Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    11/12/2023, 03:24 UTC

General

  • Target

    setup_undertale_1.08_(18328).exe

  • Size

    126.7MB

  • MD5

    69a1054bcf85084cc4bc33e332f1844d

  • SHA1

    a3db1a7c5a07ea07c31d40ab4c7685215ac4f170

  • SHA256

    21fbcab3c652d5af9efe57454d60d5a5057773e1c234ed16ae14233724502b44

  • SHA512

    f57df05d2d5db04cb48a1d72070ac5d76ae29620cca314817fbfbb30d42c2150115ac510acb216095115c210fe2eee80575ffc78a36fd455e72e4de9492b4f81

  • SSDEEP

    3145728:WSHIqNWvNc0rn+0fslfSob+5Framz9LQMj5jMgQN7:WytNAfcSob2NaoLQ+7c7

Malware Config

Signatures

  • SnakeBOT

    SnakeBOT is a heavily obfuscated .NET downloader.

  • Contains SnakeBOT related strings 1 IoCs
  • Executes dropped EXE 5 IoCs
  • Loads dropped DLL 30 IoCs
  • Modifies file permissions 1 TTPs 4 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Program crash 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 55 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\setup_undertale_1.08_(18328).exe
    "C:\Users\Admin\AppData\Local\Temp\setup_undertale_1.08_(18328).exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2912
    • C:\Users\Admin\AppData\Local\Temp\is-OMUJH.tmp\setup_undertale_1.08_(18328).tmp
      "C:\Users\Admin\AppData\Local\Temp\is-OMUJH.tmp\setup_undertale_1.08_(18328).tmp" /SL5="$400BA,132362071,185856,C:\Users\Admin\AppData\Local\Temp\setup_undertale_1.08_(18328).exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:2992
      • C:\GOG Games\Undertale\__support\scriptinterpreter.exe
        "C:\GOG Games\Undertale\__support\scriptinterpreter.exe" /verysilent /supportDir="C:\GOG Games\Undertale\__support" /SUPPRESSMSGBOXES /NORESTART /DIR="C:\GOG Games\Undertale" /productId="1456487183" /buildId="50921790503031850" /versionName="1.08" /Language="English" /LANG="english"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious use of WriteProcessMemory
        PID:2060
        • C:\Users\Admin\AppData\Local\Temp\is-HFQ0H.tmp\scriptinterpreter.tmp
          "C:\Users\Admin\AppData\Local\Temp\is-HFQ0H.tmp\scriptinterpreter.tmp" /SL5="$20194,569884,191488,C:\GOG Games\Undertale\__support\scriptinterpreter.exe" /verysilent /supportDir="C:\GOG Games\Undertale\__support" /SUPPRESSMSGBOXES /NORESTART /DIR="C:\GOG Games\Undertale" /productId="1456487183" /buildId="50921790503031850" /versionName="1.08" /Language="English" /LANG="english"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of WriteProcessMemory
          PID:384
          • C:\Windows\SysWOW64\icacls.exe
            "C:\Windows\System32\icacls.exe" "C:\Users\Admin\AppData\Local\UNDERTALE" /grant Everyone:(OI)(CI)F
            5⤵
            • Modifies file permissions
            PID:2376
          • C:\Windows\SysWOW64\icacls.exe
            "C:\Windows\System32\icacls.exe" "c:\gog games\undertale\options.ini" /grant Everyone:(OI)(CI)F
            5⤵
            • Modifies file permissions
            PID:1384
          • C:\Windows\SysWOW64\icacls.exe
            "C:\Windows\System32\icacls.exe" "c:\gog games\undertale" /grant Everyone:(OI)(CI)F
            5⤵
            • Modifies file permissions
            PID:1308
          • C:\Windows\SysWOW64\icacls.exe
            "C:\Windows\System32\icacls.exe" "c:\gog games\undertale" /grant Everyone:(OI)(CI)F
            5⤵
            • Modifies file permissions
            PID:2132
      • C:\gog games\undertale\UNDERTALE.exe
        "C:\gog games\undertale\UNDERTALE.exe"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:2484
        • C:\Windows\SysWOW64\WerFault.exe
          C:\Windows\SysWOW64\WerFault.exe -u -p 2484 -s 540
          4⤵
          • Loads dropped DLL
          • Program crash
          PID:1456
  • C:\GOG Games\Undertale\UNDERTALE.exe
    "C:\GOG Games\Undertale\UNDERTALE.exe"
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:812
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 812 -s 500
      2⤵
      • Loads dropped DLL
      • Program crash
      PID:2464

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\GOG Games\Undertale\D3DX9_43.dll

    Filesize

    286KB

    MD5

    f1ead90b2d69e2dd111a13b9a6d76ab2

    SHA1

    b6e030a4b79b703a53d600e78a25c37d82b08b33

    SHA256

    3e1600fc12486ead4733ed4d5e9ee5e8b8c33a828d972599bd75406a6852adb6

    SHA512

    dc8f4c43b898bcb3c78b04d72d59b1d50b4d81f85eff25b14e101585b81eef72dcb762fdb8e980ac161f207dd72485b9ff9064c5c5644d18d641fda20a8e77b1

  • C:\GOG Games\Undertale\__support\app\options.ini

    Filesize

    97B

    MD5

    40ede613879f6406fd90c4bad9ba08cb

    SHA1

    234d1a88ecb5eb2f945f0f8959df69bc154a4677

    SHA256

    52a59e5417778aac32756ac0617d5b00fd47a9015e54b3865fdc17a867b58cf9

    SHA512

    c42b738b58298bdd8866b6f053df12a13b9eee3917e86846a7fa3d00248a7dc1c7658878c06f51d6b9e0450a4eee940c61d56ad11fe32656bd64f9341abdcaab

  • C:\GOG Games\Undertale\__support\scriptinterpreter.exe

    Filesize

    142KB

    MD5

    08de4097330a2e9ba3cd8c964cbe3f69

    SHA1

    73d7f2e89c92554b2485199a97dc1669a4194bec

    SHA256

    0853af301cb6f3a6e109bd44a40030cc63e00f30542e80e8eeebed9d9dca9099

    SHA512

    b7ef2029d114daf9403dd9d3f97649d8a0a72365851deb2d1ff3a7e431e4fb7e8d184a0c3aadebea004f5d4d9490fbdc6fe004ea2a4b6476dbc76da67266fc4b

  • C:\GOG Games\Undertale\__support\scriptinterpreter.exe

    Filesize

    57KB

    MD5

    e40a0d2e8cfc1c27d9977903252cbdec

    SHA1

    325954e93f838a9a341c1974b84e788b1ca1286f

    SHA256

    8ec00e761d010b57eb258e122871db7d472c1942a8024a9330077809d485ea70

    SHA512

    b7a16057c0db66d00e49cbe9f521c178ddeb4ce66048bd1206d14e9d4714054043879356b7665aa731691c80ffa8cfc9cbf17ac5c6ae7a50dd5be32f08e9bb30

  • C:\GOG Games\Undertale\__support\scriptinterpreter.exe

    Filesize

    64KB

    MD5

    dc3aa97a30d83564c7453d9b43d341bc

    SHA1

    1e50029f051279ffa74354746c690b8c5f0fa4f9

    SHA256

    db392575c925fc6e5dfe78e369ef0eac726264171672d963fe4e75b7060b678d

    SHA512

    56dae64dd5a7e96b3eb48afb9b232869ad9379c4aac0a3ba0fd384b752364e009bdc55554e40c8a0518b19d6ee60e12a68cdcecfe26a9989386c32b7501a64d0

