444100fb8ca39787fcb4f721b9d3f6760163ca34ded73b237f149a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          03b1cf4c4a262b61a5a517c62c8ee018

          SHA1

          2114f3ea644e1f44eb1f8c6fbe53f169b9c24acd

          SHA256

          1111b2bd05a830ecbbdc9ba2f07049da83420fb5235870ba481edcf107dde236

          SHA512

          3169861a45b16a334c060c7731099c8bbbf2bfeadbbff570db35e3a92e2994fdd2592b5b67fb143fc566512c4b5c90196391262346698f3edd1ec03f24b108fb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5370480c5b4947214cbc6addef0fa8a5

          SHA1

          814779f4986e7d51e91d65e5a20c08bdc66f9991

          SHA256

          2abbba134570c28ef1037357a6f03258983f115213ae304982bbf64cf4ac90b2

          SHA512

          c33d7fd2bf40f02c4e570f77109551e6cdd5bb13b02c0fe5c453df57bf3f779d353d8c33ea9272a3f673f6e80be17a6c6f9d16ae8d89d70036881f945778b237

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ba1c11883ae4676a14d2bc452f8f1722

          SHA1

          9dd46447c4e10f810b678b9b2250607ddd059943

          SHA256

          61add5f04296c4baf771f07eedf480beb7b1f1a53b3a761c54d357601999cffd

          SHA512

          5ccfe8dbc83afa379dc59672c499ce2912dd2ffb755450122b7fc160e5b8ae5e93a85297d53cf4d9eecce5aff945e900479e2f58ea0ecb88d379046ff3a998d0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c572a6879184181696491a74bf22fd9d

          SHA1

          b2c85b23889638aa54a2f117caba22fe9db0e863

          SHA256

          3fd9e392255cb49fa58629ad7805bf76bbfab2fcd61fe1a2ad549094b47f2fec

          SHA512

          99da5c7d402bdeadd4ba24a2eb03e431ad1a5b35c71655b1c76ab5446d3003553befff3985e72869d6b93399b5a1f4fa911b17d4241d2aea1dfe5f57505d4db3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4960c54233ed179319c51730af008af0

          SHA1

          8ca0cc5688fe2cab6fdb5e93c844549e5850b851

          SHA256

          b0f4c179475cb4c6489002f020ceae4b75692169a265b53aaeef4bc76070857b

          SHA512

          9965fc16151c5c24d2a7afcb3697b9615144f993b4027c7af05127159f10ea1bf72d923fd79e4cb7ec5e4e965976a7d9addc2e6d3955bd57e17f3c1eb5cda92c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d324fb5a73a582b99b20621ea25b6bc3

          SHA1

          5eec60ee43cedfa5cad6d8a79ebf6efda24026bf

          SHA256

          d73fe8c06110adfa1e31bff81bdfa716af27b487fb89358b553e611f61555266

          SHA512

          efa2fc81d13c6838bd692833223a62cad2e51d486ab1bb472a60ea363d836213dc39fd65ec250a327473f1b805b279b531050960c29c9bb54600c4c00d6b7a1c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6069e9fc76b06d8a639bc32c5b352098

          SHA1

          f86a948f58de6715ea895f93852543a801d4db7d

          SHA256

          50bb0d64f2e149dd1f425a5518eb30ffcd136ff7947805b7c5333c17392f230c

          SHA512

          4d7303fe210114e67cc1eacc9183e19a73da1d754b4b8d9b96c6536813a65d318c4ad0e60dfc7c033e4190704d699f353fa333247c701ae2ed0eb7fec3e6baa2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a4444650f7ba9f75245e44836a95f80b

          SHA1

          67bb7e63f7b190cc145ebec31ac8fe4d3b9bc391

          SHA256

          0d14c4705cb38aabbc63eb69edd2954cc52bec78e46a1ee52c3e71855542eb4b

          SHA512

          14298f3f77ea217334d119519c85be1ef5bce2348cf7d52e6b65efc623d33d4b5c3af4ff2ec4e0f180e705dbb68e4bcefc4f4c8596c29b7000a5ad8d3df94cb8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2a38617f904aaded8f670940e1c640b0

