Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230221-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/03/2023, 18:49

General

  • Target

    osu!install.exe

  • Size

    4.3MB

  • MD5

    321cf9cb89893c3f78f49c0e19718d08

  • SHA1

    59228593ccbe311dba685af04eb961c87acff981

  • SHA256

    f0b2a03e625517cab9f760e2b6b8ff56ad5aacd1249becb2872bc22fa8817426

  • SHA512

    a25562da867ccb48df6ba42b91a93f8190d77dfb1ec18637afface0cd3dfd6427a2df7a2b7c64157079a619d173d8726b0ae3b8e65d08eb08bdf0d85a438ef44

  • SSDEEP

    49152:kSicrIcF+DhSfDG6zsIGzUwES6pcAsf+hZtXvA+xrQRLYSDnwxRxpDOhB:kh9Dh56w4wES62R0xRxpDOhB

Score
7/10

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 4 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 4 IoCs
  • Loads dropped DLL 18 IoCs
  • Drops desktop.ini file(s) 1 IoCs
  • Suspicious use of NtSetInformationThreadHideFromDebugger 6 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

  • Checks SCSI registry key(s) 3 TTPs 3 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 12 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies registry class 5 IoCs
  • Modifies system certificate store 2 TTPs 9 IoCs
  • Suspicious behavior: EnumeratesProcesses 35 IoCs
  • Suspicious use of AdjustPrivilegeToken 10 IoCs
  • Suspicious use of FindShellTrayWindow 60 IoCs
  • Suspicious use of SendNotifyMessage 59 IoCs
  • Suspicious use of SetWindowsHookEx 8 IoCs
  • Suspicious use of WriteProcessMemory 12 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\osu!install.exe
    "C:\Users\Admin\AppData\Local\Temp\osu!install.exe"
    1⤵
    • Checks computer location settings
    • Modifies system certificate store
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:4336
    • C:\Users\Admin\AppData\Local\osu!\osu!.exe
      "C:\Users\Admin\AppData\Local\osu!\osu!.exe"
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Modifies system certificate store
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:4556
      • C:\Users\Admin\AppData\Local\osu!\osu!.exe
        "C:\Users\Admin\AppData\Local\osu!\osu!.exe"
        3⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious use of NtSetInformationThreadHideFromDebugger
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:4800
        • C:\Users\Admin\AppData\Local\osu!\osu!.exe
          "C:\Users\Admin\AppData\Local\osu!\osu!.exe" -repair
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of WriteProcessMemory
          PID:4136
          • C:\Users\Admin\AppData\Local\osu!\osu!.exe
            "C:\Users\Admin\AppData\Local\osu!\osu!.exe"
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Suspicious use of NtSetInformationThreadHideFromDebugger
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of AdjustPrivilegeToken
            PID:2092
  • C:\Windows\System32\GameBarPresenceWriter.exe
    "C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
    1⤵
      PID:2300
    • C:\Windows\system32\OpenWith.exe
      C:\Windows\system32\OpenWith.exe -Embedding
      1⤵
      • Suspicious use of SetWindowsHookEx
      PID:2220
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
      1⤵
      • Drops desktop.ini file(s)
      • Checks processor information in registry
      • Modifies registry class
      PID:4704
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
      1⤵
      • Checks processor information in registry
      • Modifies registry class
      PID:1136
    • C:\Windows\system32\OpenWith.exe
      C:\Windows\system32\OpenWith.exe -Embedding
      1⤵
      • Suspicious use of SetWindowsHookEx
      PID:1956
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
      1⤵
      • Checks processor information in registry
      • Modifies registry class
      PID:2956
    • C:\Windows\system32\OpenWith.exe
      C:\Windows\system32\OpenWith.exe -Embedding
      1⤵
      • Suspicious use of SetWindowsHookEx
      PID:2692
    • C:\Windows\system32\OpenWith.exe
      C:\Windows\system32\OpenWith.exe -Embedding
      1⤵
      • Suspicious use of SetWindowsHookEx
      PID:244
    • C:\Windows\system32\OpenWith.exe
      C:\Windows\system32\OpenWith.exe -Embedding
      1⤵
      • Suspicious use of SetWindowsHookEx
      PID:1384
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
      1⤵
      • Checks processor information in registry
      • Modifies registry class
      PID:4248
    • C:\Windows\system32\OpenWith.exe
      C:\Windows\system32\OpenWith.exe -Embedding
      1⤵
      • Suspicious use of SetWindowsHookEx
      PID:5084
    • C:\Windows\system32\taskmgr.exe
      "C:\Windows\system32\taskmgr.exe" /4
      1⤵
      • Checks SCSI registry key(s)
      • Checks processor information in registry
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      PID:4532
    • C:\Windows\System32\GameBarPresenceWriter.exe
      "C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
      1⤵
        PID:4980
      • C:\Windows\system32\OpenWith.exe
        C:\Windows\system32\OpenWith.exe -Embedding
        1⤵
        • Suspicious use of SetWindowsHookEx
        PID:3664
      • C:\Windows\system32\svchost.exe
        C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
        1⤵
        • Checks processor information in registry
        • Modifies registry class
        PID:4920
      • C:\Windows\System32\GameBarPresenceWriter.exe
        "C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
        1⤵
          PID:2668
        • C:\Windows\system32\OpenWith.exe
          C:\Windows\system32\OpenWith.exe -Embedding
          1⤵
          • Suspicious use of SetWindowsHookEx
          PID:3508

        Network

        MITRE ATT&CK Enterprise v6

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\18E6B4A57A6BC7EC9B861CDF2D6D0D02_C3B142D2C5374581DC2FDFFDEDBDEDDB

          Filesize

          765B

          MD5

          cc1dfcf33cec09cf4b02162f29a2c9ea

          SHA1

          a2d9977e00e49dac782209a10e16893a87c5f8a3

          SHA256

          57831e2f282ae5cf0af7250482eb273f084d2f9eded56adbb5ccdb201b8df8e3

          SHA512

          c241bde31bff14294e460769043108f526999891163dba0498b835f3fa63dc35034fc37b35ab8c43bb7b39816b1ca69fd5abd7469735d038da13f4bea1876a89

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\AEACCDA8653DD8D7B2EA32F21D15D44F_C99E84AF904BD8598CB3FED576528926

          Filesize

          637B

          MD5

          f6b81037865b527245d8e678b1409f8b

          SHA1

          433045640fd295c2503b575c9ede7406d2e7f42a

          SHA256

          da1579ac52643b907ce3e97b8c7b3d96dc44dd21fddbf4691223a8678d73d51c

          SHA512

          fb57a69f086d563d59c45936a98df7629e134302d25bf47f9a0fe88d7e27618069ffa5121944a853324596da701ed688c062b023a04aabebffb0014de41327cd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B2FAF7692FD9FFBD64EDE317E42334BA_93702E680A5530C052C8D2BA33A2225F

          Filesize

          1KB

          MD5

          e2b38e80a0b051bf6a94370a1be65b43

          SHA1

          9b6203ec15376f74fe0e73bd81f1cd2c86341163

          SHA256

          cc3abffacfa492e6de85519380a95050e139794ae09b05e45f3c116199e7375d

          SHA512

          f5ac4fd53a4ee6bc7b934e632fc11899b0bf9cc791d307067969a2a1a342d80fc90f90caea5863fdeb3c562e7cf220e10e1c70c92cf9bf27cb6ab0bbccf53ab1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\18E6B4A57A6BC7EC9B861CDF2D6D0D02_C3B142D2C5374581DC2FDFFDEDBDEDDB

          Filesize

          484B

          MD5

          b62d1818f97c21fe40dd0165c4e36c65

          SHA1

          2145363fc2c482a032c356c1eb280bc05962fe2c

          SHA256

          716b455ddaa8d3a2b804161d82cfacf56e3879d98a61a4fcd2565618fd8a5dfc

          SHA512

          ea3e7743999f29e66ef5c90e24d82be7b05f426d3b309c6866d44b2bc7bc8c1d79373f43503a108eeff974f488b59562d0df2865cd92a777ab2cdf7d481ad101

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\AEACCDA8653DD8D7B2EA32F21D15D44F_C99E84AF904BD8598CB3FED576528926

