» bluestacks-splitinstaller_native.exe
Overview
Analysis
File Details
Programs (1)
Downloads (15)

bluestacks-splitinstaller_native.exe

BlueStacks Thin Installer

Bluestack Systems, Inc.

This is a setup and installation application. The file has been seen being downloaded from www.filehorse.com and multiple other hosts.

File name:

Publisher:

BlueStack Systems Inc. (signed by Bluestack Systems, Inc.)

Product:

BlueStacks Thin Installer

Version:

0.0.0.0

MD5:

a9f7460e1d11428a46c9ce70c8fe9224

SHA-1:

a88cebd387839bc4a808d07bbb43978d75ecb3ed

SHA-256:

60247516b151b292fad53949b14afa45106732f00179d9ca85852e126c93c5c3

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/20/2024 12:13:48 PM UTC (today)

File size:

9.9 MB (10,414,824 bytes)

Product version:

0.0.0.0

Original file name:

BlueStacks_ThinInstaller.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\users\{user}\downloads\bluestacks-splitinstaller_native.exe

Digital Signature

Signed by:

Bluestack Systems, Inc.

Authority:

VeriSign, Inc.

Valid from:

3/28/2013 11:00:00 AM

Valid to:

5/1/2014 9:59:59 AM

Subject:

CN="Bluestack Systems, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Bluestack Systems, Inc.", L=Campbell, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

7F1E53F1F4264EF3E29EEA92C4432FF2

File PE Metadata

Compilation timestamp:

11/19/2010 3:27:32 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

196608:NddjOuNNr4a6dJC8W5aLrKjXviBmPxglESIm4XA8gGeq8BrNmNLYv+CFRDHaYjfS:3djOuNNr4a6dJCVa3KjvA2xgiSQXUzkb

Entry address:

0x1373C

Entry point:

55, 8B, EC, 6A, FF, 68, 28, 69, 41, 00, 68, 36, 37, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, FF, 15, EC, 60, 41, 00, 59, 83, 0D, 24, C9, 41, 00, FF, 83, 0D, 28, C9, 41, 00, FF, FF, 15, F0, 60, 41, 00, 8B, 0D, 14, A9, 41, 00, 89, 08, FF, 15, F4, 60, 41, 00, 8B, 0D, 10, A9, 41, 00, 89, 08, A1, F8, 60, 41, 00, 8B, 00, A3, 20, C9, 41, 00, E8, E0, 5E, FF, FF, 39, 1D, 00, A7, 41, 00, 75, 0C, 68, C4, 38, 41, 00, FF, 15, FC, 60... 
[+]

Entropy:

7.9991

Developed / compiled with:

Microsoft Visual C++ v6.0

Code size:

81 KB (82,944 bytes)

The file bluestacks-splitinstaller_native.exe has been discovered within the following program.

iTunes by Apple Inc.

Apple's iTunes is a proprietary media player computer program, used for playing and organizing digital music and video files on desktop computers. It can also manage contents on iPod, iPhone and iPad.

www.apple.com/itunes

9% remove it

The file bluestacks-splitinstaller_native.exe has been seen being distributed by the following 15 URLs.

http://www.filehorse.com/download/file/.../

http://download936.mediafire.com/dcc28j9erjfg/.../BlueStacks-SplitInstaller_native.exe

http://link.descargar-apps-en-pc.net/go.php

https://mega.nz/persistent/.../fA8mXaAK

https://mega.nz/persistent/.../h8pH3KgS

https://mega.nz/temporary/.../h8pH3KgS

http://dc204.4shared.com/download/.../BlueStacks-SplitInstaller_nati.exe

http://www.edmaster.it/ideaweb/cd/cd/155/software/.../bluestacks-splitinstaller_native.exe

http://www.techspot.com/downloads.php?action=download_now&id=5342&evp=5509000cbd1716c25662843c7d7f1571&file=1

http://down.tech.sina.com.cn/.../d_load.php?d_id=53034&down_id=2&ip=210.242.214.17

http://bluestacks-app-player.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOHZlrkqln79ZGkrrlYmkeOnh2OOxwCAO6GQuoJ7bjfbFSIxWpgM0q5KgbMaVt2/9YgIjkYwvpbXXP1ikbm ZP9588lR7A0sJnl3Y/.../kffrdz3x4dKUGg==

http://link.descargar-apps-en-pc.net/goines

http://www.techtudo.com.br/_/software/.../download

http://123.briian.com/forum.php?mod=attachment&aid=MTk3NnxhNWVhMjhhZHwxMzgzMzUyNDY0fDB8NDM0

http://cdn.bluestacks.com/public/.../BlueStacks-SplitInstaller_native.exe

Scan bluestacks-splitinstaller_native.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.