          SHA1

          7ac3dccbece5b80ec62cb0d51b471ec6b5281874

          SHA256

          9a5721f5f3734d1fdc6cbff9ac90eef71621570fd6ce3209e4cd7bfe41848615

          SHA512

          ca6aaa56e4d8e548d53586bef1f638ac428cbaf912854cbd755b38072c8be05e715771f84630e40227e01360108d6e983a1c73f931b2c7b2a2a96123c4ed68bf

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          55bb3f655650ed0181d8806ebf283eef

          SHA1

          2907202fbd2cc9a0d04622858b569d8b420440ef

          SHA256

          2ed8b6d4be6cdfeaffb3fb25c7b1660d967cdfec14f2cd19e1c3e92b0a3f4f57

          SHA512

          f39a6e505e6458b872b200213762dd2d88f711ad3189b9e827a8d9819f239e487f8a439626a80cc2da4d83018759b19bdd4ee4a5fa4835f32014fe422cbcb20b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ca690e0a369a57ac5b9a2552acc376f6

          SHA1

          c9184474b882f6f9fd36f99c8801bf91353d4098

          SHA256

          763b188a95e0dbc998d6aec6c44d20c5b7af11694a8f37c626340c3479e32bd2

          SHA512

          8ec44b5e81afd39e88fda9e507d81678877d28a5357c9e36fa2f3c9bdb3f6a212ecb538732236df3a2f38806bccc7d47ae96fd1049ab116a79203a1b56f0a6d5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6f41121d1cfc0ea88d1684b6e9e1524c

          SHA1

          843fcc68db26e389fb6661b17aace10216935cc7

          SHA256

          d1e98279f67d4c05a5e141bc6c4d1eb3c6acfe533dbe6ba4a051bf51f449b256

          SHA512

          a378d2c6e7399e3f7296cb203329cba98d4c1afa5cf4a737cde4a635008ec811ede968ea917a3ef0237cf52968eacdce5a5640871edf64ccb7ab89eabc1fac06

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c782295dc7c66293d72306469e950887

          SHA1

          acdaabe6f7faaf5510ea2c4f1a6b3450e89efc23

          SHA256

          aee6d0cb05abd314d07f6c48902ab5ed0fa08eabc12ce8fbdb733bc340d55110

          SHA512

          5ae1b7cfdb806c83f3a5eca7ce96f0e1ab86c127a02d8eceded0634b7090a1dff778ffcc1453ce5c6dc474d57e8ba45d221126392d7c986dbb3d025f5f39f4fc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          fd6a6c92b407af9b5a172c21656dc072

          SHA1

          531b85cfd35705bce03ba252f8f7add162c9affb

          SHA256

          b10a24afe842f003d04dd499677f940db8d21c18d2f8b7957dd9dbb014ca893d

          SHA512

          597a9ce303aa8bdc02f258ab321a0e040352919193c881230e46dc9f57278039460cdb07c35ee7113291b606b08c5ba78fab79805f5bc7d1d1befc04866692b4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          02efea03724ad519b4f19d19c3519f05

          SHA1

          d0fbe7cedeba530ef1be776f548ef465187df4b8

          SHA256

          5f2892a5df2381edcbda2efeafbdac4b5255c42587e313502304034685cae215

          SHA512

          5aab2275dcfb564c9e8a4598f14c0e2256389c526f0b408ce962cb58f4a203107915dd13c99bed374ee045cba6f02bc376ff27aab19af39db891b17cd9e5aeaf

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c3aebb2baebda3c9e90f7e8e9c5ff702

          SHA1

          1ebac326f2a59633de00e999c9680dfa0264e0d2

          SHA256

          b7da960e486261ff60680bfedfba7a0587ec650277f872b8ebeae1915356c9a6

          SHA512

          51f02f37fbfdd69b00fa88a4270186424ae29eacd9372f25d2b5100e90ffd057ef6a2b997deede3350f650bc173fdb5dbf3f49fb02aa608304e8db6e0a01d922

