Analysis

  • max time kernel
    150s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230221-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/03/2023, 18:49

General

  • Target

    osu!install.exe

  • Size

    4.3MB

  • MD5

    321cf9cb89893c3f78f49c0e19718d08

  • SHA1

    59228593ccbe311dba685af04eb961c87acff981

  • SHA256

    f0b2a03e625517cab9f760e2b6b8ff56ad5aacd1249becb2872bc22fa8817426

  • SHA512

    a25562da867ccb48df6ba42b91a93f8190d77dfb1ec18637afface0cd3dfd6427a2df7a2b7c64157079a619d173d8726b0ae3b8e65d08eb08bdf0d85a438ef44

  • SSDEEP

    49152:kSicrIcF+DhSfDG6zsIGzUwES6pcAsf+hZtXvA+xrQRLYSDnwxRxpDOhB:kh9Dh56w4wES62R0xRxpDOhB

Score
7/10

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 4 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 4 IoCs
  • Loads dropped DLL 18 IoCs
  • Drops desktop.ini file(s) 1 IoCs
  • Suspicious use of NtSetInformationThreadHideFromDebugger 6 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

  • Checks SCSI registry key(s) 3 TTPs 3 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 12 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies registry class 5 IoCs
  • Modifies system certificate store 2 TTPs 9 IoCs
  • Suspicious behavior: EnumeratesProcesses 35 IoCs
  • Suspicious use of AdjustPrivilegeToken 10 IoCs
  • Suspicious use of FindShellTrayWindow 60 IoCs
  • Suspicious use of SendNotifyMessage 59 IoCs
  • Suspicious use of SetWindowsHookEx 8 IoCs
  • Suspicious use of WriteProcessMemory 12 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\osu!install.exe
    "C:\Users\Admin\AppData\Local\Temp\osu!install.exe"
    1⤵
    • Checks computer location settings
    • Modifies system certificate store
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:4336
    • C:\Users\Admin\AppData\Local\osu!\osu!.exe
      "C:\Users\Admin\AppData\Local\osu!\osu!.exe"
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Modifies system certificate store
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:4556
      • C:\Users\Admin\AppData\Local\osu!\osu!.exe
        "C:\Users\Admin\AppData\Local\osu!\osu!.exe"
        3⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious use of NtSetInformationThreadHideFromDebugger
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:4800
        • C:\Users\Admin\AppData\Local\osu!\osu!.exe
          "C:\Users\Admin\AppData\Local\osu!\osu!.exe" -repair
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of WriteProcessMemory
          PID:4136
          • C:\Users\Admin\AppData\Local\osu!\osu!.exe
            "C:\Users\Admin\AppData\Local\osu!\osu!.exe"
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Suspicious use of NtSetInformationThreadHideFromDebugger
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of AdjustPrivilegeToken
            PID:2092
  • C:\Windows\System32\GameBarPresenceWriter.exe
    "C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
    1⤵
      PID:2300
    • C:\Windows\system32\OpenWith.exe
      C:\Windows\system32\OpenWith.exe -Embedding
      1⤵
      • Suspicious use of SetWindowsHookEx
      PID:2220
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
      1⤵
      • Drops desktop.ini file(s)
      • Checks processor information in registry
      • Modifies registry class
      PID:4704
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
      1⤵
      • Checks processor information in registry
      • Modifies registry class
      PID:1136
    • C:\Windows\system32\OpenWith.exe
      C:\Windows\system32\OpenWith.exe -Embedding
      1⤵
      • Suspicious use of SetWindowsHookEx
      PID:1956
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
      1⤵
      • Checks processor information in registry
      • Modifies registry class
      PID:2956
    • C:\Windows\system32\OpenWith.exe
      C:\Windows\system32\OpenWith.exe -Embedding
      1⤵
      • Suspicious use of SetWindowsHookEx
      PID:2692
    • C:\Windows\system32\OpenWith.exe
      C:\Windows\system32\OpenWith.exe -Embedding
      1⤵
      • Suspicious use of SetWindowsHookEx
      PID:244
    • C:\Windows\system32\OpenWith.exe
      C:\Windows\system32\OpenWith.exe -Embedding
      1⤵
      • Suspicious use of SetWindowsHookEx
      PID:1384
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
      1⤵
      • Checks processor information in registry
      • Modifies registry class
      PID:4248
    • C:\Windows\system32\OpenWith.exe
      C:\Windows\system32\OpenWith.exe -Embedding
      1⤵
      • Suspicious use of SetWindowsHookEx
      PID:5084
    • C:\Windows\system32\taskmgr.exe
      "C:\Windows\system32\taskmgr.exe" /4
      1⤵
      • Checks SCSI registry key(s)
      • Checks processor information in registry
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      PID:4532
    • C:\Windows\System32\GameBarPresenceWriter.exe
      "C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
      1⤵
        PID:4980
      • C:\Windows\system32\OpenWith.exe
        C:\Windows\system32\OpenWith.exe -Embedding
        1⤵
        • Suspicious use of SetWindowsHookEx
        PID:3664
      • C:\Windows\system32\svchost.exe
        C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
        1⤵
        • Checks processor information in registry
        • Modifies registry class
        PID:4920
      • C:\Windows\System32\GameBarPresenceWriter.exe
        "C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
        1⤵
          PID:2668
        • C:\Windows\system32\OpenWith.exe
          C:\Windows\system32\OpenWith.exe -Embedding
          1⤵
          • Suspicious use of SetWindowsHookEx
          PID:3508

        Network

              MITRE ATT&CK Enterprise v6

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\18E6B4A57A6BC7EC9B861CDF2D6D0D02_C3B142D2C5374581DC2FDFFDEDBDEDDB

                Filesize

                765B

                MD5

                cc1dfcf33cec09cf4b02162f29a2c9ea

                SHA1

                a2d9977e00e49dac782209a10e16893a87c5f8a3

                SHA256

                57831e2f282ae5cf0af7250482eb273f084d2f9eded56adbb5ccdb201b8df8e3

                SHA512

                c241bde31bff14294e460769043108f526999891163dba0498b835f3fa63dc35034fc37b35ab8c43bb7b39816b1ca69fd5abd7469735d038da13f4bea1876a89

              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\AEACCDA8653DD8D7B2EA32F21D15D44F_C99E84AF904BD8598CB3FED576528926

                Filesize

                637B

                MD5

                f6b81037865b527245d8e678b1409f8b

                SHA1

                433045640fd295c2503b575c9ede7406d2e7f42a

                SHA256

                da1579ac52643b907ce3e97b8c7b3d96dc44dd21fddbf4691223a8678d73d51c

                SHA512

                fb57a69f086d563d59c45936a98df7629e134302d25bf47f9a0fe88d7e27618069ffa5121944a853324596da701ed688c062b023a04aabebffb0014de41327cd

              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B2FAF7692FD9FFBD64EDE317E42334BA_93702E680A5530C052C8D2BA33A2225F

                Filesize

                1KB

                MD5

                e2b38e80a0b051bf6a94370a1be65b43

                SHA1

                9b6203ec15376f74fe0e73bd81f1cd2c86341163

                SHA256

                cc3abffacfa492e6de85519380a95050e139794ae09b05e45f3c116199e7375d

                SHA512

                f5ac4fd53a4ee6bc7b934e632fc11899b0bf9cc791d307067969a2a1a342d80fc90f90caea5863fdeb3c562e7cf220e10e1c70c92cf9bf27cb6ab0bbccf53ab1

              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\18E6B4A57A6BC7EC9B861CDF2D6D0D02_C3B142D2C5374581DC2FDFFDEDBDEDDB

                Filesize

                484B

                MD5

                b62d1818f97c21fe40dd0165c4e36c65

                SHA1

                2145363fc2c482a032c356c1eb280bc05962fe2c

                SHA256

                716b455ddaa8d3a2b804161d82cfacf56e3879d98a61a4fcd2565618fd8a5dfc

                SHA512

                ea3e7743999f29e66ef5c90e24d82be7b05f426d3b309c6866d44b2bc7bc8c1d79373f43503a108eeff974f488b59562d0df2865cd92a777ab2cdf7d481ad101

              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\AEACCDA8653DD8D7B2EA32F21D15D44F_C99E84AF904BD8598CB3FED576528926

