71473b4a29db4cbae31c2df4e63a7383e86e789b4c8e0e557ef6ef63f944047b

Analysis

max time kernel
151s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
11/07/2026, 04:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
install.exe
Size 173.9MB
Sample260711-eqpr5abs9q
SHA256 71473b4a29db4cbae31c2df4e63a7383e86e789b4c8e0e557ef6ef63f944047b
MD5 b4c86fb34ccb212df14debaa618e41e8
SHA1 4ddf0c8d6c5b04dc17f2920c4ddea0cdce78f7ed
SHA512 7d380e6a0a967e0f9971620858f1a1e8dcea8b6b80e47add7928c4506db9078cf63bf28340afcca58a8ec25d2f35c4d6916f2007a28971cc0e193196705f8747
SSDEEP 3145728:I7v5nrodpUlO6FwmYVyRjHrmNV/y6Zyz4oMjtltC81pjVYrP+/ffVKL2z4T5T/43:Iv5rDO6FwmYzD9Z+pMjtlP/SrP+Xftmg
TLSH
T1F8983380FDC742F6D89B1E74213DB73F873A5512CA08D21BE7A04C25FDB67525AEA10A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Drops desktop.ini file(s) 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Videos\Captures\desktop.ini	svchost.exe

Network Service Discovery 1 TTPs 1 IoCs

Attempt to gather information on host's network.

discovery

Network Service Discovery

T1046

pid	Process
4400	GameBarPresenceWriter.exe

Suspicious use of NtSetInformationThreadHideFromDebugger 28 IoCs

pid	Process
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Executes dropped EXE 2 IoCs

pid	Process
5608	osu!.exe
6004	osu!.exe

Loads dropped DLL 64 IoCs

pid	Process
5608	osu!.exe
5608	osu!.exe
5608	osu!.exe
5608	osu!.exe
5608	osu!.exe
5608	osu!.exe
5608	osu!.exe
5608	osu!.exe
5608	osu!.exe
5608	osu!.exe
5608	osu!.exe
5608	osu!.exe
5608	osu!.exe
5608	osu!.exe
5608	osu!.exe
5608	osu!.exe
5608	osu!.exe
5608	osu!.exe
5608	osu!.exe
5608	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	install.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	svchost.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	svchost.exe

Modifies registry class 64 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osu.Uri.osu\Shell\Open\Command\ = "\"C:\\Users\\Admin\\AppData\\Local\\osulazer\\current\\osu!.exe\" \"%1\""	osu!.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osu.File.olz\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\osulazer\\current\\beatmap.ico"	osu!.exe
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osu.File.olz\Shell	osu!.exe
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osu.File.osr\Shell	osu!.exe
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osu.File.osk\DefaultIcon	osu!.exe
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osu.File.osk\Shell\Open\Command	osu!.exe
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osu.File.osk\Shell	osu!.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osu.Uri.osump\Shell\Open\Command\ = "\"C:\\Users\\Admin\\AppData\\Local\\osulazer\\current\\osu!.exe\" \"%1\""	osu!.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osump\ = "URL:osu! Multiplayer"	osu!.exe
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\.osr\OpenWithProgIds	osu!.exe
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osu.Uri.osump	osu!.exe
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\discord-1216669957799018608\shell	osu!.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osu.File.olz\Shell\Open\Command\ = "\"C:\\Users\\Admin\\AppData\\Local\\osulazer\\current\\osu!.exe\" \"%1\""	osu!.exe
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osu.File.osr	osu!.exe
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\discord-1216669957799018608\DefaultIcon	osu!.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\discord-1216669957799018608\shell\open\command\ = "C:\\Users\\Admin\\AppData\\Local\\osulazer\\current\\osu!.exe"	osu!.exe
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osu.File.osz\DefaultIcon	osu!.exe
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osu.File.olz	osu!.exe
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osu.File.olz\Shell\Open	osu!.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osu.File.osk\ = "osu! Skin"	osu!.exe
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osu.Uri.osu\Shell	osu!.exe
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osu.Uri.osump\DefaultIcon	osu!.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osu.File.osz\ = "osu! Beatmap"	osu!.exe
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osu.File.osk	osu!.exe
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osu.File.osk\Shell\Open	osu!.exe
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osu.File.osz	osu!.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osu.File.osz\Shell\Open\Command\ = "\"C:\\Users\\Admin\\AppData\\Local\\osulazer\\current\\osu!.exe\" \"%1\""	osu!.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osu.File.osr\Shell\Open\Command\ = "\"C:\\Users\\Admin\\AppData\\Local\\osulazer\\current\\osu!.exe\" \"%1\""	osu!.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osu.File.osk\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\osulazer\\current\\beatmap.ico"	osu!.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osu\ = "URL:osu!"	osu!.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\discord-1216669957799018608\URL Protocol	osu!.exe
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\discord-1216669957799018608\shell\open\command	osu!.exe
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\.olz\OpenWithProgIds	osu!.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\.olz\OpenWithProgIds\osu.File.olz	osu!.exe
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osu.File.osr\DefaultIcon	osu!.exe
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osu.File.osr\Shell\Open\Command	osu!.exe
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\.osk	osu!.exe
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osu.Uri.osu\Shell\Open	osu!.exe
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osump	osu!.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osu.Uri.osump\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\osulazer\\current\\lazer.ico"	osu!.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osu.Uri.osu\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\osulazer\\current\\lazer.ico"	osu!.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\discord-1216669957799018608\ = "URL:Run game 1216669957799018608 protocol"	osu!.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\discord-1216669957799018608\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\osulazer\\current\\osu!.exe"	osu!.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1875162379-3804078649-638427191-1000\{DF859950-2682-4CB8-AFA8-A917190FE539}	svchost.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osu.File.osr\ = "osu! Replay"	osu!.exe
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osu.File.osr\Shell\Open	osu!.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\.osr\OpenWithProgIds\osu.File.osr	osu!.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osu.File.osr\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\osulazer\\current\\beatmap.ico"	osu!.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osu.File.olz\ = "osu! Beatmap"	osu!.exe
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osu.File.osz\Shell	osu!.exe
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\.osz\OpenWithProgIds	osu!.exe
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osu	osu!.exe
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osu.Uri.osu	osu!.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\.osk\OpenWithProgIds\osu.File.osk	osu!.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osump\URL Protocol	osu!.exe
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\.osz	osu!.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osu.File.osz\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\osulazer\\current\\beatmap.ico"	osu!.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\.osz\OpenWithProgIds\osu.File.osz	osu!.exe
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osu.Uri.osu\DefaultIcon	osu!.exe
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osu.Uri.osump\Shell\Open	osu!.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osu\URL Protocol	osu!.exe
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osu.File.osz\Shell\Open\Command	osu!.exe
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\osu.File.olz\Shell\Open\Command	osu!.exe
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\.olz	osu!.exe