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f0ca0d7777c104c2db3fbc32b0d45113

          SHA1

          081e24f54360d7962bbc12307c9a1c5ea11d0cf0

          SHA256

          c8a2e633dea171d69934dcd893d84f91dc2b7f706feeea3320f10b4d1609c575

          SHA512

          2e07b0a953d6d08975f9146d26ed01a298864ffdc7a42fbba257f53eb262c12bbfd8b3cfdca73ac18fb0a9e4b1895b3803764b18d69ebac387ce7ca1ffb52452

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          179e58cc5c868b4c1790ae046960a826

          SHA1

          1326dadd6e597fb69eef8a86464f47c1a2a75d1b

          SHA256

          e174cca96359d26b0c2f77f82aac0aa158dffb69958fcf4f67fe83ca7a5589c6

          SHA512

          37a856ccc072f532b786ceea79c5e520bf20dcaa5f01b7f0d1e4130ce30e9bc0656bd622f1a2d505886488dd28b6db0b28dc019066d95dae9b1064dab046e036

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3fa638d757bca441fcf66cf67bab6e3b

          SHA1

          0098be44e7b0c3fac0c47dd6256e29fe880a1c89

          SHA256

          34381ce2495ad5a7601897b3ae643a8d85356fdbafa719c84f2ec52889d53596

          SHA512

          6a8690a0bcfd93149addd3630bb5523f7954f6e66c754b99f014d949ec17083cccf850a882937dbc6f688161e99ec1fc4f61ec9f367cc2b13c5584f943b358f4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4cdf7da15ee658ffa2aaa312e74263dc

          SHA1

          ec570f172e9bed15187e25f8aa1f96cfdfec2658

          SHA256

          42b33bf4c91c356ea1fffd63449a2af74ca2cbd086d4c2e0e3d07f442ca6d0bb

          SHA512

          662b62d93428aafefe39fe2cff0af3f03c165ffc6f3c27cafb8df81113697acba37e32285aaa7dab8322f445ce3efcdd8033892d262fc150e6779785f72e52fc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          dd6fd0f33674d545892c7c6760877143

          SHA1

          6cfa6ec0cc644ea59e7af9797364da8461e4027e

          SHA256

          c2fc24f2086f0852db056f50bb436625352b2cc6223b8d04f382a12d7a7aa58e

          SHA512

          7565c570ea1ef7f4b3f9aea3c4476afcdba910ab9d3ca68135652e2d50fa237a1a031b3a4192e8ef7d3e1a1d883df1662cd7379911faafd0c1d257226a89bdda

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4eb2e8b3186277f360fb002abdaf52d1

          SHA1

          49318d294f44e52e44c71dec3dcaa97b3984e8ca

          SHA256

          3cdde3955a54f29fc5a064cb520f8d48198936cbda89619ff6056152af906ce5

          SHA512

          cdf6784799e58f53f9a9a8e2d5caf9ec6c9bb4de922a3a35b2820c808faa48b890fb13400d9e02657cc906edd9a15d8503cd5bbfef83262c03f38cbd4d8fc421

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ac8c1bd592690088b737e543d7fdaf8e

          SHA1

          0b7807d0783be03f3533ca3bd13c5d88b5b8d307

          SHA256

          9123b95044ece3db273cd6a00cd26a0f10ee63d9c34df95ae215ffd0d54fe58e

          SHA512

          f743f59f26e3445f2a867cba8baf07276d83c267ee416433e48384eda4b816d12b0bd34e90051ab41aa93bd8da1e6bbdf22dec6ea47c28b402110806d708dc17

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4469b5bf35517bee31ee171883d1bba8

          SHA1

          6de7ee507acde7808e65959cb400fe4db4795eaa

          SHA256

          2b6ebded8a8b81f5441f862b16a04b248472729cd0b2e087e1b7e053ceeba4db

          SHA512

          15fcbe0b2d9b078aa9c05823afbf459ca15bab30b8bffb18fc277f9c5b65f0aaff40d64a3cb2cb35dd09d1e69fda9a6e43f451c519475cd223a162d8d66b38bb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          9a93cfe2e2f90f1343e748e2ab6ca266