                Filesize

                488B

                MD5

                605336e4bfff31c9315441c9ba91dce9

                SHA1

                3e9b94ae4ccebfa82aba1a0000ca6376bb7ddade

                SHA256

                8a1a37b90f6355e354bde79e2d5bdc0383fe675e79630d380f272e00ffc6198a

                SHA512

                eb87aeb82a4c4eefeb802eba63a6a118bfa3baca424105410dc618970ef481d9af3225586f1e62b0e765bb337acd449f5e2cdef19c204cc4072790391043c8bf

              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B2FAF7692FD9FFBD64EDE317E42334BA_93702E680A5530C052C8D2BA33A2225F

                Filesize

                482B

                MD5

                80bf347da39513e34b431bbbfa3342c7

                SHA1

                337554f7adb9df1eae09d149c99f901affc15745

                SHA256

                54a7eca0e751b492be87ebc49088ca76413285c82ff576eb449cf0007dfd4257

                SHA512

                5ac5d8fb31db22f15ad0745c71004e2bcb36f68d20ae8b47c7aae1c645ef21df6f8b3afb63e9613c7052ad4034729876e928afdc281c4ffbfa1aabefc0d4e8ed

              • C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\osu!.exe.log

                Filesize

                1KB

                MD5

                d7851eb8e6db261d609ce656b3c44dc6

                SHA1

                62f1d2b78d143a336fe6779a17b6400f95dadb2a

                SHA256

                079dc4c2a07c1e17851a6bfc41130e0771c6b8063a2f6dcc807f9b525e1ced72

                SHA512

                1bb23aba0d00f7bfaee06b0e9fdd9d1d54a454d62308a88cd964728c568c7ec5a91a68817d4b5c93e3e3c5ad4232106af44eb1eee94679aa51396c1872af1037

              • C:\Users\Admin\AppData\Local\osu!\Logs\osu!auth.log

                Filesize

                256B

                MD5

                2d5bdf782b41f2746f0a40d8f268800b

                SHA1

                60db8f6e98cb5e9d66f1bec5ab1b1ba069cdf925

                SHA256

                974f24e5d4c167dfed059fd83ea8b0d39434dbe5087957bcb6f9cc16ce1df114

                SHA512

                c0ceda2c2ff8e651560b19e78d3283890d5be34d34be2b651fa21a6a418aeb8b5b63bf16b31fd99b49898ccc0d9367b383b56d2743b9efae96ddbb5dcb23e80c

              • C:\Users\Admin\AppData\Local\osu!\Logs\update.log

                Filesize

                325B

                MD5

                eefe2e846b5ff898abe04d136517aeb2

                SHA1

                a7af1893c60da7469d829a77b766adaf09ca7cae

                SHA256

                d02d1be12e01b2522ce3309d15b6c9985297055b78353c422b5fb1407ab1871e

                SHA512

                5e5da773a4f73d1e5e6efbcc1c88ea5b2f571e67b389634e89c44212862685978f7b28eda3dd734da9b351915fce4c5ca31ac11e64091db510b0fa64eb23ee1e

              • C:\Users\Admin\AppData\Local\osu!\Logs\update.log

                Filesize

                583B

                MD5

                370c49bae4cd9187c4b5962ee5508321

                SHA1

                b0626db33ea9cffe996dc138921e3388e24f4669

                SHA256

                ae31392404c36c988228ed8e13a1097eed4b462bb00a515625b959684450b739

                SHA512

                f1e790fb71dc563991c29f7a76dd85c44e073f1c81423e6a78c4c7dde7d8adf4104b44a4bcdc1e58f5b852c39509d169868dcdc64f23604eb8504376c029ad4a

              • C:\Users\Admin\AppData\Local\osu!\Logs\update.log

                Filesize

                90B

                MD5

                e1f83b3b90f8eedff90f8139528bd8af

                SHA1

                e63064726c9ed09795a32764270f8f3457b498eb

                SHA256

                a08b28e76a38d950b680d00726b46b320e85447d6f89d062df837d57750f7df1

                SHA512

                dbae8f340766ebab4f34136872a9ca3c0e8907698b7e66362c4d4289c53806a04e0c118ef184b7c583839d0ea411442dca021aa4146c59eb5b6b39e8bb81b98a

              • C:\Users\Admin\AppData\Local\osu!\Logs\update.log

                Filesize

                415B

                MD5

                93bf0d98811aec09ba2f0c90253609c9

                SHA1

                0797368bd23bcaeb452178c10d3fe3da81cb4151

                SHA256

                09878a3d393942adc45de732c1a5347dec1d87a4973467a590f12213984368cf

                SHA512

                e3813a1e8df934a7c7e0d8c54beead3729650b6413020750ad942989ee798373a8914c131fa3a2424802975d4ba2b57cb92c32b2e708161ea5a201288f8388c4

              • C:\Users\Admin\AppData\Local\osu!\Logs\update.log

                Filesize

                673B

                MD5

                2eeaea697b5f4ba5e7d7f35c29bf1e9e

                SHA1

                0c0a4f766757fc07a1774cefbd76621de8da4521

                SHA256

                08233c204a56d055a84913d3b4c369c3452b5bdd5e932f0b19c3c45d0c956ed3

                SHA512

                a9d3720cabe334e74876a183633ba31eeecd1ce5b4d6de52bbffcfd4b535e691312c292fda26dbd6fef299f21e7bdcdc9ce86d8e6526bf2f27adcae8affed3e1

              • C:\Users\Admin\AppData\Local\osu!\Logs\update.log

                Filesize

                370B

                MD5

                b28f1f9adc00c0998d8688105d20db38

                SHA1

                a914f9108ec267176cc391a504f65db8d066a490

                SHA256

                40e11ade7da8cf56654e186717d04925a799d4c12301b634e02896b5ed056fdd

                SHA512

                82f754a1d1b4cee18c298d1a0b484c4b56d3a4760adeba331d9677232f0c1c94b19843fe3c45784b20e186d57c0789889fdb67b1329e726a8a723416372a277c

              • C:\Users\Admin\AppData\Local\osu!\Logs\update.log

                Filesize

                1KB

                MD5

                110008991fe5c332211d67961ab257b3

                SHA1

                d75af975efdf2685dbfade2043250e55a4a4c07a

                SHA256

                4f21a196e8dcebf4f328b1d956730a72a0df3ac96f681224ad45f810b79db130

                SHA512

                eb300246250ea0efbbb0921a20047e27a60ed04fd9ae769bfed49bf4ad792cbbc599fa2a9cbe627a3233871033f364d5da4678785c7c68f32820d52385fce8a0

              • C:\Users\Admin\AppData\Local\osu!\Logs\update.log

                Filesize

                3KB

                MD5

                65b762df64183db60ec00c6bcd714998

                SHA1

                2b4729f169cac823c32cb1eef0ed23eb7f54e16a

                SHA256

                9c9a993d8f043773bfca78886992a10eb154607977f457edc9c57308ed4700e6

                SHA512

                9d2adfd2c7d507524d8248594822b91baca6385d8e9696323443866dddfbb017e65e21aab0d308a946aeb51f2263b5612f94b9a4df5af14f7119dbb14927f5e5

              • C:\Users\Admin\AppData\Local\osu!\Logs\update.log

                Filesize

                4KB

                MD5

                ee7480e9e1f1d709314548e17240235c

                SHA1

                71166012d4f1c95465d966fcf8a0111c868b083c

                SHA256

                7d405c79a02af067731a6e1677b0c89cdd41f14c2101f53e40058346d4f417db

                SHA512

                05bf29d3c1dfa9e67660e19a9399b2b8a133163d5f7089bc1a7e912e5b6fec8594937c02be1168381ee7e9f8b575ab8a752d5d684c11659ced40b336ca4927e6

              • C:\Users\Admin\AppData\Local\osu!\Logs\update.log

                Filesize

                325B

                MD5

                46496d4e2efb8c8293bdd43401ce4dc1

                SHA1

                8a2b0935d98f9ec00ad36e652970fa29dc244fc8

                SHA256

                b275ce57ffe277cd210e0922d9646199966d5b316ca01f72d148454800737df4

                SHA512

                6b43c63376b516f1f9030e98f45a8d4a6ad7b3fc8ab105e371ac66eeda431d16dab68480500fdc9581858ef7ee12e701f95eabd1b160c7d229ada560e044c371