Suspicious behavior: EnumeratesProcesses 55 IoCs

pid	Process
4252	install.exe
4252	install.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	5608	osu!.exe
Token: SeDebugPrivilege	6004	osu!.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
6004	osu!.exe
6004	osu!.exe
6004	osu!.exe
1220	OpenWith.exe

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 4252 wrote to memory of 5608	4252	install.exe	88
PID 4252 wrote to memory of 6004	4252	install.exe	90

C:\Users\Admin\AppData\Local\Temp\install.exe
"C:\Users\Admin\AppData\Local\Temp\install.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4252
- C:\Users\Admin\AppData\Local\osulazer\current\osu!.exe
  "C:\Users\Admin\AppData\Local\osulazer\current\osu!.exe" --veloapp-install 2026.711.0-lazer
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious use of AdjustPrivilegeToken
  PID:5608
- C:\Users\Admin\AppData\Local\osulazer\current\osu!.exe
  "C:\Users\Admin\AppData\Local\osulazer\current\osu!.exe"
  2⤵
  - Suspicious use of NtSetInformationThreadHideFromDebugger
  - Executes dropped EXE
  - Loads dropped DLL
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of SetWindowsHookEx
  PID:6004

C:\Windows\System32\GameBarPresenceWriter.exe
"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
1⤵
- Network Service Discovery
PID:4400

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:1220

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
1⤵
- Drops desktop.ini file(s)
- Checks processor information in registry
- Modifies registry class
PID:364

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

T1046

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Microsoft.Win32.Primitives.dll

Path C:\Users\Admin\AppData\Local\osulazer\current\Microsoft.Win32.Primitives.dll
Size 14KB
SHA256 190d9e13ec667b7c311c06213cbfae12e4b90528db2f032456f778891ac170ef
MD5 5aff35fb8eb7897666d36724466db397
SHA1 3aa7f1cd5568f42c4aa83e1aeeb597a35edd6eff
SHA512 18ae67a5f7c0b575fd89e977576c864feea3d6c5177ab49d758d2c4ba27a6945a675613094c928a661fd77acb9a8bfb8f17640bf43ebbb2b0bdcf38329c9d0d9
SSDEEP 192:R1iBpKxVWhPmpW1WCWKie1BzBWseaUW/0R3JKX01k9z3AWCUIVV:niLQVWhPmpWNZlN5jR9zTs
TLSH
T10B624A82CB3C4117EDEB6EB09AA8DD833C3963C749509A1A16D9F1181C63BC5DB3163A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NuGet.Versioning.dll

Path C:\Users\Admin\AppData\Local\osulazer\current\NuGet.Versioning.dll
Size 63KB
SHA256 bfcba996b3fc59fbee4d67ae42cc86acae455cbe55119216cda2b84b4457256f
MD5 a4d494c769cf531a65dacc7f650a401d
SHA1 abbc940997344fb8b97214752c7077831d8368f2
SHA512 f4dec1fcf52d5ee91e358f8a28e47236d3616c0b45bd948d93b1ee75602be3d061280712c1b6eb75811a3a1aab704444fc636a837fe785e4df8530ecd77062dc
SSDEEP 1536:J2gC9A6r+R5JP7Y0YCrZNyzbrwJGIQCePQEdkz1:4HLW/f1G8ePc5
TLSH
T127536B2993AC4716C7DE1A74F1B421225BFAD7C97643DB4E2C4CE2E72E533C44A206B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Realm.dll

Path C:\Users\Admin\AppData\Local\osulazer\current\Realm.dll
Size 369KB
SHA256 710b1994f71488ef0438773e274d5f54f93c8b7019efa700f0efda09d0d978d7
MD5 41cccc86fd16352d30f0a6a3fb85170c
SHA1 9aea106a8e70c91dc5153bb0d28aea6c04e6af21
SHA512 bf8e5c9704bcd387356a32274da13fb14e1ffcf15444f11d3dc509eac13c1966563c5efc8cea94d11983c43d620465ddffdd65fbeaf9b1ff5efc263fe907561b
SSDEEP 6144:opmRTc79L7+PueOmIO69aQLp0LBFX5elZxWxYTfHJrxqhhWudwsb0YlyTOsdaviy:3TSC7IrPp6X0PfHJIhhWumsYMBwpGb
TLSH
T1288429D923BD4B32DAFE4779F07459418AB2F981B8EAF78E56C6A0E60C43B446D00357
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SDL3-CS.dll

Path C:\Users\Admin\AppData\Local\osulazer\current\SDL3-CS.dll
Size 359KB
SHA256 8d631bfcddade47decd20dd3e95b2411dbee68fd39bd820ee8204eb5723dd568
MD5 96e4e5960e088e6d8b3f567ddd761faa
SHA1 6e3b1e4d8bd8af4fbe4e149c8844f46c72807eb1
SHA512 4e494cccd262cf0d3b955e314dd1fa986f06d4f46d43880ffefa523a2fbef94cbcf28de5b0d51caaf0ba0b72131d75dad296ea59f554794572e3499aa8e3f300
SSDEEP 6144:l41CfDM5mhoSo0R1PbDjF5dSmy+X4gQIMDeO5iZtgwys17OtPlzwiCSMjK:T1qSoo1zDQmy+X4RIMaO5PEOYSMW
TLSH
T127744C62B767194ECB911E3960071722E5F1F5E1172947A31BE2064EACB77EC0A3C6E3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Sentry.dll

Path C:\Users\Admin\AppData\Local\osulazer\current\Sentry.dll
Size 822KB
SHA256 9cf94b0b761c5b5a0a6b67cb8949baff8b45fff5e2c0c91d5309d27c3d0e60a1
MD5 a17f9d15faabaa1b0c0d4a1415063a44
SHA1 4923f0470a5c3dd92f73530f9b7413751a9f7c3c
SHA512 33cafa4785c4d74575f7b9d0facff39804886c214e1f8743b4ddb62011b6ae7ad3efaa614641282e906b32a1fc0ccfc85751f5ddb1011b813ece48d0076a56ce
SSDEEP 6144:xZTDBHjL2symVa+d7KfKY1tujanFTqoDvoePUY9VitqZ+XAwpTpHlvk5JtsLUERu:xZBHjL7ye1KtrNpJJtt+tfNs+m66
TLSH
T17B055C5163F8D756E5AF97B4E43852C80FF1F71AA5B2E74F131491CC2EA23428E42B62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Collections.Immutable.dll

