Analysis

  • max time kernel
    152s
  • max time network
    158s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-01-2024 16:00

General

  • Target

    setup_undertale_1.08_(18328).exe

  • Size

    126.7MB

  • MD5

    69a1054bcf85084cc4bc33e332f1844d

  • SHA1

    a3db1a7c5a07ea07c31d40ab4c7685215ac4f170

  • SHA256

    21fbcab3c652d5af9efe57454d60d5a5057773e1c234ed16ae14233724502b44

  • SHA512

    f57df05d2d5db04cb48a1d72070ac5d76ae29620cca314817fbfbb30d42c2150115ac510acb216095115c210fe2eee80575ffc78a36fd455e72e4de9492b4f81

  • SSDEEP

    3145728:WSHIqNWvNc0rn+0fslfSob+5Framz9LQMj5jMgQN7:WytNAfcSob2NaoLQ+7c7

Malware Config

Signatures

  • Kinsing

    Kinsing is a loader written in Golang.

  • Checks computer location settings 2 TTPs 2 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 3 IoCs
  • Loads dropped DLL 6 IoCs
  • Modifies file permissions 1 TTPs 4 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of WriteProcessMemory 21 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\setup_undertale_1.08_(18328).exe
    "C:\Users\Admin\AppData\Local\Temp\setup_undertale_1.08_(18328).exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1620
    • C:\Users\Admin\AppData\Local\Temp\is-LO57M.tmp\setup_undertale_1.08_(18328).tmp
      "C:\Users\Admin\AppData\Local\Temp\is-LO57M.tmp\setup_undertale_1.08_(18328).tmp" /SL5="$801D2,132362071,185856,C:\Users\Admin\AppData\Local\Temp\setup_undertale_1.08_(18328).exe"
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:4672
      • C:\GOG Games\Undertale\__support\scriptinterpreter.exe
        "C:\GOG Games\Undertale\__support\scriptinterpreter.exe" /verysilent /supportDir="C:\GOG Games\Undertale\__support" /SUPPRESSMSGBOXES /NORESTART /DIR="C:\GOG Games\Undertale" /productId="1456487183" /buildId="50921790503031850" /versionName="1.08" /Language="English" /LANG="english"
        3⤵
        • Executes dropped EXE
        • Suspicious use of WriteProcessMemory
        PID:1564
        • C:\Users\Admin\AppData\Local\Temp\is-H739E.tmp\scriptinterpreter.tmp
          "C:\Users\Admin\AppData\Local\Temp\is-H739E.tmp\scriptinterpreter.tmp" /SL5="$501CE,569884,191488,C:\GOG Games\Undertale\__support\scriptinterpreter.exe" /verysilent /supportDir="C:\GOG Games\Undertale\__support" /SUPPRESSMSGBOXES /NORESTART /DIR="C:\GOG Games\Undertale" /productId="1456487183" /buildId="50921790503031850" /versionName="1.08" /Language="English" /LANG="english"
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of WriteProcessMemory
          PID:4400
          • C:\Windows\SysWOW64\icacls.exe
            "C:\Windows\System32\icacls.exe" "c:\gog games\undertale\options.ini" /grant Everyone:(OI)(CI)F
            5⤵
            • Modifies file permissions
            PID:1292
          • C:\Windows\SysWOW64\icacls.exe
            "C:\Windows\System32\icacls.exe" "C:\Users\Admin\AppData\Local\UNDERTALE" /grant Everyone:(OI)(CI)F
            5⤵
            • Modifies file permissions
            PID:4516
          • C:\Windows\SysWOW64\icacls.exe
            "C:\Windows\System32\icacls.exe" "c:\gog games\undertale" /grant Everyone:(OI)(CI)F
            5⤵
            • Modifies file permissions
            PID:4688
          • C:\Windows\SysWOW64\icacls.exe
            "C:\Windows\System32\icacls.exe" "c:\gog games\undertale" /grant Everyone:(OI)(CI)F
            5⤵
            • Modifies file permissions
            PID:3568

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\GOG Games\Undertale\D3DX9_43.dll
    Filesize

    41KB

    MD5

    ac03e9898f200a52f033c4e1a194f646

    SHA1

    b79afa4ad2773a884425d06a990ec1f6decfeeb1

    SHA256

    b67fddbd89b92c0142c7da27675e82adea2b702d009ff8122d7426d7edfebc52

    SHA512

    f20c923000e9fccb7ab00bd122cda28f30d6300128f93e4c6713b1bd15ef4bb38758188b6445ccea5962a404f53538da6a3805d1b88dd92cad71b84699c8a968

  • C:\GOG Games\Undertale\__support\app\options.ini
    Filesize

    97B

    MD5

    40ede613879f6406fd90c4bad9ba08cb

    SHA1

    234d1a88ecb5eb2f945f0f8959df69bc154a4677

    SHA256

    52a59e5417778aac32756ac0617d5b00fd47a9015e54b3865fdc17a867b58cf9

    SHA512

    c42b738b58298bdd8866b6f053df12a13b9eee3917e86846a7fa3d00248a7dc1c7658878c06f51d6b9e0450a4eee940c61d56ad11fe32656bd64f9341abdcaab

  • C:\GOG Games\Undertale\__support\scriptinterpreter.exe
    Filesize

    1.1MB

    MD5

    cd0222b112878c6b1074c2354aa026f0

    SHA1

    395bccec3fb71ef8f0c4ceb9dee63efa21d948b0

    SHA256

    6dd87cb725336bcce9c75eed40fe544cd5cab32a2ea3ed09c6fa901a47db2f53

    SHA512

    8afaeef70f6913b898621516900c133465d5eef481217417caee012fc776c2a75fe6aa589cbf6b01f9423838be4c898f7cf2051ac8729ce22e7075bd24535f33

  • C:\GOG Games\Undertale\__support\scriptinterpreter.exe
    Filesize

    861KB

    MD5

    865579329b77ab186cd7563f8e105cbf

    SHA1

    e1e167ffa6b13dd57ca7b7dd73d9c5a6cf17305b

    SHA256

    8dcb2a122d0c38659e0e952d0e5705b0f52fa8bc72d3902f358dd66b2d890d3f

    SHA512

    1d32ef1dbbbace6247f520fa4a922cfd6848f9f21120b1df4dc7b4d3bf9559ab958c5838ec3fd7557704484fc6383fc27acffa251096430e345694d717fabd4a

  • C:\GOG Games\Undertale\abc_123_a.ogg
    Filesize

    40KB

    MD5

    0db017fdf19134876127376ad1d56a8c

    SHA1

    0f78b9af1858c6c7c01205bfaa99f3c4934c510e

    SHA256

    baf01fcee2fa3cc9769af20407a4de9b30027a5e651be601808ab521485fea55

    SHA512

    7fb4cb4a54ffe57ac7f5989f969ec8b6e0088d319479ca83c69b0ce71b8a06ef480a8184ff8e3bb827c7bb6f784a94654003dd63f59983a601997a989fb9b67f

