home

bluestacks2_native.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from cloud.bluestacks.com.
MD5:
07d617a79c470e0101e98f6c5a723f63

SHA-1:
9bc345d17681208bdddeec1b3367a1cb135d10f1

SHA-256:
d7faecf39e8494d59d5c7287fab0639315b7c814f6b2b158ff8b813b3bb82c18

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 1:25:39 PM UTC  (today)

File size:
1.4 KB (1,460 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\bluestacks2_native.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
24:LqFYJ8VDjUYMvQ9QW4CogyDjNeNw8Zxfd6sQgnsZ4XXgKL/KXti/u04XJi8KtYGp:LqOukY7Qao5VYw8ZP6sNnsZAPDK7tXA3

Entry point:
25, 41, 7A, 48, C6, 59, 97, 97, 68, 93, 24, 04, 27, F8, 47, 02, 30, 65, 1B, DC, CF, 09, 35, 11, 2C, 28, 4F, D3, 93, CB, D0, 42, 72, 65, 9D, 8C, E0, B7, 38, 3B, 05, 17, E3, 5B, 4B, 9E, D4, C6, 28, EB, 89, FE, E5, 03, 66, 57, 19, 62, 0B, 3C, 0C, 6C, FD, C4, A4, 73, EF, 27, 8B, 9A, 80, 8A, BF, DA, 77, 87, 4C, 51, CF, 73, 19, B5, B4, 2E, F0, D3, 0D, AF, B6, 55, 0A, F0, 9E, A6, BD, 14, BD, 3D, B0, 66, DC, C1, 99, BF, A2, 18, 8C, 44, 3D, 43, F1, 50, 66, A1, 7C, 2B, 57, D6, E5, 8E, A9, CB, 5F, 6F, 76, DF, 56, 3A...
 
[+]

Entropy:
7.8876  (probably packed)

The file bluestacks2_native.exe has been seen being distributed by the following URL.

http://cloud.bluestacks.com/api/getdownload?platform=win&win_version=10.0&utm_source=&utm_medium=&utm_campaign=drmlgsccr-ap-us&referrer=https://www.google.co.jp/&first_landing_page=http://www.bluestacks.com/apps/sports/dream-league-soccer-on-pc.html?__dlrd=1&download_page_referrer=http://www.bluestacks.com/apps/sports/dream-league-soccer-on-pc.html?__dlrd=1&gaCookie=GA1.2.2033426461.1470474909&affiliateId=&offerId=&transaction_id=&aff_sub=&platform_cloud={"description":"Chrome 52.0.2743.82 on Windows NT 10.0 64-bit","layout":"Blink","manufacturer":null,"name":"Chrome","prerelease":null,"product":null,"ua":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/.../537.36","version":"52.0.2743.82","os":{"architecture":64,"family":"Windows NT","version":"10.0"}}

Scan bluestacks2_native.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.