981bfc637c66b543ce8bc32583e0735ec7ef28f0ee6563454e001aabfaa81905

Analysis

max time kernel
145s
max time network
156s
platform
windows7_x64
resource
win7-20220414-en
submitted
13-07-2022 20:49

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Launcher.exe
Size

18.5MB
MD5

04ebf8e82c7c11c177ca171804f3927e
SHA1

97e1f8cdee9272a2b1089fbf737d3edc2831b7e1
SHA256

0f6ee5b33ab15669bd1725b10d0c4115c310fd0ca4bc2698a6d04335749b3e1f
SHA512

dfb7dfe3e86a34dbde05243395744abc1e3c2c2fbcb6a8f427a74e2fe868869c70657ce18eb366a5117b2180b55b1701e2362fb46c832087520188dc44fa0768

Score

8^/10

Malware Config

Signatures

Executes dropped EXE 2 IoCs

pid	Process
1108	Patcher.exe
1124	UnityCrashHandler64.exe

Loads dropped DLL 4 IoCs

pid	Process
1280	Launcher.exe
1108	Patcher.exe
1108	Patcher.exe
1108	Patcher.exe

Modifies system certificate store 2 TTPs 8 IoCs

Install Root Certificate

T1130

Modify Registry

T1112

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 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	Patcher.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\317A2AD07F2B335EF5A1C34E4B57E8B7D8F1FCA6	Launcher.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\317A2AD07F2B335EF5A1C34E4B57E8B7D8F1FCA6\Blob = 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	Launcher.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\317A2AD07F2B335EF5A1C34E4B57E8B7D8F1FCA6\Blob = 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	Launcher.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\317A2AD07F2B335EF5A1C34E4B57E8B7D8F1FCA6\Blob = 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	Launcher.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A	Patcher.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 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	Patcher.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 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	Patcher.exe

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
1280	Launcher.exe

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
1280	Launcher.exe

Suspicious use of AdjustPrivilegeToken 4 IoCs

description	pid	Process
Token: 33	520	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	520	AUDIODG.EXE
Token: 33	520	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	520	AUDIODG.EXE

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
1280	Launcher.exe
1280	Launcher.exe
1280	Launcher.exe
1280	Launcher.exe
1280	Launcher.exe
1108	Patcher.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 1280 wrote to memory of 1108	1280	Launcher.exe	27
PID 1280 wrote to memory of 1108	1280	Launcher.exe	27
PID 1280 wrote to memory of 1108	1280	Launcher.exe	27
PID 1108 wrote to memory of 1124	1108	Patcher.exe	28
PID 1108 wrote to memory of 1124	1108	Patcher.exe	28
PID 1108 wrote to memory of 1124	1108	Patcher.exe	28

C:\Users\Admin\AppData\Local\Temp\Launcher.exe
"C:\Users\Admin\AppData\Local\Temp\Launcher.exe"
1⤵
- Loads dropped DLL
- Modifies system certificate store
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1280
- C:\Users\Admin\AppData\Local\Temp\patcher\Patcher.exe
  C:\Users\Admin\AppData\Local\Temp\patcher\Patcher.exe --installdir C:/Users/Admin/AppData/Local/Temp/app --lockfile C:/Users/Admin/AppData/Local/Temp/.lock --secret Of+X/zP/O/+P/4//Of+T/5X/M/+d/5//l/89/5P/mf89/zP/n/89/z3/m/89/z3/l/83/5H/Of+Z/z3/lf+d/w== --online
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Modifies system certificate store
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:1108
- - C:\Users\Admin\AppData\Local\Temp\patcher\UnityCrashHandler64.exe
    "C:\Users\Admin\AppData\Local\Temp\patcher\UnityCrashHandler64.exe" --attach 1108 1052672
    3⤵
    - Executes dropped EXE
    PID:1124

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x550
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:520

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

T1130

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\patcher\Mono\EmbedRuntime\mono.dll

