21fbcab3c652d5af9efe57454d60d5a5057773e1c234ed16ae14233724502b44

Analysis

max time kernel
145s
max time network
129s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25-01-2024 16:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

setup_undertale_1.08_(18328).exe
Size

126.7MB
MD5

69a1054bcf85084cc4bc33e332f1844d
SHA1

a3db1a7c5a07ea07c31d40ab4c7685215ac4f170
SHA256

21fbcab3c652d5af9efe57454d60d5a5057773e1c234ed16ae14233724502b44
SHA512

f57df05d2d5db04cb48a1d72070ac5d76ae29620cca314817fbfbb30d42c2150115ac510acb216095115c210fe2eee80575ffc78a36fd455e72e4de9492b4f81
SSDEEP

3145728:WSHIqNWvNc0rn+0fslfSob+5Framz9LQMj5jMgQN7:WytNAfcSob2NaoLQ+7c7

Score

7^/10

discovery

Malware Config

Signatures

Executes dropped EXE 3 IoCs

Processes:

setup_undertale_1.08_(18328).tmpscriptinterpreter.exescriptinterpreter.tmp

pid process

2992 setup_undertale_1.08_(18328).tmp
1952 scriptinterpreter.exe
2420 scriptinterpreter.tmp

pid	process
2992	setup_undertale_1.08_(18328).tmp
1952	scriptinterpreter.exe
2420	scriptinterpreter.tmp

Loads dropped DLL 13 IoCs

Processes:

setup_undertale_1.08_(18328).exesetup_undertale_1.08_(18328).tmpscriptinterpreter.exescriptinterpreter.tmp

pid	process
2996	setup_undertale_1.08_(18328).exe
2992	setup_undertale_1.08_(18328).tmp
2992	setup_undertale_1.08_(18328).tmp
2992	setup_undertale_1.08_(18328).tmp
2992	setup_undertale_1.08_(18328).tmp
1952	scriptinterpreter.exe
2420	scriptinterpreter.tmp
2420	scriptinterpreter.tmp
2420	scriptinterpreter.tmp
2420	scriptinterpreter.tmp
2420	scriptinterpreter.tmp
2420	scriptinterpreter.tmp
2420	scriptinterpreter.tmp

Modifies file permissions 1 TTPs 4 IoCs
discovery

File and Directory Permissions Modification
T1222

Processes:

icacls.exeicacls.exeicacls.exeicacls.exe

pid process

1404 icacls.exe
2168 icacls.exe
1132 icacls.exe
3000 icacls.exe
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082
Suspicious behavior: EnumeratesProcesses 4 IoCs

Processes:

setup_undertale_1.08_(18328).tmpscriptinterpreter.tmp

pid process

2992 setup_undertale_1.08_(18328).tmp
2992 setup_undertale_1.08_(18328).tmp
2420 scriptinterpreter.tmp
2420 scriptinterpreter.tmp
Suspicious use of FindShellTrayWindow 2 IoCs

Processes:

setup_undertale_1.08_(18328).tmpscriptinterpreter.tmp

pid process

2992 setup_undertale_1.08_(18328).tmp
2420 scriptinterpreter.tmp

pid	process
1404	icacls.exe
2168	icacls.exe
1132	icacls.exe
3000	icacls.exe

pid	process
2992	setup_undertale_1.08_(18328).tmp
2992	setup_undertale_1.08_(18328).tmp
2420	scriptinterpreter.tmp
2420	scriptinterpreter.tmp

pid	process
2992	setup_undertale_1.08_(18328).tmp
2420	scriptinterpreter.tmp

Suspicious use of WriteProcessMemory 34 IoCs

Processes:

setup_undertale_1.08_(18328).exesetup_undertale_1.08_(18328).tmpscriptinterpreter.exescriptinterpreter.tmp

description	pid	process	target process
PID 2996 wrote to memory of 2992	2996	setup_undertale_1.08_(18328).exe	setup_undertale_1.08_(18328).tmp
PID 2996 wrote to memory of 2992	2996	setup_undertale_1.08_(18328).exe	setup_undertale_1.08_(18328).tmp
PID 2996 wrote to memory of 2992	2996	setup_undertale_1.08_(18328).exe	setup_undertale_1.08_(18328).tmp
PID 2996 wrote to memory of 2992	2996	setup_undertale_1.08_(18328).exe	setup_undertale_1.08_(18328).tmp
PID 2996 wrote to memory of 2992	2996	setup_undertale_1.08_(18328).exe	setup_undertale_1.08_(18328).tmp
PID 2996 wrote to memory of 2992	2996	setup_undertale_1.08_(18328).exe	setup_undertale_1.08_(18328).tmp
PID 2996 wrote to memory of 2992	2996	setup_undertale_1.08_(18328).exe	setup_undertale_1.08_(18328).tmp
PID 2992 wrote to memory of 1952	2992	setup_undertale_1.08_(18328).tmp	scriptinterpreter.exe
PID 2992 wrote to memory of 1952	2992	setup_undertale_1.08_(18328).tmp	scriptinterpreter.exe
PID 2992 wrote to memory of 1952	2992	setup_undertale_1.08_(18328).tmp	scriptinterpreter.exe
PID 2992 wrote to memory of 1952	2992	setup_undertale_1.08_(18328).tmp	scriptinterpreter.exe
PID 1952 wrote to memory of 2420	1952	scriptinterpreter.exe	scriptinterpreter.tmp
PID 1952 wrote to memory of 2420	1952	scriptinterpreter.exe	scriptinterpreter.tmp
PID 1952 wrote to memory of 2420	1952	scriptinterpreter.exe	scriptinterpreter.tmp
PID 1952 wrote to memory of 2420	1952	scriptinterpreter.exe	scriptinterpreter.tmp
PID 1952 wrote to memory of 2420	1952	scriptinterpreter.exe	scriptinterpreter.tmp
PID 1952 wrote to memory of 2420	1952	scriptinterpreter.exe	scriptinterpreter.tmp
PID 1952 wrote to memory of 2420	1952	scriptinterpreter.exe	scriptinterpreter.tmp
PID 2420 wrote to memory of 1404	2420	scriptinterpreter.tmp	icacls.exe
PID 2420 wrote to memory of 1404	2420	scriptinterpreter.tmp	icacls.exe
PID 2420 wrote to memory of 1404	2420	scriptinterpreter.tmp	icacls.exe
PID 2420 wrote to memory of 1404	2420	scriptinterpreter.tmp	icacls.exe
PID 2420 wrote to memory of 2168	2420	scriptinterpreter.tmp	icacls.exe
PID 2420 wrote to memory of 2168	2420	scriptinterpreter.tmp	icacls.exe
PID 2420 wrote to memory of 2168	2420	scriptinterpreter.tmp	icacls.exe
PID 2420 wrote to memory of 2168	2420	scriptinterpreter.tmp	icacls.exe
PID 2420 wrote to memory of 1132	2420	scriptinterpreter.tmp	icacls.exe
PID 2420 wrote to memory of 1132	2420	scriptinterpreter.tmp	icacls.exe
PID 2420 wrote to memory of 1132	2420	scriptinterpreter.tmp	icacls.exe
PID 2420 wrote to memory of 1132	2420	scriptinterpreter.tmp	icacls.exe
PID 2420 wrote to memory of 3000	2420	scriptinterpreter.tmp	icacls.exe
PID 2420 wrote to memory of 3000	2420	scriptinterpreter.tmp	icacls.exe
PID 2420 wrote to memory of 3000	2420	scriptinterpreter.tmp	icacls.exe
PID 2420 wrote to memory of 3000	2420	scriptinterpreter.tmp	icacls.exe