Path C:\Users\Admin\AppData\Local\osulazer\current\System.Collections.Immutable.dll
Size 817KB
SHA256 f134239f34d90e805fd44c26d2b350f31915734b1dc1b008e5ccec89a39a90aa
MD5 d012e446681c62a8c4aba4688bb0644c
SHA1 5cfecc16ad3fa36cc9e1e8cbb0ff10ec62482c16
SHA512 b3f9b73194646458e6fb4767736b4a9656f5f0c5de6fe40fb765a72c1bfbd9cf7af81b5812ae424a15c79d774b91b832643bf7df574b1523f0c04f1bb75bae11
SSDEEP 12288:RrJR+uRoPwKseN8/98vTU4dQEE3k0T9YLVgHr4iuLvkgllggP:J+uC8abw+CMiCrllB
TLSH
T190055B96E38C0B52C62FC5BFD6534AB9D6A1C45253E291CB00DAF6B03F93BC1E57A424
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Collections.NonGeneric.dll

Path C:\Users\Admin\AppData\Local\osulazer\current\System.Collections.NonGeneric.dll
Size 101KB
SHA256 aba7167d2e95ee23a55a03586588eb01ca3e63942ff2e1392936692bc337c194
MD5 9a208dbc9f6ea15911a634abde78edd8
SHA1 df9f0a91436b7d9afe573100603f2b400a4a9659
SHA512 173b3a02b0cfae84b4f7af22a6de582521024b806321d9e754176891664705ec1cf82e2dc725396255d05697e73e3647634da8a0c4420c13aa875aca5a464b55
SSDEEP 1536:lWd0tJVDX9LuIbwNC5IQ7XVrMZqz9AZWTUdOoz6Y:lg0dzNuIc+IQLGZqzKZAoeY
TLSH
T19AA3182673D80322C69E6BFC81938A01E6B5F4D26713D1DF1618A9CD1F9BBC2D6B2147
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Collections.dll

Path C:\Users\Admin\AppData\Local\osulazer\current\System.Collections.dll
Size 253KB
SHA256 f0fe3fc9cecf713d5c29a2fecdf6aafc50b41efb8130a56af54b8c9330c1ffc1
MD5 5e013ce9a5a3cb2840b4a0d56f86c849
SHA1 ce783a1bc6c03b5082059d6935cecfed6944da8c
SHA512 8041a3486e1e72079a111c2354f242dd74a43ce1ab4e5dc76b05e24e17bc2654f1ad462358be14e2ea2bcc921e79a17c3ccdfecd2398783f95ed0d499989afcd
SSDEEP 6144:SnxoXLkDXDiKNYX8qTKfAyryS1rIgH3iPt:axCkDXDiQ+jTURrhFXi1
TLSH
T119444A2A778C4E12F56F457EE663C012D7B390A34712D2CB06BEE5840E97BC2BEB6055
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.ComponentModel.Primitives.dll

Path C:\Users\Admin\AppData\Local\osulazer\current\System.ComponentModel.Primitives.dll
Size 77KB
SHA256 3dc8bfbf3b542c45646a7057d3e945374c7b85db69c37f2a16794e88091a5b06
MD5 32ca30c430324b105ded9c880e2e9453
SHA1 1f0945383954c26312190f2059d71ef1591e95a1
SHA512 02c242e540dd9ff34ef8da2cb9f0d33adc17f8fefc7bf804a7d5904789d95bafb96d9dabceba70c92c6029bd2fb92252515315b9af0c12711dfe5120078473d1
SSDEEP 1536:+95/UZMu4zhd+Cv8A/oqevD2olsOnbktXzDv:+w43+S85qKD2omOnIv
TLSH
T114734B1823EC0126FBBD46BC9573A821A575F6831713D9CF4AA0D90E1F5BBC2E27152E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Diagnostics.Process.dll

Path C:\Users\Admin\AppData\Local\osulazer\current\System.Diagnostics.Process.dll
Size 329KB
SHA256 4ca86970668d670a579db1c5733144048d1e52c2bb2e0892c86f665e39883f8d
MD5 897a74aba264763a5dd538d26b6c6473
SHA1 3a11d0853c4833ae9135f07eeee9554307604566
SHA512 1665540bd61d83a4e14652b33150ea2c01143b3237816efeb7b0d06610de70bbfaef2d6aae8d6bcf3d6cbb2d2b81053dcaaf614e467667b508ca3bf937c26b1b
SSDEEP 6144:svkD/qaP75vD9eEIdghrT9jb3b41PlmFEEZTdiX2J9:sMD/qAeDdqJg89
TLSH
T140748D247B980506FE6E96388C63D502EB78949707D1EBD743A0DBDA3F4B7C2E632116
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Linq.dll

Path C:\Users\Admin\AppData\Local\osulazer\current\System.Linq.dll
Size 529KB
SHA256 1b81642c1ee4f21ebbb57213c14e50df59aabcd7bf91de2eebdf4c0d9f32845b
MD5 7d69cbd4f96ebaab18b74203e37f5a59
SHA1 23c4ba0ebd3ae3a8e18e43854e1261d682cc6af8
SHA512 c7b3edfe8bf9f85115950da6aa6b010ebc9a1327ab99fbcd9313de89655f1cd8d15ae4f5cb16e2c52ae2da693c9d41a88a23ff98d55948dfda51d86622e2eaa4
SSDEEP 6144:/NYb3/ypY1hh8r4bdhR+JU1/0kxryufbFHJMyS5IHuYzfhMxjCkoTcK:1Yb36S1hh8rwdh8UxeEvAEImH
TLSH
T173B46A2493B80F07C2AF86BFE553E151D7F1859283A2C1CF995DEE961E93BC165BB020
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Memory.dll