  • C:\GOG Games\Undertale\credits.txt
    Filesize

    11KB

    MD5

    85ef2348d70f81de3b00be93348361f1

    SHA1

    6c734e646ca25e19391099e32aea9f1a006722aa

    SHA256

    5e5ab1852c4734a547e6143ef643b43d211e3cee334e949cb59fffb51bf04098

    SHA512

    01661bda880aa2ea085fa98eb565fd5b938cb86d673908fad80980ea3a13d0a5255a431a909388740a33b8e33e2ae4b4a38c9de141eb072048d47d81aa6268e3

  • C:\GOG Games\Undertale\data.win
    Filesize

    469KB

    MD5

    73e586b233974c3320ae779020a2dd56

    SHA1

    993b06966b8f8ed72aa78c7df2d94876210ce7dc

    SHA256

    274a3ea7b6fc0cd1ca20b8a48932a4b7a6d852662843acaefd65e08c7bc7341d

    SHA512

    1b37281b21eec58a905806fe4ba78c8e8bca2297bf1b552f06a7c99d62eb0ff0f4a133b7534d8548d71ed541c4d1ad039535bdb99a3a19ee8867c109fa50e91d

  • C:\GOG Games\Undertale\goggame-1456487183.hashdb
    Filesize

    7KB

    MD5

    17f41c26cc277c59e53c5bdb54343776

    SHA1

    5891b83ff264d03f2a1aaac2f167b421824a3f51

    SHA256

    07f899a497faa6d3befbead9cc86f8ca24fcad719426f106a1eb2c28217743bc

    SHA512

    450514f863398b115a5870941a00570879f4d1cc74a25ef51c6dbd217448769d0d57dbf67b14c8ecf1c8d3d2d7b08d4539a50ae1795a4b7943e59d776be91f17

  • C:\GOG Games\Undertale\goggame-1456487183.ico
    Filesize

    79KB

    MD5

    d292e2349754e997b1fc3ecc8c9955de

    SHA1

    3decdf189a116665fe52facafc072dd974ad27d8

    SHA256

    6cba65c3c927a68407e8941ac8b12e3089130709efbdb2399123d084f1475d54

    SHA512

    29f0cccdf471018b10cd72b80d9860d33ab16aaa0db8ddcc20ec664e72a61c9f60d37b442cdca415cd227fd53594632d0de8ed02a742828d26c2f27f33ac45c0

  • C:\GOG Games\Undertale\goglog.ini
    Filesize

    204B

    MD5

    65fb907e1079dd47bcfe5deb5893a39a

    SHA1

    603a807ab4dfbeb3e94023f9b6d2bfe0ef8608f2

    SHA256

    3c4634e30c9c8b54de5127cc6bdcd0a3d3d739313994810f154096d395c2c87b

    SHA512

    b101d5425521180c156c6ebb441f1a79664911ea46193a6cc6e489ba8c8d00fa49ba4e601d0eddb1ccb8c03ea25178c0fae436f295aab6026fe01e41f19ebc03

  • C:\GOG Games\Undertale\mus_a2.ogg
    Filesize

    186KB

    MD5

    ee6282e61da71efdd1da75676044c0a1

    SHA1

    6caffe6d1838fb16138ed30f1f89890ac7e5df5b

    SHA256

    244ca709fe88618b2ae34a2767bdea7ea6b79df4f795b5f4fc00eab3c03e2ba7

    SHA512

    3f81d07e73c0dbda25c3af2440bcf1e25e1dcb568fd1c2d337d615ee833179053f5e7983048dd5db258a0116604abc27ee3919397939e3dad95c23ae0b983cec

  • C:\GOG Games\Undertale\mus_alphysfix.ogg
    Filesize

    36KB

    MD5

    dcafc0871eb93693cc5b0f9bf169df55

    SHA1

    cea9c096f8285d77b348d92fc26e27d45a889424

    SHA256

    6f4cd2037b27e6dc0ab6044ce58a2e66db380a13e67b5167d50d9caf02e37ca0

    SHA512

    369a3bca748b14589da221746d681191a90221337c197871952006efe184c9eb9b499107013d90385056b9d44d496a74336cf603eaacb81843d600b186c5f608

  • C:\GOG Games\Undertale\mus_amalgam.ogg
    Filesize

    392KB

    MD5

    fb14ae09ffc89a388c1db71b78d91ec5

    SHA1

    3ec8fdaa2e1dc673311993b65bdd1f9cf719cdb4

    SHA256

    69f84e5e061f8a44bb0a8a6b8492ceb032bdd811c5c3de69b556bdd1a666d0de

    SHA512

    b97d3f03cf19ae540b9ad5199f3147555d9f7d3e7b742e26f7f822488b2dd35fb9edd8ac50986df375bde5911f5a8f5edc70ff5d3b49a6cdf1542ee81b66115c

  • C:\GOG Games\Undertale\mus_ambientwater.ogg
    Filesize

    24KB

    MD5

    c5d95352887d3ba20b0fff600284822d

    SHA1

    aa3b09a27a46a196baafb03736b9493d9933e8cd

    SHA256

    195b5bdbc3066c2025b28667b5c7f72a22b01cd0f629d9601ec3c749858b706b

    SHA512

    02884b849ddafe1b736497b7bb1be0067f1d92842940c0435a292384023dad97a5880c3cf38e041a7630b6f908b78c1f0ec84840f05a04ac63d2d134bc1fdf51

  • C:\GOG Games\Undertale\mus_anothermedium.ogg
    Filesize

    382KB

    MD5

    be9dbac457fbe8d61edd7eecf08e0b83

    SHA1

    1d1770ddf6d688e8f921322a6913b2255634dbf6

    SHA256

    463ece97e32fc213a085dd8ce92181db8e658f55dc16d746b9f1687b2cd93043

    SHA512

    e28e81853897aa80f0672c2d91f32e9b9fd46db799a0f41d7fbc77d4446372eac85c103998292190f731aec39686e93ff28ef89435554c55e229d2c46e2234f0

  • C:\GOG Games\Undertale\mus_bad.ogg
    Filesize

    15KB

    MD5

    92952e0422d298e61cde62bb2a5f5f88

    SHA1

    b98324d43c5b5e59a9e767ee6b5db75c74d8fa57

    SHA256

    79d6af19bc9ac74221af85e1ab5fa67c466b08ede7979090870d93a368f5abf6

    SHA512

    c38300948b9c8553af11cf01f81a3d7d6875d32f40934c27030b844e206237ff36c1499d1e559b6b21bbff6c710a01a2b3e24f043c2df5b49e9c00ef4d1ac5aa

  • C:\GOG Games\Undertale\mus_barrier.ogg
    Filesize

    287KB

    MD5

    b5c9f5d843f07bdff5b49a600a9737cc

    SHA1

    3779f0e0a31cf06186db71d8d81cd7111012995c

    SHA256

    3424de311fc694a93a8bfa7fbee2cba120f7377fea174f75a2cf6fe86dafd9d0

    SHA512

    3d9281f9746ba012a1dc71c2c52e45c5742476bea738cd443b519ffa3d9c16620a447bc227bde7d65ab186942fe5d4ad3d375b9e37a1ba2a95860ab7a79ac45c

