Overview

overview

7

Static

static

1

osu!install.exe

windows10-2004-x64

7

osu!install.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    150s
  • max time network
    138s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    24/10/2026, 17:27

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    osu!install.exe
  • Size 4.3MB
  • Sample261024-v1j8dsv1ex
  • SHA256 3adc2d001aacced5f92ba8ae24121980d5e23f5653f37d14cf4765bca1abd9f9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
defense_evasiondiscoveryspywaretrojan

Malware Config

Signatures

  • Identifies Wine through registry keys 2 TTPs 6 IoCs

    Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

    defense_evasion
  • Network Service Discovery 1 TTPs 1 IoCs

    Attempt to gather information on host's network.

    discovery
  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 TTPs 36 IoCs
    defense_evasion
  • Executes dropped EXE 12 IoCs
  • Loads dropped DLL 60 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 26 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 13 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Checks processor information in registry 2 TTPs 4 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies registry class 2 IoCs
  • Modifies system certificate store 2 TTPs 13 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious use of AdjustPrivilegeToken 13 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 12 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\osu!install.exe
    "C:\Users\Admin\AppData\Local\Temp\osu!install.exe"
    1⤵
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Modifies system certificate store
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:2108
    • C:\Users\Admin\AppData\Local\osu!\osu!.exe
      "C:\Users\Admin\AppData\Local\osu!\osu!.exe"
      2⤵
      • Executes dropped EXE
      • Reads the TCP/IP host and domain name from the registry
      • System Location Discovery: System Language Discovery
      • Modifies system certificate store
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:1216
      • C:\Users\Admin\AppData\Local\osu!\osu!.exe
        "C:\Users\Admin\AppData\Local\osu!\osu!.exe"
        3⤵
        • Identifies Wine through registry keys
        • Suspicious use of NtSetInformationThreadHideFromDebugger
        • Executes dropped EXE
        • Loads dropped DLL
        • Reads the TCP/IP host and domain name from the registry
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:4956
        • C:\Users\Admin\AppData\Local\osu!\osu!.exe
          "C:\Users\Admin\AppData\Local\osu!\osu!.exe" -repair
          4⤵
          • Executes dropped EXE
          • Reads the TCP/IP host and domain name from the registry
          • System Location Discovery: System Language Discovery
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of WriteProcessMemory
          PID:4356
          • C:\Users\Admin\AppData\Local\osu!\osu!.exe
            "C:\Users\Admin\AppData\Local\osu!\osu!.exe"
            5⤵
            • Identifies Wine through registry keys
            • Suspicious use of NtSetInformationThreadHideFromDebugger
            • Executes dropped EXE
            • Loads dropped DLL
            • Reads the TCP/IP host and domain name from the registry
            • System Location Discovery: System Language Discovery
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of AdjustPrivilegeToken
            • Suspicious use of WriteProcessMemory
            PID:2156
            • C:\Users\Admin\AppData\Local\osu!\osu!.exe
              "C:\Users\Admin\AppData\Local\osu!\osu!.exe" -repair
              6⤵
              • Executes dropped EXE
              • Reads the TCP/IP host and domain name from the registry
              • System Location Discovery: System Language Discovery
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:4736
              • C:\Users\Admin\AppData\Local\osu!\osu!.exe
                "C:\Users\Admin\AppData\Local\osu!\osu!.exe"
                7⤵
                • Identifies Wine through registry keys
                • Suspicious use of NtSetInformationThreadHideFromDebugger
                • Executes dropped EXE
                • Loads dropped DLL
                • Reads the TCP/IP host and domain name from the registry
                • System Location Discovery: System Language Discovery
                • Suspicious behavior: EnumeratesProcesses