          SHA1

          f1bb2e8bdf8c152d075a09d4942a125bafa7951f

          SHA256

          712d45243f5a0bdef7dea75fe80b63209c88af8d9ef2b3d6dcde8d0a59d5d5b6

          SHA512

          6de68a37b34bb07f7b0be45baf2272aa3226dabefc8598dcd7c066327320fcb71dc167ac5a62ccc9fdf5df7fec042426d2e6d56b36c52772d09c1edd171a4605

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b3b25c5ddcecb0223ae4e3db588a105c

          SHA1

          f375280ce850dced14534670da0b11895205dba2

          SHA256

          9be77fbe86f314f10ce255d291180a976722b14137d034d6a2559ca537346011

          SHA512

          42b72722bdfd6d63324da4e38dcba6957ed4ebd1a9087948f37ccf8db8e21a4caf5ad8d284c93ddc3fc47e0c5d719a5240659f804b7f5f86e8c085f8ad87851f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0ecfe5b94d184e2b2b9325d229f6a183

          SHA1

          26d24b0420829faa95ee74e44f7e9bb41aa67e7d

          SHA256

          f5f5398a9958dd06af420d0a1a60dad3d1f6f96d5f44b1c6e6716e24b6658193

          SHA512

          e95dd9bab0cccfa8404f38da44f628833f1f56706f37bb78d59bdf16f3d074caa61c69883376298e115a79cf5ca52f2a6d418ffb7131a2184bbb1749ef49e4b7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6fa0bd7ce03aaec67cfed5d30f3ae5a3

          SHA1

          4647c66f97eacae17e4bc9acd90370c550b4a110

          SHA256

          d513c49d6c3a05a04e6321e4c4a4274c00375c0a2f23421cc533919510db4361

          SHA512

          d27330bff08443f6588c464f00f709ec03c5fa713d0060c23572876fe871d8409f51d9d4537c902990cf1ae8827366daf6044a6c5e40b52a54875ead86ffe21b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ef2fbe1be1c49112cf3b74362b6649f5

          SHA1

          a64b57bdebe0670afd78b37a0348bf8d320f9b87

          SHA256

          48ff1f1272274469d0644b093253ab784f163d1399662f5d598420a302c30e3a

          SHA512

          99da6b6263232c2509ce2436d014815fe580035758c989511788d1af68d82528364ed1ca625cdb4634dd2714b007b2d79ba639f3f917f4bc9bb4a8ca8016af8f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          fbc2e0cd2b870c8efc4b4f14205cc745

          SHA1

          49ebf80953a00de7aca7c782a551875354e6d50c

          SHA256

          4b2f951836d1a16fb799b2473f896c3c39f731d71f1e7b996fd12ef4f84484ec

          SHA512

          20dcc15913f4a15f33b91d74dcb5c89a8091159db93f327c37bba772be6542a27edc65e67a4722dc5c160c7d0c7813174fddcc0541a1ae51f42876eb73907d8b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6c89820be1946b9fec7d6cba15266757

          SHA1

          23da9c21ec38b2397b9ec5cdb1fbbebe6a4a1f4f

          SHA256

          98f1bbdfd60b6099abbe6df76d6795aaf433d49f86235db76fb3ba3cece668c2

          SHA512

          4204474613728ee7f75e385543f1f6edd5346eefa1878258c06910ab76dabf4ef0a2216d19e4a14f05d6fe2e10f8542ffff9c43ca200bc4d02bacf77e86b2a1c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          1caca5ec3ba4dfcfb7ef3a05b4c2218e

          SHA1

          1666bbeb1a20b71b2b791ff72b50df9b2f4e93b3

          SHA256

          880c666e4544086464caf4eacfd71d44640e41b1697e2ebe7b84f770f8cdd6cd

          SHA512

          dfc3867471c5fa5c1bfc2fc20bfefe9a857a1bcc15278e233f2cfeeb29333558f0155081de984a34efbbe9c20ca931e6a5b122254b18ebef1c822728b5f428ca