C:\Users\Admin\AppData\Local\Temp\setup_undertale_1.08_(18328).exe
"C:\Users\Admin\AppData\Local\Temp\setup_undertale_1.08_(18328).exe"
1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:2996

C:\Users\Admin\AppData\Local\Temp\is-2VR9E.tmp\setup_undertale_1.08_(18328).tmp
"C:\Users\Admin\AppData\Local\Temp\is-2VR9E.tmp\setup_undertale_1.08_(18328).tmp" /SL5="$70126,132362071,185856,C:\Users\Admin\AppData\Local\Temp\setup_undertale_1.08_(18328).exe"
2⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:2992

C:\GOG Games\Undertale\__support\scriptinterpreter.exe
"C:\GOG Games\Undertale\__support\scriptinterpreter.exe" /verysilent /supportDir="C:\GOG Games\Undertale\__support" /SUPPRESSMSGBOXES /NORESTART /DIR="C:\GOG Games\Undertale" /productId="1456487183" /buildId="50921790503031850" /versionName="1.08" /Language="English" /LANG="english"
3⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:1952

C:\Users\Admin\AppData\Local\Temp\is-NELLT.tmp\scriptinterpreter.tmp
"C:\Users\Admin\AppData\Local\Temp\is-NELLT.tmp\scriptinterpreter.tmp" /SL5="$40180,569884,191488,C:\GOG Games\Undertale\__support\scriptinterpreter.exe" /verysilent /supportDir="C:\GOG Games\Undertale\__support" /SUPPRESSMSGBOXES /NORESTART /DIR="C:\GOG Games\Undertale" /productId="1456487183" /buildId="50921790503031850" /versionName="1.08" /Language="English" /LANG="english"
4⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:2420

C:\Windows\SysWOW64\icacls.exe
"C:\Windows\System32\icacls.exe" "c:\gog games\undertale" /grant Everyone:(OI)(CI)F
5⤵
- Modifies file permissions
PID:1404

C:\Windows\SysWOW64\icacls.exe
"C:\Windows\System32\icacls.exe" "c:\gog games\undertale" /grant Everyone:(OI)(CI)F
5⤵
- Modifies file permissions
PID:2168

C:\Windows\SysWOW64\icacls.exe
"C:\Windows\System32\icacls.exe" "c:\gog games\undertale\options.ini" /grant Everyone:(OI)(CI)F
5⤵
- Modifies file permissions
PID:1132

C:\Windows\SysWOW64\icacls.exe
"C:\Windows\System32\icacls.exe" "C:\Users\Admin\AppData\Local\UNDERTALE" /grant Everyone:(OI)(CI)F
5⤵
- Modifies file permissions
PID:3000

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

T1222

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\GOG Games\Undertale\D3DX9_43.dll
Filesize
842KB

MD5
2a3d55b34d81b26169c798d02e8f7d31

SHA1
bcd5894308f5f5128d61603a2a966e7aeb1f76d4

SHA256
d6d520056011b0548cb7a79af10986543da67cda4d2a2e6d7ce59fc198dacbf5

SHA512
89f0dbff42902dde2108e5368b08d4897a10cc5a93acaf1d6849f9122a969f2ae86109670f69c9f3376a3cfb459a4e36a30e77aa3a3bf9a68a20d52e5acb4657

Download Submit
C:\GOG Games\Undertale\__support\app\options.ini
Filesize
97B

MD5
40ede613879f6406fd90c4bad9ba08cb

SHA1
234d1a88ecb5eb2f945f0f8959df69bc154a4677

SHA256
52a59e5417778aac32756ac0617d5b00fd47a9015e54b3865fdc17a867b58cf9

SHA512
c42b738b58298bdd8866b6f053df12a13b9eee3917e86846a7fa3d00248a7dc1c7658878c06f51d6b9e0450a4eee940c61d56ad11fe32656bd64f9341abdcaab

Download Submit
C:\GOG Games\Undertale\abc_123_a.ogg
Filesize
40KB

MD5
0db017fdf19134876127376ad1d56a8c

SHA1
0f78b9af1858c6c7c01205bfaa99f3c4934c510e

SHA256
baf01fcee2fa3cc9769af20407a4de9b30027a5e651be601808ab521485fea55

SHA512
7fb4cb4a54ffe57ac7f5989f969ec8b6e0088d319479ca83c69b0ce71b8a06ef480a8184ff8e3bb827c7bb6f784a94654003dd63f59983a601997a989fb9b67f

Download Submit
C:\GOG Games\Undertale\credits.txt
Filesize
11KB

MD5
85ef2348d70f81de3b00be93348361f1

SHA1
6c734e646ca25e19391099e32aea9f1a006722aa

SHA256
5e5ab1852c4734a547e6143ef643b43d211e3cee334e949cb59fffb51bf04098

SHA512
01661bda880aa2ea085fa98eb565fd5b938cb86d673908fad80980ea3a13d0a5255a431a909388740a33b8e33e2ae4b4a38c9de141eb072048d47d81aa6268e3

Download Submit
C:\GOG Games\Undertale\data.win
Filesize
1.0MB

MD5
bae533de89fe142a8a32ff7465e0b8d1

SHA1
c1654eae89e2af95f194fd54596f692cd0e4a5d3

SHA256
e16bad1d69ca178ffd2a56944984b102f0c291d5a23b91a0e8b2235225bed3f6

SHA512
cb0822d6573bb085c64e737dfd3472542f2594004c7548ac878378cc9d8b97fe283c9a176b6ba01f76d5baaa0f09ed94d504811d9180844ec6f468c0d9ea039f

Download Submit
C:\GOG Games\Undertale\goggame-1456487183.hashdb
Filesize
7KB

MD5
17f41c26cc277c59e53c5bdb54343776

SHA1
5891b83ff264d03f2a1aaac2f167b421824a3f51

SHA256
07f899a497faa6d3befbead9cc86f8ca24fcad719426f106a1eb2c28217743bc

SHA512
450514f863398b115a5870941a00570879f4d1cc74a25ef51c6dbd217448769d0d57dbf67b14c8ecf1c8d3d2d7b08d4539a50ae1795a4b7943e59d776be91f17

Download Submit
C:\GOG Games\Undertale\goggame-1456487183.ico
Filesize
79KB

MD5
d292e2349754e997b1fc3ecc8c9955de

SHA1
3decdf189a116665fe52facafc072dd974ad27d8

SHA256
6cba65c3c927a68407e8941ac8b12e3089130709efbdb2399123d084f1475d54

SHA512
29f0cccdf471018b10cd72b80d9860d33ab16aaa0db8ddcc20ec664e72a61c9f60d37b442cdca415cd227fd53594632d0de8ed02a742828d26c2f27f33ac45c0

Download Submit
C:\GOG Games\Undertale\goglog.ini
Filesize
204B

MD5
65fb907e1079dd47bcfe5deb5893a39a

SHA1
603a807ab4dfbeb3e94023f9b6d2bfe0ef8608f2

SHA256
3c4634e30c9c8b54de5127cc6bdcd0a3d3d739313994810f154096d395c2c87b

SHA512
b101d5425521180c156c6ebb441f1a79664911ea46193a6cc6e489ba8c8d00fa49ba4e601d0eddb1ccb8c03ea25178c0fae436f295aab6026fe01e41f19ebc03