  • C:\GOG Games\Undertale\mus_battle1.ogg
    Filesize

    642KB

    MD5

    336e2f63c6629fcf4334b145e1adc0f7

    SHA1

    d26f7d8a4c901c6fed5a98d91bddbefce35d7c52

    SHA256

    7101b56bf94fba741e8d36ccc51e10616808a1d6d898e970c56b824973c6d529

    SHA512

    0367ac313439f22eb036d41566d737783cf59914f7f94b6d3f3aed61544c8ab43e2d75ce5f16f710dadfed01e36b30a1d82fc702018389d2319937d297b955f8

  • C:\GOG Games\Undertale\mus_battle2.ogg
    Filesize

    602KB

    MD5

    4e532642d4775ee5361a4025abadec52

    SHA1

    50f42936d8ceeecaa5c80857ba6f77fdf6b5af02

    SHA256

    6346649029f8db4bb1fc5fcd7991b519fa14baf61aab14572b66dea1381062a1

    SHA512

    65b1bf11fc47852da1f836c792c79abc133be8714c857c85df8aadc81bd5d859a433a0ef91038052cbcf63748ba59c92887cc8e5773e2020fde763bc3befaf26

  • C:\GOG Games\Undertale\mus_bergentruckung.ogg
    Filesize

    135KB

    MD5

    33d2e6dba7df72da33035c3be20152d1

    SHA1

    29643f786d78007d810af7cf389a0c243b6e1594

    SHA256

    61c0413b9179fbdfebcf8f2cdd122d8dd142887c35aad12f47dcfd7630dd5f78

    SHA512

    54c918db41731c1896cfc9179b7522418ad17e78e1ac853cb5d1b65aa0e31f1c3ae1794455047eb70da491c52f72e221096c664f04bf1daa70f5664fc87fc13b

  • C:\GOG Games\Undertale\mus_bgflameA.ogg
    Filesize

    53KB

    MD5

    67f5e7072204bc20998066de1ff20e2e

    SHA1

    3aa37c53f9d5ac5507e5250bb07900e61c897f49

    SHA256

    0c9eee11f57a00368f7fa165ece1f97c345f03c28826d6dd55c49006c545177f

    SHA512

    7313a86d3fe5e0d151b6a503844758bb1af4713d1be313e23eb9d34ff79fe1666fb8d6c6af03a6f175ee8aa611e331aa56323bb7baeb1577b7e0804243fdeb8a

  • C:\GOG Games\Undertale\mus_birdnoise.ogg
    Filesize

    193KB

    MD5

    9c75890365dfcfa0b3a50aa381b3aac5

    SHA1

    ce9ec279d4011280d32f2caf92611471ecae0e66

    SHA256

    5b488f5076bbee64d4bca03a372493f752ca1ba3ea8d5199f9de7e08c679da1e

    SHA512

    b1fce03d69e8ca927b2302169680a2d35994d7f68f4088beb07d6c7933dd8c43d91e2d33431187cc5e0b9132c32e642a0a89fc8b19b4236dc70d8a764ebd22d7

  • C:\GOG Games\Undertale\mus_birdsong.ogg
    Filesize

    251KB

    MD5

    fa7183f5b9d75a05bff866183f0166b0

    SHA1

    aff7e644834cdc5bd769b45cf73ad43dacf96be9

    SHA256

    618c46734918c8211b58a636c0a4280ee961842b22c91135a9da0d6970613be6

    SHA512

    5047f6628db2a7806f2d47acf01a973bb89c9d0cfde8a2dde956224c258443598345c03dcab6e39809748d39c140c1a7629722acff007805b7cc5b7e5e31c4c1

  • C:\GOG Games\Undertale\mus_boss1.ogg
    Filesize

    469KB

    MD5

    4e614325039f477d7ce9fa6d7323bc6b

    SHA1

    31ac3650cd3cd05df838271810eeefa62c4e3268

    SHA256

    e991a2d3d39256208d905b87edee33f6320de58d741fef6edf3a769a8997e92e

    SHA512

    a6dd682a2f4d33a5a5cbb55d6993ea9b407590dfc381e5a8eaf0bd2b4d20ef26ced767146cc2e3ebd8842c7b649ad6758f939d49f6463d5d9ea27572938b9fc0

  • C:\GOG Games\Undertale\mus_cast_1.ogg
    Filesize

    368KB

    MD5

    601d0f04d4b970996d9d8d0f7e464647

    SHA1

    11d31e45484b6866e3732e5159ba8955998ec839

    SHA256

    716173694c16cdf40cb48edce160f6f60991dcdfb6a7b0e7cd3992d7bf257597

    SHA512

    773bbd317a929750a34940f4741e8d0e6b7def163c3929f5bfd0e9b2706d3c569a885af6840c3351e323b8c08443e5928bb1f8ed666a41c035a783064e07b8df

  • C:\GOG Games\Undertale\mus_cast_2.ogg
    Filesize

    213KB

    MD5

    0e757e12c0f27d8e6faaab0d67d9189c

    SHA1

    5c7b31369419618c61f072c4631fdd8cd6f8a7d6

    SHA256

    6b061c68869002370fcd2725977f01c2a68fa592d7fd0ad934f680600a1b6c1f

    SHA512

    e15803787eee5e3d40ef3cedecea9090a6f735d6b193c771b2f37fa093b5371837e1b5807ddef9d81e0e6826717daea5918f27750b3fff5cf95ed9aa80db4c8d

  • C:\GOG Games\Undertale\mus_cast_3.ogg
    Filesize

    407KB

    MD5

    88ce66df7da71630c389c9b657af6c6d

    SHA1

    5245961af9e69be531bd99d7cf33ac41ae0e9a2b

    SHA256

    1cd23b5141270a3ad816e4c3246851ca144644c0eefc8e1eceb571481033cc59

    SHA512

    d9418ec571532cdf854ef541a52c9eb088ad662b08013e422ec357fba98c09f408b91756bce93ba97c8cebd2c05b4cc6f086e468c8ee7bbedbd9ed3578caea6c

  • C:\GOG Games\Undertale\mus_cast_4.ogg
    Filesize

    309KB

    MD5

    763724ffb3af3eec2256de05f1095b4b

    SHA1

    dba124de6bd162478ed1444435c690d039be41b4

    SHA256

    fff6fb4b77c8eff52b946ad2368423199f313f0b4fa5442fc8725dd83ccdaf6b

    SHA512

    65f8de12403537435a1a5f02c82307666168ba25608b651b9e14febd5666b060c647310d3a937be30b214b8325a0a95c379c2bda1324913c1a0abba7cf3f89a6

  • C:\GOG Games\Undertale\mus_cast_5.ogg
    Filesize

    389KB

    MD5

    087c090b4b3c8faa3e1fa8ca0891db3d

    SHA1

    4948f4f9c78c009380a47ba1731bbe7cdaa932f5

    SHA256

    36cf5ad3504be679c6fbe7592c5c252d2e6e255ecaf9eff5813b32b361f08be5

    SHA512

    8cd360022b038c4d157976bbcb4125119f404333d5014bc94d0a263855b4f9e21fd37255afddaa4a164aa3ae2c18dca74db730b4536e9a9adb4b2d92136d7d6f