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          873317641e63da422af07a2a21993b65

          SHA1

          6bd60166e44ade6c33a8023571933dff057472b5

          SHA256

          4a38dc0a208ccf0fee7d2726688e937a74a66b6d4e1f6d5a39a8711a27df1e3e

          SHA512

          4d426da8a9fe0a5c84249cd9de4bd0441f1ee21dc40315b34748c53c540657cd7bff9bbb5ce0630c5c818759513e582520669534338224bada351f9be767e99e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f04d3d52b8209d82dd6575899145417d

          SHA1

          71fd8dd64c5864000d55e28ecc8253d2b330044b

          SHA256

          b152bad6a588442cf2fe7f3bd81000364a3cabab30910a6a5726c9d7fb2b0103

          SHA512

          7977891f48e832040377046d0f8160fffa00ae8a61a69bd70a95327adc3270ca2ef36a177a45ff131cdf32fdb1c2561fea163ef22e6ca99f2468443de28e9565

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f5646555ecf2aad4e1058e6625c9cf92

          SHA1

          94a06f14d98ec7e9f09ebeac6722f72eb1b912af

          SHA256

          d7deffa473c198399de342d6166bf7c4d69190385c97c95bb3ebdf406eac9b18

          SHA512

          4fdf3d71ff99796a9914717bd0d85a9aeae0a7a048ad6c73d1f39f181ab5dc373b35841f28f831826bc832f7a42ee61c6bb2bb25f0a98c006ae75c8a51873f99

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          084582aceee50d122ed70d3e25bcc856

          SHA1

          647c44808558efa1ea4ffcd0758fb870bc14c90f

          SHA256

          731b646f2cca1a28d5ed98c6449ef4105f6b9577269aa5df2903c08628c8d4b5

          SHA512

          4d7a1364b03c22255443424f2827d6e7b1ed0bf055d98dea74286ce84bc4d47695e95d0a56607326bdca347afd673b1ca06dafe09a25d019e7bccf7356164620

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          18a225c198d446b50139a68de54d7d86

          SHA1

          eb70edf14412eecc5a56396ce5c4d34569cd93d6

          SHA256

          94725b7f3c0ee18cdd04e2884fa08093474abcc563a2b4cd83747939d279ce09

          SHA512

          9a4ef134f3250c3c765fe5c2956df6edc2c01bcc935dbde4079564431d9e7632712982879e090fa415a0cb7a042fffc4ef973289416d4732ba31fad3ddd2b8d0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          532019f28d0c392f00ca5ad78299c27a

          SHA1

          e6d91f00a63959210df28f7d1cc807f9e28610e4

          SHA256

          52047dbd221c03ecdfa8a68a2f21880325a0e4539f1ed27a74b677b00f4ea0e8

          SHA512

          6c60d4a03ac904c67576a17d7403c749ce5931321e7fa6ab585642aac56b55b688de1df93edabeff8354b901de72c63dc95ea2d59d6a3c3ce76e258db98f2414

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          25291cd860864e0ef5410d8ad1fa7438

          SHA1

          ea73e11980940c534167258a4f82f65ef7bb694e

          SHA256

          1e55796bcab0310d8d8f48723dfeb42d44077be853307e05fe22c616e81e3549

          SHA512

          ef333f5d57132368c99ac22d54915ae22c3fef84c0d3bc1a30d291c65aa665e53cbdd02c62dbf6e77927eb796e0f3aa2cea70c1b36e707414564e0a952d92824

        • C:\Users\Admin\AppData\Local\BlueStacksSetup\BlueStacksMicroInstaller5.21.301.1005_native_37af3e2585987908aa6f7b6cf80f61e7.exe