          Filesize

          488B

          MD5

          605336e4bfff31c9315441c9ba91dce9

          SHA1

          3e9b94ae4ccebfa82aba1a0000ca6376bb7ddade

          SHA256

          8a1a37b90f6355e354bde79e2d5bdc0383fe675e79630d380f272e00ffc6198a

          SHA512

          eb87aeb82a4c4eefeb802eba63a6a118bfa3baca424105410dc618970ef481d9af3225586f1e62b0e765bb337acd449f5e2cdef19c204cc4072790391043c8bf

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B2FAF7692FD9FFBD64EDE317E42334BA_93702E680A5530C052C8D2BA33A2225F

          Filesize

          482B

          MD5

          80bf347da39513e34b431bbbfa3342c7

          SHA1

          337554f7adb9df1eae09d149c99f901affc15745

          SHA256

          54a7eca0e751b492be87ebc49088ca76413285c82ff576eb449cf0007dfd4257

          SHA512

          5ac5d8fb31db22f15ad0745c71004e2bcb36f68d20ae8b47c7aae1c645ef21df6f8b3afb63e9613c7052ad4034729876e928afdc281c4ffbfa1aabefc0d4e8ed

        • C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\osu!.exe.log

          Filesize

          1KB

          MD5

          d7851eb8e6db261d609ce656b3c44dc6

          SHA1

          62f1d2b78d143a336fe6779a17b6400f95dadb2a

          SHA256

          079dc4c2a07c1e17851a6bfc41130e0771c6b8063a2f6dcc807f9b525e1ced72

          SHA512

          1bb23aba0d00f7bfaee06b0e9fdd9d1d54a454d62308a88cd964728c568c7ec5a91a68817d4b5c93e3e3c5ad4232106af44eb1eee94679aa51396c1872af1037

        • C:\Users\Admin\AppData\Local\osu!\Logs\osu!auth.log

          Filesize

          256B

          MD5

          2d5bdf782b41f2746f0a40d8f268800b

          SHA1

          60db8f6e98cb5e9d66f1bec5ab1b1ba069cdf925

          SHA256

          974f24e5d4c167dfed059fd83ea8b0d39434dbe5087957bcb6f9cc16ce1df114

          SHA512

          c0ceda2c2ff8e651560b19e78d3283890d5be34d34be2b651fa21a6a418aeb8b5b63bf16b31fd99b49898ccc0d9367b383b56d2743b9efae96ddbb5dcb23e80c

        • C:\Users\Admin\AppData\Local\osu!\Logs\update.log

          Filesize

          325B

          MD5

          eefe2e846b5ff898abe04d136517aeb2

          SHA1

          a7af1893c60da7469d829a77b766adaf09ca7cae

          SHA256

          d02d1be12e01b2522ce3309d15b6c9985297055b78353c422b5fb1407ab1871e

          SHA512

          5e5da773a4f73d1e5e6efbcc1c88ea5b2f571e67b389634e89c44212862685978f7b28eda3dd734da9b351915fce4c5ca31ac11e64091db510b0fa64eb23ee1e

        • C:\Users\Admin\AppData\Local\osu!\Logs\update.log

          Filesize

          583B

          MD5

          370c49bae4cd9187c4b5962ee5508321

          SHA1

          b0626db33ea9cffe996dc138921e3388e24f4669

          SHA256

          ae31392404c36c988228ed8e13a1097eed4b462bb00a515625b959684450b739

          SHA512

          f1e790fb71dc563991c29f7a76dd85c44e073f1c81423e6a78c4c7dde7d8adf4104b44a4bcdc1e58f5b852c39509d169868dcdc64f23604eb8504376c029ad4a

        • C:\Users\Admin\AppData\Local\osu!\Logs\update.log

          Filesize

          90B

          MD5

          e1f83b3b90f8eedff90f8139528bd8af

          SHA1

          e63064726c9ed09795a32764270f8f3457b498eb

          SHA256

          a08b28e76a38d950b680d00726b46b320e85447d6f89d062df837d57750f7df1

          SHA512

          dbae8f340766ebab4f34136872a9ca3c0e8907698b7e66362c4d4289c53806a04e0c118ef184b7c583839d0ea411442dca021aa4146c59eb5b6b39e8bb81b98a

        • C:\Users\Admin\AppData\Local\osu!\Logs\update.log

          Filesize

          415B

          MD5

          93bf0d98811aec09ba2f0c90253609c9

          SHA1

          0797368bd23bcaeb452178c10d3fe3da81cb4151

          SHA256

          09878a3d393942adc45de732c1a5347dec1d87a4973467a590f12213984368cf

          SHA512

          e3813a1e8df934a7c7e0d8c54beead3729650b6413020750ad942989ee798373a8914c131fa3a2424802975d4ba2b57cb92c32b2e708161ea5a201288f8388c4

        • C:\Users\Admin\AppData\Local\osu!\Logs\update.log

          Filesize

          673B

          MD5

          2eeaea697b5f4ba5e7d7f35c29bf1e9e

          SHA1

          0c0a4f766757fc07a1774cefbd76621de8da4521

          SHA256

          08233c204a56d055a84913d3b4c369c3452b5bdd5e932f0b19c3c45d0c956ed3

          SHA512

          a9d3720cabe334e74876a183633ba31eeecd1ce5b4d6de52bbffcfd4b535e691312c292fda26dbd6fef299f21e7bdcdc9ce86d8e6526bf2f27adcae8affed3e1

        • C:\Users\Admin\AppData\Local\osu!\Logs\update.log

          Filesize

          370B

          MD5

          b28f1f9adc00c0998d8688105d20db38

          SHA1

          a914f9108ec267176cc391a504f65db8d066a490

          SHA256

          40e11ade7da8cf56654e186717d04925a799d4c12301b634e02896b5ed056fdd

          SHA512

          82f754a1d1b4cee18c298d1a0b484c4b56d3a4760adeba331d9677232f0c1c94b19843fe3c45784b20e186d57c0789889fdb67b1329e726a8a723416372a277c

        • C:\Users\Admin\AppData\Local\osu!\Logs\update.log

          Filesize

          1KB

          MD5

          110008991fe5c332211d67961ab257b3

          SHA1

          d75af975efdf2685dbfade2043250e55a4a4c07a

          SHA256

          4f21a196e8dcebf4f328b1d956730a72a0df3ac96f681224ad45f810b79db130

          SHA512

          eb300246250ea0efbbb0921a20047e27a60ed04fd9ae769bfed49bf4ad792cbbc599fa2a9cbe627a3233871033f364d5da4678785c7c68f32820d52385fce8a0

        • C:\Users\Admin\AppData\Local\osu!\Logs\update.log

          Filesize

          3KB

          MD5

          65b762df64183db60ec00c6bcd714998

          SHA1

          2b4729f169cac823c32cb1eef0ed23eb7f54e16a

          SHA256

          9c9a993d8f043773bfca78886992a10eb154607977f457edc9c57308ed4700e6

          SHA512

          9d2adfd2c7d507524d8248594822b91baca6385d8e9696323443866dddfbb017e65e21aab0d308a946aeb51f2263b5612f94b9a4df5af14f7119dbb14927f5e5

        • C:\Users\Admin\AppData\Local\osu!\Logs\update.log

          Filesize

          4KB

          MD5

          ee7480e9e1f1d709314548e17240235c

          SHA1

          71166012d4f1c95465d966fcf8a0111c868b083c

          SHA256

          7d405c79a02af067731a6e1677b0c89cdd41f14c2101f53e40058346d4f417db

          SHA512

          05bf29d3c1dfa9e67660e19a9399b2b8a133163d5f7089bc1a7e912e5b6fec8594937c02be1168381ee7e9f8b575ab8a752d5d684c11659ced40b336ca4927e6

        • C:\Users\Admin\AppData\Local\osu!\Logs\update.log

          Filesize

          325B

          MD5

          46496d4e2efb8c8293bdd43401ce4dc1

          SHA1

          8a2b0935d98f9ec00ad36e652970fa29dc244fc8

          SHA256

          b275ce57ffe277cd210e0922d9646199966d5b316ca01f72d148454800737df4

          SHA512

          6b43c63376b516f1f9030e98f45a8d4a6ad7b3fc8ab105e371ac66eeda431d16dab68480500fdc9581858ef7ee12e701f95eabd1b160c7d229ada560e044c371

