snakebot | 21fbcab3c652d5af9efe57454d60d5a5057773e1c234ed16ae14233724502b44

Analysis

max time kernel
120s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20231130-en
resource tags

arch:x64arch:x86image:win10v2004-20231130-enlocale:en-usos:windows10-2004-x64system
submitted
11-12-2023 03:24

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

setup_undertale_1.08_(18328).exe
Size

126.7MB
MD5

69a1054bcf85084cc4bc33e332f1844d
SHA1

a3db1a7c5a07ea07c31d40ab4c7685215ac4f170
SHA256

21fbcab3c652d5af9efe57454d60d5a5057773e1c234ed16ae14233724502b44
SHA512

f57df05d2d5db04cb48a1d72070ac5d76ae29620cca314817fbfbb30d42c2150115ac510acb216095115c210fe2eee80575ffc78a36fd455e72e4de9492b4f81
SSDEEP

3145728:WSHIqNWvNc0rn+0fslfSob+5Framz9LQMj5jMgQN7:WytNAfcSob2NaoLQ+7c7

Score

10^/10

snakebot discovery snakebot

Malware Config

Signatures

SnakeBOT
SnakeBOT is a heavily obfuscated .NET downloader.
snakebot

Contains SnakeBOT related strings 1 IoCs

snakebot

Processes:

resource	yara_rule
C:\GOG Games\Undertale\data.win	snakebot_strings

Checks computer location settings 2 TTPs 2 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

Processes:

setup_undertale_1.08_(18328).tmpscriptinterpreter.tmp

description	ioc	process
Key value queried	\REGISTRY\USER\S-1-5-21-1791582586-1997866593-3795608343-1000\Control Panel\International\Geo\Nation	setup_undertale_1.08_(18328).tmp
Key value queried	\REGISTRY\USER\S-1-5-21-1791582586-1997866593-3795608343-1000\Control Panel\International\Geo\Nation	scriptinterpreter.tmp

Deletes itself 1 IoCs

Processes:

UNDERTALE.exe

pid process

1000 UNDERTALE.exe
Executes dropped EXE 4 IoCs

Processes:

setup_undertale_1.08_(18328).tmpscriptinterpreter.exescriptinterpreter.tmpUNDERTALE.exe

pid process

1080 setup_undertale_1.08_(18328).tmp
4952 scriptinterpreter.exe
2832 scriptinterpreter.tmp
1000 UNDERTALE.exe

pid	process
1000	UNDERTALE.exe

Loads dropped DLL 7 IoCs

Processes:

setup_undertale_1.08_(18328).tmpscriptinterpreter.tmpUNDERTALE.exe

pid	process
1080	setup_undertale_1.08_(18328).tmp
1080	setup_undertale_1.08_(18328).tmp
1080	setup_undertale_1.08_(18328).tmp
1080	setup_undertale_1.08_(18328).tmp
1080	setup_undertale_1.08_(18328).tmp
2832	scriptinterpreter.tmp
1000	UNDERTALE.exe

Modifies file permissions 1 TTPs 4 IoCs
discovery

File and Directory Permissions Modification
T1222

Processes:

icacls.exeicacls.exeicacls.exeicacls.exe

pid process

2184 icacls.exe
3268 icacls.exe
3492 icacls.exe
888 icacls.exe
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012
Drops desktop.ini file(s) 1 IoCs

Processes:

svchost.exe

description ioc process

File opened for modification C:\Users\Admin\Videos\Captures\desktop.ini svchost.exe

pid	process
2184	icacls.exe
3268	icacls.exe
3492	icacls.exe
888	icacls.exe

description	ioc	process
File opened for modification	C:\Users\Admin\Videos\Captures\desktop.ini	svchost.exe

Drops file in System32 directory 11 IoCs

Processes:

svchost.exe

description	ioc	process
File opened for modification	C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSS.chk	svchost.exe
File opened for modification	C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSS.jcp	svchost.exe
File opened for modification	C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSS.jtx	svchost.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSStmp.log	svchost.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSSres00002.jrs	svchost.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSTokenDB2.dat	svchost.exe
File opened for modification	C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSS.log	svchost.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSSres00001.jrs	svchost.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSS.chk	svchost.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSTokenDB2.jfm	svchost.exe
File opened for modification	C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSTokenDB2.dat	svchost.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

Processes:

svchost.exesvchost.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	svchost.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	svchost.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	svchost.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	svchost.exe

Modifies registry class 3 IoCs

Processes:

svchost.exemspaint.exesvchost.exe

description	ioc	process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1791582586-1997866593-3795608343-1000\{B386FCBC-F852-4A6A-9EA0-53CD9B733177}	svchost.exe
Key created	\REGISTRY\USER\S-1-5-21-1791582586-1997866593-3795608343-1000_Classes\Local Settings	mspaint.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1791582586-1997866593-3795608343-1000\{7FB1D983-ADA3-4A3C-849A-A19FB2358ACF}	svchost.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

Processes:

setup_undertale_1.08_(18328).tmpscriptinterpreter.tmpmspaint.exe

pid	process
1080	setup_undertale_1.08_(18328).tmp
1080	setup_undertale_1.08_(18328).tmp
2832	scriptinterpreter.tmp
2832	scriptinterpreter.tmp
4856	mspaint.exe
4856	mspaint.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

OpenWith.exe

pid process

948 OpenWith.exe
Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes:

AUDIODG.EXE

description pid process

Token: 33 4844 AUDIODG.EXE
Token: SeIncBasePriorityPrivilege 4844 AUDIODG.EXE
Suspicious use of FindShellTrayWindow 2 IoCs

Processes:

setup_undertale_1.08_(18328).tmpscriptinterpreter.tmp

pid process

1080 setup_undertale_1.08_(18328).tmp
2832 scriptinterpreter.tmp
Suspicious use of SetWindowsHookEx 5 IoCs

Processes:

UNDERTALE.exeOpenWith.exemspaint.exeOpenWith.exe

pid process

1000 UNDERTALE.exe
948 OpenWith.exe
1000 UNDERTALE.exe
4856 mspaint.exe
3028 OpenWith.exe

pid	process
948	OpenWith.exe

description	pid	process
Token: 33	4844	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	4844	AUDIODG.EXE

pid	process
1000	UNDERTALE.exe
948	OpenWith.exe
1000	UNDERTALE.exe
4856	mspaint.exe
3028	OpenWith.exe

Suspicious use of WriteProcessMemory 24 IoCs

Processes:

setup_undertale_1.08_(18328).exesetup_undertale_1.08_(18328).tmpscriptinterpreter.exescriptinterpreter.tmp

description	pid	process	target process
PID 1716 wrote to memory of 1080	1716	setup_undertale_1.08_(18328).exe	setup_undertale_1.08_(18328).tmp
PID 1716 wrote to memory of 1080	1716	setup_undertale_1.08_(18328).exe	setup_undertale_1.08_(18328).tmp
PID 1716 wrote to memory of 1080	1716	setup_undertale_1.08_(18328).exe	setup_undertale_1.08_(18328).tmp
PID 1080 wrote to memory of 4952	1080	setup_undertale_1.08_(18328).tmp	scriptinterpreter.exe
PID 1080 wrote to memory of 4952	1080	setup_undertale_1.08_(18328).tmp	scriptinterpreter.exe
PID 1080 wrote to memory of 4952	1080	setup_undertale_1.08_(18328).tmp	scriptinterpreter.exe
PID 4952 wrote to memory of 2832	4952	scriptinterpreter.exe	scriptinterpreter.tmp
PID 4952 wrote to memory of 2832	4952	scriptinterpreter.exe	scriptinterpreter.tmp
PID 4952 wrote to memory of 2832	4952	scriptinterpreter.exe	scriptinterpreter.tmp
PID 2832 wrote to memory of 888	2832	scriptinterpreter.tmp	icacls.exe
PID 2832 wrote to memory of 888	2832	scriptinterpreter.tmp	icacls.exe
PID 2832 wrote to memory of 888	2832	scriptinterpreter.tmp	icacls.exe
PID 2832 wrote to memory of 2184	2832	scriptinterpreter.tmp	icacls.exe
PID 2832 wrote to memory of 2184	2832	scriptinterpreter.tmp	icacls.exe
PID 2832 wrote to memory of 2184	2832	scriptinterpreter.tmp	icacls.exe
PID 2832 wrote to memory of 3268	2832	scriptinterpreter.tmp	icacls.exe
PID 2832 wrote to memory of 3268	2832	scriptinterpreter.tmp	icacls.exe
PID 2832 wrote to memory of 3268	2832	scriptinterpreter.tmp	icacls.exe
PID 2832 wrote to memory of 3492	2832	scriptinterpreter.tmp	icacls.exe
PID 2832 wrote to memory of 3492	2832	scriptinterpreter.tmp	icacls.exe
PID 2832 wrote to memory of 3492	2832	scriptinterpreter.tmp	icacls.exe
PID 1080 wrote to memory of 1000	1080	setup_undertale_1.08_(18328).tmp	UNDERTALE.exe
PID 1080 wrote to memory of 1000	1080	setup_undertale_1.08_(18328).tmp	UNDERTALE.exe
PID 1080 wrote to memory of 1000	1080	setup_undertale_1.08_(18328).tmp	UNDERTALE.exe

