Analysis

  • max time kernel
    118s
  • max time network
    143s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    29/10/2026, 22:14

General

  • Target
    2026-10-28_a11752738d608647e6af1396246eb178_coinminer_elex_glassworm_luca-stealer_medusalocker_njrat_remcos.exe
  • Size 1.1MB
  • Sample261029-15pxbsce93
  • SHA256 ae3e8cc2e8af6366567a81a9f485da7d324fb9ccf2445ef9639f67211c247a1a
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • UPX dump on OEP (original entry point) 3 IoCs
  • Executes dropped EXE 20 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Adds Run key to start application 2 TTPs 3 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Checks whether UAC is enabled 1 TTPs 3 IoCs
  • Enumerates connected drives 3 TTPs 23 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in System32 directory 11 IoCs
  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 17 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Program crash 1 IoCs
  • Reads the TCP/IP host and domain name from the registry 1 TTPs 10 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 10 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

    Inno Setup installer

  • Checks SCSI registry key(s) 3 TTPs 5 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Modifies data under HKEY_USERS 3 IoCs
  • Modifies registry class 18 IoCs
  • Suspicious behavior: AddClipboardFormatListener 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 13 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 18 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-10-28_a11752738d608647e6af1396246eb178_coinminer_elex_glassworm_luca-stealer_medusalocker_njrat_remcos.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-10-28_a11752738d608647e6af1396246eb178_coinminer_elex_glassworm_luca-stealer_medusalocker_njrat_remcos.exe"
    1⤵
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Modifies registry class
    • Suspicious use of WriteProcessMemory
    PID:3720
    • C:\Users\Admin\AppData\Local\Temp\GalaxyInstaller_PblJK\GalaxyInstaller.exe
      "C:\Users\Admin\AppData\Local\Temp\GalaxyInstaller_PblJK\GalaxyInstaller.exe" 1207665503 "Terraria"
      2⤵
      • Executes dropped EXE
      • Reads the TCP/IP host and domain name from the registry
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:5064
      • C:\Users\Admin\AppData\Local\Temp\GalaxyInstaller_PblJK\GalaxySetup.exe
        "C:\Users\Admin\AppData\Local\Temp\GalaxyInstaller_PblJK\GalaxySetup.exe" /lang=en_US /webinstaller /product_id=1207665503 /silent /game_name="Terraria"
        3⤵
        • Executes dropped EXE
        • Suspicious use of WriteProcessMemory
        PID:792
        • C:\Users\Admin\AppData\Local\Temp\is-YXVL7C5VL5.tmp\GalaxySetup.tmp
          "C:\Users\Admin\AppData\Local\Temp\is-YXVL7C5VL5.tmp\GalaxySetup.tmp" /SL5="$A016C,337849907,1791488,C:\Users\Admin\AppData\Local\Temp\GalaxyInstaller_PblJK\GalaxySetup.exe" /lang=en_US /webinstaller /product_id=1207665503 /silent /game_name="Terraria"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Adds Run key to start application
          • Drops file in Program Files directory
          • Drops file in Windows directory
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of WriteProcessMemory
          PID:4240
          • C:\Users\Admin\AppData\Local\Temp\is-80EQ64QFSL.tmp\vc_redist.x86.exe
            "C:\Users\Admin\AppData\Local\Temp\is-80EQ64QFSL.tmp\vc_redist.x86.exe" /install /quiet /norestart
            5⤵
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • Suspicious use of WriteProcessMemory
            PID:1408
            • C:\Windows\Temp\{D5E13C63-0F4E-431D-9EB2-1DA3184DBCE4}\.cr\vc_redist.x86.exe
              "C:\Windows\Temp\{D5E13C63-0F4E-431D-9EB2-1DA3184DBCE4}\.cr\vc_redist.x86.exe" -burn.clean.room="C:\Users\Admin\AppData\Local\Temp\is-80EQ64QFSL.tmp\vc_redist.x86.exe" -burn.filehandle.attached=748 -burn.filehandle.self=752 /install /quiet /norestart
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              • Suspicious use of WriteProcessMemory
              PID:3564
              • C:\Windows\Temp\{1D14EE44-23AE-4243-8AF6-D564FE68BA7E}\.be\VC_redist.x86.exe
                "C:\Windows\Temp\{1D14EE44-23AE-4243-8AF6-D564FE68BA7E}\.be\VC_redist.x86.exe" -q -burn.elevated BurnPipe.{BC7022E1-C8D4-432F-B03B-594A0E5E03E2} {63BA902D-2559-433A-BDFB-F660C81C0357} 3564
                7⤵
                • Executes dropped EXE
                • System Location Discovery: System Language Discovery
                PID:1056
          • C:\Users\Admin\AppData\Local\Temp\is-80EQ64QFSL.tmp\vc_redist.x64.exe
            "C:\Users\Admin\AppData\Local\Temp\is-80EQ64QFSL.tmp\vc_redist.x64.exe" /install /quiet /norestart
            5⤵
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • Suspicious use of WriteProcessMemory
            PID:1524
            • C:\Windows\Temp\{7A33B1F5-9537-4E4A-901B-3A6FBA2588E3}\.cr\vc_redist.x64.exe
              "C:\Windows\Temp\{7A33B1F5-9537-4E4A-901B-3A6FBA2588E3}\.cr\vc_redist.x64.exe" -burn.clean.room="C:\Users\Admin\AppData\Local\Temp\is-80EQ64QFSL.tmp\vc_redist.x64.exe" -burn.filehandle.attached=784 -burn.filehandle.self=760 /install /quiet /norestart
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              • Suspicious use of WriteProcessMemory
              PID:5092
              • C:\Windows\Temp\{D5AE56D1-FE91-4EE1-AAB9-A71EAC171835}\.be\VC_redist.x64.exe
                "C:\Windows\Temp\{D5AE56D1-FE91-4EE1-AAB9-A71EAC171835}\.be\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{8E6DF996-5FC8-461B-9F52-372D67958E67} {4C8D62F4-5AED-4445-A1DC-BF09DC350F58} 5092
                7⤵
                • Executes dropped EXE
                • Adds Run key to start application
                • System Location Discovery: System Language Discovery
                • Modifies registry class
                • Suspicious use of AdjustPrivilegeToken
                PID:3560
              • C:\Windows\SysWOW64\WerFault.exe
                C:\Windows\SysWOW64\WerFault.exe -u -p 5092 -s 980
                7⤵
                • Program crash
                PID:1856
          • C:\Program Files\GOG Galaxy\GalaxyClient.exe
            "C:\Program Files\GOG Galaxy\GalaxyClient.exe" /firstRun /installationSource=usedefault
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Adds Run key to start application
            • Checks whether UAC is enabled
            • Reads the TCP/IP host and domain name from the registry
            • Suspicious behavior: AddClipboardFormatListener
            • Suspicious use of AdjustPrivilegeToken
            PID:6088
          • C:\Program Files\GOG Galaxy\GalaxyClient.exe
            "C:\Program Files\GOG Galaxy\GalaxyClient.exe" /clientLanguage=en-US
            5⤵
            • Executes dropped EXE
            • Checks whether UAC is enabled
            • Drops file in Program Files directory
            • Suspicious behavior: AddClipboardFormatListener
            PID:1212
    • C:\Program Files\GOG Galaxy\GalaxyClient.exe
      "C:\Program Files\GOG Galaxy\GalaxyClient.exe" /command=installationScreen /gameId=1207665503
      2⤵
      • Executes dropped EXE
      • Checks whether UAC is enabled
      • Reads the TCP/IP host and domain name from the registry
      • Modifies registry class
      • Suspicious behavior: AddClipboardFormatListener
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:2800
      • C:\Program Files\GOG Galaxy\QtWebEngineProcess.exe
        "C:\Program Files\GOG Galaxy\QtWebEngineProcess.exe" --type=renderer --webengine-schemes=qrc:sV --first-renderer-process --disable-speech-api --disable-blink-features=EyeDropperAPI --lang=en --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=3 --mojo-platform-channel-handle=4084 /prefetch:1
        3⤵
        • Executes dropped EXE
        • Suspicious behavior: EnumeratesProcesses
        PID:3248
  • C:\Windows\system32\vssvc.exe
    C:\Windows\system32\vssvc.exe
    1⤵
    • Checks SCSI registry key(s)
    • Suspicious use of AdjustPrivilegeToken
    PID:1180
  • C:\Windows\system32\srtasks.exe
    C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:5072
  • C:\Windows\system32\msiexec.exe
    C:\Windows\system32\msiexec.exe /V
    1⤵
    • Enumerates connected drives
    • Drops file in System32 directory
    • Drops file in Windows directory
    • Modifies data under HKEY_USERS
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:4076
  • C:\ProgramData\Package Cache\{c157798c-9519-4e56-98d9-f696f78f4a61}\VC_redist.x64.exe
    "C:\ProgramData\Package Cache\{c157798c-9519-4e56-98d9-f696f78f4a61}\VC_redist.x64.exe" /burn.runonce
    1⤵
    • Executes dropped EXE
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4676
    • C:\ProgramData\Package Cache\{c157798c-9519-4e56-98d9-f696f78f4a61}\VC_redist.x64.exe
      "C:\ProgramData\Package Cache\{c157798c-9519-4e56-98d9-f696f78f4a61}\VC_redist.x64.exe" /quiet /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20261029221550.log" /install
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:860
      • C:\ProgramData\Package Cache\{c157798c-9519-4e56-98d9-f696f78f4a61}\VC_redist.x64.exe
        "C:\ProgramData\Package Cache\{c157798c-9519-4e56-98d9-f696f78f4a61}\VC_redist.x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{c157798c-9519-4e56-98d9-f696f78f4a61}\VC_redist.x64.exe" -burn.filehandle.attached=560 -burn.filehandle.self=580 /quiet /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20261029221550.log" /install
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        PID:1384
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 5092 -ip 5092
    1⤵
      PID:4820
    • C:\Program Files\GOG Galaxy\GalaxyClientService.exe
      "\\?\C:\Program Files\GOG Galaxy\GalaxyClientService.exe"
      1⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:3188
    • C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe
      "C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe"
      1⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Reads the TCP/IP host and domain name from the registry
      • Suspicious behavior: EnumeratesProcesses
      PID:4528
    • C:\Program Files\GOG Galaxy\GalaxyClientService.exe
      "\\?\C:\Program Files\GOG Galaxy\GalaxyClientService.exe"
      1⤵
      • Executes dropped EXE
      PID:4952
    • C:\Program Files\GOG Galaxy\GalaxyClientService.exe
      "\\?\C:\Program Files\GOG Galaxy\GalaxyClientService.exe"
      1⤵
      • Executes dropped EXE
      PID:2952

