Analysis

  • max time kernel
    121s
  • max time network
    151s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    06/10/2026, 13:02

General

  • Target
    2026-10-06_611c036e0f15a7bc2352675797e184d6_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_remcos.exe
  • Size 988KB
  • Sample261006-p9q5eazvbx
  • SHA256 a6ac3a4f27fd66ba09fe00ec6e93d41efd345b473e116b489192f67b8918b887
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • Downloads MZ/PE file 1 IoCs
  • Executes dropped EXE 21 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Adds Run key to start application 2 TTPs 4 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Checks whether UAC is enabled 1 TTPs 3 IoCs
  • Enumerates connected drives 3 TTPs 47 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in System32 directory 52 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 30 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Program crash 2 IoCs
  • Reads the TCP/IP host and domain name from the registry 1 TTPs 10 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 11 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

    Inno Setup installer

  • Checks SCSI registry key(s) 3 TTPs 5 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Modifies data under HKEY_USERS 11 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: AddClipboardFormatListener 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 39 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs
  • Suspicious use of WriteProcessMemory 19 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-10-06_611c036e0f15a7bc2352675797e184d6_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_remcos.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-10-06_611c036e0f15a7bc2352675797e184d6_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_remcos.exe"
    1⤵
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Modifies registry class
    • Suspicious use of WriteProcessMemory
    PID:1260
    • C:\Users\Admin\AppData\Local\Temp\GalaxyInstaller_XCFNO\GalaxyInstaller.exe
      "C:\Users\Admin\AppData\Local\Temp\GalaxyInstaller_XCFNO\GalaxyInstaller.exe" 1577877141 "Red Faction: Armageddon"
      2⤵
      • Downloads MZ/PE file
      • Executes dropped EXE
      • Reads the TCP/IP host and domain name from the registry
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:464
      • C:\Users\Admin\AppData\Local\Temp\GalaxyInstaller_XCFNO\GalaxySetup.exe
        "C:\Users\Admin\AppData\Local\Temp\GalaxyInstaller_XCFNO\GalaxySetup.exe" /lang=en_US /webinstaller /product_id=1577877141 /silent /game_name="Red Faction: Armageddon"
        3⤵
        • Executes dropped EXE
        • Suspicious use of WriteProcessMemory
        PID:2072
        • C:\Users\Admin\AppData\Local\Temp\is-RNTRR4BS50.tmp\GalaxySetup.tmp
          "C:\Users\Admin\AppData\Local\Temp\is-RNTRR4BS50.tmp\GalaxySetup.tmp" /SL5="$90250,337849907,1791488,C:\Users\Admin\AppData\Local\Temp\GalaxyInstaller_XCFNO\GalaxySetup.exe" /lang=en_US /webinstaller /product_id=1577877141 /silent /game_name="Red Faction: Armageddon"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Adds Run key to start application
          • Drops file in Program Files directory
          • Drops file in Windows directory
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of WriteProcessMemory
          PID:600
          • C:\Users\Admin\AppData\Local\Temp\is-6YKXU2USXJ.tmp\vc_redist.x86.exe
            "C:\Users\Admin\AppData\Local\Temp\is-6YKXU2USXJ.tmp\vc_redist.x86.exe" /install /quiet /norestart
            5⤵
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • Suspicious use of WriteProcessMemory
            PID:2900
            • C:\Windows\Temp\{A6BCB190-8569-4A24-A712-2B41D0E70EFD}\.cr\vc_redist.x86.exe
              "C:\Windows\Temp\{A6BCB190-8569-4A24-A712-2B41D0E70EFD}\.cr\vc_redist.x86.exe" -burn.clean.room="C:\Users\Admin\AppData\Local\Temp\is-6YKXU2USXJ.tmp\vc_redist.x86.exe" -burn.filehandle.attached=748 -burn.filehandle.self=752 /install /quiet /norestart
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              • Suspicious use of WriteProcessMemory
              PID:3936
              • C:\Windows\Temp\{CD7CCD75-2471-4A4E-9707-D31E41433FBF}\.be\VC_redist.x86.exe
                "C:\Windows\Temp\{CD7CCD75-2471-4A4E-9707-D31E41433FBF}\.be\VC_redist.x86.exe" -q -burn.elevated BurnPipe.{95F599C6-7990-4841-BD04-CD9EBA5857FE} {2B5D917B-263E-4C08-B756-FD1D2A98CF60} 3936
                7⤵
                • Executes dropped EXE
                • System Location Discovery: System Language Discovery
                PID:3212
          • C:\Users\Admin\AppData\Local\Temp\is-6YKXU2USXJ.tmp\vc_redist.x64.exe
            "C:\Users\Admin\AppData\Local\Temp\is-6YKXU2USXJ.tmp\vc_redist.x64.exe" /install /quiet /norestart
            5⤵
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • Suspicious use of WriteProcessMemory
            PID:4236
            • C:\Windows\Temp\{5263B0DA-70BD-451F-92AD-781897919E59}\.cr\vc_redist.x64.exe
              "C:\Windows\Temp\{5263B0DA-70BD-451F-92AD-781897919E59}\.cr\vc_redist.x64.exe" -burn.clean.room="C:\Users\Admin\AppData\Local\Temp\is-6YKXU2USXJ.tmp\vc_redist.x64.exe" -burn.filehandle.attached=772 -burn.filehandle.self=776 /install /quiet /norestart
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              • Suspicious use of WriteProcessMemory
              PID:1088
              • C:\Windows\Temp\{D0F6117D-9132-4C75-B994-EAD42197F1EB}\.be\VC_redist.x64.exe
                "C:\Windows\Temp\{D0F6117D-9132-4C75-B994-EAD42197F1EB}\.be\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{2AD82A92-18AE-422B-B59F-0F63BDAC066B} {44832E45-3F30-4C57-8FDA-EB60EADD1D18} 1088
                7⤵
                • Executes dropped EXE
                • Adds Run key to start application
                • System Location Discovery: System Language Discovery
                • Modifies registry class
                • Suspicious use of AdjustPrivilegeToken
                PID:1184
              • C:\Windows\SysWOW64\WerFault.exe
                C:\Windows\SysWOW64\WerFault.exe -u -p 1088 -s 980
                7⤵
                • Program crash
                PID:3508
          • C:\Program Files\GOG Galaxy\GalaxyClient.exe
            "C:\Program Files\GOG Galaxy\GalaxyClient.exe" /firstRun /installationSource=usedefault
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Adds Run key to start application
            • Checks whether UAC is enabled
            • Reads the TCP/IP host and domain name from the registry
            • Suspicious behavior: AddClipboardFormatListener
            PID:4240
          • C:\Program Files\GOG Galaxy\GalaxyClient.exe
            "C:\Program Files\GOG Galaxy\GalaxyClient.exe" /clientLanguage=en-US
            5⤵
            • Executes dropped EXE
            • Checks whether UAC is enabled
            • Drops file in Program Files directory
            • Suspicious behavior: AddClipboardFormatListener
            PID:5684
    • C:\Program Files\GOG Galaxy\GalaxyClient.exe
      "C:\Program Files\GOG Galaxy\GalaxyClient.exe" /command=installationScreen /gameId=1577877141
      2⤵
      • Executes dropped EXE
      • Checks whether UAC is enabled
      • Reads the TCP/IP host and domain name from the registry
      • Modifies registry class
      • Suspicious behavior: AddClipboardFormatListener
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:2556
      • C:\Program Files\GOG Galaxy\QtWebEngineProcess.exe
        "C:\Program Files\GOG Galaxy\QtWebEngineProcess.exe" --type=renderer --webengine-schemes=qrc:sV --first-renderer-process --disable-speech-api --disable-blink-features=EyeDropperAPI --lang=en --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=3 --mojo-platform-channel-handle=4156 /prefetch:1
        3⤵
        • Executes dropped EXE
        • Suspicious behavior: EnumeratesProcesses
        PID:5872
  • C:\Windows\system32\vssvc.exe
    C:\Windows\system32\vssvc.exe
    1⤵
    • Checks SCSI registry key(s)
    • Suspicious use of AdjustPrivilegeToken
    PID:5020
  • C:\Windows\system32\srtasks.exe
    C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:5068
  • C:\Windows\system32\msiexec.exe
    C:\Windows\system32\msiexec.exe /V
    1⤵
    • Enumerates connected drives
    • Drops file in System32 directory
    • Drops file in Windows directory
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:1416
  • C:\ProgramData\Package Cache\{c157798c-9519-4e56-98d9-f696f78f4a61}\VC_redist.x64.exe
    "C:\ProgramData\Package Cache\{c157798c-9519-4e56-98d9-f696f78f4a61}\VC_redist.x64.exe" /burn.runonce
    1⤵
    • Executes dropped EXE
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4944
    • C:\ProgramData\Package Cache\{c157798c-9519-4e56-98d9-f696f78f4a61}\VC_redist.x64.exe
      "C:\ProgramData\Package Cache\{c157798c-9519-4e56-98d9-f696f78f4a61}\VC_redist.x64.exe" /quiet /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20261006140339.log" /install
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:4896
      • C:\ProgramData\Package Cache\{c157798c-9519-4e56-98d9-f696f78f4a61}\VC_redist.x64.exe
        "C:\ProgramData\Package Cache\{c157798c-9519-4e56-98d9-f696f78f4a61}\VC_redist.x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{c157798c-9519-4e56-98d9-f696f78f4a61}\VC_redist.x64.exe" -burn.filehandle.attached=572 -burn.filehandle.self=588 /quiet /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20261006140339.log" /install
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:4292
        • C:\ProgramData\Package Cache\{c157798c-9519-4e56-98d9-f696f78f4a61}\VC_redist.x64.exe
          "C:\ProgramData\Package Cache\{c157798c-9519-4e56-98d9-f696f78f4a61}\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{23DCCBA2-E28C-4AEA-BCF9-933FE760CE67} {EF595D2A-55AF-4657-83DA-B85722038C25} 4292
          4⤵
          • Executes dropped EXE
          • Adds Run key to start application
          • Enumerates connected drives
          • System Location Discovery: System Language Discovery
          • Modifies registry class
          • Suspicious behavior: EnumeratesProcesses
          PID:8
        • C:\Windows\SysWOW64\WerFault.exe
          C:\Windows\SysWOW64\WerFault.exe -u -p 4292 -s 1264
          4⤵
          • Program crash
          PID:2600
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 252 -p 1088 -ip 1088
    1⤵
      PID:4572
    • C:\Program Files\GOG Galaxy\GalaxyClientService.exe
      "\\?\C:\Program Files\GOG Galaxy\GalaxyClientService.exe"
      1⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious behavior: EnumeratesProcesses
      PID:2096
    • C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe
      "C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe"
      1⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Reads the TCP/IP host and domain name from the registry
      • Suspicious behavior: EnumeratesProcesses
      PID:6128
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 492 -p 4292 -ip 4292
      1⤵
        PID:1208
      • C:\Program Files\GOG Galaxy\GalaxyClientService.exe
        "\\?\C:\Program Files\GOG Galaxy\GalaxyClientService.exe"
        1⤵
        • Executes dropped EXE
        PID:4124
      • C:\Program Files\GOG Galaxy\GalaxyClientService.exe
        "\\?\C:\Program Files\GOG Galaxy\GalaxyClientService.exe"
        1⤵
        • Executes dropped EXE
        PID:2444

