Analysis
- max time kernel
94s - max time network
33s - platform
windows7_x64 - resource
win7-20221111-en - resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system - submitted
03/01/2023, 16:13
Static task
static1
Behavioral task
behavioral1
Sample
setup_undertale_1.08_(18328).exe
Resource
win7-20221111-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup_undertale_1.08_(18328).exe
Resource
win10v2004-20220812-en
3 signatures
150 seconds
General
- Target setup_undertale_1.08_(18328).exe
- Size 126.7MB
- Sample230103-tpjbaafb6x
- SHA256 21fbcab3c652d5af9efe57454d60d5a5057773e1c234ed16ae14233724502b44
- MD5 69a1054bcf85084cc4bc33e332f1844d
- SHA1 a3db1a7c5a07ea07c31d40ab4c7685215ac4f170
- SHA512 f57df05d2d5db04cb48a1d72070ac5d76ae29620cca314817fbfbb30d42c2150115ac510acb216095115c210fe2eee80575ffc78a36fd455e72e4de9492b4f81
- SSDEEP 3145728:WSHIqNWvNc0rn+0fslfSob+5Framz9LQMj5jMgQN7:WytNAfcSob2NaoLQ+7c7
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- SnakeBOT
SnakeBOT is a heavily obfuscated .NET downloader.
- Contains SnakeBOT related strings 1 IoCs
resource yara_rule behavioral1/files/0x0006000000015c45-92.dat snakebot_strings - Executes dropped EXE 6 IoCs
pid Process 344 setup_undertale_1.08_(18328).tmp 1164 scriptinterpreter.exe 1676 scriptinterpreter.tmp 304 UNDERTALE.exe 1624 UNDERTALE.exe 1076 UNDERTALE.exe - Loads dropped DLL 38 IoCs
pid Process 744 setup_undertale_1.08_(18328).exe 344 setup_undertale_1.08_(18328).tmp 344 setup_undertale_1.08_(18328).tmp 344 setup_undertale_1.08_(18328).tmp 344 setup_undertale_1.08_(18328).tmp 1164 scriptinterpreter.exe 1676 scriptinterpreter.tmp 1676 scriptinterpreter.tmp 1676 scriptinterpreter.tmp 1676 scriptinterpreter.tmp 1676 scriptinterpreter.tmp 1676 scriptinterpreter.tmp 1676 scriptinterpreter.tmp 344 setup_undertale_1.08_(18328).tmp 304 UNDERTALE.exe 1100 WerFault.exe 1100 WerFault.exe 1100 WerFault.exe 1100 WerFault.exe 1100 WerFault.exe 1100 WerFault.exe 1100 WerFault.exe 1624 UNDERTALE.exe 1812 WerFault.exe 1812 WerFault.exe 1812 WerFault.exe 1812 WerFault.exe 1812 WerFault.exe 1812 WerFault.exe 1812 WerFault.exe 1076 UNDERTALE.exe 1400 WerFault.exe 1400 WerFault.exe 1400 WerFault.exe 1400 WerFault.exe 1400 WerFault.exe 1400 WerFault.exe 1400 WerFault.exe - Modifies file permissions 1 TTPs 4 IoCs
pid Process 580 icacls.exe 1096 icacls.exe 1864 icacls.exe 1336 icacls.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
- Program crash 3 IoCs
pid pid_target Process procid_target 1100 304 WerFault.exe 40 1812 1624 WerFault.exe 42 1400 1076 WerFault.exe 44 - Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 344 setup_undertale_1.08_(18328).tmp 344 setup_undertale_1.08_(18328).tmp 1676 scriptinterpreter.tmp 1676 scriptinterpreter.tmp - Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 344 setup_undertale_1.08_(18328).tmp 1676 scriptinterpreter.tmp - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 304 UNDERTALE.exe 1624 UNDERTALE.exe 1076 UNDERTALE.exe - Suspicious use of WriteProcessMemory 62 IoCs
description pid Process procid_target PID 744 wrote to memory of 344 744 setup_undertale_1.08_(18328).exe 28 PID 744 wrote to memory of 344 744 setup_undertale_1.08_(18328).exe 28 PID 744 wrote to memory of 344 744 setup_undertale_1.08_(18328).exe 28 PID 744 wrote to memory of 344 744 setup_undertale_1.08_(18328).exe 28 PID 744 wrote to memory of 344 744 setup_undertale_1.08_(18328).exe 28 PID 744 wrote to memory of 344 744 setup_undertale_1.08_(18328).exe 28 PID 744 wrote to memory of 344 744 setup_undertale_1.08_(18328).exe 28 PID 344 wrote to memory of 1164 344 setup_undertale_1.08_(18328).tmp 29 PID 344 wrote to memory of 1164 344 setup_undertale_1.08_(18328).tmp 29 PID 344 wrote to memory of 1164 344 setup_undertale_1.08_(18328).tmp 29 PID 344 wrote to memory of 1164 344 setup_undertale_1.08_(18328).tmp 29 PID 1164 wrote to memory of 1676 1164 scriptinterpreter.exe 30 PID 1164 wrote to memory of 1676 1164 scriptinterpreter.exe 30 PID 1164 wrote to memory of 1676 1164 scriptinterpreter.exe 30 PID 1164 wrote to memory of 1676 1164 scriptinterpreter.exe 30 PID 1164 wrote to memory of 1676 1164 scriptinterpreter.exe 30 PID 1164 wrote to memory of 1676 1164 scriptinterpreter.exe 30 PID 1164 wrote to memory of 1676 1164 scriptinterpreter.exe 30 PID 1676 wrote to memory of 580 1676 scriptinterpreter.tmp 31 PID 1676 wrote to memory of 580 1676 scriptinterpreter.tmp 31 PID 1676 wrote to memory of 580 1676 scriptinterpreter.tmp 31 PID 1676 wrote to memory of 580 1676 scriptinterpreter.tmp 31 PID 1676 wrote to memory of 1096 1676 scriptinterpreter.tmp 33 PID 1676 wrote to memory of 1096 1676 scriptinterpreter.tmp 33 PID 1676 wrote to memory of 1096 1676 scriptinterpreter.tmp 33 PID 1676 wrote to memory of 1096 1676 scriptinterpreter.tmp 33 PID 1676 wrote to memory of 1864 1676 scriptinterpreter.tmp 35 PID 1676 wrote to memory of 1864 1676 scriptinterpreter.tmp 35 PID 1676 wrote to memory of 1864 1676 scriptinterpreter.tmp 35 PID 1676 