C:\Users\Admin\AppData\Local\Temp\setup_undertale_1.08_(18328).exe
"C:\Users\Admin\AppData\Local\Temp\setup_undertale_1.08_(18328).exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1716

C:\Users\Admin\AppData\Local\Temp\is-7QNCL.tmp\setup_undertale_1.08_(18328).tmp
"C:\Users\Admin\AppData\Local\Temp\is-7QNCL.tmp\setup_undertale_1.08_(18328).tmp" /SL5="$A0038,132362071,185856,C:\Users\Admin\AppData\Local\Temp\setup_undertale_1.08_(18328).exe"
2⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:1080

C:\GOG Games\Undertale\__support\scriptinterpreter.exe
"C:\GOG Games\Undertale\__support\scriptinterpreter.exe" /verysilent /supportDir="C:\GOG Games\Undertale\__support" /SUPPRESSMSGBOXES /NORESTART /DIR="C:\GOG Games\Undertale" /productId="1456487183" /buildId="50921790503031850" /versionName="1.08" /Language="English" /LANG="english"
3⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4952

C:\Users\Admin\AppData\Local\Temp\is-MELIU.tmp\scriptinterpreter.tmp
"C:\Users\Admin\AppData\Local\Temp\is-MELIU.tmp\scriptinterpreter.tmp" /SL5="$501E2,569884,191488,C:\GOG Games\Undertale\__support\scriptinterpreter.exe" /verysilent /supportDir="C:\GOG Games\Undertale\__support" /SUPPRESSMSGBOXES /NORESTART /DIR="C:\GOG Games\Undertale" /productId="1456487183" /buildId="50921790503031850" /versionName="1.08" /Language="English" /LANG="english"
4⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:2832

C:\Windows\SysWOW64\icacls.exe
"C:\Windows\System32\icacls.exe" "c:\gog games\undertale" /grant Everyone:(OI)(CI)F
5⤵
- Modifies file permissions
PID:888

C:\Windows\SysWOW64\icacls.exe
"C:\Windows\System32\icacls.exe" "c:\gog games\undertale" /grant Everyone:(OI)(CI)F
5⤵
- Modifies file permissions
PID:2184

C:\Windows\SysWOW64\icacls.exe
"C:\Windows\System32\icacls.exe" "c:\gog games\undertale\options.ini" /grant Everyone:(OI)(CI)F
5⤵
- Modifies file permissions
PID:3268

C:\Windows\SysWOW64\icacls.exe
"C:\Windows\System32\icacls.exe" "C:\Users\Admin\AppData\Local\UNDERTALE" /grant Everyone:(OI)(CI)F
5⤵
- Modifies file permissions
PID:3492

C:\gog games\undertale\UNDERTALE.exe
"C:\gog games\undertale\UNDERTALE.exe"
3⤵
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
PID:1000

C:\Windows\System32\GameBarPresenceWriter.exe
"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
1⤵
PID:3044

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:948

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
1⤵
- Drops desktop.ini file(s)
- Checks processor information in registry
- Modifies registry class
PID:4824

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x2f8 0x40c
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4844

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
1⤵
- Checks processor information in registry
- Modifies registry class
PID:4148

C:\Windows\system32\mspaint.exe
"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\Desktop\ExportReset.jpg" /ForceBootstrapPaint3D
1⤵
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4856

C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s DsSvc
1⤵
- Drops file in System32 directory
PID:2636

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:3028

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:744

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

T1222

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\GOG Games\Undertale\D3DX9_43.dll

Filesize
96KB

MD5
aae70ce31ea66fbaad8417fc368d6490

SHA1
63d83585b789cc45f831ab90a4c1acd9ecad0521

SHA256
7760f7e20a4a3269c3b82210eaf0e64021b089e72c36e0b86d1fe342a0527ea0

SHA512
647b8c913cc30c1a9f27f1fc8906162054385aed401ad55a9f87ac23f7a00e771499ae11130613153da2f877d27733ae1c8a872be458fd7789d26732dec45a05

Download Submit
C:\GOG Games\Undertale\__support\app\options.ini

Filesize
97B

MD5
40ede613879f6406fd90c4bad9ba08cb

SHA1
234d1a88ecb5eb2f945f0f8959df69bc154a4677

SHA256
52a59e5417778aac32756ac0617d5b00fd47a9015e54b3865fdc17a867b58cf9

SHA512
c42b738b58298bdd8866b6f053df12a13b9eee3917e86846a7fa3d00248a7dc1c7658878c06f51d6b9e0450a4eee940c61d56ad11fe32656bd64f9341abdcaab

Download Submit
C:\GOG Games\Undertale\__support\scriptinterpreter.exe

Filesize
988KB

MD5
e56ae82172569e7b80b9d44828906b91

SHA1
1e4ef5a371cc772718db7765727e9136f9f15726

SHA256
6543b999634e90d9740643db75b396b71b88e78cf027bd5e67e4ea41ac59b4b3

SHA512
569a86c29c85745ca71f98b5819b30dcf34e1b502e018b738988bc6ddb6ecf6ef900485b4e9d2562770bfafb4274fc4f09648d3222c68d79fbe7f8a02936b7ec

Download Submit
C:\GOG Games\Undertale\__support\scriptinterpreter.exe

Filesize
709KB

MD5
8075e4edde24339c9c2729200319ad73

SHA1
29a1f3a4158aed98d910f61491b01423b0c504f9

SHA256
eb85ec87369511973409af26deb1293e4655ce84495687d4e4511990fbfde894

SHA512
5460ee7d06490627c84a13c86e856fdec9bca6ab97bc73248c6e6c24dd581dc52e46c82523a50d9bfc4f33367229ec10e9f84b245ff32a2d1ee205b9523e0907

Download Submit
C:\GOG Games\Undertale\__support\scriptinterpreter.exe

Filesize
606KB

MD5
79aa0ae04d5fe352a5fce7f53f877ffe

SHA1
926db82740aa61d765ef3e582857a800eee7ddb8

SHA256
dd9bc47f7bd4488aa4eb57a0125abee4ceda2d3b81bfa2921918fedf9cbd785e

SHA512
5f531b5874bd6cb4e0afa0d66f8238c81182c438e2f03186a265ce31560150a8e81212d1fe4c9e9225f471d9187a8712e54d1dd42012444b74f3913d57f8d9e4

Download Submit
C:\GOG Games\Undertale\abc_123_a.ogg

Filesize
40KB

MD5
0db017fdf19134876127376ad1d56a8c

SHA1
0f78b9af1858c6c7c01205bfaa99f3c4934c510e

SHA256
baf01fcee2fa3cc9769af20407a4de9b30027a5e651be601808ab521485fea55

SHA512
7fb4cb4a54ffe57ac7f5989f969ec8b6e0088d319479ca83c69b0ce71b8a06ef480a8184ff8e3bb827c7bb6f784a94654003dd63f59983a601997a989fb9b67f