  • C:\GOG Games\Undertale\abc_123_a.ogg

    Filesize

    40KB

    MD5

    0db017fdf19134876127376ad1d56a8c

    SHA1

    0f78b9af1858c6c7c01205bfaa99f3c4934c510e

    SHA256

    baf01fcee2fa3cc9769af20407a4de9b30027a5e651be601808ab521485fea55

    SHA512

    7fb4cb4a54ffe57ac7f5989f969ec8b6e0088d319479ca83c69b0ce71b8a06ef480a8184ff8e3bb827c7bb6f784a94654003dd63f59983a601997a989fb9b67f

  • C:\GOG Games\Undertale\credits.txt

    Filesize

    11KB

    MD5

    85ef2348d70f81de3b00be93348361f1

    SHA1

    6c734e646ca25e19391099e32aea9f1a006722aa

    SHA256

    5e5ab1852c4734a547e6143ef643b43d211e3cee334e949cb59fffb51bf04098

    SHA512

    01661bda880aa2ea085fa98eb565fd5b938cb86d673908fad80980ea3a13d0a5255a431a909388740a33b8e33e2ae4b4a38c9de141eb072048d47d81aa6268e3

  • C:\GOG Games\Undertale\data.win

    Filesize

    268KB

    MD5

    24da60b04d2bc4da5250c61cace04204

    SHA1

    47f42bfa561ebe72880af2818ad06388f0af3b23

    SHA256

    adb259ee40ecd23abbb4c603d6ba3695dbbe39c3bc8348aa3a34d5950abb86e4

    SHA512

    89aea857841d845775cd8cb71dcf8801e9b246a2dc3749c08f5df35f6c35b2d69f2c7ec462b48396cabd913c4b16dadeff8ef806f5f690d65546ce3eb2641155

  • C:\GOG Games\Undertale\goggame-1456487183.hashdb

    Filesize

    7KB

    MD5

    17f41c26cc277c59e53c5bdb54343776

    SHA1

    5891b83ff264d03f2a1aaac2f167b421824a3f51

    SHA256

    07f899a497faa6d3befbead9cc86f8ca24fcad719426f106a1eb2c28217743bc

    SHA512

    450514f863398b115a5870941a00570879f4d1cc74a25ef51c6dbd217448769d0d57dbf67b14c8ecf1c8d3d2d7b08d4539a50ae1795a4b7943e59d776be91f17

  • C:\GOG Games\Undertale\goggame-1456487183.ico

    Filesize

    79KB

    MD5

    d292e2349754e997b1fc3ecc8c9955de

    SHA1

    3decdf189a116665fe52facafc072dd974ad27d8

    SHA256

    6cba65c3c927a68407e8941ac8b12e3089130709efbdb2399123d084f1475d54

    SHA512

    29f0cccdf471018b10cd72b80d9860d33ab16aaa0db8ddcc20ec664e72a61c9f60d37b442cdca415cd227fd53594632d0de8ed02a742828d26c2f27f33ac45c0

  • C:\GOG Games\Undertale\goglog.ini

    Filesize

    204B

    MD5

    65fb907e1079dd47bcfe5deb5893a39a

    SHA1

    603a807ab4dfbeb3e94023f9b6d2bfe0ef8608f2

    SHA256

    3c4634e30c9c8b54de5127cc6bdcd0a3d3d739313994810f154096d395c2c87b

    SHA512

    b101d5425521180c156c6ebb441f1a79664911ea46193a6cc6e489ba8c8d00fa49ba4e601d0eddb1ccb8c03ea25178c0fae436f295aab6026fe01e41f19ebc03

  • C:\GOG Games\Undertale\mus_a2.ogg

    Filesize

    186KB

    MD5

    ee6282e61da71efdd1da75676044c0a1

    SHA1

    6caffe6d1838fb16138ed30f1f89890ac7e5df5b

    SHA256

    244ca709fe88618b2ae34a2767bdea7ea6b79df4f795b5f4fc00eab3c03e2ba7

    SHA512

    3f81d07e73c0dbda25c3af2440bcf1e25e1dcb568fd1c2d337d615ee833179053f5e7983048dd5db258a0116604abc27ee3919397939e3dad95c23ae0b983cec

  • C:\GOG Games\Undertale\mus_alphysfix.ogg

    Filesize

    36KB

    MD5

    dcafc0871eb93693cc5b0f9bf169df55

    SHA1

    cea9c096f8285d77b348d92fc26e27d45a889424

    SHA256

    6f4cd2037b27e6dc0ab6044ce58a2e66db380a13e67b5167d50d9caf02e37ca0

    SHA512

    369a3bca748b14589da221746d681191a90221337c197871952006efe184c9eb9b499107013d90385056b9d44d496a74336cf603eaacb81843d600b186c5f608

  • C:\GOG Games\Undertale\mus_amalgam.ogg

    Filesize

    351KB

    MD5

    bcdb40cdb9c28fbfaf1104a111a5aff7

    SHA1

    85fc8b468c67ccf228bb4491ced3a33e90941f77

    SHA256

    0d94af73570b2091101c06913c08cd196a677a3fca0c1fe0b4003ced8f71865b

    SHA512

    fa4de43a849f54cc64ee57961ccee76c0dd06e110aeb4e0c112363a916be550e4de24b25d7a0385934493d8f392741797e1beb0e36669c7a0ba98f239be64f00

  • C:\GOG Games\Undertale\mus_ambientwater.ogg

    Filesize

    24KB

    MD5

    c5d95352887d3ba20b0fff600284822d

    SHA1

    aa3b09a27a46a196baafb03736b9493d9933e8cd

    SHA256

    195b5bdbc3066c2025b28667b5c7f72a22b01cd0f629d9601ec3c749858b706b

    SHA512

    02884b849ddafe1b736497b7bb1be0067f1d92842940c0435a292384023dad97a5880c3cf38e041a7630b6f908b78c1f0ec84840f05a04ac63d2d134bc1fdf51

  • C:\GOG Games\Undertale\mus_anothermedium.ogg

    Filesize

    222KB

    MD5

    51c680e7e85b6d96f4ec531e65778c92

    SHA1

    f1e1be35febc6028b2f56b0898247565db7a0446

    SHA256

    8fcd5b723fd544a1d750916a03160c1fc2e403e13fb3b8d76a2ebe1a51fbfd4a

    SHA512

    f6cc385f621bb6feb500d26e0207555c1ad6ff0690a9eaa4f5dae6636ccc949621710ccc70d684204046d9e1433df3ca646e9c77562d58fc92d44c8ee3877bba

  • C:\GOG Games\Undertale\mus_bad.ogg

    Filesize

    15KB

    MD5

    92952e0422d298e61cde62bb2a5f5f88

    SHA1

    b98324d43c5b5e59a9e767ee6b5db75c74d8fa57

    SHA256

    79d6af19bc9ac74221af85e1ab5fa67c466b08ede7979090870d93a368f5abf6

    SHA512

    c38300948b9c8553af11cf01f81a3d7d6875d32f40934c27030b844e206237ff36c1499d1e559b6b21bbff6c710a01a2b3e24f043c2df5b49e9c00ef4d1ac5aa

  • C:\GOG Games\Undertale\mus_barrier.ogg

    Filesize

    287KB

    MD5

    b5c9f5d843f07bdff5b49a600a9737cc

    SHA1

    3779f0e0a31cf06186db71d8d81cd7111012995c

    SHA256

    3424de311fc694a93a8bfa7fbee2cba120f7377fea174f75a2cf6fe86dafd9d0

    SHA512

    3d9281f9746ba012a1dc71c2c52e45c5742476bea738cd443b519ffa3d9c16620a447bc227bde7d65ab186942fe5d4ad3d375b9e37a1ba2a95860ab7a79ac45c