Download Submit
C:\GOG Games\Undertale\is-S7BDR.tmp
Filesize
518KB

MD5
a2abd8ee7f3acf5bc4084ac1171b6042

SHA1
e38eedd92d751f602bc43a35bee59ddc9c20fe12

SHA256
2422b8d4ed907033953eed56276b7216f1e99e0a1f37b6f28be6aa316213fa02

SHA512
43e4b8297f574fe96adcf222c1e3579866d0fcc0eef1f01a22736c9d8b71e5eca470ad1dc5700b99a0605f606da7f9da2cbf9ba25d63bce5104143a4fde800c8

Download Submit
C:\GOG Games\Undertale\mus_a2.ogg
Filesize
186KB

MD5
ee6282e61da71efdd1da75676044c0a1

SHA1
6caffe6d1838fb16138ed30f1f89890ac7e5df5b

SHA256
244ca709fe88618b2ae34a2767bdea7ea6b79df4f795b5f4fc00eab3c03e2ba7

SHA512
3f81d07e73c0dbda25c3af2440bcf1e25e1dcb568fd1c2d337d615ee833179053f5e7983048dd5db258a0116604abc27ee3919397939e3dad95c23ae0b983cec

Download Submit
C:\GOG Games\Undertale\mus_alphysfix.ogg
Filesize
36KB

MD5
dcafc0871eb93693cc5b0f9bf169df55

SHA1
cea9c096f8285d77b348d92fc26e27d45a889424

SHA256
6f4cd2037b27e6dc0ab6044ce58a2e66db380a13e67b5167d50d9caf02e37ca0

SHA512
369a3bca748b14589da221746d681191a90221337c197871952006efe184c9eb9b499107013d90385056b9d44d496a74336cf603eaacb81843d600b186c5f608

Download Submit
C:\GOG Games\Undertale\mus_amalgam.ogg
Filesize
903KB

MD5
b962c05bd42cf19f3a61c8d7e2410677

SHA1
8e027bf46c905bb154bc9fcef6c4d7bc02923100

SHA256
249e51b1e8a06e4b1b4d9387a6a5362cbd65ec89e06f4d5028308402c6e1371a

SHA512
a981387faa1c440bcf2e6d646bf55cf0d945c8f997b8aa00acff5144fd31693f7f42dc6f72ac2ed95af8f408aac4a64345b758fa7391e97a4cf3a1e5139b22de

Download Submit
C:\GOG Games\Undertale\mus_ambientwater.ogg
Filesize
24KB

MD5
c5d95352887d3ba20b0fff600284822d

SHA1
aa3b09a27a46a196baafb03736b9493d9933e8cd

SHA256
195b5bdbc3066c2025b28667b5c7f72a22b01cd0f629d9601ec3c749858b706b

SHA512
02884b849ddafe1b736497b7bb1be0067f1d92842940c0435a292384023dad97a5880c3cf38e041a7630b6f908b78c1f0ec84840f05a04ac63d2d134bc1fdf51

Download Submit
C:\GOG Games\Undertale\mus_anothermedium.ogg
Filesize
597KB

MD5
28e8d5c6c14584b0f083339b05050415

SHA1
e2035dfd514ee09d51b42ecf86ec34f72fad3df7

SHA256
b4f79e1d90027514ffd806ea29fd1193c3a8cb6f00707c90cdec17a4cab5066c

SHA512
fb99143c2fca6c9a2a2c4de0100b8d8a21d0c241486284186b7ada48c5273580213b309247a81318092441b602d6c2c888d5b13cc075a46be0da6c4ccb21f3db

Download Submit
C:\GOG Games\Undertale\mus_bad.ogg
Filesize
15KB

MD5
92952e0422d298e61cde62bb2a5f5f88

SHA1
b98324d43c5b5e59a9e767ee6b5db75c74d8fa57

SHA256
79d6af19bc9ac74221af85e1ab5fa67c466b08ede7979090870d93a368f5abf6

SHA512
c38300948b9c8553af11cf01f81a3d7d6875d32f40934c27030b844e206237ff36c1499d1e559b6b21bbff6c710a01a2b3e24f043c2df5b49e9c00ef4d1ac5aa

Download Submit
C:\GOG Games\Undertale\mus_barrier.ogg
Filesize
287KB

MD5
b5c9f5d843f07bdff5b49a600a9737cc

SHA1
3779f0e0a31cf06186db71d8d81cd7111012995c

SHA256
3424de311fc694a93a8bfa7fbee2cba120f7377fea174f75a2cf6fe86dafd9d0

SHA512
3d9281f9746ba012a1dc71c2c52e45c5742476bea738cd443b519ffa3d9c16620a447bc227bde7d65ab186942fe5d4ad3d375b9e37a1ba2a95860ab7a79ac45c

Download Submit
C:\GOG Games\Undertale\mus_battle1.ogg
Filesize
642KB

MD5
336e2f63c6629fcf4334b145e1adc0f7

SHA1
d26f7d8a4c901c6fed5a98d91bddbefce35d7c52

SHA256
7101b56bf94fba741e8d36ccc51e10616808a1d6d898e970c56b824973c6d529

SHA512
0367ac313439f22eb036d41566d737783cf59914f7f94b6d3f3aed61544c8ab43e2d75ce5f16f710dadfed01e36b30a1d82fc702018389d2319937d297b955f8

Download Submit
C:\GOG Games\Undertale\mus_battle2.ogg
Filesize
706KB

MD5
0a242440e79ca4ad5c5ad85bb4194ffc

SHA1
c06f6e41d67b2d7ca7f53616102ad30fd8eb3d2d

SHA256
c75329c5308e0e2184eb106dc7a946d54bc51ad0ea2eb790c0bfad8f7f1dfa4d

SHA512
082e8f684a3e10a2ba0eedc71f775a2b56f36a751ad1882ae5eb70cefd4a713a0de12e7c6bbe153aeb22d2c8628aaecc78cbfdfe92b72ef55574da1f9d068f8d

Download Submit
C:\GOG Games\Undertale\mus_bergentruckung.ogg
Filesize
135KB

MD5
33d2e6dba7df72da33035c3be20152d1

SHA1
29643f786d78007d810af7cf389a0c243b6e1594

SHA256
61c0413b9179fbdfebcf8f2cdd122d8dd142887c35aad12f47dcfd7630dd5f78

SHA512
54c918db41731c1896cfc9179b7522418ad17e78e1ac853cb5d1b65aa0e31f1c3ae1794455047eb70da491c52f72e221096c664f04bf1daa70f5664fc87fc13b

Download Submit
C:\GOG Games\Undertale\mus_bgflameA.ogg
Filesize
53KB

MD5
67f5e7072204bc20998066de1ff20e2e

SHA1
3aa37c53f9d5ac5507e5250bb07900e61c897f49

SHA256
0c9eee11f57a00368f7fa165ece1f97c345f03c28826d6dd55c49006c545177f

SHA512
7313a86d3fe5e0d151b6a503844758bb1af4713d1be313e23eb9d34ff79fe1666fb8d6c6af03a6f175ee8aa611e331aa56323bb7baeb1577b7e0804243fdeb8a