              • C:\Users\Admin\AppData\Local\osu!\Logs\update.log

                Filesize

                583B

                MD5

                9c709d7504bfc1ffc8863e054812193e

                SHA1

                70a7e7a086451b1bbbf3382424fcfe16e0497adb

                SHA256

                b7df01be4b4a23a3bfb16796d9d9c02553d2570d10cfd58e3b9409a6d3d51ccf

                SHA512

                9c09e3c3c04827f3a34fa1cbb6dea9a6e0230e2800b327828c2ef6d582e3b09a128079383e75d4dddd1d2487237bcb80edbe2dbeba17590b481fd25765ed9f76

              • C:\Users\Admin\AppData\Local\osu!\Logs\update_success.log

                Filesize

                673B

                MD5

                2eeaea697b5f4ba5e7d7f35c29bf1e9e

                SHA1

                0c0a4f766757fc07a1774cefbd76621de8da4521

                SHA256

                08233c204a56d055a84913d3b4c369c3452b5bdd5e932f0b19c3c45d0c956ed3

                SHA512

                a9d3720cabe334e74876a183633ba31eeecd1ce5b4d6de52bbffcfd4b535e691312c292fda26dbd6fef299f21e7bdcdc9ce86d8e6526bf2f27adcae8affed3e1

              • C:\Users\Admin\AppData\Local\osu!\Logs\update_success.log

                Filesize

                6KB

                MD5

                4eabc5402e1033fa1a10df05cee5037b

                SHA1

                5b9fa173df7f5c8044378fcc06ca772a3dd48c66

                SHA256

                f60c27aa0190ee472538d27f876d38eeba6e535b71dc8fee5318b22928a183fb

                SHA512

                604965405e025f6ead8d87109b0fc817cbd2ac46172966cd1ae12b1b201f952d1a3e4f06b5352a33d931ca361054b5d02994294fa902e839a55d9133b03ca270

              • C:\Users\Admin\AppData\Local\osu!\Logs\update_success.log

                Filesize

                583B

                MD5

                9c709d7504bfc1ffc8863e054812193e

                SHA1

                70a7e7a086451b1bbbf3382424fcfe16e0497adb

                SHA256

                b7df01be4b4a23a3bfb16796d9d9c02553d2570d10cfd58e3b9409a6d3d51ccf

                SHA512

                9c09e3c3c04827f3a34fa1cbb6dea9a6e0230e2800b327828c2ef6d582e3b09a128079383e75d4dddd1d2487237bcb80edbe2dbeba17590b481fd25765ed9f76

              • C:\Users\Admin\AppData\Local\osu!\Microsoft.Ink.dll

                Filesize

                456KB

                MD5

                82d4ee89f4a39c764fa6297a95ebb10e

                SHA1

                87b1f581ad017bf62604d8071a23fde8b81550e1

                SHA256

                1081255de41aafd51bc8f4e4404ef02209e59625ae65fa926657df5690716c5d

                SHA512

                904fd99f7d5951a23af202fceeade044b6d4f40c75db09d0237618ff80b90934ca4ad3210751f6e5bcad71b3a4131e24d420e94292bcfb7acbc3490ebc844382

              • C:\Users\Admin\AppData\Local\osu!\Microsoft.Ink.dll

                Filesize

                456KB

                MD5

                82d4ee89f4a39c764fa6297a95ebb10e

                SHA1

                87b1f581ad017bf62604d8071a23fde8b81550e1

                SHA256

                1081255de41aafd51bc8f4e4404ef02209e59625ae65fa926657df5690716c5d

                SHA512

                904fd99f7d5951a23af202fceeade044b6d4f40c75db09d0237618ff80b90934ca4ad3210751f6e5bcad71b3a4131e24d420e94292bcfb7acbc3490ebc844382

              • C:\Users\Admin\AppData\Local\osu!\Microsoft.Ink.dll

                Filesize

                456KB

                MD5

                82d4ee89f4a39c764fa6297a95ebb10e

                SHA1

                87b1f581ad017bf62604d8071a23fde8b81550e1

                SHA256

                1081255de41aafd51bc8f4e4404ef02209e59625ae65fa926657df5690716c5d

                SHA512

                904fd99f7d5951a23af202fceeade044b6d4f40c75db09d0237618ff80b90934ca4ad3210751f6e5bcad71b3a4131e24d420e94292bcfb7acbc3490ebc844382

              • C:\Users\Admin\AppData\Local\osu!\Microsoft.Ink.dll

                Filesize

                456KB

                MD5

                82d4ee89f4a39c764fa6297a95ebb10e

                SHA1

                87b1f581ad017bf62604d8071a23fde8b81550e1

                SHA256

                1081255de41aafd51bc8f4e4404ef02209e59625ae65fa926657df5690716c5d

                SHA512

                904fd99f7d5951a23af202fceeade044b6d4f40c75db09d0237618ff80b90934ca4ad3210751f6e5bcad71b3a4131e24d420e94292bcfb7acbc3490ebc844382

              • C:\Users\Admin\AppData\Local\osu!\Microsoft.Ink.dll

                Filesize

                456KB

                MD5

                82d4ee89f4a39c764fa6297a95ebb10e

                SHA1

                87b1f581ad017bf62604d8071a23fde8b81550e1

                SHA256

                1081255de41aafd51bc8f4e4404ef02209e59625ae65fa926657df5690716c5d

                SHA512

                904fd99f7d5951a23af202fceeade044b6d4f40c75db09d0237618ff80b90934ca4ad3210751f6e5bcad71b3a4131e24d420e94292bcfb7acbc3490ebc844382

              • C:\Users\Admin\AppData\Local\osu!\Microsoft.Ink.dll

                Filesize

                456KB

                MD5

                82d4ee89f4a39c764fa6297a95ebb10e

                SHA1

                87b1f581ad017bf62604d8071a23fde8b81550e1

                SHA256

                1081255de41aafd51bc8f4e4404ef02209e59625ae65fa926657df5690716c5d

                SHA512

                904fd99f7d5951a23af202fceeade044b6d4f40c75db09d0237618ff80b90934ca4ad3210751f6e5bcad71b3a4131e24d420e94292bcfb7acbc3490ebc844382

              • C:\Users\Admin\AppData\Local\osu!\OpenTK.dll

                Filesize

                4.2MB

                MD5

                b4d949571134fc3ec6c28f1af7a75e49

                SHA1

                07eb5685ff4f19ff8ed466c68c2426e2ead69241

                SHA256

                b415f3e061d9758316074dcbf31d6dba48cb0b89405254db94ead0e43ed88511

                SHA512

                7abb1128d4f9312ec714f7d3f4e1d1ce12a6f93235d6382cf25c39dae0d7d88b5ad5141f512659c33cf57a762e14711b6b690b33da7d16c7d7be35c8b292131b

              • C:\Users\Admin\AppData\Local\osu!\OpenTK.dll

                Filesize

                4.2MB

                MD5

                b4d949571134fc3ec6c28f1af7a75e49

                SHA1

                07eb5685ff4f19ff8ed466c68c2426e2ead69241

                SHA256

                b415f3e061d9758316074dcbf31d6dba48cb0b89405254db94ead0e43ed88511

                SHA512

                7abb1128d4f9312ec714f7d3f4e1d1ce12a6f93235d6382cf25c39dae0d7d88b5ad5141f512659c33cf57a762e14711b6b690b33da7d16c7d7be35c8b292131b

              • C:\Users\Admin\AppData\Local\osu!\OpenTK.dll

                Filesize

                4.2MB

                MD5

                b4d949571134fc3ec6c28f1af7a75e49

                SHA1

                07eb5685ff4f19ff8ed466c68c2426e2ead69241

                SHA256

                b415f3e061d9758316074dcbf31d6dba48cb0b89405254db94ead0e43ed88511

                SHA512

                7abb1128d4f9312ec714f7d3f4e1d1ce12a6f93235d6382cf25c39dae0d7d88b5ad5141f512659c33cf57a762e14711b6b690b33da7d16c7d7be35c8b292131b

              • C:\Users\Admin\AppData\Local\osu!\OpenTK.dll

                Filesize

                4.2MB

                MD5

                b4d949571134fc3ec6c28f1af7a75e49

                SHA1

                07eb5685ff4f19ff8ed466c68c2426e2ead69241

                SHA256

                b415f3e061d9758316074dcbf31d6dba48cb0b89405254db94ead0e43ed88511

                SHA512

                7abb1128d4f9312ec714f7d3f4e1d1ce12a6f93235d6382cf25c39dae0d7d88b5ad5141f512659c33cf57a762e14711b6b690b33da7d16c7d7be35c8b292131b