Path C:\Users\Admin\AppData\Local\osulazer\current\System.Memory.dll
Size 153KB
SHA256 4d6fe7d23c06b4e81748d83a1314218f31bb1e4ce9b6d1ebc7ba8a78a342833c
MD5 4807ee6fb0ab7ed7d308d67657af7ed5
SHA1 c8eb5f273d03097957cd99eb1cd28bd3defa5981
SHA512 15c4cca2bda3fde1de51e2783afe7dcb4f4d430a16d132594cb4fbe46ebde25eddccea27cab9de2a6e5b83d7aaeed6de2c2f7bf5a7cb3d1dcd494227a5a99725
SSDEEP 3072:hsyymN/j+0sbFbqX63vwZuIBo7M5F8966oYdACBuqmwvhtTihdNj:gmCb6oIBo7qDGACBuwh0
TLSH
T12DF35B17E2980657DA3FDAFAAD225302D7B36142672192CB4CE4DA441E53BD0FF738A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.ObjectModel.dll

Path C:\Users\Admin\AppData\Local\osulazer\current\System.ObjectModel.dll
Size 77KB
SHA256 015061c7fea90ceaaabe2669db8b8110249295e19a6a571363c8a581ad9ba7dd
MD5 d10b29dcb31dc4a40d6d4ba7dfbd5547
SHA1 68f2112e206fa2da19e20b8b6dfca1495017abad
SHA512 43ab0eb7b84e9ff279d1cf1c5fb991806fe6bb4554a83a623aec37094be70b221cf6e64de3f94c067dee8b9269fa89cdf701fe248ec194b835ab5fbfb006b5ef
SSDEEP 1536:OXtGEl0XKXrgcCGfN2QSsMWrHGI35uzEl:Ovl0CrqQN0yHGIJug
TLSH
T16E738D18A7C80727EAAD067DD1E25822F135F6E31323CACF45E5D14E0F93BD2663616A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Private.CoreLib.dll

Path C:\Users\Admin\AppData\Local\osulazer\current\System.Private.CoreLib.dll
Size 12.6MB
SHA256 2127c8c1dbd9147205be92641cc6302e944ec49f002e51b4320599b765ed2f2b
MD5 1cb74bd09c44a2e728d218926fda8398
SHA1 7a8b9a9e613ff958ac4c446488368a2807ecb7e6
SHA512 b96fb045c200a055fe00a654ffa0e970e7651a669e606071eb3e872a7a4563b52c932e7611b981250ee8781a50e561ad8c47709f5929039292e97cfdffc85b79
SSDEEP 196608:1svipKY4Zb6wf5ks5OtsFSy8EQOkLUPB5:RpT4Zb6m5L5OtsFYPOke
TLSH
T198D68D21F3C85F66E52EF23E81678281F670B4921352D6CF914FD6892F17BC19A3B261
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Private.Uri.dll

Path C:\Users\Admin\AppData\Local\osulazer\current\System.Private.Uri.dll
Size 253KB
SHA256 7ce81174fdba93a1e12c596ea3e1ad4bcc9e798710292e1629cbe827ee34458b
MD5 fad0d4747aa546861652bcb7d37237aa
SHA1 96c67f217aed07466e4a1b571286939fbab6fa58
SHA512 bf8ba7d5bc35c3b7ef71b7c2d26217485c495a8963c45101e910ac70c4072cc44e019fe0332a10152bca50ed43d5e7f959dc848e7c3c9cecc38b7dd4b38c4bd0
SSDEEP 6144:1fAAcZQInBPKCeDc6Ci9MG3CMeVmtG+FsGu6MyN:aFODciMG3HamtG+fuVi
TLSH
T1A7448C25E3844E67F73DC2B981D3D112EAB270665315F7CB0AB5E1821F177C2AA36863
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Private.Xml.Linq.dll

Path C:\Users\Admin\AppData\Local\osulazer\current\System.Private.Xml.Linq.dll
Size 393KB
SHA256 3dfc8c3f32e242ee23a7d7c97a13c5e798248d1aec2212da8291be9898ff82f3
MD5 411cac17ed6ce14d9dca0a8e0e15dcb2
SHA1 1ebfce05c52fad7a7db3551b195d9920c629651b
SHA512 fd81e6a30ec983b441928ecbea036344f16b6f995c034c0bce94e021d99364326ecfe0dfa4a8cd925c5cdbce243fc0303b44590fd58e4b0b5d7017971b8bf02b
SSDEEP 6144:AxdRCkFapoBSKGFCoMPxSOpXQgVuThCDCFYjzrZjzEOQlIZSW:A3RZMpoHGhU/4WCKjz1ffZSW
TLSH
T17E845B24E3C80B12DE6F92BCC1579210E2B1959243D9D6CFC418DDE4AF8B7C1B67A16B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Private.Xml.dll

Path C:\Users\Admin\AppData\Local\osulazer\current\System.Private.Xml.dll
Size 7.6MB
SHA256 9f4783f9f82217dc44aae218a5d203b314313305b64ec97a0f8caf4fc53e7d86
MD5 d598f2bc03f3f5109df8fd334297c696
SHA1 a50a896fae041166ae51082e7d90c0c659c3d2b2
SHA512 16c77f54d5ea2f2d7dd9d9ce9afdd66ff84d21eb6c16caeb837bbd2382fac66abd57752ed9cf09b40e811ca7a3f41f60cb075ddf560246662eef1f89d495344e
SSDEEP 49152:OQu//hGMR1H4kgI5Uymd+YItx2TOMAKfW0rMZDSO3EzwAanU54BQcezIEBopjszZ:OxxRemUo0rFagxVmIwo2uaas5WtF6cg+
TLSH
T193868C24B3D40A15C73F827D8272A625E2FAF453139697CF0458EAD91F837C1A67A1B3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Runtime.InteropServices.dll

Path C:\Users\Admin\AppData\Local\osulazer\current\System.Runtime.InteropServices.dll
Size 93KB
SHA256 74a2dd12e1c0f3d9aca3f11e160a1de7a5bd4447ed8be3071377217a516f6874
MD5 67e5ef7bb29712cd647c9117ae76e48e
SHA1 0d590615d7d2216ff8a6c6b45f9e15586f4a141d
SHA512 41541cd2bab6517e79e71480289ab85d8c401238d359326267fcbeb25aac928081bd7a9f3e807c8d256b6572ea0eea76647cf71dccd7445e4906d38163914940
SSDEEP 1536:nDA6UupEelCtJfKS6+67NspnSPM+l5+ZkmVUKWH0ozkt:nU6p3lCto+dSPM+rCkm+N0o4t
TLSH
T154935A2437D84666CA2A473C8C375D50D9B2F6C613A2E6DF5781885E1D9B7C0C3B23EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Runtime.dll