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          e5ab1d2.rbs

          • Path C:\Config.Msi\e5ab1d2.rbs
          • Size 76B
          • SHA256 f07dcbfb03658a8f94094ef82d87e8237457c2e5c2ba261be6d817845bfb4094
          • MD5 SHA1 SHA512 TLSH

          GalaxyClient.exe

          • Path C:\Program Files\GOG Galaxy\GalaxyClient.exe
          • Size 14.8MB
          • SHA256 00a0bbd7582045f7e31c7ace5336c58308ebbdb5eadcaaee70370b3a9a57deac
          • MD5 SHA1 SHA512 SSDEEP TLSH

          PocoData.dll

          • Path C:\Program Files\GOG Galaxy\PocoData.dll
          • Size 2.1MB
          • SHA256 970a5a0215dc51ee35f3e0ed3508feed50fa70b60fb9da27e9cdbc36ee500e99
          • MD5 SHA1 SHA512 SSDEEP TLSH

          PocoDataSQLite.dll

          • Path C:\Program Files\GOG Galaxy\PocoDataSQLite.dll
          • Size 404KB
          • SHA256 5fd3840b1464fce1bf95223a097c7a2c217389b5ca2cf893aec91741f3c4a6c2
          • MD5 SHA1 SHA512 SSDEEP TLSH

          PocoFoundation.dll

          • Path C:\Program Files\GOG Galaxy\PocoFoundation.dll
          • Size 2.1MB
          • SHA256 dff145ef5117ffb273316685b4669220b0b31204f92be09e82691a73a9b955a1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          PocoJSON.dll

          • Path C:\Program Files\GOG Galaxy\PocoJSON.dll
          • Size 388KB
          • SHA256 45b48529aafda73c60959609910b18e34d198e7c898cace6969d907694d622a6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          PocoNet.dll

          • Path C:\Program Files\GOG Galaxy\PocoNet.dll
          • Size 1.5MB
          • SHA256 24b103f8e5ae714a5b41f697624b13211397fa72608375d4e5ff8aa35715aa98
          • MD5 SHA1 SHA512 SSDEEP TLSH

          PocoUtil.dll

          • Path C:\Program Files\GOG Galaxy\PocoUtil.dll
          • Size 595KB
          • SHA256 234111be57fbcae98f2eeae7b5b8340343a5529159f38b10799270932c28eca6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Qt6Core.dll

          • Path C:\Program Files\GOG Galaxy\Qt6Core.dll
          • Size 6.1MB
          • SHA256 ee1ac4133cb8618f0154b497f31ab5916e02144833632b3c9e83f41bb2631026
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Qt6Gui.dll

          • Path C:\Program Files\GOG Galaxy\Qt6Gui.dll
          • Size 8.3MB
          • SHA256 257be29c3263eae197bd666a34814874403e94a9f9659fe786811353ab597150
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Qt6Network.dll

          • Path C:\Program Files\GOG Galaxy\Qt6Network.dll
          • Size 1.6MB
          • SHA256 e5dda85d26ce26d97dba94fcd8407989bd1dbfb4eaf9e2487ef5966b9fb942ac
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Qt6WebChannel.dll

          • Path C:\Program Files\GOG Galaxy\Qt6WebChannel.dll
          • Size 244KB
          • SHA256 9a7d3454c4a582130b6c6afd81e71902e23c56707838bcdd9342a6474a448867
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Qt6WebEngineWidgets.dll

          • Path C:\Program Files\GOG Galaxy\Qt6WebEngineWidgets.dll
          • Size 180KB
          • SHA256 6b94116ee0576c07ddd0966e2febbb983c925d136f45765abf3f45201d100e34
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Qt6Widgets.dll

          • Path C:\Program Files\GOG Galaxy\Qt6Widgets.dll
          • Size 6.3MB
          • SHA256 e1155224f31d54a7c79286b0f8014d1ffd70af187fb297a6ad29d3b8f75ee68b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          QtWebEngineProcess.exe

          • Path C:\Program Files\GOG Galaxy\QtWebEngineProcess.exe
          • Size 668KB
          • SHA256 60a27d325002295b8bef4778b6fbf9888f553cb69b55ffcddcd6f7cfb55af17f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-II6CZLA8XF.tmp

          • Path C:\Program Files\GOG Galaxy\licences\POCO CPP Libraries\is-II6CZLA8XF.tmp
          • Size 1KB
          • SHA256 c9bff75738922193e67fa726fa225535870d2aa1059f91452c411736284ad566
          • MD5 SHA1 SHA512 TLSH

          is-3G10MTFEM7.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginEpic\aiohttp\_websocket\is-3G10MTFEM7.tmp
          • Size 18KB
          • SHA256 682d97f70917c59a8a09ba2759d2504c4f12a1f4ffd091a584a8f2f0bda4b7f0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-3QPX1OA2I2.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginEpic\yarl\is-3QPX1OA2I2.tmp
          • Size 14B
          • SHA256 6b2e4e30ee3be4f95c67f15bba7f666875bb63a3014e4d145cbe33b47c7722e8
          • MD5 SHA1 SHA512

          is-BWCPS5M6BA.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\.hash\is-BWCPS5M6BA.tmp
          • Size 64B
          • SHA256 8105a9184e8337165635f918e07a54b4c248a5f8bb5196268b10f771883616dd
          • MD5 SHA1 SHA512 TLSH

          is-GVXBTX7RZG.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\.hash\is-GVXBTX7RZG.tmp
          • Size 64B
          • SHA256 eb097c0d9ca7a6f045313faa0925c3c2f74558eeaeea0e98b086b800a420fae0
          • MD5 SHA1 SHA512 TLSH

          is-I66Y9RBEVO.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\.hash\is-I66Y9RBEVO.tmp
          • Size 64B
          • SHA256 c4b200a179263209f5bb417b8646c3b18706da248fd7772718a52d3e60a1d600
          • MD5 SHA1 SHA512 TLSH

          is-I8U4698FFW.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\.hash\is-I8U4698FFW.tmp
          • Size 64B
          • SHA256 1a5749a6499fc7ddd5743cfee8111ef6b5c0ed42902fabe72f9767265fe1ed48
          • MD5 SHA1 SHA512 TLSH

          is-O7NVDKFA9R.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\.hash\is-O7NVDKFA9R.tmp
          • Size 64B
          • SHA256 5b9a913d60dce79800ac6664ae2239b73b6640792b77047a35d41f4507d3c488
          • MD5 SHA1 SHA512 TLSH

          is-2AKCJK1866.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\_websocket\.hash\is-2AKCJK1866.tmp
          • Size 64B
          • SHA256 32d2911ee6a6c2c473093b442c86817329254420050e89c19403cefc8460dda6
          • MD5 SHA1 SHA512 TLSH

          is-N6FYNQXKFG.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\_websocket\.hash\is-N6FYNQXKFG.tmp
          • Size 64B
          • SHA256 cafb7482bb8f87e39fd396d2370c5ea18432052b9d80ad6d7584d70476b6aa1f
          • MD5 SHA1 SHA512 TLSH

          is-VY8LGZ34WC.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\_websocket\.hash\is-VY8LGZ34WC.tmp
          • Size 64B
          • SHA256 78ec93f35dc661b5ff3148f32cea73afebd3bb727f82950ecbc13336013b9ed4
          • MD5 SHA1 SHA512 TLSH

          is-0YLO13BKGF.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\_websocket\is-0YLO13BKGF.tmp
          • Size 143KB
          • SHA256 59c329569bbf27c53119f3065a72b1ea6ef3462f8bfface981cf9dd3fd1c08ad
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-78RAVER7OQ.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\_websocket\is-78RAVER7OQ.tmp
          • Size 5KB
          • SHA256 6a6aaf0e1a002808bca6d078a9436e42191a3a7fb82714a1fd52c0ab2b6611fc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-8SZW6VIYF3.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\_websocket\is-8SZW6VIYF3.tmp
          • Size 2KB
          • SHA256 1cd3a5e20456b4d04d11835b2bd3c639f14443052a2467b105b0ca07fdb4b25d
          • MD5 SHA1 SHA512 TLSH

          is-DDB7GMA2LE.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\_websocket\is-DDB7GMA2LE.tmp
          • Size 1KB
          • SHA256 468edd38ebf8dc7000a8d333df1c82035d69a5c9febc0448be3c9c4ad4c4630c
          • MD5 SHA1 SHA512 TLSH

          is-G8JP4QALEI.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\_websocket\is-G8JP4QALEI.tmp
          • Size 1KB
          • SHA256 d6bd1c27e8dd1606d2ac2ebe8c8d338c40350a9a73a149fcbbfc2279bad554ed
          • MD5 SHA1 SHA512 TLSH

          is-IQM5WMC8OO.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\_websocket\is-IQM5WMC8OO.tmp
          • Size 115B
          • SHA256 e354dd499be171b6125bf56bc3b6c5e2bff2a28af69e3b5d699ddb9af2bafa3c
          • MD5 SHA1 SHA512 TLSH