Download Submit
C:\GOG Games\Undertale\credits.txt

Filesize
11KB

MD5
85ef2348d70f81de3b00be93348361f1

SHA1
6c734e646ca25e19391099e32aea9f1a006722aa

SHA256
5e5ab1852c4734a547e6143ef643b43d211e3cee334e949cb59fffb51bf04098

SHA512
01661bda880aa2ea085fa98eb565fd5b938cb86d673908fad80980ea3a13d0a5255a431a909388740a33b8e33e2ae4b4a38c9de141eb072048d47d81aa6268e3

Download Submit
C:\GOG Games\Undertale\data.win

Filesize
208KB

MD5
8258b3b7449a7ccd3317fa23027e317e

SHA1
b0fb6b43985d2f0656633a6572325de1761fa802

SHA256
5f6dcbbf0831c04296fdaeb811d5b7fc606fd697d6caacb8bfae2a05ca4d64de

SHA512
8b4c503a6620c2b5e0d4f14e64daa617035f1f4611a34a592cf5011af02f47e71fbf7c1d7da72688d1c42c7aeb4fc5ee30ed0cc8e24d4f67eee649feea5c0e81

Download Submit
C:\GOG Games\Undertale\goggame-1456487183.hashdb

Filesize
7KB

MD5
17f41c26cc277c59e53c5bdb54343776

SHA1
5891b83ff264d03f2a1aaac2f167b421824a3f51

SHA256
07f899a497faa6d3befbead9cc86f8ca24fcad719426f106a1eb2c28217743bc

SHA512
450514f863398b115a5870941a00570879f4d1cc74a25ef51c6dbd217448769d0d57dbf67b14c8ecf1c8d3d2d7b08d4539a50ae1795a4b7943e59d776be91f17

Download Submit
C:\GOG Games\Undertale\goggame-1456487183.ico

Filesize
77KB

MD5
6e061e42dfeb6e2805c95c98affcbcca

SHA1
0807f2510fd2f18bf3da0a867c92989298a259d0

SHA256
e79eba878c4c559d6efcfb15aceaffba07f24b8a86973c9ebd4ab77893f81d6a

SHA512
d06d5a30b7d7792a2dc9959fa50ff5ca986c30d737af98a92b87f2f0af0f56fe89cd117d4935253f96b524c0f0d25a749dfde3a83241bd283efa2d68fe7eed64

Download Submit
C:\GOG Games\Undertale\goglog.ini

Filesize
204B

MD5
65fb907e1079dd47bcfe5deb5893a39a

SHA1
603a807ab4dfbeb3e94023f9b6d2bfe0ef8608f2

SHA256
3c4634e30c9c8b54de5127cc6bdcd0a3d3d739313994810f154096d395c2c87b

SHA512
b101d5425521180c156c6ebb441f1a79664911ea46193a6cc6e489ba8c8d00fa49ba4e601d0eddb1ccb8c03ea25178c0fae436f295aab6026fe01e41f19ebc03

Download Submit
C:\GOG Games\Undertale\mus_a2.ogg

Filesize
65KB

MD5
eaf65be912fb0b276a63f67714a8feda

SHA1
4378891f8c2bbe615b3fee76c2f2ce48349aafa7

SHA256
1030e29545a012666664bbe4a7b61b181ad0d8c98807b2629183b0dcfc7f4298

SHA512
58cf68c05d8810613d66973b1f485cf103fb3346053d6632c4b087e28c5ae86da320d3da761c84c88e9d1b97d77d223e2b1b19307d134a8f041d02f3f7960675

Download Submit
C:\GOG Games\Undertale\mus_alphysfix.ogg

Filesize
36KB

MD5
dcafc0871eb93693cc5b0f9bf169df55

SHA1
cea9c096f8285d77b348d92fc26e27d45a889424

SHA256
6f4cd2037b27e6dc0ab6044ce58a2e66db380a13e67b5167d50d9caf02e37ca0

SHA512
369a3bca748b14589da221746d681191a90221337c197871952006efe184c9eb9b499107013d90385056b9d44d496a74336cf603eaacb81843d600b186c5f608

Download Submit
C:\GOG Games\Undertale\mus_amalgam.ogg

Filesize
55KB

MD5
0908e0a959a974a984ae60d0c214b2a8

SHA1
fa9e9161fc55f71e3779986cba23af94247a2a13

SHA256
5631f5cf05d3afa929b266bbcee31f93f0fa51e1229a9a2e1cf8e2788fad9b8d

SHA512
ac320d3ab55de70618df523bd8116a6fbff627eac9ebcf6cc06578d1cbd6485d7fb464b36cef4bb97c55e9bf97ec6a08ae44065b5770256a4e2946c3d061d9ce

Download Submit
C:\GOG Games\Undertale\mus_ambientwater.ogg

Filesize
24KB

MD5
c5d95352887d3ba20b0fff600284822d

SHA1
aa3b09a27a46a196baafb03736b9493d9933e8cd

SHA256
195b5bdbc3066c2025b28667b5c7f72a22b01cd0f629d9601ec3c749858b706b

SHA512
02884b849ddafe1b736497b7bb1be0067f1d92842940c0435a292384023dad97a5880c3cf38e041a7630b6f908b78c1f0ec84840f05a04ac63d2d134bc1fdf51

Download Submit
C:\GOG Games\Undertale\mus_anothermedium.ogg

Filesize
135KB

MD5
f285f5165b77b76d5ecb10a4d47f5423

SHA1
ab24b924aac66b14b093cc19fda0c99e0a4dcb34

SHA256
0f70b92b6b1c0d6e7ef89d9ee51ae6b01e732f5311b1435c5ae35d50682b686d

SHA512
e7e691a90c44fd141dc1d0f78c3f0cac6b819430b18fbf593c7b37ff2583fcbfe61daa1182cc7c853d27823270d14ebe9ff48101a67045d059e922ec6c40ade6

Download Submit
C:\GOG Games\Undertale\mus_bad.ogg

Filesize
15KB

MD5
92952e0422d298e61cde62bb2a5f5f88

SHA1
b98324d43c5b5e59a9e767ee6b5db75c74d8fa57

SHA256
79d6af19bc9ac74221af85e1ab5fa67c466b08ede7979090870d93a368f5abf6

SHA512
c38300948b9c8553af11cf01f81a3d7d6875d32f40934c27030b844e206237ff36c1499d1e559b6b21bbff6c710a01a2b3e24f043c2df5b49e9c00ef4d1ac5aa

Download Submit
C:\GOG Games\Undertale\mus_barrier.ogg

Filesize
61KB

MD5
3045111f0a469b7aa6128a9d8aa7ce6c

SHA1
42eebf069da49a5e2229b0f15b2637b81a5fc91e

SHA256
6cdc3bce834abbb609cf89a78d5bf0ce538194aa6101161bbab83733eb46edfc

SHA512
d3238c6bcfa5d1f72297bbba4f7c7d4c34c7f37cdc768c39fe06f24b70135f0d27a3cbce60151362fb674d434607060dadfc6923c0929be5665b67e4ae870dd3

Download Submit
C:\GOG Games\Undertale\mus_battle1.ogg

Filesize
53KB

MD5
f436e1bbbadefd9cd68c4821f3f17065

SHA1
5d7b5607760a631daf63eb11c15d25a7b80a9f22

SHA256
917a344dc89dbce99be6f7cb1a39eb9561e0121500ecf7ba0c108aca69b32809

SHA512
cda2f1f35b4a7c3919a0dbdfe909303b32dd7c3c345b969f9fbaea052619f9a62f259666064f9f5848efb73d3940701d25bf73bd75388353fea2fa3a89a8f269

Download Submit
C:\GOG Games\Undertale\mus_battle2.ogg

Filesize
53KB

MD5
b30f9a917211198668c423859a8960dd

SHA1
22287b96d4a0ad276c48cdf9f37bc4dd70aa9344

SHA256
ac78aeba562ce3228b524a1685b33abf41ad315c4e827fb1a88aaba26bbe0c1e

SHA512
fe54eb4b73853eb6478156852776c2f8840cc488895dcdefbd937b702ab3a07a34663dbb0e9d584d606adab34a7226af600045bf1b62ccc24e593436957ebc0d