  • C:\GOG Games\Undertale\mus_cast_6.ogg
    Filesize

    208KB

    MD5

    87ee8f9cccff5d32e054c8737bde915d

    SHA1

    dcbf4e5a137f248b8c4b404f847b5181fae4ee8d

    SHA256

    5c35750896f5eec85c502a00b935c7a96a6aa6b8655936ae99059fe2bbc6b9f9

    SHA512

    13fb4afa9fb65e95092de7ed9bde3cc56a9172dee4fc89569205fbf672f936cdb306fc912e8f7bbef4e420534561177107b085f976861d3d580fd25a6aaf07d5

  • C:\GOG Games\Undertale\mus_cast_7.ogg
    Filesize

    183KB

    MD5

    aeefd8eee053a0c3186efe9c5d0d6e81

    SHA1

    a0957dc42d8c3bd8c064a3b91336ff115d47897f

    SHA256

    0c5d9697e3d40f21f32b027026e8c117b242bd522ec0f08abf545b236f6c7bc6

    SHA512

    6bdd0377d2fe3aa59c0b9799fdc0397f6cda8a3149acc2e2e6b267176f0970a9f68d3b260592577ebff81c775181dbebcbef27eab21f2c0b2da83f3d518ed297

  • C:\GOG Games\Undertale\mus_chokedup.ogg
    Filesize

    428KB

    MD5

    080191e5ef9dd8cdd64d6a94e9efd932

    SHA1

    0f07414dcdacd2307ab7f99e68db70ab69d356c3

    SHA256

    ccbb476f2d25652af1b86dd3b99e4793c05bbe6198432f9d7f5c9539f210d880

    SHA512

    85fc7bb353b60451b99fd03e12f7a4e1909f467e39600137cba8390f690042dceec1a432f73836ed65301411b6e9b7f62f26da57365437a146187aa87cc24f5c

  • C:\GOG Games\Undertale\mus_churchbell.ogg
    Filesize

    77KB

    MD5

    aa4061c1c89e8221087449b54f370784

    SHA1

    d33f4acf8838d0ac962199191590b838fc1068ea

    SHA256

    efeb11babe4a529587614df295b473896e03393fa73c897dde9b02120389d620

    SHA512

    bef6790840b062bca813579093e25a72570d428fe5906ad116011de6baa337bafc9016ce26cf689752e5c0946f687c8cf7c56f69577fbb013a57dd346b73d55d

  • C:\GOG Games\Undertale\mus_computer.ogg
    Filesize

    17KB

    MD5

    bf3fd98aad1f2414f286221bf127e61b

    SHA1

    69d7ba47a60c69490af8429dcc2808630d73b03b

    SHA256

    4c4062d9f91a6801715aeff168ae4a6568f5e280b729691e6962331c270978c9

    SHA512

    0c266c3dda15d38572621e10c4cd48ca3b2e142fc3af73bcdb3ac97efb068e269c70a507e6590ae20322ed0956fa174a75c8adae4f96fa0b91fdd2de7e8b88ee

  • C:\GOG Games\Undertale\mus_confession.ogg
    Filesize

    210KB

    MD5

    edfd9d675bb2a2ce9132f4f3e5c9349b

    SHA1

    06d4ccc7727628d6c2d1d787ace97570e60e7bf6

    SHA256

    a4ca01491ad3ebfdb466a1b129f59fa46dea1d02b8761ac81c016432d9d0f9a3

    SHA512

    fa8eff518047ee267e51ab5a69a4ec5f270250b6b26ef817626b603b3b12fcae7f76c49402a6a342619bc55af92866ecc7b9bd84b1906307f51849aef984042b

  • C:\GOG Games\Undertale\mus_coolbeat.ogg
    Filesize

    23KB

    MD5

    2d721315d4b952cd0413123744470cd5

    SHA1

    71905ca68789f608cd18b75811ef2e464a3c6061

    SHA256

    b2502de775ddd9cd544958795d6f5b4b771249cce9142424b48e732cdaa51699

    SHA512

    76d7833debc58f2f55a418657ae1bd0dcb48ec851a2d66620d16ecfbbe3cbcb04ec2af916ff2eaad9bdf1df7b04e9f8a1fbfffe31039ecad9ee2796efa9f3f30

  • C:\GOG Games\Undertale\mus_core.ogg
    Filesize

    440KB

    MD5

    8ac0d400bf2de34242b5b1b00dcf581c

    SHA1

    ebc16ba61d31fbe1569fa87d200acf24c205f3e8

    SHA256

    46c7b514ef0d334cd6b34d66cdd091f5de50c7408bdbb6b06b36e5c2e1c7a372

    SHA512

    abce7547b8aae61282bcd931574685168a8b5f634ec038ed1310b7544af212dc1387f6a46b1ae62061b8a06bc349476e0dc41913f345c9bece4ea18d5d1252a7

  • C:\GOG Games\Undertale\mus_core_ambience.ogg
    Filesize

    60KB

    MD5

    2cdb01b7748ec9e635897ce6ef73f56e

    SHA1

    7caa08c67929d607feaba45432447c35f17f95ac

    SHA256

    94169292a9f99fe70992d4c0749bbc1889bdc7565dccdd83e3c73abd2c9485d5

    SHA512

    09fa5dd823a5d5e9b5c59e088d3a97dac722c06edb5a3145cafd7c3fc3288a01cc307a4f77a4b305cc65134fd5a53410f854e427f0ec6d0681293cae2e7088eb

  • C:\GOG Games\Undertale\mus_coretransition.ogg
    Filesize

    119KB

    MD5

    fa3925cec8965ca76dfc062b7e1ae9eb

    SHA1

    5b28e1d4ba5164f4f05387b1cac9c65f01333485

    SHA256

    0b5d6a8dfbf5ad68b0318808f3c8edd0da2213fbf67b359f3fbbcec854f3374c

    SHA512

    9a4a2ad218ce66d6a0d9f1fb1c55839c01a23c73b32a0329b5c6d1f7533024837ad170592e14fa4ef69cfda5f885b01a6f2b9b6302a0bf0f160b6f5451b2c971

  • C:\GOG Games\Undertale\mus_creepy_ambience.ogg
    Filesize

    139KB

    MD5

    466bf722f3d469ce001682992f4240bd

    SHA1

    8304d66bfb92a8cc583023bd060bdd78f97b7cb6

    SHA256

    105e5f99a30e1b1836b8d3980ae1be289e06e0122e91d1f7910181a7720e9d6e

    SHA512

    a1421009ad5f4d07e0fb33883aa82a5e6fcc008386fb7a4718d8312d58beeb0aec7bd419c4b464aadc760b2c1daaf0907347939686cf25497f95d47f38d72dc0

  • C:\GOG Games\Undertale\mus_crickets.ogg
    Filesize

    509KB

    MD5

    dc5a47a35a9cefbb89fa2871cbbc0c58

    SHA1

    30b4dac52a4d4417d4aff50a7e94dabdaff21175

    SHA256

    42ffa30414831e2ba55984edf269cae7eca398773d84b93f554752bb91924af6

    SHA512

    d816386576c33b8d5349a1e418f06a84bb0564bfaa163e2585b4a6512f9416febc472e7ec605eb084f073e827e728cd6218595e75e32515efe3735855ad2d249

