Analysis
- user interaction
yes - max time kernel
10s - max time network
20s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
05/06/2026, 00:35
Static task
static1
Behavioral task
behavioral1
Sample
install.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
14 signatures
900 seconds
Behavioral task
behavioral2
Sample
install.exe
Resource
win11-20260513-en
windows11-21h2-x64
12 signatures
900 seconds
General
- Target install.exe
- Size 172.9MB
- Sample260605-axdk8aax8p
- SHA256 843f2f6b017d6e78fd45ba5107bf4f880683972a343e63845a5210008f260586
- MD5 2fb12ecdd07b449331fa4785a2e0f07a
- SHA1 b69bbdbecb9fb6d69ad54948de2ff63e4a847c95
- SHA512 74ab199da0c6f33ce5bfbfcfcbc1c92d2d360fd55b05421c7a5e8bcb7c7887472a51a9abbd9689a3d385265f0caaeebf7230c4e632c6f407d29a8f4fb75f83cb
- SSDEEP 3145728:pD5hFkgQH3FUTmbHhMuVUOLMOKiJr3/mly+/VT4sNx1wSH9T7HQ8YJO+2Olw:pD5hFj0UTmbeOUOL5BP+Vf3iSH9TU8sk
- TLSH T1F5883380FEC741F1E49F0971207AA37F873B04214218D71BEBE41DA5BEB7B6159B921A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
-
pid Process 1892 GameBarPresenceWriter.exe - Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 752 osu!.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Executes dropped EXE 2 IoCs
pid Process 4456 osu!.exe 752 osu!.exe - Loads dropped DLL 64 IoCs
pid Process 4456 osu!.exe 4456 osu!.exe 4456 osu!.exe 4456 osu!.exe 4456 osu!.exe 4456 osu!.exe 4456 osu!.exe 4456 osu!.exe 4456 osu!.exe 4456 osu!.exe 4456 osu!.exe 4456 osu!.exe 4456 osu!.exe 4456 osu!.exe 4456 osu!.exe 4456 osu!.exe 4456 osu!.exe 4456 osu!.exe 4456 osu!.exe 4456 osu!.exe 752 osu!.exe 752 osu!.exe 752 osu!.exe 752 osu!.exe 752 osu!.exe 752 osu!.exe 752 osu!.exe 752 osu!.exe 752 osu!.exe 752 osu!.exe 752 osu!.exe 752 osu!.exe 752 osu!.exe 752 osu!.exe 752 osu!.exe 752 osu!.exe 752 osu!.exe 752 osu!.exe 752 osu!.exe 752 osu!.exe 752 osu!.exe 752 osu!.exe 752 osu!.exe 752 osu!.exe 752 osu!.exe 752 osu!.exe 752 osu!.exe 752 osu!.exe 752 osu!.exe 752 osu!.exe 752 osu!.exe 752 osu!.exe 752 osu!.exe 752 osu!.exe 752 osu!.exe 752 osu!.exe 752 osu!.exe 752 osu!.exe 752 osu!.exe 752 osu!.exe 752 osu!.exe 752 osu!.exe 752 osu!.exe 752 osu!.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language install.exe - Modifies registry class 64 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\.olz osu!.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.File.osz\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\osulazer\\current\\beatmap.ico" osu!.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.File.osk\Shell\Open\Command\ = "\"C:\\Users\\Admin\\AppData\\Local\\osulazer\\current\\osu!.exe\" \"%1\"" osu!.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\.osk\OpenWithProgIds\osu.File.osk osu!.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu osu!.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.Uri.osump osu!.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.File.osr\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\osulazer\\current\\beatmap.ico" osu!.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.Uri.osu\Shell\Open osu!.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osump\ = "URL:osu! Multiplayer" osu!.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osump\URL Protocol osu!.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.File.osr\Shell\Open\Command osu!.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\.osr osu!.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.File.osk\Shell\Open\Command osu!.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\.osk\OpenWithProgIds osu!.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.Uri.osu\Shell\Open\Command osu!.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.Uri.osump\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\osulazer\\current\\lazer.ico" osu!.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.Uri.osump\Shell osu!.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.File.osr\ = "osu! Replay" osu!.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.File.osr\Shell\Open\Command\ = "\"C:\\Users\\Admin\\AppData\\Local\\osulazer\\current\\osu!.exe\" \"%1\"" osu!.