          is-MB88D4LHT2.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\_websocket\is-MB88D4LHT2.tmp
          • Size 35KB
          • SHA256 4c0d339d53e9139bdde2aed60230ce8f12c85e0c9b0d80895d3628a056887254
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-PIGQD9TS3Y.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\_websocket\is-PIGQD9TS3Y.tmp
          • Size 45B
          • SHA256 479d4a587e6491db432dbed3fa2973b64b1b7f078a0b2deddb64a0c46b6263ee
          • MD5 SHA1 SHA512

          is-VXV5WEPFGC.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\_websocket\is-VXV5WEPFGC.tmp
          • Size 2KB
          • SHA256 3f3f2abe7538dd5502359718e20d375704ec1ceb1bfe348df221baf7130073f0
          • MD5 SHA1 SHA512 TLSH

          is-WBMXPM0AH6.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\_websocket\is-WBMXPM0AH6.tmp
          • Size 7KB
          • SHA256 635e3f9d461fd3565490b335174f9ba4c56e5672f4a4f03194e5e4cedd239a79
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-08RGRNQ2FJ.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-08RGRNQ2FJ.tmp
          • Size 28KB
          • SHA256 7584e6ccbd1472c5e86982c462e434a0eea469888a4e1baea595970c1e997520
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-19AHJAAUXZ.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-19AHJAAUXZ.tmp
          • Size 22KB
          • SHA256 0782e780d3272b2032bf24af9b63e7a7f54a4f7c912f6415867e1d945bea1fb3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-1SHR8EIZAG.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-1SHR8EIZAG.tmp
          • Size 333B
          • SHA256 cd8513bd7b0c43d4b3d7234df245f0779431bb8f5ad45ce367fc10aab88473c3
          • MD5 SHA1 SHA512 TLSH

          is-1V6OMA655L.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-1V6OMA655L.tmp
          • Size 19KB
          • SHA256 5b0104cd4837e23f3590ad9d3c59e196ac7fcfa9c68e71d90f0799245eb9a4a7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-2UK5SV1ZK2.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-2UK5SV1ZK2.tmp
          • Size 1KB
          • SHA256 4b1e6fdb25322eef276da6eab494568f5335fee5b4219002bbbf2e603ecb072d
          • MD5 SHA1 SHA512 TLSH

          is-3GB1MTKJKQ.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-3GB1MTKJKQ.tmp
          • Size 4KB
          • SHA256 98cdbe47c79a576afa322f597366c31bc427844f61d08ccfbed0d7fdf90a479b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-3WVWA7KYRJ.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-3WVWA7KYRJ.tmp
          • Size 11KB
          • SHA256 cf25585730a09e8a621b09c884a94d647b4b57f21843d682f959b8de3fc74680
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-4HM0BDY8H5.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-4HM0BDY8H5.tmp
          • Size 12KB
          • SHA256 8c0fda256ec9747d668a1ac861d25c2ce1d5290e00820de0f7ddefe747884c1b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-4JZQP70616.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-4JZQP70616.tmp
          • Size 37KB
          • SHA256 e87bda01a00549cf330e20ac65a65b7ddb009620c62e5361761b3684cee885d4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-4WC5JT2D9F.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-4WC5JT2D9F.tmp
          • Size 30KB
          • SHA256 d281de3810f42a05c42a13432c6b35fa10d4c20a5d3deee63fdee62aa4a07255
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-506BYCZ98D.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-506BYCZ98D.tmp
          • Size 68KB
          • SHA256 4bc9046127780e0d08b0648a197027f286139616f1cba188921dd55118742606
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-5T2X2K2Q4W.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-5T2X2K2Q4W.tmp
          • Size 7KB
          • SHA256 1b9ba09685bd9e85313dfb744a6556397c37d0cbe22faaea65cdd7aca37f4f55
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-65M1WF9YGI.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-65M1WF9YGI.tmp
          • Size 70B
          • SHA256 0455129b185e981b5b96ac738f31f7c74dc57f1696953cae0083b3f18679fe73
          • MD5 SHA1 SHA512 TLSH

          is-6RHNLEYBZV.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-6RHNLEYBZV.tmp
          • Size 27KB
          • SHA256 c751a507a8ea3e8bb7419c8c2a92952ddc844f0513209f806deb170c45b128a6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-79B4CAWFWG.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-79B4CAWFWG.tmp
          • Size 13KB
          • SHA256 ca68636d81f3d8a7f4654ff82f2d21029ef7761b20ad0233243a38028b77fd32
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-7UDM665JTH.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-7UDM665JTH.tmp
          • Size 18KB
          • SHA256 963640bfc11501d76b5ae177aa9dfd29d53245350e76b4e0482e3199a0bd91a4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-8F8QCLOX48.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-8F8QCLOX48.tmp
          • Size 53KB
          • SHA256 336e5aee1d6c74a8f43f9bf417cc99f58efe7a85d3d6600b274278036007e414
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-8H3086UTX3.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-8H3086UTX3.tmp
          • Size 8KB
          • SHA256 6db7f6c2926083f4738bc5fc781116afeaa29567d1d8f461c6857c809c34e093
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-9UI7F8M3LQ.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-9UI7F8M3LQ.tmp
          • Size 18KB
          • SHA256 0b67d5cd018589e14ff661434cebdf11ce9f6f990f4b68a32f6b45280516ed2c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-BAY2H190GU.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-BAY2H190GU.tmp
          • Size 8KB
          • SHA256 059dcdb909ff4fc6f6a90140bea01e1086c98f4f59f5cc5027714d60227e70b1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-BD43ZGNS3Z.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-BD43ZGNS3Z.tmp
          • Size 10KB
          • SHA256 8ad3518423032458673167edaf94b24eca2a87e8b49fdaf34e3d2c8dc004523a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-BLO5E543M5.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-BLO5E543M5.tmp
          • Size 1KB
          • SHA256 0c629cc036e020ca5ab2feecda378a091ba2c728fb5be448ae28511638f4c5c6
          • MD5 SHA1 SHA512 TLSH

          is-CV15FKCEKQ.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-CV15FKCEKQ.tmp
          • Size 8B
          • SHA256 dd55705d4016544557eec0f0c980e75b965d042f7f67d0090057cb0a57945b49
          • MD5 SHA1 SHA512

          is-D0V381Y0ZN.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-D0V381Y0ZN.tmp
          • Size 3KB
          • SHA256 57a3691be45378429eb5a6415b83943f6f81515823f2fbf1e2e78fe95a447d3b
          • MD5 SHA1 SHA512 TLSH

          is-I00J55V8T5.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-I00J55V8T5.tmp
          • Size 878B
          • SHA256 6fd9019b13cb3c540ffe7bbfb0c8483087aa0ce9b4ba0f06e29adbae110c1d9d
          • MD5 SHA1 SHA512 TLSH

          is-IAZG8OC56C.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-IAZG8OC56C.tmp
          • Size 41KB
          • SHA256 5dbb3fda5d300da4e1146f9e84d96fcd05241ee04fa5ce45c6926725add93dcb
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-IJ8YFX9YKY.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-IJ8YFX9YKY.tmp
          • Size 998B
          • SHA256 2be8611a1de377aa821271c9a3c2ef1727c9c018e1f7d50a23b034692455863e
          • MD5 SHA1 SHA512 TLSH

          is-L1XPCT10LY.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-L1XPCT10LY.tmp
          • Size 8KB
          • SHA256 37ff62c92fed47d534a5fdc145a207da7cc0d698cdd577e2da01a646b3219e1a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-LL0P6UAEMH.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-LL0P6UAEMH.tmp
          • Size 2KB
          • SHA256 2b4895f39896d2f106deb0e4728a6bba276ca729f342faf05bc989be03c78ac8
          • MD5 SHA1 SHA512 TLSH

          is-LRN8148Y07.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-LRN8148Y07.tmp
          • Size 6KB
          • SHA256 631bd3b2bd46317d1d230a328debc6925b0bf433176cb761e730c901f257270b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-LWZPCKHTLE.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-LWZPCKHTLE.tmp
          • Size 3KB
          • SHA256 f2f348bfa415fd20c25bef2d7e1972c52c22043edd022313a89235188f111b9b
          • MD5 SHA1 SHA512 TLSH

          is-M14BWNFK5I.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-M14BWNFK5I.tmp
          • Size 45KB
          • SHA256 d0a67572078cd438ec81c95c4b83a5d0bc449a00829a9471953b323a720dbfcf
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-NK0KIE3INZ.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-NK0KIE3INZ.tmp
          • Size 2KB
          • SHA256 d4c8427ba527fca235b693bce479c37f354ef78061722acb6a700ecace452070
          • MD5 SHA1 SHA512 TLSH

          is-NKZMPWBGRO.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-NKZMPWBGRO.tmp
          • Size 29KB
          • SHA256 ccbcf5f770c4de6ebc801c2c338ddc75aaa7cf3ddc75f8add0386c77dfe65e28
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-NL47M1IJC4.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-NL47M1IJC4.tmp
          • Size 17KB
          • SHA256 69a49c41e10d2e176a0ad2ee2a305771b038f61954fe8d1c16603dde49dc5a8f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-O645D8O3GX.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-O645D8O3GX.tmp
          • Size 243KB
          • SHA256 7887eb2b564ab4be8fdfe427e963eb0f57fd1f5cb4a7d44cf7a916e166c7cf66
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-QE0BSQK7PV.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-QE0BSQK7PV.tmp
          • Size 7KB
          • SHA256 583b036d13c40d819d0c581f04ae86e406ed1e81473d58d2250189d611a2e89e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-QG9A5PIF67.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-QG9A5PIF67.tmp
          • Size 1KB
          • SHA256 1445485c5910e7c9f96e12b804612aa830969c387e18d2665aadb423962de925
          • MD5 SHA1 SHA512 TLSH