  • C:\GOG Games\Undertale\mus_cymbal.ogg
    Filesize

    53KB

    MD5

    90a422f31063a50989b358708e68f109

    SHA1

    1c4605a43688cb893947cf0342673e9a212f6780

    SHA256

    ad536a8aef8f7485ff1f9c76ea9aadc156b7d3702d82078165e38a39977d9d85

    SHA512

    05301abcbe370deb41f8271891c6418684b9a461e6fe38354b4effe6cf053cb1c4963824b342e8a7492d9e3ff21c4bfddab95d88e83a5bb222bcffa09a6c97a8

  • C:\GOG Games\Undertale\mus_dance_of_dog.ogg
    Filesize

    113KB

    MD5

    b4e28f5b3e88139674359c3a97f545d1

    SHA1

    7e33a017272db837ee5172d8cb0dd4d1ef538c95

    SHA256

    3dd733edfe675fd5ec84a0186d2784ff83ddd0ff69c1b96c975be5c0086893a7

    SHA512

    238be7129ed51cbb2062d1c9c382a528e43abc61d375a1007b2f173e92f4197635888bde5ad8adc974588ae8c4a71b8c07fda314c30c274e1d1cd662cb73698d

  • C:\GOG Games\Undertale\mus_date.ogg
    Filesize

    352KB

    MD5

    7101eb5d7e2cdef58e58ebc00114eec8

    SHA1

    549903efe4b0f27befb87642a28b1f73fc72eea5

    SHA256

    e9010f678a637c0ae3b0120063bbd74b3b21fde2b63838ffa9e0050ed4da9dc8

    SHA512

    cacf064a9237d999d07d1cdc394bfefe662b5e5d86a560d61153220e38a7fb556369871fdebb8eb95482237eee0337a24105b710c74f802492324fd34c22c123

  • C:\GOG Games\Undertale\mus_date_fight.ogg
    Filesize

    127KB

    MD5

    38def49bed7526af1398151bc5be2964

    SHA1

    99de7633880395016f4e6061793c5f2c37c59929

    SHA256

    62ac1bd536684c582ebff1d918dfde8080a5453a9f7c707cd8f94a0b9b3271da

    SHA512

    d5dfb0ca7694a5ece9cca4aa077a8477d9146cf06836ff35ed1315216f11835f49623f0ecb5b3b71cbe3afd1e3f04ad2fc549a140e445012cb66ea9dc14a3463

  • C:\GOG Games\Undertale\mus_date_tense.ogg
    Filesize

    62KB

    MD5

    69ddfc4961b5b1f7601bd7ddc7c306c8

    SHA1

    2838467d48d2cd8fedc0270bff83025b1ba58c98

    SHA256

    5d6226ef88567b58fbd9958e88b016039bf6f66c9398f4b3ffa8726f0b2d57db

    SHA512

    cac3e093b55c298ce4d8341041565e828b7e0df0917977cc93388ff916b957e7c67a80d8b2332885cec11b51405d44a02d13161dcaecc77f42814e1dba263827

  • C:\GOG Games\Undertale\mus_deeploop2.ogg
    Filesize

    70KB

    MD5

    d471a28314b4d267104419b00a9c4420

    SHA1

    be301daf432602439e16f9a42b1c61708d4c8ced

    SHA256

    5c4df79571d6e20216cf57d9c823b54f210fe4efb1b13dd0f9dce7d64d6beaa5

    SHA512

    eabb9139cdc22759c45ca29f136e79b643f0bacb984219dd601622770de8a2aecb11804b1fe078bc98d2e9eb1e4b394a0629bab9468d9715ee75d6ae18f11e1e

  • C:\GOG Games\Undertale\mus_disturbing.ogg
    Filesize

    82KB

    MD5

    629f9c621c906b0f1a2d445e0fdc050e

    SHA1

    52fc9035a8192ed872b92a51014beaafa5e677be

    SHA256

    86a66166b93962edb0455f63959eb53c297c1d52bec13e32877eb8bf6f6a4b34

    SHA512

    dec3ebe2158702d0f619d513ca4d62ddbfe76f8e969d0fa57078e1e6b2e9afb724257c46566e3d7f3e514513bdc76f05dccb7920a83572d32ba3707ed8b715a1

  • C:\GOG Games\Undertale\mus_dogappear.ogg
    Filesize

    24KB

    MD5

    2d2cf95ff2877f86dd5de21fa6df3758

    SHA1

    33345114743cfc37cbe76cfd4a89fc2ed84ca07b

    SHA256

    9c0dc0331ee3164c43eb7ba25028d3923433f88cf27c72a464fb64ded95dd045

    SHA512

    3a8d21ea725635ec25615e3139e4d69161c87ecf729970dfda6a14041677fd7cd14d13ece16704462814722d2524eb029cf2d4bcdac7a5542d6b6faf31c50a7a

  • C:\GOG Games\Undertale\mus_dogmeander.ogg
    Filesize

    85KB

    MD5

    2ac546432377f6e1f9b212353e26fd02

    SHA1

    356dbbb1f24a8b7238ef3547362540b96804e03e

    SHA256

    fdfd3d9e926427c5681c683c8523f34754fd5cc88da3308420f016cc9cbafc4a

    SHA512

    448d1af59fbe1d8031aa14c7ba2b73aeb4689500619847c91abd6d0f229a100cd282b98bd1ac7914cc62578c0bf7ead110cd16ea409feb394cdcac29393ae67d

  • C:\GOG Games\Undertale\mus_dogroom.ogg
    Filesize

    58KB

    MD5

    93fca1ef9a618ffbb7cc6dd9e8687ce2

    SHA1

    d31a34bc2c7d6ad86baa5cda2c725c90a429601d

    SHA256

    6ff7c43bd2acdd4e15430d08aeff377b2d83d6f06088a4ae448f2eb5d4063eb9

    SHA512

    68dc0b7b138d03c74471559f9b630c48a2bdfdf1f668437fb5a4a4726726f84570952c32f212611a11e3f87db8a859a643a6526ad1d0561e18db2fc9606247b3

  • C:\GOG Games\Undertale\mus_dogshrine_1.ogg
    Filesize

    183KB

    MD5

    196853e97711556f73ce5fb52a4be31f

    SHA1

    a00e4a9e1141d51be263e5f48b2daaba2f4320cf

    SHA256

    e9a620af8e5e6918a843e8118402362b114b8779ad8de3988ff9cb6486e312a6

    SHA512

    60bf0aa8704f0cd26c58b85ddde3aa9cc86f3ec75d72417f7de8cde3d545323664418755c01ef758926e323a7437695b76ed203eeea7e8dd3fd72b7ad2d6dcc8

  • C:\GOG Games\Undertale\mus_dogshrine_2.ogg
    Filesize

    29KB

    MD5

    1e90a2f1f3ed0e4f54e13238904f5556

    SHA1

    c6bae8a32033b8b0f182bafd0e02dae4b0e76f6a

    SHA256

    a5be0c353040ac48575a4e457508b67cb196d934ca7ead37d0c3e4b8340462ee

    SHA512

    f8b554dab65c9a4e708be9ba4d85b85d9fd41123f7389f3915c25bb5926176b6505c6f1c3f51aa65dc5935d653c3091bc604dd6403e050dae3352ee5a3a5c79b