Filesize
2.5MB

MD5
d826d1c2dc1d33ff80267ba54a499fa1

SHA1
87ee0353433f335c1a7b6451e65efffb01026158

SHA256
ba2735ab73a45775bfdf471d43bcfe09361363506d6a0cffa360b2594132c78b

SHA512
c7b1272dadcc6d25c701983af06e1f0e226a4f8a37a8f258d26e294157e370a5ea666651e3263be5f959092de1c1315a8a5f5f8ed3b81f3bb063398b97e2b52f

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Mono\etc\mono\config

Filesize
1KB

MD5
f95c345c1c53b820487f6b72e62d5485

SHA1
957e4e50e74c50347af92abf240c2c7aab3f3f79

SHA256
b585c70c70c88b3e03489361558f5d711c2ef71df9baaf37d92dbf95fbf6cd92

SHA512
6b06434d07ee51be064a3efdca65b73e6c8e7560b43fb61633b08c7d2a0d792fe0670e57088c1dabd23929e0b7f7a27f65f503f2b640587042c8bbe98946368b

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher.exe

Filesize
635KB

MD5
0481df324c7f054f14ea6dfaa3f26db5

SHA1
deca19b227fa46affde869f935810e9ed1a3e07f

SHA256
301e71f35024c4f3f70929ff48c508d00a092f3be46d0bcbee504ce00881100d

SHA512
9ff9dc32d34f805935aafe2bac91356f3ff35e207464892dbf3c29f62db96b55e39bc75dad104be0d9a784283390a6fa43ff1da52f15bb7d6e69e1f7e0524339

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher.exe

Filesize
635KB

MD5
0481df324c7f054f14ea6dfaa3f26db5

SHA1
deca19b227fa46affde869f935810e9ed1a3e07f

SHA256
301e71f35024c4f3f70929ff48c508d00a092f3be46d0bcbee504ce00881100d

SHA512
9ff9dc32d34f805935aafe2bac91356f3ff35e207464892dbf3c29f62db96b55e39bc75dad104be0d9a784283390a6fa43ff1da52f15bb7d6e69e1f7e0524339

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.AIModule.dll

Filesize
41KB

MD5
bd4673f05f3c953a25022c0b1cf414b8

SHA1
3f7530453feecb09f2a290d57c0b5ae18965dfb2

SHA256
b1da9d28c0cfd888b82d4ebeae413d2dc896894be0127aad425e5a013a850ec1

SHA512
a83d68bb3778b663add7c6972bf5c00a2064cdcb094604d0c0472288ef02396eb9d4f01754c11c2918cafcb538ff58884dd75a02d61accd1acc3b05393f4a3e3

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.ARModule.dll

Filesize
12KB

MD5
6b78ff1a02fcde27eb26d91084db225c

SHA1
d814a52287dc0b5fc0cac2c304424e9707979050

SHA256
26658dde476c8a01c4084be41cbada3e368cb0dccc0b3fabf7be28b1e82a03fe

SHA512
c2b90ab43905986e99df32beb03471dce785da8c40f0ee3803a67b778ccdcf2b593d5279dfba758d41a6ebde34d9f6d7dccaf73260696d825efd4573f0be9746

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.AccessibilityModule.dll

Filesize
11KB

MD5
f00b4d28eb3c6e6e05ee78d65e1dbc38

SHA1
53e76244fe2c4d0be980c8050104853a65721e4f

SHA256
1bae92820cc1fa9064e40741e7c2fa77695f7bb17591b859022571a667bc19a4

SHA512
b9ef92cbaeade886e2d4b861c236319128a9b19d07f9479b4b1fbc4d0ed2d9efa77538d37f9003d53c97defb126417a4432694a6824a86fb70bd07910f90d27e