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.File.osk\ = "osu! Skin" osu!.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.Uri.osu\DefaultIcon osu!.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.Uri.osump\Shell\Open\Command osu!.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\.olz\OpenWithProgIds osu!.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.File.osk osu!.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.File.osk\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\osulazer\\current\\beatmap.ico" osu!.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.Uri.osu\Shell\Open\Command\ = "\"C:\\Users\\Admin\\AppData\\Local\\osulazer\\current\\osu!.exe\" \"%1\"" osu!.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.Uri.osump\Shell\Open\Command\ = "\"C:\\Users\\Admin\\AppData\\Local\\osulazer\\current\\osu!.exe\" \"%1\"" osu!.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.File.olz\DefaultIcon osu!.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.File.osz\ = "osu! Beatmap" osu!.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\.osz osu!.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\.olz\OpenWithProgIds\osu.File.olz osu!.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.Uri.osump\DefaultIcon osu!.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.File.osz osu!.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.File.olz\Shell\Open\Command\ = "\"C:\\Users\\Admin\\AppData\\Local\\osulazer\\current\\osu!.exe\" \"%1\"" osu!.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.File.osr\DefaultIcon osu!.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu\URL Protocol osu!.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.File.osz\Shell\Open\Command osu!.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.File.osz\Shell\Open\Command\ = "\"C:\\Users\\Admin\\AppData\\Local\\osulazer\\current\\osu!.exe\" \"%1\"" osu!.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.File.olz\ = "osu! Beatmap" osu!.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.File.olz\Shell\Open osu!.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.File.osk\Shell osu!.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.Uri.osump\Shell\Open osu!.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.File.osr\Shell osu!.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.File.olz\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\osulazer\\current\\beatmap.ico" osu!.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.File.olz\Shell\Open\Command osu!.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.File.osr osu!.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.File.osr\Shell\Open osu!.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.Uri.osu\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\osulazer\\current\\lazer.ico" osu!.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.File.osz\Shell\Open osu!.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\.osk osu!.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.File.osz\Shell osu!.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\.osr\OpenWithProgIds osu!.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\.osz\OpenWithProgIds\osu.File.osz osu!.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.File.osk\Shell\Open osu!.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu\ = "URL:osu!" osu!.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osump osu!.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.Uri.osu\Shell osu!.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.File.osz\DefaultIcon osu!.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\.osz\OpenWithProgIds osu!.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\.osr\OpenWithProgIds\osu.File.osr osu!.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.File.osk\DefaultIcon osu!.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.Uri.osu osu!.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.File.olz osu!.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\osu.File.olz\Shell osu!.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3328 install.exe 3328 install.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 4456 osu!.exe Token: SeDebugPrivilege 752 osu!.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 752 osu!.exe 752 osu!.exe - Suspicious use of WriteProcessMemory 2 IoCs