Download Submit
C:\GOG Games\Undertale\mus_bergentruckung.ogg

Filesize
71KB

MD5
1c52b79629ae32680790a23b32036cdf

SHA1
8088afa7fe4785dc53e053d1a63c3f0e3e3b13d0

SHA256
382001c569fb16141c8e95398793ec0dce836a22f6c84f592a0c9d266100c6c3

SHA512
c56e7c345442d360340aef13503029c84c5f1730f14677d5e7c5e2a4a25501c2d2379b8081fd23588a061fd95a4828dde0f795434e844ddf8606556527680980

Download Submit
C:\GOG Games\Undertale\mus_bgflameA.ogg

Filesize
53KB

MD5
67f5e7072204bc20998066de1ff20e2e

SHA1
3aa37c53f9d5ac5507e5250bb07900e61c897f49

SHA256
0c9eee11f57a00368f7fa165ece1f97c345f03c28826d6dd55c49006c545177f

SHA512
7313a86d3fe5e0d151b6a503844758bb1af4713d1be313e23eb9d34ff79fe1666fb8d6c6af03a6f175ee8aa611e331aa56323bb7baeb1577b7e0804243fdeb8a

Download Submit
C:\GOG Games\Undertale\mus_birdnoise.ogg

Filesize
325KB

MD5
14e367e323c1c5e5ec0c28ca93d02d05

SHA1
5b13cd9017a54dabed8de42ec0c9ecddfa275efe

SHA256
645cd416b2b4a46f1bd3ec9930e02b85a8a279c4dedc9f8a1b02147c27a99b3f

SHA512
c23f95bac6808cb2f9736de0bfe4f029b7595bfaf8af1fcd70ebed5a77d494b942d43d0888e307582f0c052626416b1cce2307e1fb19476c2fbdb04ecdb3a123

Download Submit
C:\GOG Games\Undertale\mus_birdsong.ogg

Filesize
232KB

MD5
999719a80d98394c8678ddabab6e8a86

SHA1
dd9f12a5fe43e4fd44ca87086611b973bd0fe4d8

SHA256
4f3c335b25f29a486811f0a22679b46a6c5c5f0dedd86194dfc69370b13bbd95

SHA512
6facf5d4f4047a48f56f33441061f18cffb0421686426fa1731019f0f05962ebc71112dc0298430d70846ab1ee1a39cf20ca32241af32fd444e10e8794af1daa

Download Submit
C:\GOG Games\Undertale\mus_boss1.ogg

Filesize
297KB

MD5
578499e6010325ee5fc566782302a4a9

SHA1
c174603fda26a51559807ae0d8c9db271693ef85

SHA256
5aa5f70fdc29cf4fe0b90bf990d6dd7548202f4193ae5b77a5fe32a79128a0a2

SHA512
a6f72c1babb9963699d33b6482a775456b5ffb4c253311fc8d61f6e375ec388c396dc9107e99e29e036d72003c035052feb8dad734705588bacf5b01b7ec77ea

Download Submit
C:\GOG Games\Undertale\mus_cast_1.ogg

Filesize
242KB

MD5
fa32befb826823f5cb6a80abf6d36265

SHA1
2ce043b686b6a121f0ae4cf12b9dca8cdc27de41

SHA256
b093d1fa9c9c46d1a4a15769195b53072c636351d03ed6bbf4ef360d551cf137

SHA512
b59a487438f77a1b4a80c18329de8f8de678d27e22ca969ad796f1a9f4228153a25edd721654ea3f0966cc068b2890beada87005893499808de06914ae3283db

Download Submit
C:\GOG Games\Undertale\mus_cast_2.ogg

Filesize
154KB

MD5
84d4adbcf0ca7c627c896d6a7e535592

SHA1
a5a35f6bb51d9e154678d15b432d4560f12d5859

SHA256
7a38c3dcde6b3ddd3662b258b485d67e9da1f0f3739d00188764593fef9dfade

SHA512
88c6cee5419c3e80896fd31b0d478bdc62c906577e9b141cddea5613c17759ded074567b8ac6f843a987a13ab6d63767355b8c2b1a5e94df8f8c6b8c1183a7c4

Download Submit
C:\GOG Games\Undertale\mus_cast_3.ogg

Filesize
115KB

MD5
acdf79583780e88bbf05e78d5e4fc229

SHA1
c1060efe3e362df89f6f8cc44c3243d3729b119c

SHA256
b35c841cfd222848afc86cfd3671a1a997037c05fba3b5b5be7b3286bdee9249

SHA512
c2aec2f548239163d18f896ed98350350e72f69dac1c96de4bab74692b7b48a5105137f45f3e42e72d49333c85a0e0a9100b78039aa367afb0df4459af340c51

Download Submit
C:\GOG Games\Undertale\mus_cast_4.ogg

Filesize
81KB

MD5
ef9498e6b0ba8203dfac78134efd768c

SHA1
ff2e957abae15a737b0eb982f05f091b38ad6dad

SHA256
464a39f81b942c3ab817b7a2286f8d17d55f8d8fbc8aa578be203e529c4c710b

SHA512
99bfaa3db65e22cbd53836d3b312a8315a1b1eedf6315406fd0e4e9d0c9efb2c535bf7fd8df6292bc5ab5cd7460fa7afa16e0817f1e23fea980e96c9bf9e93a3

Download Submit
C:\GOG Games\Undertale\mus_cast_5.ogg

Filesize
113KB

MD5
78bf7a2290caa2ed4ce12ad1aa96f9e0

SHA1
beeaa5f1972a2a50fe30d80b5f884279f486faba

SHA256
5771abaf06ab4acbc919ecee5152e52e476ad861cfb1f7e3b651c0d53a231eb7

SHA512
555da911dabe8bb6eee3de5434938808a452e3584dbe5244cc26e607026692e625cbc756149e8e433fe066e8a5769268313102ee279eb88012fdc8ae80e5c901

Download Submit
C:\GOG Games\Undertale\mus_cast_6.ogg

Filesize
149KB

MD5
bc7d639dad34ee296f590e8dc00ef0df

SHA1
6a59f5a1063d106865abc2462325f3d03e163911

SHA256
63099ad3e04e8fc736a2aa3801c844c7aa3ca6b5a8eb1399bfdaf78226b23f61

SHA512
4669b2a14f6b6da1bec2358d2024e16c233721a595b25c61c0a6eec2e0070d9ee3c8008f56ba005e351712a32daae1dd7ed0f43d23baaeb001da2dfab6ad0368

Download Submit
C:\GOG Games\Undertale\mus_cast_7.ogg

Filesize
147KB

MD5
5e601173a62d88deb5e7cc33b6315aa8

SHA1
c9475bd239c55700eac6bf25f1d995620b418ab0

SHA256
185a8e50d9566a005c5011a627017c7e4ec99feec6f09b7122ae2f3c20eefb73

SHA512
283568c7f901e311ac485167f652fc1d7983e29f4daf05327dd24603d4dc81d93eab294d3fa89a0a1883a05006d89f92193eaa367de57dde73fa982b0dbefdae

Download Submit
C:\GOG Games\Undertale\mus_chokedup.ogg

Filesize
89KB

MD5
4a37842fdbdb05d393b658dd1755299d

SHA1
7348054849683628b506a7f8ce39ed3fa853d75b

SHA256
d49f26052cdcb1e65b2a04577b0a930c46fafda80a657635213c4a38aab866c4

SHA512
c6cf036d9811638ffde1ffee6178530330f1b72b585ff859180ec5056fe694794de336dab267e07a6bccc642d4ef3893ca2deee2ccc5c1612e0a9c2f466b8624

Download Submit
C:\GOG Games\Undertale\mus_churchbell.ogg

Filesize
77KB

MD5
aa4061c1c89e8221087449b54f370784

SHA1
d33f4acf8838d0ac962199191590b838fc1068ea

SHA256
efeb11babe4a529587614df295b473896e03393fa73c897dde9b02120389d620

SHA512
bef6790840b062bca813579093e25a72570d428fe5906ad116011de6baa337bafc9016ce26cf689752e5c0946f687c8cf7c56f69577fbb013a57dd346b73d55d