  • C:\GOG Games\Undertale\mus_battle1.ogg

    Filesize

    309KB

    MD5

    6cb53d2b1e4ef2ed0084b02e239fc70e

    SHA1

    20bbf317971810f143c2b9a33fb3bb2b3245e67f

    SHA256

    6a4bf052affc7fe138133e2584a44721999a4e4ad3cc928d3af3611ef3083174

    SHA512

    18f42b5a722692724f46f97d505fddf249838b1f3a72edef6ddd3d5ccdfa50ac0e9aed2c0249492849234b0525f2351d1d52239532618cd97d7a1bd1d6948d67

  • C:\GOG Games\Undertale\mus_battle2.ogg

    Filesize

    292KB

    MD5

    3222d312a32c25ced08fdc3c93426319

    SHA1

    aabc6b596789c8dfbbe00fc5a3cd456cd35f2236

    SHA256

    faf531be418a666c0deadd88d07dbe60c3d360b3c8c420866ef0efbe2aa25d50

    SHA512

    5ed75c74effdd3fbf05283445c180ce96b67543af303b6c0886e580ae7eedb4161c78dcaf76c7bca60e2cbded632db2ef86c967c7cc66c7fd9b2687507374848

  • C:\GOG Games\Undertale\mus_bergentruckung.ogg

    Filesize

    135KB

    MD5

    33d2e6dba7df72da33035c3be20152d1

    SHA1

    29643f786d78007d810af7cf389a0c243b6e1594

    SHA256

    61c0413b9179fbdfebcf8f2cdd122d8dd142887c35aad12f47dcfd7630dd5f78

    SHA512

    54c918db41731c1896cfc9179b7522418ad17e78e1ac853cb5d1b65aa0e31f1c3ae1794455047eb70da491c52f72e221096c664f04bf1daa70f5664fc87fc13b

  • C:\GOG Games\Undertale\mus_bgflameA.ogg

    Filesize

    53KB

    MD5

    67f5e7072204bc20998066de1ff20e2e

    SHA1

    3aa37c53f9d5ac5507e5250bb07900e61c897f49

    SHA256

    0c9eee11f57a00368f7fa165ece1f97c345f03c28826d6dd55c49006c545177f

    SHA512

    7313a86d3fe5e0d151b6a503844758bb1af4713d1be313e23eb9d34ff79fe1666fb8d6c6af03a6f175ee8aa611e331aa56323bb7baeb1577b7e0804243fdeb8a

  • C:\GOG Games\Undertale\mus_birdnoise.ogg

    Filesize

    331KB

    MD5

    85e7b2bc28a0e551dfdedd1f6646b681

    SHA1

    a1aa92d97f6092979320544942edf6b746a67527

    SHA256

    f68530da7bae270a3779be498d04145fcd4012cbccd0720501263f1be59b2f94

    SHA512

    582ac73e9ae4a0643134ddba3d6bb918b017e540a1b87834b23dc8e30c3d41bf6b5b34afc35a1031ba7e4c6f3d84bb4c6f994657515d57ab297f2ee354fbb512

  • C:\GOG Games\Undertale\mus_birdsong.ogg

    Filesize

    251KB

    MD5

    fa7183f5b9d75a05bff866183f0166b0

    SHA1

    aff7e644834cdc5bd769b45cf73ad43dacf96be9

    SHA256

    618c46734918c8211b58a636c0a4280ee961842b22c91135a9da0d6970613be6

    SHA512

    5047f6628db2a7806f2d47acf01a973bb89c9d0cfde8a2dde956224c258443598345c03dcab6e39809748d39c140c1a7629722acff007805b7cc5b7e5e31c4c1

  • C:\GOG Games\Undertale\mus_boss1.ogg

    Filesize

    185KB

    MD5

    71f8cc87c0d02407da2aa26f67b0415c

    SHA1

    7f842b231d0b2e7dcdf348dbd92dcdc143681273

    SHA256

    9764a0a7efcb0b07a10296a42d82340c0f3df582fb04052daa5d1afc61f79081

    SHA512

    c3f3fc01af20408e3051c30912735738a57b8915b68b6e969e2aae4d9b2ae541ca7119fc7606db6f451850904ec7a3e1dc989a020a5e0dd65b1f436ae8e09c0a

  • C:\GOG Games\Undertale\mus_cast_1.ogg

    Filesize

    87KB

    MD5

    769ba85f02adf9e490ec5ccf75b5a911

    SHA1

    b717def1738cff2f48b5b51e1f15d4f23010ea5d

    SHA256

    6a800619ce62f5b1276409a255057d792d3cabbe9703cabb1d8fcd4388310a8a

    SHA512

    e6e6e7053f3f418b4f08d716560b79370da817b3988eac0698eca6a176fb3fb6549e44c7e77ee44f7f42822314b0a76b49d1d5d9ec4ac50415d2a8b3483e0064

  • C:\GOG Games\Undertale\mus_cast_2.ogg

    Filesize

    152KB

    MD5

    7bcb9667bbfa0c0a6f41f5ae924c691d

    SHA1

    6b97db23b9303cc38ec28337a08c70ca38f4ca34

    SHA256

    ba7da00e03489f4301f45d037c886670df1d0b984fa76a9014963d0e82b5cf92

    SHA512

    f62317eb56283d6c7fe069279f112defd088184a68b02b92deeb9943ee293b99fac22a5b9045b7847a07a95d3b9c9271a556c13c4412333b9ea3e335cb8403f8

  • C:\GOG Games\Undertale\mus_cast_3.ogg

    Filesize

    124KB

    MD5

    d5eabf4c524d4871223a644e7df68f24

    SHA1

    9baef7488258a7270df3c2478a08a0094bf7a2fa

    SHA256

    0095441297b24a09df728b5af9da048df6942170249a100ace830cad46c7e47a

    SHA512

    96e6fabc142ec74b4659e18a6cec799742b6b523e014c9344418482d33858d09b619bc6821234f04f99d4d608d3f151f162e1bff53f57b7d77356b09ee5c9901

  • C:\GOG Games\Undertale\mus_cast_4.ogg

    Filesize

    136KB

    MD5

    4f6fa9d65f2fc86a25fd19120a0be147

    SHA1

    cb9c00cac34e3b668f39ab9a875c3ddae3382f23

    SHA256

    944d1002f92a7fcf864e7c7e598958f4a33685cb7bde9e371978ac112945a091

    SHA512

    8b0d1398ab3b5fac12a39208fd5162e1f4c7766a807371a9f6348c816d9672d33b9096d89c692d9cf8127a58471688c3526da50e654cad676ac9fc96e3745a5c

  • C:\GOG Games\Undertale\mus_cast_5.ogg

    Filesize

    120KB

    MD5

    131c9d0592e62d6c00a484dad3c61aff

    SHA1

    c8a13a83578eb4322f62e9adff324109208deda4

    SHA256

    b557acffb91f4d92feb0e28b1c70756a5a67920a70303d3b09460d43aee21bf6

    SHA512

    36dfd190a779efff77bb6ecd70ee714f2b1684d4f5672040225df505844854ff6e53bf34ec615d4f8e26f05df623bb66b0b869ca25e893de8a50bde85be55baa

  • C:\GOG Games\Undertale\mus_cast_6.ogg

    Filesize

    208KB

    MD5

    87ee8f9cccff5d32e054c8737bde915d

    SHA1

    dcbf4e5a137f248b8c4b404f847b5181fae4ee8d

    SHA256

    5c35750896f5eec85c502a00b935c7a96a6aa6b8655936ae99059fe2bbc6b9f9

    SHA512

    13fb4afa9fb65e95092de7ed9bde3cc56a9172dee4fc89569205fbf672f936cdb306fc912e8f7bbef4e420534561177107b085f976861d3d580fd25a6aaf07d5