      Network

            MITRE ATT&CK Enterprise v16

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            e5ac5d7.rbs

            • Path C:\Config.Msi\e5ac5d7.rbs
            • Size 19KB
            • SHA256 9b7962f91866293fd40a03b881e5b1b7ec4e5edd4f7a36a6cde933d0348b9bf4
            • MD5 SHA1 SHA512 SSDEEP TLSH

            e5ac5e3.rbs

            • Path C:\Config.Msi\e5ac5e3.rbs
            • Size 19KB
            • SHA256 88d6aa747a8f69e16e4e75f5f17b277aa3b957190d51bd29c9eb7beaea1983f7
            • MD5 SHA1 SHA512 SSDEEP TLSH

            e5ac5ea.rbs

            • Path C:\Config.Msi\e5ac5ea.rbs
            • Size 21KB
            • SHA256 32a1be4e4f21f994dab89e59127bd52c03a1ced2fbeff80eeb3166574d81b594
            • MD5 SHA1 SHA512 SSDEEP TLSH

            e5ac5f9.rbs

            • Path C:\Config.Msi\e5ac5f9.rbs
            • Size 12KB
            • SHA256 8ec600bc17aede3104d86f683d46289bf43b94dc186cda7e4665a73a130ab3e2
            • MD5 SHA1 SHA512 SSDEEP TLSH

            GalaxyClient.exe

            • Path C:\Program Files\GOG Galaxy\GalaxyClient.exe
            • Size 14.8MB
            • SHA256 00a0bbd7582045f7e31c7ace5336c58308ebbdb5eadcaaee70370b3a9a57deac
            • MD5 SHA1 SHA512 SSDEEP TLSH

            PocoData.dll

            • Path C:\Program Files\GOG Galaxy\PocoData.dll
            • Size 2.1MB
            • SHA256 970a5a0215dc51ee35f3e0ed3508feed50fa70b60fb9da27e9cdbc36ee500e99
            • MD5 SHA1 SHA512 SSDEEP TLSH

            PocoDataSQLite.dll

            • Path C:\Program Files\GOG Galaxy\PocoDataSQLite.dll
            • Size 404KB
            • SHA256 5fd3840b1464fce1bf95223a097c7a2c217389b5ca2cf893aec91741f3c4a6c2
            • MD5 SHA1 SHA512 SSDEEP TLSH

            PocoFoundation.dll

            • Path C:\Program Files\GOG Galaxy\PocoFoundation.dll
            • Size 2.1MB
            • SHA256 dff145ef5117ffb273316685b4669220b0b31204f92be09e82691a73a9b955a1
            • MD5 SHA1 SHA512 SSDEEP TLSH

            PocoJSON.dll

            • Path C:\Program Files\GOG Galaxy\PocoJSON.dll
            • Size 388KB
            • SHA256 45b48529aafda73c60959609910b18e34d198e7c898cace6969d907694d622a6
            • MD5 SHA1 SHA512 SSDEEP TLSH

            PocoNet.dll

            • Path C:\Program Files\GOG Galaxy\PocoNet.dll
            • Size 1.5MB
            • SHA256 24b103f8e5ae714a5b41f697624b13211397fa72608375d4e5ff8aa35715aa98
            • MD5 SHA1 SHA512 SSDEEP TLSH

            PocoUtil.dll

            • Path C:\Program Files\GOG Galaxy\PocoUtil.dll
            • Size 595KB
            • SHA256 234111be57fbcae98f2eeae7b5b8340343a5529159f38b10799270932c28eca6
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Qt6Core.dll

            • Path C:\Program Files\GOG Galaxy\Qt6Core.dll
            • Size 6.1MB
            • SHA256 ee1ac4133cb8618f0154b497f31ab5916e02144833632b3c9e83f41bb2631026
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Qt6Gui.dll

            • Path C:\Program Files\GOG Galaxy\Qt6Gui.dll
            • Size 8.3MB
            • SHA256 257be29c3263eae197bd666a34814874403e94a9f9659fe786811353ab597150
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Qt6Network.dll

            • Path C:\Program Files\GOG Galaxy\Qt6Network.dll
            • Size 1.6MB
            • SHA256 e5dda85d26ce26d97dba94fcd8407989bd1dbfb4eaf9e2487ef5966b9fb942ac
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Qt6WebChannel.dll

            • Path C:\Program Files\GOG Galaxy\Qt6WebChannel.dll
            • Size 244KB
            • SHA256 9a7d3454c4a582130b6c6afd81e71902e23c56707838bcdd9342a6474a448867
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Qt6WebEngineWidgets.dll

            • Path C:\Program Files\GOG Galaxy\Qt6WebEngineWidgets.dll
            • Size 180KB
            • SHA256 6b94116ee0576c07ddd0966e2febbb983c925d136f45765abf3f45201d100e34
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Qt6Widgets.dll

            • Path C:\Program Files\GOG Galaxy\Qt6Widgets.dll
            • Size 6.3MB
            • SHA256 e1155224f31d54a7c79286b0f8014d1ffd70af187fb297a6ad29d3b8f75ee68b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            QtWebEngineProcess.exe

            • Path C:\Program Files\GOG Galaxy\QtWebEngineProcess.exe
            • Size 668KB
            • SHA256 60a27d325002295b8bef4778b6fbf9888f553cb69b55ffcddcd6f7cfb55af17f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-ZYUFOW8A5Y.tmp

            • Path C:\Program Files\GOG Galaxy\licences\POCO CPP Libraries\is-ZYUFOW8A5Y.tmp
            • Size 1KB
            • SHA256 c9bff75738922193e67fa726fa225535870d2aa1059f91452c411736284ad566
            • MD5 SHA1 SHA512 TLSH

            is-RBKHYV8Q0K.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginEpic\aiohttp\_websocket\is-RBKHYV8Q0K.tmp
            • Size 18KB
            • SHA256 682d97f70917c59a8a09ba2759d2504c4f12a1f4ffd091a584a8f2f0bda4b7f0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-LMY5G219GC.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginEpic\yarl\is-LMY5G219GC.tmp
            • Size 14B
            • SHA256 6b2e4e30ee3be4f95c67f15bba7f666875bb63a3014e4d145cbe33b47c7722e8
            • MD5 SHA1 SHA512

            is-1NKO7A6AZB.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\.hash\is-1NKO7A6AZB.tmp
            • Size 64B
            • SHA256 eb097c0d9ca7a6f045313faa0925c3c2f74558eeaeea0e98b086b800a420fae0
            • MD5 SHA1 SHA512 TLSH

            is-53RWC1ZVGD.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\.hash\is-53RWC1ZVGD.tmp
            • Size 64B
            • SHA256 c4b200a179263209f5bb417b8646c3b18706da248fd7772718a52d3e60a1d600
            • MD5 SHA1 SHA512 TLSH

            is-6EBVQF6TOX.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\.hash\is-6EBVQF6TOX.tmp
            • Size 64B
            • SHA256 8105a9184e8337165635f918e07a54b4c248a5f8bb5196268b10f771883616dd
            • MD5 SHA1 SHA512 TLSH

            is-RW2KP9SK7W.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\.hash\is-RW2KP9SK7W.tmp
            • Size 64B
            • SHA256 1a5749a6499fc7ddd5743cfee8111ef6b5c0ed42902fabe72f9767265fe1ed48
            • MD5 SHA1 SHA512 TLSH

            is-WOHVUUM5F3.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\.hash\is-WOHVUUM5F3.tmp
            • Size 64B
            • SHA256 5b9a913d60dce79800ac6664ae2239b73b6640792b77047a35d41f4507d3c488
            • MD5 SHA1 SHA512 TLSH

            is-06HNDNBS9Z.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\_websocket\.hash\is-06HNDNBS9Z.tmp
            • Size 64B
            • SHA256 cafb7482bb8f87e39fd396d2370c5ea18432052b9d80ad6d7584d70476b6aa1f
            • MD5 SHA1 SHA512 TLSH

            is-BIK4L8IBU3.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\_websocket\.hash\is-BIK4L8IBU3.tmp
            • Size 64B
            • SHA256 78ec93f35dc661b5ff3148f32cea73afebd3bb727f82950ecbc13336013b9ed4
            • MD5 SHA1 SHA512 TLSH

            is-DI342I6R7Y.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\_websocket\.hash\is-DI342I6R7Y.tmp
            • Size 64B
            • SHA256 32d2911ee6a6c2c473093b442c86817329254420050e89c19403cefc8460dda6
            • MD5 SHA1 SHA512 TLSH

            is-3MABSIPAV9.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\_websocket\is-3MABSIPAV9.tmp
            • Size 2KB
            • SHA256 3f3f2abe7538dd5502359718e20d375704ec1ceb1bfe348df221baf7130073f0
            • MD5 SHA1 SHA512 TLSH

            is-3NDAMIJ1R6.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\_websocket\is-3NDAMIJ1R6.tmp
            • Size 2KB
            • SHA256 1cd3a5e20456b4d04d11835b2bd3c639f14443052a2467b105b0ca07fdb4b25d
            • MD5 SHA1 SHA512 TLSH

            is-6VNVUHUODK.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\_websocket\is-6VNVUHUODK.tmp
            • Size 115B
            • SHA256 e354dd499be171b6125bf56bc3b6c5e2bff2a28af69e3b5d699ddb9af2bafa3c
            • MD5 SHA1 SHA512 TLSH