wrote to memory of 1864 1676 scriptinterpreter.tmp 35 PID 1676 wrote to memory of 1336 1676 scriptinterpreter.tmp 37 PID 1676 wrote to memory of 1336 1676 scriptinterpreter.tmp 37 PID 1676 wrote to memory of 1336 1676 scriptinterpreter.tmp 37 PID 1676 wrote to memory of 1336 1676 scriptinterpreter.tmp 37 PID 344 wrote to memory of 304 344 setup_undertale_1.08_(18328).tmp 40 PID 344 wrote to memory of 304 344 setup_undertale_1.08_(18328).tmp 40 PID 344 wrote to memory of 304 344 setup_undertale_1.08_(18328).tmp 40 PID 344 wrote to memory of 304 344 setup_undertale_1.08_(18328).tmp 40 PID 344 wrote to memory of 304 344 setup_undertale_1.08_(18328).tmp 40 PID 344 wrote to memory of 304 344 setup_undertale_1.08_(18328).tmp 40 PID 344 wrote to memory of 304 344 setup_undertale_1.08_(18328).tmp 40 PID 304 wrote to memory of 1100 304 UNDERTALE.exe 41 PID 304 wrote to memory of 1100 304 UNDERTALE.exe 41 PID 304 wrote to memory of 1100 304 UNDERTALE.exe 41 PID 304 wrote to memory of 1100 304 UNDERTALE.exe 41 PID 304 wrote to memory of 1100 304 UNDERTALE.exe 41 PID 304 wrote to memory of 1100 304 UNDERTALE.exe 41 PID 304 wrote to memory of 1100 304 UNDERTALE.exe 41 PID 1624 wrote to memory of 1812 1624 UNDERTALE.exe 43 PID 1624 wrote to memory of 1812 1624 UNDERTALE.exe 43 PID 1624 wrote to memory of 1812 1624 UNDERTALE.exe 43 PID 1624 wrote to memory of 1812 1624 UNDERTALE.exe 43 PID 1624 wrote to memory of 1812 1624 UNDERTALE.exe 43 PID 1624 wrote to memory of 1812 1624 UNDERTALE.exe 43 PID 1624 wrote to memory of 1812 1624 UNDERTALE.exe 43 PID 1076 wrote to memory of 1400 1076 UNDERTALE.exe 45 PID 1076 wrote to memory of 1400 1076 UNDERTALE.exe 45 PID 1076 wrote to memory of 1400 1076 UNDERTALE.exe 45 PID 1076 wrote to memory of 1400 1076 UNDERTALE.exe 45 PID 1076 wrote to memory of 1400 1076 UNDERTALE.exe 45 PID 1076 wrote to memory of 1400 1076 UNDERTALE.exe 45 PID 1076 wrote to memory of 1400 1076 UNDERTALE.exe 45
Processes
-
C:\Users\Admin\AppData\Local\Temp\setup_undertale_1.08_(18328).exe"C:\Users\Admin\AppData\Local\Temp\setup_undertale_1.08_(18328).exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:744 -
C:\Users\Admin\AppData\Local\Temp\is-6N1P5.tmp\setup_undertale_1.08_(18328).tmp"C:\Users\Admin\AppData\Local\Temp\is-6N1P5.tmp\setup_undertale_1.08_(18328).tmp" /SL5="$7011E,132362071,185856,C:\Users\Admin\AppData\Local\Temp\setup_undertale_1.08_(18328).exe"2⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:344 -
C:\GOG Games\Undertale\__support\scriptinterpreter.exe"C:\GOG Games\Undertale\__support\scriptinterpreter.exe" /verysilent /supportDir="C:\GOG Games\Undertale\__support" /SUPPRESSMSGBOXES /NORESTART /DIR="C:\GOG Games\Undertale" /productId="1456487183" /buildId="50921790503031850" /versionName="1.08" /Language="English" /LANG="english"3⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:1164 -
C:\Users\Admin\AppData\Local\Temp\is-JV63B.tmp\scriptinterpreter.tmp"C:\Users\Admin\AppData\Local\Temp\is-JV63B.tmp\scriptinterpreter.tmp" /SL5="$101B0,569884,191488,C:\GOG Games\Undertale\__support\scriptinterpreter.exe" /verysilent /supportDir="C:\GOG Games\Undertale\__support" /SUPPRESSMSGBOXES /NORESTART /DIR="C:\GOG Games\Undertale" /productId="1456487183" /buildId="50921790503031850" /versionName="1.08" /Language="English" /LANG="english"4⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:1676 -
C:\Windows\SysWOW64\icacls.exe"C:\Windows\System32\icacls.exe" "c:\gog games\undertale" /grant Everyone:(OI)(CI)F5⤵
- Modifies file permissions
PID:580
-
-
C:\Windows\SysWOW64\icacls.exe"C:\Windows\System32\icacls.exe" "c:\gog games\undertale" /grant Everyone:(OI)(CI)F5⤵
- Modifies file permissions
PID:1096
-
-
C:\Windows\SysWOW64\icacls.exe"C:\Windows\System32\icacls.exe" "c:\gog games\undertale\options.ini" /grant Everyone:(OI)(CI)F5⤵
- Modifies file permissions
PID:1864
-
-
C:\Windows\SysWOW64\icacls.exe"C:\Windows\System32\icacls.exe" "C:\Users\Admin\AppData\Local\UNDERTALE" /grant Everyone:(OI)(CI)F5⤵
- Modifies file permissions
PID:1336
-
-
-
-
C:\gog games\undertale\UNDERTALE.exe"C:\gog games\undertale\UNDERTALE.exe"3⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:304 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 304 -s 5524⤵
- Loads dropped DLL
- Program crash
PID:1100
-
-
-
-
C:\GOG Games\Undertale\UNDERTALE.exe"C:\GOG Games\Undertale\UNDERTALE.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1624 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1624 -s 5082⤵
- Loads dropped DLL
- Program crash
PID:1812
-
-
C:\GOG Games\Undertale\UNDERTALE.exe"C:\GOG Games\Undertale\UNDERTALE.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1076 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1076 -s 5082⤵
- Loads dropped DLL
- Program crash
PID:1400
-
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\GOG Games\Undertale\D3DX9_43.dll
- Size 1.9MB
- SHA256 0b28546be22c71834501f7d7185ede5d79742457331c7ee09efc14490dd64f5f
- MD5 86e39e9161c3d930d93822f1563c280d