description pid Process procid_target PID 3328 wrote to memory of 4456 3328 install.exe 80 PID 3328 wrote to memory of 752 3328 install.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\install.exe"C:\Users\Admin\AppData\Local\Temp\install.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3328 -
C:\Users\Admin\AppData\Local\osulazer\current\osu!.exe"C:\Users\Admin\AppData\Local\osulazer\current\osu!.exe" --veloapp-install 2026.518.0-lazer2⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
PID:4456
-
-
C:\Users\Admin\AppData\Local\osulazer\current\osu!.exe"C:\Users\Admin\AppData\Local\osulazer\current\osu!.exe"2⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:752
-
-
C:\Windows\System32\GameBarPresenceWriter.exe"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer1⤵
- Network Service Discovery
PID:1892
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\osulazer\current\Microsoft.Win32.Primitives.dll
- Size 14KB
- SHA256 1570fe580286c2b2b8e997f6dea230f7f50f07e03e4440e63f0c6fea458436b4
- MD5 c5b4910c8cfc393b609388771046f42d
- SHA1 6169adda8796e079a55016037e7608af99027058
- SHA512 cd64724d91c66eec464b43884598f5de33d7ba5581b54f107da006749729ccdcc7d750bf2c1deaba3c35c13fa3b022761f00878abfa03a23924be596e376bade
- SSDEEP 192:riBpPxxRWhP6pW1gWF+GBTBWseaQWR/2n8bAw3WIX7X01k9z3A3eelO:riL5fWhP6pW1NlN2ifX7R9zAeelO
- TLSH T102625BD2C7AC4203EDEB9E719AA5CA837D3893C74D419A1A1589F0081C67BC8DF3163E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\osulazer\current\NuGet.Versioning.dll
- Size 63KB
- SHA256 bfcba996b3fc59fbee4d67ae42cc86acae455cbe55119216cda2b84b4457256f
- MD5 a4d494c769cf531a65dacc7f650a401d
- SHA1 abbc940997344fb8b97214752c7077831d8368f2
- SHA512 f4dec1fcf52d5ee91e358f8a28e47236d3616c0b45bd948d93b1ee75602be3d061280712c1b6eb75811a3a1aab704444fc636a837fe785e4df8530ecd77062dc
- SSDEEP 1536:J2gC9A6r+R5JP7Y0YCrZNyzbrwJGIQCePQEdkz1:4HLW/f1G8ePc5
- TLSH T127536B2993AC4716C7DE1A74F1B421225BFAD7C97643DB4E2C4CE2E72E533C44A206B6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\osulazer\current\Realm.dll
- Size 369KB
- SHA256 874d252dd8f00bd69b92d8c4552616a3ee318f7e8e109dc85659458215121a4d
- MD5 5f1505ad68d184f3f7b796d5c6a8ffe0
- SHA1 ae16407772ba817ed52b9b97663b8c00814f4a53
- SHA512 0dae25c036b54226104e0287257ae178c61fac2afe6525990dc8299c46274f0e21fda28d366a1c4ecd2d23ea61a6bf3deb945373d4796684cf7b3d0761f947d1
- SSDEEP 6144:MpmRTc79L7+PueOmIO69aQLp0LBFX5elZxWxYTfHJrxqhhWudwsb0YlyTOsdavik:LTSC7IrPp6X0PfHJIhhWumsYMBwpG5
- TLSH T1288429D923BD4B32DAFE4779F07459418AB2F981B8EAF78E56C6A0E60C43B446D00357
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\osulazer\current\SDL3-CS.dll
- Size 352KB
- SHA256 e70d7445f1067b7f59ed65a6a64cd22e124f9f07b382afebdedda8904b4c9bab
- MD5 75968d93811f96cb5f2c8cd1d1a73cc8
- SHA1 71b8d1210b37ab5fb4ca40c61a1a142a34892de8
- SHA512 1701c1f2fe9ea418394d80378e0c7e1595ada4cc9a6875676f1da9b8bcd29954360a925b129674be7578e4f337bfe9d90d0a9bf5057bebdbea687a42f8a6a3f7
- SSDEEP 6144:NXg/xvTMlTr6WOINMRPZWShF5dPBowA35pZtgf5s1mntXfOyt/veM:NGxvIrv6PZhLBLs5GIEveM
- TLSH T142745B96B7972D8EC7611E3530071722E0F5B5A027190BA767E2024F6DA76EC067CBE3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\osulazer\current\Sentry.dll
- Size 814KB
- SHA256 17f78bb7f4293b0e1ef152536ba132b75ac76bdbe4602e0b6f1c0f1d38a8cc88
- MD5 44ae83cb6afd1ab176d27457a362dc39
- SHA1 474e35a009e55236e0f6962dbfc7136f627bfa3f
- SHA512 6244f698598960939ca3e926563cb24a41802ac298026c6c67e640460bf8c47196ad7d831d4904930c9f3371792a753c1aef93b42df6df083c521bd8a9a5af6a
- SSDEEP 12288:GUSFkpimEmn6IOKask7+Jz92IxoFFpvoJu3tfjw+8tY52Us:TZpiJmn6IOKasZpDSM+8W52Us
- TLSH T1F2055A81E7E8CF25D6BE2B3DA034D1880776FB666562E74F013CA6CD1C927469DA0723
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\osulazer\current\System.Collections.Immutable.dll
- Size 817KB
- SHA256 b377ec92d634bdd8a815667f709eaeee19f4b188ccfd32ff213cfe20c42588f6
- MD5 d87848e445f5325107e16bdc1f0d7e94
- SHA1 dd68c7ace92ef6d44498e0006b25d4b3f35656a6