  • C:\GOG Games\Undertale\mus_dogsong.ogg
    Filesize

    213KB

    MD5

    745ad319651442468697554a88d78f19

    SHA1

    81c9f159d56178d2c65e760e80a75e49a19dc75b

    SHA256

    20d80c0f8e80c88d7a7060577109f5b3c8db756b9bd982d9d4ae8fe597ea4133

    SHA512

    d23dd3b56567aa5ca59127b2acc11b3fec029b01787f5ae919abf21f9f25edbf55818e384d8c502544f9af69c7d29c4af6addbcacb5a97a12a355298a5506784

  • C:\Users\Admin\AppData\Local\Temp\is-3UHPV.tmp\uninstall.dll
    Filesize

    234KB

    MD5

    854b732dcdbcd81a31b90573aa8c2973

    SHA1

    498388d9144559ef82dfa4e2b93b00765e466a9a

    SHA256

    3e0ce9e89ba87aa629a589da12000954e4493d36a55c754aa833bf797893be64

    SHA512

    eb12a4f406cff0eefa19a141e5b1cf4ab0671b92b468686b940ab1ee72754a5ffef48fe9f83b1fb4d0b98fd21af595bddb9ff2062ec719391bcf792205ed0ad1

  • C:\Users\Admin\AppData\Local\Temp\is-H739E.tmp\scriptinterpreter.tmp
    Filesize

    691KB

    MD5

    31d3ce46e978ee1a3fe6f430940ccd10

    SHA1

    0a97da1f81ab5e031f8260a7790c71e5a452ff62

    SHA256

    5e6f1584fd9d54c70a230a63eff228e9b24cab8f0c729d1462654ad1b03f4f4d

    SHA512

    ce9060ad156d679ea98a6b3a6b2a8c7883c2f83a0d048961c6cb1d9d91a8accbc485e324beb2351aae56ce9f976f164ef01820d81a0678c5e5d73c067bc7a9f1

  • C:\Users\Admin\AppData\Local\Temp\is-LO57M.tmp\setup_undertale_1.08_(18328).tmp
    Filesize

    1.2MB

    MD5

    3602e9114e7254a36fcd909cfa490c3a

    SHA1

    198af4c93cbcf2195df4cb4aa42096a799c7f374

    SHA256

    a153c8db6f20f9c54f4bd1607b2502d3914662caa9615e1c557cf0abd8777bab

    SHA512

    eb1caf37de29467977088952b782dd1cd97969083ef60a0307aa4dd1dde1a44227ef4a871da775b05665f5fec780294c15d6c0f2d9c275e519054eb4628d7fdf

  • C:\Users\Admin\AppData\Local\Temp\is-UBUGG.tmp\1207658702_english.jpg
    Filesize

    195KB

    MD5

    ed224bf981e588b310321e3364cde5cd

    SHA1

    b3a7c43742304b6541bd83b04104ba0511103cd9

    SHA256

    988c25e3d92bbce791a012beabe67b70d0f708fe658a75304261f9699de0c063

    SHA512

    9c1ee058e5adeb765b435c4de9b1c9d211dbfec1d6d9b78abb5c38887d21a9920d35cb61b8139662b03acc5b74132c4bf267a91927587ab59b490cdf519e3902

  • C:\Users\Admin\AppData\Local\Temp\is-UBUGG.tmp\1449139823_english.jpg
    Filesize

    192KB

    MD5

    c86d1d0ecf523cbc44a0f3cff1f81586

    SHA1

    a906d195974ef3afd6d7da7d820dcc9a4efe3987

    SHA256

    5091f3f1bd82d677b364080052f9166a0b85ae179c6ab6bbd6b87f4203c14e1f

    SHA512

    fab06cea1446b58abeece64a7e4bcd5e9f8a6ca75aa2255ae65f3e5d88c81abd17be9946e3702a30d7978660ec363c73c4e9483678558e8a79ffdfcaafd24bba

  • C:\Users\Admin\AppData\Local\Temp\is-UBUGG.tmp\BigOK.png
    Filesize

    3KB

    MD5

    5b43a5d975a53f4fc1da67ce9f7784c1

    SHA1

    8543fa1e471030049942252b23cb22e0880c3af5

    SHA256

    59d8bb3e87a89ef523c0495addce38d69560af42aaa82f56dd41b12e6612c13a

    SHA512

    5dd5c4e9859a555a4a32da76f5231b44f7556274c6501da530b2cdd570bcb4675f710bee708322a40ed3ef9280c0d652b4e7ef0e9eaf128c08534f59291917f5

  • C:\Users\Admin\AppData\Local\Temp\is-UBUGG.tmp\EULAAccepted.png
    Filesize

    2KB

    MD5

    461dfeb75927bdb39f9db5348612a611

    SHA1

    b7893b1fff6801e37ee7337d876962a09184941e

    SHA256

    0de278f5ca6d8570d9bda592268a14a28b87d3631fea2d25721947397aaab79c

    SHA512

    68528cf45c81c2c024a672f42c2cd6d4f72c015b443f103ca21deb8ee2bec4f4027490e7f33b5338a87537b5bf7f255f2828aed149f622155ec89cc81687651b

  • C:\Users\Admin\AppData\Local\Temp\is-UBUGG.tmp\EULAShow.png
    Filesize

    1KB

    MD5

    c596bc9111edc702bbbb29b70984254f

    SHA1

    d4712c7b91ff4f8994e7907d31357c42eb47c738

    SHA256

    6112851daea2aaa7174e8cfac4a0f61c968bc090342503804c476eff47cc2462

    SHA512

    db50d0a39ec644873a03d64552fff1776cc94f016e8dfc8918e65aee94f7529a6de4637567b5e65c4ea988f3775785c4b52c2d96fe8dbc52b1e21ff59c737c2a

  • C:\Users\Admin\AppData\Local\Temp\is-UBUGG.tmp\background.jpg
    Filesize

    308KB

    MD5

    79dd8f2494aef70c997f7627449d7e9d

    SHA1

    6fc00daa1c26ee76a90a55e39e0c3a72cf4b36e7

    SHA256

    502d1b67b2a2b390753fdcafd9b5f33c97796b580eaff893ba7360931092989f

    SHA512

    3af7da0eb62a38a3a4445cd0bd563a8fc7c3010830228d2bc075ae7b5bf990ca20bef806116c60d4a367548a821587328ab0509ab8ba73e6fdfc0a7be30a6c78

  • C:\Users\Admin\AppData\Local\Temp\is-UBUGG.tmp\botva2.dll
    Filesize

    35KB

    MD5

    0177746573eed407f8dca8a9e441aa49

    SHA1

    6b462adf78059d26cbc56b3311e3b97fcb8d05f7

    SHA256

    a4b61626a1626fdabec794e4f323484aa0644baa1c905a5dcf785dc34564f008

    SHA512

    d4ac96da2d72e121d1d63d64e78bcea155d62af828324b81889a3cd3928ceeb12f7a22e87e264e34498d100b57cdd3735d2ab2316e1a3bf7fa099ddb75c5071a

  • C:\Users\Admin\AppData\Local\Temp\is-UBUGG.tmp\btn_md5.png
    Filesize

    8KB

    MD5

    3befe9739354ee24a0b1ea8df05ce274

    SHA1

    ab0bda986a8c46aa19f57b75a2b7b22445a3c625

    SHA256

    b0193ab375f604fa4a25cabdea8f713babde1c07ab562ffc5679352c8e01db47

    SHA512

    ac016a59e0bfc9b22c376ae5d498c5660893a983d932b2bd502dabe032883c69e79ea8d93c2db49f95415c3cdb068e9f7d1d85527a4f9e68e065a989852d09dd