- SHA1 f5944df4142983714a6d9955e6e393d9876c1e11
- SHA512 0a3e311c4fd5c2194a8807469e47156af35502e10aeb8a3f64a01ff802cd8669c7e668cc87b593b182fd830a126d002b5d5d7b6c77991158bffdb0b5b997f6b3
- SSDEEP 24576:8UtU6OIyl2Wy9M3bJ45fPS0zFZghQ6aOiFaKOE31GrvFXl74YZ29X1MDd6olmrBs:8566l2u45BiNYFrz31Cv3D29kd6kWa
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\__support\app\options.ini
- Size 97B
- SHA256 52a59e5417778aac32756ac0617d5b00fd47a9015e54b3865fdc17a867b58cf9
- MD5 40ede613879f6406fd90c4bad9ba08cb
- SHA1 234d1a88ecb5eb2f945f0f8959df69bc154a4677
- SHA512 c42b738b58298bdd8866b6f053df12a13b9eee3917e86846a7fa3d00248a7dc1c7658878c06f51d6b9e0450a4eee940c61d56ad11fe32656bd64f9341abdcaab
- MD5 SHA1 SHA512
- Path C:\GOG Games\Undertale\__support\scriptinterpreter.exe
- Size 1.1MB
- SHA256 6dd87cb725336bcce9c75eed40fe544cd5cab32a2ea3ed09c6fa901a47db2f53
- MD5 cd0222b112878c6b1074c2354aa026f0
- SHA1 395bccec3fb71ef8f0c4ceb9dee63efa21d948b0
- SHA512 8afaeef70f6913b898621516900c133465d5eef481217417caee012fc776c2a75fe6aa589cbf6b01f9423838be4c898f7cf2051ac8729ce22e7075bd24535f33
- SSDEEP 24576:M/ot1NCJ8tRw4652mwloe4bByHTsoh29ChffGrL:yWgeG46+oeDzcuuL
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\__support\scriptinterpreter.exe
- Size 1.1MB
- SHA256 6dd87cb725336bcce9c75eed40fe544cd5cab32a2ea3ed09c6fa901a47db2f53
- MD5 cd0222b112878c6b1074c2354aa026f0
- SHA1 395bccec3fb71ef8f0c4ceb9dee63efa21d948b0
- SHA512 8afaeef70f6913b898621516900c133465d5eef481217417caee012fc776c2a75fe6aa589cbf6b01f9423838be4c898f7cf2051ac8729ce22e7075bd24535f33
- SSDEEP 24576:M/ot1NCJ8tRw4652mwloe4bByHTsoh29ChffGrL:yWgeG46+oeDzcuuL
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\abc_123_a.ogg
- Size 40KB
- SHA256 baf01fcee2fa3cc9769af20407a4de9b30027a5e651be601808ab521485fea55
- MD5 0db017fdf19134876127376ad1d56a8c
- SHA1 0f78b9af1858c6c7c01205bfaa99f3c4934c510e
- SHA512 7fb4cb4a54ffe57ac7f5989f969ec8b6e0088d319479ca83c69b0ce71b8a06ef480a8184ff8e3bb827c7bb6f784a94654003dd63f59983a601997a989fb9b67f
- SSDEEP 768:JFAouf/4+i/rnpcgkdjEvST+zM4tSAgwbjbsHAiWw6HRtX8a:JyD/49/baZdoqXggejKAlwgT8a
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\credits.txt
- Size 11KB
- SHA256 5e5ab1852c4734a547e6143ef643b43d211e3cee334e949cb59fffb51bf04098
- MD5 85ef2348d70f81de3b00be93348361f1
- SHA1 6c734e646ca25e19391099e32aea9f1a006722aa
- SHA512 01661bda880aa2ea085fa98eb565fd5b938cb86d673908fad80980ea3a13d0a5255a431a909388740a33b8e33e2ae4b4a38c9de141eb072048d47d81aa6268e3
- SSDEEP 192:LWeim7I52WPeEvoxDNFMIjV6W+2VJB1yum1JxqjKrxnqBKpZXgBrt3W+L/GqkWb7:LWeimEneYoxDNFJEj6JKZxhAKPXwrtmw
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\data.win
- Size 60.0MB
- SHA256 946c738c6d6182f683431320a0e32470bc3deb50f3e8887e61998df0c4e3abc8
- MD5 ff4f10d0434b332f46e1f35a900ec862
- SHA1 845ce7e926ee2188821293707735fc56ac122b90
- SHA512 60b8b3bf9a5819c493bf641bf339b41f56417e998fe06efb660da0c98f0f44a265098a000f4ba015dc5bba13211acaef6a9b9bc48a803863d40fd1358ec662aa
- SSDEEP 1572864:S50GXNl62VQYUAjfE8KDWYk5YGIeyz1fxDITJ1h9E1:c1XH62VjUdo5YGiVpy7A
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\goggame-1456487183.hashdb
- Size 7KB
- SHA256 07f899a497faa6d3befbead9cc86f8ca24fcad719426f106a1eb2c28217743bc
- MD5 17f41c26cc277c59e53c5bdb54343776
- SHA1 5891b83ff264d03f2a1aaac2f167b421824a3f51
- SHA512 450514f863398b115a5870941a00570879f4d1cc74a25ef51c6dbd217448769d0d57dbf67b14c8ecf1c8d3d2d7b08d4539a50ae1795a4b7943e59d776be91f17
- SSDEEP 192:WlqXKWifj9zFUK7cuAJ54WH/G9rToSPPXqHhRMYwicb:sqXKJJRUKQuAJ5U9XoS0Mhicb
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\goggame-1456487183.ico
- Size 79KB
- SHA256 6cba65c3c927a68407e8941ac8b12e3089130709efbdb2399123d084f1475d54
- MD5 d292e2349754e997b1fc3ecc8c9955de
- SHA1 3decdf189a116665fe52facafc072dd974ad27d8
- SHA512 29f0cccdf471018b10cd72b80d9860d33ab16aaa0db8ddcc20ec664e72a61c9f60d37b442cdca415cd227fd53594632d0de8ed02a742828d26c2f27f33ac45c0
- SSDEEP 1536:BXAv7MS89gMD+5eG0hX9ulNmggcpVNID2Qzrs:BCA9gd5oCg2uDfzrs
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\goggame-1456487183.script
- Size 419B
- SHA256 f1c0f97ea9a8dbbb37355cef6f2d42832e97acb47b5e9bc327ece2d9b397c5a7
- MD5 ecfe49b9be64a0e398f861c8d5f16f53
- SHA1 465087b4a0a9045d3de22ec0ec92287acf26b47b
- SHA512 25239ddf866e6d0e2fa53b033e6aa26978ae8a342ee123592e974e911db9fe130204e675bb61079cc3f45451663e5276062d391638ecd83756c4d9e14c52474a
- MD5 SHA1 SHA512
- Path C:\GOG Games\Undertale\mus_a2.ogg
- Size 186KB
- SHA256 244ca709fe88618b2ae34a2767bdea7ea6b79df4f795b5f4fc00eab3c03e2ba7
- MD5 ee6282e61da71efdd1da75676044c0a1
- SHA1 6caffe6d1838fb16138ed30f1f89890ac7e5df5b
- SHA512 3f81d07e73c0dbda25c3af2440bcf1e25e1dcb568fd1c2d337d615ee833179053f5e7983048dd5db258a0116604abc27ee3919397939e3dad95c23ae0b983cec
- SSDEEP 3072:aC7TTJRfpZ+Y1ZKJcawzcGvyNNoM9XAAnan0qEPqs39UXk4cM3gIL+7wDBHk/:LdRxZ+YKJcawzcNl9X7Ys3mUxIayBHk/
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\mus_alphysfix.ogg
- Size 36KB
- SHA256 6f4cd2037b27e6dc0ab6044ce58a2e66db380a13e67b5167d50d9caf02e37ca0