                • Suspicious use of AdjustPrivilegeToken
                • Suspicious use of WriteProcessMemory
                PID:720
                • C:\Users\Admin\AppData\Local\osu!\osu!.exe
                  "C:\Users\Admin\AppData\Local\osu!\osu!.exe" -repair
                  8⤵
                  • Executes dropped EXE
                  • Reads the TCP/IP host and domain name from the registry
                  • System Location Discovery: System Language Discovery
                  • Suspicious use of AdjustPrivilegeToken
                  • Suspicious use of WriteProcessMemory
                  PID:3576
                  • C:\Users\Admin\AppData\Local\osu!\osu!.exe
                    "C:\Users\Admin\AppData\Local\osu!\osu!.exe"
                    9⤵
                    • Identifies Wine through registry keys
                    • Suspicious use of NtSetInformationThreadHideFromDebugger
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Reads the TCP/IP host and domain name from the registry
                    • System Location Discovery: System Language Discovery
                    • Suspicious behavior: EnumeratesProcesses
                    • Suspicious use of AdjustPrivilegeToken
                    • Suspicious use of WriteProcessMemory
                    PID:4416
                    • C:\Users\Admin\AppData\Local\osu!\osu!.exe
                      "C:\Users\Admin\AppData\Local\osu!\osu!.exe" -repair
                      10⤵
                      • Executes dropped EXE
                      • Reads the TCP/IP host and domain name from the registry
                      • System Location Discovery: System Language Discovery
                      • Suspicious use of AdjustPrivilegeToken
                      • Suspicious use of WriteProcessMemory
                      PID:5224
                      • C:\Users\Admin\AppData\Local\osu!\osu!.exe
                        "C:\Users\Admin\AppData\Local\osu!\osu!.exe"
                        11⤵
                        • Identifies Wine through registry keys
                        • Suspicious use of NtSetInformationThreadHideFromDebugger
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • Reads the TCP/IP host and domain name from the registry
                        • System Location Discovery: System Language Discovery
                        • Suspicious behavior: EnumeratesProcesses
                        • Suspicious use of AdjustPrivilegeToken
                        • Suspicious use of WriteProcessMemory
                        PID:5496
                        • C:\Users\Admin\AppData\Local\osu!\osu!.exe
                          "C:\Users\Admin\AppData\Local\osu!\osu!.exe" -repair
                          12⤵
                          • Executes dropped EXE
                          • Reads the TCP/IP host and domain name from the registry
                          • System Location Discovery: System Language Discovery
                          • Suspicious use of AdjustPrivilegeToken
                          • Suspicious use of WriteProcessMemory
                          PID:2304
                          • C:\Users\Admin\AppData\Local\osu!\osu!.exe
                            "C:\Users\Admin\AppData\Local\osu!\osu!.exe"
                            13⤵
                            • Identifies Wine through registry keys
                            • Suspicious use of NtSetInformationThreadHideFromDebugger
                            • Executes dropped EXE
                            • Loads dropped DLL
                            • Reads the TCP/IP host and domain name from the registry
                            • System Location Discovery: System Language Discovery
                            • Suspicious behavior: EnumeratesProcesses
                            • Suspicious use of AdjustPrivilegeToken
                            PID:4696
  • C:\Windows\System32\GameBarPresenceWriter.exe
    "C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
    1⤵
    • Network Service Discovery
    PID:1008
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4116
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
    1⤵
    • Checks processor information in registry
    • Modifies registry class
    PID:4512
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
    1⤵
    • Checks processor information in registry
    • Modifies registry class
    PID:1096

