home

osu!install.exe

osu!

Dean Herbert

This is a self-extracting archive and installer. The file has been seen being downloaded from osu.hiroto.eu.
Publisher:
peppy  (signed by Dean Herbert)

Product:
osu!

Description:
osu! installer

Version:
0.0.0.0

MD5:
6286ca5c674ed9029b99aa0c9ea5e1ef

SHA-1:
44ac51662e576a1ae7d9721dc19e7e4272697fc0

SHA-256:
1c4ac3259afccb5b4e05c48f7b4bd18662f056e983dd7fd82f9878ba72d959b5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 10:22:05 AM UTC  (today)

File size:
38.2 MB (40,079,040 bytes)

Product version:
0.0.0.0

Copyright:
Dean Herbert

Original file name:
setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\osu!install.exe

Digital Signature
Signed by:
Dean Herbert

Authority:
COMODO CA Limited

Valid from:
9/27/2012 8:00:00 PM

Valid to:
9/28/2015 7:59:59 PM

Subject:
CN=Dean Herbert, O=Dean Herbert, STREET=41 Gregory Street, STREET=Wembley, L=Perth, S=WA, PostalCode=6014, C=AU

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00FD15503D4AF404C84200F5CCC3C99380

File PE Metadata
Compilation timestamp:
8/26/2008 8:56:30 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
786432:ELD4wudl4ivFYe140J3lFVsHkTlqIe0/rblJXCcbQHeB:W4Fdl4CY2p7VsH+Z/rGcEW

Entry address:
0xA5CE3

Entry point:
E8, 8B, E1, 00, 00, E9, 16, FE, FF, FF, C3, B8, 94, 49, 4B, 00, A3, 38, 99, 4F, 00, C7, 05, 3C, 99, 4F, 00, 90, 40, 4B, 00, C7, 05, 40, 99, 4F, 00, 4E, 40, 4B, 00, C7, 05, 44, 99, 4F, 00, 82, 40, 4B, 00, C7, 05, 48, 99, 4F, 00, F8, 3F, 4B, 00, A3, 4C, 99, 4F, 00, C7, 05, 50, 99, 4F, 00, 0E, 49, 4B, 00, C7, 05, 54, 99, 4F, 00, 0E, 40, 4B, 00, C7, 05, 58, 99, 4F, 00, 78, 3F, 4B, 00, C7, 05, 5C, 99, 4F, 00, 07, 3F, 4B, 00, C3, E8, 9B, FF, FF, FF, E8, C2, EC, 00, 00, 83, 7C, 24, 04, 00, A3, CC, E2, 4F, 00, 74...
 
[+]

Entropy:
7.9778  (probably packed)

Code size:
816 KB (835,584 bytes)

The file osu!install.exe has been seen being distributed by the following URL.

http://osu.hiroto.eu/osu!install.exe

Scan osu!install.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.