Download Submit
C:\GOG Games\Undertale\mus_birdnoise.ogg
Filesize
331KB

MD5
85e7b2bc28a0e551dfdedd1f6646b681

SHA1
a1aa92d97f6092979320544942edf6b746a67527

SHA256
f68530da7bae270a3779be498d04145fcd4012cbccd0720501263f1be59b2f94

SHA512
582ac73e9ae4a0643134ddba3d6bb918b017e540a1b87834b23dc8e30c3d41bf6b5b34afc35a1031ba7e4c6f3d84bb4c6f994657515d57ab297f2ee354fbb512

Download Submit
C:\GOG Games\Undertale\mus_birdsong.ogg
Filesize
251KB

MD5
fa7183f5b9d75a05bff866183f0166b0

SHA1
aff7e644834cdc5bd769b45cf73ad43dacf96be9

SHA256
618c46734918c8211b58a636c0a4280ee961842b22c91135a9da0d6970613be6

SHA512
5047f6628db2a7806f2d47acf01a973bb89c9d0cfde8a2dde956224c258443598345c03dcab6e39809748d39c140c1a7629722acff007805b7cc5b7e5e31c4c1

Download Submit
C:\GOG Games\Undertale\mus_boss1.ogg
Filesize
544KB

MD5
793857093d7e55734fc89f0cfd4c0546

SHA1
491dc3284ceb68166daeba44c3ddb2d7be1d739c

SHA256
10a21b85bbbb9ec218df53edfa728c1bcebc2a53e101a2fb76f514e0ee91a9f7

SHA512
76bff633d20847a9312fe32c091c2ed39e1d6613ab89ff3bbd15fe667c0f75140c58ebfde3f281ee7c9bec7127862d868e6925213f98698e2bf3c520ac112f12

Download Submit
C:\GOG Games\Undertale\mus_cast_1.ogg
Filesize
411KB

MD5
91e6c5088ff417ff22e469fa057c7ff0

SHA1
e15bb06a48832fea9e5a29c224950c90dff3ad80

SHA256
d7c39d948c7e20e72dfb43d25d1c4806390495dd8410ea2c8071ba3f32efeaa1

SHA512
75d76502cb1242c8a9ecdde50e2d76dab039826d2e15558823bfa370af31834c88c69e0b2fcf2190abd2272547b510325416e7142622b7e7cf8ad981bb5ef92e

Download Submit
C:\GOG Games\Undertale\mus_cast_2.ogg
Filesize
213KB

MD5
0e757e12c0f27d8e6faaab0d67d9189c

SHA1
5c7b31369419618c61f072c4631fdd8cd6f8a7d6

SHA256
6b061c68869002370fcd2725977f01c2a68fa592d7fd0ad934f680600a1b6c1f

SHA512
e15803787eee5e3d40ef3cedecea9090a6f735d6b193c771b2f37fa093b5371837e1b5807ddef9d81e0e6826717daea5918f27750b3fff5cf95ed9aa80db4c8d

Download Submit
C:\GOG Games\Undertale\mus_cast_3.ogg
Filesize
409KB

MD5
5f1964a271e8c6c34f51e5e67e236114

SHA1
1ba1490bddf8ff05995779ccc4a08438875db20a

SHA256
1f263161035bed24f70dd343587c447e545ff8890f3fd63587b0e49dba43debf

SHA512
57fecd3f16877245b1c9a84c8a960d262d309d9e1dfacea91c1b5714f5bf04d5495a5e1fe95364034d44e0d44b09fd6006565df6648920c69ac91085e64af766

Download Submit
C:\GOG Games\Undertale\mus_cast_4.ogg
Filesize
442KB

MD5
9dcad4b755211f2e792bed4dac5320a8

SHA1
016947db4db906bd7b0563888f4441d5395cdfa1

SHA256
42c893202b080defb796a353952b892f14e04cd740d48d4e7f712eec472ba05f

SHA512
220711212ccc8f479482406b2888975f28f3bef09cf830ae9aa97306362a4d59ab2ba1c50801b1bd959b8d963fe99c1375bc34f5403a8d6d8819a2cf4e8e701a

Download Submit
C:\GOG Games\Undertale\mus_cast_5.ogg
Filesize
594KB

MD5
0d2dad1fd97cb8d098cd0603fa335a88

SHA1
06a637532222f0bddf464d136464dd2ef8f38ce2

SHA256
63b3173ff7565b2207498ac874d63cf9dc0bb9fe6f272c44be28ee9e815c4dc8

SHA512
132eedb691670837ce952926db0110d9b2a99d41abae675da8c38ba520af8c7f40e46fca7b840c76e4d00a1f51d96cdaff921a740492afd7cf7537dacbeb8bd4

Download Submit
C:\GOG Games\Undertale\mus_cast_6.ogg
Filesize
208KB

MD5
87ee8f9cccff5d32e054c8737bde915d

SHA1
dcbf4e5a137f248b8c4b404f847b5181fae4ee8d

SHA256
5c35750896f5eec85c502a00b935c7a96a6aa6b8655936ae99059fe2bbc6b9f9

SHA512
13fb4afa9fb65e95092de7ed9bde3cc56a9172dee4fc89569205fbf672f936cdb306fc912e8f7bbef4e420534561177107b085f976861d3d580fd25a6aaf07d5

Download Submit
C:\GOG Games\Undertale\mus_cast_7.ogg
Filesize
183KB

MD5
aeefd8eee053a0c3186efe9c5d0d6e81

SHA1
a0957dc42d8c3bd8c064a3b91336ff115d47897f

SHA256
0c5d9697e3d40f21f32b027026e8c117b242bd522ec0f08abf545b236f6c7bc6

SHA512
6bdd0377d2fe3aa59c0b9799fdc0397f6cda8a3149acc2e2e6b267176f0970a9f68d3b260592577ebff81c775181dbebcbef27eab21f2c0b2da83f3d518ed297

Download Submit
C:\GOG Games\Undertale\mus_chokedup.ogg
Filesize
332KB

MD5
daa93e1a922cb382e5c4786ba4b1b295

SHA1
c44b295f504af99a91f760c912851028d942ddf9

SHA256
9732528d97466b8b302f74797dbbcdcfcd84df521e5a33022aa10018d9a1cb15

SHA512
aa71908a19a6ead7a15cdee4d2d915d38194b7e9b0299f472449875c23024096975cbd934d4902a39b7c8f8604dbbec3f430ea690acf6beaa1448d0f216d9229

Download Submit
C:\GOG Games\Undertale\mus_churchbell.ogg
Filesize
77KB

MD5
aa4061c1c89e8221087449b54f370784

SHA1
d33f4acf8838d0ac962199191590b838fc1068ea

SHA256
efeb11babe4a529587614df295b473896e03393fa73c897dde9b02120389d620

SHA512
bef6790840b062bca813579093e25a72570d428fe5906ad116011de6baa337bafc9016ce26cf689752e5c0946f687c8cf7c56f69577fbb013a57dd346b73d55d

Download Submit
C:\GOG Games\Undertale\mus_computer.ogg
Filesize
17KB

MD5
bf3fd98aad1f2414f286221bf127e61b

SHA1
69d7ba47a60c69490af8429dcc2808630d73b03b

SHA256
4c4062d9f91a6801715aeff168ae4a6568f5e280b729691e6962331c270978c9

SHA512
0c266c3dda15d38572621e10c4cd48ca3b2e142fc3af73bcdb3ac97efb068e269c70a507e6590ae20322ed0956fa174a75c8adae4f96fa0b91fdd2de7e8b88ee