  • C:\GOG Games\Undertale\mus_cast_7.ogg

    Filesize

    127KB

    MD5

    6b74d6c9db71cbc1e027b3baa7b7e0a1

    SHA1

    ed30b2c19f50bb5b0c89840d81afd79257a43403

    SHA256

    a09cb9d8ad1d9f3537ac03406818033314b6cffeb70c207362cf6046ea79a38d

    SHA512

    924d3692c6f62fe43593546c654d111949d9eec359820f120f6056059c164b788796cb83b105d0af64897575b2dccb488f2ef5d1760769a88745cb1832769669

  • C:\GOG Games\Undertale\mus_chokedup.ogg

    Filesize

    92KB

    MD5

    feb22f7cdec30f92ff7df8fdf7b94410

    SHA1

    53842c1e126503721bb1e1274cc4503fe732ed05

    SHA256

    7851fff93670d4ea11bf1008558d70292354f126e97cca37c77bb88a70ff0440

    SHA512

    48b73fd4f3424359f7be2a06b3bafe63c0689ccdb487e35cd1795e19c015179eaa86af83ef4ead49665a4066401b1538f40a2a1e0f4642b50bb47b2949e2e6a0

  • C:\GOG Games\Undertale\mus_churchbell.ogg

    Filesize

    77KB

    MD5

    aa4061c1c89e8221087449b54f370784

    SHA1

    d33f4acf8838d0ac962199191590b838fc1068ea

    SHA256

    efeb11babe4a529587614df295b473896e03393fa73c897dde9b02120389d620

    SHA512

    bef6790840b062bca813579093e25a72570d428fe5906ad116011de6baa337bafc9016ce26cf689752e5c0946f687c8cf7c56f69577fbb013a57dd346b73d55d

  • C:\GOG Games\Undertale\mus_computer.ogg

    Filesize

    17KB

    MD5

    bf3fd98aad1f2414f286221bf127e61b

    SHA1

    69d7ba47a60c69490af8429dcc2808630d73b03b

    SHA256

    4c4062d9f91a6801715aeff168ae4a6568f5e280b729691e6962331c270978c9

    SHA512

    0c266c3dda15d38572621e10c4cd48ca3b2e142fc3af73bcdb3ac97efb068e269c70a507e6590ae20322ed0956fa174a75c8adae4f96fa0b91fdd2de7e8b88ee

  • C:\GOG Games\Undertale\mus_confession.ogg

    Filesize

    111KB

    MD5

    609c0d0a65c3443f11e7609a0699a2ba

    SHA1

    9acdf0192f9de28706a30a5e531f75c6c7db5832

    SHA256

    3f065937bd3e41965d702cae05daba9aacd3527281dbd55dc2345b3ca7864a4f

    SHA512

    d0a458962ed9edd5e22240c7e0ec7bd7de80a9d7fd9ae43b2c2e46f0502f46b3d0044a89ce6ef8c2033c896984ca44605d46211ca351a2d03a04526720718338

  • C:\GOG Games\Undertale\mus_coolbeat.ogg

    Filesize

    23KB

    MD5

    2d721315d4b952cd0413123744470cd5

    SHA1

    71905ca68789f608cd18b75811ef2e464a3c6061

    SHA256

    b2502de775ddd9cd544958795d6f5b4b771249cce9142424b48e732cdaa51699

    SHA512

    76d7833debc58f2f55a418657ae1bd0dcb48ec851a2d66620d16ecfbbe3cbcb04ec2af916ff2eaad9bdf1df7b04e9f8a1fbfffe31039ecad9ee2796efa9f3f30

  • C:\GOG Games\Undertale\mus_core.ogg

    Filesize

    95KB

    MD5

    7ec8854ae68329a266ec5d668b2d3d0f

    SHA1

    e686df56e52a2c4a44abff2fc8370ee45b36b9c7

    SHA256

    895bc275cb62687b37b07c009e68baccdd6ca7f7c291e50cbbb441cfd0b0b231

    SHA512

    b3ed2a1f8ec8940903ac2b75da82ca07c4ee2c871164e292e87019c88c7c06be387aa9c7ce9a710f52e6a3f8b2a72b0d912829fb22e5fc0489523c8aef14b27e

  • C:\GOG Games\Undertale\mus_core_ambience.ogg

    Filesize

    54KB

    MD5

    156d406263b33c1c227883bc8a83d4ad

    SHA1

    e15e1f7a3c2901a293382039ffeaabb8bc5b95eb

    SHA256

    4015faefba763c28f4ea0a48b82f7bdcba2a3c315c3957fdbe718f91e6d66750

    SHA512

    193ca544b19c9956ecbf1d2c078f96ae2ab1507c46be153dc0cfa34bcf3b7673fbb65022c25d90a5231b51ba4de8c997d636a9ddade329856312056821028037

  • C:\GOG Games\Undertale\mus_coretransition.ogg

    Filesize

    101KB

    MD5

    a35ffa493e137447e7a431243824d269

    SHA1

    5e57693bea6ec228ae639bbd347aaeeebb6691ed

    SHA256

    949e78cf513c12b1b7a1d26fd649221313c291074f660bf85b3f2372d85624ba

    SHA512

    97d5b211b704475742367da3621217f58e98f7c305b702af5f2503ad6f98f36071cf0b6c0c2f23ece17f8bdaa419c65c6ec270cf8fb2228f817d8040874dc975

  • C:\GOG Games\Undertale\mus_creepy_ambience.ogg

    Filesize

    133KB

    MD5

    0152a21210b2cc8369b4c6bd9e9e868c

    SHA1

    f24ef308ea5bda6788ff0f6e5a0aca1ef42330af

    SHA256

    eaee86591b7b92a1996a4e96699d49e500c75897f3727ede20e43f14b117a32d

    SHA512

    df84e67f003f1742a122153da076ad5db33f29caf8949e102d58e17ae80984c992d1886ef3a581bb8a388a680d7959ccbbdc2d428aaa9d06b2f1833346510080

  • C:\GOG Games\Undertale\mus_crickets.ogg

    Filesize

    109KB

    MD5

    7672851363447f936179315fdee2f593

    SHA1

    7e711c051f03acd5d739fa3063b84c03e7829f4b

    SHA256

    756ffcd8a72fca221fd353f1b31d110fd5a6fcc2e342340ecd77803a37c05fc4

    SHA512

    9b576600722298c0d3e1efa89f73233f559bb537ad76a9d19d324d408a81ac38dbc053a4fbf12c3f3a7b8458d2e95b33c90c75d193204045f84f4aa0c3410066

  • C:\GOG Games\Undertale\mus_cymbal.ogg

    Filesize

    53KB

    MD5

    90a422f31063a50989b358708e68f109

    SHA1

    1c4605a43688cb893947cf0342673e9a212f6780

    SHA256

    ad536a8aef8f7485ff1f9c76ea9aadc156b7d3702d82078165e38a39977d9d85

    SHA512

    05301abcbe370deb41f8271891c6418684b9a461e6fe38354b4effe6cf053cb1c4963824b342e8a7492d9e3ff21c4bfddab95d88e83a5bb222bcffa09a6c97a8

  • C:\GOG Games\Undertale\mus_dance_of_dog.ogg

    Filesize

    113KB

    MD5

    b4e28f5b3e88139674359c3a97f545d1

    SHA1

    7e33a017272db837ee5172d8cb0dd4d1ef538c95

    SHA256

    3dd733edfe675fd5ec84a0186d2784ff83ddd0ff69c1b96c975be5c0086893a7

    SHA512

    238be7129ed51cbb2062d1c9c382a528e43abc61d375a1007b2f173e92f4197635888bde5ad8adc974588ae8c4a71b8c07fda314c30c274e1d1cd662cb73698d