- SHA512 6566d0d273de4eebd5da3059526b4bf6c2cfc5d049428f4f509d0003fa1e2f88d6849be1474394811bcb7d1d9a074ead8c158a2354494d2d6f1de30d3e449f9c
- SSDEEP 12288:orJR+uRoPwKaeN8/98vTU4dQEE3k0T9YLVgHr4iuyvtgllgge:U+uM8abw+CMi3WllM
- TLSH T1D7055B96E38C0B52C62FC5BFD6534AB9D6A1C45253E291CB00DAF6B03F93BC1E57A424
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\osulazer\current\System.Collections.NonGeneric.dll
- Size 101KB
- SHA256 c144cafb2874da6cf94de5b3120be4f34533154a7fae0203f3be9edc0a711dff
- MD5 446b601cef33f37f3d67f42737e0036a
- SHA1 b585a9447fd4a5486ffde1a25e3b83a892029c7a
- SHA512 059cf5b2bf4414797279909072c75f5084e69d3fe40653be2d530858895faeee1e4f1784054fd3c684c1daa9b6b3cdc28504421cd8b20b3b849d3e17b3d6b36e
- SSDEEP 1536:/Nd0tJVDX9LoIbwNC5IQ7XVrMZqz9AsWyUdW46zIZ:/P0dzNoIc+IQLGZqzKss6K
- TLSH T132A3282673D80322D6AE6BFC81938A01E675F4D26717D1DF1618A9CC1F9BBC2D6B2143
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\osulazer\current\System.Collections.dll
- Size 253KB
- SHA256 a3d31fea1ae85efdbf8cc510e3dada8d6144cf05cdf5c47f70bb4a36054c74ac
- MD5 7ee4808241cf97c1433ea48d80d7f3a1
- SHA1 a7d3afacf7c68a1839e0b822b705c51120a32703
- SHA512 9993ff02d92675411bc0ad48bf077a0c01694df96eecf71fe45ae4e83b639ba8a6c30ee321cf89b55dc47b4b7c85a48c4f8ae92a71e069ebe9469a1b0d298fd8
- SSDEEP 6144:TanxoXLyDXDiKNYX8qTKfAyryS1rIgq3lww:exCyDXDiQ+jTURrhFGlF
- TLSH T198444A2A778C4E12F56F457EE663C012D7B390A34712D2CB06BEE5840E97BC2BEB6055
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\osulazer\current\System.ComponentModel.Primitives.dll
- Size 77KB
- SHA256 f740bcc73efcbc9d7ab10cfe3abe78e92192e65b07df75dd4147e170ee9ede0d
- MD5 f5bab39c8460c73a4e32179eb31073b0
- SHA1 e8974be714305592a0d3522a7a60606bf6716164
- SHA512 1944c92fb6105676ea209873e4617ce3801663ae46de6c510233c24559ee1e33ad3d0b7ef88d12618c68263de20a150817fe6e5d1f9c98b2b4a096381a942e02
- SSDEEP 1536:vA5/UZMu41hd+Cv8A/oqevD2olsgYbktiZzQg:vT4d+S85qKD2omgY1sg
- TLSH T17C734B1823EC0126FBBD427C9673A821E575F6821713D9CF4AA0D90E1F5BBC2E27152E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\osulazer\current\System.Diagnostics.Process.dll
- Size 329KB
- SHA256 6c84154fc465ac4e8e94c6f1c977b58191e570e8ab2e4a8979def8abeb6fa565
- MD5 5493485f7e5ba237a43c9083a1fcc7e1
- SHA1 dd3ac98286654cb78091e8aacbb5b203f5165eb9
- SHA512 d8b6abc9888716345ca215f1b1cb2a1e47e1d902e59ca07c7bad23c7fde4890c0f675d445d53e684b9077419b182cfad85a17eb03c88e815d9aaa520fc785a6e
- SSDEEP 6144:TUkDNqaP75vD9eEIdghrT9jb3b41PlmFHbZTdiX2JCO:T5DNqAeDdqJ88V
- TLSH T1F6748D247B980506FE6E86788C63D502EB78949707D2EBD743A0D7DA3F4B7C2E632116
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\osulazer\current\System.Linq.dll
- Size 529KB
- SHA256 081b23576a9cdb180622191707b9f2dfcbbd0a2b3744d2633979ded32ba1f617
- MD5 f92fe9c4d9b34234c20377a80534524d
- SHA1 5224074706079982b678a882d76e74ac17e0f38f
- SHA512 3fdf02313d580953107de723b652997b3a90257967b5746e00d9bba40d8d066dabf2671eb208810261bb9dab528b541f41f7bb3708a910eef10b302e0719f41b
- SSDEEP 6144:nNYb3hypY1hh8r4bdhR+JU1/0kxryufbFHJMyS5IHmYzohMxjCkoTce:NYb3AS1hh8rwdh8UxeEvAEtmL
- TLSH T132B46A2493B80F07C2AF86BFE553E151D7F1859283A2C1CF995CEE961E93BD165BB020
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\osulazer\current\System.Memory.dll
- Size 153KB
- SHA256 0550392de886d48bdc5fff6fef9590dd4954c926f765df17037670754d300fe2
- MD5 c6e27b6d7fb978284b3230cea054e74e
- SHA1 42a0304546c1719555bc081e9fd98e4842d18076
- SHA512 dbf515e9919b91daa4f9db57d85f5a63f13781bfe91846a82ee648a20e65210cd05e45c639ba03dee17a087a347df553e6495de1e9a1094355b3fe73b1ca19a6
- SSDEEP 3072:Q4yyQN/j+0sbFbqX63vwZuIBo7M5F8966oYdzCBuqmwehtTihdRk8lK:PQCb6oIBo7qDGzCBulhwlK
- TLSH T10DF35C1BE2980657DA3FDAFAAD225302D7B36142572192CB4CE4DA842E53BD0FF73461
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\osulazer\current\System.ObjectModel.dll
- Size 77KB
- SHA256 62e0cd6e1585a1f5cd153e2832a03b6dafac0e0ab3331048e7f7bd3dd692f9c4
- MD5 18665c62f5074c12d4553f099139698c
- SHA1 ec1c06378a1374a66314808a5f95c157d1492f46
- SHA512 a26dacf1aa136eccf1a35318a0b6d068b82bce9c66d7f8ff416405a5a294eb809c61a8909dde06564e38f66bbd38342cd96eb20f97909b2d2ac143dcbc0e0d9c