- MD5 dcafc0871eb93693cc5b0f9bf169df55
- SHA1 cea9c096f8285d77b348d92fc26e27d45a889424
- SHA512 369a3bca748b14589da221746d681191a90221337c197871952006efe184c9eb9b499107013d90385056b9d44d496a74336cf603eaacb81843d600b186c5f608
- SSDEEP 768:BZPgBCrkVnQ1tlTcMCU480x8KtvwsyQKC1Z/nGTpn:BZP2CQVnQ79cMu8SvDy+dnGTpn
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\mus_amalgam.ogg
- Size 903KB
- SHA256 249e51b1e8a06e4b1b4d9387a6a5362cbd65ec89e06f4d5028308402c6e1371a
- MD5 b962c05bd42cf19f3a61c8d7e2410677
- SHA1 8e027bf46c905bb154bc9fcef6c4d7bc02923100
- SHA512 a981387faa1c440bcf2e6d646bf55cf0d945c8f997b8aa00acff5144fd31693f7f42dc6f72ac2ed95af8f408aac4a64345b758fa7391e97a4cf3a1e5139b22de
- SSDEEP 24576:vEv2Qfmi4GHiLHQuKRXw4Vr0EdIzDsjW7BXOjCUE:Mv2QfmiqLBgR2OIEj4Xyg
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\mus_ambientwater.ogg
- Size 24KB
- SHA256 195b5bdbc3066c2025b28667b5c7f72a22b01cd0f629d9601ec3c749858b706b
- MD5 c5d95352887d3ba20b0fff600284822d
- SHA1 aa3b09a27a46a196baafb03736b9493d9933e8cd
- SHA512 02884b849ddafe1b736497b7bb1be0067f1d92842940c0435a292384023dad97a5880c3cf38e041a7630b6f908b78c1f0ec84840f05a04ac63d2d134bc1fdf51
- SSDEEP 768:qZQkyyKI+2pOGepOVg3JbHtQChJOKWAtnaW:qZQvrpOUH3JpSW
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\mus_anothermedium.ogg
- Size 1.6MB
- SHA256 6d43d0a4a8a67918e0f4add018580f9ef120b9e0190cbdc0581d12827fb07ab8
- MD5 94726a30486ad58169ac6bb1272a8436
- SHA1 ecd3f44bf107d08ace8c0c19691674be8318c692
- SHA512 cb60cefbb14048c07c7a717c6c1c20a5d0e7462b542d0b119ea5c825fc2b9b97d6626693ee6ead7b46724e443ab72783dbfe24f56705335d54feae02d8cd0117
- SSDEEP 49152:/vgpk74IqbQe9iq2KPDoffltdj4JXmvheEOn/fRm:nWk7v4QOpedPje2peEE0
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\mus_bad.ogg
- Size 15KB
- SHA256 79d6af19bc9ac74221af85e1ab5fa67c466b08ede7979090870d93a368f5abf6
- MD5 92952e0422d298e61cde62bb2a5f5f88
- SHA1 b98324d43c5b5e59a9e767ee6b5db75c74d8fa57
- SHA512 c38300948b9c8553af11cf01f81a3d7d6875d32f40934c27030b844e206237ff36c1499d1e559b6b21bbff6c710a01a2b3e24f043c2df5b49e9c00ef4d1ac5aa
- SSDEEP 192:oWiDJo+OFStcEE/FnQe2iUbjhjDaNFu4U8urDKtF6r2i3DxyTj5kyn:ui+OoZmnQl12NFu4NOYF6rR3ly5nn
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\mus_barrier.ogg
- Size 287KB
- SHA256 3424de311fc694a93a8bfa7fbee2cba120f7377fea174f75a2cf6fe86dafd9d0
- MD5 b5c9f5d843f07bdff5b49a600a9737cc
- SHA1 3779f0e0a31cf06186db71d8d81cd7111012995c
- SHA512 3d9281f9746ba012a1dc71c2c52e45c5742476bea738cd443b519ffa3d9c16620a447bc227bde7d65ab186942fe5d4ad3d375b9e37a1ba2a95860ab7a79ac45c
- SSDEEP 6144:GChHsCyKM+edpBrMT/w7mPeJuT3j+HD2kwqFvs+D9lUv4KEq:9hMEnGBrcw62Jujj+j2Jqi+hlO4KEq
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\mus_battle1.ogg
- Size 642KB
- SHA256 7101b56bf94fba741e8d36ccc51e10616808a1d6d898e970c56b824973c6d529
- MD5 336e2f63c6629fcf4334b145e1adc0f7
- SHA1 d26f7d8a4c901c6fed5a98d91bddbefce35d7c52
- SHA512 0367ac313439f22eb036d41566d737783cf59914f7f94b6d3f3aed61544c8ab43e2d75ce5f16f710dadfed01e36b30a1d82fc702018389d2319937d297b955f8
- SSDEEP 12288:To7TeaJW1hPf/aDa8yiQpltMhV3n3PIWhByo3cyeENVOPn:WJ9DsfpjMht3vBtMhPn
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\mus_battle2.ogg
- Size 706KB
- SHA256 c75329c5308e0e2184eb106dc7a946d54bc51ad0ea2eb790c0bfad8f7f1dfa4d
- MD5 0a242440e79ca4ad5c5ad85bb4194ffc
- SHA1 c06f6e41d67b2d7ca7f53616102ad30fd8eb3d2d
- SHA512 082e8f684a3e10a2ba0eedc71f775a2b56f36a751ad1882ae5eb70cefd4a713a0de12e7c6bbe153aeb22d2c8628aaecc78cbfdfe92b72ef55574da1f9d068f8d
- SSDEEP 12288:8ZICDAhZmYGWWI7Be7by06WN85QJh7s2/ovyYhjpiSnpvlImKCQ:vPk/WWI1GW06WO5EKwoqeppNptQ
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\mus_bergentruckung.ogg
- Size 135KB
- SHA256 61c0413b9179fbdfebcf8f2cdd122d8dd142887c35aad12f47dcfd7630dd5f78
- MD5 33d2e6dba7df72da33035c3be20152d1
- SHA1 29643f786d78007d810af7cf389a0c243b6e1594
- SHA512 54c918db41731c1896cfc9179b7522418ad17e78e1ac853cb5d1b65aa0e31f1c3ae1794455047eb70da491c52f72e221096c664f04bf1daa70f5664fc87fc13b
- SSDEEP 3072:1PsGWghbYaTuS0kWi080mNV4hH1yURe86lQyIl+IYq5hrpdh3q:1Ps+Td0kWXmEhR8tINf9q
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\mus_bgflameA.ogg
- Size 53KB
- SHA256 0c9eee11f57a00368f7fa165ece1f97c345f03c28826d6dd55c49006c545177f
- MD5 67f5e7072204bc20998066de1ff20e2e
- SHA1 3aa37c53f9d5ac5507e5250bb07900e61c897f49
- SHA512 7313a86d3fe5e0d151b6a503844758bb1af4713d1be313e23eb9d34ff79fe1666fb8d6c6af03a6f175ee8aa611e331aa56323bb7baeb1577b7e0804243fdeb8a
- SSDEEP 1536:zZZArMY82tE/kH6CmUf0rQE+AFcsHkyBoAyU:7AIDuEK6/UcrVtFdHw/U
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\mus_birdnoise.ogg
- Size 331KB
- SHA256 f68530da7bae270a3779be498d04145fcd4012cbccd0720501263f1be59b2f94
- MD5 85e7b2bc28a0e551dfdedd1f6646b681
- SHA1 a1aa92d97f6092979320544942edf6b746a67527
- SHA512 582ac73e9ae4a0643134ddba3d6bb918b017e540a1b87834b23dc8e30c3d41bf6b5b34afc35a1031ba7e4c6f3d84bb4c6f994657515d57ab297f2ee354fbb512
- SSDEEP 6144:MR+BrpuUaZCjIdyX7dE9f1KgU7lkSGrMP9+EuglYjAjcO6t/khavEOoiTHce:MR+VgLF0Llk1rMP+j8cH9khOxoige