            is-8OE7CH54P0.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\_websocket\is-8OE7CH54P0.tmp
            • Size 45B
            • SHA256 479d4a587e6491db432dbed3fa2973b64b1b7f078a0b2deddb64a0c46b6263ee
            • MD5 SHA1 SHA512

            is-CJVT83GZ8R.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\_websocket\is-CJVT83GZ8R.tmp
            • Size 5KB
            • SHA256 6a6aaf0e1a002808bca6d078a9436e42191a3a7fb82714a1fd52c0ab2b6611fc
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-CMWZ258N0G.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\_websocket\is-CMWZ258N0G.tmp
            • Size 1KB
            • SHA256 468edd38ebf8dc7000a8d333df1c82035d69a5c9febc0448be3c9c4ad4c4630c
            • MD5 SHA1 SHA512 TLSH

            is-KBYM6NNG18.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\_websocket\is-KBYM6NNG18.tmp
            • Size 7KB
            • SHA256 635e3f9d461fd3565490b335174f9ba4c56e5672f4a4f03194e5e4cedd239a79
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-RDN5NPFW24.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\_websocket\is-RDN5NPFW24.tmp
            • Size 35KB
            • SHA256 4c0d339d53e9139bdde2aed60230ce8f12c85e0c9b0d80895d3628a056887254
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-SWTIBFX8UU.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\_websocket\is-SWTIBFX8UU.tmp
            • Size 1KB
            • SHA256 d6bd1c27e8dd1606d2ac2ebe8c8d338c40350a9a73a149fcbbfc2279bad554ed
            • MD5 SHA1 SHA512 TLSH

            is-VS03BJCDP3.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\_websocket\is-VS03BJCDP3.tmp
            • Size 143KB
            • SHA256 59c329569bbf27c53119f3065a72b1ea6ef3462f8bfface981cf9dd3fd1c08ad
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-165DV7GIY7.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-165DV7GIY7.tmp
            • Size 18KB
            • SHA256 0b67d5cd018589e14ff661434cebdf11ce9f6f990f4b68a32f6b45280516ed2c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-1FILSBXUQT.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-1FILSBXUQT.tmp
            • Size 4KB
            • SHA256 c3ad073fa4d540a9abb3f9c79bc16548d622457d04068ec7caaf62994983363a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-1VJW5UTKJ1.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-1VJW5UTKJ1.tmp
            • Size 4KB
            • SHA256 98cdbe47c79a576afa322f597366c31bc427844f61d08ccfbed0d7fdf90a479b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-1YCBH4E1OF.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-1YCBH4E1OF.tmp
            • Size 22KB
            • SHA256 5571c60ed7f2fe3ac10722efba19cbf80fcf9a97284ff64bc98763fc470bdc7c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-22H1JRXWLJ.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-22H1JRXWLJ.tmp
            • Size 37KB
            • SHA256 e87bda01a00549cf330e20ac65a65b7ddb009620c62e5361761b3684cee885d4
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-2GI2CXYLJU.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-2GI2CXYLJU.tmp
            • Size 8KB
            • SHA256 059dcdb909ff4fc6f6a90140bea01e1086c98f4f59f5cc5027714d60227e70b1
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-2IHKF349CI.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-2IHKF349CI.tmp
            • Size 70B
            • SHA256 0455129b185e981b5b96ac738f31f7c74dc57f1696953cae0083b3f18679fe73
            • MD5 SHA1 SHA512 TLSH

            is-4KTO1OMXOC.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-4KTO1OMXOC.tmp
            • Size 13KB
            • SHA256 ca68636d81f3d8a7f4654ff82f2d21029ef7761b20ad0233243a38028b77fd32
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-4MM4X24W5E.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-4MM4X24W5E.tmp
            • Size 12KB
            • SHA256 adf6e0f2752c7e908c33fcc6a50ca08859fc9f349d048fbbdf5ae65d5187c0b7
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-4R5CY24ZY1.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-4R5CY24ZY1.tmp
            • Size 998B
            • SHA256 2be8611a1de377aa821271c9a3c2ef1727c9c018e1f7d50a23b034692455863e
            • MD5 SHA1 SHA512 TLSH

            is-5PYE9AIDY6.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-5PYE9AIDY6.tmp
            • Size 12KB
            • SHA256 8c0fda256ec9747d668a1ac861d25c2ce1d5290e00820de0f7ddefe747884c1b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-5Z0ZOCCN8D.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-5Z0ZOCCN8D.tmp
            • Size 333B
            • SHA256 cd8513bd7b0c43d4b3d7234df245f0779431bb8f5ad45ce367fc10aab88473c3
            • MD5 SHA1 SHA512 TLSH

            is-67CQ07HHTL.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-67CQ07HHTL.tmp
            • Size 29KB
            • SHA256 58956e9adf8fd2e31a1526de7ffa30bce5e9abdd04e15325dd1bd23968749c91
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-6BE4OXW7KI.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-6BE4OXW7KI.tmp
            • Size 2KB
            • SHA256 2b4895f39896d2f106deb0e4728a6bba276ca729f342faf05bc989be03c78ac8
            • MD5 SHA1 SHA512 TLSH

            is-6YP7HLQCHV.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-6YP7HLQCHV.tmp
            • Size 3KB
            • SHA256 57a3691be45378429eb5a6415b83943f6f81515823f2fbf1e2e78fe95a447d3b
            • MD5 SHA1 SHA512 TLSH

            is-733U91XQCN.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-733U91XQCN.tmp
            • Size 1KB
            • SHA256 4b1e6fdb25322eef276da6eab494568f5335fee5b4219002bbbf2e603ecb072d
            • MD5 SHA1 SHA512 TLSH

            is-8VUCN4FG2D.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-8VUCN4FG2D.tmp
            • Size 1KB
            • SHA256 1445485c5910e7c9f96e12b804612aa830969c387e18d2665aadb423962de925
            • MD5 SHA1 SHA512 TLSH

            is-9XFRUJTOWL.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-9XFRUJTOWL.tmp
            • Size 30KB
            • SHA256 d281de3810f42a05c42a13432c6b35fa10d4c20a5d3deee63fdee62aa4a07255
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-BL9N8U5MAV.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-BL9N8U5MAV.tmp
            • Size 19KB
            • SHA256 5b0104cd4837e23f3590ad9d3c59e196ac7fcfa9c68e71d90f0799245eb9a4a7
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-C3VLYSNCR3.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-C3VLYSNCR3.tmp
            • Size 44KB
            • SHA256 3cfcc07a8d4205c28bc3a825e725ce1bb49cc9b7662dfb6e84fa5ae4a2b87f29
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-C8UZLNEJF1.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-C8UZLNEJF1.tmp
            • Size 5KB
            • SHA256 ee1b6686067213d1ea59b3e9c47534afb90021d4f692939741ad4069d0e1d96f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-E585AJ5MRD.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-E585AJ5MRD.tmp
            • Size 17KB
            • SHA256 69a49c41e10d2e176a0ad2ee2a305771b038f61954fe8d1c16603dde49dc5a8f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-EGQXS0WEMT.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-EGQXS0WEMT.tmp
            • Size 22KB
            • SHA256 0782e780d3272b2032bf24af9b63e7a7f54a4f7c912f6415867e1d945bea1fb3
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-F5ZM488HXF.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-F5ZM488HXF.tmp
            • Size 45KB
            • SHA256 d0a67572078cd438ec81c95c4b83a5d0bc449a00829a9471953b323a720dbfcf
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-JK5J05Z81H.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-JK5J05Z81H.tmp
            • Size 29KB
            • SHA256 ccbcf5f770c4de6ebc801c2c338ddc75aaa7cf3ddc75f8add0386c77dfe65e28
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-K77C2EAIO8.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-K77C2EAIO8.tmp
            • Size 12KB
            • SHA256 2d1df7c1fe87eab9a6aa1742868196d28ea658449ade81a41492fdfc32a3a056
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-KM24E7OYCG.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-KM24E7OYCG.tmp
            • Size 3KB
            • SHA256 f2f348bfa415fd20c25bef2d7e1972c52c22043edd022313a89235188f111b9b
            • MD5 SHA1 SHA512 TLSH

            is-LF93G1BLIA.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-LF93G1BLIA.tmp
            • Size 57KB
            • SHA256 5b0e96accbf978222088ef07368b97d9888e1c9d0fd9beb6478422da9380be99
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-M9831ABRGL.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-M9831ABRGL.tmp
            • Size 1KB
            • SHA256 0c629cc036e020ca5ab2feecda378a091ba2c728fb5be448ae28511638f4c5c6
            • MD5 SHA1 SHA512 TLSH

            is-N0IY8UNNR6.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-N0IY8UNNR6.tmp
            • Size 40KB
            • SHA256 cc32e42d780917d5aa79aaa84ae37c0a804bd43fd046748b23381e8ee93fc06a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-NS4KWTY133.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-NS4KWTY133.tmp
            • Size 243KB
            • SHA256 7887eb2b564ab4be8fdfe427e963eb0f57fd1f5cb4a7d44cf7a916e166c7cf66
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-NU37MSLHOY.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-NU37MSLHOY.tmp
            • Size 6KB
            • SHA256 5c2d747f9ed0dfa26661a690aab79cb327c8c4731ea4229a2a404407b84bcc92
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-O1HVYBVJG1.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-O1HVYBVJG1.tmp
            • Size 16KB
            • SHA256 412b888d3034d256be5751035b31118bda3592bcddbd23cbc199a6c3bdc526d4
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-O2PE2JP7PF.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-O2PE2JP7PF.tmp
            • Size 6KB
            • SHA256 631bd3b2bd46317d1d230a328debc6925b0bf433176cb761e730c901f257270b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-O63PXUA76F.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-O63PXUA76F.tmp
            • Size 8KB
            • SHA256 37ff62c92fed47d534a5fdc145a207da7cc0d698cdd577e2da01a646b3219e1a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-ON1H8926T4.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-ON1H8926T4.tmp
            • Size 11KB
            • SHA256 cf25585730a09e8a621b09c884a94d647b4b57f21843d682f959b8de3fc74680
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-P2P3K9JWEH.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-P2P3K9JWEH.tmp
            • Size 7KB
            • SHA256 583b036d13c40d819d0c581f04ae86e406ed1e81473d58d2250189d611a2e89e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-P4G0Q72IJ0.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-P4G0Q72IJ0.tmp
            • Size 8B
            • SHA256 dd55705d4016544557eec0f0c980e75b965d042f7f67d0090057cb0a57945b49
            • MD5 SHA1 SHA512