- SSDEEP 1536:e+5GEl0BKXrgcCGfN2QSsMWrHG536bvzTN:eWl0crqQN0yHG5q7t
- TLSH T148737D18A7C84723EAA9467DD1E25822F131FBE31323CACF41E5D54E0F53BD2663616A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\osulazer\current\System.Private.CoreLib.dll
- Size 12.6MB
- SHA256 374c7caf79052a052c3497dbf215dea2eada63f54e5aa421271b9827de46f29f
- MD5 41e86c004a1a34d5d8b260757e258d6a
- SHA1 13c0c03d11b89db88e0b4f1c06219de9ee42c2e7
- SHA512 5b996e8342e15c5c1e394c32296493197b8e70cf49d572f5e1e807705fc60693854837393bccbf721ac4e874c9b5a961846d05fb18fcdf70426a76c56d6ad68a
- SSDEEP 196608:DsvipKY4Zb6wf5ks5OtsFSy8EQOkLUPB5X:3pT4Zb6m5L5OtsFYPOkeh
- TLSH T1A6D68D21F3C85F66E52EF23E81678281F670B4921352D6CF914FD6892F17BC19A3B261
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\osulazer\current\System.Private.Uri.dll
- Size 253KB
- SHA256 1bbc0db2701cd5ac75cdbfe151039f6682adb4c44e281b94ae103f37dcfd5d00
- MD5 a4842dbba787487844a8a29fa681f3e6
- SHA1 1ce8966b23dd7ad54be006355a536e98ebfe9909
- SHA512 c7a84f69cb9dca47f6cae2643a095dea8fdaafd3389c3328874c2aacb48d11a8a2bbb1f7cf4684d571a08732c400d28efae5d1e888c32f59f66acf4b2a216251
- SSDEEP 6144:SfAAcZCInBPKCeDc6Ci9MG3CMeVmtG9FsGu6MyBe:NFkDciMG3HamtG9fuVv
- TLSH T1D5448C25E3840E67F73DC2B981D3D152EAB270665315F7CB0AB5E1821F177C2AA36863
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\osulazer\current\System.Private.Xml.Linq.dll
- Size 393KB
- SHA256 530d8496cf0fb859a9b34090ae992e98bfcabf4c6d1c33d5b3899c852a1ddb18
- MD5 f7e1609332fbe686789b90bb4b5d55c7
- SHA1 a808525863fdda310eb062ea9c3634a53cf1e84e
- SHA512 d2e5d5f4efa40e06c21e48dc70fdef12a442bacd7fba03fc87eb71ec115e32af67cb77a0eab5340d39f16b7ce64d852ab3b32f1f3f25313f3baf5e1dcb8f02a5
- SSDEEP 6144:SxvRCkFa7oBSKGFCoMPxSOpXQgVuThCDC1YezrZjzEOQlIZJU:S1RZM7oHGhU/4WC6ez1ffZJU
- TLSH T13E845B24E3C80B12DE6F92BCC1539210E2B1959243D9D6CFC418DDE5AF8B7C1B67A16B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\osulazer\current\System.Private.Xml.dll
- Size 7.6MB
- SHA256 795f979ae1f5e42060be355fc4ee1a4aeb478fd15b194bca745e3847908252a0
- MD5 d20d759fcecba1cd3c6ef94305b57f02
- SHA1 e41f487ab8f4fa6bc93350fd8063c5691e6a4733
- SHA512 3affc726a1224f2006c637f3c2121ba8b2ee23c85e66f02c0155672e1d8888338d238b42a8048602726c51458ca61f9b5e8d0d04667cc4109bf638518e54202c
- SSDEEP 49152:LQB//hGMR1H46gI5Uymd+YItx2TOMAKfW0rMZDSO3EzwAanU54BQcezIEBopjszU:LCxvemUo0rFagxVmIwo2uaar5WtF6cgY
- TLSH T153868C25B3D40A15C33F827D8272A625E2FAF453139697CF0458EAD91F837C1A67A1B3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\osulazer\current\System.Runtime.InteropServices.dll
- Size 93KB
- SHA256 02f9e9969b29a027ac5fb9f24c681170413231fa8a84da2658120ca11e91b6dc
- MD5 f5f3247bee18aa61f465b5ddb0d99550
- SHA1 0279dfc8e36d261c591987cc8e2894026065b31a
- SHA512 ad0faabb46540429eefa91358793894f316397e6d3419bcd92255150f4eb2a86523d37fff092560e86695b38d7100e9c4a4581384968b2b6a9cfcd2afe11a719
- SSDEEP 1536:VA62upEelCtJfKS6+67NspnSPM+l5+KkmVxKWHt2zBzl:VA6r3lCto+dSPM+rxkmrNoFzl
- TLSH T13093592037C84666CA2A473D9C375D50C9B1F6CA13A2E6DF5781885E1D9B7C0C3B23EA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\osulazer\current\System.Runtime.dll
- Size 42KB
- SHA256 126facb35c9ba044401173748825e1c4c1197aea7b68e443e2fe8b82fc6f0f5f
- MD5 4905fa612509e3dba44e5d72aa95753d
- SHA1 b8a4031632fc953d585a7e2e3ba53316b5e7cc36
- SHA512 8617d2412a9de2593c56779d10fa11d8e579edd27f2c1e3e2832477a54e3b77532f1c0634a2b8ea5aca9340ac29f45ea077384210dca6d95c271c0c39ca37486
- SSDEEP 768:hT+1fsSED2vCeDQvRzXB3gWql6375IVxedktN7xPBhwsR/JG39QRoNvsh2JcfoDI:htB/LuYdy50b4b7RSHZSpZzIz8
- TLSH T11C13C4A1EE485333CD8AAB719C73AC811DF273C4047A197ED88FD51A53867A48236B7D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\osulazer\current\System.Text.Encoding.Extensions.dll
- Size 15KB
- SHA256 a54b5d6e805642c24ee455f9b70badc855d29055c58e23c168dc80204892a0b6
- MD5 b7fc5548e57483a07256f5eca195ed6c
- SHA1 04fc04059d6ce17e74aa2e110c36ad3fd07dc1f8
- SHA512 cb8c485d96e31c6736e299446e401c376af97e937a4fd54598a2f2610d444ecb04310b8df064351916b421e320f278becda0648031f5974dbb4895380aedd226
- SSDEEP 192:LmXhp/jxVW6KJW1UdWCWKie1BzBWseawWa/ATNceKyX01k9z3AUC94RL0F1Y:KxbVW6KJW1UVZlNAAUyR9zVCaRym
- TLSH T14E624C92CB788213EDBB6EB199BDDD933C3867C68811E69A15C9F5481C537C4EB30638