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        5080DC7A65DB6A5960ECD874088F3328_BC00434159DAE8351451CCE9C748F5D7
        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\5080DC7A65DB6A5960ECD874088F3328_BC00434159DAE8351451CCE9C748F5D7
        • Size 2KB
        • SHA256 bc2a68b78dfb66ed39b1aa6dba9cabf2c31b11bee3e7a8f32cfdda7c54740df9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        515195B826B230146D00BC66A056A7F8
        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\515195B826B230146D00BC66A056A7F8
        • Size 20KB
        • SHA256 034e94d045144c71a7034e5001f55b054ebade81894a327262dace7fc739aaf6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        5A6896595A9B5FF7A8254147F2B2367B
        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\5A6896595A9B5FF7A8254147F2B2367B
        • Size 22KB
        • SHA256 e8f98188ac01b7d8032e387c00ddc10c9869b2d1535655dd86032180db4b5acf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        77003E887FC21E505B9E28CBA30E18ED_8ACE642DC0A43382FABA7AE806561A50
        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77003E887FC21E505B9E28CBA30E18ED_8ACE642DC0A43382FABA7AE806561A50
        • Size 2KB
        • SHA256 27eb9336ae221e78498be16914feec6a7b06cb50a25ec345a36eb2914224ab17
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        B2FAF7692FD9FFBD64EDE317E42334BA_2DBE917624E9880FE0C7C5570D56E691
        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B2FAF7692FD9FFBD64EDE317E42334BA_2DBE917624E9880FE0C7C5570D56E691
        • Size 1KB
        • SHA256 17e95d52d772dd9935fe52c59566f8742fdbee09d7c5d06b81e5246a78a226a0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        D2B5168CDD0EBF4C0C8EA1C3A1FAE07F_69320653974E97D8129B19E9D4DB56AA
        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D2B5168CDD0EBF4C0C8EA1C3A1FAE07F_69320653974E97D8129B19E9D4DB56AA
        • Size 509B
        • SHA256 173a00021238c14ba740b8f96851ca29d3e78b43ef3487112c1dc4e86e2aafbf
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        EF7234CDBB1649702229F955C785C39F
        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\EF7234CDBB1649702229F955C785C39F
        • Size 785B
        • SHA256 9e153cc9331fb887cacd6f08cfa3dc5aac7b9b26b4b9cfa75d2ac57288e9142a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        5080DC7A65DB6A5960ECD874088F3328_BC00434159DAE8351451CCE9C748F5D7
        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\5080DC7A65DB6A5960ECD874088F3328_BC00434159DAE8351451CCE9C748F5D7
        • Size 490B
        • SHA256 acf423d3ef29d88057f1f42912757afe83e28a82d682e9e1663f90f326b5302b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        515195B826B230146D00BC66A056A7F8
        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\515195B826B230146D00BC66A056A7F8
        • Size 290B
        • SHA256 fe20eb2cf993372ca6cbe4d004f1110529f0dc015e7b6828e883c9a3e04ddefa
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        5A6896595A9B5FF7A8254147F2B2367B
        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\5A6896595A9B5FF7A8254147F2B2367B
        • Size 290B
        • SHA256 8dd3dc59c92c0561bef7326e05e4ca57f0acf16a387c15aaf506e60a4175cf75
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        77003E887FC21E505B9E28CBA30E18ED_8ACE642DC0A43382FABA7AE806561A50
        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77003E887FC21E505B9E28CBA30E18ED_8ACE642DC0A43382FABA7AE806561A50
        • Size 422B
        • SHA256 80859872d4c5422bbfd9c0a945984d69300d16d6350c62fcc6301d9c50f43ed5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        B2FAF7692FD9FFBD64EDE317E42334BA_2DBE917624E9880FE0C7C5570D56E691
        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B2FAF7692FD9FFBD64EDE317E42334BA_2DBE917624E9880FE0C7C5570D56E691
        • Size 486B
        • SHA256 d92d8c7dfc79a8e71a5f2d704342690a70af4a3519fc8790e723e45ab5502ea1
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        D2B5168CDD0EBF4C0C8EA1C3A1FAE07F_69320653974E97D8129B19E9D4DB56AA
        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D2B5168CDD0EBF4C0C8EA1C3A1FAE07F_69320653974E97D8129B19E9D4DB56AA
        • Size 498B
        • SHA256 a2d0d0d6cd288d68be1c67099703be4a08e0c07a49219495ed2ca1a65520aecd
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        EF7234CDBB1649702229F955C785C39F
        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EF7234CDBB1649702229F955C785C39F
        • Size 308B
        • SHA256 887d782ee5fd183d922da0280309c79399675b4b451615684dd3120b849b0c9f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        auth_state.log
        • Path C:\Users\Admin\AppData\Local\osu!\Logs\auth_state.log
        • Size 4B
        • SHA256 a02a66e5bc17217e28cb78604e6f2124ac623445ca61a23ed096d321c1db0336
        • MD5 SHA1 SHA512
        Submit Download