        • C:\Users\Admin\AppData\Local\osu!\Logs\update.log

          Filesize

          583B

          MD5

          9c709d7504bfc1ffc8863e054812193e

          SHA1

          70a7e7a086451b1bbbf3382424fcfe16e0497adb

          SHA256

          b7df01be4b4a23a3bfb16796d9d9c02553d2570d10cfd58e3b9409a6d3d51ccf

          SHA512

          9c09e3c3c04827f3a34fa1cbb6dea9a6e0230e2800b327828c2ef6d582e3b09a128079383e75d4dddd1d2487237bcb80edbe2dbeba17590b481fd25765ed9f76

        • C:\Users\Admin\AppData\Local\osu!\Logs\update_success.log

          Filesize

          673B

          MD5

          2eeaea697b5f4ba5e7d7f35c29bf1e9e

          SHA1

          0c0a4f766757fc07a1774cefbd76621de8da4521

          SHA256

          08233c204a56d055a84913d3b4c369c3452b5bdd5e932f0b19c3c45d0c956ed3

          SHA512

          a9d3720cabe334e74876a183633ba31eeecd1ce5b4d6de52bbffcfd4b535e691312c292fda26dbd6fef299f21e7bdcdc9ce86d8e6526bf2f27adcae8affed3e1

        • C:\Users\Admin\AppData\Local\osu!\Logs\update_success.log

          Filesize

          6KB

          MD5

          4eabc5402e1033fa1a10df05cee5037b

          SHA1

          5b9fa173df7f5c8044378fcc06ca772a3dd48c66

          SHA256

          f60c27aa0190ee472538d27f876d38eeba6e535b71dc8fee5318b22928a183fb

          SHA512

          604965405e025f6ead8d87109b0fc817cbd2ac46172966cd1ae12b1b201f952d1a3e4f06b5352a33d931ca361054b5d02994294fa902e839a55d9133b03ca270

        • C:\Users\Admin\AppData\Local\osu!\Logs\update_success.log

          Filesize

          583B

          MD5

          9c709d7504bfc1ffc8863e054812193e

          SHA1

          70a7e7a086451b1bbbf3382424fcfe16e0497adb

          SHA256

          b7df01be4b4a23a3bfb16796d9d9c02553d2570d10cfd58e3b9409a6d3d51ccf

          SHA512

          9c09e3c3c04827f3a34fa1cbb6dea9a6e0230e2800b327828c2ef6d582e3b09a128079383e75d4dddd1d2487237bcb80edbe2dbeba17590b481fd25765ed9f76

        • C:\Users\Admin\AppData\Local\osu!\Microsoft.Ink.dll

          Filesize

          456KB

          MD5

          82d4ee89f4a39c764fa6297a95ebb10e

          SHA1

          87b1f581ad017bf62604d8071a23fde8b81550e1

          SHA256

          1081255de41aafd51bc8f4e4404ef02209e59625ae65fa926657df5690716c5d

          SHA512

          904fd99f7d5951a23af202fceeade044b6d4f40c75db09d0237618ff80b90934ca4ad3210751f6e5bcad71b3a4131e24d420e94292bcfb7acbc3490ebc844382

        • C:\Users\Admin\AppData\Local\osu!\Microsoft.Ink.dll

          Filesize

          456KB

          MD5

          82d4ee89f4a39c764fa6297a95ebb10e

          SHA1

          87b1f581ad017bf62604d8071a23fde8b81550e1

          SHA256

          1081255de41aafd51bc8f4e4404ef02209e59625ae65fa926657df5690716c5d

          SHA512

          904fd99f7d5951a23af202fceeade044b6d4f40c75db09d0237618ff80b90934ca4ad3210751f6e5bcad71b3a4131e24d420e94292bcfb7acbc3490ebc844382

        • C:\Users\Admin\AppData\Local\osu!\Microsoft.Ink.dll

          Filesize

          456KB

          MD5

          82d4ee89f4a39c764fa6297a95ebb10e

          SHA1

          87b1f581ad017bf62604d8071a23fde8b81550e1

          SHA256

          1081255de41aafd51bc8f4e4404ef02209e59625ae65fa926657df5690716c5d

          SHA512

          904fd99f7d5951a23af202fceeade044b6d4f40c75db09d0237618ff80b90934ca4ad3210751f6e5bcad71b3a4131e24d420e94292bcfb7acbc3490ebc844382

        • C:\Users\Admin\AppData\Local\osu!\Microsoft.Ink.dll

          Filesize

          456KB

          MD5

          82d4ee89f4a39c764fa6297a95ebb10e

          SHA1

          87b1f581ad017bf62604d8071a23fde8b81550e1

          SHA256

          1081255de41aafd51bc8f4e4404ef02209e59625ae65fa926657df5690716c5d

          SHA512

          904fd99f7d5951a23af202fceeade044b6d4f40c75db09d0237618ff80b90934ca4ad3210751f6e5bcad71b3a4131e24d420e94292bcfb7acbc3490ebc844382

        • C:\Users\Admin\AppData\Local\osu!\Microsoft.Ink.dll

          Filesize

          456KB

          MD5

          82d4ee89f4a39c764fa6297a95ebb10e

          SHA1

          87b1f581ad017bf62604d8071a23fde8b81550e1

          SHA256

          1081255de41aafd51bc8f4e4404ef02209e59625ae65fa926657df5690716c5d

          SHA512

          904fd99f7d5951a23af202fceeade044b6d4f40c75db09d0237618ff80b90934ca4ad3210751f6e5bcad71b3a4131e24d420e94292bcfb7acbc3490ebc844382

        • C:\Users\Admin\AppData\Local\osu!\Microsoft.Ink.dll

          Filesize

          456KB

          MD5

          82d4ee89f4a39c764fa6297a95ebb10e

          SHA1

          87b1f581ad017bf62604d8071a23fde8b81550e1

          SHA256

          1081255de41aafd51bc8f4e4404ef02209e59625ae65fa926657df5690716c5d

          SHA512

          904fd99f7d5951a23af202fceeade044b6d4f40c75db09d0237618ff80b90934ca4ad3210751f6e5bcad71b3a4131e24d420e94292bcfb7acbc3490ebc844382

        • C:\Users\Admin\AppData\Local\osu!\OpenTK.dll

          Filesize

          4.2MB

          MD5

          b4d949571134fc3ec6c28f1af7a75e49

          SHA1

          07eb5685ff4f19ff8ed466c68c2426e2ead69241

          SHA256

          b415f3e061d9758316074dcbf31d6dba48cb0b89405254db94ead0e43ed88511

          SHA512

          7abb1128d4f9312ec714f7d3f4e1d1ce12a6f93235d6382cf25c39dae0d7d88b5ad5141f512659c33cf57a762e14711b6b690b33da7d16c7d7be35c8b292131b

        • C:\Users\Admin\AppData\Local\osu!\OpenTK.dll

          Filesize

          4.2MB

          MD5

          b4d949571134fc3ec6c28f1af7a75e49

          SHA1

          07eb5685ff4f19ff8ed466c68c2426e2ead69241

          SHA256

          b415f3e061d9758316074dcbf31d6dba48cb0b89405254db94ead0e43ed88511

          SHA512

          7abb1128d4f9312ec714f7d3f4e1d1ce12a6f93235d6382cf25c39dae0d7d88b5ad5141f512659c33cf57a762e14711b6b690b33da7d16c7d7be35c8b292131b

        • C:\Users\Admin\AppData\Local\osu!\OpenTK.dll

          Filesize

          4.2MB

          MD5

          b4d949571134fc3ec6c28f1af7a75e49

          SHA1

          07eb5685ff4f19ff8ed466c68c2426e2ead69241

          SHA256

          b415f3e061d9758316074dcbf31d6dba48cb0b89405254db94ead0e43ed88511

          SHA512

          7abb1128d4f9312ec714f7d3f4e1d1ce12a6f93235d6382cf25c39dae0d7d88b5ad5141f512659c33cf57a762e14711b6b690b33da7d16c7d7be35c8b292131b

        • C:\Users\Admin\AppData\Local\osu!\OpenTK.dll

          Filesize

          4.2MB

          MD5

          b4d949571134fc3ec6c28f1af7a75e49

          SHA1

          07eb5685ff4f19ff8ed466c68c2426e2ead69241

          SHA256

          b415f3e061d9758316074dcbf31d6dba48cb0b89405254db94ead0e43ed88511

          SHA512

          7abb1128d4f9312ec714f7d3f4e1d1ce12a6f93235d6382cf25c39dae0d7d88b5ad5141f512659c33cf57a762e14711b6b690b33da7d16c7d7be35c8b292131b