              • C:\Users\Admin\AppData\Local\osu!\OpenTK.dll

                Filesize

                4.2MB

                MD5

                b4d949571134fc3ec6c28f1af7a75e49

                SHA1

                07eb5685ff4f19ff8ed466c68c2426e2ead69241

                SHA256

                b415f3e061d9758316074dcbf31d6dba48cb0b89405254db94ead0e43ed88511

                SHA512

                7abb1128d4f9312ec714f7d3f4e1d1ce12a6f93235d6382cf25c39dae0d7d88b5ad5141f512659c33cf57a762e14711b6b690b33da7d16c7d7be35c8b292131b

              • C:\Users\Admin\AppData\Local\osu!\OpenTK.dll

                Filesize

                4.2MB

                MD5

                b4d949571134fc3ec6c28f1af7a75e49

                SHA1

                07eb5685ff4f19ff8ed466c68c2426e2ead69241

                SHA256

                b415f3e061d9758316074dcbf31d6dba48cb0b89405254db94ead0e43ed88511

                SHA512

                7abb1128d4f9312ec714f7d3f4e1d1ce12a6f93235d6382cf25c39dae0d7d88b5ad5141f512659c33cf57a762e14711b6b690b33da7d16c7d7be35c8b292131b

              • C:\Users\Admin\AppData\Local\osu!\_pending\osu!auth.dll

                Filesize

                5.5MB

                MD5

                284c1dc8a524e46fbe7a7cf846d3d9b1

                SHA1

                cc58fdaf66e03e83976c0837132aa9100b71ae88

                SHA256

                bc91c462026efafaea524ff909e8b676caf63def1770de7fae48e9c64dc1e91f

                SHA512

                d1084b3d93e08b25599339cdb2bc869c870edcedeecae8d3b28e316343980cb1b1d88aeeea61ed3267368d74b329c0b8861a02603845e75593ac4f074cb27a66

              • C:\Users\Admin\AppData\Local\osu!\avcodec-51.dll

                Filesize

                4.2MB

                MD5

                b66478cc0f9ec50810489a039ced642b

                SHA1

                992ede70f0fee5cb323b4b810cc960bf2531875e

                SHA256

                e512fe71775f767285cfb3310d8f1ac042639ab3d1a02ca3675b82cfd3cbc702

                SHA512

                ed07e71fd6bc2bd9f2ada8b8d6aa80662d6ffadce7d692f078e9ccd8ada2ba47b0e25967809f567fb93ffc96271037f010a0038bb78301812a75e30eee9b2645

              • C:\Users\Admin\AppData\Local\osu!\avcodec-51.dll

                Filesize

                4.2MB

                MD5

                b66478cc0f9ec50810489a039ced642b

                SHA1

                992ede70f0fee5cb323b4b810cc960bf2531875e

                SHA256

                e512fe71775f767285cfb3310d8f1ac042639ab3d1a02ca3675b82cfd3cbc702

                SHA512

                ed07e71fd6bc2bd9f2ada8b8d6aa80662d6ffadce7d692f078e9ccd8ada2ba47b0e25967809f567fb93ffc96271037f010a0038bb78301812a75e30eee9b2645

              • C:\Users\Admin\AppData\Local\osu!\avformat-52.dll

                Filesize

                711KB

                MD5

                c00b30289cc427caff97af5aa3d43e03

                SHA1

                8e70885a62b0fe510422c2367b1f6de489b67e6c

                SHA256

                b155e2bfce3adbbc45d01ec991160ab4fab7e8d33a0ab835463da860d3693867

                SHA512

                3a70161a5adaba0101f2d2ca1522b1e71d04079ad15cc87a030b00c14b45df9545d5cba55101e25d9bd101769edb87a8e4d893125780e86fa2551290ab720860

              • C:\Users\Admin\AppData\Local\osu!\avformat-52.dll

                Filesize

                711KB

                MD5

                c00b30289cc427caff97af5aa3d43e03

                SHA1

                8e70885a62b0fe510422c2367b1f6de489b67e6c

                SHA256

                b155e2bfce3adbbc45d01ec991160ab4fab7e8d33a0ab835463da860d3693867

                SHA512

                3a70161a5adaba0101f2d2ca1522b1e71d04079ad15cc87a030b00c14b45df9545d5cba55101e25d9bd101769edb87a8e4d893125780e86fa2551290ab720860

              • C:\Users\Admin\AppData\Local\osu!\avutil-49.dll

                Filesize

                77KB

                MD5

                47c83b958951331ba409d6b80316250c

                SHA1

                ce14566676a27a0899079781a41888a2f1303127

                SHA256

                e51523f179a8ab8101eaa3e587c5e1dfe6c19636ecfa582896833f06d2e79064

                SHA512

                58408238279126e2b478a2f7cda513e5b5908140cc615f271e2baea7a2fe59046f51040406adb86194cc168ff4bc9ea2ca92834b9d90116f9ceb2384a4325896

              • C:\Users\Admin\AppData\Local\osu!\avutil-49.dll

                Filesize

                77KB

                MD5

                47c83b958951331ba409d6b80316250c

                SHA1

                ce14566676a27a0899079781a41888a2f1303127

                SHA256

                e51523f179a8ab8101eaa3e587c5e1dfe6c19636ecfa582896833f06d2e79064

                SHA512

                58408238279126e2b478a2f7cda513e5b5908140cc615f271e2baea7a2fe59046f51040406adb86194cc168ff4bc9ea2ca92834b9d90116f9ceb2384a4325896

              • C:\Users\Admin\AppData\Local\osu!\bass.dll

                Filesize

                125KB

                MD5

                7623474a8b9bec1e3ffca813cdf93bc3

                SHA1

                4a1c0ecf8cbed18d0472136a7096ee8c3c2fa774

                SHA256

                67766e574baa86eb8317623acc2957e8e28944bb801a8c10a0fa9d29fdb4cfd3

                SHA512

                b7e7205e48eade918d63b483fb500867cc8196496fe9136f0177481d654a67af8319b6823fb04787e4bd6ee46c031c2b6fea57f0bf12b8a58cf8e0003834bd7b

              • C:\Users\Admin\AppData\Local\osu!\bass.dll

                Filesize

                125KB

                MD5

                7623474a8b9bec1e3ffca813cdf93bc3

                SHA1

                4a1c0ecf8cbed18d0472136a7096ee8c3c2fa774

                SHA256

                67766e574baa86eb8317623acc2957e8e28944bb801a8c10a0fa9d29fdb4cfd3

                SHA512

                b7e7205e48eade918d63b483fb500867cc8196496fe9136f0177481d654a67af8319b6823fb04787e4bd6ee46c031c2b6fea57f0bf12b8a58cf8e0003834bd7b

              • C:\Users\Admin\AppData\Local\osu!\bass.dll

                Filesize

                125KB

                MD5

                7623474a8b9bec1e3ffca813cdf93bc3

                SHA1

                4a1c0ecf8cbed18d0472136a7096ee8c3c2fa774

                SHA256

                67766e574baa86eb8317623acc2957e8e28944bb801a8c10a0fa9d29fdb4cfd3

                SHA512

                b7e7205e48eade918d63b483fb500867cc8196496fe9136f0177481d654a67af8319b6823fb04787e4bd6ee46c031c2b6fea57f0bf12b8a58cf8e0003834bd7b

              • C:\Users\Admin\AppData\Local\osu!\bass.dll

                Filesize

                125KB

                MD5

                7623474a8b9bec1e3ffca813cdf93bc3

                SHA1

                4a1c0ecf8cbed18d0472136a7096ee8c3c2fa774

                SHA256

                67766e574baa86eb8317623acc2957e8e28944bb801a8c10a0fa9d29fdb4cfd3

                SHA512

                b7e7205e48eade918d63b483fb500867cc8196496fe9136f0177481d654a67af8319b6823fb04787e4bd6ee46c031c2b6fea57f0bf12b8a58cf8e0003834bd7b

              • C:\Users\Admin\AppData\Local\osu!\bass_fx.dll

                Filesize

                50KB

                MD5

                3ad3c0fd4dca001a2f9e707b74544919

                SHA1

                c6176415ecd3e8f38f976e4234325452fe1fd2a0

                SHA256

                81111a1cb6f8f362cf232e21098c563fe1409160300f2a254f2a1762e5d4db04

                SHA512

                436dac92e4a60dfc02c8c7a7ae496df7199c3fd15ef668bff2565f428f25be9c3ae1d0e120d64767eda1a9d4afa2e8bfeb6d047745440c3fce854080c44f42c5