        osu!auth.log
        • Path C:\Users\Admin\AppData\Local\osu!\Logs\osu!auth.log
        • Size 768B
        • SHA256 1818b6816ac182a71ebd24255cc4d16ea6b6234bbc0fe0823ffa6ebb9b259ffc
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        update.log
        • Path C:\Users\Admin\AppData\Local\osu!\Logs\update.log
        • Size 325B
        • SHA256 1176bd24ef1fcdeecc4e9204058cafb0d51673309e36685c3f254b0d691443ad
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        update.log
        • Path C:\Users\Admin\AppData\Local\osu!\Logs\update.log
        • Size 583B
        • SHA256 6ac55c34c2d3982c33cb9752a9c60ee56aebedea2e1f189be4eccfca13005d4a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        update.log
        • Path C:\Users\Admin\AppData\Local\osu!\Logs\update.log
        • Size 325B
        • SHA256 ff2fffb390f71666b2ddd56a0556a53588f46f7aaa71170cb89c40d98c40c24d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        update.log
        • Path C:\Users\Admin\AppData\Local\osu!\Logs\update.log
        • Size 583B
        • SHA256 6e45745007bd015bef81355681dd2c19e9c35d1a4c800362e4128c29d5421dc3
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        update.log
        • Path C:\Users\Admin\AppData\Local\osu!\Logs\update.log
        • Size 415B
        • SHA256 bb92e593cd83145d5c4eb47cd1e083c1c6220fd5ec46c3e4d3359eed35b46878
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        update.log
        • Path C:\Users\Admin\AppData\Local\osu!\Logs\update.log
        • Size 673B
        • SHA256 9b403d8067a0a85b0c0555362ba7ad1c65cc7fc00c94b1b218fc374f02f8bbc7
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        update.log
        • Path C:\Users\Admin\AppData\Local\osu!\Logs\update.log
        • Size 325B
        • SHA256 b8d7faa29e4de995511a8a76ca97b33e9036070f365c6e189c23b4042f97d80b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        update.log
        • Path C:\Users\Admin\AppData\Local\osu!\Logs\update.log
        • Size 583B
        • SHA256 82ccb8e5574f46b45ae7e37f5e7ed69b26bd1810741c1c05b58c77301ac14cdb
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        update.log
        • Path C:\Users\Admin\AppData\Local\osu!\Logs\update.log
        • Size 415B
        • SHA256 e2c00bee45a326696004a52a7ad1588c514e3b32aecf1f9bb3c3a1f4d21a56af
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        update.log
        • Path C:\Users\Admin\AppData\Local\osu!\Logs\update.log
        • Size 673B
        • SHA256 a1adc06321c862f1e97b4c20044715e8d9ee8efa5981c2bf66fc066068c3b49e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        update.log
        • Path C:\Users\Admin\AppData\Local\osu!\Logs\update.log
        • Size 325B
        • SHA256 33ba0c727eb0559ecd9042c36fa46decd9050dff26ff0ab3d4658ef3e5b997e3
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        update.log
        • Path C:\Users\Admin\AppData\Local\osu!\Logs\update.log
        • Size 583B
        • SHA256 13deecf685553738b691ea889fe66bff1e4a9f2674f77d1e98a34008d3a9252a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        update.log
        • Path C:\Users\Admin\AppData\Local\osu!\Logs\update.log
        • Size 415B
        • SHA256 0199747cdc717374b72230339890b3979ad4e86f0365fa65819b733aca249824
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        update.log
        • Path C:\Users\Admin\AppData\Local\osu!\Logs\update.log
        • Size 673B
        • SHA256 0cb812c3e6483f7f55cd787b87e062aa4d8943da08a50db48fd790b36829e92b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        update.log