  • C:\GOG Games\Undertale\mus_date.ogg

    Filesize

    118KB

    MD5

    f489ed4793899340c5420f87d30a8b01

    SHA1

    3aa35d1c5b350b592da052bdf3962d9cf329b1c5

    SHA256

    93648ac0c2cea7486dc05fa2c2c2e8af99c601eb9f4edf45c5d123998da5e177

    SHA512

    746588c9650b55a9bf3bf093746a95437f88fd58f08215ac089db887c103eaa2fe50ea2c1c3492552238152e214c4972a0a30cdae5cea5c44b83c4740f4ce8d8

  • C:\GOG Games\Undertale\mus_date_fight.ogg

    Filesize

    89KB

    MD5

    731c4c611b6d7c439f9ef74be78e75cc

    SHA1

    d7b0288e12c83db3d16671fc80771d5f4f87bade

    SHA256

    d2a8960ecd99bb903a0c303793af3330de2d6c6577014bb20965c6e8a2926096

    SHA512

    0305722deeb13aa78b290042212cae68a0365902cf006074abb6535e39945486d667291ac146de01017bdea55d619328ea11c0bbdd7c15896611120f09d1fe05

  • C:\GOG Games\Undertale\mus_date_tense.ogg

    Filesize

    127KB

    MD5

    5aaa4960b5f8aff513bf7a02ddccd4d7

    SHA1

    9b3e53c4a32fc98d9ec1fe60ba59cc7d2c3890da

    SHA256

    78684c218441b634258394e47d260d24ea91e0efefdd757bd34f75299e8da2e1

    SHA512

    6b2f5528f5bad2222c67ac518303334cc4c9c5996f98fe6e8bb45c99d6f0250613b083c2521ae3d732f2fc66cd5f4a77af53ffee0f71ddd3850b1f03e540de1f

  • C:\GOG Games\Undertale\mus_deeploop2.ogg

    Filesize

    66KB

    MD5

    94da4f8941d95ff586d0337602fdd081

    SHA1

    6e3872252e4aa2cd6c721591fd1cb44313db395a

    SHA256

    b2adfda237c36b87ebe20205f41ca34ca45427a7f302bdeafd2f2732bd9e1c45

    SHA512

    8d8712a22543db239a9fcf15dd3e1ffaad9642417b79a015fa056a4a4cf315bfd00a0205d15b09f8991276ab33fd6cdca1771c195e1a20e93d4a38f3a572f0eb

  • C:\GOG Games\Undertale\mus_disturbing.ogg

    Filesize

    69KB

    MD5

    76ad748a424e47aa83331f1f170ece39

    SHA1

    e90a4481b7b1d8a49f84c8deeabf49dee41783fc

    SHA256

    ae9a62a332b91c59c69723685d2476c8b4bd75e1d4c9612bb573c762841c935d

    SHA512

    1763278a67b6417862bca13b221e4957956c89d73fa3d6052ca8a5e5ace90cb38fa4e5b00f1bf8dbc6b5dcc4b83084291bb0d0809ad3128d23789bf8c67f97d4

  • C:\GOG Games\Undertale\mus_dogappear.ogg

    Filesize

    24KB

    MD5

    2d2cf95ff2877f86dd5de21fa6df3758

    SHA1

    33345114743cfc37cbe76cfd4a89fc2ed84ca07b

    SHA256

    9c0dc0331ee3164c43eb7ba25028d3923433f88cf27c72a464fb64ded95dd045

    SHA512

    3a8d21ea725635ec25615e3139e4d69161c87ecf729970dfda6a14041677fd7cd14d13ece16704462814722d2524eb029cf2d4bcdac7a5542d6b6faf31c50a7a

  • C:\GOG Games\Undertale\mus_dogmeander.ogg

    Filesize

    48KB

    MD5

    67ca3da368c5dc8b8d41a6e62871ed0c

    SHA1

    d2c632d60302e8bbc5315dd57d88d85cf1f8db6d

    SHA256

    3b9f040d0f84879360ffa34a5702d0b26aa1909d8c18256e72ba81521022355d

    SHA512

    b99ff4fc837a84418f2ac76ebc6bbbd4107848db4a9b765c3c0c10d1e9e9c99877c687b4fd8e4ab874e2a446e34c6318685b153a4631f373c80212dbd60cf346

  • C:\GOG Games\Undertale\mus_dogroom.ogg

    Filesize

    145KB

    MD5

    24c5c5b16c4577033d9bf00976572bd4

    SHA1

    aa18a30210fd47d0775eabbf291facc17addb372

    SHA256

    b271e8aca9c90a445da5f4ee8e8ca42040fa71a3f22b0c1b89739bb4703ae81f

    SHA512

    cc79f7be0b2a5da6bf6bf0c3894e438059988f385c54b9113c0cfdb79e0b0b4c140fc9b364b49b00fa276e193d628ae701537e5caa84c522d04396140e9a2637

  • C:\GOG Games\Undertale\mus_dogshrine_1.ogg

    Filesize

    130KB

    MD5

    b30e623f4a8b8153ec63d1707c2966ea

    SHA1

    5c3c92ba927e52db4eec78c6378588da07a1ca41

    SHA256

    a7faf749a05e85186e5adbdedc62f1f71c811ea825defdc0dc63dfaf8d4d46b1

    SHA512

    ace4fcb552748c6e6fb85836f907d2081cc8bfe176cc38d054ef3428e5f89cbddb6ffa97c314e9750b9bfa7807c362ba1fdf52dcf1e50f5caa04f7329178672c

  • C:\GOG Games\Undertale\mus_dogshrine_2.ogg

    Filesize

    92KB

    MD5

    0d08a44edee14b123692539a0e417811

    SHA1

    288ab35518d6b09470be964069b91dc2e74f1984

    SHA256

    d1fe8e1828ec598ac3b4da66c8ddd480132a3948d5f2fb0565a95540c0f379a6

    SHA512

    d7fb9792e093aff16f70d16ecf77c63952dd7540d3942bc93ac3da54c08ebb42a65b31e1c2fc42a0ecb009a98d273a1ccf49275253179bff5ddc18092f9783fc

  • C:\GOG Games\Undertale\unins000.exe

    Filesize

    118KB

    MD5

    5ae1d65a66d1e05242c41bfb81935dde

    SHA1

    f8f245ff0da342111d8ab2e958a8d11603aac6b2

    SHA256

    c31b79e39e36eded286c4c088814c28e1b04d38e8cab5a55d4874f45d4c1dcbc

    SHA512

    509b8d6f22f31fcf315e7b920405f4d2f11140e96f13f6facc3ed1ebf2fe26b666092d3113ff960660377c63c9b1bdf4247fd20cf887d8de8d57951fc89c1351

  • C:\GOG Games\Undertale\unins000.exe

    Filesize

    245KB

    MD5

    7c108fcbe0402aa318c28cc1d6a25264

    SHA1

    2c8689b38c1f3f1f8b046aa74390ca498fa802c6

    SHA256

    f1fefef8d936d987f00c5ac4ebbacdea28985b08a94079c8c8a768b6666c7915

    SHA512

    223194022fa1c40edbda9382f9b152dddc55a3fc840a798d088c0fdf198e2048b59fbbc71b10b6c6fd2efc661e64b59c46b176a6328398a1ce3fa9ee63c59a93

  • C:\Users\Admin\AppData\Local\Temp\is-HFQ0H.tmp\scriptinterpreter.tmp

    Filesize

    88KB

    MD5

    b5de6872e526b42fe33b97994bf94abc

    SHA1

    9ffb1b604f4ca80a2e1a253dd29112ef6e61950e

    SHA256

    69d1acdc5b86279c1d6ab43a89b6553055d9cc3bfe3ce4e51726c295422bb3c7

    SHA512

    bdb5875d1c43ab2337930cfb0621b4a2f0cfa2b4a041c0995e46db4951e9a17c2df17f8bfe7bcabd14ce2c0393c1619a66877a9f742c28d0f2d9f6a1204db931