              • C:\Users\Admin\AppData\Local\osu!\bass_fx.dll

                Filesize

                50KB

                MD5

                3ad3c0fd4dca001a2f9e707b74544919

                SHA1

                c6176415ecd3e8f38f976e4234325452fe1fd2a0

                SHA256

                81111a1cb6f8f362cf232e21098c563fe1409160300f2a254f2a1762e5d4db04

                SHA512

                436dac92e4a60dfc02c8c7a7ae496df7199c3fd15ef668bff2565f428f25be9c3ae1d0e120d64767eda1a9d4afa2e8bfeb6d047745440c3fce854080c44f42c5

              • C:\Users\Admin\AppData\Local\osu!\bass_fx.dll

                Filesize

                50KB

                MD5

                3ad3c0fd4dca001a2f9e707b74544919

                SHA1

                c6176415ecd3e8f38f976e4234325452fe1fd2a0

                SHA256

                81111a1cb6f8f362cf232e21098c563fe1409160300f2a254f2a1762e5d4db04

                SHA512

                436dac92e4a60dfc02c8c7a7ae496df7199c3fd15ef668bff2565f428f25be9c3ae1d0e120d64767eda1a9d4afa2e8bfeb6d047745440c3fce854080c44f42c5

              • C:\Users\Admin\AppData\Local\osu!\bass_fx.dll

                Filesize

                50KB

                MD5

                3ad3c0fd4dca001a2f9e707b74544919

                SHA1

                c6176415ecd3e8f38f976e4234325452fe1fd2a0

                SHA256

                81111a1cb6f8f362cf232e21098c563fe1409160300f2a254f2a1762e5d4db04

                SHA512

                436dac92e4a60dfc02c8c7a7ae496df7199c3fd15ef668bff2565f428f25be9c3ae1d0e120d64767eda1a9d4afa2e8bfeb6d047745440c3fce854080c44f42c5

              • C:\Users\Admin\AppData\Local\osu!\d3dcompiler_47.dll

                Filesize

                3.3MB

                MD5

                c5b362bce86bb0ad3149c4540201331d

                SHA1

                91bc4989345a4e26f06c0c781a21a27d4ee9bacd

                SHA256

                efbdbbcd0d954f8fdc53467de5d89ad525e4e4a9cfff8a15d07c6fdb350c407f

                SHA512

                82fa22f6509334a6a481b0731de1898aa70d2cf3a35f81c4a91fffe0f4c4dd727c8d6a238c778adc7678dfcf1bc81011a9eff2dee912e6b14f93ca3600d62ddd

              • C:\Users\Admin\AppData\Local\osu!\d3dcompiler_47.dll

                Filesize

                3.3MB

                MD5

                c5b362bce86bb0ad3149c4540201331d

                SHA1

                91bc4989345a4e26f06c0c781a21a27d4ee9bacd

                SHA256

                efbdbbcd0d954f8fdc53467de5d89ad525e4e4a9cfff8a15d07c6fdb350c407f

                SHA512

                82fa22f6509334a6a481b0731de1898aa70d2cf3a35f81c4a91fffe0f4c4dd727c8d6a238c778adc7678dfcf1bc81011a9eff2dee912e6b14f93ca3600d62ddd

              • C:\Users\Admin\AppData\Local\osu!\libEGL.dll

                Filesize

                146KB

                MD5

                9f7f22cef980ec272a9b73bf317500e4

                SHA1

                ae11d7cdfa84a242e31efd6f03b0ef764d5f900c

                SHA256

                041a631d114e45a11c43efe3b7712a10ce8052cf4b313c7f4577a5b9adb78072

                SHA512

                19e432313c1e28fc076fb9e9c3884c3c97cc2d05b6d1aecf429180a6f5cc407734fe758bcc63936d5fe7ef8ac01abdf5ec4b17bb08b26c5cc87c560f4b89c5bc

              • C:\Users\Admin\AppData\Local\osu!\libEGL.dll

                Filesize

                146KB

                MD5

                9f7f22cef980ec272a9b73bf317500e4

                SHA1

                ae11d7cdfa84a242e31efd6f03b0ef764d5f900c

                SHA256

                041a631d114e45a11c43efe3b7712a10ce8052cf4b313c7f4577a5b9adb78072

                SHA512

                19e432313c1e28fc076fb9e9c3884c3c97cc2d05b6d1aecf429180a6f5cc407734fe758bcc63936d5fe7ef8ac01abdf5ec4b17bb08b26c5cc87c560f4b89c5bc

              • C:\Users\Admin\AppData\Local\osu!\libEGL.dll

                Filesize

                146KB

                MD5

                9f7f22cef980ec272a9b73bf317500e4

                SHA1

                ae11d7cdfa84a242e31efd6f03b0ef764d5f900c

                SHA256

                041a631d114e45a11c43efe3b7712a10ce8052cf4b313c7f4577a5b9adb78072

                SHA512

                19e432313c1e28fc076fb9e9c3884c3c97cc2d05b6d1aecf429180a6f5cc407734fe758bcc63936d5fe7ef8ac01abdf5ec4b17bb08b26c5cc87c560f4b89c5bc

              • C:\Users\Admin\AppData\Local\osu!\libEGL.dll

                Filesize

                146KB

                MD5

                9f7f22cef980ec272a9b73bf317500e4

                SHA1

                ae11d7cdfa84a242e31efd6f03b0ef764d5f900c

                SHA256

                041a631d114e45a11c43efe3b7712a10ce8052cf4b313c7f4577a5b9adb78072

                SHA512

                19e432313c1e28fc076fb9e9c3884c3c97cc2d05b6d1aecf429180a6f5cc407734fe758bcc63936d5fe7ef8ac01abdf5ec4b17bb08b26c5cc87c560f4b89c5bc

              • C:\Users\Admin\AppData\Local\osu!\libGLESv2.dll

                Filesize

                3.2MB

                MD5

                a4dfddff62d1e917ebb0688cf8d96be7

                SHA1

                9376bfa069a72da76733cc72cf90386920815142

                SHA256

                cbfc536b80405da7b5c37c97fceaf2310daf58d78c806140367b8f513352342f

                SHA512

                97de24a94f7aaaf3035853c0eb93f44c5c2cdfad99b563fef225d9f2b6f4fa3fe8f89850895d286322191cf8b372aa87da6620796cd32fe368f75b6722b556c3

              • C:\Users\Admin\AppData\Local\osu!\libGLESv2.dll

                Filesize

                3.2MB

                MD5

                a4dfddff62d1e917ebb0688cf8d96be7

                SHA1

                9376bfa069a72da76733cc72cf90386920815142

                SHA256

                cbfc536b80405da7b5c37c97fceaf2310daf58d78c806140367b8f513352342f

                SHA512

                97de24a94f7aaaf3035853c0eb93f44c5c2cdfad99b563fef225d9f2b6f4fa3fe8f89850895d286322191cf8b372aa87da6620796cd32fe368f75b6722b556c3

              • C:\Users\Admin\AppData\Local\osu!\libGLESv2.dll

                Filesize

                3.2MB

                MD5

                a4dfddff62d1e917ebb0688cf8d96be7

                SHA1

                9376bfa069a72da76733cc72cf90386920815142

                SHA256

                cbfc536b80405da7b5c37c97fceaf2310daf58d78c806140367b8f513352342f

                SHA512

                97de24a94f7aaaf3035853c0eb93f44c5c2cdfad99b563fef225d9f2b6f4fa3fe8f89850895d286322191cf8b372aa87da6620796cd32fe368f75b6722b556c3

              • C:\Users\Admin\AppData\Local\osu!\libGLESv2.dll

                Filesize

                3.2MB

                MD5

                a4dfddff62d1e917ebb0688cf8d96be7

                SHA1

                9376bfa069a72da76733cc72cf90386920815142

                SHA256

                cbfc536b80405da7b5c37c97fceaf2310daf58d78c806140367b8f513352342f

                SHA512

                97de24a94f7aaaf3035853c0eb93f44c5c2cdfad99b563fef225d9f2b6f4fa3fe8f89850895d286322191cf8b372aa87da6620796cd32fe368f75b6722b556c3