        • Path C:\Users\Admin\AppData\Local\osu!\Logs\update.log
        • Size 415B
        • SHA256 f5c558c0a7e218fe17645c155c4e3982adb1a2f3366f825170cbf0c441759ae9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        update.log
        • Path C:\Users\Admin\AppData\Local\osu!\Logs\update.log
        • Size 673B
        • SHA256 c1fb2181703fcd760dbccfa814bc0c1992b3a560e5ee187b6b96889153a87c3a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        update.log
        • Path C:\Users\Admin\AppData\Local\osu!\Logs\update.log
        • Size 325B
        • SHA256 ab32871accc942f77b653cda44eba7a0b19f76a59278ffc82923ef45ff2013b1
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        update.log
        • Path C:\Users\Admin\AppData\Local\osu!\Logs\update.log
        • Size 583B
        • SHA256 2384ac9d86c939f6560858f09cc0af6cb8161ad00ba5cbce1fe953632a24042d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        update.log
        • Path C:\Users\Admin\AppData\Local\osu!\Logs\update.log
        • Size 325B
        • SHA256 cdd4a7c2047557392be544ed259413869f5cd5fddf99c0d11af4062ea8308bca
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        update.log
        • Path C:\Users\Admin\AppData\Local\osu!\Logs\update.log
        • Size 583B
        • SHA256 7b3077616fd282c64a75a4e6c8a7a39f3bbfaf6768a1c8706c2a51e919ce49a5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        update.log
        • Path C:\Users\Admin\AppData\Local\osu!\Logs\update.log
        • Size 4KB
        • SHA256 063049d02f3e517485d84f2052cdea9ef6d119146c46f66554cca0efa79d527f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        update.log
        • Path C:\Users\Admin\AppData\Local\osu!\Logs\update.log
        • Size 370B
        • SHA256 40b7c45fac97dce6466b23ba9ee0b7d1d5183ee4e7e6189a8472892a95efcc4b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        update.log
        • Path C:\Users\Admin\AppData\Local\osu!\Logs\update.log
        • Size 3KB
        • SHA256 0e8807cc177899b46788f6f56426d3a8900a145dfa553288905e6ad53790e1ec
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        update.log
        • Path C:\Users\Admin\AppData\Local\osu!\Logs\update.log
        • Size 90B
        • SHA256 35782ee64a10eed84a8b92c6fe1bb7608f77140ebe65de1cc9997f033f4f58ef
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        update.log
        • Path C:\Users\Admin\AppData\Local\osu!\Logs\update.log
        • Size 415B
        • SHA256 1993bfec97b7b4e78d44fcb69708661a021af8f3f41f7116587428b1171852b6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        update.log
        • Path C:\Users\Admin\AppData\Local\osu!\Logs\update.log
        • Size 673B
        • SHA256 296ae32492153b9228d2b6eab9c01825cc8ce1093f0f55228b75986b1592b561
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        update_success.log
        • Path C:\Users\Admin\AppData\Local\osu!\Logs\update_success.log
        • Size 6KB
        • SHA256 dbce19b8dd8e30a5a4fec2ca846594ba4f63a0031c2d950f89cebadf6a8ead3f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.Ink.dll
        • Path C:\Users\Admin\AppData\Local\osu!\_pending\Microsoft.Ink.dll
        • Size 456KB
        • SHA256 1081255de41aafd51bc8f4e4404ef02209e59625ae65fa926657df5690716c5d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OpenTK.dll
        • Path C:\Users\Admin\AppData\Local\osu!\_pending\OpenTK.dll
        • Size 4.2MB
        • SHA256 b415f3e061d9758316074dcbf31d6dba48cb0b89405254db94ead0e43ed88511
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        avcodec-51.dll
        • Path C:\Users\Admin\AppData\Local\osu!\_pending\avcodec-51.dll