  • C:\Users\Admin\AppData\Local\Temp\is-UBUGG.tmp\crcdll.dll
    Filesize

    69KB

    MD5

    1d51fac9e2384eeb674199cfd5281d7d

    SHA1

    861dfdc121357d605d0cc3793266713788109eb2

    SHA256

    23e90ce5a1f2d634a7bf5d5d0522fafeea6df9e536e16f5ce91035d5197128ec

    SHA512

    921b00adfe43b883200960e8d0958d4e6b97f6d5cfc096ee277766a3e44cc7805a20877a4edf8bd4d9102bb71a20ac218a9a512f4f76bd751d3ef14f4e0a6eda

  • C:\Users\Admin\AppData\Local\Temp\is-UBUGG.tmp\error.png
    Filesize

    726B

    MD5

    df10adc25b673e74e19971c17bee5a98

    SHA1

    ee16fb1cf9491f5e611282f0574b27d76fede412

    SHA256

    142b16dc6239421691fa6e619d1a61e61176d89fa018a88b46893c29a57aad8b

    SHA512

    dc3de10e0321966cbbfb2e57b3b41da6f26dff0c7233a47469da58775b5c471e6b5181e4d4ffc81ef8b83dbcad74ccc1aad7678518f99c9185a441d2a23e010f

  • C:\Users\Admin\AppData\Local\Temp\is-UBUGG.tmp\innocallback.dll
    Filesize

    63KB

    MD5

    1c55ae5ef9980e3b1028447da6105c75

    SHA1

    f85218e10e6aa23b2f5a3ed512895b437e41b45c

    SHA256

    6afa2d104be6efe3d9a2ab96dbb75db31565dad64dd0b791e402ecc25529809f

    SHA512

    1ec4d52f49747b29cfd83e1a75fc6ae4101add68ada0b9add5770c10be6dffb004bb47d0854d50871ed8d77acf67d4e0445e97f0548a95c182e83b94ddf2eb6b

  • C:\Users\Admin\AppData\Local\Temp\is-UBUGG.tmp\ok.png
    Filesize

    1KB

    MD5

    103c1368e60806b1b7995a0894eacf87

    SHA1

    971392527f6e4b655044773132505c901a6b5469

    SHA256

    0d37d4421a39ca8852eb6760b8e914302bdc6cfcc7b170dc1b6c9bb9be148b7e

    SHA512

    652177e94438aff102f2ed873b26f0985ebed134763852b49b1ca2698463c1dbeb85152f19c8e18d397229ec5cb2cd1d17c61d454ab7c425a2cab540adc8228a

  • C:\Users\Admin\AppData\Local\Temp\is-UBUGG.tmp\progress_center.png
    Filesize

    1KB

    MD5

    ad7fc1e37e40da38dd57adc446cc6c0e

    SHA1

    08033265deb9b45243cfa0065d98ffe13a039e26

    SHA256

    2b9dae87340e66b67ab1d8247d4a137628e324969f92fe1098f95a7c5bab2f43

    SHA512

    dd715d74f8e1ed6ab75b7b6530b383ac47040d8baa7728be160f6d230bf485a9cc54f15f7dc85b122ce56e54d63fa4890e510dfc89d9c9344e31f789ebac8756

  • C:\Users\Admin\AppData\Local\Temp\is-UBUGG.tmp\progress_left.png
    Filesize

    1KB

    MD5

    290c7612ad7a077028cd3dc78ce99673

    SHA1

    18995fbe39d05e4a1cafc7cc2e0f6fb745442f77

    SHA256

    85e39d909a7300fa2043ec42818582867b981401264b14fc5408e477ae0b4668

    SHA512

    799841f5b8a1056e78a49c823009750e4b93af130a6c4ff9dc6d386c06b88614e53b46a6df62f5a217d5c99da01cf4e2fe8392c73d39e81000045291cf24205a

  • C:\Users\Admin\AppData\Local\Temp\is-UBUGG.tmp\progress_right.png
    Filesize

    1KB

    MD5

    c25a41f022a74308d944d1e807d72f44

    SHA1

    83c6bbec3fb373fcc78ce0e737742100994cd6d4

    SHA256

    396a3351fe409328782ab138282cf9cec061a5a9540a3506700a620db1f54e7d

    SHA512

    d2f4449195f3e60c826cfabb52a083d829eb9d0509272977d8fdb33bc5214678949cd27d0594684594e0a3eda2351c39cec8d91923cb716ad144ccf2b966c8e6

  • C:\Users\Admin\AppData\Local\Temp\is-UBUGG.tmp\slideshow.ini
    Filesize

    298B

    MD5

    dd34f5881d26a40468f4eb1a01aeb892

    SHA1

    6065a141c70d7eff63a0e879dad4868e1868a3f8

    SHA256

    23ffd13e24c21c28893f350c1283c8faa856a45ef554ecff9e96442bc51bc214

    SHA512

    34c7652ff16ce6895c20b63e6d9b33626f14bbbf549fd3662bb17c464f501d08a4cff8dcdcbc153cd7b76da09060d7e42babc683e441f8dbe69438ab9b98bf02

  • C:\Users\Admin\AppData\Local\Temp\is-UBUGG.tmp\track_center.png
    Filesize

    1KB

    MD5

    3f2b0c22f8ea28dcbb82b39a16a039aa

    SHA1

    b3f4dfc2ea86fbdad05877b4c356b7fa8016731d

    SHA256

    794f9eeca7fd99846968376b76a296c927532cef1271325cbf555caa0d0d5860

    SHA512

    b4bf65d751717e85418947662d315ae3bcb177f60914832fefeeb95da9eddb75eb5531c62e5a5a70ff03c8a025b5a03e61ffbdecc9f483bea9684454ca9362d3

  • C:\Users\Admin\AppData\Local\Temp\is-UBUGG.tmp\track_left.png
    Filesize

    1KB

    MD5

    55dacb00cbe2825a8540236c5777a205

    SHA1

    18a52ac6c741b558500fbc1716d46b4fe4471982

    SHA256

    a8340fb5380c922b60ea40043590dba067dcfed6e22636851691df38156a3aa8

    SHA512

    2ea444cc1080f20761c8d71d96fcd04ef48254cdc1dc41d1d139f459ea5613fe12f6e4bd026bf33a5c01ff038e72e05dae2f8fba33ff517dd395e1911f10ff10

  • C:\Users\Admin\AppData\Local\Temp\is-UBUGG.tmp\track_right.png
    Filesize

    1KB

    MD5

    ddec70b6c49be3e8c3a7d01c2f6ff1c5

    SHA1

    5383271999f787c36b1dc8f3cc13c8407b195439

    SHA256

    f54cd6e42f2b2bc5cb8a15f6a28f1499abf094a519ebdf39f4c4e167312c9c16

    SHA512

    f43f94b194b5a7eafcec9e831f61042859c30e1af2e2447195bdd06b12c90982181161a1c1be5aa5223ff664f88e4891bd71cfffb7ef672d6fe4f614030e0e01