              • C:\Users\Admin\AppData\Local\osu!\osu!.Admin.cfg

                Filesize

                4KB

                MD5

                6de6ecd5a058d57bb77974b89aadf8da

                SHA1

                a2d9fe6ec97652739a4976e29d1d72b03cef9634

                SHA256

                643cb0536f169a082f21ccb199d125cdc32bc92b3a225eb3fda3f65fce1c7ef0

                SHA512

                01cc63242227b07452bbf71e2af77c912c472ef1cf5ab188d79f2bb9f85b6e91894175bddf5b1af7e700af5d23e5df4ce839a955194f2463596dcc1edc8f8e61

              • C:\Users\Admin\AppData\Local\osu!\osu!.cfg

                Filesize

                878B

                MD5

                45c2857fad245dbb739284678d754377

                SHA1

                d1dddd9b02fff6a2af3f9f437517cfd603228a14

                SHA256

                d6dcc8b899948a99dae322cc6af6eb6d0e17ba66c2b03c75a8ff58f937df2226

                SHA512

                4042e26c77d830d9ffa35337fc88855d8bd343b258abda769106db77463087aaa0c8f42f82133b6443e2987a29eb0374190800ef2a730507cd1fbe6e078394d3

              • C:\Users\Admin\AppData\Local\osu!\osu!.cfg

                Filesize

                856B

                MD5

                3dc331887fe167cede3b4148e8e69fe4

                SHA1

                7d3b8a6b89527fe04d92c146ce63da95430b7795

                SHA256

                3135552d1a8ecbcd9cf5c35ad62890231311bf3f05e3e2d22fb462e7ff4726d6

                SHA512

                62f73e82abd38a825468c88e752f917e5a8c91a5cf9452a2878263c2353119824fac85f25388d3737789ab64b32ced9074426a363f90b1523b8bf10f33a24cd8

              • C:\Users\Admin\AppData\Local\osu!\osu!.cfg

                Filesize

                856B

                MD5

                3dc331887fe167cede3b4148e8e69fe4

                SHA1

                7d3b8a6b89527fe04d92c146ce63da95430b7795

                SHA256

                3135552d1a8ecbcd9cf5c35ad62890231311bf3f05e3e2d22fb462e7ff4726d6

                SHA512

                62f73e82abd38a825468c88e752f917e5a8c91a5cf9452a2878263c2353119824fac85f25388d3737789ab64b32ced9074426a363f90b1523b8bf10f33a24cd8

              • C:\Users\Admin\AppData\Local\osu!\osu!.exe

                Filesize

                4.3MB

                MD5

                321cf9cb89893c3f78f49c0e19718d08

                SHA1

                59228593ccbe311dba685af04eb961c87acff981

                SHA256

                f0b2a03e625517cab9f760e2b6b8ff56ad5aacd1249becb2872bc22fa8817426

                SHA512

                a25562da867ccb48df6ba42b91a93f8190d77dfb1ec18637afface0cd3dfd6427a2df7a2b7c64157079a619d173d8726b0ae3b8e65d08eb08bdf0d85a438ef44

              • C:\Users\Admin\AppData\Local\osu!\osu!.exe

                Filesize

                4.3MB

                MD5

                321cf9cb89893c3f78f49c0e19718d08

                SHA1

                59228593ccbe311dba685af04eb961c87acff981

                SHA256

                f0b2a03e625517cab9f760e2b6b8ff56ad5aacd1249becb2872bc22fa8817426

                SHA512

                a25562da867ccb48df6ba42b91a93f8190d77dfb1ec18637afface0cd3dfd6427a2df7a2b7c64157079a619d173d8726b0ae3b8e65d08eb08bdf0d85a438ef44

              • C:\Users\Admin\AppData\Local\osu!\osu!.exe

                Filesize

                4.3MB

                MD5

                321cf9cb89893c3f78f49c0e19718d08

                SHA1

                59228593ccbe311dba685af04eb961c87acff981

                SHA256

                f0b2a03e625517cab9f760e2b6b8ff56ad5aacd1249becb2872bc22fa8817426

                SHA512

                a25562da867ccb48df6ba42b91a93f8190d77dfb1ec18637afface0cd3dfd6427a2df7a2b7c64157079a619d173d8726b0ae3b8e65d08eb08bdf0d85a438ef44

              • C:\Users\Admin\AppData\Local\osu!\osu!.exe

                Filesize

                4.3MB

                MD5

                321cf9cb89893c3f78f49c0e19718d08

                SHA1

                59228593ccbe311dba685af04eb961c87acff981

                SHA256

                f0b2a03e625517cab9f760e2b6b8ff56ad5aacd1249becb2872bc22fa8817426

                SHA512

                a25562da867ccb48df6ba42b91a93f8190d77dfb1ec18637afface0cd3dfd6427a2df7a2b7c64157079a619d173d8726b0ae3b8e65d08eb08bdf0d85a438ef44

              • C:\Users\Admin\AppData\Local\osu!\osu!.exe

                Filesize

                4.3MB

                MD5

                321cf9cb89893c3f78f49c0e19718d08

                SHA1

                59228593ccbe311dba685af04eb961c87acff981

                SHA256

                f0b2a03e625517cab9f760e2b6b8ff56ad5aacd1249becb2872bc22fa8817426

                SHA512

                a25562da867ccb48df6ba42b91a93f8190d77dfb1ec18637afface0cd3dfd6427a2df7a2b7c64157079a619d173d8726b0ae3b8e65d08eb08bdf0d85a438ef44

              • C:\Users\Admin\AppData\Local\osu!\osu!.exe

                Filesize

                4.3MB

                MD5

                321cf9cb89893c3f78f49c0e19718d08

                SHA1

                59228593ccbe311dba685af04eb961c87acff981

                SHA256

                f0b2a03e625517cab9f760e2b6b8ff56ad5aacd1249becb2872bc22fa8817426

                SHA512

                a25562da867ccb48df6ba42b91a93f8190d77dfb1ec18637afface0cd3dfd6427a2df7a2b7c64157079a619d173d8726b0ae3b8e65d08eb08bdf0d85a438ef44

              • C:\Users\Admin\AppData\Local\osu!\osu!auth.dll

                Filesize

                5.5MB

                MD5

                284c1dc8a524e46fbe7a7cf846d3d9b1

                SHA1

                cc58fdaf66e03e83976c0837132aa9100b71ae88

                SHA256

                bc91c462026efafaea524ff909e8b676caf63def1770de7fae48e9c64dc1e91f

                SHA512

                d1084b3d93e08b25599339cdb2bc869c870edcedeecae8d3b28e316343980cb1b1d88aeeea61ed3267368d74b329c0b8861a02603845e75593ac4f074cb27a66

              • C:\Users\Admin\AppData\Local\osu!\osu!auth.dll

                Filesize

                5.5MB

                MD5

                284c1dc8a524e46fbe7a7cf846d3d9b1

                SHA1

                cc58fdaf66e03e83976c0837132aa9100b71ae88

                SHA256

                bc91c462026efafaea524ff909e8b676caf63def1770de7fae48e9c64dc1e91f

                SHA512

                d1084b3d93e08b25599339cdb2bc869c870edcedeecae8d3b28e316343980cb1b1d88aeeea61ed3267368d74b329c0b8861a02603845e75593ac4f074cb27a66

              • C:\Users\Admin\AppData\Local\osu!\osu!auth.dll

                Filesize

                5.5MB

                MD5

                284c1dc8a524e46fbe7a7cf846d3d9b1

                SHA1

                cc58fdaf66e03e83976c0837132aa9100b71ae88

                SHA256

                bc91c462026efafaea524ff909e8b676caf63def1770de7fae48e9c64dc1e91f

                SHA512

                d1084b3d93e08b25599339cdb2bc869c870edcedeecae8d3b28e316343980cb1b1d88aeeea61ed3267368d74b329c0b8861a02603845e75593ac4f074cb27a66

              • C:\Users\Admin\AppData\Local\osu!\osu!gameplay.dll

                Filesize

                30.4MB

                MD5

                4cb98d63f1b2b9dc38e10e9901ec52d8

                SHA1

                42c0e8b8e5c7a4113e38a977221f845ef8406722

                SHA256

                ba3467a8db908d81a0729f78fdc5c8f1d1595d3da4e5a9a34be9a16e06da9f87

                SHA512

                d351b9ff851490187b003c675047b6a20a2519df3818bcd18a674d6edab1d211c9661acc98403b562ff3268576ea203b4e0f10e962467b9849b72431c92735a4