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\osulazer\current\System.Threading.Thread.dll
- Size 15KB
- SHA256 bdb668c3df634e44accbe714d281253c4d62955177a8b1af0f09180a622be3c6
- MD5 99a40b6897be928391d93c7da88a2c4d
- SHA1 9204afe4746ffddc9dc48c1a98975fd52de8feca
- SHA512 953e8b971657c785b1944f08e26970b1f859b52cdfb347b53f0f04b6082bb27564d964cf9a7129dcf65508e124ffc3d57b026c07bd2de16e35394c8a9f68459c
- SSDEEP 384:XYA4z2Eyk0a8kWck7W1JZlNdIdlKR9zeIOI:XYAOB6Ps9z/h
- TLSH T1D1626BC68B6C4287EDB76E7086A8DAC33C7AB7C68850962B05D5F5542C637C4DB31A28
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\osulazer\current\System.Threading.dll
- Size 81KB
- SHA256 b734d6a999a1d275ed30bf66e7532175aaae5ad40ffc9bd30ebab458de878b9a
- MD5 44103ed28fd5f1e2ee0e9d722c675b34
- SHA1 16176eb098f9329414239f5ba6ee3d41ae4c6d01
- SHA512 16d4069521a145267286975af2fcdd0d6dbbbb1922d307490aa37976a3677e3ac25e0950529f4ddd54bb7515ad9e2292c59977b82b351f4063592fd335ea86a9
- SSDEEP 1536:BEgoICPLnImrmODZcUBeZ8j0GEH9wd/3nGRm3LGgY1z6:BEgo9PLIFtZ8j0GEH9wd/2R4GgY1G
- TLSH T15683591A7BE80416FA7B47F9E9B29946D572FCC20710C6DF9059900C2E67BC0DAB2277
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\osulazer\current\System.Xml.ReaderWriter.dll
- Size 21KB
- SHA256 d91eb762c1ee26c4e28660533c612f56437336d3426845d6a5c7741ff0ef991a
- MD5 519e3c56c54f378d1c1a9ffe0fbe2275
- SHA1 c890bec92e1e7e3541254e2490e6c23adf96bf5d
- SHA512 7b8edca98b28cd86da6ce26529aca3234ff2e717f232fbb286a989c8814791aee83923f7b99aa5ff6e595aead2f29cd3a470e1d49578a9337c5d8370e933cd78
- SSDEEP 384:H1G5qkxK67ex4FCZ2W1NAW1mZlNLriSR9zUE9BkJ:V6LqX6rr9zP9E
- TLSH T1F9A2F8E1CE68CE13EDEA7B74C6ABD8C33BF4629120718765D586D00B8863384A737719
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\osulazer\current\System.Xml.XDocument.dll
- Size 15KB
- SHA256 ee16afe11f0b43543643140267f48677fb629d26d22330fb3d7491c6ab230385
- MD5 e348145eea98723010eac1c5ea12ce48
- SHA1 f948f3fdb274251d6d23cedf75f71815046ac4f9
- SHA512 1fb74bec4e7628bb67e5708d568117966a35904fd3332c4e6bfd99881e018d2e8cf76a30ef9b3483ceff41be0cd507ad80b0b3157c1193df733b47dd4dd59a07
- SSDEEP 192:+mnAdxOW/OdW1oWCWKie1BzBWsea4WYthuFwleX01k9z3AgIHkRwFwAS:+mGOW/OdW10ZlNCUwleR9zJIkuS
- TLSH T190624BE2C76C4243FFEA6E706AA8DA433E78A7C64821D63B1585E4491D637C0DF31369
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\osulazer\current\Velopack.dll
- Size 273KB
- SHA256 2eaf8db33d16d2deb49440ed9b46e8d2e1de648b35d1377d15725ce1c7d70703
- MD5 cde5aa9d23af9c384fae0ff572fd708c
- SHA1 091999afdcc0a15d26959c9289caa8da7ce56762
- SHA512 2cc5ebe93f7a2c9be20442fb18636b10ce27548120a7f00dd66c49a4a67f6e08de06e4c0441b171d60b517a0b2c44f5916def5e9b48dcedf62bf1036fabf0a09
- SSDEEP 3072:q+wrvbbZ34aP0yjDYxqVcl7TKBzZrW9KWVPxMLL3VulZQ0ajefg7WKPxrdEOzZPU:q+wTV4nyjDHg9JvY88UDiC
- TLSH T163548D0563F48316E1BF6F79F8B820058AB2F643B8AED36D1944A8ED2D273509D51B73
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\osulazer\current\clrjit.dll
- Size 1.7MB
- SHA256 1377cfce3d021afbf5f362657244e92bc3eb8b4c1d4b901e18d49db2540c7c4f
- MD5 79d869f202d1b04b37c1cd5f545231b7
- SHA1 7c6b2c4662d269ba90b4c28866d5f6c61e07de5d
- SHA512 04ccac261de0c1fe48ea70d7c4580f09b0842475c6cefd8b3ebfd028ef8a494a05e04cd3d34e8b74008737fe1f228b2e04662c63c89f81c56c15f1020172d709
- SSDEEP 49152:USGsSAvQB2UJB0GjtKPuXScRhzpBPPGzUlKCUPQEE4NBWv+d5:NfQjCGjLSwJpxO9CUPQEE4rP
- TLSH T12C859E43A2F805FCD0AF9534C6574A1BEBB2B45913609FCF42F40AA6AF237E2161E715
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\osulazer\current\coreclr.dll
- Size 4.3MB
- SHA256 3ab793826560495d049e275d9390bf60bf8ea510fe085bd065ffbb14af4bebe8
- MD5 fa64b670da1e9bd77a4def06bbefd413
- SHA1 c35fea367321d915194da65da985777b2ac44523
- SHA512 8614a4f88c0279b7a74a005f4a7fd16e20a40f07c885ca336683fb87aecac4126f9a0e38f778deca134f4c6eb821530cc5effb7dae850911509eca8a210932af
- SSDEEP 49152:mwDQnowvJmq4y7YDXJyihhNnw1jSOsQNGUjTWNa1VpEWPFAUK3R2cqmle1z16Zcj:aowvJmq4yEWS1TRBg04kvP76jAxs3
- TLSH T14726AF16B6AD00E8C17AD0BAC6E74917F7B27C590738DFEB16604A251F23BD16A3E314
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\osulazer\current\hostfxr.dll
- Size 357KB