        • C:\Users\Admin\AppData\Local\osu!\OpenTK.dll

          Filesize

          4.2MB

          MD5

          b4d949571134fc3ec6c28f1af7a75e49

          SHA1

          07eb5685ff4f19ff8ed466c68c2426e2ead69241

          SHA256

          b415f3e061d9758316074dcbf31d6dba48cb0b89405254db94ead0e43ed88511

          SHA512

          7abb1128d4f9312ec714f7d3f4e1d1ce12a6f93235d6382cf25c39dae0d7d88b5ad5141f512659c33cf57a762e14711b6b690b33da7d16c7d7be35c8b292131b

        • C:\Users\Admin\AppData\Local\osu!\OpenTK.dll

          Filesize

          4.2MB

          MD5

          b4d949571134fc3ec6c28f1af7a75e49

          SHA1

          07eb5685ff4f19ff8ed466c68c2426e2ead69241

          SHA256

          b415f3e061d9758316074dcbf31d6dba48cb0b89405254db94ead0e43ed88511

          SHA512

          7abb1128d4f9312ec714f7d3f4e1d1ce12a6f93235d6382cf25c39dae0d7d88b5ad5141f512659c33cf57a762e14711b6b690b33da7d16c7d7be35c8b292131b

        • C:\Users\Admin\AppData\Local\osu!\_pending\osu!auth.dll

          Filesize

          5.5MB

          MD5

          284c1dc8a524e46fbe7a7cf846d3d9b1

          SHA1

          cc58fdaf66e03e83976c0837132aa9100b71ae88

          SHA256

          bc91c462026efafaea524ff909e8b676caf63def1770de7fae48e9c64dc1e91f

          SHA512

          d1084b3d93e08b25599339cdb2bc869c870edcedeecae8d3b28e316343980cb1b1d88aeeea61ed3267368d74b329c0b8861a02603845e75593ac4f074cb27a66

        • C:\Users\Admin\AppData\Local\osu!\avcodec-51.dll

          Filesize

          4.2MB

          MD5

          b66478cc0f9ec50810489a039ced642b

          SHA1

          992ede70f0fee5cb323b4b810cc960bf2531875e

          SHA256

          e512fe71775f767285cfb3310d8f1ac042639ab3d1a02ca3675b82cfd3cbc702

          SHA512

          ed07e71fd6bc2bd9f2ada8b8d6aa80662d6ffadce7d692f078e9ccd8ada2ba47b0e25967809f567fb93ffc96271037f010a0038bb78301812a75e30eee9b2645

        • C:\Users\Admin\AppData\Local\osu!\avcodec-51.dll

          Filesize

          4.2MB

          MD5

          b66478cc0f9ec50810489a039ced642b

          SHA1

          992ede70f0fee5cb323b4b810cc960bf2531875e

          SHA256

          e512fe71775f767285cfb3310d8f1ac042639ab3d1a02ca3675b82cfd3cbc702

          SHA512

          ed07e71fd6bc2bd9f2ada8b8d6aa80662d6ffadce7d692f078e9ccd8ada2ba47b0e25967809f567fb93ffc96271037f010a0038bb78301812a75e30eee9b2645

        • C:\Users\Admin\AppData\Local\osu!\avformat-52.dll

          Filesize

          711KB

          MD5

          c00b30289cc427caff97af5aa3d43e03

          SHA1

          8e70885a62b0fe510422c2367b1f6de489b67e6c

          SHA256

          b155e2bfce3adbbc45d01ec991160ab4fab7e8d33a0ab835463da860d3693867

          SHA512

          3a70161a5adaba0101f2d2ca1522b1e71d04079ad15cc87a030b00c14b45df9545d5cba55101e25d9bd101769edb87a8e4d893125780e86fa2551290ab720860

        • C:\Users\Admin\AppData\Local\osu!\avformat-52.dll

          Filesize

          711KB

          MD5

          c00b30289cc427caff97af5aa3d43e03

          SHA1

          8e70885a62b0fe510422c2367b1f6de489b67e6c

          SHA256

          b155e2bfce3adbbc45d01ec991160ab4fab7e8d33a0ab835463da860d3693867

          SHA512

          3a70161a5adaba0101f2d2ca1522b1e71d04079ad15cc87a030b00c14b45df9545d5cba55101e25d9bd101769edb87a8e4d893125780e86fa2551290ab720860

        • C:\Users\Admin\AppData\Local\osu!\avutil-49.dll

          Filesize

          77KB

          MD5

          47c83b958951331ba409d6b80316250c

          SHA1

          ce14566676a27a0899079781a41888a2f1303127

          SHA256

          e51523f179a8ab8101eaa3e587c5e1dfe6c19636ecfa582896833f06d2e79064

          SHA512

          58408238279126e2b478a2f7cda513e5b5908140cc615f271e2baea7a2fe59046f51040406adb86194cc168ff4bc9ea2ca92834b9d90116f9ceb2384a4325896

        • C:\Users\Admin\AppData\Local\osu!\avutil-49.dll

          Filesize

          77KB

          MD5

          47c83b958951331ba409d6b80316250c

          SHA1

          ce14566676a27a0899079781a41888a2f1303127

          SHA256

          e51523f179a8ab8101eaa3e587c5e1dfe6c19636ecfa582896833f06d2e79064

          SHA512

          58408238279126e2b478a2f7cda513e5b5908140cc615f271e2baea7a2fe59046f51040406adb86194cc168ff4bc9ea2ca92834b9d90116f9ceb2384a4325896

        • C:\Users\Admin\AppData\Local\osu!\bass.dll

          Filesize

          125KB

          MD5

          7623474a8b9bec1e3ffca813cdf93bc3

          SHA1

          4a1c0ecf8cbed18d0472136a7096ee8c3c2fa774

          SHA256

          67766e574baa86eb8317623acc2957e8e28944bb801a8c10a0fa9d29fdb4cfd3

          SHA512

          b7e7205e48eade918d63b483fb500867cc8196496fe9136f0177481d654a67af8319b6823fb04787e4bd6ee46c031c2b6fea57f0bf12b8a58cf8e0003834bd7b

        • C:\Users\Admin\AppData\Local\osu!\bass.dll

          Filesize

          125KB

          MD5

          7623474a8b9bec1e3ffca813cdf93bc3

          SHA1

          4a1c0ecf8cbed18d0472136a7096ee8c3c2fa774

          SHA256

          67766e574baa86eb8317623acc2957e8e28944bb801a8c10a0fa9d29fdb4cfd3

          SHA512

          b7e7205e48eade918d63b483fb500867cc8196496fe9136f0177481d654a67af8319b6823fb04787e4bd6ee46c031c2b6fea57f0bf12b8a58cf8e0003834bd7b

        • C:\Users\Admin\AppData\Local\osu!\bass.dll

          Filesize

          125KB

          MD5

          7623474a8b9bec1e3ffca813cdf93bc3

          SHA1

          4a1c0ecf8cbed18d0472136a7096ee8c3c2fa774

          SHA256

          67766e574baa86eb8317623acc2957e8e28944bb801a8c10a0fa9d29fdb4cfd3

          SHA512

          b7e7205e48eade918d63b483fb500867cc8196496fe9136f0177481d654a67af8319b6823fb04787e4bd6ee46c031c2b6fea57f0bf12b8a58cf8e0003834bd7b

        • C:\Users\Admin\AppData\Local\osu!\bass.dll

          Filesize

          125KB

          MD5

          7623474a8b9bec1e3ffca813cdf93bc3

          SHA1

          4a1c0ecf8cbed18d0472136a7096ee8c3c2fa774

          SHA256

          67766e574baa86eb8317623acc2957e8e28944bb801a8c10a0fa9d29fdb4cfd3

          SHA512

          b7e7205e48eade918d63b483fb500867cc8196496fe9136f0177481d654a67af8319b6823fb04787e4bd6ee46c031c2b6fea57f0bf12b8a58cf8e0003834bd7b

        • C:\Users\Admin\AppData\Local\osu!\bass_fx.dll

          Filesize

          50KB

          MD5

          3ad3c0fd4dca001a2f9e707b74544919

          SHA1

          c6176415ecd3e8f38f976e4234325452fe1fd2a0

          SHA256

          81111a1cb6f8f362cf232e21098c563fe1409160300f2a254f2a1762e5d4db04

          SHA512

          436dac92e4a60dfc02c8c7a7ae496df7199c3fd15ef668bff2565f428f25be9c3ae1d0e120d64767eda1a9d4afa2e8bfeb6d047745440c3fce854080c44f42c5