        • Size 4.2MB
        • SHA256 e512fe71775f767285cfb3310d8f1ac042639ab3d1a02ca3675b82cfd3cbc702
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        avformat-52.dll
        • Path C:\Users\Admin\AppData\Local\osu!\_pending\avformat-52.dll
        • Size 711KB
        • SHA256 b155e2bfce3adbbc45d01ec991160ab4fab7e8d33a0ab835463da860d3693867
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        avutil-49.dll
        • Path C:\Users\Admin\AppData\Local\osu!\_pending\avutil-49.dll
        • Size 77KB
        • SHA256 e51523f179a8ab8101eaa3e587c5e1dfe6c19636ecfa582896833f06d2e79064
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        bass.dll
        • Path C:\Users\Admin\AppData\Local\osu!\_pending\bass.dll
        • Size 125KB
        • SHA256 67766e574baa86eb8317623acc2957e8e28944bb801a8c10a0fa9d29fdb4cfd3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        bass_fx.dll
        • Path C:\Users\Admin\AppData\Local\osu!\_pending\bass_fx.dll
        • Size 50KB
        • SHA256 81111a1cb6f8f362cf232e21098c563fe1409160300f2a254f2a1762e5d4db04
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        d3dcompiler_47.dll
        • Path C:\Users\Admin\AppData\Local\osu!\_pending\d3dcompiler_47.dll
        • Size 3.3MB
        • SHA256 efbdbbcd0d954f8fdc53467de5d89ad525e4e4a9cfff8a15d07c6fdb350c407f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libEGL.dll
        • Path C:\Users\Admin\AppData\Local\osu!\_pending\libEGL.dll
        • Size 146KB
        • SHA256 041a631d114e45a11c43efe3b7712a10ce8052cf4b313c7f4577a5b9adb78072
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libGLESv2.dll
        • Path C:\Users\Admin\AppData\Local\osu!\_pending\libGLESv2.dll
        • Size 3.2MB
        • SHA256 cbfc536b80405da7b5c37c97fceaf2310daf58d78c806140367b8f513352342f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        osu!auth.dll
        • Path C:\Users\Admin\AppData\Local\osu!\_pending\osu!auth.dll
        • Size 15.2MB
        • SHA256 d30b1d334a8b2d9e833e48a657ff1647a74f96b49d296522a4979428db1bdc22
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        osu!gameplay.dll
        • Path C:\Users\Admin\AppData\Local\osu!\_pending\osu!gameplay.dll
        • Size 30.4MB
        • SHA256 ba3467a8db908d81a0729f78fdc5c8f1d1595d3da4e5a9a34be9a16e06da9f87
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        osu!seasonal.dll
        • Path C:\Users\Admin\AppData\Local\osu!\_pending\osu!seasonal.dll
        • Size 3.5MB
        • SHA256 27decc7e0c959078325eb800b04626d6b9498b33cf118850c0e7b78dea470500
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        osu!ui.dll
        • Path C:\Users\Admin\AppData\Local\osu!\_pending\osu!ui.dll
        • Size 24.8MB
        • SHA256 22e041674931161e2c2c15241fb6c5f3125f8d57e4660ef7c0b7fb64449253c7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pthreadGC2.dll
        • Path C:\Users\Admin\AppData\Local\osu!\_pending\pthreadGC2.dll
        • Size 75KB
        • SHA256 b18c8437663002e4a4f06c4c1b7bec71fe13e5e6bbb927c68a273de02a5c690f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        osu!.Admin.cfg
        • Path C:\Users\Admin\AppData\Local\osu!\osu!.Admin.cfg
        • Size 4KB
        • SHA256 2f00633541866bea523b4d1d19f3dbc5beb0463c5af267b1498626cdbcafe27b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        osu!.cfg
        • Path C:\Users\Admin\AppData\Local\osu!\osu!.cfg
        • Size 49B
        • SHA256 f11b2f84271b332b901d6394fd406553d1687af9e265b9a2757138f8ee31938e
        • MD5 SHA1 SHA512
        Submit Download