- SHA256 0a495d3a7befebf627a973760439da0f7f1f1667b99832f083664fac7641d2dc
- MD5 2756893fc2cfe0036b926d1ff5f6c2fc
- SHA1 cb4b8b21828ba738e6bfa619f99335756842148f
- SHA512 094d8b233facb5983f72b8c624f1f59aeb62063f695d55a79ba343b929015e73fb4b7f5eb16fe39881f8462822f7d7502ac2d62c4fa01c9686035de28d459617
- SSDEEP 6144:+E7Djww5R1Gv0crFfeUtJ9NZFSKJGDjq/2n1NonJLSHD6DPDh+vJpmE08QxsTZ6H:5MjrFPJ+OyUriJ4E8KtXZPK
- TLSH T1C6741916D6E8017CF0B7D679CAB28901EB727C494BB196CF139099661E73BD09E39323
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\osulazer\current\hostpolicy.dll
- Size 397KB
- SHA256 aec1393a96946d92ff061ce31a455559b773122218cd62af1df9a8328d60f70b
- MD5 4612ceed8b6f626be0945fdd615d50e3
- SHA1 adc371124acea8987ddf5a93ccaa11ab269c8987
- SHA512 5d7f587aa61ea48e60077a6a5a77a43b365e50abb9beb17777ad580659e4b49381260dbebcbaad1d28e64c1d7a814f9d772f211a014d99603ef70e195d342a5d
- SSDEEP 6144:Hvf1pnG2fGDIp/SnOWE5+1TlBVe8Hz7jTl3TtCOa9/Cm8QtxCt2QDZUbN94yKjc6:Hm2Q9rfe819SnKYLpURbSpxoy4rgE
- TLSH T15A842916D6EC0078F0B7E6798AB38941EB72784E47B196DF139089661F73BD09E39312
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\osulazer\current\mscorlib.dll
- Size 57KB
- SHA256 d2246ca5fe7a5971991cc597aefc66fa1cef2f2c1f67d8dd402405ac8a44d324
- MD5 3daf45e9c21bb7736a253c8a4cfba5a7
- SHA1 f077b725fbc5947cdffa25dbf7d64d48a1c9d1dd
- SHA512 8c26baf34e71cc7b222e5de35f5542954be53f760854cd00ad3f25e0a10e17bea62dd966be3400eb5293c0658218c3da1c1cb908c7328f39415dab1486def025
- SSDEEP 768:ut51EDMpCUoqFY66Gw17oqZn/TEHmyrchswz6EEZcYf5o4ba2yGlG1QeY48lCikh:utFcC3ZcYf5o4bZyGc1A4ckovzBzY
- TLSH T146430772ED4C9333CC8AAB79EC37A48905F133C630761AB5A849D51754CE7A492333AB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\osulazer\current\netstandard.dll
- Size 98KB
- SHA256 88334f6fefaf4cdc15b87c576706674b1fe6a7d91cfc93647ef40da5cb682547
- MD5 f58220eb066a15952c540e74b98f40a5
- SHA1 eed55e2d093459dc492fe505c09ad378ad7fcba0
- SHA512 251b561979277cab342653f55f36e8e4f5bb7ef840b7d0b718c048aad6ad1a88230f827006778ff492d99e479b70321cd1427209944e10fdaadeaea824a5ce98
- SSDEEP 1536:gYsYXj0p2NYq5V4bgDHsPdIpuSE5L3Ukcz9wV2z335:tMkYe4bgDUAxCV2d
- TLSH T117A31760BE14D773CDDF97B6CDB7A85117F232CA11720FB1A15A814749C7A90A33A38A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\osulazer\current\osu!.deps.json
- Size 208KB
- SHA256 9383e54b7ea74033188b8670389a6e140527d4beb52d960f3dab83400a5008df
- MD5 26c56bcd6348f16ac54e52cefa819ae7
- SHA1 5f6121b52ec2143299dd43894000a8c2333d5ad9
- SHA512 e5903589a5736672ef43064a18097ff1d5584648f915523020a71bd6c081625b9a161f533e6714979b5a7b48054ad28afa43b467874ce309c16327ebfe94841e
- SSDEEP 6144:w0IIjml0F/angEVkywKLFl0wvD8dNJra4SGl9zk5HqLpE4tJJri7StLIdpYyFz5w:w0IIjml0F/angEVkywKLFl0wvD8dNJrD
- TLSH T15F24A825CA585DB30AB2ABA6683481C2F375432F5010289F78FC254EDF73E9B5166F35
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\osulazer\current\osu!.dll
- Size 244KB
- SHA256 9cfae3ad54307a2644d21dae9aafb5acb8dffc95755943243d3455812b0aa706
- MD5 5571a340def7ba5b4f7938dcaed1b5e5
- SHA1 55863bd8bf2a50e8c8c73aa484acd7016bb80e20
- SHA512 bca1c49fc35aa5de6d006e8aed91d54bb861fb12be72f68412d577afe113cb0980034c8f2c920238a5dc41a868c3cedb773ef371cee7b5dd589282bba8ab0987
- SSDEEP 3072:XcC0nb1ncKFgGtvffScXQYrB88Ibv7xXONrGtvffScXQYrB88Ibv7xXfwCYTLW:XBWpgq6EZ+uq6EZ+WK
- TLSH T11934F1C0B664CA16D6FF4A76B0A192420A7DFF8B39C6C359B80DB7CC0A737164522763
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\osulazer\current\osu!.exe
- Size 239KB
- SHA256 3de4c0d0467c7cc5d23d0f15213211d99411ac6b19108b3442e54a728b53f86b
- MD5 512fa29670620fc5e56b689337d9a8d6
- SHA1 cee0efa8fe346189821d7b9d00839f2d4f38cdf4
- SHA512 27c10fecea00d460d43d52a3f28b447482e7ea4d27520f01514422ab7443ab27b37f428d70004f9a72351fe81658eb9e3650ce60900ac730da362aea5a98992b
- SSDEEP 3072:+qeXA/4yIg9vkNPNu6H6xCYOihUE2652JtGtvffScXQYrB88Ibv7xXvNvsg:+vgvkNFNaxmpEWJtq6EZ+B
- TLSH T194348E07F6A851BEE172D635C9D28D41FB727C594BA1A6CF1310AAB60E737D09E39302
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\osulazer\current\osu!.runtimeconfig.json
- Size 412B
- SHA256 85d1c2ad461d87f769dbd8801e46932130d0960d49a88830fecb583220dfb15f
- MD5 ac4d801908e739170a707072c93d91d0
- SHA1 97f4be5a4edad466a97db5591cd14d27b9c5c6f2