Path C:\Users\Admin\AppData\Local\osulazer\current\System.Runtime.dll
Size 42KB
SHA256 1b56f3da3567ff55f013332ae17796ac6cd067018878d8f322f8425b04b70720
MD5 987f0dd92a97fb1be99df665ec6dc7cf
SHA1 1e74284c11aff202de0b52ff2cde89b12ac77db3
SHA512 0e8142ba5274b9cd60fd2b956d2a392e47287c041d0831621674998ecb5642c7d62aed50299a726444245882ef36e8457f183e73f9346bef133a8e4cfa5941cc
SSDEEP 768:99q+1fsSED2vCeDQvRzXB3gWql6375IVxedktN7xPBhwsR/JG39QRoNvsh2JcfoQ:99uB/LuYdy50b4b7RSH9Z+BzJ
TLSH
T1BA13C4A5AE485333CD8AAB719C73AC811DF233C4047A5D7ED88FE51913867A48236B7D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Text.Encoding.Extensions.dll

Path C:\Users\Admin\AppData\Local\osulazer\current\System.Text.Encoding.Extensions.dll
Size 15KB
SHA256 e35568fcbddd90781f904f5bbb8d925a35f509c7e1ce626d24e7d43ea6ad2c0a
MD5 29dec104b0a221dca33deb3a98ad6376
SHA1 e2cfa91235932adcfe9fc5fa5b751b187140afd4
SHA512 6ee0c9875f52fecfa297b6579f29250ffd914140b289cb727b9725cb5999c5977cdec2439f10ca0a03b71434f05e81c477fdd892f12adc50705f24362a90d66e
SSDEEP 192:GeLmXhp/hx2W6GJWnWCWKie1BzBWseaUWP58GMsc+6UQ/X01k9z3AR1F5d:GeKxp2W6GJWTZlNErj/R9zu5d
TLSH
T108624C92CB6C5243EEA6AEB099ACD9833D3D67C28851DB6719D9F5081C533C1DB34A38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Threading.Thread.dll

Path C:\Users\Admin\AppData\Local\osulazer\current\System.Threading.Thread.dll
Size 15KB
SHA256 565346c61faca21110027638e7af298e0162d587afc3f5bdcb993c80922a1cf0
MD5 3c67056e3eea95b2f0c8312b012c23cf
SHA1 09f80cc380cfd32aa7d6189d3a93e64dd0c2a94d
SHA512 5476a4e3592dac5511c2c71e1a1f8b296c5f1516ad78a4f6b46b7b2e73f2eb5869f64d6dc82b922a58cc6c0f05ad7c98d10fe631d22c0c76ad4f67e0f3378e2b
SSDEEP 384:uyQv4z2Ee0Z8zWcQ7WllNvGNXuifSR9ziiabS:uvvOGcDlfe9zqO
TLSH
T14C625CD28BAC8183ECA76E7095F8CA433C7977C68C65D61A05D6F05818273C8DF31A2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Threading.dll

Path C:\Users\Admin\AppData\Local\osulazer\current\System.Threading.dll
Size 81KB
SHA256 76900e5c96b72e6e74477a90897f86c9f8b78eb2169010298cd4aecec5466ae3
MD5 a512c2446cdc301ba4598d5f5963bfaf
SHA1 7b6a72484dad6c24cb4b3f157bffa4c9b0aa9ebd
SHA512 19f4fe27372e1d4d9373b594013b6557c0fcb74641921c3e47e7ccf5d5a09bd3b5bc5fc0687fe658dbe1d382df5bdcbc458312f0a5ef6c5371c50d9b8bcc319b
SSDEEP 1536:U+goICPLFImrmODZcUBeZ8j0GEH9wdN3SGRm3LGgCRzy:U+go9PLCFtZ8j0GEH9wdN7R4GgI+
TLSH
T1F0835A1A7BE80416FA7B47F9EA729946C472FCD20710C6DF9059900C2E67BC1DAB2277
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Xml.ReaderWriter.dll

Path C:\Users\Admin\AppData\Local\osulazer\current\System.Xml.ReaderWriter.dll
Size 21KB
SHA256 32151d8d938eb388a6a0abc05ab955430f21aba92e960bdb6e5c6029a45d2f34
MD5 f3858c240850eaa0a1ad5bcdb0e8ccd2
SHA1 5e2d868ecee6f8fcd80dc30e28a4b8525f98650c
SHA512 a68e07ee2a39d2c1bdbeecdf3863f49aeeb5b081186aee9b5a57b505d7a8f5133605e42ff7882adc60595600f465df4ee1f33ab13b93547768357baaaebb7606
SSDEEP 384:t+1G5qkxK67ex4FCNtW1ZAWvZlNJ4rj/R9zuh:y6LeGmrjZ9z2
TLSH
T1ABA20891CE78DE13EDAABBB0C59BE4C33BF5629120718B35E585950B88637C0A737724
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Xml.XDocument.dll

Path C:\Users\Admin\AppData\Local\osulazer\current\System.Xml.XDocument.dll
Size 15KB
SHA256 d6f34c5ea1bbcc6b136110bf477d11d86d8220658996e321d36ce51a35bff159
MD5 f705fbf7e0e988e092f14a1c21c23956
SHA1 5fd570d26a1636762fb5a5f5308d765156af9466
SHA512 dfe1f413ecdf0582e72fd9bea298bb3ce26d2a76c4bcac3c5de870186a447be6034757be60ea230d283a577fbe9d86597bf42bf6fe18397d4ee3cae426690cb4
SSDEEP 192:VUvOzxiW/CdWPWF+GBTBWseaAW0bVueTXflYBQXBnX01k9z3AJMTPUeK5:Vy2iW/CdWGlN6cUthXBnR9zCMIeU
TLSH
T109625BA2876C4203EFE66E709A99CA837EBD57D25C71D62A1591F04A18137C0EF3172E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Velopack.dll