              • C:\Users\Admin\AppData\Local\osu!\osu!gameplay.dll

                Filesize

                30.4MB

                MD5

                4cb98d63f1b2b9dc38e10e9901ec52d8

                SHA1

                42c0e8b8e5c7a4113e38a977221f845ef8406722

                SHA256

                ba3467a8db908d81a0729f78fdc5c8f1d1595d3da4e5a9a34be9a16e06da9f87

                SHA512

                d351b9ff851490187b003c675047b6a20a2519df3818bcd18a674d6edab1d211c9661acc98403b562ff3268576ea203b4e0f10e962467b9849b72431c92735a4

              • C:\Users\Admin\AppData\Local\osu!\osu!seasonal.dll

                Filesize

                3.7MB

                MD5

                524344f96189d2cc72123312351c6a79

                SHA1

                0629eb1003562fe3b59631d74d6c8c77ffa4b25f

                SHA256

                b128940413b25180e0ac22a75bc09b2912a24b93fd4880f10b18d4020b8fc112

                SHA512

                d13bb6ed8247093cd6d7b55cd19fa17ee75bde20a0a2011de04c649da064ccf947ccd0487320ca87f1437717da1711e2a3f33a7158759e620244d7818df3a188

              • C:\Users\Admin\AppData\Local\osu!\osu!seasonal.dll

                Filesize

                3.7MB

                MD5

                524344f96189d2cc72123312351c6a79

                SHA1

                0629eb1003562fe3b59631d74d6c8c77ffa4b25f

                SHA256

                b128940413b25180e0ac22a75bc09b2912a24b93fd4880f10b18d4020b8fc112

                SHA512

                d13bb6ed8247093cd6d7b55cd19fa17ee75bde20a0a2011de04c649da064ccf947ccd0487320ca87f1437717da1711e2a3f33a7158759e620244d7818df3a188

              • C:\Users\Admin\AppData\Local\osu!\osu!ui.dll

                Filesize

                24.6MB

                MD5

                450935f9812f0336e7968ec110548de6

                SHA1

                52a238343d521106c29b11b71b6546fdbc21ab90

                SHA256

                7c5b5834977a3d6cf853c3db28492399721004e36e8ecc09c0f475d759e4c557

                SHA512

                0f21b22fdba847b8b696fd40f34c26c89fa22e52d0abd342b67530609441fb7ec3ea12ad8badfca410c1f924ee9cfe401bc69ca645bf78371c48803f1d830b72

              • C:\Users\Admin\AppData\Local\osu!\osu!ui.dll

                Filesize

                24.6MB

                MD5

                450935f9812f0336e7968ec110548de6

                SHA1

                52a238343d521106c29b11b71b6546fdbc21ab90

                SHA256

                7c5b5834977a3d6cf853c3db28492399721004e36e8ecc09c0f475d759e4c557

                SHA512

                0f21b22fdba847b8b696fd40f34c26c89fa22e52d0abd342b67530609441fb7ec3ea12ad8badfca410c1f924ee9cfe401bc69ca645bf78371c48803f1d830b72

              • C:\Users\Admin\AppData\Local\osu!\pthreadGC2.dll

                Filesize

                75KB

                MD5

                00678eb6be3b52d562b66218c93e21a8

                SHA1

                ba583d1520da22f3d3b89196c981279ecda58648

                SHA256

                b18c8437663002e4a4f06c4c1b7bec71fe13e5e6bbb927c68a273de02a5c690f

                SHA512

                58d9ffa0f569ba7b1aaea62b49f5bfa18bf23c54d2487eb9e4da984469236c2d4baabeeeac7e4b71d66b8c30f7fff4890fee5ee25e00369fc4afce053cbeb048

              • C:\Users\Admin\AppData\Local\osu!\pthreadGC2.dll

                Filesize

                75KB

                MD5

                00678eb6be3b52d562b66218c93e21a8

                SHA1

                ba583d1520da22f3d3b89196c981279ecda58648

                SHA256

                b18c8437663002e4a4f06c4c1b7bec71fe13e5e6bbb927c68a273de02a5c690f

                SHA512

                58d9ffa0f569ba7b1aaea62b49f5bfa18bf23c54d2487eb9e4da984469236c2d4baabeeeac7e4b71d66b8c30f7fff4890fee5ee25e00369fc4afce053cbeb048

