home

osume.exe

Updater

Dean Herbert

Publisher:
Dean Herbert  (signed and verified)

Product:
Updater

Version:
1.0.0.0

MD5:
c99710c67fcf9434edaee80b6e07bfab

SHA-1:
d267e7fb105a221a5f455536d4acc1cc3b22f0ea

SHA-256:
26fbe34615e7319a312b95397789eb8b47547765d17376f32d1a5c2a9d8fbdbe

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/29/2024 1:55:56 PM UTC  (today)

File size:
292.1 KB (299,080 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2007

Original file name:
osume.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\osu!\osume.exe

Digital Signature
Signed by:
Dean Herbert

Authority:
COMODO CA Limited

Valid from:
9/28/2012 8:00:00 AM

Valid to:
9/29/2015 7:59:59 AM

Subject:
CN=Dean Herbert, O=Dean Herbert, STREET=41 Gregory Street, STREET=Wembley, L=Perth, S=WA, PostalCode=6014, C=AU

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00FD15503D4AF404C84200F5CCC3C99380

File PE Metadata
Compilation timestamp:
3/17/2014 7:14:12 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:bdTPiUdnN0/VIIqYfVYgS7V06+l1gv7gcV:bdJdnN0/GcS7yBS7gg

Entry address:
0x3398F

Entry point:
FF, 25, 7F, 39, 43, 00, 00, 00, 5F, 43, 6F, 72, 45, 78, 65, 4D, 61, 69, 6E, 00, 6D, 73, 63, 6F, 72, 65, 65, 2E, 64, 6C, 6C, 00, 3D, 55, 00, 00, CE, CA, EF, BE, 01, 00, 00, 00, 91, 00, 00, 00, 6C, 53, 79, 73, 74, 65, 6D, 2E, 52, 65, 73, 6F, 75, 72, 63, 65, 73, 2E, 52, 65, 73, 6F, 75, 72, 63, 65, 52, 65, 61, 64, 65, 72, 2C, 20, 6D, 73, 63, 6F, 72, 6C, 69, 62, 2C, 20, 56, 65, 72, 73, 69, 6F, 6E, 3D, 32, 2E, 30, 2E, 30, 2E, 30, 2C, 20, 43, 75, 6C, 74, 75, 72, 65, 3D, 6E, 65, 75, 74, 72, 61, 6C, 2C, 20, 50, 75...
 
[+]

Entropy:
6.6672

Code size:
209 KB (214,016 bytes)

The file osume.exe has been discovered within the following programs.

Hi-Rez Studios Authenticate and Update Service  by Hi-Rez Studios
Hi-Rez Studios Authenticate and Update Service is the updater program which runs with Windows (in the background as a service) and automatically starts up when your computer boots.
www.Hi-RezStudios.com
27% remove it
League of Legends  by Riot Games
League of Legends (LoL) is a multiplayer online battle arena video game developed and published by Riot Games for Microsoft Windows. Players are formed into 2 even teams of Champions, 3v3 or 5v5. League of Legends is a session-based game.
www.RiotGames.com
12% remove it
Muvic Smartbar Engine  by Pinwid Ltd.
This adware program injects advertisements with its affiliate ad providers in order to serve a number of ad types including banner, inline text links and popups.
82% remove it
osu!  by peppy
osu.ppy.sh
About 1% of users remove it
ScholarWord  by Xumbrus LLC
www.xumbrus.com
About 9% of users remove it
Shopping Helper Smartbar Engine  by ReSoft Ltd.
Shopping Helper Smartbar is a potentially unwanted web browser extension that is ad-supported and will display various popup and banner ads as well as modify the user's web browser search and home page settings.
snap.do
69% remove it
Vegas Pro 9.0  by Sony Corporation
www.sonycreativesoftware.com
9% remove it
Warframe  by Digital Extremes
www.warframe.com
About 6% of users remove it
 
Powered by Should I Remove It?

The file osume.exe has been seen being distributed by the following URL.

http://osu.ppy.sh/.../osume.exe

Scan osume.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.