Path C:\Users\Admin\AppData\Local\osulazer\current\Velopack.dll
Size 273KB
SHA256 5127ed96e84c85c98ba7c7112d849a8a844876b542ed258f013746e7698e28ce
MD5 ab149b2630ca6991512d1dd0e81068af
SHA1 75a4db1f5ae7b819eac9835cb2e41bdabb1cc2ad
SHA512 2bb0948daabfbafb41e5085ff57a2567a27750f248f7ee1452117607d90f374a39e5dde55b36e00f588580c5f49ef2ad025ed0782d84be7ff16898d9eb3802f5
SSDEEP 3072:U+wrvbbZ34aP0yjDYxqVcl7TKBzZrW9KWVPxMLL3VulZQ0ajefg7WKPxrdEOzZPE:U+wTV4nyjDHg9JvY88UDiy
TLSH
T180548D0523F48326E1BF6F79F8B420058AB2F643B8AED76D1944A8ED2D273509D51773
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

clrjit.dll

Path C:\Users\Admin\AppData\Local\osulazer\current\clrjit.dll
Size 1.7MB
SHA256 a4fd149cce5d20b8f09532dae07b8df761651088eb414c0dd7683d63184c207a
MD5 a50cbfa255f4917f8c38235edf0d38b4
SHA1 376ec8af4aa9d27ac79e6e0dc7204f8c66aea74a
SHA512 adc5b5d7520f5a63a88d7ac92e72b4a96be5f716590c12e4335a7582d84420f65d15a682aa998cf67c74b1572b4a8e5b73527f60d6035cadb42617eef0eeb2b5
SSDEEP 49152:LSGsSAvQB2UJB0GjtKPuXScRhzpBPPGzUlKCUPQEE4NBWv+dy:ufQjCGjLSwJpxO9CUPQEE4rQ
TLSH
T12F859E43A2F805FCD0AF9534C6574A1BEBB2B45913609FCF42F40AA6AF237E2561E315
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

coreclr.dll

Path C:\Users\Admin\AppData\Local\osulazer\current\coreclr.dll
Size 4.3MB
SHA256 f896ff2163768dfb732ba52ebf090393135d236b4f5698f5a054540fda5a6088
MD5 d4d1d21993fb0a03c6cda67a0fc337bd
SHA1 3b3d8d03580b1b48ea7949a56596b23770857ce9
SHA512 554505a899a10f950e2f22765dc934ee0b9724b39ebd0110fe56b50584543067f726dfcedf2c8ce903894aa3515cce6adf5e6f4b0f6fedf731f0e22b0e780d90
SSDEEP 49152:6wDQnowvJmq4y7YDXJyihhNnw1jSOsQNGUjTWNa1VpEWPFAUK3R2cqmle1z16Zc4:eowvJmq4yEWS1TRBg04kvP76jAxss
TLSH
T1D926AF16B6AD00E8C17AD0BAC5E74917F7B27C590738DFEB16604A251F23BD16A3E314
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hostfxr.dll

Path C:\Users\Admin\AppData\Local\osulazer\current\hostfxr.dll
Size 357KB
SHA256 99bdd77e4fe14ab284c4a335ac13affae11c840506b032462d26273143f0b767
MD5 214f2e859995128c7ff52c2d3ee52aed
SHA1 009d8a3a13d2a73d6db26b5b218545e786f3849b
SHA512 859c39d176a4ac637f14a43b6fcbd20386cf496928048f37da783f0f97eb28871b2fd0371172b740ff4f07b8d012738a2b0bfff04843670343577464df23a7d0
SSDEEP 6144:UE7Djww5R1Gv0crFfeUtJ9NZFSKJGDjq/2n1NonJLSHD6DPDh+vJpmE0SfxrTZ6g:fMjrFPJ+OyUriJ4ElntXZPt
TLSH
T1CA741816D6E8017CF0B7D679CAB28901EB727C494BB196CF139099661E73BD09E39323
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hostpolicy.dll

Path C:\Users\Admin\AppData\Local\osulazer\current\hostpolicy.dll
Size 397KB
SHA256 a2f6f864b9a41c56ad22490ea882ece574539eb7b23f8913c943613990818e89
MD5 80bb6eda76ce06e8c4cc0fd0fc65b332
SHA1 fdf25c9dc5507debd5018030a9dfcbce348d4b1b
SHA512 824424e5756ed4a5b1ad8f6342b4baf138e30437803bc152dd444764cfb5174e82028374199e06b49b3d3652bef90a0ca62d764d2360411f9ed535a74605b2a1
SSDEEP 6144:9/P1pnG2PGDYdnPkLoem0Z+1zlBVec2cKTjlMTd4PKkvCG78teytpQDZXadtYyKh:9G25cL0LfecMUZLK4bUyGbCTXoyFrg1
TLSH
T177842916D6AC007CF0B7E6798AB38941EB72784D47B196DF1390896A1F73BD09E39312
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mscorlib.dll

Path C:\Users\Admin\AppData\Local\osulazer\current\mscorlib.dll
Size 57KB
SHA256 8cc7442f997a6e0de9157b55058e5e85011fa240a903806f2c501f069e8a45a1
MD5 bd5753d5d325aeafef4a7f958067d28a
SHA1 abf1d0517fdc911816339d64d2aa0488b4d1b30d
SHA512 ae138cf33e8534495daad6004a406937ab49a1788fce4f728084dc517d2b6b1e489e5931bb1dfa51552eea6bcfb15a213ed9a4be96619d6017c8fe424f4b7db1
SSDEEP 768:zt51EDMpCUoqFY66Gw17oqZn/TEHmyrchswz6EEZcYf5o4ba2yGlG1QeY48lCiSP:ztFcC3ZcYf5o4bZyGc1A4cS+4Bzd
TLSH
T149430872ED0C9733CC8BAB79EC77A48905F133C634765AA4A849D51714CE7A092337AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

netstandard.dll

Path C:\Users\Admin\AppData\Local\osulazer\current\netstandard.dll
Size 98KB
SHA256 b7c85ff82edc3db1424e9b387eed0517cbe2c59691951ed70b41d46f79397696
MD5 c19ab175de224496d2786ba895066f05
SHA1 78c2598df10bc31feee47d770208bcf4e79d02b7
SHA512 596dab99e9e3858450546e2a33488105b3ba7e24d4d39eb9473d4c114730eb5184e848e424355176ad5c39f3f8302fcc609359933cf3e02c8d5706db43dac1f9
SSDEEP 1536:hYsYXj0p2NYq5V4bgDHsPdIpuSE5L3Ukcz9w9Qvyz5:6MkYe4bgDUAxC9Qvy1
TLSH
T14FA30660BE14D7B3CDDF97B6CDB7A85117F232CA11720FB5A15A800B45C7A94933A38A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