        • C:\Users\Admin\AppData\Local\osu!\bass_fx.dll

          Filesize

          50KB

          MD5

          3ad3c0fd4dca001a2f9e707b74544919

          SHA1

          c6176415ecd3e8f38f976e4234325452fe1fd2a0

          SHA256

          81111a1cb6f8f362cf232e21098c563fe1409160300f2a254f2a1762e5d4db04

          SHA512

          436dac92e4a60dfc02c8c7a7ae496df7199c3fd15ef668bff2565f428f25be9c3ae1d0e120d64767eda1a9d4afa2e8bfeb6d047745440c3fce854080c44f42c5

        • C:\Users\Admin\AppData\Local\osu!\bass_fx.dll

          Filesize

          50KB

          MD5

          3ad3c0fd4dca001a2f9e707b74544919

          SHA1

          c6176415ecd3e8f38f976e4234325452fe1fd2a0

          SHA256

          81111a1cb6f8f362cf232e21098c563fe1409160300f2a254f2a1762e5d4db04

          SHA512

          436dac92e4a60dfc02c8c7a7ae496df7199c3fd15ef668bff2565f428f25be9c3ae1d0e120d64767eda1a9d4afa2e8bfeb6d047745440c3fce854080c44f42c5

        • C:\Users\Admin\AppData\Local\osu!\bass_fx.dll

          Filesize

          50KB

          MD5

          3ad3c0fd4dca001a2f9e707b74544919

          SHA1

          c6176415ecd3e8f38f976e4234325452fe1fd2a0

          SHA256

          81111a1cb6f8f362cf232e21098c563fe1409160300f2a254f2a1762e5d4db04

          SHA512

          436dac92e4a60dfc02c8c7a7ae496df7199c3fd15ef668bff2565f428f25be9c3ae1d0e120d64767eda1a9d4afa2e8bfeb6d047745440c3fce854080c44f42c5

        • C:\Users\Admin\AppData\Local\osu!\d3dcompiler_47.dll

          Filesize

          3.3MB

          MD5

          c5b362bce86bb0ad3149c4540201331d

          SHA1

          91bc4989345a4e26f06c0c781a21a27d4ee9bacd

          SHA256

          efbdbbcd0d954f8fdc53467de5d89ad525e4e4a9cfff8a15d07c6fdb350c407f

          SHA512

          82fa22f6509334a6a481b0731de1898aa70d2cf3a35f81c4a91fffe0f4c4dd727c8d6a238c778adc7678dfcf1bc81011a9eff2dee912e6b14f93ca3600d62ddd

        • C:\Users\Admin\AppData\Local\osu!\d3dcompiler_47.dll

          Filesize

          3.3MB

          MD5

          c5b362bce86bb0ad3149c4540201331d

          SHA1

          91bc4989345a4e26f06c0c781a21a27d4ee9bacd

          SHA256

          efbdbbcd0d954f8fdc53467de5d89ad525e4e4a9cfff8a15d07c6fdb350c407f

          SHA512

          82fa22f6509334a6a481b0731de1898aa70d2cf3a35f81c4a91fffe0f4c4dd727c8d6a238c778adc7678dfcf1bc81011a9eff2dee912e6b14f93ca3600d62ddd

        • C:\Users\Admin\AppData\Local\osu!\libEGL.dll

          Filesize

          146KB

          MD5

          9f7f22cef980ec272a9b73bf317500e4

          SHA1

          ae11d7cdfa84a242e31efd6f03b0ef764d5f900c

          SHA256

          041a631d114e45a11c43efe3b7712a10ce8052cf4b313c7f4577a5b9adb78072

          SHA512

          19e432313c1e28fc076fb9e9c3884c3c97cc2d05b6d1aecf429180a6f5cc407734fe758bcc63936d5fe7ef8ac01abdf5ec4b17bb08b26c5cc87c560f4b89c5bc

        • C:\Users\Admin\AppData\Local\osu!\libEGL.dll

          Filesize

          146KB

          MD5

          9f7f22cef980ec272a9b73bf317500e4

          SHA1

          ae11d7cdfa84a242e31efd6f03b0ef764d5f900c

          SHA256

          041a631d114e45a11c43efe3b7712a10ce8052cf4b313c7f4577a5b9adb78072

          SHA512

          19e432313c1e28fc076fb9e9c3884c3c97cc2d05b6d1aecf429180a6f5cc407734fe758bcc63936d5fe7ef8ac01abdf5ec4b17bb08b26c5cc87c560f4b89c5bc

        • C:\Users\Admin\AppData\Local\osu!\libEGL.dll

          Filesize

          146KB

          MD5

          9f7f22cef980ec272a9b73bf317500e4

          SHA1

          ae11d7cdfa84a242e31efd6f03b0ef764d5f900c

          SHA256

          041a631d114e45a11c43efe3b7712a10ce8052cf4b313c7f4577a5b9adb78072

          SHA512

          19e432313c1e28fc076fb9e9c3884c3c97cc2d05b6d1aecf429180a6f5cc407734fe758bcc63936d5fe7ef8ac01abdf5ec4b17bb08b26c5cc87c560f4b89c5bc

        • C:\Users\Admin\AppData\Local\osu!\libEGL.dll

          Filesize

          146KB

          MD5

          9f7f22cef980ec272a9b73bf317500e4

          SHA1

          ae11d7cdfa84a242e31efd6f03b0ef764d5f900c

          SHA256

          041a631d114e45a11c43efe3b7712a10ce8052cf4b313c7f4577a5b9adb78072

          SHA512

          19e432313c1e28fc076fb9e9c3884c3c97cc2d05b6d1aecf429180a6f5cc407734fe758bcc63936d5fe7ef8ac01abdf5ec4b17bb08b26c5cc87c560f4b89c5bc

        • C:\Users\Admin\AppData\Local\osu!\libGLESv2.dll

          Filesize

          3.2MB

          MD5

          a4dfddff62d1e917ebb0688cf8d96be7

          SHA1

          9376bfa069a72da76733cc72cf90386920815142

          SHA256

          cbfc536b80405da7b5c37c97fceaf2310daf58d78c806140367b8f513352342f

          SHA512

          97de24a94f7aaaf3035853c0eb93f44c5c2cdfad99b563fef225d9f2b6f4fa3fe8f89850895d286322191cf8b372aa87da6620796cd32fe368f75b6722b556c3

        • C:\Users\Admin\AppData\Local\osu!\libGLESv2.dll

          Filesize

          3.2MB

          MD5

          a4dfddff62d1e917ebb0688cf8d96be7

          SHA1

          9376bfa069a72da76733cc72cf90386920815142

          SHA256

          cbfc536b80405da7b5c37c97fceaf2310daf58d78c806140367b8f513352342f

          SHA512

          97de24a94f7aaaf3035853c0eb93f44c5c2cdfad99b563fef225d9f2b6f4fa3fe8f89850895d286322191cf8b372aa87da6620796cd32fe368f75b6722b556c3

        • C:\Users\Admin\AppData\Local\osu!\libGLESv2.dll

          Filesize

          3.2MB

          MD5

          a4dfddff62d1e917ebb0688cf8d96be7

          SHA1

          9376bfa069a72da76733cc72cf90386920815142

          SHA256

          cbfc536b80405da7b5c37c97fceaf2310daf58d78c806140367b8f513352342f

          SHA512

          97de24a94f7aaaf3035853c0eb93f44c5c2cdfad99b563fef225d9f2b6f4fa3fe8f89850895d286322191cf8b372aa87da6620796cd32fe368f75b6722b556c3

        • C:\Users\Admin\AppData\Local\osu!\libGLESv2.dll

          Filesize

          3.2MB

          MD5

          a4dfddff62d1e917ebb0688cf8d96be7

          SHA1

          9376bfa069a72da76733cc72cf90386920815142

          SHA256

          cbfc536b80405da7b5c37c97fceaf2310daf58d78c806140367b8f513352342f

          SHA512

          97de24a94f7aaaf3035853c0eb93f44c5c2cdfad99b563fef225d9f2b6f4fa3fe8f89850895d286322191cf8b372aa87da6620796cd32fe368f75b6722b556c3