Download Submit
C:\GOG Games\Undertale\mus_confession.ogg
Filesize
210KB

MD5
edfd9d675bb2a2ce9132f4f3e5c9349b

SHA1
06d4ccc7727628d6c2d1d787ace97570e60e7bf6

SHA256
a4ca01491ad3ebfdb466a1b129f59fa46dea1d02b8761ac81c016432d9d0f9a3

SHA512
fa8eff518047ee267e51ab5a69a4ec5f270250b6b26ef817626b603b3b12fcae7f76c49402a6a342619bc55af92866ecc7b9bd84b1906307f51849aef984042b

Download Submit
C:\GOG Games\Undertale\mus_coolbeat.ogg
Filesize
23KB

MD5
2d721315d4b952cd0413123744470cd5

SHA1
71905ca68789f608cd18b75811ef2e464a3c6061

SHA256
b2502de775ddd9cd544958795d6f5b4b771249cce9142424b48e732cdaa51699

SHA512
76d7833debc58f2f55a418657ae1bd0dcb48ec851a2d66620d16ecfbbe3cbcb04ec2af916ff2eaad9bdf1df7b04e9f8a1fbfffe31039ecad9ee2796efa9f3f30

Download Submit
C:\GOG Games\Undertale\mus_core.ogg
Filesize
321KB

MD5
03fbd43964997f89e2f08f39b9e7a124

SHA1
a392665b94a0712c747d3674b31482643dca6e63

SHA256
8b3274fbadc212af4225694efb555684986da745a322f5fa58e89ad50cac14c5

SHA512
2f5a61ed15ad58698388c3a07793baba245496b71091e61fd0136fe806e0c01817f7459da0a426e47714c39b455d6a6229385e1aa66d03aa9d797aa113f64f81

Download Submit
C:\GOG Games\Undertale\mus_core_ambience.ogg
Filesize
60KB

MD5
2cdb01b7748ec9e635897ce6ef73f56e

SHA1
7caa08c67929d607feaba45432447c35f17f95ac

SHA256
94169292a9f99fe70992d4c0749bbc1889bdc7565dccdd83e3c73abd2c9485d5

SHA512
09fa5dd823a5d5e9b5c59e088d3a97dac722c06edb5a3145cafd7c3fc3288a01cc307a4f77a4b305cc65134fd5a53410f854e427f0ec6d0681293cae2e7088eb

Download Submit
C:\GOG Games\Undertale\mus_coretransition.ogg
Filesize
119KB

MD5
fa3925cec8965ca76dfc062b7e1ae9eb

SHA1
5b28e1d4ba5164f4f05387b1cac9c65f01333485

SHA256
0b5d6a8dfbf5ad68b0318808f3c8edd0da2213fbf67b359f3fbbcec854f3374c

SHA512
9a4a2ad218ce66d6a0d9f1fb1c55839c01a23c73b32a0329b5c6d1f7533024837ad170592e14fa4ef69cfda5f885b01a6f2b9b6302a0bf0f160b6f5451b2c971

Download Submit
C:\GOG Games\Undertale\mus_creepy_ambience.ogg
Filesize
139KB

MD5
466bf722f3d469ce001682992f4240bd

SHA1
8304d66bfb92a8cc583023bd060bdd78f97b7cb6

SHA256
105e5f99a30e1b1836b8d3980ae1be289e06e0122e91d1f7910181a7720e9d6e

SHA512
a1421009ad5f4d07e0fb33883aa82a5e6fcc008386fb7a4718d8312d58beeb0aec7bd419c4b464aadc760b2c1daaf0907347939686cf25497f95d47f38d72dc0

Download Submit
C:\GOG Games\Undertale\mus_crickets.ogg
Filesize
294KB

MD5
ac888b125a1dfd024ad08af54863bc88

SHA1
f8b2e04c1f128f71dbb0ac76056b740b6d3b1a4c

SHA256
a8e1cbb3145e879b283f56ffcba34e8edbc53fde2a15dac2e1da451988cdffe9

SHA512
b5b798d0db9001f8bc7b5a8f88c440341ab4553d0c72f076659292ebfc39411cc7ec1752fcc7575bbd5f7a97d59f975d77eaeacafaa77f2a4bde85b87c80dadc

Download Submit
C:\GOG Games\Undertale\mus_cymbal.ogg
Filesize
53KB

MD5
90a422f31063a50989b358708e68f109

SHA1
1c4605a43688cb893947cf0342673e9a212f6780

SHA256
ad536a8aef8f7485ff1f9c76ea9aadc156b7d3702d82078165e38a39977d9d85

SHA512
05301abcbe370deb41f8271891c6418684b9a461e6fe38354b4effe6cf053cb1c4963824b342e8a7492d9e3ff21c4bfddab95d88e83a5bb222bcffa09a6c97a8

Download Submit
C:\GOG Games\Undertale\mus_dance_of_dog.ogg
Filesize
113KB

MD5
b4e28f5b3e88139674359c3a97f545d1

SHA1
7e33a017272db837ee5172d8cb0dd4d1ef538c95

SHA256
3dd733edfe675fd5ec84a0186d2784ff83ddd0ff69c1b96c975be5c0086893a7

SHA512
238be7129ed51cbb2062d1c9c382a528e43abc61d375a1007b2f173e92f4197635888bde5ad8adc974588ae8c4a71b8c07fda314c30c274e1d1cd662cb73698d

Download Submit
C:\GOG Games\Undertale\mus_date.ogg
Filesize
378KB

MD5
8b3288d8c02b1e85c1ec544cf128bc7c

SHA1
7a7c437e22bff0783875411fce4d982b4066b6c3

SHA256
477a2287cd0b0a40de298d228044b16e61c80891267a3ee0f17eabccfbfff70c

SHA512
7a58f73a996a6fd5f2abbe3774fe25d97b19d963f750e5d50c95b1916d6c3f01fdfe50769831991dfb1085de9c76bd3bf1c3cfe64f474cb38c60b58408fa131d

Download Submit
C:\GOG Games\Undertale\mus_date_fight.ogg
Filesize
380KB

MD5
f48e2cbc55d6d7bef38054db905ced93

SHA1
8e299d008315c75441539d38759d6ce89ae3c742

SHA256
7ccba51e2205f014e550f472ef847575bd12b4fec677462a274a5e2af0468c1d

SHA512
c2923da574d8e2159e34ca9b32f88c6db9948ec11b6ffd6ce30e342e708097bea5640847f7dd5eac5341a87c55bd980fcc13180491a6079c3fb06e4abf097452

Download Submit
C:\GOG Games\Undertale\mus_date_tense.ogg
Filesize
256KB

MD5
3d799f2654219b0afd24c0925567b058

SHA1
a63d7d95d390c1e9fc03caabaf99141d52a060c1

SHA256
725dbce89301d1a7ef2d06db916b2a43595a4b28b56cb721364d6967a4649cac

SHA512
bbe066eaf9de33bdf33e2e581c5fa3c4385bc9cc9d92bb1bec528c4cbe461cf9ed5097648c3ff6b890defb66cef277d86d72f40a607a1a947c087424f975ca2f

Download Submit
C:\GOG Games\Undertale\unins000.dat
Filesize
256KB

MD5
8035270a17462cef130076a4496bca0b

SHA1
d58b046ae051cd1d6889ddce181015bd9eaeb219

SHA256
93c707999558a44914f3ac6ca69264ed219ebd0a5a708fcdbe2cd00c0f71a72f

SHA512
17a911db0420c20d6500a81fbbbc23ef76ac5995d92f8439aa0a0a4287d9c8735ce5164e1973cecfb8c55823fb5a09331071e23bc31f3549b19a98e33c70ad45