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\mus_birdsong.ogg
- Size 251KB
- SHA256 618c46734918c8211b58a636c0a4280ee961842b22c91135a9da0d6970613be6
- MD5 fa7183f5b9d75a05bff866183f0166b0
- SHA1 aff7e644834cdc5bd769b45cf73ad43dacf96be9
- SHA512 5047f6628db2a7806f2d47acf01a973bb89c9d0cfde8a2dde956224c258443598345c03dcab6e39809748d39c140c1a7629722acff007805b7cc5b7e5e31c4c1
- SSDEEP 6144:TRLhs+JLeHO2g/piDn+FB4ND0DNZXZ82/Gk1kCSFi+gf:NNVJLS7Upib+TG2ZTNkCSA7
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\mus_boss1.ogg
- Size 1.2MB
- SHA256 ef21b8a3e3834771d073c70c384ea2a6e05cbbf1ff8314b73e84e53b620183bb
- MD5 0bbcb73ab5f262f048af4ef813efaac9
- SHA1 541bf218e80b46be16dd4b781ff859c09b731272
- SHA512 063dbeb7cc64ce1a7d1387fb0f526ea1c546020f54a27cf388322e3ea7efa44a93f8eb53946f5169ba061aeeac0cc70739a17dd00bdd8558f024b1422242eef3
- SSDEEP 24576:HQcTWAvJUC/A0/WVZfGshwXQ8nWb04EFKfYw581aOL:wKWAx942W7jh/Sp4RAw58L
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\mus_cast_1.ogg
- Size 411KB
- SHA256 d7c39d948c7e20e72dfb43d25d1c4806390495dd8410ea2c8071ba3f32efeaa1
- MD5 91e6c5088ff417ff22e469fa057c7ff0
- SHA1 e15bb06a48832fea9e5a29c224950c90dff3ad80
- SHA512 75d76502cb1242c8a9ecdde50e2d76dab039826d2e15558823bfa370af31834c88c69e0b2fcf2190abd2272547b510325416e7142622b7e7cf8ad981bb5ef92e
- SSDEEP 6144:6qC/lXIYqkzQy+dWMnsgdJbNwMkODZmNntW/+2umJ+45leJ2mtT/M3myCVx:6qEXIYhkyWThwENlumJ7TeJVM4
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\mus_cast_2.ogg
- Size 213KB
- SHA256 6b061c68869002370fcd2725977f01c2a68fa592d7fd0ad934f680600a1b6c1f
- MD5 0e757e12c0f27d8e6faaab0d67d9189c
- SHA1 5c7b31369419618c61f072c4631fdd8cd6f8a7d6
- SHA512 e15803787eee5e3d40ef3cedecea9090a6f735d6b193c771b2f37fa093b5371837e1b5807ddef9d81e0e6826717daea5918f27750b3fff5cf95ed9aa80db4c8d
- SSDEEP 6144:og/lyEABidq+wZNCVi10sz4nP7hePb5vBPI:og/MEoIjhePk
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\mus_cast_3.ogg
- Size 409KB
- SHA256 1f263161035bed24f70dd343587c447e545ff8890f3fd63587b0e49dba43debf
- MD5 5f1964a271e8c6c34f51e5e67e236114
- SHA1 1ba1490bddf8ff05995779ccc4a08438875db20a
- SHA512 57fecd3f16877245b1c9a84c8a960d262d309d9e1dfacea91c1b5714f5bf04d5495a5e1fe95364034d44e0d44b09fd6006565df6648920c69ac91085e64af766
- SSDEEP 12288:gm1LClW90ENNvQqzWpwpaGcEbubWjo5da2:gtK0EHziuavEQ/5z
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\mus_cast_4.ogg
- Size 530KB
- SHA256 7ecfa22aa880f4232854095dd408d9211a396524a1c96a3fe0354ab040b2e216
- MD5 25d6c1762b5b478c61b23be07f384314
- SHA1 51b2beb223183fe6824fe1f7b45113a8cd1b55f7
- SHA512 3ca8c772ec79a90f5a1aeb06b435a9f9f9418304e4607c1eff00e56ec19aba9ff77b325fd7fca184dfb06200b57a86aad29868a6328e9722971e8fa22980e9c5
- SSDEEP 12288:7XPrYRDYNlbVnszJFI4Geb9azJWc29PrNlfk5/bL:7v0J3aJkv0L
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\mus_cast_5.ogg
- Size 815KB
- SHA256 e799798cde27f5887a0c650a07ca29b99cdf84fdc3864f4e3569f72219e35043
- MD5 e8524403d3fc9708e1980f38ac00f36a
- SHA1 a6b6ca0a567fa43d8222be40def80edc7546c028
- SHA512 ff788dfa983e217df23b72d4f21273a2df580726b5c38db1d85efeba554f363faa4d9ef1c4addf9c01a1d9c012d674214ebb3333eac2b8a3d121622f15fd40d8
- SSDEEP 24576:/F4ypo/MeZJYg46Pv04htrx1chsDSaprMAwMLGZw:/+/Mis4hJx1eapgAwMCK
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\mus_cast_6.ogg
- Size 208KB
- SHA256 5c35750896f5eec85c502a00b935c7a96a6aa6b8655936ae99059fe2bbc6b9f9
- MD5 87ee8f9cccff5d32e054c8737bde915d
- SHA1 dcbf4e5a137f248b8c4b404f847b5181fae4ee8d
- SHA512 13fb4afa9fb65e95092de7ed9bde3cc56a9172dee4fc89569205fbf672f936cdb306fc912e8f7bbef4e420534561177107b085f976861d3d580fd25a6aaf07d5
- SSDEEP 6144:yMcrKEMzuyjD70d6IKJSf8A+rpnjEKsfEwjoBigyE:yMcrKPzjD74f2rZEK6tkBivE
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\mus_cast_7.ogg
- Size 183KB
- SHA256 0c5d9697e3d40f21f32b027026e8c117b242bd522ec0f08abf545b236f6c7bc6
- MD5 aeefd8eee053a0c3186efe9c5d0d6e81
- SHA1 a0957dc42d8c3bd8c064a3b91336ff115d47897f
- SHA512 6bdd0377d2fe3aa59c0b9799fdc0397f6cda8a3149acc2e2e6b267176f0970a9f68d3b260592577ebff81c775181dbebcbef27eab21f2c0b2da83f3d518ed297
- SSDEEP 3072:X0JZ+kx2vZg9Cf1auUPssmC70mPs2Ow4llZVF1NayAz0IdrKM0H:XIUh91afPsau2urnF1xAIsk
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\mus_chokedup.ogg
- Size 1.6MB
- SHA256 b77e1fc84dc3b20e779f23c376a457eeb9ba78adf06365d20481a8cb97c7cba3
- MD5 cae6f64fcdb667dc64515c3e6c07fbc8
- SHA1 f54327a0d7d11d5942dd2a5bbc6069f1db909c8c
- SHA512 86ce7dbda1f92ec2ed18340727b697618fac8e59499efd0c030eecd86797808c655c6100ba3eab5608abd0e471c067aaa70b86080db959acbde0b99760f4d267
- SSDEEP 24576:DR1MO95GN+3QLwSDgTI/54rQDtNw4oGeJNHN6AKCh2Glq8a2g6ixA4+wrB87HCY/:bMs7nK546xerHdBhta/7L38eK1J
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\mus_churchbell.ogg
- Size 77KB
- SHA256 efeb11babe4a529587614df295b473896e03393fa73c897dde9b02120389d620
- MD5 aa4061c1c89e8221087449b54f370784
- SHA1 d33f4acf8838d0ac962199191590b838fc1068ea
- SHA512 bef6790840b062bca813579093e25a72570d428fe5906ad116011de6baa337bafc9016ce26cf689752e5c0946f687c8cf7c56f69577fbb013a57dd346b73d55d