          Filesize

          911KB

          MD5

          75bcb927b59b52ec59208f12d02ae1b4

          SHA1

          63d892e26cc322f7f3e630154ded1236693deeb3

          SHA256

          3128acdfb50a840a1a841b7d3a6d06762d9733d1cc35c743102d0ec100568578

          SHA512

          f67a9cd9cecbcb50d456740792235d2ffbc187448f9f66a8d7801c08708e23969cee46d21f829abbfa16d9cf44eaa908596c3a6b09e560ff1bfce331491b80a1

        • C:\Users\Admin\AppData\Local\Bluestacks\Logs.log

          Filesize

          591B

          MD5

          ca58d23d0c2a67e0d1e779f167fbd0d2

          SHA1

          c7724499680c5766377638996ff5538a8a740353

          SHA256

          cd20caeb8530231375fca498ac7b7c68d6335a28f01b2e0ac5c913962fb008ff

          SHA512

          7326762148f5d5e51c6594b5105682260b4afea79d6f9b0373f00a7688054877ff731a129d1ff78f5031eaf4ffe6bde288d2ec5dfefd79c6e1f4b8e0d28cac6e

        • C:\Users\Admin\AppData\Local\Temp\7zS089EFFA6\Assets\change_hover.png

          Filesize

          310B

          MD5

          57092634754fc26e5515e3ed5ca7d461

          SHA1

          3ae4d01db9d6bba535f5292298502193dfc02710

          SHA256

          8e5847487da148ebb3ea029cc92165afd215cdc08f7122271e13eb37f94e6dc1

          SHA512

          553baf9967847292c8e9249dc3b1d55069f51c79f4d1d3832a0036e79691f433a3ce8296a68c774b5797caf7000037637ce61b8365885d2a4eed3ff0730e5e2a

        • C:\Users\Admin\AppData\Local\Temp\7zS089EFFA6\Assets\error_icon_72.png

          Filesize

          1KB

          MD5

          4aaf83d2b3fd56ad806708e60474df39

          SHA1

          144777a265879b69fadea3eb3ac6939458918578

          SHA256

          84e59d14d9433e6c3d92daeb8c443063b5e3be6c0b297f0403dbde473a05cb3f

          SHA512

          3b8485f054fe6ed2374bc81cb1786f09741219fbfcb22503707b11cf5db1ab262ba4349633597d5d9ddabc3415b170fa8eebc932f58d211d7092b8fb96fa1304

        • C:\Users\Admin\AppData\Local\Temp\7zS089EFFA6\Assets\exit_close.png

          Filesize

          670B

          MD5

          26eb04b9e0105a7b121ea9c6601bbf2a

          SHA1

          efc08370d90c8173df8d8c4b122d2bb64c07ccd8

          SHA256

          7aaef329ba9fa052791d1a09f127551289641ea743baba171de55faa30ec1157

          SHA512

          9df3c723314d11a6b4ce0577eb61488061f2f96a9746a944eb6a4ee8c0c4d29131231a1b20988ef5454b79f9475b43d62c710839ecc0a9c98324f977cab6db68

        • C:\Users\Admin\AppData\Local\Temp\7zS089EFFA6\Assets\loader.png

          Filesize

          279B

          MD5

          03903fd42ed2ee3cb014f0f3b410bcb4

          SHA1

          762a95240607fe8a304867a46bc2d677f494f5c2

          SHA256

          076263cc65f9824f4f82eb6beaa594d1df90218a2ee21664cf209181557e04b1

          SHA512

          8b0e717268590e5287c07598a06d89220c5e9a33cd1c29c55f8720321f4b3efc869d20c61fcc892e13188d77f0fdc4c73a2ee6dece174bf876fcc3a6c5683857

        • C:\Users\Admin\AppData\Local\Temp\7zS089EFFA6\Assets\minimize_progress.png

          Filesize

          212B

          MD5

          1504b80f2a6f2d3fefc305da54a2a6c2

          SHA1

          432a9d89ebc2f693836d3c2f0743ea5d2077848d

          SHA256

          2f62d4e8c643051093f907058dddc78cc525147d9c4f4a0d78b4d0e5c90979f6

          SHA512

          675db04baf3199c8d94af30a1f1c252830a56a90f633c3a72aa9841738b04242902a5e7c56dd792626338e8b7eabc1f359514bb3a2e62bc36c16919e196cfd94