Download Submit
C:\GOG Games\Undertale\mus_computer.ogg

Filesize
17KB

MD5
bf3fd98aad1f2414f286221bf127e61b

SHA1
69d7ba47a60c69490af8429dcc2808630d73b03b

SHA256
4c4062d9f91a6801715aeff168ae4a6568f5e280b729691e6962331c270978c9

SHA512
0c266c3dda15d38572621e10c4cd48ca3b2e142fc3af73bcdb3ac97efb068e269c70a507e6590ae20322ed0956fa174a75c8adae4f96fa0b91fdd2de7e8b88ee

Download Submit
C:\GOG Games\Undertale\mus_confession.ogg

Filesize
73KB

MD5
a256fbf0fd24868c108d39142b058d96

SHA1
7da8885ef030b30e60ce2155b7a988431ccb8f0a

SHA256
15a3e1ccb3a366183cd2fcc64542dc7c3bf0e3a09a52e9a29799d1e4c3c70963

SHA512
afce01c698c4052a299497bdf7c1493614e50ea315ccb746778341af36da788b82df3ffef96e695463e5c44c8259c548ca2b95135975b91bbe26e9d678469a00

Download Submit
C:\GOG Games\Undertale\mus_coolbeat.ogg

Filesize
23KB

MD5
2d721315d4b952cd0413123744470cd5

SHA1
71905ca68789f608cd18b75811ef2e464a3c6061

SHA256
b2502de775ddd9cd544958795d6f5b4b771249cce9142424b48e732cdaa51699

SHA512
76d7833debc58f2f55a418657ae1bd0dcb48ec851a2d66620d16ecfbbe3cbcb04ec2af916ff2eaad9bdf1df7b04e9f8a1fbfffe31039ecad9ee2796efa9f3f30

Download Submit
C:\GOG Games\Undertale\mus_core.ogg

Filesize
75KB

MD5
55d3bdc94bc9f4cc470e8148d126a63a

SHA1
a3395bac76358301f0c9ecfaca6d00151ec2de00

SHA256
27b021e8aefaa2f4ecd36a752b4e120866bccfdfc111b1773c3590c25e979d53

SHA512
6ab702f256796186453a4cd95aed799af3157bf3d80f8e85d946c371947d3d46d5c989fd6100f4095206c304f7cfa140b90a0e7734ad3c96afa90551ff344207

Download Submit
C:\GOG Games\Undertale\mus_core_ambience.ogg

Filesize
60KB

MD5
2cdb01b7748ec9e635897ce6ef73f56e

SHA1
7caa08c67929d607feaba45432447c35f17f95ac

SHA256
94169292a9f99fe70992d4c0749bbc1889bdc7565dccdd83e3c73abd2c9485d5

SHA512
09fa5dd823a5d5e9b5c59e088d3a97dac722c06edb5a3145cafd7c3fc3288a01cc307a4f77a4b305cc65134fd5a53410f854e427f0ec6d0681293cae2e7088eb

Download Submit
C:\GOG Games\Undertale\mus_coretransition.ogg

Filesize
73KB

MD5
e959d3dd384b641ec4dc0907d10a46e0

SHA1
2f30ec6c2ef84cea3a49dc38112ca7342898cce0

SHA256
6490a4eddf60856aefedf60a05d037ef60a33bf3bb4fc57fde4e9576146ad510

SHA512
6f0b70267c1481a46d3615530b74a40e0629fa2d5e154482a43f45055efb9c8c7a8ae482b756d5ce146ac6b4c925b6ff5847692c087bc144ec5f76390b5a6d0c

Download Submit
C:\GOG Games\Undertale\mus_creepy_ambience.ogg

Filesize
40KB

MD5
26a11a354760175cf63371351099e41c

SHA1
8e4139774d2204e4bb263171fead7289e57b4357

SHA256
2bc938a563418b3d35f016c2421188287b4e524c9dd661441303f27e08b33e7b

SHA512
e9fd29d07445adcfa754267347edefa38d0133aef834d04e8ae70900edcfd0441c7546742c9cfb8e3d363d07701cf51b287372475ddd8249ed299af863cf373a

Download Submit
C:\GOG Games\Undertale\mus_crickets.ogg

Filesize
72KB

MD5
2837c65d7f453471a4ccda388c97437f

SHA1
58686113707fdb9b6ba09730248efd5daf32e772

SHA256
21141e2b024495cc7bf37299cbcd7b09163df5dbac78f7f3c0ab99ce2354ecfa

SHA512
e56a506630f95352fa13e01234135fbaaf698701e19bde1b2e5717e5326fe03e6f15a6812acd84e246ce98fa2cc0377103faf6ecaeb69112bbddcc9200035bf5

Download Submit
C:\GOG Games\Undertale\mus_cymbal.ogg

Filesize
53KB

MD5
90a422f31063a50989b358708e68f109

SHA1
1c4605a43688cb893947cf0342673e9a212f6780

SHA256
ad536a8aef8f7485ff1f9c76ea9aadc156b7d3702d82078165e38a39977d9d85

SHA512
05301abcbe370deb41f8271891c6418684b9a461e6fe38354b4effe6cf053cb1c4963824b342e8a7492d9e3ff21c4bfddab95d88e83a5bb222bcffa09a6c97a8

Download Submit
C:\GOG Games\Undertale\mus_dance_of_dog.ogg

Filesize
64KB

MD5
30cc6cff7dd8b6657bd4c3fa4ea27743

SHA1
21c491589a5ce0e67c8b7c6b0b6b851260ffb344

SHA256
348be244bb4c88d6712a628b62a4384207f3bc6269699bcf10088021443c9440

SHA512
fb69ee8a636d9f32f789d485b345394dcfd3f4a2443a22f2c958ced5b6c20e323d6c80d781a665c711825476198409f992eedacf5b580ed610986d3ef9ff7ec7

Download Submit
C:\GOG Games\Undertale\mus_date.ogg

Filesize
112KB

MD5
83a2b88637a663be1afb4141b4f8e52e

SHA1
7f1201113d4f5a3f11558ec3c487e605ef4b4dd9

SHA256
ecc064dfb021fb22bf77668f9c78c901276a7f01f2d4ac4f54a51a3a03795465

SHA512
8e6014c14026aa9cb39320209ed71bc5778045f43bae3f1f309069722b7dcf66f3900c85a426efc8de7e7df60136025a9326199aa52cc9102c3455b1f6377c83

Download Submit
C:\GOG Games\Undertale\mus_date_fight.ogg

Filesize
68KB

MD5
2c59d27eaf127541492fbfdbe7180ef0

SHA1
a7f187f17f4a919f31d32cb6c43c361480d836f5

SHA256
fa94d331343392319cbc4f92a84c0c80c2164e1c8f0e55eb3da758079fee59df

SHA512
89f37b628d8a695ee4bfc76cb0fd6dcfa7470ac8f364f195602cf58ca2a66ba4511bccfefe889c933bcd73bc724f2b55c400987fed7961405681a086922f1ba5

Download Submit
C:\GOG Games\Undertale\mus_date_tense.ogg

Filesize
68KB

MD5
4ff0d396a9f59f52789ca23547b9252a

SHA1
79a0b35d73203c2b8f97633e00a67c963413be0b

SHA256
a350027b4a9e7510ccbecbc9d4c8fd3e9661fc8c65e908eebed39610ed7f9fb0

SHA512
a2957697f00f828d89de87e111dc131f4cda71a13414790a6947b3b4d86637ec57f28825ca09fa1213dc12c61379426fe1b6583b85d8d7fc167109a78f19703a

Download Submit
C:\GOG Games\Undertale\mus_deeploop2.ogg

Filesize
70KB

MD5
d471a28314b4d267104419b00a9c4420

SHA1
be301daf432602439e16f9a42b1c61708d4c8ced

SHA256
5c4df79571d6e20216cf57d9c823b54f210fe4efb1b13dd0f9dce7d64d6beaa5

SHA512
eabb9139cdc22759c45ca29f136e79b643f0bacb984219dd601622770de8a2aecb11804b1fe078bc98d2e9eb1e4b394a0629bab9468d9715ee75d6ae18f11e1e

Download Submit
C:\GOG Games\Undertale\mus_disturbing.ogg

Filesize
76KB

MD5
fdc3862ccf008a4ab2fa57a0baf8afa5

SHA1
38e1f56037c6878135e59ba02041ca748e3f30dd

SHA256
ef4af39c260157725e6bcee5df665aa675a0193ce346691e394d9a10ea1957e3

SHA512
58df435143a334870ac9accafc37851528bef716c5a7217508827dc469cd1b0630cb8c2fde066abd93f34e5316464eef1c35f90231e5ec46ac3c0502bf4ab55a