          is-QI1BLOC1I3.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-QI1BLOC1I3.tmp
          • Size 14KB
          • SHA256 29bf8ddf668c998a82d9873cd8d57a97498871abd242cb750474858fde00a65d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-RL8UQ5T15O.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-RL8UQ5T15O.tmp
          • Size 5KB
          • SHA256 ee1b6686067213d1ea59b3e9c47534afb90021d4f692939741ad4069d0e1d96f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-RTW73Z8DFP.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-RTW73Z8DFP.tmp
          • Size 4KB
          • SHA256 c3ad073fa4d540a9abb3f9c79bc16548d622457d04068ec7caaf62994983363a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-SYW3XM44G0.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-SYW3XM44G0.tmp
          • Size 44KB
          • SHA256 3cfcc07a8d4205c28bc3a825e725ce1bb49cc9b7662dfb6e84fa5ae4a2b87f29
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-TRUHSF7HCD.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-TRUHSF7HCD.tmp
          • Size 12KB
          • SHA256 2d1df7c1fe87eab9a6aa1742868196d28ea658449ade81a41492fdfc32a3a056
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-U1OAOTF33F.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-U1OAOTF33F.tmp
          • Size 12KB
          • SHA256 adf6e0f2752c7e908c33fcc6a50ca08859fc9f349d048fbbdf5ae65d5187c0b7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-UH4AQ48IAO.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-UH4AQ48IAO.tmp
          • Size 57KB
          • SHA256 5b0e96accbf978222088ef07368b97d9888e1c9d0fd9beb6478422da9380be99
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-ULXGZUY63Q.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-ULXGZUY63Q.tmp
          • Size 22KB
          • SHA256 5571c60ed7f2fe3ac10722efba19cbf80fcf9a97284ff64bc98763fc470bdc7c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-V2GOGOVHDU.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-V2GOGOVHDU.tmp
          • Size 10KB
          • SHA256 78f26064037911063862e162b9999564cea9dd4bb3278a8c58cd5fbbc0c9d857
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-W5FLLROQUI.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-W5FLLROQUI.tmp
          • Size 6KB
          • SHA256 5c2d747f9ed0dfa26661a690aab79cb327c8c4731ea4229a2a404407b84bcc92
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-X23VBNBYNL.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-X23VBNBYNL.tmp
          • Size 4KB
          • SHA256 18fd18f4da996101a426d4bcd570f353bd1eeeb44c6f7e1347bc86326c79ff3b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-X2KR21SG54.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-X2KR21SG54.tmp
          • Size 29KB
          • SHA256 58956e9adf8fd2e31a1526de7ffa30bce5e9abdd04e15325dd1bd23968749c91
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-Y1TTHFNFT1.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-Y1TTHFNFT1.tmp
          • Size 40KB
          • SHA256 cc32e42d780917d5aa79aaa84ae37c0a804bd43fd046748b23381e8ee93fc06a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-Y597YN22NE.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-Y597YN22NE.tmp
          • Size 15KB
          • SHA256 f43ada1eeba9b89713ecd3a0c9e1a697c481afb5790f9203e7ea626357d031d0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-ZK3FPPG3N3.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-ZK3FPPG3N3.tmp
          • Size 16KB
          • SHA256 412b888d3034d256be5751035b31118bda3592bcddbd23cbc199a6c3bdc526d4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-ZVN398WS5A.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\is-ZVN398WS5A.tmp
          • Size 11KB
          • SHA256 b0972ebd829a0769f0b9274fee4d7ccb7c1cef8694d310337498a4cf37acacf1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          web_server.py

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\web_server.py
          • Size 2KB
          • SHA256 459496b7f323f8bbbcf5b158b2bfd3deb8f15b654d37b3c7349da6befdaa10bb
          • MD5 SHA1 SHA512 TLSH

          is-UOHBDXVMPV.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\aiosignal\is-UOHBDXVMPV.tmp
          • Size 1KB
          • SHA256 4c8926506f474c1b7875fab69c8498062662441db1c2f16d119c9d2cfd073cbe
          • MD5 SHA1 SHA512 TLSH

          is-384237T2NI.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-384237T2NI.tmp
          • Size 2KB
          • SHA256 c3847e1580b734afe43241945899583f87150251fd1d1682fae9b77dc8d89073
          • MD5 SHA1 SHA512 TLSH

          is-47YRL1L39C.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-47YRL1L39C.tmp
          • Size 25KB
          • SHA256 050b42525cf08368161d3617050beb118067cc152b0ef3b9eeed0fcba5023e17
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-5TWIHX09A7.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-5TWIHX09A7.tmp
          • Size 3KB
          • SHA256 1a50de3b33de4c581e0412db8fd1b9ec4cf994093af2e85200b45827f7b17bce
          • MD5 SHA1 SHA512 TLSH

          is-6CHFM352ZS.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-6CHFM352ZS.tmp
          • Size 643B
          • SHA256 a2b5366df7fe56341ada4303caf9cc415ef7a094f6591c90bb0e19475ca6d5b1
          • MD5 SHA1 SHA512 TLSH

          is-B5HRJJIN8F.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-B5HRJJIN8F.tmp
          • Size 2KB
          • SHA256 c7483b88450e9c15490bbdb3c850a06f578aab2c52fbb7f62c69cdc99febf79b
          • MD5 SHA1 SHA512 TLSH

          is-BBDO1ZH6UI.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-BBDO1ZH6UI.tmp
          • Size 1KB
          • SHA256 64188a58ba774742df099b2aed7d75a67f565fc36c952db05cce23b272ce19cf
          • MD5 SHA1 SHA512 TLSH

          is-BMXYRW5JHY.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-BMXYRW5JHY.tmp
          • Size 539B
          • SHA256 cd9abc6c2527280cbd983b41130e366613e1014207a1329e7434089c90fcf373
          • MD5 SHA1 SHA512 TLSH

          is-DGRH4UKYBD.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-DGRH4UKYBD.tmp
          • Size 1KB
          • SHA256 e7e75c4fadc640adf938d1334a07d70a46c1ee93e4691faabf5e669b83d54b34
          • MD5 SHA1 SHA512 TLSH

          is-IMMPQSHZR1.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-IMMPQSHZR1.tmp
          • Size 584B
          • SHA256 367564685535041e0907c13826e5f2af34d482fb4ca63f29df005d258eee8b1e
          • MD5 SHA1 SHA512 TLSH

          is-N5JGEFLF4T.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-N5JGEFLF4T.tmp
          • Size 1KB
          • SHA256 6f8bcc6e7a10dd5a7059986aad88bfb2c5d508af28d9ce074124b4f5c49433da
          • MD5 SHA1 SHA512 TLSH

          is-O0FCM0JHXA.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-O0FCM0JHXA.tmp
          • Size 103KB
          • SHA256 1fb387d9e592e429c1ccb5233451355b299f3eb985d6bf1fbf644f76df4cb980
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-OCJU45L4PH.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-OCJU45L4PH.tmp
          • Size 209B
          • SHA256 c7f3372f75ae07baff50b5c05a3c7de7db9d290e072c1f25fa1b1cd450c636f9
          • MD5 SHA1 SHA512 TLSH

          is-PT075UGMMJ.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-PT075UGMMJ.tmp
          • Size 368B
          • SHA256 53efd153f5193b23d4110cd713a44c61041c8e4651636e704c7f7db0dd2cecc3
          • MD5 SHA1 SHA512 TLSH

          is-Q4SSO943UD.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-Q4SSO943UD.tmp
          • Size 21KB
          • SHA256 9b7411cd94c036be1fd82e1e55d528160d753605d66a4f166ade2a4131a1bdcb
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-REV53RLMN0.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-REV53RLMN0.tmp
          • Size 4KB
          • SHA256 dcd9f54e3c659546225ff9c9a159c4917a0393484cd4360a8f90c4ec665ee22d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-TO76U81U20.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-TO76U81U20.tmp
          • Size 11KB
          • SHA256 a55188980515a2fab6fd3625febfc72189c697239aa02b84871a3e12fb279d27
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-VFCSMQEWRG.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-VFCSMQEWRG.tmp
          • Size 2KB
          • SHA256 7ce608bedd5e192a90adee2e092dec256299d26c00b82f140faa9b6b9392f7f5
          • MD5 SHA1 SHA512 TLSH

          is-XDI8M07LXJ.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-XDI8M07LXJ.tmp
          • Size 469B
          • SHA256 5c33f9e13527f992a10fad9339079b9b3af0172a268540a8191a5c95be9a9510
          • MD5 SHA1 SHA512 TLSH

          is-Y3ZPYUFBQ8.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-Y3ZPYUFBQ8.tmp
          • Size 3KB
          • SHA256 80cd59987681724c98588d848aba51373aa6dc1d7d730e48aba0782a7a3d6023
          • MD5 SHA1 SHA512 TLSH

          is-YBRSSTCZ6Q.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-YBRSSTCZ6Q.tmp
          • Size 16KB
          • SHA256 231e481134dfcf9174d45fb5d8c17f0921689889f687c6faec4555cf6802b411
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-YDQZG140WS.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-YDQZG140WS.tmp
          • Size 843B
          • SHA256 746ab7c51e9f819105e9406dfcbd13f9e507201e22e37911987d0fdbcb09570f
          • MD5 SHA1 SHA512 TLSH

          is-ZARD8GNGMM.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attr\is-ZARD8GNGMM.tmp
          • Size 208B
          • SHA256 dc9e411be753c65b41935ffe46e351507aefdaabb5bfcbf868334043bfe689f0
          • MD5 SHA1 SHA512 TLSH