  • C:\Users\Admin\AppData\Local\Temp\is-OMUJH.tmp\setup_undertale_1.08_(18328).tmp

    Filesize

    243KB

    MD5

    0fc4516b77b545c834b623406907854d

    SHA1

    1ac38b33aed2e07d93d7e1ae1b4f45fd0ebcba2c

    SHA256

    159a0cfc1a7927509a27f05a26d8fa2786b223d15d8e8fef96dd54608c8b50ce

    SHA512

    855d8d82e5f14468235ba6a9435ed5e56c4b907ae9906cf98ae9149b19286e9e6cc1219d33ac38c3a44ac557f98f1e9d392079a8abd330f222fd29cf0fdefc48

  • C:\Users\Admin\AppData\Local\Temp\is-OMUJH.tmp\setup_undertale_1.08_(18328).tmp

    Filesize

    423KB

    MD5

    ba4a08bb108d6a677177fab843860031

    SHA1

    59b83fc7158570c2ffa67f220edd57cfd635be7d

    SHA256

    399d7c13254cfabe4c19553a098f229b2d6e94a8facbf5c46758952baff68967

    SHA512

    1976be44b1d7b36c430729180702a4de33d28b8483b4c1990904f4d14025b4542c850ff00591d09132cea09c05e4ed5b38f2478e1a8de891407d435928cb8dd4

  • C:\Users\Admin\AppData\Local\Temp\is-QLG2M.tmp\1207658702_english.jpg

    Filesize

    195KB

    MD5

    ed224bf981e588b310321e3364cde5cd

    SHA1

    b3a7c43742304b6541bd83b04104ba0511103cd9

    SHA256

    988c25e3d92bbce791a012beabe67b70d0f708fe658a75304261f9699de0c063

    SHA512

    9c1ee058e5adeb765b435c4de9b1c9d211dbfec1d6d9b78abb5c38887d21a9920d35cb61b8139662b03acc5b74132c4bf267a91927587ab59b490cdf519e3902

  • C:\Users\Admin\AppData\Local\Temp\is-QLG2M.tmp\1449139823_english.jpg

    Filesize

    192KB

    MD5

    c86d1d0ecf523cbc44a0f3cff1f81586

    SHA1

    a906d195974ef3afd6d7da7d820dcc9a4efe3987

    SHA256

    5091f3f1bd82d677b364080052f9166a0b85ae179c6ab6bbd6b87f4203c14e1f

    SHA512

    fab06cea1446b58abeece64a7e4bcd5e9f8a6ca75aa2255ae65f3e5d88c81abd17be9946e3702a30d7978660ec363c73c4e9483678558e8a79ffdfcaafd24bba

  • C:\Users\Admin\AppData\Local\Temp\is-QLG2M.tmp\BigOK.png

    Filesize

    3KB

    MD5

    5b43a5d975a53f4fc1da67ce9f7784c1

    SHA1

    8543fa1e471030049942252b23cb22e0880c3af5

    SHA256

    59d8bb3e87a89ef523c0495addce38d69560af42aaa82f56dd41b12e6612c13a

    SHA512

    5dd5c4e9859a555a4a32da76f5231b44f7556274c6501da530b2cdd570bcb4675f710bee708322a40ed3ef9280c0d652b4e7ef0e9eaf128c08534f59291917f5

  • C:\Users\Admin\AppData\Local\Temp\is-QLG2M.tmp\EULAAccepted.png

    Filesize

    2KB

    MD5

    461dfeb75927bdb39f9db5348612a611

    SHA1

    b7893b1fff6801e37ee7337d876962a09184941e

    SHA256

    0de278f5ca6d8570d9bda592268a14a28b87d3631fea2d25721947397aaab79c

    SHA512

    68528cf45c81c2c024a672f42c2cd6d4f72c015b443f103ca21deb8ee2bec4f4027490e7f33b5338a87537b5bf7f255f2828aed149f622155ec89cc81687651b

  • C:\Users\Admin\AppData\Local\Temp\is-QLG2M.tmp\EULAShow.png

    Filesize

    1KB

    MD5

    c596bc9111edc702bbbb29b70984254f

    SHA1

    d4712c7b91ff4f8994e7907d31357c42eb47c738

    SHA256

    6112851daea2aaa7174e8cfac4a0f61c968bc090342503804c476eff47cc2462

    SHA512

    db50d0a39ec644873a03d64552fff1776cc94f016e8dfc8918e65aee94f7529a6de4637567b5e65c4ea988f3775785c4b52c2d96fe8dbc52b1e21ff59c737c2a

  • C:\Users\Admin\AppData\Local\Temp\is-QLG2M.tmp\GOG_new.png

    Filesize

    3KB

    MD5

    d5b63bdfa47ef5954917c148bacf7b13

    SHA1

    5302c6715d9e9b5d2768b130f3e516e175684cc9

    SHA256

    0804b385c1736e009fe8c3b1b14085b9b9abb40ce487360002ab4a8f3505f4e0

    SHA512

    b5cde681be9ad1c1211559dc4b363003bf547e8dc965dbb9560fdddfc28ee1d8f27cc534dd00864d800fd351c48694d7dc8df55fc3d8d69acf8b702c7b421aa9

  • C:\Users\Admin\AppData\Local\Temp\is-QLG2M.tmp\OpenSans-Regular.ttf

    Filesize

    212KB

    MD5

    629a55a7e793da068dc580d184cc0e31

    SHA1

    3564ed0b5363df5cf277c16e0c6bedc5a682217f

    SHA256

    e64e508b2aa2880f907e470c4550980ec4c0694d103a43f36150ac3f93189bee

    SHA512

    6c24c71bee7370939df8085fa70f1298cfa9be6d1b9567e2a12b9bb92872a45547cbabcf14a5d93a6d86cd77165eb262ba8530b988bf2c989fadb255c943df9b

  • C:\Users\Admin\AppData\Local\Temp\is-QLG2M.tmp\background.jpg

    Filesize

    308KB

    MD5

    79dd8f2494aef70c997f7627449d7e9d

    SHA1

    6fc00daa1c26ee76a90a55e39e0c3a72cf4b36e7

    SHA256

    502d1b67b2a2b390753fdcafd9b5f33c97796b580eaff893ba7360931092989f

    SHA512

    3af7da0eb62a38a3a4445cd0bd563a8fc7c3010830228d2bc075ae7b5bf990ca20bef806116c60d4a367548a821587328ab0509ab8ba73e6fdfc0a7be30a6c78

  • C:\Users\Admin\AppData\Local\Temp\is-QLG2M.tmp\btn_md5.png

    Filesize

    8KB

    MD5

    3befe9739354ee24a0b1ea8df05ce274

    SHA1

    ab0bda986a8c46aa19f57b75a2b7b22445a3c625

    SHA256

    b0193ab375f604fa4a25cabdea8f713babde1c07ab562ffc5679352c8e01db47

    SHA512

    ac016a59e0bfc9b22c376ae5d498c5660893a983d932b2bd502dabe032883c69e79ea8d93c2db49f95415c3cdb068e9f7d1d85527a4f9e68e065a989852d09dd

  • C:\Users\Admin\AppData\Local\Temp\is-QLG2M.tmp\error.png

    Filesize

    726B

    MD5

    df10adc25b673e74e19971c17bee5a98

    SHA1

    ee16fb1cf9491f5e611282f0574b27d76fede412

    SHA256

    142b16dc6239421691fa6e619d1a61e61176d89fa018a88b46893c29a57aad8b

    SHA512

    dc3de10e0321966cbbfb2e57b3b41da6f26dff0c7233a47469da58775b5c471e6b5181e4d4ffc81ef8b83dbcad74ccc1aad7678518f99c9185a441d2a23e010f

