Undertale-SteamRIP.com.zip
- SHA256 f1d4179b843274068ca49234fff6252a61b6ae0c5e00713fd63957693640a545
Overview
overview
8Static
static
7Undertale-...es.url
windows11-ltsc_2024-x64
1Undertale-...43.dll
windows11-ltsc_2024-x64
8Undertale-...er.dll
windows11-ltsc_2024-x64
8Undertale-...le.exe
windows11-ltsc_2024-x64
6Undertale-...ex.dll
windows11-ltsc_2024-x64
3Undertale-...pi.dll
windows11-ltsc_2024-x64
3Undertale-...pi.dll
windows11-ltsc_2024-x64
3Undertale-...nt.dll
windows11-ltsc_2024-x64
3Undertale-...up.exe
windows11-ltsc_2024-x64
7Undertale-...st.exe
windows11-ltsc_2024-x64
6Undertale-...64.exe
windows11-ltsc_2024-x64
4Undertale-...86.exe
windows11-ltsc_2024-x64
4Undertale-...64.exe
windows11-ltsc_2024-x64
7Undertale-...86.exe
windows11-ltsc_2024-x64
8Undertale-...st.msi
windows11-ltsc_2024-x64
7Static task
static1
Behavioral task
behavioral1
Sample
Undertale-SteamRIP.com/STEAMRIP ยป Free Pre-installed Steam Games.url
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral2
Sample
Undertale-SteamRIP.com/Undertale/D3DX9_43.dll
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral3
Sample
Undertale-SteamRIP.com/Undertale/GameOverlayRenderer.dll
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral4
Sample
Undertale-SteamRIP.com/Undertale/Undertale.exe
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral5
Sample
Undertale-SteamRIP.com/Undertale/codex.dll
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral6
Sample
Undertale-SteamRIP.com/Undertale/steam_api.dll
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral7
Sample
Undertale-SteamRIP.com/Undertale/steam_api.dll
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral8
Sample
Undertale-SteamRIP.com/Undertale/steamclient.dll
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral9
Sample
Undertale-SteamRIP.com/_CommonRedist/dxwebsetup.exe
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral10
Sample
Undertale-SteamRIP.com/_CommonRedist/oalinst.exe
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral11
Sample
Undertale-SteamRIP.com/_CommonRedist/vcredist_2015-2019_x64.exe
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral12
Sample
Undertale-SteamRIP.com/_CommonRedist/vcredist_2015-2019_x86.exe
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral13
Sample
Undertale-SteamRIP.com/_CommonRedist/vcredist_x64.exe
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral14
Sample
Undertale-SteamRIP.com/_CommonRedist/vcredist_x86.exe
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral15
Sample
Undertale-SteamRIP.com/_CommonRedist/xnafx40_redist.msi
Resource
win11ltsc2024-20260617-en
Detects file using ACProtect software.
| resource | yara_rule |
|---|---|
| static1/unpack001/Undertale-SteamRIP.com/Undertale/codex.dll | acprotect |
| static1/unpack001/Undertale-SteamRIP.com/Undertale/steamclient.dll | acprotect |
File was altered after it was signed.
| resource |
|---|
| unpack001/Undertale-SteamRIP.com/Undertale/GameOverlayRenderer.dll |
| unpack001/Undertale-SteamRIP.com/Undertale/steam_api.dll |
File was codesigned using an insecure algorithm.
| resource |
|---|
| unpack001/Undertale-SteamRIP.com/_CommonRedist/xnafx40_redist.msi |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/Undertale-SteamRIP.com/Undertale/Undertale.exe |
Codesigned file was signed by an untrusted entity.