        osu!.cfg
        • Path C:\Users\Admin\AppData\Local\osu!\osu!.cfg
        • Size 878B
        • SHA256 44046381a2d4cbe784261c675fb9345d2e988b877f8d50c57193baea8a4931da
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        osu!.cfg
        • Path C:\Users\Admin\AppData\Local\osu!\osu!.cfg
        • Size 856B
        • SHA256 d037fe50380998945e319279b06903c9336c304c0b9b47e8e89d3292c76fb6b4
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        osu!.exe
        • Path C:\Users\Admin\AppData\Local\osu!\osu!.exe
        • Size 4.3MB
        • SHA256 3adc2d001aacced5f92ba8ae24121980d5e23f5653f37d14cf4765bca1abd9f9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        desktop.ini
        • Path C:\Users\Admin\Videos\Captures\desktop.ini
        • Size 190B
        • SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        memory/720-594-0x000000000BBD0000-0x000000000BBE3000-memory.dmp
        Download

        memory/720-614-0x000000000BCE0000-0x000000000BCF0000-memory.dmp
        Download

        memory/720-589-0x000000000F3B0000-0x000000000F5C0000-memory.dmp
        Download

        memory/720-615-0x000000000BCE0000-0x000000000BCF0000-memory.dmp
        Download

        memory/720-595-0x000000000BBD0000-0x000000000BBE3000-memory.dmp
        Download

        memory/720-620-0x0000000074770000-0x0000000074F2C000-memory.dmp
        Download

        memory/720-627-0x000000000BBD0000-0x000000000BBE3000-memory.dmp
        Download

        memory/720-579-0x000000006F6E0000-0x000000007061C000-memory.dmp
        Download

        memory/720-630-0x000000006F6E0000-0x000000007061C000-memory.dmp
        Download

        memory/1216-293-0x0000000074770000-0x0000000074F2C000-memory.dmp
        Download

        memory/1216-31-0x0000000074770000-0x0000000074F2C000-memory.dmp
        Download

        memory/1216-39-0x0000000074770000-0x0000000074F2C000-memory.dmp
        Download

        memory/1216-41-0x0000000074770000-0x0000000074F2C000-memory.dmp
        Download

        memory/1216-275-0x0000000074770000-0x0000000074F2C000-memory.dmp
        Download

        memory/1216-50-0x000000000B180000-0x000000000B6AC000-memory.dmp
        Download

        memory/1216-66-0x000000000B6B0000-0x000000000BA0B000-memory.dmp
        Download

        memory/1216-292-0x0000000074770000-0x0000000074F2C000-memory.dmp
        Download

        memory/1216-335-0x0000000074770000-0x0000000074F2C000-memory.dmp
        Download

        memory/1216-65-0x000000000AD20000-0x000000000AD42000-memory.dmp
        Download

        memory/2108-1-0x0000000000500000-0x0000000000956000-memory.dmp
        Download

        memory/2108-2-0x0000000005A20000-0x0000000005FDA000-memory.dmp
        Download

        memory/2108-3-0x0000000005460000-0x00000000054F2000-memory.dmp
        Download

        memory/2108-21-0x0000000074770000-0x0000000074F2C000-memory.dmp
        Download

        memory/2108-15-0x00000000060A0000-0x00000000060DC000-memory.dmp
        Download

        memory/2108-16-0x0000000074770000-0x0000000074F2C000-memory.dmp
        Download

        memory/2108-17-0x0000000006B70000-0x0000000006B7A000-memory.dmp
        Download

        memory/2108-0-0x0000000074782000-0x0000000074783000-memory.dmp
        Download

        memory/2108-20-0x0000000074770000-0x0000000074F2C000-memory.dmp
        Download

        memory/2108-19-0x0000000074782000-0x0000000074783000-memory.dmp
        Download

        memory/2108-32-0x0000000074770000-0x0000000074F2C000-memory.dmp
        Download

        memory/2108-18-0x0000000074770000-0x0000000074F2C000-memory.dmp
        Download

        memory/2156-483-0x000000006F710000-0x000000007064C000-memory.dmp
        Download