- SSDEEP 1536:eZWtHf0mm0JBmPpl0YqUiNC7DBdEThap4lm0Kp8bIjKHDCU7GH:HHMmm0JkR/BdWhagqp8bVHxM
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\mus_computer.ogg
- Size 17KB
- SHA256 4c4062d9f91a6801715aeff168ae4a6568f5e280b729691e6962331c270978c9
- MD5 bf3fd98aad1f2414f286221bf127e61b
- SHA1 69d7ba47a60c69490af8429dcc2808630d73b03b
- SHA512 0c266c3dda15d38572621e10c4cd48ca3b2e142fc3af73bcdb3ac97efb068e269c70a507e6590ae20322ed0956fa174a75c8adae4f96fa0b91fdd2de7e8b88ee
- SSDEEP 384:Gi+Oo8EddZHImy9B4HfaZKXpqZiPdNmPaCpcBzFUMXaM:iZXdd5o98KKZKirmPWiLM
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\mus_confession.ogg
- Size 210KB
- SHA256 a4ca01491ad3ebfdb466a1b129f59fa46dea1d02b8761ac81c016432d9d0f9a3
- MD5 edfd9d675bb2a2ce9132f4f3e5c9349b
- SHA1 06d4ccc7727628d6c2d1d787ace97570e60e7bf6
- SHA512 fa8eff518047ee267e51ab5a69a4ec5f270250b6b26ef817626b603b3b12fcae7f76c49402a6a342619bc55af92866ecc7b9bd84b1906307f51849aef984042b
- SSDEEP 3072:eihb8lKhzjk5g4FqC05ftGYdo0BsdQptoPAMla6FTnMV5apFNfULuDUv9FHzU0:eihbmEzD4ADdo0BsdQpOpMVcMuY9RQ0
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\mus_coolbeat.ogg
- Size 23KB
- SHA256 b2502de775ddd9cd544958795d6f5b4b771249cce9142424b48e732cdaa51699
- MD5 2d721315d4b952cd0413123744470cd5
- SHA1 71905ca68789f608cd18b75811ef2e464a3c6061
- SHA512 76d7833debc58f2f55a418657ae1bd0dcb48ec851a2d66620d16ecfbbe3cbcb04ec2af916ff2eaad9bdf1df7b04e9f8a1fbfffe31039ecad9ee2796efa9f3f30
- SSDEEP 384:vi+OooTMV0pi380tNGMZJPI7FTyq4gt1FjxWLYVEzSVsZoW:dZwbD0tXlI7QvSFAboW
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\mus_core.ogg
- Size 1.9MB
- SHA256 bad6636afb54e3b2a387fd07127a9a1ad4ab6f78171627dfe318bbfb9bc56a25
- MD5 52013a81b15d85d4ba782d1f615b81a2
- SHA1 76cc3316f50546ae09a58c2633de421c9cbc600e
- SHA512 b1ace698d8cfa1f100c08a68a6dd6517f430c1cc081f9104e354029a771d08f6827c2a867855340ae3a270c7c7b47de346d88a8cddee8413f0b5682edd33d286
- SSDEEP 24576:rtPQvdtur8hqhxz3KKnl/3/uBpq59FOwkIB53bHVzM4/5BvhEYwFVCL57POi6RIK:r2xhcRH3/O+9XJ3GYwFI572jO4rXlSK
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\mus_core_ambience.ogg
- Size 60KB
- SHA256 94169292a9f99fe70992d4c0749bbc1889bdc7565dccdd83e3c73abd2c9485d5
- MD5 2cdb01b7748ec9e635897ce6ef73f56e
- SHA1 7caa08c67929d607feaba45432447c35f17f95ac
- SHA512 09fa5dd823a5d5e9b5c59e088d3a97dac722c06edb5a3145cafd7c3fc3288a01cc307a4f77a4b305cc65134fd5a53410f854e427f0ec6d0681293cae2e7088eb
- SSDEEP 1536:JZkPSi8V3uTqPXRs+P4YvNs5RBMFl22ICNnAvC4ImL:liiHgANrFl5IEKF
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\mus_coretransition.ogg
- Size 119KB
- SHA256 0b5d6a8dfbf5ad68b0318808f3c8edd0da2213fbf67b359f3fbbcec854f3374c
- MD5 fa3925cec8965ca76dfc062b7e1ae9eb
- SHA1 5b28e1d4ba5164f4f05387b1cac9c65f01333485
- SHA512 9a4a2ad218ce66d6a0d9f1fb1c55839c01a23c73b32a0329b5c6d1f7533024837ad170592e14fa4ef69cfda5f885b01a6f2b9b6302a0bf0f160b6f5451b2c971
- SSDEEP 3072:i9gNh0dg/khflWfyelb8d2lFvGbfUPEikWmCQD89cCQh8:+gNh+rillbfv2UP3m9G
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\mus_creepy_ambience.ogg
- Size 139KB
- SHA256 105e5f99a30e1b1836b8d3980ae1be289e06e0122e91d1f7910181a7720e9d6e
- MD5 466bf722f3d469ce001682992f4240bd
- SHA1 8304d66bfb92a8cc583023bd060bdd78f97b7cb6
- SHA512 a1421009ad5f4d07e0fb33883aa82a5e6fcc008386fb7a4718d8312d58beeb0aec7bd419c4b464aadc760b2c1daaf0907347939686cf25497f95d47f38d72dc0
- SSDEEP 3072:WBiiotiW3xyZEQH0CU6MG3Gu3XnAF7vlPccNWKbadXWKx:WgXL3xyqQZMMv3XneLpQ2adGg
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\mus_crickets.ogg
- Size 509KB
- SHA256 42ffa30414831e2ba55984edf269cae7eca398773d84b93f554752bb91924af6
- MD5 dc5a47a35a9cefbb89fa2871cbbc0c58
- SHA1 30b4dac52a4d4417d4aff50a7e94dabdaff21175
- SHA512 d816386576c33b8d5349a1e418f06a84bb0564bfaa163e2585b4a6512f9416febc472e7ec605eb084f073e827e728cd6218595e75e32515efe3735855ad2d249
- SSDEEP 12288:GdVA1QGPcINCXKOH4QIxNH6x8GZCfgP3eP9CS1bMs:XNPceCJNA6xqfgC8+bMs
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\mus_cymbal.ogg
- Size 53KB
- SHA256 ad536a8aef8f7485ff1f9c76ea9aadc156b7d3702d82078165e38a39977d9d85
- MD5 90a422f31063a50989b358708e68f109
- SHA1 1c4605a43688cb893947cf0342673e9a212f6780
- SHA512 05301abcbe370deb41f8271891c6418684b9a461e6fe38354b4effe6cf053cb1c4963824b342e8a7492d9e3ff21c4bfddab95d88e83a5bb222bcffa09a6c97a8
- SSDEEP 1536:nZfL8cf0ZfBN02Lr/sHFqW9+usbe4VdvXa8K6QD:ZjuBN02fvRth/ax
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\mus_dance_of_dog.ogg
- Size 113KB
- SHA256 3dd733edfe675fd5ec84a0186d2784ff83ddd0ff69c1b96c975be5c0086893a7
- MD5 b4e28f5b3e88139674359c3a97f545d1
- SHA1 7e33a017272db837ee5172d8cb0dd4d1ef538c95
- SHA512 238be7129ed51cbb2062d1c9c382a528e43abc61d375a1007b2f173e92f4197635888bde5ad8adc974588ae8c4a71b8c07fda314c30c274e1d1cd662cb73698d
- SSDEEP 3072:TBwi5c39wDu+AWBWrethYgxkiwTkbaDTC5+0iV:TBZDuZW8uugxykbwky
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\mus_date.ogg
- Size 1.3MB
- SHA256 a303ee85751ae94b16a1daa0ad258285b0da885142ee1820948bbe72b1b9969b
- MD5 2ec4e784ed2f5b0bd9c4ba0a3d4bf03e