        • C:\Users\Admin\AppData\Local\Temp\7zS089EFFA6\BlueStacksInstaller.exe.config

          Filesize

          324B

          MD5

          1b456d88546e29f4f007cd0bf1025703

          SHA1

          e5c444fcfe5baf2ef71c1813afc3f2c1100cab86

          SHA256

          d6d316584b63bb0d670a42f88b8f84e0de0db4275f1a342084dc383ebeb278eb

          SHA512

          c545e416c841b8786e4589fc9ca2b732b16cdd759813ec03f558332f2436f165ec1ad2fbc65012b5709fa19ff1e8396639c17bfad150cabeb51328a39ea556e6

        • C:\Users\Admin\AppData\Local\Temp\7zS089EFFA6\HD-CheckCpu.exe

          Filesize

          200KB

          MD5

          81234fd9895897b8d1f5e6772a1b38d0

          SHA1

          80b2fec4a85ed90c4db2f09b63bd8f37038db0d3

          SHA256

          2e14887f3432b4a313442247fc669f891dbdad7ef1a2d371466a2afa88074a4c

          SHA512

          4c924d6524dc2c7d834bfc1a0d98b21753a7bf1e94b1c2c6650f755e6f265512d3a963bc7bc745351f79f547add57c37e29ba9270707edbf62b60df3a541bc16

        • C:\Users\Admin\AppData\Local\Temp\7zS089EFFA6\JSON.dll

          Filesize

          411KB

          MD5

          f5fd966e29f5c359f78cb61a571d1be4

          SHA1

          a55e7ed593b4bc7a77586da0f1223cfd9d51a233

          SHA256

          d2c8d26f95f55431e632c8581154db7c19547b656380e051194a9d2583dd2156

          SHA512

          d99e6fe250bb106257f86135938635f6e7ad689b2c11a96bb274f4c4c5e9a85cfacba40122dbc953f77b5d33d886c6af30bff821f10945e15b21a24b66f6c8be

        • C:\Users\Admin\AppData\Local\Temp\7zS089EFFA6\Locales\i18n.en-US.txt

          Filesize

          20KB

          MD5

          a1e3293265a273080e68501ffdb9c2fc

          SHA1

          add264c4a560ce5803ca7b19263f8cd3ed6f68f0

          SHA256

          1cb847f640d0b2b363ce3c44872c4227656e8d2f1b4a5217603a62d802f0581f

          SHA512

          cb61083dc4d7d86f855a4cc3fe7c4938232a55188ad08b028a12445675fbff6188bb40638bd1ce4e6077f5bfc94449c145118c8f9b8929d4e9c47ed74cf7bece

        • C:\Users\Admin\AppData\Local\Temp\7zS089EFFA6\ThemeFile

          Filesize

          80KB

          MD5

          c3e6bab4f92ee40b9453821136878993

          SHA1

          94493a6b3dfb3135e5775b7d3be227659856fbc4

          SHA256

          de1a2e6b560e036da5ea6b042e29e81a5bfcf67dde89670c332fc5199e811ba6

          SHA512

          a64b6b06b3a0f3591892b60e59699682700f4018b898efe55d6bd5fb417965a55027671c58092d1eb7e21c2dbac42bc68dfb8c70468d98bed45a8cff0e945895

        • C:\Users\Admin\AppData\Local\Temp\7zS428021E6\Assets\link.png

          Filesize

          306B

          MD5

          ae2c73ee43d722c327c7fb6fdbee905c

          SHA1

          96f238bf53ac80f5b7a9ad6ef2531e8e3f274628

          SHA256

          28c0abc6bfe7a155815104883a37a53dd783d142300471064c95eddf3cae0eaf

          SHA512

          5a1e341f727cf1cb4832cced8e96c5a74971451629603c48bfb91ceb4561d0122ab9ae701f8b34681d5f13115a384467d430ccb8282494b40f4577ebc3ad825b