Download Submit
C:\GOG Games\Undertale\unins000.exe
Filesize
597KB

MD5
4635ee0019279de0893c43d45f72ac5c

SHA1
21872b056c603836d95a618c828ebb29521c2739

SHA256
5913a666c51429d69b0ff81da876ead29822fcdadd860269deb8460cd7078657

SHA512
7b697505a1034b3a53e26b876c83169015520d9e14f8c37cab51dc301786249359812c4f77460d3c801a6642d08d13617f9aed9e56ce2495e655728d65c8d229

Download Submit
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com\Undertale\Documents\Support.url
Filesize
116B

MD5
e9d4aa9b7a63e065bf1454d024be8e25

SHA1
5568fd6ca3332c9b53830634c4c2c8f7d2a9e201

SHA256
292c0769418d52376dce7c0602e5699b02007d6207ff375555d5b657a3adcdd6

SHA512
68b17a2f4e653d4c930afabda7e9747c3044e972e7c654841dc4128e00130c07b5f4ccb1cca88e6c119e55df410d469eccb02d680737bc471bd635afe310cfac

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-BPU09.tmp\1207658702_english.jpg
Filesize
195KB

MD5
ed224bf981e588b310321e3364cde5cd

SHA1
b3a7c43742304b6541bd83b04104ba0511103cd9

SHA256
988c25e3d92bbce791a012beabe67b70d0f708fe658a75304261f9699de0c063

SHA512
9c1ee058e5adeb765b435c4de9b1c9d211dbfec1d6d9b78abb5c38887d21a9920d35cb61b8139662b03acc5b74132c4bf267a91927587ab59b490cdf519e3902

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-BPU09.tmp\1449139823_english.jpg
Filesize
192KB

MD5
c86d1d0ecf523cbc44a0f3cff1f81586

SHA1
a906d195974ef3afd6d7da7d820dcc9a4efe3987

SHA256
5091f3f1bd82d677b364080052f9166a0b85ae179c6ab6bbd6b87f4203c14e1f

SHA512
fab06cea1446b58abeece64a7e4bcd5e9f8a6ca75aa2255ae65f3e5d88c81abd17be9946e3702a30d7978660ec363c73c4e9483678558e8a79ffdfcaafd24bba

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-BPU09.tmp\BigOK.png
Filesize
3KB

MD5
5b43a5d975a53f4fc1da67ce9f7784c1

SHA1
8543fa1e471030049942252b23cb22e0880c3af5

SHA256
59d8bb3e87a89ef523c0495addce38d69560af42aaa82f56dd41b12e6612c13a

SHA512
5dd5c4e9859a555a4a32da76f5231b44f7556274c6501da530b2cdd570bcb4675f710bee708322a40ed3ef9280c0d652b4e7ef0e9eaf128c08534f59291917f5

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-BPU09.tmp\EULAAccepted.png
Filesize
2KB

MD5
461dfeb75927bdb39f9db5348612a611

SHA1
b7893b1fff6801e37ee7337d876962a09184941e

SHA256
0de278f5ca6d8570d9bda592268a14a28b87d3631fea2d25721947397aaab79c

SHA512
68528cf45c81c2c024a672f42c2cd6d4f72c015b443f103ca21deb8ee2bec4f4027490e7f33b5338a87537b5bf7f255f2828aed149f622155ec89cc81687651b

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-BPU09.tmp\EULAShow.png
Filesize
1KB

MD5
c596bc9111edc702bbbb29b70984254f

SHA1
d4712c7b91ff4f8994e7907d31357c42eb47c738

SHA256
6112851daea2aaa7174e8cfac4a0f61c968bc090342503804c476eff47cc2462

SHA512
db50d0a39ec644873a03d64552fff1776cc94f016e8dfc8918e65aee94f7529a6de4637567b5e65c4ea988f3775785c4b52c2d96fe8dbc52b1e21ff59c737c2a

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-BPU09.tmp\background.jpg
Filesize
308KB

MD5
79dd8f2494aef70c997f7627449d7e9d

SHA1
6fc00daa1c26ee76a90a55e39e0c3a72cf4b36e7

SHA256
502d1b67b2a2b390753fdcafd9b5f33c97796b580eaff893ba7360931092989f

SHA512
3af7da0eb62a38a3a4445cd0bd563a8fc7c3010830228d2bc075ae7b5bf990ca20bef806116c60d4a367548a821587328ab0509ab8ba73e6fdfc0a7be30a6c78

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-BPU09.tmp\btn_md5.png
Filesize
8KB

MD5
3befe9739354ee24a0b1ea8df05ce274

SHA1
ab0bda986a8c46aa19f57b75a2b7b22445a3c625

SHA256
b0193ab375f604fa4a25cabdea8f713babde1c07ab562ffc5679352c8e01db47

SHA512
ac016a59e0bfc9b22c376ae5d498c5660893a983d932b2bd502dabe032883c69e79ea8d93c2db49f95415c3cdb068e9f7d1d85527a4f9e68e065a989852d09dd

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-BPU09.tmp\error.png
Filesize
726B

MD5
df10adc25b673e74e19971c17bee5a98

SHA1
ee16fb1cf9491f5e611282f0574b27d76fede412

SHA256
142b16dc6239421691fa6e619d1a61e61176d89fa018a88b46893c29a57aad8b

SHA512
dc3de10e0321966cbbfb2e57b3b41da6f26dff0c7233a47469da58775b5c471e6b5181e4d4ffc81ef8b83dbcad74ccc1aad7678518f99c9185a441d2a23e010f

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-BPU09.tmp\ok.png
Filesize
1KB

MD5
103c1368e60806b1b7995a0894eacf87

SHA1
971392527f6e4b655044773132505c901a6b5469

SHA256
0d37d4421a39ca8852eb6760b8e914302bdc6cfcc7b170dc1b6c9bb9be148b7e

SHA512
652177e94438aff102f2ed873b26f0985ebed134763852b49b1ca2698463c1dbeb85152f19c8e18d397229ec5cb2cd1d17c61d454ab7c425a2cab540adc8228a

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-BPU09.tmp\progress_center.png
Filesize
1KB

MD5
ad7fc1e37e40da38dd57adc446cc6c0e

SHA1
08033265deb9b45243cfa0065d98ffe13a039e26

SHA256
2b9dae87340e66b67ab1d8247d4a137628e324969f92fe1098f95a7c5bab2f43

SHA512
dd715d74f8e1ed6ab75b7b6530b383ac47040d8baa7728be160f6d230bf485a9cc54f15f7dc85b122ce56e54d63fa4890e510dfc89d9c9344e31f789ebac8756

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-BPU09.tmp\progress_left.png
Filesize
1KB

MD5
290c7612ad7a077028cd3dc78ce99673

SHA1
18995fbe39d05e4a1cafc7cc2e0f6fb745442f77

SHA256
85e39d909a7300fa2043ec42818582867b981401264b14fc5408e477ae0b4668

SHA512
799841f5b8a1056e78a49c823009750e4b93af130a6c4ff9dc6d386c06b88614e53b46a6df62f5a217d5c99da01cf4e2fe8392c73d39e81000045291cf24205a

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-BPU09.tmp\progress_right.png
Filesize
1KB