- SHA1 d1a6a88547738092dc8b65f5cc410f88cf76d56d
- SHA512 e2ee77cecebc51e8597c962f6c55031b4cea0adf2ada3fbed8c0b8918525adad06bb4b1b7ea1a3bfed0c6af31f2808bb49b71d437848ac9e4d4663aa202ddce5
- SSDEEP 24576:/8CIxqn8FqnunRcaEfjXiJevssjZduYUCJJZfdLuPgki8/TDSw:nI8n8rD82JAVUy7LuY8PJ
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\mus_date_fight.ogg
- Size 380KB
- SHA256 7ccba51e2205f014e550f472ef847575bd12b4fec677462a274a5e2af0468c1d
- MD5 f48e2cbc55d6d7bef38054db905ced93
- SHA1 8e299d008315c75441539d38759d6ce89ae3c742
- SHA512 c2923da574d8e2159e34ca9b32f88c6db9948ec11b6ffd6ce30e342e708097bea5640847f7dd5eac5341a87c55bd980fcc13180491a6079c3fb06e4abf097452
- SSDEEP 6144:hcwoC6CdVwvH/hzrXBfDRxNg404boHbpCKoMCc6S3l3Mq9yY7tanvfMcoGXXxfcP:izCJwvH5Flx7Xbk0BXc6SVD9yytaHMcK
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\mus_date_tense.ogg
- Size 287KB
- SHA256 fef99e4757e91191d97335da62b7aa49bfe7a116ebf216f79a863e6ac9ee72c5
- MD5 687f5597ecbb83868feaefe1ad4d3b45
- SHA1 19677da55f31fbeacb09aec999b6616684205f83
- SHA512 358fd5440f3f11f9e2759248e2566c8a68e253c616747d1d34d46d7126005259f1d2e220b11a13ba9825c4d239a1b50af84876f0e5e0985175297f3ddcdf24b9
- SSDEEP 6144:a/eWhIyk242Uwil6dyZ2038cDIdTBOVsAnDTvIJvIA2ekczm4:a/hWSUdb20bqtFIvPA2dczH
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\mus_deeploop2.ogg
- Size 70KB
- SHA256 5c4df79571d6e20216cf57d9c823b54f210fe4efb1b13dd0f9dce7d64d6beaa5
- MD5 d471a28314b4d267104419b00a9c4420
- SHA1 be301daf432602439e16f9a42b1c61708d4c8ced
- SHA512 eabb9139cdc22759c45ca29f136e79b643f0bacb984219dd601622770de8a2aecb11804b1fe078bc98d2e9eb1e4b394a0629bab9468d9715ee75d6ae18f11e1e
- SSDEEP 1536:rZKnO3/StkQCLzIBlEWqDmOrJw5hRTzVEF7bsUCvOf/eVus:wO3/St/AzIXO2dEF7bpGOf/eVB
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\mus_disturbing.ogg
- Size 82KB
- SHA256 86a66166b93962edb0455f63959eb53c297c1d52bec13e32877eb8bf6f6a4b34
- MD5 629f9c621c906b0f1a2d445e0fdc050e
- SHA1 52fc9035a8192ed872b92a51014beaafa5e677be
- SHA512 dec3ebe2158702d0f619d513ca4d62ddbfe76f8e969d0fa57078e1e6b2e9afb724257c46566e3d7f3e514513bdc76f05dccb7920a83572d32ba3707ed8b715a1
- SSDEEP 1536:hZuweedgc+2sEbn23il9sayJPUEpqxqrmK7vpfFp/uin7itb1UtFG0:WTedgHYnSijylGemcpNpGi61UnG0
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\mus_dogappear.ogg
- Size 24KB
- SHA256 9c0dc0331ee3164c43eb7ba25028d3923433f88cf27c72a464fb64ded95dd045
- MD5 2d2cf95ff2877f86dd5de21fa6df3758
- SHA1 33345114743cfc37cbe76cfd4a89fc2ed84ca07b
- SHA512 3a8d21ea725635ec25615e3139e4d69161c87ecf729970dfda6a14041677fd7cd14d13ece16704462814722d2524eb029cf2d4bcdac7a5542d6b6faf31c50a7a
- SSDEEP 384:ki+Oo0FfMoYKtEKSnvebuxN8Fud7B7tXokXMabfhfxOfNhbBx2J1uH2m:EZH/cCqWzdt7b7hJgB0LuJ
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\mus_dogmeander.ogg
- Size 85KB
- SHA256 fdfd3d9e926427c5681c683c8523f34754fd5cc88da3308420f016cc9cbafc4a
- MD5 2ac546432377f6e1f9b212353e26fd02
- SHA1 356dbbb1f24a8b7238ef3547362540b96804e03e
- SHA512 448d1af59fbe1d8031aa14c7ba2b73aeb4689500619847c91abd6d0f229a100cd282b98bd1ac7914cc62578c0bf7ead110cd16ea409feb394cdcac29393ae67d
- SSDEEP 1536:eZmtSqaRn/D51l3aFP1WvwUf9PXJjjyydHZWNvVSXHwgUZUeI:rSqandOFkwGPXJjjy2ZWNvgj
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\mus_dogroom.ogg
- Size 345KB
- SHA256 56386401e7e2d75ae1ebc148483654bec8d89cd0f2364f2104b2a0b529af6516
- MD5 bf7de16b8a2a6aae1d3605bd8af94eed
- SHA1 02e7d8e8ca785775ed21d4cc413e18478850ea42
- SHA512 b72ab2c3c3ec8cd5e587b0a84b9166051283e1aab2defc953c258ea8117f7bca9114fb4e7c2f0ee7cacbca0d4fbd1093cfb68ada7273eb142cb2349500516095
- SSDEEP 6144:C0sjAYP/F1WrrANo5MLeOy+CBf6DY7yLOrXsZH+qIw2EjhkbZCwr9nj:C0sjAY3FEoIj+uy0W1MhwNjO7t
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\mus_dogshrine_1.ogg
- Size 556KB
- SHA256 75480e33442c016d961e0c9af33c07a9d7131288de41ee700b8da1e09c84d191
- MD5 1898412d05c0cb107d5bf879b44aee52
- SHA1 9b054610f1a61c92c129c77506e70dd8c9cfbfaa
- SHA512 ee4139ba5e5526bde772d43090cca4d1c8b3a4631c584b2755476f44b2f4c1b9d5823f4751874f6dfe39bc332dba397117f9182943e7ad7ef76ce1a5f2cd2c66
- SSDEEP 12288:WLdlgw4OERIB5EmdLvUBwag2H2rfXTa+fcpFoqEL86ixxmvJl1kGg:mlgkESFdwl2rWucp5ghl1G
- MD5 SHA1 SHA512 SSDEEP
- Path C:\GOG Games\Undertale\mus_dogshrine_2.ogg
- Size 175KB
- SHA256 06afb33e9b3f2a89c8ccee969ce52c0010a9319c4e0310d26eca4ff01f2ab673
- MD5 c4f8ce27eeb6f4bab11f149be5048862
- SHA1 0436080344e8a7d386a3caa5b512703a5d18241d
- SHA512 cf2e8fb31fecf85e1b756d6cb444df9c38a0f5f0a32243182085831b56dc5232f2b721d5a0459afe8b28dbec1f5c8e5735daa0e07f5c5022dca5e91a57c8a4a7
- SSDEEP 3072:qrZ+FuJmfhI0phVvbO38JU08l8nMWEiS0Dt+Kv/kc3/OyUrs:qFqyt0phVvbCHKnG0p+KhWyUI
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Temp\is-6N1P5.tmp\setup_undertale_1.08_(18328).tmp
- Size 1.2MB
- SHA256 a153c8db6f20f9c54f4bd1607b2502d3914662caa9615e1c557cf0abd8777bab
- MD5 3602e9114e7254a36fcd909cfa490c3a
- SHA1 198af4c93cbcf2195df4cb4aa42096a799c7f374
- SHA512 eb1caf37de29467977088952b782dd1cd97969083ef60a0307aa4dd1dde1a44227ef4a871da775b05665f5fec780294c15d6c0f2d9c275e519054eb4628d7fdf