| resource |
|---|
| unpack001/Undertale-SteamRIP.com/Undertale/D3DX9_43.dll |
| unpack001/Undertale-SteamRIP.com/Undertale/codex.dll |
| unpack001/Undertale-SteamRIP.com/Undertale/steam_api.cdx |
| unpack001/Undertale-SteamRIP.com/Undertale/steamclient.dll |
| unpack001/Undertale-SteamRIP.com/_CommonRedist/dxwebsetup.exe |
| unpack001/Undertale-SteamRIP.com/_CommonRedist/oalinst.exe |
| unpack001/Undertale-SteamRIP.com/_CommonRedist/vcredist_x64.exe |
| unpack001/Undertale-SteamRIP.com/_CommonRedist/vcredist_x86.exe |
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
May 22, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=224, id=1, productName=Unmarked objects,
count=9, id=156, version=21202,
count=15, id=158, version=21202,
count=80, id=170, version=21202,
count=1, id=155, version=21202,
count=244, id=171, version=21202,
count=1, id=126, version=50727,
count=1, id=154, version=21202,
count=1, id=157, version=21202,
Codesign digest Mismatch
File was altered after it was signed.
Apr 29, 2019
CN=Valve,O=Valve,L=Bellevue,ST=WA,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=171, productName=VS2010 build 30319, version=30319,
count=8, id=150, version=20413,
count=66, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=132, productName=VS2008 build 21022, version=21022,
count=1, id=109, productName=VS2005 build 50727, version=50727,
count=2, id=156, version=21202,
count=31, id=123, productName=VS2005 build 50727, version=50727,
count=315, id=1, productName=Unmarked objects,
count=400, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=414, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
count=62, id=225, productName=VS2013 build 21005, version=21005,
count=27, id=223, productName=VS2013 build 21005, version=21005,
count=177, id=224, productName=VS2013 build 21005, version=21005,
count=10, id=203, version=65501,
count=5, id=257, productName=VS2015 UPD2 build 23918, version=23918,
count=90, id=1, productName=Unmarked objects,
count=6, id=228, version=40629,
count=1, id=220, productName=VS2013 UPD5 build 40629, version=40629,
count=1, id=219, productName=VS2013 build 21005, version=21005,
count=1, id=222, productName=VS2013 UPD5 build 40629, version=40629,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 15, 2016
CN=Valve,O=Valve,L=Bellevue,ST=WA,C=US
Codesign digest Mismatch
File was altered after it was signed.
Jan 15, 2016
CN=Valve,O=Valve,L=Bellevue,ST=WA,C=US
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
count=2, id=123, productName=VS2005 build 50727, version=50727,
count=71, id=225, productName=VS2013 build 21005, version=21005,
count=30, id=223, productName=VS2013 build 21005, version=21005,
count=235, id=224, productName=VS2013 build 21005, version=21005,
count=15, id=203, version=65501,
count=148, id=1, productName=Unmarked objects,
count=82, id=228, version=40629,
count=1, id=220, productName=VS2013 UPD5 build 40629, version=40629,
count=1, id=219, productName=VS2013 build 21005, version=21005,
count=1, id=222, productName=VS2013 UPD5 build 40629, version=40629,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jun 2, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=13, id=25, version=9210,
count=126, id=1, productName=Unmarked objects,
count=1, id=69, version=9111,
count=24, id=28, version=9178,
count=1, id=61, version=9210,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jun 3, 2009
CN=Creative Labs Inc,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=CLI,O=Creative Labs Inc,L=Milpitas,ST=California,C=US
count=18, id=125, productName=VS2005 build 50727, version=50727,
count=107, id=109, productName=VS2005 build 50727, version=50727,
count=11, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=135, id=1, productName=Unmarked objects,
count=9, productName=Unmarked objects (old),
count=34, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Jan 8, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jan 8, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=9, id=241, version=40116,
count=124, id=243, version=40116,
count=24, id=242, version=40116,
count=19, id=259, version=24123,
count=19, id=260, version=24123,
count=38, id=261, version=24123,
count=5, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=17, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=337, id=1, productName=Unmarked objects,
count=75, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=2, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Jan 8, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jan 8, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=9, id=241, version=40116,
count=124, id=243, version=40116,
count=24, id=242, version=40116,
count=19, id=259, version=24123,
count=19, id=260, version=24123,
count=38, id=261, version=24123,
count=5, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=17, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=337, id=1, productName=Unmarked objects,
count=75, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=2, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Mar 19, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=1, id=15, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=125, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=32, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=94, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=90, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Mar 19, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=1, id=15, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=125, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=32, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=94, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=90, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Aug 23, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US