MD5
c25a41f022a74308d944d1e807d72f44

SHA1
83c6bbec3fb373fcc78ce0e737742100994cd6d4

SHA256
396a3351fe409328782ab138282cf9cec061a5a9540a3506700a620db1f54e7d

SHA512
d2f4449195f3e60c826cfabb52a083d829eb9d0509272977d8fdb33bc5214678949cd27d0594684594e0a3eda2351c39cec8d91923cb716ad144ccf2b966c8e6

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-BPU09.tmp\slideshow.ini
Filesize
298B

MD5
dd34f5881d26a40468f4eb1a01aeb892

SHA1
6065a141c70d7eff63a0e879dad4868e1868a3f8

SHA256
23ffd13e24c21c28893f350c1283c8faa856a45ef554ecff9e96442bc51bc214

SHA512
34c7652ff16ce6895c20b63e6d9b33626f14bbbf549fd3662bb17c464f501d08a4cff8dcdcbc153cd7b76da09060d7e42babc683e441f8dbe69438ab9b98bf02

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-BPU09.tmp\track_center.png
Filesize
1KB

MD5
3f2b0c22f8ea28dcbb82b39a16a039aa

SHA1
b3f4dfc2ea86fbdad05877b4c356b7fa8016731d

SHA256
794f9eeca7fd99846968376b76a296c927532cef1271325cbf555caa0d0d5860

SHA512
b4bf65d751717e85418947662d315ae3bcb177f60914832fefeeb95da9eddb75eb5531c62e5a5a70ff03c8a025b5a03e61ffbdecc9f483bea9684454ca9362d3

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-BPU09.tmp\track_left.png
Filesize
1KB

MD5
55dacb00cbe2825a8540236c5777a205

SHA1
18a52ac6c741b558500fbc1716d46b4fe4471982

SHA256
a8340fb5380c922b60ea40043590dba067dcfed6e22636851691df38156a3aa8

SHA512
2ea444cc1080f20761c8d71d96fcd04ef48254cdc1dc41d1d139f459ea5613fe12f6e4bd026bf33a5c01ff038e72e05dae2f8fba33ff517dd395e1911f10ff10

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-BPU09.tmp\track_right.png
Filesize
1KB

MD5
ddec70b6c49be3e8c3a7d01c2f6ff1c5

SHA1
5383271999f787c36b1dc8f3cc13c8407b195439

SHA256
f54cd6e42f2b2bc5cb8a15f6a28f1499abf094a519ebdf39f4c4e167312c9c16

SHA512
f43f94b194b5a7eafcec9e831f61042859c30e1af2e2447195bdd06b12c90982181161a1c1be5aa5223ff664f88e4891bd71cfffb7ef672d6fe4f614030e0e01

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-NELLT.tmp\scriptinterpreter.tmp
Filesize
691KB

MD5
eb0b27cc928f705aca93be4d55c40dc4

SHA1
67c11d955c8f379634d36d4ae6ca9b0b36251b1c

SHA256
393139db3513ca3a89862394f38f3a5ceae71804afb5ec77232eafe9bbe3f3d3

SHA512
315bb51e03663d180512446a7d5e61ce0af364c067d45928e184deb38da11686355f53019ed98879ea3c63fc3d1028f0e838678c4877f570714d7aa952b41c3d

Download Submit
\??\c:\gog games\undertale\goggame-1456487183.info
Filesize
840B

MD5
72c5257a93fbeec975a4a4175b50080d

SHA1
7b28af62c13cc120f3ac3e0ef273be85116d8d76

SHA256
adb26c3daa0b8511e8219b7ee950c8cdc527795f7e3b2a6a42355f27fcdc1b29

SHA512
f8ec190ba65211588f6156e74d1e8e842fe959ab1f8830e8ee1c9adaf35bbbbcaff7814560fa7e5c7e075c5d33422144070e114727229343087465f6895fed2c

Download Submit
\??\c:\gog games\undertale\goggame-1456487183.script
Filesize
419B

MD5
ecfe49b9be64a0e398f861c8d5f16f53

SHA1
465087b4a0a9045d3de22ec0ec92287acf26b47b

SHA256
f1c0f97ea9a8dbbb37355cef6f2d42832e97acb47b5e9bc327ece2d9b397c5a7

SHA512
25239ddf866e6d0e2fa53b033e6aa26978ae8a342ee123592e974e911db9fe130204e675bb61079cc3f45451663e5276062d391638ecd83756c4d9e14c52474a

Download Submit
\GOG Games\Undertale\__support\scriptinterpreter.exe
Filesize
1.1MB

MD5
cd0222b112878c6b1074c2354aa026f0

SHA1
395bccec3fb71ef8f0c4ceb9dee63efa21d948b0

SHA256
6dd87cb725336bcce9c75eed40fe544cd5cab32a2ea3ed09c6fa901a47db2f53

SHA512
8afaeef70f6913b898621516900c133465d5eef481217417caee012fc776c2a75fe6aa589cbf6b01f9423838be4c898f7cf2051ac8729ce22e7075bd24535f33

Download Submit
\GOG Games\Undertale\unins000.exe
Filesize
832KB

MD5
dbc69cd07c9821d76a62ef8ac9ea5357

SHA1
779288306efc4f178d638e287509ac375c9107d0

SHA256
5c1d0b5089dedb50bfab534a145ff8b34c0138d1e1a5fd801b75c539a89ecae4

SHA512
3c4fa8994e323feaa0cd715cb4ee9a10013471e7f4c92fe7a83d01f329c2a0f2fc724706fef91d69a21746de43f5dc4a5a304fbdcf715933ac3334dc3cb9c4d8

Download Submit
\GOG Games\Undertale\unins000.exe
Filesize
704KB

MD5
6d94f90495711377f9f8b2c83bcdeffb

SHA1
0a603ff4521f946c71310eda3e947889abb500cf

SHA256
e5a16365f7cf1bb3d828e566a4b08d2ff60ed34941e9a168e6bbe5034cc65b39

SHA512
53a6973f073e2f1366daf8b2aad33941476340122c192c58ec9c56e43905aebd90703e58da1966e00f354f7c35265e0e852f4864e49eada86415610ac2d6e448

Download Submit
\Users\Admin\AppData\Local\Temp\is-2VR9E.tmp\setup_undertale_1.08_(18328).tmp
Filesize
1.2MB

MD5
3602e9114e7254a36fcd909cfa490c3a

SHA1
198af4c93cbcf2195df4cb4aa42096a799c7f374

SHA256
a153c8db6f20f9c54f4bd1607b2502d3914662caa9615e1c557cf0abd8777bab

SHA512
eb1caf37de29467977088952b782dd1cd97969083ef60a0307aa4dd1dde1a44227ef4a871da775b05665f5fec780294c15d6c0f2d9c275e519054eb4628d7fdf

Download Submit
\Users\Admin\AppData\Local\Temp\is-BPU09.tmp\botva2.dll
Filesize
35KB

MD5
0177746573eed407f8dca8a9e441aa49

SHA1
6b462adf78059d26cbc56b3311e3b97fcb8d05f7

SHA256
a4b61626a1626fdabec794e4f323484aa0644baa1c905a5dcf785dc34564f008

SHA512
d4ac96da2d72e121d1d63d64e78bcea155d62af828324b81889a3cd3928ceeb12f7a22e87e264e34498d100b57cdd3735d2ab2316e1a3bf7fa099ddb75c5071a