Download Submit
C:\GOG Games\Undertale\mus_dogappear.ogg

Filesize
24KB

MD5
2d2cf95ff2877f86dd5de21fa6df3758

SHA1
33345114743cfc37cbe76cfd4a89fc2ed84ca07b

SHA256
9c0dc0331ee3164c43eb7ba25028d3923433f88cf27c72a464fb64ded95dd045

SHA512
3a8d21ea725635ec25615e3139e4d69161c87ecf729970dfda6a14041677fd7cd14d13ece16704462814722d2524eb029cf2d4bcdac7a5542d6b6faf31c50a7a

Download Submit
C:\GOG Games\Undertale\mus_dogmeander.ogg

Filesize
80KB

MD5
3b6ef0c68ca32e9199d1d1c045bd07d4

SHA1
547552cc6c58b7374f4bb18dc96c29e7b4bd9375

SHA256
20a76fd9a9290570ab7da47b655d4a533f4b858d8be87323b09886d96f569178

SHA512
bcee17c1a3c5b89e63cf750bbb91971690a7e1662873a23f18a9dd04c4ff5ea87e4863d2775be5502093002837556ed95de06b24842bbcff1b35e01ea4fdafa9

Download Submit
C:\GOG Games\Undertale\mus_dogroom.ogg

Filesize
127KB

MD5
6764680cbc6c8f9f0e533412cf8c0252

SHA1
83f68af715622e8b47f045f53499ec981f4229fa

SHA256
8318ec02a7edbafa4f9caf107ace27ba46a2669cfe81ef454504d8ab89f7f201

SHA512
0d96a57d940a149addac1c9f89fb459264e1c4c98b36f292895afcceb9f559ad13d104161c1d5341074c9224b41deb1b871a616b957af90faa1a1f77a10d33eb

Download Submit
C:\GOG Games\Undertale\mus_dogshrine_1.ogg

Filesize
117KB

MD5
dad62d7707055973ee6cae92e00cce94

SHA1
9e14b4f2a129848dd8092eb5239585f19ac4967a

SHA256
0de3c9cffd3f62a7ab7eedb5accf282d1d7e20e9653ae8470864c8d2dc3791b0

SHA512
3b7f9e50b674f766a453bdc9cc187df99cee2d4232b2d5d2a09299fff67d0c3623f14b76d0e5569920e0a3965c50b8d4c37bcb1c843a8ed54304be328ed64f4d

Download Submit
C:\GOG Games\Undertale\mus_dogshrine_2.ogg

Filesize
133KB

MD5
7d88fe00189a559a6a8f8100281c3ff4

SHA1
1ce40420a896395577a71fa1c3bea19d7c0e9d27

SHA256
cd1caaf9e836bd99402cf32af0316a7c78ca400a7b0cafa7a9839171559363d4

SHA512
c49196b894fc62bfc19f92d4f4706b37f38078fe0edaf73b5986171cb9dfb369f15e680e9df8513ef43a2462f731968bcc9feba42f8177506e212d9ff3998e47

Download Submit
C:\GOG Games\Undertale\mus_dogsong.ogg

Filesize
64KB

MD5
74e5755e105a786f238e6fb1c33e44c4

SHA1
c199181f4ace62c4cedd355fb5910fe3529e3fa6

SHA256
eeaa7c189b867ef174795cc7da2e100fd3e6aef06658bdd68f772ea345f31400

SHA512
82d4e3d330898ceaa54598bea593498cd7f12404f4b9d722341de92b470e8e4bb340d3b5a2970fa304b06adac171abbe85669f4b9f89d488f8eb6d64e675532b

Download Submit
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Undertale [GOG.com]\Documents\Support.url

Filesize
116B

MD5
e9d4aa9b7a63e065bf1454d024be8e25

SHA1
5568fd6ca3332c9b53830634c4c2c8f7d2a9e201

SHA256
292c0769418d52376dce7c0602e5699b02007d6207ff375555d5b657a3adcdd6

SHA512
68b17a2f4e653d4c930afabda7e9747c3044e972e7c654841dc4128e00130c07b5f4ccb1cca88e6c119e55df410d469eccb02d680737bc471bd635afe310cfac

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-7QNCL.tmp\setup_undertale_1.08_(18328).tmp

Filesize
1.2MB

MD5
3602e9114e7254a36fcd909cfa490c3a

SHA1
198af4c93cbcf2195df4cb4aa42096a799c7f374

SHA256
a153c8db6f20f9c54f4bd1607b2502d3914662caa9615e1c557cf0abd8777bab

SHA512
eb1caf37de29467977088952b782dd1cd97969083ef60a0307aa4dd1dde1a44227ef4a871da775b05665f5fec780294c15d6c0f2d9c275e519054eb4628d7fdf

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-8A0T1.tmp\1207658702_english.jpg

Filesize
195KB

MD5
ed224bf981e588b310321e3364cde5cd

SHA1
b3a7c43742304b6541bd83b04104ba0511103cd9

SHA256
988c25e3d92bbce791a012beabe67b70d0f708fe658a75304261f9699de0c063

SHA512
9c1ee058e5adeb765b435c4de9b1c9d211dbfec1d6d9b78abb5c38887d21a9920d35cb61b8139662b03acc5b74132c4bf267a91927587ab59b490cdf519e3902

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-8A0T1.tmp\1449139823_english.jpg

Filesize
192KB

MD5
c86d1d0ecf523cbc44a0f3cff1f81586

SHA1
a906d195974ef3afd6d7da7d820dcc9a4efe3987

SHA256
5091f3f1bd82d677b364080052f9166a0b85ae179c6ab6bbd6b87f4203c14e1f

SHA512
fab06cea1446b58abeece64a7e4bcd5e9f8a6ca75aa2255ae65f3e5d88c81abd17be9946e3702a30d7978660ec363c73c4e9483678558e8a79ffdfcaafd24bba

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-8A0T1.tmp\BigOK.png

Filesize
3KB

MD5
5b43a5d975a53f4fc1da67ce9f7784c1

SHA1
8543fa1e471030049942252b23cb22e0880c3af5

SHA256
59d8bb3e87a89ef523c0495addce38d69560af42aaa82f56dd41b12e6612c13a

SHA512
5dd5c4e9859a555a4a32da76f5231b44f7556274c6501da530b2cdd570bcb4675f710bee708322a40ed3ef9280c0d652b4e7ef0e9eaf128c08534f59291917f5

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-8A0T1.tmp\EULAAccepted.png

Filesize
2KB

MD5
461dfeb75927bdb39f9db5348612a611

SHA1
b7893b1fff6801e37ee7337d876962a09184941e

SHA256
0de278f5ca6d8570d9bda592268a14a28b87d3631fea2d25721947397aaab79c

SHA512
68528cf45c81c2c024a672f42c2cd6d4f72c015b443f103ca21deb8ee2bec4f4027490e7f33b5338a87537b5bf7f255f2828aed149f622155ec89cc81687651b

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-8A0T1.tmp\EULAShow.png

Filesize
1KB

MD5
c596bc9111edc702bbbb29b70984254f

SHA1
d4712c7b91ff4f8994e7907d31357c42eb47c738

SHA256
6112851daea2aaa7174e8cfac4a0f61c968bc090342503804c476eff47cc2462

SHA512
db50d0a39ec644873a03d64552fff1776cc94f016e8dfc8918e65aee94f7529a6de4637567b5e65c4ea988f3775785c4b52c2d96fe8dbc52b1e21ff59c737c2a

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-8A0T1.tmp\GOG_new.png

Filesize
3KB

MD5
d5b63bdfa47ef5954917c148bacf7b13

SHA1
5302c6715d9e9b5d2768b130f3e516e175684cc9

SHA256
0804b385c1736e009fe8c3b1b14085b9b9abb40ce487360002ab4a8f3505f4e0

SHA512
b5cde681be9ad1c1211559dc4b363003bf547e8dc965dbb9560fdddfc28ee1d8f27cc534dd00864d800fd351c48694d7dc8df55fc3d8d69acf8b702c7b421aa9