          is-1Y4C6T9XAF.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attrs\is-1Y4C6T9XAF.tmp
          • Size 76B
          • SHA256 f244258eb5707d24d1bbc20dc0493c488d1e1abce659fb6c4fbaccd04ab2a213
          • MD5 SHA1 SHA512 TLSH

          is-AP5SZMU9XW.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attrs\is-AP5SZMU9XW.tmp
          • Size 76B
          • SHA256 c5ccbac03e53b5391d086d5fe1759ba1c3d23b47da06393921f5497cfe92523d
          • MD5 SHA1 SHA512 TLSH

          is-FF00JSRMXK.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attrs\is-FF00JSRMXK.tmp
          • Size 76B
          • SHA256 0020829a0d7dfaf0c56833d8f6f165d7df523d709030dfdb10db380c02e3ce6b
          • MD5 SHA1 SHA512 TLSH

          is-ISOJBVX7S2.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attrs\is-ISOJBVX7S2.tmp
          • Size 9KB
          • SHA256 da057bf60f54c49a69192338f2101927a87f3076fbd1d66824bdf564d25e6582
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-K2WRI8LTB6.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attrs\is-K2WRI8LTB6.tmp
          • Size 73B
          • SHA256 78bd5889d6105774f687dfd2608652651d4501c1c66f54ee093cb41342efd925
          • MD5 SHA1 SHA512 TLSH

          is-ST9814I8FA.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attrs\is-ST9814I8FA.tmp
          • Size 1KB
          • SHA256 47168064dc1888487e7dcbc72d936943f0d62a78bbdccfe3c443c47ed8aad597
          • MD5 SHA1 SHA512 TLSH

          is-VDF5WTNOR6.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\attrs\is-VDF5WTNOR6.tmp
          • Size 73B
          • SHA256 54e50c66e83db8453a754b80d1d1758c89d42b43cbddf2e03f45414b977e0831
          • MD5 SHA1 SHA512 TLSH

          is-7B3B810MG2.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\certifi\is-7B3B810MG2.tmp
          • Size 3KB
          • SHA256 5c55f2727746e697f7edac9e17c377d8752e0da7ecca191531b3b80403d61dad
          • MD5 SHA1 SHA512 TLSH

          is-YFWT4YKDY4.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\certifi\is-YFWT4YKDY4.tmp
          • Size 243B
          • SHA256 c410688fdd394d45812d118034e71fee88ba7beddd30fe1c1281bd3b232cd758
          • MD5 SHA1 SHA512 TLSH

          is-BT3G29XP5M.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\frozenlist\is-BT3G29XP5M.tmp
          • Size 7B
          • SHA256 b28c3db284f03fd4ff80401049587b19bf3ce79874e0dc2686cd967be2518193
          • MD5 SHA1 SHA512

          is-OTHIQ2PR27.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\frozenlist\is-OTHIQ2PR27.tmp
          • Size 1KB
          • SHA256 bcc128112d7119e80fb555e80a2f57c9d11e1eccae22af8a75e5f03f93ddb1a0
          • MD5 SHA1 SHA512 TLSH

          is-QX0YR2QTVU.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\frozenlist\is-QX0YR2QTVU.tmp
          • Size 2KB
          • SHA256 c40204daef677006e30131883df9e8fce25f7bc010fb587bcffb9cef7758b040
          • MD5 SHA1 SHA512 TLSH

          is-RO60H4EIYR.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\frozenlist\is-RO60H4EIYR.tmp
          • Size 67KB
          • SHA256 e55dadf1985e5f755147f352bc5bf3bf6b0fef57c10422e3bfdc4e00061230b6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-Z22PNPS8W0.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\frozenlist\is-Z22PNPS8W0.tmp
          • Size 3KB
          • SHA256 b7e6868ee12256dfcc64f049d119eb69abd598f04ae9aaf3de2e3c66f5ee62c5
          • MD5 SHA1 SHA512 TLSH

          is-6MB7JC0ON7.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\galaxy\api\is-6MB7JC0ON7.tmp
          • Size 3KB
          • SHA256 f2842b10f3512d6ff924265ad2ac69bba6bc3e4dc1fe2be0a4c53902b824e0d3
          • MD5 SHA1 SHA512 TLSH

          is-A0US083TM1.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\galaxy\api\is-A0US083TM1.tmp
          • Size 4KB
          • SHA256 5c2f98eaf516c21d92e3db3cfe36d0f0ca2b1e13935e80937025cc93a03a3a75
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-J44XG9D6IQ.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\galaxy\api\is-J44XG9D6IQ.tmp
          • Size 2KB
          • SHA256 7bbed95ddcbce54724ea571d8b019ebbc7426de263a3de6eba7668ef01ba77a8
          • MD5 SHA1 SHA512 TLSH

          is-L4LRG0ARRH.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\galaxy\api\is-L4LRG0ARRH.tmp
          • Size 8KB
          • SHA256 1253621bb8731d506afc25a76607c695417cfe13ba98a51483b3c1212d0aa849
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-T8FBR6DN1U.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\galaxy\api\is-T8FBR6DN1U.tmp
          • Size 45KB
          • SHA256 48bf7166f9d798f168693dc1cf9e267be953731ab1e58c0b012856df80e8080c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-TL8ILPSPSY.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\galaxy\api\is-TL8ILPSPSY.tmp
          • Size 13KB
          • SHA256 c61dd27ae4d2ee6978b55648d31065b420352bbd3cba2233f679a562c6e8c18f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          http.py

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\galaxy\http.py
          • Size 5KB
          • SHA256 df3d202d7610c4d3707f0cd3ba21a6e30d59e4448861d6b151b4fad185bd20ac
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-AJBGGZVURC.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\galaxy\is-AJBGGZVURC.tmp
          • Size 682B
          • SHA256 e2de8b43beafba6f5464d1bc29cc8dd8ee62028c911c8ce23fe4066df8e41287
          • MD5 SHA1 SHA512 TLSH

          is-CWVF2YY9XC.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\galaxy\is-CWVF2YY9XC.tmp
          • Size 976B
          • SHA256 f57e0c4b3586f2da8cc45e71cc5ea713e7c71a17d6c93e2755f5d17d18c2e8b8
          • MD5 SHA1 SHA512 TLSH

          is-GGPIXFYOKZ.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\galaxy\is-GGPIXFYOKZ.tmp
          • Size 1KB
          • SHA256 65ed7220bc128c482b0ec7337f218510de1379b5eab17b521015b6989ada31d6
          • MD5 SHA1 SHA512 TLSH

          is-L8XZECWC3P.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\galaxy\is-L8XZECWC3P.tmp
          • Size 161B
          • SHA256 cf518cab6f33572388dc870e1fb8489fa90e239b9a691967868926b5967ea4e2
          • MD5 SHA1 SHA512 TLSH

          is-N5RUVKZU7K.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\galaxy\is-N5RUVKZU7K.tmp
          • Size 2KB
          • SHA256 db245597bbdad30094291ba766ab5cd9cee7a53d4a1bc8e3d5c1889be5d20739
          • MD5 SHA1 SHA512 TLSH

          is-PRB0GD0YA1.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\galaxy\is-PRB0GD0YA1.tmp
          • Size 3KB
          • SHA256 be2046ccf4213ea19fe12b0418f93ad153bc640453838889ddaee90ddc51af0a
          • MD5 SHA1 SHA512 TLSH

          is-DI50YUKIRA.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\galaxy\unittest\is-DI50YUKIRA.tmp
          • Size 1KB
          • SHA256 8c4bee6c0f9d51bfde8562324acd9cefba19e1068e5f00c63151adbdcc2e3f35
          • MD5 SHA1 SHA512 TLSH

          is-HAPF0MNAZX.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\idna\is-HAPF0MNAZX.tmp
          • Size 868B
          • SHA256 30fa8d0cb65b5ea19a35d5f1005862a853ca1105e3bb68cd42109ecbafb97893
          • MD5 SHA1 SHA512 TLSH

          is-YLYF5L27Z9.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\idna\is-YLYF5L27Z9.tmp
          • Size 1KB
          • SHA256 01ea40dfd71e447c647c73f8d7e16f296e4a8be7f83df519f7445432508d766a
          • MD5 SHA1 SHA512 TLSH

          is-0BNVAFBU88.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\multidict\is-0BNVAFBU88.tmp
          • Size 78KB
          • SHA256 04a6693ccc24d454c897c6e42608c121cb54f11df95a015589833e13f5de4da4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-3RVSD82IKJ.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\multidict\is-3RVSD82IKJ.tmp
          • Size 422B
          • SHA256 4dc463092b64da2218d7f0f00cd8fc90da49450f6bb4b8fdd97be4d73d86fda9
          • MD5 SHA1 SHA512 TLSH

          is-AKAP0R6W4W.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\multidict\is-AKAP0R6W4W.tmp
          • Size 15B
          • SHA256 7bd6e66c7dd4171b1a6d0ae73453c6f6ac485f3b706dc33a20a0d89ef670a6b6
          • MD5 SHA1 SHA512

          is-G2NM27JSKE.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\multidict\is-G2NM27JSKE.tmp
          • Size 1KB
          • SHA256 52e58931d61d6e84174d807534762769c9ada0cb1ef304cec74389008f65d004
          • MD5 SHA1 SHA512 TLSH

          is-OLOZDMHEMW.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\multidict\is-OLOZDMHEMW.tmp
          • Size 39KB
          • SHA256 546439f0fed539dea545fdd65408a76fad9a0f5e833dd01646debcaa68893171
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-TQXI1BOH0P.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\multidict\is-TQXI1BOH0P.tmp
          • Size 2KB
          • SHA256 7bfd090c98bb13a2d64b4037814275ed29200cb96683c7df8dfca54eefef6e87
          • MD5 SHA1 SHA512 TLSH