  • \??\c:\gog games\undertale\goggame-1456487183.info
    Filesize

    840B

    MD5

    72c5257a93fbeec975a4a4175b50080d

    SHA1

    7b28af62c13cc120f3ac3e0ef273be85116d8d76

    SHA256

    adb26c3daa0b8511e8219b7ee950c8cdc527795f7e3b2a6a42355f27fcdc1b29

    SHA512

    f8ec190ba65211588f6156e74d1e8e842fe959ab1f8830e8ee1c9adaf35bbbbcaff7814560fa7e5c7e075c5d33422144070e114727229343087465f6895fed2c

  • \??\c:\gog games\undertale\goggame-1456487183.script
    Filesize

    419B

    MD5

    ecfe49b9be64a0e398f861c8d5f16f53

    SHA1

    465087b4a0a9045d3de22ec0ec92287acf26b47b

    SHA256

    f1c0f97ea9a8dbbb37355cef6f2d42832e97acb47b5e9bc327ece2d9b397c5a7

    SHA512

    25239ddf866e6d0e2fa53b033e6aa26978ae8a342ee123592e974e911db9fe130204e675bb61079cc3f45451663e5276062d391638ecd83756c4d9e14c52474a

  • memory/1564-666-0x0000000000120000-0x0000000000159000-memory.dmp
    Filesize

    228KB

  • memory/1564-779-0x0000000000120000-0x0000000000159000-memory.dmp
    Filesize

    228KB

  • memory/1620-0-0x0000000000400000-0x0000000000437000-memory.dmp
    Filesize

    220KB

  • memory/1620-132-0x0000000000400000-0x0000000000437000-memory.dmp
    Filesize

    220KB

  • memory/4400-775-0x0000000000860000-0x00000000009B0000-memory.dmp
    Filesize

    1.3MB

  • memory/4400-776-0x00000000031E0000-0x00000000031E1000-memory.dmp
    Filesize

    4KB

  • memory/4400-675-0x0000000000F90000-0x0000000000F91000-memory.dmp
    Filesize

    4KB

  • memory/4672-553-0x0000000002BE0000-0x0000000002BF5000-memory.dmp
    Filesize

    84KB

  • memory/4672-669-0x0000000002C00000-0x0000000002D00000-memory.dmp
    Filesize

    1024KB

  • memory/4672-176-0x0000000003170000-0x000000000317E000-memory.dmp
    Filesize

    56KB

  • memory/4672-174-0x0000000002BE0000-0x0000000002BF5000-memory.dmp
    Filesize

    84KB

  • memory/4672-772-0x0000000002C00000-0x0000000002D00000-memory.dmp
    Filesize

    1024KB

  • memory/4672-425-0x0000000002C00000-0x0000000002D00000-memory.dmp
    Filesize

    1024KB

  • memory/4672-502-0x0000000002C00000-0x0000000002D00000-memory.dmp
    Filesize

    1024KB

  • memory/4672-144-0x0000000003170000-0x000000000317E000-memory.dmp
    Filesize

    56KB

  • memory/4672-143-0x0000000002BE0000-0x0000000002BF5000-memory.dmp
    Filesize

    84KB

  • memory/4672-140-0x0000000000850000-0x0000000000851000-memory.dmp
    Filesize

    4KB

  • memory/4672-134-0x0000000002BE0000-0x0000000002BF5000-memory.dmp
    Filesize

    84KB

  • memory/4672-135-0x0000000003170000-0x000000000317E000-memory.dmp
    Filesize

    56KB

  • memory/4672-133-0x0000000000400000-0x000000000053D000-memory.dmp
    Filesize

    1.2MB

  • memory/4672-196-0x0000000002C00000-0x0000000002D00000-memory.dmp
    Filesize

    1024KB

  • memory/4672-551-0x0000000000400000-0x000000000053D000-memory.dmp
    Filesize

    1.2MB

  • memory/4672-778-0x0000000002C00000-0x0000000002D00000-memory.dmp
    Filesize

    1024KB

  • memory/4672-561-0x0000000002C00000-0x0000000002D00000-memory.dmp
    Filesize

    1024KB

  • memory/4672-198-0x0000000002C00000-0x0000000002D00000-memory.dmp
    Filesize

    1024KB

  • memory/4672-617-0x0000000002C00000-0x0000000002D00000-memory.dmp
    Filesize

    1024KB

  • memory/4672-200-0x0000000002C00000-0x0000000002D00000-memory.dmp
    Filesize

    1024KB

  • memory/4672-245-0x0000000002C00000-0x0000000002D00000-memory.dmp
    Filesize

    1024KB

  • memory/4672-173-0x0000000000400000-0x000000000053D000-memory.dmp
    Filesize

    1.2MB

  • memory/4672-667-0x0000000002C00000-0x0000000002D00000-memory.dmp
    Filesize

    1024KB

  • memory/4672-317-0x0000000002C00000-0x0000000002D00000-memory.dmp
    Filesize

    1024KB

  • memory/4672-56-0x0000000003170000-0x000000000317E000-memory.dmp
    Filesize

    56KB

  • memory/4672-687-0x0000000002C00000-0x0000000002D00000-memory.dmp
    Filesize

    1024KB

  • memory/4672-379-0x0000000002C00000-0x0000000002D00000-memory.dmp
    Filesize

    1024KB

  • memory/4672-777-0x0000000002C00000-0x0000000002D00000-memory.dmp
    Filesize

    1024KB

  • memory/4672-11-0x0000000002BE0000-0x0000000002BF5000-memory.dmp
    Filesize

    84KB

  • memory/4672-5-0x0000000000850000-0x0000000000851000-memory.dmp
    Filesize

    4KB

  • memory/4672-674-0x0000000002C00000-0x0000000002D00000-memory.dmp
    Filesize

    1024KB

  • memory/4672-688-0x0000000002C00000-0x0000000002D00000-memory.dmp
    Filesize

    1024KB

  • memory/4672-785-0x0000000002C00000-0x0000000002D00000-memory.dmp
    Filesize

    1024KB

  • memory/4672-787-0x0000000000400000-0x000000000053D000-memory.dmp
    Filesize

    1.2MB

  • memory/4672-790-0x0000000002C00000-0x0000000002D00000-memory.dmp
    Filesize

    1024KB

  • memory/4672-789-0x0000000003170000-0x000000000317E000-memory.dmp
    Filesize

    56KB

  • memory/4672-788-0x0000000002BE0000-0x0000000002BF5000-memory.dmp
    Filesize

    84KB

  • memory/4672-791-0x0000000002C00000-0x0000000002D00000-memory.dmp
    Filesize

    1024KB

  • memory/4672-792-0x0000000002C00000-0x0000000002D00000-memory.dmp
    Filesize

    1024KB

  • memory/4672-797-0x0000000002C00000-0x0000000002D00000-memory.dmp
    Filesize

    1024KB

  • memory/4672-798-0x0000000002C00000-0x0000000002D00000-memory.dmp
    Filesize

    1024KB

  • memory/4672-800-0x0000000002C00000-0x0000000002D00000-memory.dmp
    Filesize

    1024KB

  • memory/4672-807-0x0000000003170000-0x000000000317E000-memory.dmp
    Filesize

    56KB