        • C:\Users\Admin\AppData\Local\osu!\osu!.Admin.cfg

          Filesize

          4KB

          MD5

          6de6ecd5a058d57bb77974b89aadf8da

          SHA1

          a2d9fe6ec97652739a4976e29d1d72b03cef9634

          SHA256

          643cb0536f169a082f21ccb199d125cdc32bc92b3a225eb3fda3f65fce1c7ef0

          SHA512

          01cc63242227b07452bbf71e2af77c912c472ef1cf5ab188d79f2bb9f85b6e91894175bddf5b1af7e700af5d23e5df4ce839a955194f2463596dcc1edc8f8e61

        • C:\Users\Admin\AppData\Local\osu!\osu!.cfg

          Filesize

          878B

          MD5

          45c2857fad245dbb739284678d754377

          SHA1

          d1dddd9b02fff6a2af3f9f437517cfd603228a14

          SHA256

          d6dcc8b899948a99dae322cc6af6eb6d0e17ba66c2b03c75a8ff58f937df2226

          SHA512

          4042e26c77d830d9ffa35337fc88855d8bd343b258abda769106db77463087aaa0c8f42f82133b6443e2987a29eb0374190800ef2a730507cd1fbe6e078394d3

        • C:\Users\Admin\AppData\Local\osu!\osu!.cfg

          Filesize

          856B

          MD5

          3dc331887fe167cede3b4148e8e69fe4

          SHA1

          7d3b8a6b89527fe04d92c146ce63da95430b7795

          SHA256

          3135552d1a8ecbcd9cf5c35ad62890231311bf3f05e3e2d22fb462e7ff4726d6

          SHA512

          62f73e82abd38a825468c88e752f917e5a8c91a5cf9452a2878263c2353119824fac85f25388d3737789ab64b32ced9074426a363f90b1523b8bf10f33a24cd8

        • C:\Users\Admin\AppData\Local\osu!\osu!.cfg

          Filesize

          856B

          MD5

          3dc331887fe167cede3b4148e8e69fe4

          SHA1

          7d3b8a6b89527fe04d92c146ce63da95430b7795

          SHA256

          3135552d1a8ecbcd9cf5c35ad62890231311bf3f05e3e2d22fb462e7ff4726d6

          SHA512

          62f73e82abd38a825468c88e752f917e5a8c91a5cf9452a2878263c2353119824fac85f25388d3737789ab64b32ced9074426a363f90b1523b8bf10f33a24cd8

        • C:\Users\Admin\AppData\Local\osu!\osu!.exe

          Filesize

          4.3MB

          MD5

          321cf9cb89893c3f78f49c0e19718d08

          SHA1

          59228593ccbe311dba685af04eb961c87acff981

          SHA256

          f0b2a03e625517cab9f760e2b6b8ff56ad5aacd1249becb2872bc22fa8817426

          SHA512

          a25562da867ccb48df6ba42b91a93f8190d77dfb1ec18637afface0cd3dfd6427a2df7a2b7c64157079a619d173d8726b0ae3b8e65d08eb08bdf0d85a438ef44

        • C:\Users\Admin\AppData\Local\osu!\osu!.exe

          Filesize

          4.3MB

          MD5

          321cf9cb89893c3f78f49c0e19718d08

          SHA1

          59228593ccbe311dba685af04eb961c87acff981

          SHA256

          f0b2a03e625517cab9f760e2b6b8ff56ad5aacd1249becb2872bc22fa8817426

          SHA512

          a25562da867ccb48df6ba42b91a93f8190d77dfb1ec18637afface0cd3dfd6427a2df7a2b7c64157079a619d173d8726b0ae3b8e65d08eb08bdf0d85a438ef44

        • C:\Users\Admin\AppData\Local\osu!\osu!.exe

          Filesize

          4.3MB

          MD5

          321cf9cb89893c3f78f49c0e19718d08

          SHA1

          59228593ccbe311dba685af04eb961c87acff981

          SHA256

          f0b2a03e625517cab9f760e2b6b8ff56ad5aacd1249becb2872bc22fa8817426

          SHA512

          a25562da867ccb48df6ba42b91a93f8190d77dfb1ec18637afface0cd3dfd6427a2df7a2b7c64157079a619d173d8726b0ae3b8e65d08eb08bdf0d85a438ef44

        • C:\Users\Admin\AppData\Local\osu!\osu!.exe

          Filesize

          4.3MB

          MD5

          321cf9cb89893c3f78f49c0e19718d08

          SHA1

          59228593ccbe311dba685af04eb961c87acff981

          SHA256

          f0b2a03e625517cab9f760e2b6b8ff56ad5aacd1249becb2872bc22fa8817426

          SHA512

          a25562da867ccb48df6ba42b91a93f8190d77dfb1ec18637afface0cd3dfd6427a2df7a2b7c64157079a619d173d8726b0ae3b8e65d08eb08bdf0d85a438ef44

        • C:\Users\Admin\AppData\Local\osu!\osu!.exe

          Filesize

          4.3MB

          MD5

          321cf9cb89893c3f78f49c0e19718d08

          SHA1

          59228593ccbe311dba685af04eb961c87acff981

          SHA256

          f0b2a03e625517cab9f760e2b6b8ff56ad5aacd1249becb2872bc22fa8817426

          SHA512

          a25562da867ccb48df6ba42b91a93f8190d77dfb1ec18637afface0cd3dfd6427a2df7a2b7c64157079a619d173d8726b0ae3b8e65d08eb08bdf0d85a438ef44

        • C:\Users\Admin\AppData\Local\osu!\osu!.exe

          Filesize

          4.3MB

          MD5

          321cf9cb89893c3f78f49c0e19718d08

          SHA1

          59228593ccbe311dba685af04eb961c87acff981

          SHA256

          f0b2a03e625517cab9f760e2b6b8ff56ad5aacd1249becb2872bc22fa8817426

          SHA512

          a25562da867ccb48df6ba42b91a93f8190d77dfb1ec18637afface0cd3dfd6427a2df7a2b7c64157079a619d173d8726b0ae3b8e65d08eb08bdf0d85a438ef44

        • C:\Users\Admin\AppData\Local\osu!\osu!auth.dll

          Filesize

          5.5MB

          MD5

          284c1dc8a524e46fbe7a7cf846d3d9b1

          SHA1

          cc58fdaf66e03e83976c0837132aa9100b71ae88

          SHA256

          bc91c462026efafaea524ff909e8b676caf63def1770de7fae48e9c64dc1e91f

          SHA512

          d1084b3d93e08b25599339cdb2bc869c870edcedeecae8d3b28e316343980cb1b1d88aeeea61ed3267368d74b329c0b8861a02603845e75593ac4f074cb27a66

        • C:\Users\Admin\AppData\Local\osu!\osu!auth.dll

          Filesize

          5.5MB

          MD5

          284c1dc8a524e46fbe7a7cf846d3d9b1

          SHA1

          cc58fdaf66e03e83976c0837132aa9100b71ae88

          SHA256

          bc91c462026efafaea524ff909e8b676caf63def1770de7fae48e9c64dc1e91f

          SHA512

          d1084b3d93e08b25599339cdb2bc869c870edcedeecae8d3b28e316343980cb1b1d88aeeea61ed3267368d74b329c0b8861a02603845e75593ac4f074cb27a66

        • C:\Users\Admin\AppData\Local\osu!\osu!auth.dll

          Filesize

          5.5MB

          MD5

          284c1dc8a524e46fbe7a7cf846d3d9b1

          SHA1

          cc58fdaf66e03e83976c0837132aa9100b71ae88

          SHA256

          bc91c462026efafaea524ff909e8b676caf63def1770de7fae48e9c64dc1e91f

          SHA512

          d1084b3d93e08b25599339cdb2bc869c870edcedeecae8d3b28e316343980cb1b1d88aeeea61ed3267368d74b329c0b8861a02603845e75593ac4f074cb27a66

        • C:\Users\Admin\AppData\Local\osu!\osu!gameplay.dll

          Filesize

          30.4MB

          MD5

          4cb98d63f1b2b9dc38e10e9901ec52d8

          SHA1

          42c0e8b8e5c7a4113e38a977221f845ef8406722

          SHA256

          ba3467a8db908d81a0729f78fdc5c8f1d1595d3da4e5a9a34be9a16e06da9f87

          SHA512

          d351b9ff851490187b003c675047b6a20a2519df3818bcd18a674d6edab1d211c9661acc98403b562ff3268576ea203b4e0f10e962467b9849b72431c92735a4