        • C:\Users\Admin\AppData\Local\Temp\7zS428021E6\Locales\i18n.en-US.txt

          Filesize

          19KB

          MD5

          0a041eb21be673b37a9a43f751d83400

          SHA1

          cf98837aeb730d05ec55252277d2ed41ef58f0ba

          SHA256

          708132b01a012c3a43a5a7e5550318f6fe72a98139bba7e4f5fb352b9e46db29

          SHA512

          476051e9cc528c8b72a1ff0aec6f9e05cce4e7069ff4af7e75558664f02a7018304a4d840e694ee811d08895b628da072b1c72b8f605e4212b75a84db66b8b14

        • C:\Users\Admin\AppData\Local\Temp\Cab9D0C.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\Tar9D2E.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

        • \Users\Admin\AppData\Local\Temp\7zS089EFFA6\BlueStacksInstaller.exe

          Filesize

          629KB

          MD5

          0d021ad9fc86a22215cd014b088f307e

          SHA1

          531e18244b9a43798562c1297c09ccc0239adb61

          SHA256

          c14eb1c61d737e195ce06cb84ba2b05925dcf36ac35c1078f260e423b1ad3485

          SHA512

          e5d977d5a3f5a5888e054521168a9ac22712892d5aea225a6f545e9be885deef1983fbcd963927367b2d7439c18b2e6c71a6b143a924a41f5acabc76e0a6e993

        • \Users\Admin\AppData\Local\Temp\7zS428021E6\BlueStacksInstaller.exe

          Filesize

          623KB

          MD5

          8734859b771d26d4b937371217d8d4da

          SHA1

          83b5b32715718a90ddb68db49fc5e4405e456313

          SHA256

          aed0c389f812cfe56c4ca0423935c7eed17e85318be99f654b57428dd6c0b881

          SHA512

          453900ddcd101f750b634c4c89f9bf81a4a267e8af5a2989727bc035d61b65e140838b7f12214cde491f9f7564f3511de625d7d7f65fb25a7d98a4646c3a930f

        • memory/984-838-0x000007FEF5690000-0x000007FEF607C000-memory.dmp

          Filesize

          9.9MB

        • memory/984-1086-0x000007FEF5690000-0x000007FEF607C000-memory.dmp

          Filesize

          9.9MB

        • memory/984-189-0x000000001A7A0000-0x000000001A7AA000-memory.dmp

          Filesize

          40KB

        • memory/984-190-0x000000001A7A0000-0x000000001A7AA000-memory.dmp

          Filesize

          40KB

        • memory/984-837-0x000007FEF5693000-0x000007FEF5694000-memory.dmp

          Filesize

          4KB

        • memory/984-839-0x000000001A7A0000-0x000000001A7AA000-memory.dmp

          Filesize

          40KB

        • memory/984-127-0x000007FEF5693000-0x000007FEF5694000-memory.dmp

          Filesize

          4KB

        • memory/984-129-0x0000000000F80000-0x0000000001020000-memory.dmp

          Filesize

          640KB

        • memory/984-132-0x000007FEF5690000-0x000007FEF607C000-memory.dmp

          Filesize

          9.9MB

        • memory/984-131-0x0000000000CF0000-0x0000000000D58000-memory.dmp

          Filesize

          416KB

        • memory/2756-1632-0x00000000005C0000-0x00000000005CA000-memory.dmp

          Filesize

          40KB

        • memory/2756-1194-0x00000000005C0000-0x00000000005CA000-memory.dmp

          Filesize

          40KB

        • memory/2756-1193-0x00000000005C0000-0x00000000005CA000-memory.dmp

          Filesize

          40KB

        • memory/2756-1076-0x0000000000C00000-0x0000000000C68000-memory.dmp

          Filesize

          416KB

        • memory/2756-1073-0x0000000000EB0000-0x0000000000F4E000-memory.dmp

          Filesize

          632KB