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-8A0T1.tmp\OpenSans-Regular.ttf

Filesize
212KB

MD5
629a55a7e793da068dc580d184cc0e31

SHA1
3564ed0b5363df5cf277c16e0c6bedc5a682217f

SHA256
e64e508b2aa2880f907e470c4550980ec4c0694d103a43f36150ac3f93189bee

SHA512
6c24c71bee7370939df8085fa70f1298cfa9be6d1b9567e2a12b9bb92872a45547cbabcf14a5d93a6d86cd77165eb262ba8530b988bf2c989fadb255c943df9b

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-8A0T1.tmp\background.jpg

Filesize
308KB

MD5
79dd8f2494aef70c997f7627449d7e9d

SHA1
6fc00daa1c26ee76a90a55e39e0c3a72cf4b36e7

SHA256
502d1b67b2a2b390753fdcafd9b5f33c97796b580eaff893ba7360931092989f

SHA512
3af7da0eb62a38a3a4445cd0bd563a8fc7c3010830228d2bc075ae7b5bf990ca20bef806116c60d4a367548a821587328ab0509ab8ba73e6fdfc0a7be30a6c78

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-8A0T1.tmp\botva2.dll

Filesize
35KB

MD5
0177746573eed407f8dca8a9e441aa49

SHA1
6b462adf78059d26cbc56b3311e3b97fcb8d05f7

SHA256
a4b61626a1626fdabec794e4f323484aa0644baa1c905a5dcf785dc34564f008

SHA512
d4ac96da2d72e121d1d63d64e78bcea155d62af828324b81889a3cd3928ceeb12f7a22e87e264e34498d100b57cdd3735d2ab2316e1a3bf7fa099ddb75c5071a

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-8A0T1.tmp\btn_md5.png

Filesize
8KB

MD5
3befe9739354ee24a0b1ea8df05ce274

SHA1
ab0bda986a8c46aa19f57b75a2b7b22445a3c625

SHA256
b0193ab375f604fa4a25cabdea8f713babde1c07ab562ffc5679352c8e01db47

SHA512
ac016a59e0bfc9b22c376ae5d498c5660893a983d932b2bd502dabe032883c69e79ea8d93c2db49f95415c3cdb068e9f7d1d85527a4f9e68e065a989852d09dd

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-8A0T1.tmp\crcdll.dll

Filesize
69KB

MD5
1d51fac9e2384eeb674199cfd5281d7d

SHA1
861dfdc121357d605d0cc3793266713788109eb2

SHA256
23e90ce5a1f2d634a7bf5d5d0522fafeea6df9e536e16f5ce91035d5197128ec

SHA512
921b00adfe43b883200960e8d0958d4e6b97f6d5cfc096ee277766a3e44cc7805a20877a4edf8bd4d9102bb71a20ac218a9a512f4f76bd751d3ef14f4e0a6eda

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-8A0T1.tmp\error.png

Filesize
726B

MD5
df10adc25b673e74e19971c17bee5a98

SHA1
ee16fb1cf9491f5e611282f0574b27d76fede412

SHA256
142b16dc6239421691fa6e619d1a61e61176d89fa018a88b46893c29a57aad8b

SHA512
dc3de10e0321966cbbfb2e57b3b41da6f26dff0c7233a47469da58775b5c471e6b5181e4d4ffc81ef8b83dbcad74ccc1aad7678518f99c9185a441d2a23e010f

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-8A0T1.tmp\error_icon.png

Filesize
1KB

MD5
263720c4b8bb111567a2a49989b8f467

SHA1
cf346fa3c70164648e0eaf72a37c6f4920ab4792

SHA256
acdf96ee4261fae138e6350a0ad50b367022ed5b908fa168baad92644f566ee8

SHA512
94f06a81dc735cf264abde86e6169e5fd78d873d2e926fd48287d2ac5208fc930c3c432186e3510add002bd1b4ae32ad8d35270b17c3ce5f18c43764a8e9de43

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-8A0T1.tmp\innocallback.dll

Filesize
63KB

MD5
1c55ae5ef9980e3b1028447da6105c75

SHA1
f85218e10e6aa23b2f5a3ed512895b437e41b45c

SHA256
6afa2d104be6efe3d9a2ab96dbb75db31565dad64dd0b791e402ecc25529809f

SHA512
1ec4d52f49747b29cfd83e1a75fc6ae4101add68ada0b9add5770c10be6dffb004bb47d0854d50871ed8d77acf67d4e0445e97f0548a95c182e83b94ddf2eb6b

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-8A0T1.tmp\ok.png

Filesize
1KB

MD5
103c1368e60806b1b7995a0894eacf87

SHA1
971392527f6e4b655044773132505c901a6b5469

SHA256
0d37d4421a39ca8852eb6760b8e914302bdc6cfcc7b170dc1b6c9bb9be148b7e

SHA512
652177e94438aff102f2ed873b26f0985ebed134763852b49b1ca2698463c1dbeb85152f19c8e18d397229ec5cb2cd1d17c61d454ab7c425a2cab540adc8228a

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-8A0T1.tmp\progress_center.png

Filesize
1KB

MD5
ad7fc1e37e40da38dd57adc446cc6c0e

SHA1
08033265deb9b45243cfa0065d98ffe13a039e26

SHA256
2b9dae87340e66b67ab1d8247d4a137628e324969f92fe1098f95a7c5bab2f43

SHA512
dd715d74f8e1ed6ab75b7b6530b383ac47040d8baa7728be160f6d230bf485a9cc54f15f7dc85b122ce56e54d63fa4890e510dfc89d9c9344e31f789ebac8756

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-8A0T1.tmp\progress_left.png

Filesize
1KB

MD5
290c7612ad7a077028cd3dc78ce99673

SHA1
18995fbe39d05e4a1cafc7cc2e0f6fb745442f77

SHA256
85e39d909a7300fa2043ec42818582867b981401264b14fc5408e477ae0b4668

SHA512
799841f5b8a1056e78a49c823009750e4b93af130a6c4ff9dc6d386c06b88614e53b46a6df62f5a217d5c99da01cf4e2fe8392c73d39e81000045291cf24205a

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-8A0T1.tmp\progress_right.png

Filesize
1KB

MD5
c25a41f022a74308d944d1e807d72f44

SHA1
83c6bbec3fb373fcc78ce0e737742100994cd6d4

SHA256
396a3351fe409328782ab138282cf9cec061a5a9540a3506700a620db1f54e7d

SHA512
d2f4449195f3e60c826cfabb52a083d829eb9d0509272977d8fdb33bc5214678949cd27d0594684594e0a3eda2351c39cec8d91923cb716ad144ccf2b966c8e6

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-8A0T1.tmp\slideshow.ini

Filesize
298B

MD5
dd34f5881d26a40468f4eb1a01aeb892

SHA1
6065a141c70d7eff63a0e879dad4868e1868a3f8

SHA256
23ffd13e24c21c28893f350c1283c8faa856a45ef554ecff9e96442bc51bc214

SHA512
34c7652ff16ce6895c20b63e6d9b33626f14bbbf549fd3662bb17c464f501d08a4cff8dcdcbc153cd7b76da09060d7e42babc683e441f8dbe69438ab9b98bf02

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-8A0T1.tmp\track_center.png

Filesize
1KB

MD5
3f2b0c22f8ea28dcbb82b39a16a039aa

SHA1
b3f4dfc2ea86fbdad05877b4c356b7fa8016731d

SHA256
794f9eeca7fd99846968376b76a296c927532cef1271325cbf555caa0d0d5860

SHA512
b4bf65d751717e85418947662d315ae3bcb177f60914832fefeeb95da9eddb75eb5531c62e5a5a70ff03c8a025b5a03e61ffbdecc9f483bea9684454ca9362d3

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-8A0T1.tmp\track_left.png

Filesize
1KB

MD5
55dacb00cbe2825a8540236c5777a205

SHA1
18a52ac6c741b558500fbc1716d46b4fe4471982

SHA256
a8340fb5380c922b60ea40043590dba067dcfed6e22636851691df38156a3aa8

SHA512
2ea444cc1080f20761c8d71d96fcd04ef48254cdc1dc41d1d139f459ea5613fe12f6e4bd026bf33a5c01ff038e72e05dae2f8fba33ff517dd395e1911f10ff10