        • C:\Users\Admin\AppData\Local\osu!\osu!gameplay.dll

          Filesize

          30.4MB

          MD5

          4cb98d63f1b2b9dc38e10e9901ec52d8

          SHA1

          42c0e8b8e5c7a4113e38a977221f845ef8406722

          SHA256

          ba3467a8db908d81a0729f78fdc5c8f1d1595d3da4e5a9a34be9a16e06da9f87

          SHA512

          d351b9ff851490187b003c675047b6a20a2519df3818bcd18a674d6edab1d211c9661acc98403b562ff3268576ea203b4e0f10e962467b9849b72431c92735a4

        • C:\Users\Admin\AppData\Local\osu!\osu!seasonal.dll

          Filesize

          3.7MB

          MD5

          524344f96189d2cc72123312351c6a79

          SHA1

          0629eb1003562fe3b59631d74d6c8c77ffa4b25f

          SHA256

          b128940413b25180e0ac22a75bc09b2912a24b93fd4880f10b18d4020b8fc112

          SHA512

          d13bb6ed8247093cd6d7b55cd19fa17ee75bde20a0a2011de04c649da064ccf947ccd0487320ca87f1437717da1711e2a3f33a7158759e620244d7818df3a188

        • C:\Users\Admin\AppData\Local\osu!\osu!seasonal.dll

          Filesize

          3.7MB

          MD5

          524344f96189d2cc72123312351c6a79

          SHA1

          0629eb1003562fe3b59631d74d6c8c77ffa4b25f

          SHA256

          b128940413b25180e0ac22a75bc09b2912a24b93fd4880f10b18d4020b8fc112

          SHA512

          d13bb6ed8247093cd6d7b55cd19fa17ee75bde20a0a2011de04c649da064ccf947ccd0487320ca87f1437717da1711e2a3f33a7158759e620244d7818df3a188

        • C:\Users\Admin\AppData\Local\osu!\osu!ui.dll

          Filesize

          24.6MB

          MD5

          450935f9812f0336e7968ec110548de6

          SHA1

          52a238343d521106c29b11b71b6546fdbc21ab90

          SHA256

          7c5b5834977a3d6cf853c3db28492399721004e36e8ecc09c0f475d759e4c557

          SHA512

          0f21b22fdba847b8b696fd40f34c26c89fa22e52d0abd342b67530609441fb7ec3ea12ad8badfca410c1f924ee9cfe401bc69ca645bf78371c48803f1d830b72

        • C:\Users\Admin\AppData\Local\osu!\osu!ui.dll

          Filesize

          24.6MB

          MD5

          450935f9812f0336e7968ec110548de6

          SHA1

          52a238343d521106c29b11b71b6546fdbc21ab90

          SHA256

          7c5b5834977a3d6cf853c3db28492399721004e36e8ecc09c0f475d759e4c557

          SHA512

          0f21b22fdba847b8b696fd40f34c26c89fa22e52d0abd342b67530609441fb7ec3ea12ad8badfca410c1f924ee9cfe401bc69ca645bf78371c48803f1d830b72

        • C:\Users\Admin\AppData\Local\osu!\pthreadGC2.dll

          Filesize

          75KB

          MD5

          00678eb6be3b52d562b66218c93e21a8

          SHA1

          ba583d1520da22f3d3b89196c981279ecda58648

          SHA256

          b18c8437663002e4a4f06c4c1b7bec71fe13e5e6bbb927c68a273de02a5c690f

          SHA512

          58d9ffa0f569ba7b1aaea62b49f5bfa18bf23c54d2487eb9e4da984469236c2d4baabeeeac7e4b71d66b8c30f7fff4890fee5ee25e00369fc4afce053cbeb048

        • C:\Users\Admin\AppData\Local\osu!\pthreadGC2.dll

          Filesize

          75KB

          MD5

          00678eb6be3b52d562b66218c93e21a8

          SHA1

          ba583d1520da22f3d3b89196c981279ecda58648

          SHA256

          b18c8437663002e4a4f06c4c1b7bec71fe13e5e6bbb927c68a273de02a5c690f

          SHA512

          58d9ffa0f569ba7b1aaea62b49f5bfa18bf23c54d2487eb9e4da984469236c2d4baabeeeac7e4b71d66b8c30f7fff4890fee5ee25e00369fc4afce053cbeb048