  • C:\Users\Admin\AppData\Local\Temp\is-QLG2M.tmp\error_icon.png

    Filesize

    1KB

    MD5

    263720c4b8bb111567a2a49989b8f467

    SHA1

    cf346fa3c70164648e0eaf72a37c6f4920ab4792

    SHA256

    acdf96ee4261fae138e6350a0ad50b367022ed5b908fa168baad92644f566ee8

    SHA512

    94f06a81dc735cf264abde86e6169e5fd78d873d2e926fd48287d2ac5208fc930c3c432186e3510add002bd1b4ae32ad8d35270b17c3ce5f18c43764a8e9de43

  • C:\Users\Admin\AppData\Local\Temp\is-QLG2M.tmp\ok.png

    Filesize

    1KB

    MD5

    103c1368e60806b1b7995a0894eacf87

    SHA1

    971392527f6e4b655044773132505c901a6b5469

    SHA256

    0d37d4421a39ca8852eb6760b8e914302bdc6cfcc7b170dc1b6c9bb9be148b7e

    SHA512

    652177e94438aff102f2ed873b26f0985ebed134763852b49b1ca2698463c1dbeb85152f19c8e18d397229ec5cb2cd1d17c61d454ab7c425a2cab540adc8228a

  • C:\Users\Admin\AppData\Local\Temp\is-QLG2M.tmp\progress_center.png

    Filesize

    1KB

    MD5

    ad7fc1e37e40da38dd57adc446cc6c0e

    SHA1

    08033265deb9b45243cfa0065d98ffe13a039e26

    SHA256

    2b9dae87340e66b67ab1d8247d4a137628e324969f92fe1098f95a7c5bab2f43

    SHA512

    dd715d74f8e1ed6ab75b7b6530b383ac47040d8baa7728be160f6d230bf485a9cc54f15f7dc85b122ce56e54d63fa4890e510dfc89d9c9344e31f789ebac8756

  • C:\Users\Admin\AppData\Local\Temp\is-QLG2M.tmp\progress_left.png

    Filesize

    1KB

    MD5

    290c7612ad7a077028cd3dc78ce99673

    SHA1

    18995fbe39d05e4a1cafc7cc2e0f6fb745442f77

    SHA256

    85e39d909a7300fa2043ec42818582867b981401264b14fc5408e477ae0b4668

    SHA512

    799841f5b8a1056e78a49c823009750e4b93af130a6c4ff9dc6d386c06b88614e53b46a6df62f5a217d5c99da01cf4e2fe8392c73d39e81000045291cf24205a

  • C:\Users\Admin\AppData\Local\Temp\is-QLG2M.tmp\progress_right.png

    Filesize

    1KB

    MD5

    c25a41f022a74308d944d1e807d72f44

    SHA1

    83c6bbec3fb373fcc78ce0e737742100994cd6d4

    SHA256

    396a3351fe409328782ab138282cf9cec061a5a9540a3506700a620db1f54e7d

    SHA512

    d2f4449195f3e60c826cfabb52a083d829eb9d0509272977d8fdb33bc5214678949cd27d0594684594e0a3eda2351c39cec8d91923cb716ad144ccf2b966c8e6

  • C:\Users\Admin\AppData\Local\Temp\is-QLG2M.tmp\slideshow.ini

    Filesize

    298B

    MD5

    dd34f5881d26a40468f4eb1a01aeb892

    SHA1

    6065a141c70d7eff63a0e879dad4868e1868a3f8

    SHA256

    23ffd13e24c21c28893f350c1283c8faa856a45ef554ecff9e96442bc51bc214

    SHA512

    34c7652ff16ce6895c20b63e6d9b33626f14bbbf549fd3662bb17c464f501d08a4cff8dcdcbc153cd7b76da09060d7e42babc683e441f8dbe69438ab9b98bf02

  • C:\Users\Admin\AppData\Local\Temp\is-QLG2M.tmp\track_center.png

    Filesize

    1KB

    MD5

    3f2b0c22f8ea28dcbb82b39a16a039aa

    SHA1

    b3f4dfc2ea86fbdad05877b4c356b7fa8016731d

    SHA256

    794f9eeca7fd99846968376b76a296c927532cef1271325cbf555caa0d0d5860

    SHA512

    b4bf65d751717e85418947662d315ae3bcb177f60914832fefeeb95da9eddb75eb5531c62e5a5a70ff03c8a025b5a03e61ffbdecc9f483bea9684454ca9362d3

  • C:\Users\Admin\AppData\Local\Temp\is-QLG2M.tmp\track_left.png

    Filesize

    1KB

    MD5

    55dacb00cbe2825a8540236c5777a205

    SHA1

    18a52ac6c741b558500fbc1716d46b4fe4471982

    SHA256

    a8340fb5380c922b60ea40043590dba067dcfed6e22636851691df38156a3aa8

    SHA512

    2ea444cc1080f20761c8d71d96fcd04ef48254cdc1dc41d1d139f459ea5613fe12f6e4bd026bf33a5c01ff038e72e05dae2f8fba33ff517dd395e1911f10ff10

  • C:\Users\Admin\AppData\Local\Temp\is-QLG2M.tmp\track_right.png

    Filesize

    1KB

    MD5

    ddec70b6c49be3e8c3a7d01c2f6ff1c5

    SHA1

    5383271999f787c36b1dc8f3cc13c8407b195439

    SHA256

    f54cd6e42f2b2bc5cb8a15f6a28f1499abf094a519ebdf39f4c4e167312c9c16

    SHA512

    f43f94b194b5a7eafcec9e831f61042859c30e1af2e2447195bdd06b12c90982181161a1c1be5aa5223ff664f88e4891bd71cfffb7ef672d6fe4f614030e0e01

  • \??\c:\gog games\undertale\goggame-1456487183.info

    Filesize

    840B

    MD5

    72c5257a93fbeec975a4a4175b50080d

    SHA1

    7b28af62c13cc120f3ac3e0ef273be85116d8d76

    SHA256

    adb26c3daa0b8511e8219b7ee950c8cdc527795f7e3b2a6a42355f27fcdc1b29

    SHA512

    f8ec190ba65211588f6156e74d1e8e842fe959ab1f8830e8ee1c9adaf35bbbbcaff7814560fa7e5c7e075c5d33422144070e114727229343087465f6895fed2c

  • \??\c:\gog games\undertale\goggame-1456487183.script

    Filesize

    419B

    MD5

    ecfe49b9be64a0e398f861c8d5f16f53

    SHA1

    465087b4a0a9045d3de22ec0ec92287acf26b47b

    SHA256

    f1c0f97ea9a8dbbb37355cef6f2d42832e97acb47b5e9bc327ece2d9b397c5a7

    SHA512

    25239ddf866e6d0e2fa53b033e6aa26978ae8a342ee123592e974e911db9fe130204e675bb61079cc3f45451663e5276062d391638ecd83756c4d9e14c52474a

  • \GOG Games\Undertale\__support\scriptinterpreter.exe

    Filesize

    242KB

    MD5

    c2d568d3b97de4b79cc184742725f08e

    SHA1

    b25074680874377313793128c80d71b24db2a42a

    SHA256

    43a86e434fb485781425ae9f5ae191115c6f9c28093dd039d7d42fe64bf0a68e

    SHA512

    3f62f92dc37adcc317af3d5a1a1733e69a204b3c21ab979c4cd1ea2e9c25d795b3bbfd0cb4d1172229a251288a43bc020789af6818e8b1507f38d9c1782a44ee