        memory/2156-542-0x000000006F710000-0x000000007064C000-memory.dmp
        Download

        memory/2156-529-0x0000000074770000-0x0000000074F2C000-memory.dmp
        Download

        memory/2156-507-0x000000000BAA0000-0x000000000BAB0000-memory.dmp
        Download

        memory/2156-506-0x000000000BAA0000-0x000000000BAB0000-memory.dmp
        Download

        memory/2156-502-0x000000000B990000-0x000000000B9A3000-memory.dmp
        Download

        memory/2156-494-0x000000000F460000-0x000000000F670000-memory.dmp
        Download

        memory/4356-456-0x000000000B8B0000-0x000000000BC0B000-memory.dmp
        Download

        memory/4416-707-0x0000000074770000-0x0000000074F2C000-memory.dmp
        Download

        memory/4416-667-0x000000006F710000-0x000000007064C000-memory.dmp
        Download

        memory/4416-677-0x000000000EB70000-0x000000000ED80000-memory.dmp
        Download

        memory/4416-682-0x000000000B330000-0x000000000B343000-memory.dmp
        Download

        memory/4416-683-0x000000000B440000-0x000000000B450000-memory.dmp
        Download

        memory/4416-684-0x000000000B440000-0x000000000B450000-memory.dmp
        Download

        memory/4416-717-0x000000006F710000-0x000000007064C000-memory.dmp
        Download

        memory/4696-841-0x000000006F6E0000-0x000000007061C000-memory.dmp
        Download

        memory/4696-881-0x0000000074770000-0x0000000074F2C000-memory.dmp
        Download

        memory/4696-859-0x000000000B9F0000-0x000000000BA00000-memory.dmp
        Download

        memory/4696-856-0x000000000B8E0000-0x000000000B8F3000-memory.dmp
        Download

        memory/4696-851-0x000000000EF80000-0x000000000F190000-memory.dmp
        Download

        memory/4956-378-0x000000000E6E0000-0x000000000E8F0000-memory.dmp
        Download

        memory/4956-351-0x0000000006760000-0x00000000067B6000-memory.dmp
        Download

        memory/4956-431-0x000000000A9F0000-0x000000000AA03000-memory.dmp
        Download

        memory/4956-436-0x000000006F990000-0x00000000708CC000-memory.dmp
        Download

        memory/4956-422-0x0000000074770000-0x0000000074F2C000-memory.dmp
        Download

        memory/4956-382-0x000000000A9F0000-0x000000000AA03000-memory.dmp
        Download

        memory/4956-401-0x000000000AC50000-0x000000000AC60000-memory.dmp
        Download

        memory/4956-389-0x000000000ACB0000-0x000000000AD24000-memory.dmp
        Download

        memory/4956-363-0x000000006F990000-0x00000000708CC000-memory.dmp
        Download

        memory/4956-384-0x000000006E620000-0x000000006E677000-memory.dmp
        Download

        memory/4956-366-0x000000000DB50000-0x000000000DF7C000-memory.dmp
        Download

        memory/4956-367-0x000000000DF80000-0x000000000E2DB000-memory.dmp
        Download

        memory/5496-764-0x000000000E690000-0x000000000E8A0000-memory.dmp
        Download

        memory/5496-804-0x000000006F710000-0x000000007064C000-memory.dmp
        Download

        memory/5496-794-0x0000000074770000-0x0000000074F2C000-memory.dmp
        Download

        memory/5496-772-0x000000000AF60000-0x000000000AF70000-memory.dmp
        Download

        memory/5496-771-0x000000000AF60000-0x000000000AF70000-memory.dmp
        Download

        memory/5496-770-0x000000000AF60000-0x000000000AF70000-memory.dmp
        Download

        memory/5496-769-0x000000000AE50000-0x000000000AE63000-memory.dmp
        Download

        memory/5496-754-0x000000006F710000-0x000000007064C000-memory.dmp
        Download