        • C:\Users\Admin\Videos\Captures\desktop.ini

          Filesize

          190B

          MD5

          b0d27eaec71f1cd73b015f5ceeb15f9d

          SHA1

          62264f8b5c2f5034a1e4143df6e8c787165fbc2f

          SHA256

          86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2

          SHA512

          7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c

        • C:\Users\Admin\Videos\Captures\desktop.ini

          Filesize

          190B

          MD5

          b0d27eaec71f1cd73b015f5ceeb15f9d

          SHA1

          62264f8b5c2f5034a1e4143df6e8c787165fbc2f

          SHA256

          86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2

          SHA512

          7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c

        • memory/2092-593-0x000000000BCF0000-0x000000000BDF0000-memory.dmp

          Filesize

          1024KB

        • memory/2092-611-0x0000000005260000-0x0000000005270000-memory.dmp

          Filesize

          64KB

        • memory/2092-670-0x00000000709A0000-0x0000000070F27000-memory.dmp

          Filesize

          5.5MB

        • memory/2092-668-0x0000000005260000-0x0000000005270000-memory.dmp

          Filesize

          64KB

        • memory/2092-667-0x00000000072A0000-0x00000000072BC000-memory.dmp

          Filesize

          112KB

        • memory/2092-666-0x0000000005260000-0x0000000005270000-memory.dmp

          Filesize

          64KB

        • memory/2092-665-0x0000000005260000-0x0000000005270000-memory.dmp

          Filesize

          64KB

        • memory/2092-664-0x0000000005260000-0x0000000005270000-memory.dmp

          Filesize

          64KB

        • memory/2092-663-0x0000000005260000-0x0000000005270000-memory.dmp

          Filesize

          64KB

        • memory/2092-662-0x0000000005260000-0x0000000005270000-memory.dmp

          Filesize

          64KB

        • memory/2092-591-0x0000000005260000-0x0000000005270000-memory.dmp

          Filesize

          64KB

        • memory/2092-592-0x00000000709A0000-0x0000000070F27000-memory.dmp

          Filesize

          5.5MB

        • memory/2092-595-0x000000006D050000-0x000000006D060000-memory.dmp

          Filesize

          64KB

        • memory/2092-587-0x000000006FA50000-0x000000006FA60000-memory.dmp

          Filesize

          64KB

        • memory/2092-607-0x000000006D050000-0x000000006D060000-memory.dmp

          Filesize

          64KB

        • memory/2092-609-0x0000000005260000-0x0000000005270000-memory.dmp

          Filesize

          64KB

        • memory/2092-608-0x0000000005260000-0x0000000005270000-memory.dmp

          Filesize

          64KB

        • memory/2092-620-0x000000006D050000-0x000000006D060000-memory.dmp

          Filesize

          64KB

        • memory/2092-646-0x00000000072A0000-0x00000000072BC000-memory.dmp

          Filesize

          112KB

        • memory/2092-645-0x0000000010000000-0x0000000010013000-memory.dmp

          Filesize

          76KB

        • memory/2092-644-0x000000006D050000-0x000000006D060000-memory.dmp

          Filesize

          64KB

        • memory/2092-643-0x000000006D050000-0x000000006D060000-memory.dmp

          Filesize

          64KB

        • memory/2092-642-0x000000006D050000-0x000000006D060000-memory.dmp

          Filesize

          64KB

        • memory/2092-641-0x000000006D050000-0x000000006D060000-memory.dmp

          Filesize

          64KB

        • memory/2092-640-0x000000006D050000-0x000000006D060000-memory.dmp

          Filesize

          64KB

        • memory/2092-614-0x000000006D050000-0x000000006D060000-memory.dmp

          Filesize

          64KB

        • memory/2092-613-0x0000000005260000-0x0000000005270000-memory.dmp

          Filesize

          64KB

        • memory/2092-634-0x000000006D050000-0x000000006D060000-memory.dmp

          Filesize

          64KB

        • memory/2092-617-0x000000006D050000-0x000000006D060000-memory.dmp

          Filesize

          64KB

        • memory/2092-623-0x000000006D050000-0x000000006D060000-memory.dmp

          Filesize

          64KB

        • memory/2092-630-0x0000000074F60000-0x0000000075710000-memory.dmp

          Filesize

          7.7MB

        • memory/2092-626-0x000000006D050000-0x000000006D060000-memory.dmp

          Filesize

          64KB

        • memory/2092-629-0x000000006D050000-0x000000006D060000-memory.dmp

          Filesize

          64KB

        • memory/2956-542-0x0000024AE0AE0000-0x0000024AE1209000-memory.dmp

          Filesize

          7.2MB

        • memory/4136-551-0x0000000004D10000-0x0000000004D20000-memory.dmp

          Filesize

          64KB

        • memory/4136-550-0x0000000004D10000-0x0000000004D20000-memory.dmp

          Filesize

          64KB

        • memory/4336-134-0x0000000005810000-0x0000000005DB4000-memory.dmp

          Filesize

          5.6MB

        • memory/4336-149-0x0000000005250000-0x0000000005260000-memory.dmp

          Filesize

          64KB

        • memory/4336-147-0x0000000006A30000-0x0000000006A3A000-memory.dmp

          Filesize

          40KB

        • memory/4336-135-0x0000000005260000-0x00000000052F2000-memory.dmp

          Filesize

          584KB

        • memory/4336-133-0x0000000000500000-0x0000000000946000-memory.dmp

          Filesize

          4.3MB

        • memory/4336-153-0x0000000005250000-0x0000000005260000-memory.dmp

          Filesize

          64KB

        • memory/4336-150-0x0000000005250000-0x0000000005260000-memory.dmp

          Filesize

          64KB

        • memory/4336-148-0x0000000005250000-0x0000000005260000-memory.dmp

          Filesize

          64KB

        • memory/4532-656-0x000001DD5B750000-0x000001DD5B751000-memory.dmp

          Filesize

          4KB

        • memory/4532-655-0x000001DD5B750000-0x000001DD5B751000-memory.dmp

          Filesize

          4KB

        • memory/4532-651-0x000001DD5B750000-0x000001DD5B751000-memory.dmp

          Filesize

          4KB

        • memory/4532-650-0x000001DD5B750000-0x000001DD5B751000-memory.dmp

          Filesize

          4KB

        • memory/4532-649-0x000001DD5B750000-0x000001DD5B751000-memory.dmp

          Filesize

          4KB

        • memory/4532-657-0x000001DD5B750000-0x000001DD5B751000-memory.dmp

          Filesize

          4KB

        • memory/4532-658-0x000001DD5B750000-0x000001DD5B751000-memory.dmp

          Filesize

          4KB

        • memory/4532-659-0x000001DD5B750000-0x000001DD5B751000-memory.dmp

          Filesize

          4KB

        • memory/4556-180-0x0000000005080000-0x0000000005090000-memory.dmp

          Filesize

          64KB

        • memory/4556-335-0x0000000005080000-0x0000000005090000-memory.dmp

          Filesize

          64KB

        • memory/4556-169-0x0000000005080000-0x0000000005090000-memory.dmp

          Filesize

          64KB

        • memory/4556-179-0x0000000009AE0000-0x000000000A00C000-memory.dmp

          Filesize

          5.2MB

        • memory/4556-181-0x0000000009A00000-0x0000000009A22000-memory.dmp

          Filesize

          136KB

        • memory/4556-321-0x0000000005080000-0x0000000005090000-memory.dmp

          Filesize

          64KB

        • memory/4800-535-0x0000000004E40000-0x0000000004E50000-memory.dmp

          Filesize

          64KB

        • memory/4800-530-0x000000006D050000-0x000000006D060000-memory.dmp

          Filesize

          64KB

        • memory/4800-459-0x000000006FA50000-0x000000006FA60000-memory.dmp

          Filesize

          64KB

        • memory/4800-457-0x0000000004E40000-0x0000000004E50000-memory.dmp

          Filesize

          64KB

        • memory/4800-468-0x0000000070CC0000-0x0000000071247000-memory.dmp

          Filesize

          5.5MB

        • memory/4800-477-0x00000000076B0000-0x00000000076B1000-memory.dmp

          Filesize

          4KB

        • memory/4800-481-0x000000000B5D0000-0x000000000B6D0000-memory.dmp

          Filesize

          1024KB

        • memory/4800-480-0x000000000B1A0000-0x000000000B5CC000-memory.dmp

          Filesize

          4.2MB

        • memory/4800-484-0x000000000AC90000-0x000000000AD6B000-memory.dmp

          Filesize

          876KB

        • memory/4800-547-0x0000000070CC0000-0x0000000071247000-memory.dmp

          Filesize

          5.5MB

        • memory/4800-483-0x000000006D050000-0x000000006D060000-memory.dmp

          Filesize

          64KB

        • memory/4800-544-0x000000000AC90000-0x000000000AD6B000-memory.dmp

          Filesize

          876KB

        • memory/4800-541-0x0000000006E10000-0x0000000006E2C000-memory.dmp

          Filesize

          112KB

        • memory/4800-540-0x0000000010000000-0x0000000010013000-memory.dmp

          Filesize

          76KB

        • memory/4800-538-0x0000000004E40000-0x0000000004E50000-memory.dmp

          Filesize

          64KB

        • memory/4800-537-0x0000000004E40000-0x0000000004E50000-memory.dmp

          Filesize

          64KB

        • memory/4800-536-0x0000000004E40000-0x0000000004E50000-memory.dmp

          Filesize

          64KB

        • memory/4800-494-0x0000000004E40000-0x0000000004E50000-memory.dmp

          Filesize

          64KB

        • memory/4800-534-0x0000000004E40000-0x0000000004E50000-memory.dmp

          Filesize

          64KB

        • memory/4800-532-0x000000006D050000-0x000000006D060000-memory.dmp

          Filesize

          64KB

        • memory/4800-531-0x000000006D050000-0x000000006D060000-memory.dmp

          Filesize

          64KB

        • memory/4800-454-0x00000000065D0000-0x0000000006626000-memory.dmp

          Filesize

          344KB

        • memory/4800-529-0x000000006D050000-0x000000006D060000-memory.dmp

          Filesize

          64KB

        • memory/4800-528-0x000000006D050000-0x000000006D060000-memory.dmp

          Filesize

          64KB

        • memory/4800-527-0x0000000004E40000-0x0000000004E50000-memory.dmp

          Filesize

          64KB

        • memory/4800-525-0x0000000010000000-0x0000000010013000-memory.dmp

          Filesize

          76KB

        • memory/4800-526-0x0000000006E10000-0x0000000006E2C000-memory.dmp

          Filesize

          112KB

        • memory/4800-490-0x0000000007DA0000-0x0000000007E14000-memory.dmp

          Filesize

          464KB

        • memory/4800-522-0x000000006EC00000-0x000000006EC57000-memory.dmp

          Filesize

          348KB

        • memory/4800-491-0x0000000004E40000-0x0000000004E50000-memory.dmp

          Filesize

          64KB

        • memory/4800-519-0x000000006D050000-0x000000006D060000-memory.dmp

          Filesize

          64KB

        • memory/4800-493-0x000000006D050000-0x000000006D060000-memory.dmp

          Filesize

          64KB

        • memory/4800-492-0x0000000004E40000-0x0000000004E50000-memory.dmp

          Filesize

          64KB

        • memory/4800-514-0x0000000074F60000-0x0000000075710000-memory.dmp

          Filesize

          7.7MB

        • memory/4800-513-0x000000006D050000-0x000000006D060000-memory.dmp

          Filesize

          64KB

        • memory/4800-510-0x000000006D050000-0x000000006D060000-memory.dmp

          Filesize

          64KB

        • memory/4800-507-0x000000006D050000-0x000000006D060000-memory.dmp

          Filesize

          64KB

        • memory/4800-504-0x000000006D050000-0x000000006D060000-memory.dmp

          Filesize

          64KB

        • memory/4800-501-0x000000006D050000-0x000000006D060000-memory.dmp

          Filesize

          64KB

        • memory/4800-498-0x000000006D050000-0x000000006D060000-memory.dmp

          Filesize

          64KB

        • memory/4800-495-0x0000000004E40000-0x0000000004E50000-memory.dmp

          Filesize

          64KB