- SSDEEP 24576:r68QxqJVXFmK5u99HOENBLyO9ZKaveoGXCrIIEXsa5p8a1OP1rt1NCSTx9Vr:2vlHHjLDFI9zp+Pg0D
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Temp\is-6N1P5.tmp\setup_undertale_1.08_(18328).tmp
- Size 1.2MB
- SHA256 a153c8db6f20f9c54f4bd1607b2502d3914662caa9615e1c557cf0abd8777bab
- MD5 3602e9114e7254a36fcd909cfa490c3a
- SHA1 198af4c93cbcf2195df4cb4aa42096a799c7f374
- SHA512 eb1caf37de29467977088952b782dd1cd97969083ef60a0307aa4dd1dde1a44227ef4a871da775b05665f5fec780294c15d6c0f2d9c275e519054eb4628d7fdf
- SSDEEP 24576:r68QxqJVXFmK5u99HOENBLyO9ZKaveoGXCrIIEXsa5p8a1OP1rt1NCSTx9Vr:2vlHHjLDFI9zp+Pg0D
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Temp\is-JV63B.tmp\scriptinterpreter.tmp
- Size 1.3MB
- SHA256 5a1fa7eedda77ab1b422ec7bfa6ff22dd10449da5f3ad557c147302913cffd16
- MD5 25909912e6190316be2fca698dc86d7e
- SHA1 ddeb3a1b00e537e0cd364af87727bf4d66d39162
- SHA512 1913ee97b93f6b2b3cb88ccf02e617bcdce54427fc5d6c4030bf5108f9143868bb98beb1e82a86269d64fce482810850fa8f6b6f2694e478eafa4b79f4bc4457
- SSDEEP 24576:zNA7LRqpA3FGK5udVYqCrQsTFZ/b3ECs+zeDvEhIFf71te6ZUXOt1NCnzxjIC:yHo7CrXTvVIFf7UXggVt
- MD5 SHA1 SHA512 SSDEEP
- Path \??\c:\gog games\undertale\goggame-1456487183.info
- Size 840B
- SHA256 adb26c3daa0b8511e8219b7ee950c8cdc527795f7e3b2a6a42355f27fcdc1b29
- MD5 72c5257a93fbeec975a4a4175b50080d
- SHA1 7b28af62c13cc120f3ac3e0ef273be85116d8d76
- SHA512 f8ec190ba65211588f6156e74d1e8e842fe959ab1f8830e8ee1c9adaf35bbbbcaff7814560fa7e5c7e075c5d33422144070e114727229343087465f6895fed2c
- MD5 SHA1 SHA512
- Path \GOG Games\Undertale\__support\scriptinterpreter.exe
- Size 1.1MB
- SHA256 6dd87cb725336bcce9c75eed40fe544cd5cab32a2ea3ed09c6fa901a47db2f53
- MD5 cd0222b112878c6b1074c2354aa026f0
- SHA1 395bccec3fb71ef8f0c4ceb9dee63efa21d948b0
- SHA512 8afaeef70f6913b898621516900c133465d5eef481217417caee012fc776c2a75fe6aa589cbf6b01f9423838be4c898f7cf2051ac8729ce22e7075bd24535f33
- SSDEEP 24576:M/ot1NCJ8tRw4652mwloe4bByHTsoh29ChffGrL:yWgeG46+oeDzcuuL
- MD5 SHA1 SHA512 SSDEEP
- Path \Users\Admin\AppData\Local\Temp\is-25CC8.tmp\botva2.dll
- Size 35KB
- SHA256 a4b61626a1626fdabec794e4f323484aa0644baa1c905a5dcf785dc34564f008
- MD5 0177746573eed407f8dca8a9e441aa49
- SHA1 6b462adf78059d26cbc56b3311e3b97fcb8d05f7
- SHA512 d4ac96da2d72e121d1d63d64e78bcea155d62af828324b81889a3cd3928ceeb12f7a22e87e264e34498d100b57cdd3735d2ab2316e1a3bf7fa099ddb75c5071a
- SSDEEP 768:Aoi9qZO9Q4rAJa4debLTMkUuzXIu53w4eGlV:Av9qZMQVGLyu5r3V
- MD5 SHA1 SHA512 SSDEEP
- Path \Users\Admin\AppData\Local\Temp\is-25CC8.tmp\crcdll.dll
- Size 69KB
- SHA256 23e90ce5a1f2d634a7bf5d5d0522fafeea6df9e536e16f5ce91035d5197128ec
- MD5 1d51fac9e2384eeb674199cfd5281d7d
- SHA1 861dfdc121357d605d0cc3793266713788109eb2
- SHA512 921b00adfe43b883200960e8d0958d4e6b97f6d5cfc096ee277766a3e44cc7805a20877a4edf8bd4d9102bb71a20ac218a9a512f4f76bd751d3ef14f4e0a6eda
- SSDEEP 768:tCrczqrdE7n1KuGUlKTs3RLflC7ZWL/sebzx7jMKkkg8dODMh1MK/N58n:tCrczqJ8U5s3R7lYZWbzx7jPgRE5
- MD5 SHA1 SHA512 SSDEEP
- Path \Users\Admin\AppData\Local\Temp\is-25CC8.tmp\innocallback.dll
- Size 63KB
- SHA256 6afa2d104be6efe3d9a2ab96dbb75db31565dad64dd0b791e402ecc25529809f
- MD5 1c55ae5ef9980e3b1028447da6105c75
- SHA1 f85218e10e6aa23b2f5a3ed512895b437e41b45c
- SHA512 1ec4d52f49747b29cfd83e1a75fc6ae4101add68ada0b9add5770c10be6dffb004bb47d0854d50871ed8d77acf67d4e0445e97f0548a95c182e83b94ddf2eb6b
- SSDEEP 1536:+VqUE7JhgAzj/ZuhnOwKWSAXvze/V2C0mswp91:gWgAnB3XDAqt/p91
- MD5 SHA1 SHA512 SSDEEP
- Path \Users\Admin\AppData\Local\Temp\is-6N1P5.tmp\setup_undertale_1.08_(18328).tmp
- Size 1.2MB
- SHA256 a153c8db6f20f9c54f4bd1607b2502d3914662caa9615e1c557cf0abd8777bab
- MD5 3602e9114e7254a36fcd909cfa490c3a
- SHA1 198af4c93cbcf2195df4cb4aa42096a799c7f374
- SHA512 eb1caf37de29467977088952b782dd1cd97969083ef60a0307aa4dd1dde1a44227ef4a871da775b05665f5fec780294c15d6c0f2d9c275e519054eb4628d7fdf
- SSDEEP 24576:r68QxqJVXFmK5u99HOENBLyO9ZKaveoGXCrIIEXsa5p8a1OP1rt1NCSTx9Vr:2vlHHjLDFI9zp+Pg0D
- MD5 SHA1 SHA512 SSDEEP
- Path \Users\Admin\AppData\Local\Temp\is-JV63B.tmp\scriptinterpreter.tmp
- Size 1.3MB
- SHA256 5a1fa7eedda77ab1b422ec7bfa6ff22dd10449da5f3ad557c147302913cffd16
- MD5 25909912e6190316be2fca698dc86d7e
- SHA1 ddeb3a1b00e537e0cd364af87727bf4d66d39162
- SHA512 1913ee97b93f6b2b3cb88ccf02e617bcdce54427fc5d6c4030bf5108f9143868bb98beb1e82a86269d64fce482810850fa8f6b6f2694e478eafa4b79f4bc4457
- SSDEEP 24576:zNA7LRqpA3FGK5udVYqCrQsTFZ/b3ECs+zeDvEhIFf71te6ZUXOt1NCnzxjIC:yHo7CrXTvVIFf7UXggVt
- MD5 SHA1 SHA512 SSDEEP
- Path \Users\Admin\AppData\Local\Temp\is-NJ34L.tmp\uninstall.dll
- Size 698KB
- SHA256 5091cd5eef67f8f4cf9ae53b52160d6bedf7245c580d8a231595ba39e55ffdb1
- MD5 73e7b1edd7e389d8fddf31273b34bd14
- SHA1 c4d51c194b1901b186c815101424a58419bbcb3d
- SHA512 1d0673f8c87a42cff4f3440527824e192c2fa3c410227ed46aa05dc2fe068f170df771777cea11f171f75b7a7897e9e0d9eb9106db56996f8c95cbe7abef5c8f
- SSDEEP 12288:UYKdxak+DkBHQWKWZnExQnpfuX9JFOarGMznITgW/DZo888888888888W8888882:Vea1DkBtKWhkQnYIwtITgW/+
- MD5 SHA1 SHA512 SSDEEP