Download Submit
\Users\Admin\AppData\Local\Temp\is-BPU09.tmp\crcdll.dll
Filesize
69KB

MD5
1d51fac9e2384eeb674199cfd5281d7d

SHA1
861dfdc121357d605d0cc3793266713788109eb2

SHA256
23e90ce5a1f2d634a7bf5d5d0522fafeea6df9e536e16f5ce91035d5197128ec

SHA512
921b00adfe43b883200960e8d0958d4e6b97f6d5cfc096ee277766a3e44cc7805a20877a4edf8bd4d9102bb71a20ac218a9a512f4f76bd751d3ef14f4e0a6eda

Download Submit
\Users\Admin\AppData\Local\Temp\is-BPU09.tmp\innocallback.dll
Filesize
63KB

MD5
1c55ae5ef9980e3b1028447da6105c75

SHA1
f85218e10e6aa23b2f5a3ed512895b437e41b45c

SHA256
6afa2d104be6efe3d9a2ab96dbb75db31565dad64dd0b791e402ecc25529809f

SHA512
1ec4d52f49747b29cfd83e1a75fc6ae4101add68ada0b9add5770c10be6dffb004bb47d0854d50871ed8d77acf67d4e0445e97f0548a95c182e83b94ddf2eb6b

Download Submit
\Users\Admin\AppData\Local\Temp\is-FDGIU.tmp\uninstall.dll
Filesize
698KB

MD5
73e7b1edd7e389d8fddf31273b34bd14

SHA1
c4d51c194b1901b186c815101424a58419bbcb3d

SHA256
5091cd5eef67f8f4cf9ae53b52160d6bedf7245c580d8a231595ba39e55ffdb1

SHA512
1d0673f8c87a42cff4f3440527824e192c2fa3c410227ed46aa05dc2fe068f170df771777cea11f171f75b7a7897e9e0d9eb9106db56996f8c95cbe7abef5c8f

Download Submit
\Users\Admin\AppData\Local\Temp\is-NELLT.tmp\scriptinterpreter.tmp
Filesize
1.3MB

MD5
25909912e6190316be2fca698dc86d7e

SHA1
ddeb3a1b00e537e0cd364af87727bf4d66d39162

SHA256
5a1fa7eedda77ab1b422ec7bfa6ff22dd10449da5f3ad557c147302913cffd16

SHA512
1913ee97b93f6b2b3cb88ccf02e617bcdce54427fc5d6c4030bf5108f9143868bb98beb1e82a86269d64fce482810850fa8f6b6f2694e478eafa4b79f4bc4457

Download Submit
memory/1952-665-0x0000000001330000-0x0000000001369000-memory.dmp

Filesize
228KB

Download
memory/1952-773-0x0000000001330000-0x0000000001369000-memory.dmp

Filesize
228KB

Download
memory/1952-655-0x0000000001330000-0x0000000001369000-memory.dmp

Filesize
228KB

Download
memory/2420-671-0x0000000000100000-0x0000000000101000-memory.dmp

Filesize
4KB

Download
memory/2420-675-0x0000000000840000-0x00000000008F7000-memory.dmp

Filesize
732KB

Download
memory/2420-772-0x0000000000950000-0x0000000000AA0000-memory.dmp

Filesize
1.3MB

Download
memory/2420-771-0x0000000000250000-0x0000000000251000-memory.dmp

Filesize
4KB

Download
memory/2992-196-0x0000000003140000-0x0000000003240000-memory.dmp

Filesize
1024KB

Download
memory/2992-275-0x0000000003140000-0x0000000003240000-memory.dmp

Filesize
1024KB

Download
memory/2992-663-0x0000000003140000-0x0000000003240000-memory.dmp

Filesize
1024KB

Download
memory/2992-191-0x0000000000400000-0x000000000053D000-memory.dmp

Filesize
1.2MB

Download
memory/2992-138-0x0000000000240000-0x0000000000241000-memory.dmp

Filesize
4KB

Download
memory/2992-133-0x0000000002180000-0x000000000218E000-memory.dmp

Filesize
56KB

Download
memory/2992-132-0x0000000002150000-0x0000000002165000-memory.dmp

Filesize
84KB

Download
memory/2992-131-0x0000000000400000-0x000000000053D000-memory.dmp

Filesize
1.2MB

Download
memory/2992-789-0x0000000003140000-0x0000000003240000-memory.dmp

Filesize
1024KB

Download
memory/2992-662-0x0000000002180000-0x000000000218E000-memory.dmp

Filesize
56KB

Download
memory/2992-684-0x0000000003140000-0x0000000003240000-memory.dmp

Filesize
1024KB

Download
memory/2992-192-0x0000000002150000-0x0000000002165000-memory.dmp

Filesize
84KB

Download
memory/2992-193-0x0000000002180000-0x000000000218E000-memory.dmp

Filesize
56KB

Download
memory/2992-194-0x0000000003140000-0x0000000003240000-memory.dmp

Filesize
1024KB

Download
memory/2992-750-0x0000000003140000-0x0000000003240000-memory.dmp

Filesize
1024KB

Download
memory/2992-670-0x0000000003140000-0x0000000003240000-memory.dmp

Filesize
1024KB

Download
memory/2992-215-0x0000000003140000-0x0000000003240000-memory.dmp

Filesize
1024KB

Download
memory/2992-788-0x0000000003140000-0x0000000003240000-memory.dmp

Filesize
1024KB

Download
memory/2992-660-0x0000000002150000-0x0000000002165000-memory.dmp

Filesize
84KB

Download
memory/2992-329-0x0000000003140000-0x0000000003240000-memory.dmp

Filesize
1024KB

Download
memory/2992-54-0x0000000002180000-0x000000000218E000-memory.dmp

Filesize
56KB

Download
memory/2992-397-0x0000000003140000-0x0000000003240000-memory.dmp

Filesize
1024KB

Download
memory/2992-457-0x0000000003140000-0x0000000003240000-memory.dmp

Filesize
1024KB

Download
memory/2992-11-0x0000000002150000-0x0000000002165000-memory.dmp

Filesize
84KB

Download
memory/2992-7-0x0000000000240000-0x0000000000241000-memory.dmp

Filesize
4KB

Download
memory/2992-753-0x0000000003140000-0x0000000003240000-memory.dmp

Filesize
1024KB

Download
memory/2992-529-0x0000000003140000-0x0000000003240000-memory.dmp

Filesize
1024KB

Download
memory/2992-591-0x0000000003140000-0x0000000003240000-memory.dmp

Filesize
1024KB

Download
memory/2992-645-0x0000000003140000-0x0000000003240000-memory.dmp

Filesize
1024KB

Download
memory/2992-659-0x0000000000400000-0x000000000053D000-memory.dmp

Filesize
1.2MB

Download
memory/2992-780-0x0000000000400000-0x000000000053D000-memory.dmp

Filesize
1.2MB

Download
memory/2992-782-0x0000000002180000-0x000000000218E000-memory.dmp

Filesize
56KB

Download
memory/2992-781-0x0000000002150000-0x0000000002165000-memory.dmp

Filesize
84KB

Download
memory/2992-784-0x0000000003140000-0x0000000003240000-memory.dmp

Filesize
1024KB

Download
memory/2996-0-0x0000000000400000-0x0000000000437000-memory.dmp

Filesize
220KB

Download
memory/2996-130-0x0000000000400000-0x0000000000437000-memory.dmp

Filesize
220KB

Download