              • C:\Users\Admin\Videos\Captures\desktop.ini

                Filesize

                190B

                MD5

                b0d27eaec71f1cd73b015f5ceeb15f9d

                SHA1

                62264f8b5c2f5034a1e4143df6e8c787165fbc2f

                SHA256

                86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2

                SHA512

                7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c

              • C:\Users\Admin\Videos\Captures\desktop.ini

                Filesize

                190B

                MD5

                b0d27eaec71f1cd73b015f5ceeb15f9d

                SHA1

                62264f8b5c2f5034a1e4143df6e8c787165fbc2f

                SHA256

                86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2

                SHA512

                7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c

              • memory/2092-593-0x000000000BCF0000-0x000000000BDF0000-memory.dmp

                Filesize

                1024KB

              • memory/2092-611-0x0000000005260000-0x0000000005270000-memory.dmp

                Filesize

                64KB

              • memory/2092-670-0x00000000709A0000-0x0000000070F27000-memory.dmp

                Filesize

                5.5MB

              • memory/2092-668-0x0000000005260000-0x0000000005270000-memory.dmp

                Filesize

                64KB

              • memory/2092-667-0x00000000072A0000-0x00000000072BC000-memory.dmp

                Filesize

                112KB

              • memory/2092-666-0x0000000005260000-0x0000000005270000-memory.dmp

                Filesize

                64KB

              • memory/2092-665-0x0000000005260000-0x0000000005270000-memory.dmp

                Filesize

                64KB

              • memory/2092-664-0x0000000005260000-0x0000000005270000-memory.dmp

                Filesize

                64KB

              • memory/2092-663-0x0000000005260000-0x0000000005270000-memory.dmp

                Filesize

                64KB

              • memory/2092-662-0x0000000005260000-0x0000000005270000-memory.dmp

                Filesize

                64KB

              • memory/2092-591-0x0000000005260000-0x0000000005270000-memory.dmp

                Filesize

                64KB

              • memory/2092-592-0x00000000709A0000-0x0000000070F27000-memory.dmp

                Filesize

                5.5MB

              • memory/2092-595-0x000000006D050000-0x000000006D060000-memory.dmp

                Filesize

                64KB

              • memory/2092-587-0x000000006FA50000-0x000000006FA60000-memory.dmp

                Filesize

                64KB

              • memory/2092-607-0x000000006D050000-0x000000006D060000-memory.dmp

                Filesize

                64KB

              • memory/2092-609-0x0000000005260000-0x0000000005270000-memory.dmp

                Filesize

                64KB

              • memory/2092-608-0x0000000005260000-0x0000000005270000-memory.dmp

                Filesize

                64KB

              • memory/2092-620-0x000000006D050000-0x000000006D060000-memory.dmp

                Filesize

                64KB

              • memory/2092-646-0x00000000072A0000-0x00000000072BC000-memory.dmp

                Filesize

                112KB

              • memory/2092-645-0x0000000010000000-0x0000000010013000-memory.dmp

                Filesize

                76KB

              • memory/2092-644-0x000000006D050000-0x000000006D060000-memory.dmp

                Filesize

                64KB

              • memory/2092-643-0x000000006D050000-0x000000006D060000-memory.dmp

                Filesize

                64KB

              • memory/2092-642-0x000000006D050000-0x000000006D060000-memory.dmp

                Filesize

                64KB

              • memory/2092-641-0x000000006D050000-0x000000006D060000-memory.dmp

                Filesize

                64KB

              • memory/2092-640-0x000000006D050000-0x000000006D060000-memory.dmp

                Filesize

                64KB

              • memory/2092-614-0x000000006D050000-0x000000006D060000-memory.dmp

                Filesize

                64KB

              • memory/2092-613-0x0000000005260000-0x0000000005270000-memory.dmp

                Filesize

                64KB

              • memory/2092-634-0x000000006D050000-0x000000006D060000-memory.dmp

                Filesize

                64KB

              • memory/2092-617-0x000000006D050000-0x000000006D060000-memory.dmp

                Filesize

                64KB

              • memory/2092-623-0x000000006D050000-0x000000006D060000-memory.dmp

                Filesize

                64KB

              • memory/2092-630-0x0000000074F60000-0x0000000075710000-memory.dmp

                Filesize

                7.7MB

              • memory/2092-626-0x000000006D050000-0x000000006D060000-memory.dmp

                Filesize

                64KB

              • memory/2092-629-0x000000006D050000-0x000000006D060000-memory.dmp

                Filesize

                64KB

              • memory/2956-542-0x0000024AE0AE0000-0x0000024AE1209000-memory.dmp

                Filesize

                7.2MB

              • memory/4136-551-0x0000000004D10000-0x0000000004D20000-memory.dmp

                Filesize

                64KB

              • memory/4136-550-0x0000000004D10000-0x0000000004D20000-memory.dmp

                Filesize

                64KB

              • memory/4336-134-0x0000000005810000-0x0000000005DB4000-memory.dmp

                Filesize

                5.6MB

              • memory/4336-149-0x0000000005250000-0x0000000005260000-memory.dmp

                Filesize

                64KB

              • memory/4336-147-0x0000000006A30000-0x0000000006A3A000-memory.dmp

                Filesize

                40KB

              • memory/4336-135-0x0000000005260000-0x00000000052F2000-memory.dmp

                Filesize

                584KB

              • memory/4336-133-0x0000000000500000-0x0000000000946000-memory.dmp

                Filesize

                4.3MB

              • memory/4336-153-0x0000000005250000-0x0000000005260000-memory.dmp

                Filesize

                64KB

              • memory/4336-150-0x0000000005250000-0x0000000005260000-memory.dmp

                Filesize

                64KB

              • memory/4336-148-0x0000000005250000-0x0000000005260000-memory.dmp

                Filesize

                64KB

              • memory/4532-656-0x000001DD5B750000-0x000001DD5B751000-memory.dmp

                Filesize

                4KB

              • memory/4532-655-0x000001DD5B750000-0x000001DD5B751000-memory.dmp

                Filesize

                4KB

              • memory/4532-651-0x000001DD5B750000-0x000001DD5B751000-memory.dmp

                Filesize

                4KB

              • memory/4532-650-0x000001DD5B750000-0x000001DD5B751000-memory.dmp

                Filesize

                4KB

              • memory/4532-649-0x000001DD5B750000-0x000001DD5B751000-memory.dmp

                Filesize

                4KB

              • memory/4532-657-0x000001DD5B750000-0x000001DD5B751000-memory.dmp

                Filesize

                4KB

              • memory/4532-658-0x000001DD5B750000-0x000001DD5B751000-memory.dmp

                Filesize

                4KB

              • memory/4532-659-0x000001DD5B750000-0x000001DD5B751000-memory.dmp

                Filesize

                4KB

              • memory/4556-180-0x0000000005080000-0x0000000005090000-memory.dmp

                Filesize

                64KB

              • memory/4556-335-0x0000000005080000-0x0000000005090000-memory.dmp

                Filesize

                64KB

              • memory/4556-169-0x0000000005080000-0x0000000005090000-memory.dmp

                Filesize

                64KB

              • memory/4556-179-0x0000000009AE0000-0x000000000A00C000-memory.dmp

                Filesize

                5.2MB

              • memory/4556-181-0x0000000009A00000-0x0000000009A22000-memory.dmp

                Filesize

                136KB

              • memory/4556-321-0x0000000005080000-0x0000000005090000-memory.dmp

                Filesize

                64KB

              • memory/4800-535-0x0000000004E40000-0x0000000004E50000-memory.dmp

                Filesize

                64KB

              • memory/4800-530-0x000000006D050000-0x000000006D060000-memory.dmp

                Filesize

                64KB

              • memory/4800-459-0x000000006FA50000-0x000000006FA60000-memory.dmp

                Filesize

                64KB

              • memory/4800-457-0x0000000004E40000-0x0000000004E50000-memory.dmp

                Filesize

                64KB

              • memory/4800-468-0x0000000070CC0000-0x0000000071247000-memory.dmp

                Filesize

                5.5MB

              • memory/4800-477-0x00000000076B0000-0x00000000076B1000-memory.dmp

                Filesize

                4KB

              • memory/4800-481-0x000000000B5D0000-0x000000000B6D0000-memory.dmp

                Filesize

                1024KB

              • memory/4800-480-0x000000000B1A0000-0x000000000B5CC000-memory.dmp

                Filesize

                4.2MB

              • memory/4800-484-0x000000000AC90000-0x000000000AD6B000-memory.dmp

                Filesize

                876KB

              • memory/4800-547-0x0000000070CC0000-0x0000000071247000-memory.dmp

                Filesize

                5.5MB

              • memory/4800-483-0x000000006D050000-0x000000006D060000-memory.dmp

                Filesize

                64KB

              • memory/4800-544-0x000000000AC90000-0x000000000AD6B000-memory.dmp

                Filesize

                876KB

              • memory/4800-541-0x0000000006E10000-0x0000000006E2C000-memory.dmp

                Filesize

                112KB

              • memory/4800-540-0x0000000010000000-0x0000000010013000-memory.dmp

                Filesize

                76KB

              • memory/4800-538-0x0000000004E40000-0x0000000004E50000-memory.dmp

                Filesize

                64KB

              • memory/4800-537-0x0000000004E40000-0x0000000004E50000-memory.dmp

                Filesize

                64KB

              • memory/4800-536-0x0000000004E40000-0x0000000004E50000-memory.dmp

                Filesize

                64KB

              • memory/4800-494-0x0000000004E40000-0x0000000004E50000-memory.dmp

                Filesize

                64KB

              • memory/4800-534-0x0000000004E40000-0x0000000004E50000-memory.dmp

                Filesize

                64KB

              • memory/4800-532-0x000000006D050000-0x000000006D060000-memory.dmp

                Filesize

                64KB

              • memory/4800-531-0x000000006D050000-0x000000006D060000-memory.dmp

                Filesize

                64KB

              • memory/4800-454-0x00000000065D0000-0x0000000006626000-memory.dmp

                Filesize

                344KB

              • memory/4800-529-0x000000006D050000-0x000000006D060000-memory.dmp

                Filesize

                64KB

              • memory/4800-528-0x000000006D050000-0x000000006D060000-memory.dmp

                Filesize

                64KB

              • memory/4800-527-0x0000000004E40000-0x0000000004E50000-memory.dmp

                Filesize

                64KB

              • memory/4800-525-0x0000000010000000-0x0000000010013000-memory.dmp

                Filesize

                76KB

              • memory/4800-526-0x0000000006E10000-0x0000000006E2C000-memory.dmp

                Filesize

                112KB

              • memory/4800-490-0x0000000007DA0000-0x0000000007E14000-memory.dmp

                Filesize

                464KB

              • memory/4800-522-0x000000006EC00000-0x000000006EC57000-memory.dmp

                Filesize

                348KB

              • memory/4800-491-0x0000000004E40000-0x0000000004E50000-memory.dmp

                Filesize

                64KB

              • memory/4800-519-0x000000006D050000-0x000000006D060000-memory.dmp

                Filesize

                64KB

              • memory/4800-493-0x000000006D050000-0x000000006D060000-memory.dmp

                Filesize

                64KB

              • memory/4800-492-0x0000000004E40000-0x0000000004E50000-memory.dmp

                Filesize

                64KB

              • memory/4800-514-0x0000000074F60000-0x0000000075710000-memory.dmp

                Filesize

                7.7MB

              • memory/4800-513-0x000000006D050000-0x000000006D060000-memory.dmp

                Filesize

                64KB

              • memory/4800-510-0x000000006D050000-0x000000006D060000-memory.dmp

                Filesize

                64KB

              • memory/4800-507-0x000000006D050000-0x000000006D060000-memory.dmp

                Filesize

                64KB

              • memory/4800-504-0x000000006D050000-0x000000006D060000-memory.dmp

                Filesize

                64KB

              • memory/4800-501-0x000000006D050000-0x000000006D060000-memory.dmp

                Filesize

                64KB

              • memory/4800-498-0x000000006D050000-0x000000006D060000-memory.dmp

                Filesize

                64KB

              • memory/4800-495-0x0000000004E40000-0x0000000004E50000-memory.dmp

                Filesize

                64KB