- SHA512 608ce6ab93cccb2bf85aa097a0d5fb7d709da209da836f44fe7cedcd4b1d84550fbd57646f12c214d0c08246a8494af61db93d67ab296fbfabfadea69cfa4bf0
- TLSH T179E02265CA106DB711F9B23ED521C083EA30532700002C9178FC040C6F3B9BA1122F96
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\osulazer\current\osu.Framework.dll
- Size 3.8MB
- SHA256 4c6f9cf67916a2b81fb6ff786c119aa3580009a9d86ccb30b0c06aa2c6f5cc2b
- MD5 e988c5225978455255bc876a36938042
- SHA1 a01717d5003b48ceab235a05520a687cc0b4018d
- SHA512 661dda489964a64ea89a620ad8c5636e7e7c7d01564ea00cc85a213202556b3b54dd0d6ae54d4f013f158f42ae7f47958e7eb6341b1fa025310af966c35404a7
- SSDEEP 49152:U4LxJf960pv5O41KERtOGm3MbCBgR4lgt8jU3PVWNsFoZ9t+WGZVuN93KHDHRA/j:U4XF6+GPcg6oZ9t+WGKf3KHD/L3GZ
- TLSH T17606AD957798CE3BC09E277BE42185D11376F80233229B8B755AEBBC1D637404E46BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\osulazer\current\osu.Game.Auth.dll
- Size 238KB
- SHA256 07760e6562e6b8cea1a40c38047016e3f8650590578b263dbf0c55f7a0404904
- MD5 5aec31181b3c997835bb15a259a57619
- SHA1 8d1311d936d554c4ac3d707e55561398bcff6362
- SHA512 bd7fbf6e9a12e360f58a593637435d321233da9950640b15e9b921f9a81adbe87522c682ba9ce8ef842833529155d635dcdfc39e9aa2dfd426fbcd8a7382084b
- SSDEEP 6144:9V+sRBczTXpS+ArFIkPZDpJLhfmibN+3O65NhULz:HQoFheMs3I
- TLSH T12834182417A87747DAAF82B9E4F3090B93E5D56B9007E7FA7C41D1E219C3387C986287
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\osulazer\current\osu.Game.Tournament.dll
- Size 227KB
- SHA256 ee3008e3e44bef643f68b73e37d8d7fd99da31f2ef05aa602bbd25f8a47cdf25
- MD5 46ed22b9fce7f23c24d4c6464c1bed91
- SHA1 0749e209f762a392a34d317559e3f9b0ce4dc120
- SHA512 6fad7ca07b5c19d1f24ad4bad0474938db29b3a655ebb44657a479531531b8912618fd3e50c17b2ef909165586f7362a3528aa9d2f9bf4eca5cd9c3aead853ac
- SSDEEP 3072:kfCtjAgCtyvinPKyXyBTZvtoSmztDmsEl0DI/3JkBIRE/:kqxCtyv8OQSmztmloo3SOA
- TLSH T167347D6873A84A27CB7F1776B0D40949E2B16A07F4DAEF7D8C4594D81A43322F94336B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\osulazer\current\osu.Game.dll
- Size 6.4MB
- SHA256 55ecb38cb6c932414f1e651ebf991e1660f9d0695acd1af2cf1f82948eb15a89
- MD5 e5783185e7a7751f4b606b0cb9913661
- SHA1 07d9ad48cbe909da57566c76269d913638272b40
- SHA512 b8d3d7c5bb6198f93f8476915e134b670b25277c8558a08bbb196bdb81265407004de19ea14b9dc7cd756fba20795bb3c9fa40c8331dfc221841ee71bfed205e
- SSDEEP 49152:FySWUsENALeIu9zAss6ust3bhbUyiOP+arXgOCtiaWegt3yd410/wWitG83J3tGL:rWhESLeB9zAsVXtpUyiw+arQR7WzyS3E
- TLSH T109664B99E7609B35F83FB93294EB220113F1E85B6B36EB4A6110F5B6359230D7B15323
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\osulazer\current\osuTK.dll
- Size 6.1MB
- SHA256 2ca2e7876f43d1198121a8acb78940a56bd46e56999400b0b93fe2d30b45a296
- MD5 b74950e93d2597299daab204c7482caa
- SHA1 47e18a3e2c995f0d964cf5f37102df50d445e4c5
- SHA512 2ffa988b473c459522fbbfe97e9916e0a71ebc8c061c3381076d06fe522895f651221bd36e5c3d1a019891daeda946cf93256d97a2d2cc4c0e004b903ce73a26
- SSDEEP 24576:TpugrePBtmdE11MUk2JcN+4JlIVOX/9P8NW/G5oIpQ/U6472t8C8w4RikVzcbqsD:YgUtYeNyFyHz/ERdDtw5Js
- TLSH T13056D709B7E12F2BDA56737BC42E1012217AC99917839B13B037DB3E9CF27A919191DC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\osulazer\current\sq.version
- Size 541B
- SHA256 7457fef58c58d735beee6b673c1f86599fe90d2fd55e4772bf2be4655fbc9291
- MD5 be4d3cee8bd70c8736723d3141ddcf8a
- SHA1 e64bcb5cd795c5005f40687178053e93203786d3
- SHA512 b9587fbc07ff29ea4340345c2ee5b63ad46119b315914e3d228c062151754ea51daf8e4eafac5390e773a49b2dc6dfdfa46e20249ceb63f02984f3128c459707
- TLSH T1DFF0C0449000BA07D28A97184CE04208F3FB3EAF30D08498F988AD4D7AD92CFC876583
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\osu\AuthNative.dll
- Size 10.2MB
- SHA256 9ba5d929acf1f183cb4998640df28350e27133d704dc0a761b0ed6b9dcbb6a24
- MD5 e14effbb920f683421ccc714bff60015
- SHA1 f52f102cd38a0bc46b7a0e9f8a86b24e2b28ea62
- SHA512 1a090bbc3d1d1a73d2be056651e14b78533208e92e6caa47981957d94a42bd8db809cbb33ddf8556f697a6f47db85f69bd6976d613e9ed145ad51dc641fa56b2
- SSDEEP 196608:0yZ3lPq1WsY13FixuUuQe2KNVlZRTMb5+FE2eNyQY3lT:0ybiURInuWKvRTMb5+F7eNyQYVT
- TLSH T185B6BEE376D1E8E9C32ACCF4C952B62F97D77C76071972874965B39CAA33A043618B40
- MD5 SHA1 SHA512 SSDEEP TLSH