osu!.deps.json

Path C:\Users\Admin\AppData\Local\osulazer\current\osu!.deps.json
Size 208KB
SHA256 c80ea4618d34571454d141b090da7c4f7e50e43a17875a0388bfdf56991820d0
MD5 a6a49b3665a1aa023f7b6e476b457264
SHA1 f2a26dfefed2bd9a32bc8857a2d70d7eec1bdea6
SHA512 5733514964da855f62cf2f202d7ce25fff9499923b56ca3f1e8df39fba913647efdcbad260332c85cf2236b558d7ab39d4a898e8af5c8d692724e4b1bf36bb26
SSDEEP 3072:K3FMitPdlcu7rjYrylt1YA2qtTRdTDKXtSh0BaN1O1SOG4CnHSE1+0U5+KPP3A7x:XxA7+S
TLSH
T159247825CA589DA30EB2ABAA243481C2F365432F6010688F78FC255DDF73E975166F39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

osu!.dll

Path C:\Users\Admin\AppData\Local\osulazer\current\osu!.dll
Size 244KB
SHA256 e7707fff8643772606822fe53333e9f9becbab37e52a27fb67344e1f47745de1
MD5 ac5a3553cd9658df6a74a6013558359b
SHA1 4ae780eaeb392e40bfe14bd4d386c5a6b2c14868
SHA512 58962e6b5ac80e77376dc64bde877ad8e33bfd8dc0ed8599efb944fb8499e025b4637d7968c889ba8cb1b9004d39907e625664711abd5e9a63cda550e14486a0
SSDEEP 3072:Yx06OxDqVK31nJvBSGtvffScXQYrB88Ibv7xXONEGtvffScXQYrB88Ibv7xXfwZu:v6OxDqQXSq6EZ+pq6EZ+kq
TLSH
T1B634E080B664C726D6FE4A72B4A196421A7DFF8F39C6D349A808B3CC09737164663727
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

osu!.exe

Path C:\Users\Admin\AppData\Local\osulazer\current\osu!.exe
Size 239KB
SHA256 8383f49b3dd3483ae429691d4473ac94a0750fe30523ec735ba456113ceaec7d
MD5 4384f95c276853d44ad7728482d41f3b
SHA1 9b99b7306d227e416870c694cd394dca6abfe8a0
SHA512 967ae46195e12f957723858199370640c95abaf02903105156e83536d539c86f6f8e7eed14c1e7548e0012792cd4d29e4c5141747772fa6e6c87da811df8e860
SSDEEP 3072:pqeXA/4yIg9vkNPNu6H6xCYOiVUE2652JtGtvffScXQYrB88Ibv7xXvNw+TK:pvgvkNFNaxmNEWJtq6EZ+zK
TLSH
T197348E07F66850BEE172D675C9D24D41FB727C5A4BA1A6CF1310AAB60E737D0AE39302
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

osu!.runtimeconfig.json

Path C:\Users\Admin\AppData\Local\osulazer\current\osu!.runtimeconfig.json
Size 412B
SHA256 ef068dddd08a346fbad35d1558393bee8f89163722734452d69518b67e5f6a6f
MD5 e15a05b6fd18e5732e4071042a05c04f
SHA1 2b0bad1e36a0cc60a2a8f871de9fdb19f0326d3a
SHA512 b2133108d023b603457e65d6eed952d277fcc2a192422e9df2ee29bbff435b88ae69b454e8d378656683899dd83e29af3d963651a845071c6112ba3a5eeebe66
TLSH
T15CE02265CA206DB711F9B23EC521C083EA3053270000289178FC040C6F3B9BA1122F96
MD5 SHA1 SHA512 TLSH

Submit Download

osu.Framework.dll

Path C:\Users\Admin\AppData\Local\osulazer\current\osu.Framework.dll
Size 3.8MB
SHA256 2d8e9637db98e09025e8f9199a22de7bdbfabdbbdbb9738b8e70dd81ed1861d6
MD5 646c0459843d0d063ce9636af2b9c96e
SHA1 5e79b26b45ac02f04aa7e50f50f03ba8d57f361a
SHA512 9789e8935137d541953dbe54d4ca74e0904930927fbc608ba7372ba9f83cb1c810bbd4ea7bbdf27c3e6d3e2c931e9a0064f8e145ffa38d562b128e29cd7d6c5b
SSDEEP 49152:+CuCUoPYr5z8eMbCFgR49gt/A4rlVWNsFoZ9t+WGZVuN93KHDHRA/72L6gGnE:+Cwofg6oZ9t+WGKf3KHD/L3GE
TLSH
T1AF068B917398CE3BD5AE1B7BE42185D51376F8423711D38F784AEB781C627408E86BA3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

osu.Game.Auth.dll

Path C:\Users\Admin\AppData\Local\osulazer\current\osu.Game.Auth.dll
Size 238KB
SHA256 9bc7b10823a3d9f1abe86aa104e424199ad5699f4d41db7196057838482e4588
MD5 6ce3b5a584643d757a84053a3a3d0bba
SHA1 acaf1fa67e2dc546e0ccb4f22031398ad21c2fdf
SHA512 73124b34bf1c895e2c479581bf8e5f7eebc5b8c14458dac7eb48d1adb4c489ec7d74198116e2845c35bede440da29d0da832ce7fc59434a00ae825ebd5c317d2
SSDEEP 3072:kRVxBPn7fnLLnNSkJcemNFmeEfVrKy50rS7nlrUVUhK4VEXLqtOOy/j5Nh5mm/gt:KvBn7/L2eqsekVuy5hrwXc05Nh2j
TLSH
T15E34196517983B43DA5F86B9E0F30A0BD7E4951B900BE7FEBC41A1E209C7387C596287
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

osu.Game.Tournament.dll

Path C:\Users\Admin\AppData\Local\osulazer\current\osu.Game.Tournament.dll
Size 227KB
SHA256 7b1aa56612cc1858135095cba0a8aaca3c389e23700dc3f6456769e807c833e4
MD5 9580923c2f4ea76704ee57d352d67fc9
SHA1 6a714cc513f7f485035c9eb8aa0610394dd108b4
SHA512 2186119c4ca25143a9df991ef82c46a51696dbde8dcb2510728ea9f611410dd0e810991a302586b1f650ff7217de07941cdafd8cb0b5f32b52302c55d6dcc4fc
SSDEEP 3072:efCtjAgCtyvinPKyXyBTZvtoSmztvmsEl0DI/3JktIrDE:eqxCtyv8OQSmztSloo3Sqs
TLSH
T1A2348D6873A44A27CB7F1776B0D40948E2B16A07F4DAEF7D8C8594D91A43322F94336B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