            is-PIZLU3R1FM.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-PIZLU3R1FM.tmp
            • Size 11KB
            • SHA256 b0972ebd829a0769f0b9274fee4d7ccb7c1cef8694d310337498a4cf37acacf1
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-QKCIDIUNLJ.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-QKCIDIUNLJ.tmp
            • Size 8KB
            • SHA256 6db7f6c2926083f4738bc5fc781116afeaa29567d1d8f461c6857c809c34e093
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-R7DBAH3A1X.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-R7DBAH3A1X.tmp
            • Size 4KB
            • SHA256 18fd18f4da996101a426d4bcd570f353bd1eeeb44c6f7e1347bc86326c79ff3b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-SPUT5C5A4K.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-SPUT5C5A4K.tmp
            • Size 27KB
            • SHA256 c751a507a8ea3e8bb7419c8c2a92952ddc844f0513209f806deb170c45b128a6
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-T2ZU5WT6OC.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-T2ZU5WT6OC.tmp
            • Size 7KB
            • SHA256 1b9ba09685bd9e85313dfb744a6556397c37d0cbe22faaea65cdd7aca37f4f55
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-TT152G1Q3T.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-TT152G1Q3T.tmp
            • Size 2KB
            • SHA256 d4c8427ba527fca235b693bce479c37f354ef78061722acb6a700ecace452070
            • MD5 SHA1 SHA512 TLSH

            is-UJR63X68JV.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-UJR63X68JV.tmp
            • Size 41KB
            • SHA256 5dbb3fda5d300da4e1146f9e84d96fcd05241ee04fa5ce45c6926725add93dcb
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-UTPHO0LXT0.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-UTPHO0LXT0.tmp
            • Size 53KB
            • SHA256 336e5aee1d6c74a8f43f9bf417cc99f58efe7a85d3d6600b274278036007e414
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-V9AAV3XM5K.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-V9AAV3XM5K.tmp
            • Size 878B
            • SHA256 6fd9019b13cb3c540ffe7bbfb0c8483087aa0ce9b4ba0f06e29adbae110c1d9d
            • MD5 SHA1 SHA512 TLSH

            is-WH25G9L4PN.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-WH25G9L4PN.tmp
            • Size 10KB
            • SHA256 78f26064037911063862e162b9999564cea9dd4bb3278a8c58cd5fbbc0c9d857
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-WI0776OQ5V.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-WI0776OQ5V.tmp
            • Size 14KB
            • SHA256 29bf8ddf668c998a82d9873cd8d57a97498871abd242cb750474858fde00a65d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-X3MHPVKKBJ.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-X3MHPVKKBJ.tmp
            • Size 15KB
            • SHA256 f43ada1eeba9b89713ecd3a0c9e1a697c481afb5790f9203e7ea626357d031d0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-X46MQZMTPY.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-X46MQZMTPY.tmp
            • Size 68KB
            • SHA256 4bc9046127780e0d08b0648a197027f286139616f1cba188921dd55118742606
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-XBRV0ZTM9B.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-XBRV0ZTM9B.tmp
            • Size 2KB
            • SHA256 459496b7f323f8bbbcf5b158b2bfd3deb8f15b654d37b3c7349da6befdaa10bb
            • MD5 SHA1 SHA512 TLSH

            is-XYVMXUUIVS.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-XYVMXUUIVS.tmp
            • Size 10KB
            • SHA256 8ad3518423032458673167edaf94b24eca2a87e8b49fdaf34e3d2c8dc004523a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-Z9ZN0OVRK9.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-Z9ZN0OVRK9.tmp
            • Size 28KB
            • SHA256 7584e6ccbd1472c5e86982c462e434a0eea469888a4e1baea595970c1e997520
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-ZEUH1QFKSQ.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-ZEUH1QFKSQ.tmp
            • Size 18KB
            • SHA256 963640bfc11501d76b5ae177aa9dfd29d53245350e76b4e0482e3199a0bd91a4
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-8Z5K3ZWGVB.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiosignal\is-8Z5K3ZWGVB.tmp
            • Size 1KB
            • SHA256 4c8926506f474c1b7875fab69c8498062662441db1c2f16d119c9d2cfd073cbe
            • MD5 SHA1 SHA512 TLSH

            is-0I6VOU3DZT.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-0I6VOU3DZT.tmp
            • Size 1KB
            • SHA256 64188a58ba774742df099b2aed7d75a67f565fc36c952db05cce23b272ce19cf
            • MD5 SHA1 SHA512 TLSH

            is-1SF4EAJCRU.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-1SF4EAJCRU.tmp
            • Size 25KB
            • SHA256 050b42525cf08368161d3617050beb118067cc152b0ef3b9eeed0fcba5023e17
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-26VZMA886E.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-26VZMA886E.tmp
            • Size 16KB
            • SHA256 231e481134dfcf9174d45fb5d8c17f0921689889f687c6faec4555cf6802b411
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-3AG56I2EJ7.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-3AG56I2EJ7.tmp
            • Size 4KB
            • SHA256 dcd9f54e3c659546225ff9c9a159c4917a0393484cd4360a8f90c4ec665ee22d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-4XDPRBLC8H.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-4XDPRBLC8H.tmp
            • Size 11KB
            • SHA256 a55188980515a2fab6fd3625febfc72189c697239aa02b84871a3e12fb279d27
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-63080QI1OY.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-63080QI1OY.tmp
            • Size 584B
            • SHA256 367564685535041e0907c13826e5f2af34d482fb4ca63f29df005d258eee8b1e
            • MD5 SHA1 SHA512 TLSH

            is-6OTMGD8BZE.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-6OTMGD8BZE.tmp
            • Size 3KB
            • SHA256 1a50de3b33de4c581e0412db8fd1b9ec4cf994093af2e85200b45827f7b17bce
            • MD5 SHA1 SHA512 TLSH

            is-6WTF6EUIHV.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-6WTF6EUIHV.tmp
            • Size 103KB
            • SHA256 1fb387d9e592e429c1ccb5233451355b299f3eb985d6bf1fbf644f76df4cb980
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-7JXQFPW635.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-7JXQFPW635.tmp
            • Size 368B
            • SHA256 53efd153f5193b23d4110cd713a44c61041c8e4651636e704c7f7db0dd2cecc3
            • MD5 SHA1 SHA512 TLSH

            is-ABRMXKYIRA.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-ABRMXKYIRA.tmp
            • Size 539B
            • SHA256 cd9abc6c2527280cbd983b41130e366613e1014207a1329e7434089c90fcf373
            • MD5 SHA1 SHA512 TLSH

            is-DTGLH0CNAS.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-DTGLH0CNAS.tmp
            • Size 643B
            • SHA256 a2b5366df7fe56341ada4303caf9cc415ef7a094f6591c90bb0e19475ca6d5b1
            • MD5 SHA1 SHA512 TLSH

            is-E3GEXWWXPA.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-E3GEXWWXPA.tmp
            • Size 209B
            • SHA256 c7f3372f75ae07baff50b5c05a3c7de7db9d290e072c1f25fa1b1cd450c636f9
            • MD5 SHA1 SHA512 TLSH

            is-K2O6H8CYU4.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-K2O6H8CYU4.tmp
            • Size 2KB
            • SHA256 7ce608bedd5e192a90adee2e092dec256299d26c00b82f140faa9b6b9392f7f5
            • MD5 SHA1 SHA512 TLSH

            is-MEP0QXAJNF.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-MEP0QXAJNF.tmp
            • Size 2KB
            • SHA256 c7483b88450e9c15490bbdb3c850a06f578aab2c52fbb7f62c69cdc99febf79b
            • MD5 SHA1 SHA512 TLSH

            is-O4D8JYE9HC.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-O4D8JYE9HC.tmp
            • Size 21KB
            • SHA256 9b7411cd94c036be1fd82e1e55d528160d753605d66a4f166ade2a4131a1bdcb
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-O7FHIRL55G.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-O7FHIRL55G.tmp
            • Size 1KB
            • SHA256 e7e75c4fadc640adf938d1334a07d70a46c1ee93e4691faabf5e669b83d54b34
            • MD5 SHA1 SHA512 TLSH

            is-SG1IGN7QTQ.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-SG1IGN7QTQ.tmp
            • Size 3KB
            • SHA256 80cd59987681724c98588d848aba51373aa6dc1d7d730e48aba0782a7a3d6023
            • MD5 SHA1 SHA512 TLSH

            is-TYILSJHSYK.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-TYILSJHSYK.tmp
            • Size 208B
            • SHA256 dc9e411be753c65b41935ffe46e351507aefdaabb5bfcbf868334043bfe689f0
            • MD5 SHA1 SHA512 TLSH

            is-U2CBRWU5CN.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-U2CBRWU5CN.tmp
            • Size 843B
            • SHA256 746ab7c51e9f819105e9406dfcbd13f9e507201e22e37911987d0fdbcb09570f
            • MD5 SHA1 SHA512 TLSH

            is-XJONEXMDZB.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-XJONEXMDZB.tmp
            • Size 2KB
            • SHA256 c3847e1580b734afe43241945899583f87150251fd1d1682fae9b77dc8d89073
            • MD5 SHA1 SHA512 TLSH

            is-ZO3CWMM3IY.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-ZO3CWMM3IY.tmp
            • Size 1KB
            • SHA256 6f8bcc6e7a10dd5a7059986aad88bfb2c5d508af28d9ce074124b4f5c49433da
            • MD5 SHA1 SHA512 TLSH

            is-ZX0UN1UGTL.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-ZX0UN1UGTL.tmp
            • Size 469B
            • SHA256 5c33f9e13527f992a10fad9339079b9b3af0172a268540a8191a5c95be9a9510
            • MD5 SHA1 SHA512 TLSH

            is-1D9YH6DP5K.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attrs\is-1D9YH6DP5K.tmp
            • Size 76B
            • SHA256 c5ccbac03e53b5391d086d5fe1759ba1c3d23b47da06393921f5497cfe92523d
            • MD5 SHA1 SHA512 TLSH