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-8A0T1.tmp\track_right.png

Filesize
1KB

MD5
ddec70b6c49be3e8c3a7d01c2f6ff1c5

SHA1
5383271999f787c36b1dc8f3cc13c8407b195439

SHA256
f54cd6e42f2b2bc5cb8a15f6a28f1499abf094a519ebdf39f4c4e167312c9c16

SHA512
f43f94b194b5a7eafcec9e831f61042859c30e1af2e2447195bdd06b12c90982181161a1c1be5aa5223ff664f88e4891bd71cfffb7ef672d6fe4f614030e0e01

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-MELIU.tmp\scriptinterpreter.tmp

Filesize
471KB

MD5
05bdad470f7d8dc5a719dc769292c80a

SHA1
4fef0ca7d479276469c487110c1b2db98cd6e34f

SHA256
0be2d1ecbf830963c35409a4437821717e9554eb46abc91f5bc3a7e9cb195753

SHA512
4578c8e3d702877e2989ef0a54f7982cbafa8e05fe9465797a0dc779a09ac4cee247543ed1e3e5ae406c8549cc1f483c3b54645d2331c32bddf3b3355d2001fa

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-QVHA8.tmp\uninstall.dll

Filesize
310KB

MD5
99a96a26e444fdb4229dff5a80149614

SHA1
07db52fd9d59933f65b27c17041be45252e7caa7

SHA256
2127ef773920f73a27cdbf31c39f4bbe837e9fa75e6ef876ee006426dea29048

SHA512
3782adfd44e9ac8e105cde9ea259ea260b23404a58a358f66b72edcd61674d329416936299f53fd2275712ef86afe42d2f8867a0918b24908acff873f3bd6f85

Download Submit
C:\Users\Admin\Videos\Captures\desktop.ini

Filesize
190B

MD5
b0d27eaec71f1cd73b015f5ceeb15f9d

SHA1
62264f8b5c2f5034a1e4143df6e8c787165fbc2f

SHA256
86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2

SHA512
7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c

Download Submit
\??\c:\gog games\undertale\goggame-1456487183.info

Filesize
840B

MD5
72c5257a93fbeec975a4a4175b50080d

SHA1
7b28af62c13cc120f3ac3e0ef273be85116d8d76

SHA256
adb26c3daa0b8511e8219b7ee950c8cdc527795f7e3b2a6a42355f27fcdc1b29

SHA512
f8ec190ba65211588f6156e74d1e8e842fe959ab1f8830e8ee1c9adaf35bbbbcaff7814560fa7e5c7e075c5d33422144070e114727229343087465f6895fed2c

Download Submit
\??\c:\gog games\undertale\goggame-1456487183.script

Filesize
419B

MD5
ecfe49b9be64a0e398f861c8d5f16f53

SHA1
465087b4a0a9045d3de22ec0ec92287acf26b47b

SHA256
f1c0f97ea9a8dbbb37355cef6f2d42832e97acb47b5e9bc327ece2d9b397c5a7

SHA512
25239ddf866e6d0e2fa53b033e6aa26978ae8a342ee123592e974e911db9fe130204e675bb61079cc3f45451663e5276062d391638ecd83756c4d9e14c52474a

Download Submit
memory/1080-134-0x0000000000400000-0x000000000053D000-memory.dmp

Filesize
1.2MB

Download
memory/1080-6-0x00000000021A0000-0x00000000021A1000-memory.dmp

Filesize
4KB

Download
memory/1080-136-0x0000000002FE0000-0x0000000002FEE000-memory.dmp

Filesize
56KB

Download
memory/1080-135-0x0000000002D00000-0x0000000002D15000-memory.dmp

Filesize
84KB

Download
memory/1080-144-0x0000000002D00000-0x0000000002D15000-memory.dmp

Filesize
84KB

Download
memory/1080-885-0x0000000000400000-0x000000000053D000-memory.dmp

Filesize
1.2MB

Download
memory/1080-145-0x0000000002FE0000-0x0000000002FEE000-memory.dmp

Filesize
56KB

Download
memory/1080-197-0x0000000002D20000-0x0000000002E20000-memory.dmp

Filesize
1024KB

Download
memory/1080-216-0x0000000002D20000-0x0000000002E20000-memory.dmp

Filesize
1024KB

Download
memory/1080-320-0x0000000002D20000-0x0000000002E20000-memory.dmp

Filesize
1024KB

Download
memory/1080-421-0x0000000002D20000-0x0000000002E20000-memory.dmp

Filesize
1024KB

Download
memory/1080-533-0x0000000000400000-0x000000000053D000-memory.dmp

Filesize
1.2MB

Download
memory/1080-534-0x0000000002D00000-0x0000000002D15000-memory.dmp

Filesize
84KB

Download
memory/1080-535-0x0000000002FE0000-0x0000000002FEE000-memory.dmp

Filesize
56KB

Download
memory/1080-538-0x0000000002D20000-0x0000000002E20000-memory.dmp

Filesize
1024KB

Download
memory/1080-630-0x0000000002D20000-0x0000000002E20000-memory.dmp

Filesize
1024KB

Download
memory/1080-854-0x0000000002D20000-0x0000000002E20000-memory.dmp

Filesize
1024KB

Download
memory/1080-57-0x0000000002FE0000-0x0000000002FEE000-memory.dmp

Filesize
56KB

Download
memory/1080-680-0x0000000002D20000-0x0000000002E20000-memory.dmp

Filesize
1024KB

Download
memory/1080-769-0x0000000002D20000-0x0000000002E20000-memory.dmp

Filesize
1024KB

Download
memory/1080-12-0x0000000002D00000-0x0000000002D15000-memory.dmp

Filesize
84KB

Download
memory/1080-141-0x00000000021A0000-0x00000000021A1000-memory.dmp

Filesize
4KB

Download
memory/1716-133-0x0000000000400000-0x0000000000437000-memory.dmp

Filesize
220KB

Download
memory/1716-2-0x0000000000400000-0x0000000000437000-memory.dmp

Filesize
220KB

Download
memory/1716-0-0x0000000000400000-0x0000000000437000-memory.dmp

Filesize
220KB

Download
memory/1716-886-0x0000000000400000-0x0000000000437000-memory.dmp

Filesize
220KB

Download
memory/2636-898-0x000001DBEA640000-0x000001DBEA641000-memory.dmp

Filesize
4KB

Download
memory/2636-902-0x000001DBEA6C0000-0x000001DBEA6C1000-memory.dmp

Filesize
4KB

Download
memory/2636-906-0x000001DBEA760000-0x000001DBEA761000-memory.dmp

Filesize
4KB

Download
memory/2636-905-0x000001DBEA760000-0x000001DBEA761000-memory.dmp

Filesize
4KB

Download
memory/2636-904-0x000001DBEA750000-0x000001DBEA751000-memory.dmp

Filesize
4KB

Download
memory/2636-903-0x000001DBEA750000-0x000001DBEA751000-memory.dmp

Filesize
4KB

Download
memory/2636-887-0x000001DBE19B0000-0x000001DBE19C0000-memory.dmp

Filesize
64KB

Download
memory/2636-891-0x000001DBE2360000-0x000001DBE2370000-memory.dmp

Filesize
64KB

Download
memory/2636-900-0x000001DBEA6C0000-0x000001DBEA6C1000-memory.dmp

Filesize
4KB

Download
memory/2832-760-0x0000000002A00000-0x0000000002A01000-memory.dmp

Filesize
4KB

Download
memory/2832-665-0x0000000002930000-0x0000000002931000-memory.dmp

Filesize
4KB

Download
memory/2832-762-0x0000000000550000-0x00000000006A0000-memory.dmp

Filesize
1.3MB

Download
memory/4952-763-0x0000000000840000-0x0000000000879000-memory.dmp

Filesize
228KB

Download
memory/4952-658-0x0000000000840000-0x0000000000879000-memory.dmp

Filesize
228KB

Download
memory/4952-661-0x0000000000840000-0x0000000000879000-memory.dmp

Filesize
228KB

Download