osu.Game.dll

Path C:\Users\Admin\AppData\Local\osulazer\current\osu.Game.dll
Size 6.5MB
SHA256 e452f7683c0e63d1900c2441c4e724fdf9b5c02123a4b9096e049a8d0d37b5f7
MD5 9889476c2a109c4b63e3cd333676c1c5
SHA1 8adf73ee07a02999afe6a94fd8fb11d236154993
SHA512 0465e193eb1f6f49030a54f7d2ed8ac6bde9e6760ad6892463bb89aa0f42f876fdb3b685b931ed87e575a5b0b9939b909cb9f3b6b0e86fb06fc126047507f2d4
SSDEEP 98304:9h6ObjdSDzMg2Ny19xPauj6QZRbwbKoM4:WObjdRY7t2
TLSH
T1A7667C95DF688F36C97F8A73A0A6610213B0DA1B7B37DB0E60B5F6B635423056E50327
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

osuTK.dll

Path C:\Users\Admin\AppData\Local\osulazer\current\osuTK.dll
Size 6.1MB
SHA256 831ddce8dcec165e4212093279e22e047489c29b43e8832faffb3fb09b090371
MD5 b163095be55e572cea59c2ca50a8f611
SHA1 169a8be0d6e75a4d22b424fd6ece0d01efee203d
SHA512 5925730fc3e948831616b396db2ddb80d0024a42998aa747cb4aea29ed5a3af526d7ade3403edb4ac5fe27f83b4c44c53a88ca42a975694e016de5ec2a5da578
SSDEEP 24576:jpugrePBtmdE11MUk2JcN+4JlIVOX/9P8NW/G5oIpQ/U6472t8C8w4RikVzcbqsF:ogUtYeNyFyHz/ERdDtw5Je
TLSH
T1B756D709B7E12F2BDA56737BC42E1012217AC99917839B13B037DB3E9CF27A919191DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sq.version

Path C:\Users\Admin\AppData\Local\osulazer\current\sq.version
Size 541B
SHA256 dba361963b0b1dad7291ca16120033321a069cb5c0a41cfd43f95daac7d7eed1
MD5 b97ad6ad05a69f6bbd25e34a57ee97e6
SHA1 bb4d54a95092532b2802ca866394c0f6a419aeb2
SHA512 3cdfdd6a9445bb7b0b48acabf9ef67a5371931e8660ad792b8289840f28a17c42b570601cff431a7828aa1e4bb16e967dd80f4efdb696ee2e5a9bdd1acd67fd6
TLSH
T1E7F0C0449000B607D28A97185CE04208F3FB3EAF30D0C498F988AD4D7ADA2CFC87A583
MD5 SHA1 SHA512 TLSH

Submit Download

AuthNative.dll

Path C:\Users\Admin\AppData\Roaming\osu\AuthNative.dll
Size 10.4MB
SHA256 36e033895b8a635151292c19804a112555b78d89cc0df6af1c50d76d4829cdfa
MD5 e217cd24b6701e1b1b80e1b517654030
SHA1 d94df7de748f9faa516e1ed5bdb61e8ec2540dee
SHA512 6724be883b0d4a55860fc1c16e401448cf4acb2230360e821e33d75f7fc2f87c20032c7422b02233c23b497c7d38746a3a35d20b6418724e6cc655fe361080ca
SSDEEP 196608:H7eL7y7gt7K3hqANjxoEKOFl2tZnxCLpHUqOHA16atiWdGUT:a67Ye3h5jiEKsWZxeUq4o6k6UT
TLSH
T1B8B6AEA37AD1E5EAC32ADCF4C852B22F97D77C2A171972838555F3AC9633A143528F04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a1556d0801b3a6b175dda32ef546f0ec812b400499f575c44fccbe9c67f9b1e5

Path C:\Users\Admin\AppData\Roaming\osu\files\a\a1\a1556d0801b3a6b175dda32ef546f0ec812b400499f575c44fccbe9c67f9b1e5
Size 988B
SHA256 a1556d0801b3a6b175dda32ef546f0ec812b400499f575c44fccbe9c67f9b1e5
MD5 27d9765612170a9517f0a5e8b4613f06
SHA1 660d4456ea71bdb48a9ef84cf65cd68d40d05a6e
SHA512 eda5ae2dc0e123418f0e50a51ea651c10c82aa0620d89bbef47cad1c5ef336b43d19604a6281853cc2603dd0c25d445b0195780897f8606beb768132222fa41f
TLSH
T12911CE7E800B4139C38F33553124628371E45179B63BB7E4BE46E94A0221EF9A33926E
MD5 SHA1 SHA512 TLSH

Submit Download

1783743002.runtime.log

Path C:\Users\Admin\AppData\Roaming\osu\logs\1783743002.runtime.log
Size 5KB
SHA256 5e653ca92dd333fa6653392b905c160793a13f7d007f00c186d256e44514dcdd
MD5 e58190ba1a7aa553454f9a4bacacc954
SHA1 481c51a57372b635fb50fe89ef5ba94d975bf20c
SHA512 e908d79d534a161ae02e99c1442b5803214710ee25cc8960a37ed09b55904805565945216dd9a4a8f2023dcff08393c1bac82188c659061f5c1991a261820a79
SSDEEP 96:L1NWdXcO90JOj48UByc48UByUwU6k+9IWyebicRwxXo:2XcO50IWPbicRgXo
TLSH
T1E3B1E5198C7A48D12D41C693E1364EEACBDBF086613CAC683ABD014E275590BDF9D3B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

desktop.ini

Path C:\Users\Admin\Videos\Captures\desktop.ini
Size 190B
SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
MD5 b0d27eaec71f1cd73b015f5ceeb15f9d
SHA1 62264f8b5c2f5034a1e4143df6e8c787165fbc2f
SHA512 7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c
TLSH
T11EC0121892F93224A1728D12BD7460119AB1F4217C16CA9D1380508F08A1601E631B53
MD5 SHA1 SHA512 TLSH

Submit Download

memory/6004-509-0x00007FFC663A0000-0x00007FFC66E05000-memory.dmp

Download

memory/6004-686-0x00007FFC663A0000-0x00007FFC66E05000-memory.dmp

Download