            is-8INC9APHL9.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attrs\is-8INC9APHL9.tmp
            • Size 73B
            • SHA256 78bd5889d6105774f687dfd2608652651d4501c1c66f54ee093cb41342efd925
            • MD5 SHA1 SHA512 TLSH

            is-D8LAH1HXQQ.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attrs\is-D8LAH1HXQQ.tmp
            • Size 1KB
            • SHA256 47168064dc1888487e7dcbc72d936943f0d62a78bbdccfe3c443c47ed8aad597
            • MD5 SHA1 SHA512 TLSH

            is-K4CTF5UUNM.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attrs\is-K4CTF5UUNM.tmp
            • Size 9KB
            • SHA256 da057bf60f54c49a69192338f2101927a87f3076fbd1d66824bdf564d25e6582
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-NQWAJ6EVDG.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attrs\is-NQWAJ6EVDG.tmp
            • Size 76B
            • SHA256 f244258eb5707d24d1bbc20dc0493c488d1e1abce659fb6c4fbaccd04ab2a213
            • MD5 SHA1 SHA512 TLSH

            is-OOASCSYT87.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attrs\is-OOASCSYT87.tmp
            • Size 73B
            • SHA256 54e50c66e83db8453a754b80d1d1758c89d42b43cbddf2e03f45414b977e0831
            • MD5 SHA1 SHA512 TLSH

            is-XV35TX0PXW.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attrs\is-XV35TX0PXW.tmp
            • Size 76B
            • SHA256 0020829a0d7dfaf0c56833d8f6f165d7df523d709030dfdb10db380c02e3ce6b
            • MD5 SHA1 SHA512 TLSH

            is-M124BJF25R.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\certifi\is-M124BJF25R.tmp
            • Size 3KB
            • SHA256 5c55f2727746e697f7edac9e17c377d8752e0da7ecca191531b3b80403d61dad
            • MD5 SHA1 SHA512 TLSH

            is-VT0H2OQEYR.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\certifi\is-VT0H2OQEYR.tmp
            • Size 243B
            • SHA256 c410688fdd394d45812d118034e71fee88ba7beddd30fe1c1281bd3b232cd758
            • MD5 SHA1 SHA512 TLSH

            is-2L09XN38WX.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\frozenlist\is-2L09XN38WX.tmp
            • Size 1KB
            • SHA256 bcc128112d7119e80fb555e80a2f57c9d11e1eccae22af8a75e5f03f93ddb1a0
            • MD5 SHA1 SHA512 TLSH

            is-2OR4A8BVAD.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\frozenlist\is-2OR4A8BVAD.tmp
            • Size 2KB
            • SHA256 c40204daef677006e30131883df9e8fce25f7bc010fb587bcffb9cef7758b040
            • MD5 SHA1 SHA512 TLSH

            is-EBQ9VN5IDE.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\frozenlist\is-EBQ9VN5IDE.tmp
            • Size 67KB
            • SHA256 e55dadf1985e5f755147f352bc5bf3bf6b0fef57c10422e3bfdc4e00061230b6
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-MVFKR8466X.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\frozenlist\is-MVFKR8466X.tmp
            • Size 7B
            • SHA256 b28c3db284f03fd4ff80401049587b19bf3ce79874e0dc2686cd967be2518193
            • MD5 SHA1 SHA512

            is-X513TXSTDP.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\frozenlist\is-X513TXSTDP.tmp
            • Size 3KB
            • SHA256 b7e6868ee12256dfcc64f049d119eb69abd598f04ae9aaf3de2e3c66f5ee62c5
            • MD5 SHA1 SHA512 TLSH

            is-5GHP2MRXNT.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\galaxy\api\is-5GHP2MRXNT.tmp
            • Size 2KB
            • SHA256 7bbed95ddcbce54724ea571d8b019ebbc7426de263a3de6eba7668ef01ba77a8
            • MD5 SHA1 SHA512 TLSH

            is-5P5GLVVYGD.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\galaxy\api\is-5P5GLVVYGD.tmp
            • Size 3KB
            • SHA256 f2842b10f3512d6ff924265ad2ac69bba6bc3e4dc1fe2be0a4c53902b824e0d3
            • MD5 SHA1 SHA512 TLSH

            is-AIB3IQBWDV.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\galaxy\api\is-AIB3IQBWDV.tmp
            • Size 13KB
            • SHA256 c61dd27ae4d2ee6978b55648d31065b420352bbd3cba2233f679a562c6e8c18f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-CI0B1YL5DA.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\galaxy\api\is-CI0B1YL5DA.tmp
            • Size 8KB
            • SHA256 1253621bb8731d506afc25a76607c695417cfe13ba98a51483b3c1212d0aa849
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-LXNVOIOVND.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\galaxy\api\is-LXNVOIOVND.tmp
            • Size 4KB
            • SHA256 5c2f98eaf516c21d92e3db3cfe36d0f0ca2b1e13935e80937025cc93a03a3a75
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-LZYHUKPVBJ.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\galaxy\api\is-LZYHUKPVBJ.tmp
            • Size 45KB
            • SHA256 48bf7166f9d798f168693dc1cf9e267be953731ab1e58c0b012856df80e8080c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-3JPYR0MQE1.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\galaxy\is-3JPYR0MQE1.tmp
            • Size 3KB
            • SHA256 be2046ccf4213ea19fe12b0418f93ad153bc640453838889ddaee90ddc51af0a
            • MD5 SHA1 SHA512 TLSH

            is-A864NUX2OT.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\galaxy\is-A864NUX2OT.tmp
            • Size 976B
            • SHA256 f57e0c4b3586f2da8cc45e71cc5ea713e7c71a17d6c93e2755f5d17d18c2e8b8
            • MD5 SHA1 SHA512 TLSH

            is-FXSVH5LRNO.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\galaxy\is-FXSVH5LRNO.tmp
            • Size 682B
            • SHA256 e2de8b43beafba6f5464d1bc29cc8dd8ee62028c911c8ce23fe4066df8e41287
            • MD5 SHA1 SHA512 TLSH

            is-HE0SPHG2UY.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\galaxy\is-HE0SPHG2UY.tmp
            • Size 2KB
            • SHA256 db245597bbdad30094291ba766ab5cd9cee7a53d4a1bc8e3d5c1889be5d20739
            • MD5 SHA1 SHA512 TLSH

            is-QPAZCJK7XH.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\galaxy\is-QPAZCJK7XH.tmp
            • Size 161B
            • SHA256 cf518cab6f33572388dc870e1fb8489fa90e239b9a691967868926b5967ea4e2
            • MD5 SHA1 SHA512 TLSH

            is-QRWW6JCNTI.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\galaxy\is-QRWW6JCNTI.tmp
            • Size 5KB
            • SHA256 df3d202d7610c4d3707f0cd3ba21a6e30d59e4448861d6b151b4fad185bd20ac
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-RZHUONET8E.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\galaxy\is-RZHUONET8E.tmp
            • Size 1KB
            • SHA256 65ed7220bc128c482b0ec7337f218510de1379b5eab17b521015b6989ada31d6
            • MD5 SHA1 SHA512 TLSH

            is-STBBI4O1IU.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\galaxy\unittest\is-STBBI4O1IU.tmp
            • Size 1KB
            • SHA256 8c4bee6c0f9d51bfde8562324acd9cefba19e1068e5f00c63151adbdcc2e3f35
            • MD5 SHA1 SHA512 TLSH

            is-28HUTKJFOF.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\idna\is-28HUTKJFOF.tmp
            • Size 1KB
            • SHA256 01ea40dfd71e447c647c73f8d7e16f296e4a8be7f83df519f7445432508d766a
            • MD5 SHA1 SHA512 TLSH

            is-LXMK0JQMLE.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\idna\is-LXMK0JQMLE.tmp
            • Size 868B
            • SHA256 30fa8d0cb65b5ea19a35d5f1005862a853ca1105e3bb68cd42109ecbafb97893
            • MD5 SHA1 SHA512 TLSH

            is-D8Q8YZNHRF.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\multidict\is-D8Q8YZNHRF.tmp
            • Size 1KB
            • SHA256 52e58931d61d6e84174d807534762769c9ada0cb1ef304cec74389008f65d004
            • MD5 SHA1 SHA512 TLSH

            is-FBSOJ4IHPM.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\multidict\is-FBSOJ4IHPM.tmp
            • Size 78KB
            • SHA256 04a6693ccc24d454c897c6e42608c121cb54f11df95a015589833e13f5de4da4
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-HTNYATG098.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\multidict\is-HTNYATG098.tmp
            • Size 2KB
            • SHA256 7bfd090c98bb13a2d64b4037814275ed29200cb96683c7df8dfca54eefef6e87
            • MD5 SHA1 SHA512 TLSH

            is-TYY8IVOFZ3.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\multidict\is-TYY8IVOFZ3.tmp
            • Size 422B
            • SHA256 4dc463092b64da2218d7f0f00cd8fc90da49450f6bb4b8fdd97be4d73d86fda9
            • MD5 SHA1 SHA512 TLSH

            is-WA1HDLENGK.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\multidict\is-WA1HDLENGK.tmp
            • Size 15B
            • SHA256 7bd6e66c7dd4171b1a6d0ae73453c6f6ac485f3b706dc33a20a0d89ef670a6b6
            • MD5 SHA1 SHA512

            is-YV6VHK9DU2.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\multidict\is-YV6VHK9DU2.tmp
            • Size 39KB
            • SHA256 546439f0fed539dea545fdd65408a76fad9a0f5e833dd01646debcaa68893171
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-8KBW1Q69NG.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\propcache\is-8KBW1Q69NG.tmp
            • Size 60KB
            • SHA256 1c3eafe00c2a0e1dd93647a01ebf1874fb2265cb09f58619761f814dc8599f3a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-A00OIZTNK2.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\propcache\is-A00OIZTNK2.tmp
            • Size 1KB
            • SHA256 1b6f699775c9f13d0baa5790c5831387d4b0237fd4746eebf4a19c4306e2d297
            • MD5 SHA1 SHA512 TLSH

            is-B1TLOTBFPC.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\propcache\is-B1TLOTBFPC.tmp
            • Size 179B
            • SHA256 c2f801fb2a64908e6e7fbd9555897634519cfd39f35100360b10bb75394be5a9
            • MD5 SHA1 SHA512 TLSH