          is-60BP00M6XK.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\propcache\is-60BP00M6XK.tmp
          • Size 1KB
          • SHA256 ebc4909ba9044cdf0c9edf4e976e8b25880782607498acb5b69f76f3cf333789
          • MD5 SHA1 SHA512 TLSH

          is-C6LTWRXS9Z.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\propcache\is-C6LTWRXS9Z.tmp
          • Size 1KB
          • SHA256 1b6f699775c9f13d0baa5790c5831387d4b0237fd4746eebf4a19c4306e2d297
          • MD5 SHA1 SHA512 TLSH

          is-G8OTRSEQ41.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\propcache\is-G8OTRSEQ41.tmp
          • Size 179B
          • SHA256 c2f801fb2a64908e6e7fbd9555897634519cfd39f35100360b10bb75394be5a9
          • MD5 SHA1 SHA512 TLSH

          is-MQCCTGJHRG.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\propcache\is-MQCCTGJHRG.tmp
          • Size 965B
          • SHA256 94d5ea040479c527c291e798add5019a9935e782968cf4ddae1d6b76aa30b581
          • MD5 SHA1 SHA512 TLSH

          is-NNU47H95II.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\propcache\is-NNU47H95II.tmp
          • Size 3KB
          • SHA256 91c25ad54e65879e133c2a80799d1c541ed445c6f723c65b26278eae43612d01
          • MD5 SHA1 SHA512 TLSH

          is-S2UFQ1JB0O.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\propcache\is-S2UFQ1JB0O.tmp
          • Size 60KB
          • SHA256 1c3eafe00c2a0e1dd93647a01ebf1874fb2265cb09f58619761f814dc8599f3a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-2EJEH9T14L.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\yarl\is-2EJEH9T14L.tmp
          • Size 54KB
          • SHA256 efff44840f4b6d78e62b7cec012e3e5ae3198257bb468bd52b5a501985422fc9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-5GTF99TXMA.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\yarl\is-5GTF99TXMA.tmp
          • Size 84KB
          • SHA256 622c862d21143e8e5272e9a861d4fcc8f3ff742a1b56cf9588dc5781c0533bd9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-C7DW67BIT3.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\yarl\is-C7DW67BIT3.tmp
          • Size 1KB
          • SHA256 034149532959cb39a54f46b75033816caf84cd95c2018b90401bc6f5e002f61b
          • MD5 SHA1 SHA512 TLSH

          is-CO1OZBC95O.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\yarl\is-CO1OZBC95O.tmp
          • Size 506B
          • SHA256 c8a22a153cc5cd62d56f4f31cb50d2c4a363170a387fea0b973c53b8ac02e7b3
          • MD5 SHA1 SHA512 TLSH

          is-I158KXWZI7.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\yarl\is-I158KXWZI7.tmp
          • Size 281B
          • SHA256 1660d6f16dd58017e868bb382b493760b76fb6ee9e4d11b7f4f8dd676d0239fd
          • MD5 SHA1 SHA512 TLSH

          is-IRN1IXE4ME.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\yarl\is-IRN1IXE4ME.tmp
          • Size 14KB
          • SHA256 464fbdf3e91fd4ec174de539d1457c423624b34c00407a723d993a31caee22a9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-JG2EH3611Q.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\yarl\is-JG2EH3611Q.tmp
          • Size 3KB
          • SHA256 da5efa8f8ff6a90eaf9f0291c86c212390175297652869a60b8ca9dd98e37af2
          • MD5 SHA1 SHA512 TLSH

          is-LVEG6SKG4E.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\yarl\is-LVEG6SKG4E.tmp
          • Size 6KB
          • SHA256 a15c55b8358c0a3baf4d5881883ce160114c23e61f0c23461946df9d0a643a04
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-P793BS99CL.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\yarl\is-P793BS99CL.tmp
          • Size 7KB
          • SHA256 80db7ccf15451abf79b9f510a52322899f6f0ebbe0e33aba304b53ddfebff09d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-U7D4Y7XY2T.tmp

          • Path C:\Program Files\GOG Galaxy\plugins\GalaxyPluginXbox\yarl\is-U7D4Y7XY2T.tmp
          • Size 1KB
          • SHA256 cfe073b177cb9c92be6ddf87ac66a8286ae2f4bdc6a43bfabf1144b66bbeb823
          • MD5 SHA1 SHA512 TLSH

          sqlite.dll

          • Path C:\Program Files\GOG Galaxy\sqlite.dll
          • Size 1.1MB
          • SHA256 1875160d08be7a6bbe8989b1ba95738b2dffa3f444d5f2c93d8d797b9fc53da2
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-N5STWCZC41.tmp

          • Path C:\Program Files\GOG Galaxy\web\is-N5STWCZC41.tmp
          • Size 39KB
          • SHA256 db87e3e96f15de84847b2bdd560bcc0828a4583efc17df132c0a5f9fabfee35b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-UFDSXYMT1V.tmp

          • Path C:\Program Files\GOG Galaxy\web\is-UFDSXYMT1V.tmp
          • Size 27KB
          • SHA256 7165401401731f0f3be48cb7554e13ae190ba67b406ca6622b8749e70fa0d765
          • MD5 SHA1 SHA512 SSDEEP TLSH

          native.json

          • Path C:\Program Files\GOG Galaxy\web\locales\es-MX\native.json
          • Size 1KB
          • SHA256 4b09dfb390e8e522d12861d0f5e22462658bdacaceaee67bc5132228f9e802d0
          • MD5 SHA1 SHA512 TLSH

          is-YGVS9FJSFU.tmp

          • Path C:\Program Files\GOG Galaxy\web\locales\pt-PT\is-YGVS9FJSFU.tmp
          • Size 148KB
          • SHA256 62a5f729e42ca348ae847c0e4a639bca2fe8ef7afda80e62ff2a6409db170c89
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-CFBV03UPJV.tmp

          • Path C:\Program Files\GOG Galaxy\web\src\images\discover\is-CFBV03UPJV.tmp
          • Size 35KB
          • SHA256 24e1b9b234d1e6584bd6c821fb8bfc10e874ddaa81a6063f3b812d3275f06753
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-IFTC6MTG7N.tmp

          • Path C:\Program Files\GOG Galaxy\web\src\images\discover\is-IFTC6MTG7N.tmp
          • Size 233KB
          • SHA256 cd3b3cb08b02e69e28206547e6ebbd04238a4b177eb946b80365a9ad90c16701
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-YY2RMEDSUK.tmp

          • Path C:\Program Files\GOG Galaxy\web\src\images\discover\is-YY2RMEDSUK.tmp
          • Size 299KB
          • SHA256 be9f9b8d5650e15e05fb4380d2a58c0d7fb998121b7f523ab1c8e22c3ded3d99
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-0CREULZR9V.tmp

          • Path C:\Program Files\GOG Galaxy\web\src\images\is-0CREULZR9V.tmp
          • Size 103KB
          • SHA256 d35a14e496727dc0df7d97236059a9f0591338deee3cf59599a08d20752e6763
          • MD5 SHA1 SHA512 SSDEEP TLSH

          xdelta3.dll

          • Path C:\Program Files\GOG Galaxy\xdelta3.dll
          • Size 171KB
          • SHA256 01952a7e522f1e9caa2beccf9aaf930c312625a4565d6cfa35848ae6ae7fc6c5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          zlib1.dll

          • Path C:\Program Files\GOG Galaxy\zlib1.dll
          • Size 130KB
          • SHA256 1ac2cc7abd9449d8fd98a27f2c3d61f6e71cca8680183765c1e29cefa1cac44c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-2CX25MO4V5.tmp

          • Path C:\ProgramData\GOG.com\Galaxy\changelogs\is-2CX25MO4V5.tmp
          • Size 56KB
          • SHA256 cff85434d8d31bbdcd67cb5ed66dce3f3be287b09442c800444c12dfcd6215fb
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-YH2AKSWE4T.tmp

          • Path C:\ProgramData\GOG.com\Galaxy\changelogs\is-YH2AKSWE4T.tmp
          • Size 40KB
          • SHA256 fac8bb4a19c265294393bebac2a25e825507de3d79e9e239f6decb8702f57926
          • MD5 SHA1 SHA512 SSDEEP TLSH

          config.json

          • Path C:\ProgramData\GOG.com\Galaxy\config.json
          • Size 76B
          • SHA256 2aefc577403ac70840f9b32ba520fa5a1878cbf48713d63e365bf33e4391bc61
          • MD5 SHA1 SHA512 TLSH

          config.json

          • Path C:\ProgramData\GOG.com\Galaxy\config.json
          • Size 336B
          • SHA256 69601f552336ec1d8c57ccc2a74c7e1e997fd072d382e2b974d0f53d2c4c68e4
          • MD5 SHA1 SHA512 TLSH

          config.json

          • Path C:\ProgramData\GOG.com\Galaxy\config.json
          • Size 401B
          • SHA256 b7dee11fb9f64dc3805311dd7e18edf1d7a1b9ccd645144679a4a8f1db85229e
          • MD5 SHA1 SHA512 TLSH

          GalaxyClientService.log

          • Path C:\ProgramData\GOG.com\Galaxy\logs\GalaxyClientService.log
          • Size 14KB
          • SHA256 e5f047242547d694bd8d33bd22bc3e1c8f2583642ca1f7f2035f5df108c381b1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          InstallerWebinstaller.log

          • Path C:\ProgramData\GOG.com\Galaxy\logs\InstallerWebinstaller.log
          • Size 724B
          • SHA256 b692b245e9cc26425fc5fa1082185b446d24188df1dfe43bab18ec9d749fbd3e
          • MD5 SHA1 SHA512 TLSH

          is-K646N3JKX2.tmp

          • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\de-DE\is-K646N3JKX2.tmp
          • Size 161KB
          • SHA256 19db0d5b351e42159c4a0f35fac75b953b51f9af41b288292c21762e5bc54bc8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-S3MRZ2WZ3D.tmp

          • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\de-DE\is-S3MRZ2WZ3D.tmp
          • Size 1KB
          • SHA256 ac00c164cde1adf2d09b1f466f6b2de1987718f87b1ba8adc1341b8e306c9403
          • MD5 SHA1 SHA512 TLSH

          is-ILJRWS0EM2.tmp

          • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\es-ES\is-ILJRWS0EM2.tmp
          • Size 160KB
          • SHA256 a89af05ef7d3cc7fcf19a286f65cf896a119ff15b34f969011ccaa38d1e16183
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-XMRHJWFQNZ.tmp

          • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\es-ES\is-XMRHJWFQNZ.tmp
          • Size 1KB
          • SHA256 737846d52ba52c221995fb651cdc067def20d975808f5da3cdaeb98688c851aa
          • MD5 SHA1 SHA512 TLSH

          is-4GBZ08830M.tmp

          • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\es-MX\is-4GBZ08830M.tmp
          • Size 151KB
          • SHA256 374ef6e6bd21e798383a9e1a8da2d6001dd394362bbd07578e2bdf841089789b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-8VHEVA51NI.tmp

          • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\fr-FR\is-8VHEVA51NI.tmp
          • Size 163KB
          • SHA256 85a260a7d6fa32cba1e311c850a369efee3931f29c98c2e7d98f5e3a831ca8dc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-RLB303QIOA.tmp

          • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\fr-FR\is-RLB303QIOA.tmp
          • Size 1KB
          • SHA256 4e9e0e39175bbcdc4060ea7c89084b82c7b6e301edfc9b8ae5ed946f8d540a2a
          • MD5 SHA1 SHA512 TLSH

          is-7AEFJQ8OFH.tmp

          • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\is-7AEFJQ8OFH.tmp
          • Size 269B
          • SHA256 6ff890da496cbe628a90143374d0ab7761ca44af4a3792615ae25f04b36a0984
          • MD5 SHA1 SHA512 TLSH

          is-IV7RSRGSAA.tmp

          • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\it-IT\is-IV7RSRGSAA.tmp
          • Size 154KB
          • SHA256 7daa82c0c172015b482e461ebee2a8b9333423e1c282e79d3230ad48b755eff9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          native.json

          • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\it-IT\native.json
          • Size 1KB
          • SHA256 a6cbedc9a5486254126c27c57c9b08896dcdff7eec4164e4fb4b7156ca0ec23d
          • MD5 SHA1 SHA512 TLSH

          is-48RQQGJW17.tmp

          • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\ja-JP\is-48RQQGJW17.tmp
          • Size 1KB
          • SHA256 e572e1f80315c6fae132d6d65f6f3e80ca751c4d05046d22e18819e720e7f22f
          • MD5 SHA1 SHA512 TLSH

          is-7V25Q6D4VU.tmp

          • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\ja-JP\is-7V25Q6D4VU.tmp
          • Size 177KB
          • SHA256 d0ae8355bd14cd39a7b2fbedbd7b22d99ae7e9c2e6ecf262481b1f47d6063748
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-N4UFK5NXPH.tmp

          • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\ko-KR\is-N4UFK5NXPH.tmp
          • Size 158KB
          • SHA256 0610a50d755387e3f013dea43d24560fcdcffc82938423ba272524db36436716
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-ZZXAB9V1VL.tmp

          • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\ko-KR\is-ZZXAB9V1VL.tmp
          • Size 1KB
          • SHA256 cdcda6924107d5d3578b20e84a6ffdc817fdaf4bcc69c85684a34b132a3e27b1
          • MD5 SHA1 SHA512 TLSH

          is-5ZEX090PHR.tmp

          • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\pl-PL\is-5ZEX090PHR.tmp
          • Size 158KB
          • SHA256 6adb3ce07403ff083b5300c7d9134a53dce10ce14fbdd7245cbc98939e7eb9a3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-DAG0VE2U8U.tmp

          • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\pl-PL\is-DAG0VE2U8U.tmp
          • Size 1KB
          • SHA256 e0bafe76de7461c9543442895fb899a60de7c7a0d15fcea7517e60660c0c7df6
          • MD5 SHA1 SHA512 TLSH

          is-H98F4GSBZA.tmp

          • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\pt-BR\is-H98F4GSBZA.tmp
          • Size 1KB
          • SHA256 cff4bdc70fb68eb7520c492970c6d6472d354c705e6ab865eb6de0a30f5c1551
          • MD5 SHA1 SHA512 TLSH

          is-RROCJHRK22.tmp

          • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\pt-BR\is-RROCJHRK22.tmp
          • Size 154KB
          • SHA256 e232b623f2a689201352626c92337b9818bb02de00c3b955f31f756eb3ecfd35
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-D722109PHG.tmp

          • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\ru-RU\is-D722109PHG.tmp
          • Size 196KB
          • SHA256 e5bd03540af8d4eef612bbdd484eed6257b948d7759c02794b592edc088cf265
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-E8BAM5W4KW.tmp

          • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\ru-RU\is-E8BAM5W4KW.tmp
          • Size 2KB
          • SHA256 ae1ac29a43ca2db6a3997d0f331771f08523c558180d539dd1af3da29833506e
          • MD5 SHA1 SHA512 TLSH

          is-21BP43PJHW.tmp

          • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\uk-UA\is-21BP43PJHW.tmp
          • Size 2KB
          • SHA256 0b4c30d4bfc09892836b477f30d8d9c859b8b61b2fb852234eedced85f593916
          • MD5 SHA1 SHA512 TLSH

          is-DW8DT0KC95.tmp

          • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\uk-UA\is-DW8DT0KC95.tmp
          • Size 203KB
          • SHA256 0d2a522281ac32043f523f934b48d23dc9aee4bb257eeb24ea9eaf179b794595
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-4PDR346E1I.tmp

          • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\zh-Hans\is-4PDR346E1I.tmp
          • Size 145KB
          • SHA256 4d361466dad196dfd887a9b7391fc00054e7c10c47caf725929e16352c5a1462
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-AMH2IK1LL3.tmp

          • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\zh-Hans\is-AMH2IK1LL3.tmp
          • Size 1KB
          • SHA256 2571325f0a346fbb06f3c48d82d598b38fc684aab99e18a8ecfd3cf9673bb1be
          • MD5 SHA1 SHA512 TLSH

          is-YSL9ST1A42.tmp

          • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\zh-Hant\is-YSL9ST1A42.tmp
          • Size 145KB
          • SHA256 203b08079aeb5598e845dc3d136fec62b7210d9d829b76fa6bf44e79e348394c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-ZIYNEZ2B44.tmp

          • Path C:\ProgramData\GOG.com\Galaxy\redists\web\locales\zh-Hant\is-ZIYNEZ2B44.tmp
          • Size 1KB
          • SHA256 61bc84a3928af758d8356b2331bc89afc10089e121577e357c21c0b2b6034fab
          • MD5 SHA1 SHA512 TLSH

          f_000008

          • Path C:\ProgramData\GOG.com\Galaxy\webcache\common\Cache\Cache_Data\f_000008
          • Size 350KB
          • SHA256 7cf60efe182c0c85b02ff13cbad26b1836c1798bd9a5f3a0b85bf89ff047c5aa
          • MD5 SHA1 SHA512 SSDEEP TLSH

          CURRENT

          • Path C:\ProgramData\GOG.com\Galaxy\webcache\common\Local Storage\leveldb\CURRENT
          • Size 16B
          • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
          • MD5 SHA1 SHA512

          MANIFEST-000001

          • Path C:\ProgramData\GOG.com\Galaxy\webcache\common\Session Storage\MANIFEST-000001
          • Size 41B
          • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
          • MD5 SHA1 SHA512

          vc_runtimeMinimum_x64.msi

          • Path C:\ProgramData\Package Cache\{5937353B-6E8B-4A29-806F-366A8748E276}v14.51.36231\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi
          • Size 208KB
          • SHA256 96ce3adfe6955fa343aeb5d1bdfe3a7c3936de75d0df74147074e4899f27f42f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          config.json

          • Path C:\Users\Admin\AppData\Local\GOG.com\Galaxy\Configuration\config.json
          • Size 2KB
          • SHA256 1133c21dc8a6f4bd34ae1796220bb0583313a3c7df3956c98f01ecd99f2718cf
          • MD5 SHA1 SHA512 TLSH

          1207665503[1].json

          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\8999WJP3\1207665503[1].json
          • Size 533B
          • SHA256 189a67cd20d54f267dfd6d007dab8586a393fec27f5f62ba885d424df393c6cb
          • MD5 SHA1 SHA512 TLSH

          GalaxyInstaller.exe

          • Path C:\Users\Admin\AppData\Local\Temp\GalaxyInstaller_PblJK\GalaxyInstaller.exe
          • Size 120KB
          • SHA256 9e246ee6babdc3861578c36af8c652d4d4be1f3e83583472bcfdb3ea238eeec2
          • MD5 SHA1 SHA512 SSDEEP TLSH

          icon.ico

          • Path C:\Users\Admin\AppData\Local\Temp\GalaxyInstaller_PblJK\icon.ico
          • Size 108KB
          • SHA256 15254f293db605df04a1cac1a94fb0328934eee9831c9c858dc5df899b049e11
          • MD5 SHA1 SHA512 SSDEEP TLSH

          dd_vcredist_amd64_20261029221550.log

          • Path C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20261029221550.log
          • Size 8KB
          • SHA256 c0e8b8281aec3dfb8b2641934f227a9e24c135c943b9ce2078fe3c1498fd2af1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          dd_vcredist_amd64_20261029221550_000_vcRuntimeMinimum_x64.log