  • \Users\Admin\AppData\Local\Temp\is-HFQ0H.tmp\scriptinterpreter.tmp

    Filesize

    71KB

    MD5

    76b15c11f865e3a09a3a38e0f8320e0a

    SHA1

    b3ab0e28c1bb61a29afe6ad760e602f4433fa2c9

    SHA256

    59aaf41bcb8706f2fd2fa857574537641ad53ec5ae87bd58e727be3fd59afb83

    SHA512

    2d34758db9cbbdda0baca295b0073e84d723b4a70f949439cb1af67e245d39cb60b6346f94d5341507e1328bc9b812d8b30e4da94bff9f00f5ee581c37cca23a

  • \Users\Admin\AppData\Local\Temp\is-KD03E.tmp\uninstall.dll

    Filesize

    49KB

    MD5

    96dc187f4d91f7fb21bbe7c769eb6b6f

    SHA1

    a5309fb412adde812842a16e8f525870c337f7ef

    SHA256

    447c36d74728ee8b1666573a28461e8fe160de282be1544ece23dd9467787e8f

    SHA512

    e3c926afdd875653ab22741830d35fdf58ef6eb996204bcf75421ae172749e30aa8e1ac027448aec9f91af14fb135347b80bb3b7267d629a77c3fd970a44c542

  • \Users\Admin\AppData\Local\Temp\is-OMUJH.tmp\setup_undertale_1.08_(18328).tmp

    Filesize

    555KB

    MD5

    65c69124e78e5b9884ee40819bf9ab60

    SHA1

    b6a30006bc4da5bf04608df6be9fe57238734c71

    SHA256

    f109e986b9c51eae550a2f86e4025f0f0b18502ac385051e4cc86bc96f04d369

    SHA512

    077d6770d373afcc64cd527ae832e314cb23b27bb64ab498fe3f0ced00cdb6f1610ba6f48647a386d128b7176d56860502c2aec9395e20cf55811859ed7955cc

  • \Users\Admin\AppData\Local\Temp\is-QLG2M.tmp\botva2.dll

    Filesize

    35KB

    MD5

    0177746573eed407f8dca8a9e441aa49

    SHA1

    6b462adf78059d26cbc56b3311e3b97fcb8d05f7

    SHA256

    a4b61626a1626fdabec794e4f323484aa0644baa1c905a5dcf785dc34564f008

    SHA512

    d4ac96da2d72e121d1d63d64e78bcea155d62af828324b81889a3cd3928ceeb12f7a22e87e264e34498d100b57cdd3735d2ab2316e1a3bf7fa099ddb75c5071a

  • \Users\Admin\AppData\Local\Temp\is-QLG2M.tmp\crcdll.dll

    Filesize

    69KB

    MD5

    1d51fac9e2384eeb674199cfd5281d7d

    SHA1

    861dfdc121357d605d0cc3793266713788109eb2

    SHA256

    23e90ce5a1f2d634a7bf5d5d0522fafeea6df9e536e16f5ce91035d5197128ec

    SHA512

    921b00adfe43b883200960e8d0958d4e6b97f6d5cfc096ee277766a3e44cc7805a20877a4edf8bd4d9102bb71a20ac218a9a512f4f76bd751d3ef14f4e0a6eda

  • \Users\Admin\AppData\Local\Temp\is-QLG2M.tmp\innocallback.dll

    Filesize

    63KB

    MD5

    1c55ae5ef9980e3b1028447da6105c75

    SHA1

    f85218e10e6aa23b2f5a3ed512895b437e41b45c

    SHA256

    6afa2d104be6efe3d9a2ab96dbb75db31565dad64dd0b791e402ecc25529809f

    SHA512

    1ec4d52f49747b29cfd83e1a75fc6ae4101add68ada0b9add5770c10be6dffb004bb47d0854d50871ed8d77acf67d4e0445e97f0548a95c182e83b94ddf2eb6b

  • memory/384-639-0x00000000000D0000-0x00000000000D1000-memory.dmp

    Filesize

    4KB

  • memory/384-736-0x0000000000650000-0x0000000000651000-memory.dmp

    Filesize

    4KB

  • memory/384-737-0x00000000008B0000-0x0000000000A00000-memory.dmp

    Filesize

    1.3MB

  • memory/384-643-0x0000000001F90000-0x0000000002047000-memory.dmp

    Filesize

    732KB

  • memory/2060-633-0x0000000001250000-0x0000000001289000-memory.dmp

    Filesize

    228KB

  • memory/2060-738-0x0000000001250000-0x0000000001289000-memory.dmp

    Filesize

    228KB

  • memory/2060-630-0x0000000001250000-0x0000000001289000-memory.dmp

    Filesize

    228KB

  • memory/2912-0-0x0000000000400000-0x0000000000437000-memory.dmp

    Filesize

    220KB

  • memory/2912-849-0x0000000000400000-0x0000000000437000-memory.dmp

    Filesize

    220KB

  • memory/2912-2-0x0000000000400000-0x0000000000437000-memory.dmp

    Filesize

    220KB

  • memory/2912-131-0x0000000000400000-0x0000000000437000-memory.dmp

    Filesize

    220KB

  • memory/2992-566-0x00000000033E0000-0x00000000034E0000-memory.dmp

    Filesize

    1024KB

  • memory/2992-746-0x00000000033C0000-0x00000000033D5000-memory.dmp

    Filesize

    84KB

  • memory/2992-220-0x00000000033E0000-0x00000000034E0000-memory.dmp

    Filesize

    1024KB

  • memory/2992-332-0x00000000033E0000-0x00000000034E0000-memory.dmp

    Filesize

    1024KB

  • memory/2992-12-0x00000000033C0000-0x00000000033D5000-memory.dmp

    Filesize

    84KB

  • memory/2992-55-0x0000000003630000-0x000000000363E000-memory.dmp

    Filesize

    56KB

  • memory/2992-452-0x00000000033E0000-0x00000000034E0000-memory.dmp

    Filesize

    1024KB

  • memory/2992-8-0x0000000000240000-0x0000000000241000-memory.dmp

    Filesize

    4KB

  • memory/2992-178-0x0000000000240000-0x0000000000241000-memory.dmp

    Filesize

    4KB

  • memory/2992-652-0x00000000033E0000-0x00000000034E0000-memory.dmp

    Filesize

    1024KB

  • memory/2992-747-0x0000000003630000-0x000000000363E000-memory.dmp

    Filesize

    56KB

  • memory/2992-179-0x00000000033E0000-0x00000000034E0000-memory.dmp

    Filesize

    1024KB

  • memory/2992-745-0x0000000000400000-0x000000000053D000-memory.dmp

    Filesize

    1.2MB

  • memory/2992-748-0x00000000033E0000-0x00000000034E0000-memory.dmp

    Filesize

    1024KB

  • memory/2992-749-0x00000000033E0000-0x00000000034E0000-memory.dmp

    Filesize

    1024KB

  • memory/2992-750-0x00000000033E0000-0x00000000034E0000-memory.dmp

    Filesize

    1024KB

  • memory/2992-755-0x00000000033E0000-0x00000000034E0000-memory.dmp

    Filesize

    1024KB

  • memory/2992-136-0x0000000000400000-0x000000000053D000-memory.dmp

    Filesize

    1.2MB

  • memory/2992-132-0x0000000000400000-0x000000000053D000-memory.dmp

    Filesize

    1.2MB

  • memory/2992-133-0x00000000033C0000-0x00000000033D5000-memory.dmp

    Filesize

    84KB

  • memory/2992-848-0x0000000000400000-0x000000000053D000-memory.dmp

    Filesize

    1.2MB

  • memory/2992-134-0x0000000003630000-0x000000000363E000-memory.dmp

    Filesize

    56KB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.