            is-HF0L4DIL7R.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\propcache\is-HF0L4DIL7R.tmp
            • Size 3KB
            • SHA256 91c25ad54e65879e133c2a80799d1c541ed445c6f723c65b26278eae43612d01
            • MD5 SHA1 SHA512 TLSH

            is-OE4MZTJYFI.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\propcache\is-OE4MZTJYFI.tmp
            • Size 1KB
            • SHA256 ebc4909ba9044cdf0c9edf4e976e8b25880782607498acb5b69f76f3cf333789
            • MD5 SHA1 SHA512 TLSH

            is-S9X33CI3ZA.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\propcache\is-S9X33CI3ZA.tmp
            • Size 965B
            • SHA256 94d5ea040479c527c291e798add5019a9935e782968cf4ddae1d6b76aa30b581
            • MD5 SHA1 SHA512 TLSH

            is-0YL88V7S5F.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\yarl\is-0YL88V7S5F.tmp
            • Size 281B
            • SHA256 1660d6f16dd58017e868bb382b493760b76fb6ee9e4d11b7f4f8dd676d0239fd
            • MD5 SHA1 SHA512 TLSH

            is-4B42IA4M0A.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\yarl\is-4B42IA4M0A.tmp
            • Size 54KB
            • SHA256 efff44840f4b6d78e62b7cec012e3e5ae3198257bb468bd52b5a501985422fc9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-65VA6A2JAM.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\yarl\is-65VA6A2JAM.tmp
            • Size 3KB
            • SHA256 da5efa8f8ff6a90eaf9f0291c86c212390175297652869a60b8ca9dd98e37af2
            • MD5 SHA1 SHA512 TLSH

            is-75NTQXIYI0.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\yarl\is-75NTQXIYI0.tmp
            • Size 1KB
            • SHA256 034149532959cb39a54f46b75033816caf84cd95c2018b90401bc6f5e002f61b
            • MD5 SHA1 SHA512 TLSH

            is-C9DPQND2DS.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\yarl\is-C9DPQND2DS.tmp
            • Size 506B
            • SHA256 c8a22a153cc5cd62d56f4f31cb50d2c4a363170a387fea0b973c53b8ac02e7b3
            • MD5 SHA1 SHA512 TLSH

            is-E7TOTYH7NL.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\yarl\is-E7TOTYH7NL.tmp
            • Size 7KB
            • SHA256 80db7ccf15451abf79b9f510a52322899f6f0ebbe0e33aba304b53ddfebff09d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-IRFU1R0PQ5.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\yarl\is-IRFU1R0PQ5.tmp
            • Size 1KB
            • SHA256 cfe073b177cb9c92be6ddf87ac66a8286ae2f4bdc6a43bfabf1144b66bbeb823
            • MD5 SHA1 SHA512 TLSH

            is-L7LQB3NLOT.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\yarl\is-L7LQB3NLOT.tmp
            • Size 14KB
            • SHA256 464fbdf3e91fd4ec174de539d1457c423624b34c00407a723d993a31caee22a9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-LPWI5W19UM.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\yarl\is-LPWI5W19UM.tmp
            • Size 6KB
            • SHA256 a15c55b8358c0a3baf4d5881883ce160114c23e61f0c23461946df9d0a643a04
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-V0NMW9PALC.tmp

            • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\yarl\is-V0NMW9PALC.tmp
            • Size 84KB
            • SHA256 622c862d21143e8e5272e9a861d4fcc8f3ff742a1b56cf9588dc5781c0533bd9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            sqlite.dll

            • Path C:\Program Files\GOG Galaxy\sqlite.dll
            • Size 1.1MB
            • SHA256 1875160d08be7a6bbe8989b1ba95738b2dffa3f444d5f2c93d8d797b9fc53da2
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-0ZA8Q2ECPL.tmp

            • Path C:\Program Files\GOG Galaxy\web\is-0ZA8Q2ECPL.tmp
            • Size 39KB
            • SHA256 db87e3e96f15de84847b2bdd560bcc0828a4583efc17df132c0a5f9fabfee35b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-38I5DX92OV.tmp

            • Path C:\Program Files\GOG Galaxy\web\is-38I5DX92OV.tmp
            • Size 27KB
            • SHA256 7165401401731f0f3be48cb7554e13ae190ba67b406ca6622b8749e70fa0d765
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-AMGQW78NHB.tmp

            • Path C:\Program Files\GOG Galaxy\web\locales\es-MX\is-AMGQW78NHB.tmp
            • Size 1KB
            • SHA256 4b09dfb390e8e522d12861d0f5e22462658bdacaceaee67bc5132228f9e802d0
            • MD5 SHA1 SHA512 TLSH

            is-2KV8MMD56E.tmp

            • Path C:\Program Files\GOG Galaxy\web\locales\pt-PT\is-2KV8MMD56E.tmp
            • Size 148KB
            • SHA256 62a5f729e42ca348ae847c0e4a639bca2fe8ef7afda80e62ff2a6409db170c89
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-3CM7K3ZADH.tmp

            • Path C:\Program Files\GOG Galaxy\web\src\images\discover\is-3CM7K3ZADH.tmp
            • Size 233KB
            • SHA256 cd3b3cb08b02e69e28206547e6ebbd04238a4b177eb946b80365a9ad90c16701
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-M9GKHABBVW.tmp

            • Path C:\Program Files\GOG Galaxy\web\src\images\discover\is-M9GKHABBVW.tmp
            • Size 299KB
            • SHA256 be9f9b8d5650e15e05fb4380d2a58c0d7fb998121b7f523ab1c8e22c3ded3d99
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-NFZ4KYU4ZA.tmp

            • Path C:\Program Files\GOG Galaxy\web\src\images\discover\is-NFZ4KYU4ZA.tmp
            • Size 35KB
            • SHA256 24e1b9b234d1e6584bd6c821fb8bfc10e874ddaa81a6063f3b812d3275f06753
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-0D17PGRBRP.tmp

            • Path C:\Program Files\GOG Galaxy\web\src\images\is-0D17PGRBRP.tmp
            • Size 103KB
            • SHA256 d35a14e496727dc0df7d97236059a9f0591338deee3cf59599a08d20752e6763
            • MD5 SHA1 SHA512 SSDEEP TLSH

            xdelta3.dll

            • Path C:\Program Files\GOG Galaxy\xdelta3.dll
            • Size 171KB
            • SHA256 01952a7e522f1e9caa2beccf9aaf930c312625a4565d6cfa35848ae6ae7fc6c5
            • MD5 SHA1 SHA512 SSDEEP TLSH

            zlib1.dll

            • Path C:\Program Files\GOG Galaxy\zlib1.dll
            • Size 130KB
            • SHA256 1ac2cc7abd9449d8fd98a27f2c3d61f6e71cca8680183765c1e29cefa1cac44c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-ILPHFLJYVY.tmp

            • Path C:\ProgramData\GOG.com\Galaxy\changelogs\is-ILPHFLJYVY.tmp
            • Size 40KB
            • SHA256 fac8bb4a19c265294393bebac2a25e825507de3d79e9e239f6decb8702f57926
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-N3SNBSLBCW.tmp

            • Path C:\ProgramData\GOG.com\Galaxy\changelogs\is-N3SNBSLBCW.tmp
            • Size 56KB
            • SHA256 cff85434d8d31bbdcd67cb5ed66dce3f3be287b09442c800444c12dfcd6215fb
            • MD5 SHA1 SHA512 SSDEEP TLSH

            config.json

            • Path C:\ProgramData\GOG.com\Galaxy\config.json
            • Size 76B
            • SHA256 2aefc577403ac70840f9b32ba520fa5a1878cbf48713d63e365bf33e4391bc61
            • MD5 SHA1 SHA512 TLSH

            config.json

            • Path C:\ProgramData\GOG.com\Galaxy\config.json
            • Size 336B
            • SHA256 69601f552336ec1d8c57ccc2a74c7e1e997fd072d382e2b974d0f53d2c4c68e4
            • MD5 SHA1 SHA512 TLSH

            config.json

            • Path C:\ProgramData\GOG.com\Galaxy\config.json
            • Size 401B
            • SHA256 ca50e2c82889a4634d2b17090ee9a983eb61134500f74378b8c23269f6e3a116
            • MD5 SHA1 SHA512 TLSH

            GalaxyClientService.log

            • Path C:\ProgramData\GOG.com\Galaxy\logs\GalaxyClientService.log
            • Size 17KB
            • SHA256 dbb3be6bd0b297510a97a06ed30f20a0cc361d03b118cec4b853af8ad3db0d00
            • MD5 SHA1 SHA512 SSDEEP TLSH

            InstallerWebinstaller.log

            • Path C:\ProgramData\GOG.com\Galaxy\logs\InstallerWebinstaller.log
            • Size 723B
            • SHA256 a2fb7aa386f24c1c1730d069345315b88a5c4f8c2531fffd4921edd5f589f267
            • MD5 SHA1 SHA512 TLSH

            InstallerWebinstaller.log

            • Path C:\ProgramData\GOG.com\Galaxy\logs\InstallerWebinstaller.log
            • Size 2KB
            • SHA256 6ad6bf4cc987861a96eb03688b6b3a973e494e874c8194fb6b789be26ef5b9bd
            • MD5 SHA1 SHA512 TLSH

            is-73NJN41VC2.tmp

            • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\de-DE\is-73NJN41VC2.tmp
            • Size 1KB
            • SHA256 ac00c164cde1adf2d09b1f466f6b2de1987718f87b1ba8adc1341b8e306c9403
            • MD5 SHA1 SHA512 TLSH

            is-84P5GQOY4B.tmp

            • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\de-DE\is-84P5GQOY4B.tmp
            • Size 161KB
            • SHA256 19db0d5b351e42159c4a0f35fac75b953b51f9af41b288292c21762e5bc54bc8
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-NNYUX0JEOU.tmp

            • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\es-ES\is-NNYUX0JEOU.tmp
            • Size 160KB
            • SHA256 a89af05ef7d3cc7fcf19a286f65cf896a119ff15b34f969011ccaa38d1e16183
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-POTS1MTAB5.tmp

            • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\es-ES\is-POTS1MTAB5.tmp
            • Size 1KB
            • SHA256 737846d52ba52c221995fb651cdc067def20d975808f5da3cdaeb98688c851aa
            • MD5 SHA1 SHA512 TLSH

            final.json

            • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\es-MX\final.json
            • Size 151KB
            • SHA256 374ef6e6bd21e798383a9e1a8da2d6001dd394362bbd07578e2bdf841089789b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-0SDC9SJ9UR.tmp

            • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\fr-FR\is-0SDC9SJ9UR.tmp
            • Size 163KB
            • SHA256 85a260a7d6fa32cba1e311c850a369efee3931f29c98c2e7d98f5e3a831ca8dc
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-KS6242ALPQ.tmp

            • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\fr-FR\is-KS6242ALPQ.tmp
            • Size 1KB
            • SHA256 4e9e0e39175bbcdc4060ea7c89084b82c7b6e301edfc9b8ae5ed946f8d540a2a
            • MD5 SHA1 SHA512 TLSH

            is-7VIWGTNZFU.tmp

            • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\is-7VIWGTNZFU.tmp
            • Size 269B
            • SHA256 6ff890da496cbe628a90143374d0ab7761ca44af4a3792615ae25f04b36a0984
            • MD5 SHA1 SHA512 TLSH

            is-KPUFI14Z56.tmp

            • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\it-IT\is-KPUFI14Z56.tmp
            • Size 1KB
            • SHA256 a6cbedc9a5486254126c27c57c9b08896dcdff7eec4164e4fb4b7156ca0ec23d
            • MD5 SHA1 SHA512 TLSH

            is-YG1KKJZ3HT.tmp

            • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\it-IT\is-YG1KKJZ3HT.tmp
            • Size 154KB
            • SHA256 7daa82c0c172015b482e461ebee2a8b9333423e1c282e79d3230ad48b755eff9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-HNMO2JGCPE.tmp

            • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\ja-JP\is-HNMO2JGCPE.tmp
            • Size 177KB
            • SHA256 d0ae8355bd14cd39a7b2fbedbd7b22d99ae7e9c2e6ecf262481b1f47d6063748
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-N8E1NMAS18.tmp

            • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\ja-JP\is-N8E1NMAS18.tmp
            • Size 1KB
            • SHA256 e572e1f80315c6fae132d6d65f6f3e80ca751c4d05046d22e18819e720e7f22f
            • MD5 SHA1 SHA512 TLSH

            is-SK5LKMMHS7.tmp

            • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\ko-KR\is-SK5LKMMHS7.tmp
            • Size 158KB
            • SHA256 0610a50d755387e3f013dea43d24560fcdcffc82938423ba272524db36436716
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-WR3CCQRDMM.tmp

            • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\ko-KR\is-WR3CCQRDMM.tmp
            • Size 1KB
            • SHA256 cdcda6924107d5d3578b20e84a6ffdc817fdaf4bcc69c85684a34b132a3e27b1
            • MD5 SHA1 SHA512 TLSH

            is-B5AMRAGE58.tmp

            • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\pl-PL\is-B5AMRAGE58.tmp
            • Size 158KB
            • SHA256 6adb3ce07403ff083b5300c7d9134a53dce10ce14fbdd7245cbc98939e7eb9a3
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-VEPSZBCTAK.tmp

            • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\pl-PL\is-VEPSZBCTAK.tmp
            • Size 1KB
            • SHA256 e0bafe76de7461c9543442895fb899a60de7c7a0d15fcea7517e60660c0c7df6
            • MD5 SHA1 SHA512 TLSH

            is-G3X1MVRE5I.tmp

            • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\pt-BR\is-G3X1MVRE5I.tmp
            • Size 154KB
            • SHA256 e232b623f2a689201352626c92337b9818bb02de00c3b955f31f756eb3ecfd35
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-VDGXBKWAH3.tmp

            • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\pt-BR\is-VDGXBKWAH3.tmp
            • Size 1KB
            • SHA256 cff4bdc70fb68eb7520c492970c6d6472d354c705e6ab865eb6de0a30f5c1551
            • MD5 SHA1 SHA512 TLSH

            is-AWAG1AKCXG.tmp

            • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\ru-RU\is-AWAG1AKCXG.tmp
            • Size 196KB
            • SHA256 e5bd03540af8d4eef612bbdd484eed6257b948d7759c02794b592edc088cf265
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-W0R1YNN5ES.tmp

            • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\ru-RU\is-W0R1YNN5ES.tmp
            • Size 2KB
            • SHA256 ae1ac29a43ca2db6a3997d0f331771f08523c558180d539dd1af3da29833506e
            • MD5 SHA1 SHA512 TLSH

            is-8F8SMWO47M.tmp

            • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\uk-UA\is-8F8SMWO47M.tmp
            • Size 203KB
            • SHA256 0d2a522281ac32043f523f934b48d23dc9aee4bb257eeb24ea9eaf179b794595
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-AQBP0YZOIE.tmp

            • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\uk-UA\is-AQBP0YZOIE.tmp
            • Size 2KB
            • SHA256 0b4c30d4bfc09892836b477f30d8d9c859b8b61b2fb852234eedced85f593916
            • MD5 SHA1 SHA512 TLSH

            is-DDUDM2CLJJ.tmp

            • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\zh-Hans\is-DDUDM2CLJJ.tmp
            • Size 145KB
            • SHA256 4d361466dad196dfd887a9b7391fc00054e7c10c47caf725929e16352c5a1462
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-FE8AMGVWKE.tmp

            • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\zh-Hans\is-FE8AMGVWKE.tmp
            • Size 1KB
            • SHA256 2571325f0a346fbb06f3c48d82d598b38fc684aab99e18a8ecfd3cf9673bb1be
            • MD5 SHA1 SHA512 TLSH

            is-BXVVGT4JNH.tmp

            • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\zh-Hant\is-BXVVGT4JNH.tmp
            • Size 145KB
            • SHA256 203b08079aeb5598e845dc3d136fec62b7210d9d829b76fa6bf44e79e348394c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-VETEA63PAM.tmp

            • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\zh-Hant\is-VETEA63PAM.tmp
            • Size 1KB
            • SHA256 61bc84a3928af758d8356b2331bc89afc10089e121577e357c21c0b2b6034fab
            • MD5 SHA1 SHA512 TLSH

            f_000006

            • Path C:\ProgramData\GOG.com\Galaxy\webcache\common\Cache\Cache_Data\f_000006
            • Size 346KB
            • SHA256 51d725adc85e61c53d5ed7037835396b46e9fa3cfb658333861ddfc35fe63e9d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            f_00000d

            • Path C:\ProgramData\GOG.com\Galaxy\webcache\common\Cache\Cache_Data\f_00000d
            • Size 34KB
            • SHA256 c811b76785137c789ae1dd0f21ee61c40ee7eb76518b51e3c3fe6a32a606d92f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            CURRENT

            • Path C:\ProgramData\GOG.com\Galaxy\webcache\common\Local Storage\leveldb\CURRENT
            • Size 16B
            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
            • MD5 SHA1 SHA512

            MANIFEST-000001

            • Path C:\ProgramData\GOG.com\Galaxy\webcache\common\Session Storage\MANIFEST-000001
            • Size 41B
            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
            • MD5 SHA1 SHA512

            TransportSecurity

            • Path C:\ProgramData\GOG.com\Galaxy\webcache\common\TransportSecurity
            • Size 857B
            • SHA256 d2c8576aa9981fbce34b22ff645072ded520257cfabf74771f17502462766650
            • MD5 SHA1 SHA512 TLSH

            e7e508e6-4dbd-4da0-8979-f4a2c929ebdd.tmp

            • Path C:\ProgramData\GOG.com\Galaxy\webcache\common\e7e508e6-4dbd-4da0-8979-f4a2c929ebdd.tmp
            • Size 857B
            • SHA256 dc5aa823e230dca379ad7f23e97bcbe51ba178d8fe635f41f62bc422de9c5576
            • MD5 SHA1 SHA512 TLSH

            config.json

            • Path C:\Users\Admin\AppData\Local\GOG.com\Galaxy\Configuration\config.json
            • Size 2KB
            • SHA256 1133c21dc8a6f4bd34ae1796220bb0583313a3c7df3956c98f01ecd99f2718cf
            • MD5 SHA1 SHA512 TLSH

            1577877141[1].json

            • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\MTNU6HGG\1577877141[1].json
            • Size 533B
            • SHA256 189a67cd20d54f267dfd6d007dab8586a393fec27f5f62ba885d424df393c6cb
            • MD5 SHA1 SHA512 TLSH

            GalaxyInstaller.exe

            • Path C:\Users\Admin\AppData\Local\Temp\GalaxyInstaller_XCFNO\GalaxyInstaller.exe
            • Size 120KB
            • SHA256 9e246ee6babdc3861578c36af8c652d4d4be1f3e83583472bcfdb3ea238eeec2
            • MD5 SHA1 SHA512 SSDEEP TLSH

            icon.ico

            • Path C:\Users\Admin\AppData\Local\Temp\GalaxyInstaller_XCFNO\icon.ico
            • Size 102KB
            • SHA256 192db4fdec7dd139337644376946be94568cfa159414de9651d9ed04146205c0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            dd_vcredist_amd64_20261006140339.log

            • Path C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20261006140339.log
            • Size 8KB
            • SHA256 e9285f058c144b55bad8c67701967d6c030aac817af24d6b45580279eb8a750d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            dd_vcredist_amd64_20261006140339_000_vcRuntimeMinimum_x64.log

            • Path C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20261006140339_000_vcRuntimeMinimum_x64.log
            • Size 2KB
            • SHA256 9da6d249c041e1d545ac829dd8771956114d17140b5a8918afb6e16ff2366005
            • MD5 SHA1 SHA512 TLSH

            _isdecmp.dll

            • Path C:\Users\Admin\AppData\Local\Temp\is-6YKXU2USXJ.tmp\_isetup\_isdecmp.dll
            • Size 27KB
            • SHA256 231ae2fd793ab01ffb47611eb32cf64cdf5f447736cba4268b3e54875ff87330
            • MD5 SHA1 SHA512 SSDEEP TLSH

            vc_redist.x64.exe

            • Path C:\Users\Admin\AppData\Local\Temp\is-6YKXU2USXJ.tmp\vc_redist.x64.exe
            • Size 17.9MB
            • SHA256 90e48ade404e4576d023abfa374f323555f233982a8805ea9ac63dca9491a16b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            vc_redist.x86.exe