          • Path C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20261029221550_000_vcRuntimeMinimum_x64.log
          • Size 4KB
          • SHA256 aa0d8b5884c7026328a8875c126792bc2900b2e2de8cfed95e24a69b32970bf9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          _isdecmp.dll

          • Path C:\Users\Admin\AppData\Local\Temp\is-80EQ64QFSL.tmp\_isetup\_isdecmp.dll
          • Size 27KB
          • SHA256 231ae2fd793ab01ffb47611eb32cf64cdf5f447736cba4268b3e54875ff87330
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vc_redist.x64.exe

          • Path C:\Users\Admin\AppData\Local\Temp\is-80EQ64QFSL.tmp\vc_redist.x64.exe
          • Size 17.9MB
          • SHA256 90e48ade404e4576d023abfa374f323555f233982a8805ea9ac63dca9491a16b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vc_redist.x86.exe

          • Path C:\Users\Admin\AppData\Local\Temp\is-80EQ64QFSL.tmp\vc_redist.x86.exe
          • Size 6.7MB
          • SHA256 b6ab675f0a27e6600f9726e75dea08d99c15f8ea4b842a2a1d988fa9529d39b9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          GalaxySetup.tmp

          • Path C:\Users\Admin\AppData\Local\Temp\is-YXVL7C5VL5.tmp\GalaxySetup.tmp
          • Size 7.0MB
          • SHA256 ef359bf8415640ca13d81e09084ccbbc98f81df7d77b0eeb7ef01ef84fd83da0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          msvcp140.dll

          • Path C:\Windows\System32\msvcp140.dll
          • Size 554KB
          • SHA256 a8102891d06b5f21c35c67e4ab26eb84f54405b67e67eaf75dadc62cef08b55a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          logo.png

          • Path C:\Windows\Temp\{1D14EE44-23AE-4243-8AF6-D564FE68BA7E}\.ba\logo.png
          • Size 1KB
          • SHA256 335a256d4779ec5dcf283d007fb56fd8211bbcaf47dcd70fe60ded6a112744ef
          • MD5 SHA1 SHA512 TLSH

          wixstdba.dll

          • Path C:\Windows\Temp\{1D14EE44-23AE-4243-8AF6-D564FE68BA7E}\.ba\wixstdba.dll
          • Size 215KB
          • SHA256 e921f69b9fb4b5ad4691809d06896c5f1d655ab75e0ce94a372319c243c56d4e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vc_redist.x64.exe

          • Path C:\Windows\Temp\{7A33B1F5-9537-4E4A-901B-3A6FBA2588E3}\.cr\vc_redist.x64.exe
          • Size 669KB
          • SHA256 7cdf942ae5869c0ee2fcc94db84c4999eb0b97801b291e74f61ebb8fe3925905
          • MD5 SHA1 SHA512 SSDEEP TLSH

          BootstrapperApplicationData.xml

          • Path C:\Windows\Temp\{CEBD7261-660D-4FA9-B86E-46AE53772012}\.ba\BootstrapperApplicationData.xml
          • Size 7KB
          • SHA256 7e2489f278fff5efd4f1ca635675c559bf9be60c17b310922dec7f4b52f046b1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          license.rtf

          • Path C:\Windows\Temp\{D5AE56D1-FE91-4EE1-AAB9-A71EAC171835}\.ba\license.rtf
          • Size 9KB
          • SHA256 8099dc3cf9502c335da829e5c755948a12e3e6de490eb492a99deb673d883d8b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          thm.wxl

          • Path C:\Windows\Temp\{D5AE56D1-FE91-4EE1-AAB9-A71EAC171835}\.ba\thm.wxl
          • Size 2KB
          • SHA256 70400f181d00e1769774ff36bcd8b1ab5fbc431418067d31b876d18cc04ef4ce
          • MD5 SHA1 SHA512 TLSH

          thm.xml

          • Path C:\Windows\Temp\{D5AE56D1-FE91-4EE1-AAB9-A71EAC171835}\.ba\thm.xml
          • Size 8KB
          • SHA256 f13bae0ec08c91b4a315bb2d86ee48fade597e7a5440dce6f751f98a3a4d6916
          • MD5 SHA1 SHA512 SSDEEP TLSH

          cab2C04DDC374BD96EB5C8EB8208F2C7C92

          • Path C:\Windows\Temp\{D5AE56D1-FE91-4EE1-AAB9-A71EAC171835}\cab2C04DDC374BD96EB5C8EB8208F2C7C92
          • Size 5.4MB
          • SHA256 718a88535f7bc81804646088ac4bfe70a888ed45fd0c130bc625ff9eaddd47c0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          cab5046A8AB272BF37297BB7928664C9503

          • Path C:\Windows\Temp\{D5AE56D1-FE91-4EE1-AAB9-A71EAC171835}\cab5046A8AB272BF37297BB7928664C9503
          • Size 1.0MB
          • SHA256 99fda37db1ad396ca1049cf83e3ea5cb60c7aae315f4b94efc599c26bd54839b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vcRuntimeAdditional_x64

          • Path C:\Windows\Temp\{D5AE56D1-FE91-4EE1-AAB9-A71EAC171835}\vcRuntimeAdditional_x64
          • Size 208KB
          • SHA256 26d8f51e4683411633d7c45999fa948f33322b5728f06ff2242df06f0c63e695
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vc_redist.x86.exe

          • Path C:\Windows\Temp\{D5E13C63-0F4E-431D-9EB2-1DA3184DBCE4}\.cr\vc_redist.x86.exe
          • Size 668KB
          • SHA256 746a6db1a22c0e3efb2bb7301c179a7201c462c55214b36c3f95639c55322fe8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          memory/792-3817-0x0000000000F10000-0x00000000010DB000-memory.dmp

          memory/792-60-0x0000000000F10000-0x00000000010DB000-memory.dmp

          memory/792-555-0x0000000000F10000-0x00000000010DB000-memory.dmp

          memory/1212-3807-0x00007FFE4CA10000-0x00007FFE4DA10000-memory.dmp

          memory/1212-3805-0x00007FFE61E80000-0x00007FFE624C7000-memory.dmp

          memory/1212-3806-0x00007FFE5E840000-0x00007FFE5EDC4000-memory.dmp

          memory/2800-3824-0x00007FFE690C0000-0x00007FFE69707000-memory.dmp

          memory/2800-3825-0x00007FFE67370000-0x00007FFE678F4000-memory.dmp

          memory/3248-3910-0x000002346E320000-0x000002346E34F000-memory.dmp

          memory/3248-3853-0x00007FFE8CF10000-0x00007FFE8CF11000-memory.dmp

          memory/3248-3852-0x00007FFE8C250000-0x00007FFE8C251000-memory.dmp

          memory/3248-3854-0x00007FFE67370000-0x00007FFE678F4000-memory.dmp

          memory/3720-3831-0x0000000000400000-0x000000000051D000-memory.dmp

          memory/3720-37-0x0000000000400000-0x000000000051D000-memory.dmp

          memory/3720-0-0x0000000000400000-0x000000000051D000-memory.dmp

          memory/4240-3130-0x0000000000CA0000-0x00000000013AD000-memory.dmp

          memory/4240-3816-0x0000000000CA0000-0x00000000013AD000-memory.dmp

          memory/4240-556-0x0000000000CA0000-0x00000000013AD000-memory.dmp

          memory/4240-3009-0x0000000000CA0000-0x00000000013AD000-memory.dmp

          memory/4240-3802-0x0000000000CA0000-0x00000000013AD000-memory.dmp

          memory/4240-3007-0x0000000000CA0000-0x00000000013AD000-memory.dmp

          memory/5064-15-0x00007FFE6A8D0000-0x00007FFE6B274000-memory.dmp

          memory/5064-43-0x00007FFE6A8D0000-0x00007FFE6B274000-memory.dmp

          memory/5064-45-0x00007FFE6A8D0000-0x00007FFE6B274000-memory.dmp

          memory/5064-39-0x00007FFE6A8D0000-0x00007FFE6B274000-memory.dmp

          memory/5064-42-0x00007FFE6A8D0000-0x00007FFE6B274000-memory.dmp

          memory/5064-41-0x00007FFE6A8D0000-0x00007FFE6B274000-memory.dmp

          memory/5064-40-0x00007FFE6A8D0000-0x00007FFE6B274000-memory.dmp

          memory/5064-36-0x00007FFE6A8D0000-0x00007FFE6B274000-memory.dmp

          memory/5064-12-0x00007FFE6AA5F000-0x00007FFE6AA60000-memory.dmp

          memory/5064-13-0x0000000000FB0000-0x0000000000FD0000-memory.dmp

          memory/5064-3823-0x00007FFE6A8D0000-0x00007FFE6B274000-memory.dmp

          memory/5064-38-0x00007FFE6A8D0000-0x00007FFE6B274000-memory.dmp

          memory/5064-14-0x00007FFE6A8D0000-0x00007FFE6B274000-memory.dmp

          memory/5064-16-0x00007FFE6A8D0000-0x00007FFE6B274000-memory.dmp

          memory/5064-44-0x00007FFE6A8D0000-0x00007FFE6B274000-memory.dmp

          memory/5064-17-0x00007FFE6A8D0000-0x00007FFE6B274000-memory.dmp

          memory/5064-30-0x00007FFE6A8D0000-0x00007FFE6B274000-memory.dmp

          memory/5064-29-0x000000001D0A0000-0x000000001D262000-memory.dmp

          memory/5064-32-0x00007FFE6A8D0000-0x00007FFE6B274000-memory.dmp

          memory/5064-31-0x000000001F590000-0x000000001FAB8000-memory.dmp

          memory/5064-24-0x00007FFE6A8D0000-0x00007FFE6B274000-memory.dmp

          memory/6088-3306-0x00007FFE61E80000-0x00007FFE624C7000-memory.dmp