            • Path C:\Users\Admin\AppData\Local\Temp\is-6YKXU2USXJ.tmp\vc_redist.x86.exe
            • Size 6.7MB
            • SHA256 b6ab675f0a27e6600f9726e75dea08d99c15f8ea4b842a2a1d988fa9529d39b9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            GalaxySetup.tmp

            • Path C:\Users\Admin\AppData\Local\Temp\is-RNTRR4BS50.tmp\GalaxySetup.tmp
            • Size 7.0MB
            • SHA256 ef359bf8415640ca13d81e09084ccbbc98f81df7d77b0eeb7ef01ef84fd83da0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            MSVCP140_ATOMIC_WAIT.dll

            • Path C:\Windows\SYSTEM32\MSVCP140_ATOMIC_WAIT.dll
            • Size 56KB
            • SHA256 d759dd381bdbd6142372de4cb57acc382e1b80c106b7414a408816564ee1eb6a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            msvcp140.dll

            • Path C:\Windows\System32\msvcp140.dll
            • Size 627KB
            • SHA256 639342ea9a67c0009122238ce070a8257e2e04d367d627509fec29f8442afb42
            • MD5 SHA1 SHA512 SSDEEP TLSH

            vc_redist.x64.exe

            • Path C:\Windows\Temp\{5263B0DA-70BD-451F-92AD-781897919E59}\.cr\vc_redist.x64.exe
            • Size 669KB
            • SHA256 7cdf942ae5869c0ee2fcc94db84c4999eb0b97801b291e74f61ebb8fe3925905
            • MD5 SHA1 SHA512 SSDEEP TLSH

            BootstrapperApplicationData.xml

            • Path C:\Windows\Temp\{6AEF6918-22F2-43CB-9520-EF539A0B4FE0}\.ba\BootstrapperApplicationData.xml
            • Size 7KB
            • SHA256 7e2489f278fff5efd4f1ca635675c559bf9be60c17b310922dec7f4b52f046b1
            • MD5 SHA1 SHA512 SSDEEP TLSH

            vc_redist.x86.exe

            • Path C:\Windows\Temp\{A6BCB190-8569-4A24-A712-2B41D0E70EFD}\.cr\vc_redist.x86.exe
            • Size 668KB
            • SHA256 746a6db1a22c0e3efb2bb7301c179a7201c462c55214b36c3f95639c55322fe8
            • MD5 SHA1 SHA512 SSDEEP TLSH

            logo.png

            • Path C:\Windows\Temp\{CD7CCD75-2471-4A4E-9707-D31E41433FBF}\.ba\logo.png
            • Size 1KB
            • SHA256 335a256d4779ec5dcf283d007fb56fd8211bbcaf47dcd70fe60ded6a112744ef
            • MD5 SHA1 SHA512 TLSH

            wixstdba.dll

            • Path C:\Windows\Temp\{CD7CCD75-2471-4A4E-9707-D31E41433FBF}\.ba\wixstdba.dll
            • Size 215KB
            • SHA256 e921f69b9fb4b5ad4691809d06896c5f1d655ab75e0ce94a372319c243c56d4e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            license.rtf

            • Path C:\Windows\Temp\{D0F6117D-9132-4C75-B994-EAD42197F1EB}\.ba\license.rtf
            • Size 9KB
            • SHA256 8099dc3cf9502c335da829e5c755948a12e3e6de490eb492a99deb673d883d8b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            thm.wxl

            • Path C:\Windows\Temp\{D0F6117D-9132-4C75-B994-EAD42197F1EB}\.ba\thm.wxl
            • Size 2KB
            • SHA256 70400f181d00e1769774ff36bcd8b1ab5fbc431418067d31b876d18cc04ef4ce
            • MD5 SHA1 SHA512 TLSH

            thm.xml

            • Path C:\Windows\Temp\{D0F6117D-9132-4C75-B994-EAD42197F1EB}\.ba\thm.xml
            • Size 8KB
            • SHA256 f13bae0ec08c91b4a315bb2d86ee48fade597e7a5440dce6f751f98a3a4d6916
            • MD5 SHA1 SHA512 SSDEEP TLSH

            cab2C04DDC374BD96EB5C8EB8208F2C7C92

            • Path C:\Windows\Temp\{D0F6117D-9132-4C75-B994-EAD42197F1EB}\cab2C04DDC374BD96EB5C8EB8208F2C7C92
            • Size 5.4MB
            • SHA256 718a88535f7bc81804646088ac4bfe70a888ed45fd0c130bc625ff9eaddd47c0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            cab5046A8AB272BF37297BB7928664C9503

            • Path C:\Windows\Temp\{D0F6117D-9132-4C75-B994-EAD42197F1EB}\cab5046A8AB272BF37297BB7928664C9503
            • Size 1.0MB
            • SHA256 99fda37db1ad396ca1049cf83e3ea5cb60c7aae315f4b94efc599c26bd54839b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            vcRuntimeAdditional_x64

            • Path C:\Windows\Temp\{D0F6117D-9132-4C75-B994-EAD42197F1EB}\vcRuntimeAdditional_x64
            • Size 208KB
            • SHA256 26d8f51e4683411633d7c45999fa948f33322b5728f06ff2242df06f0c63e695
            • MD5 SHA1 SHA512 SSDEEP TLSH

            vcRuntimeMinimum_x64

            • Path C:\Windows\Temp\{D0F6117D-9132-4C75-B994-EAD42197F1EB}\vcRuntimeMinimum_x64
            • Size 208KB
            • SHA256 96ce3adfe6955fa343aeb5d1bdfe3a7c3936de75d0df74147074e4899f27f42f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            memory/464-36-0x00007FFDEEC40000-0x00007FFDEF5E4000-memory.dmp

            memory/464-46-0x00007FFDEEC40000-0x00007FFDEF5E4000-memory.dmp

            memory/464-37-0x00007FFDEEC40000-0x00007FFDEF5E4000-memory.dmp

            memory/464-39-0x00007FFDEEC40000-0x00007FFDEF5E4000-memory.dmp

            memory/464-35-0x00007FFDEEC40000-0x00007FFDEF5E4000-memory.dmp

            memory/464-30-0x00007FFDEEC40000-0x00007FFDEF5E4000-memory.dmp

            memory/464-31-0x000000001F3F0000-0x000000001F918000-memory.dmp

            memory/464-40-0x00007FFDEEC40000-0x00007FFDEF5E4000-memory.dmp

            memory/464-29-0x000000001ECF0000-0x000000001EEB2000-memory.dmp

            memory/464-54-0x00007FFDEEC40000-0x00007FFDEF5E4000-memory.dmp

            memory/464-53-0x00007FFDEEC40000-0x00007FFDEF5E4000-memory.dmp

            memory/464-18-0x00007FFDEEC40000-0x00007FFDEF5E4000-memory.dmp

            memory/464-17-0x00007FFDEEC40000-0x00007FFDEF5E4000-memory.dmp

            memory/464-16-0x00007FFDEEC40000-0x00007FFDEF5E4000-memory.dmp

            memory/464-15-0x0000000000E30000-0x0000000000E50000-memory.dmp

            memory/464-47-0x00007FFDEEC40000-0x00007FFDEF5E4000-memory.dmp

            memory/464-48-0x00007FFDEEC40000-0x00007FFDEF5E4000-memory.dmp

            memory/464-41-0x00007FFDEEC40000-0x00007FFDEF5E4000-memory.dmp

            memory/464-42-0x00007FFDEEC40000-0x00007FFDEF5E4000-memory.dmp

            memory/464-52-0x00007FFDEEC40000-0x00007FFDEF5E4000-memory.dmp

            memory/464-43-0x00007FFDEEC40000-0x00007FFDEF5E4000-memory.dmp

            memory/464-45-0x00007FFDEEC40000-0x00007FFDEF5E4000-memory.dmp

            memory/464-44-0x00007FFDEEC40000-0x00007FFDEF5E4000-memory.dmp

            memory/464-38-0x00007FFDEEC40000-0x00007FFDEF5E4000-memory.dmp

            memory/464-3922-0x00007FFDEEC40000-0x00007FFDEF5E4000-memory.dmp

            memory/464-49-0x00007FFDEEC40000-0x00007FFDEF5E4000-memory.dmp

            memory/464-14-0x00007FFDEEDCF000-0x00007FFDEEDD0000-memory.dmp

            memory/464-51-0x00007FFDEEC40000-0x00007FFDEF5E4000-memory.dmp

            memory/464-50-0x00007FFDEEC40000-0x00007FFDEF5E4000-memory.dmp

            memory/600-3016-0x0000000000470000-0x0000000000B7D000-memory.dmp

            memory/600-868-0x0000000000470000-0x0000000000B7D000-memory.dmp

            memory/600-3915-0x0000000000470000-0x0000000000B7D000-memory.dmp

            memory/600-3136-0x0000000000470000-0x0000000000B7D000-memory.dmp

            memory/600-3018-0x0000000000470000-0x0000000000B7D000-memory.dmp

            memory/600-3835-0x0000000000470000-0x0000000000B7D000-memory.dmp

            memory/1260-0-0x00000000009F0000-0x0000000000AE8000-memory.dmp

            memory/2072-3916-0x0000000000B10000-0x0000000000CDB000-memory.dmp

            memory/2072-69-0x0000000000B10000-0x0000000000CDB000-memory.dmp

            memory/2072-534-0x0000000000B10000-0x0000000000CDB000-memory.dmp

            memory/2556-3923-0x00007FFDEDDA0000-0x00007FFDEE3E7000-memory.dmp

            memory/4240-3348-0x00007FFDE7450000-0x00007FFDE7A97000-memory.dmp

            memory/5684-3903-0x00007FFDCE010000-0x00007FFDCF010000-memory.dmp

            memory/5684-3901-0x00007FFDE7450000-0x00007FFDE7A97000-memory.dmp

            memory/5684-3902-0x00007FFDE3920000-0x00007FFDE3EA4000-memory.dmp

            memory/5872-3954-0x00007FFE11470000-0x00007FFE11471000-memory.dmp

            memory/5872-3953-0x00007FFE11850000-0x00007FFE11851000-memory.dmp

            memory/5872-3955-0x00007FFDEC0C0000-0x00007FFDEC644000-memory.dmp

            memory/5872-4013-0x0000027DD6660000-0x0000027DD668F000-memory.dmp