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.AnimationModule.dll

Filesize
134KB

MD5
f7e08d0d41a7c8788ef4bbabf529aab4

SHA1
bdf28cd86e80fb4a64d0ada4bbdc608c45442074

SHA256
3d0c210c64d1edc17a61bb5bef42bd54061213c07dafb2743dfb58e3d6985e85

SHA512
07bc7a46287bed09e1d7c9dae7c2e16818344f735a99f893dd9ba618600b4991e95e6573d8c6ea184f276b00feab577814b71bcda70077f3a0cf0665d6c0fcff

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.AssetBundleModule.dll

Filesize
20KB

MD5
5c7b06f11c7c2110e24ac1743537161a

SHA1
708fa044f948e8f3dee2e657fcd77e1c042865d9

SHA256
0d19ad51169821736c411e5dfba7a1f17de92897561de596a650d5a631e7daca

SHA512
dc63988d03477cd7fb78e1394950ca0c1efec90436327120935b6371942cbdded95a669fb695118cfee80e34d34e3a7fc23abea964f0cf0484792cc1e185c0e7

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.AudioModule.dll

Filesize
57KB

MD5
ba75558a156f78fbad78c931f2fd4b58

SHA1
e0764dc0be0909ea4e3914017d03bee85c49c469

SHA256
43f60142f131dfeda0a6bc4c867cf3099fee22107a7eed81d111047c5df71395

SHA512
9f830abefbcf6cc71fa774eae59ccbaaedc1ec985a574398d9b6e49eee5645e49691cd75e75f76fbf5f2dd54b07a8af733634334f2041ec98c0f5c7a534f8d00

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.BaselibModule.dll

Filesize
8KB

MD5
8037e346f6345dc634e4a2978396422a

SHA1
298089253c694e7a9fbf0c3d3e3d03e913fe9608

SHA256
78bd4c91a06bc7e5b5794389f4ec0e0803f548f9df582594a19e63980dec652d

SHA512
887279510706f85367fd4784540820ce5975245035502429c1f7bec4e6642b85166f8905212986baecc3589c26042372cf916a77b2cd703fb6f7d4934fec9465

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.ClothModule.dll

Filesize
14KB

MD5
8b23423958a851d386fb1700e0a23ee5

SHA1
c2ca23f36ac8e0127490cb549c6e7526418ef9fb

SHA256
c8f6a15874dfd3f47288d0b270f18930fd8f473c381cfccd19967afd3b036c95

SHA512
05e42dc95b1dce8f4c494a23504909ea1ee9f0c655e3ab88acb57dbf88aa3ad2a41c58418673ed210817b8f7569bee6b5cc69a9da6b112c5c65d1a7c1b581721

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.ClusterInputModule.dll

Filesize
9KB

MD5
1157635e8c821acc0980634ebfe99bf6

SHA1
b782dc2f2635c4ab230c42804090a3c5c43ca95a

SHA256
8bbee5536ce442e0435bbe082ec9c592ebaf204d24feaeb2b8e18d8fb097a141

SHA512
67658f95abbb0e32e0af600e19571194f631aa54c17da9102e55c5b6105a47f051e66afeea0f4f60f17ad642cc3a1fb7ab1168b234d1cdaaf85ac7c90b456d3e

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.ClusterRendererModule.dll

Filesize
8KB

MD5
d5538e7e4d0699931bc59df73bc5bc12

SHA1
95127d8c057c81af6201595104dd05180ffbaebf

SHA256
06abbdba3a0b7ba0891b9b63ce48f9734da7c714f0ffea9d0e7714ab26bda7f2

SHA512
4e32e351dc1177b5dc30009d6fd9ec5bbe1ccaf4a4c40c2c0a728246ee16755f95088f627788b86ce914bf5871388b820e310e1f50fbecbb8b975697d89329d9

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.CoreModule.dll

Filesize
831KB

MD5
3e9dd6c4f23b53a96d7777bc57108b0e

SHA1
5e40714d049373e15055eae8f7d2e9accd4ce14d

SHA256
3670754bf8aaacc634b50cbe565ea38712a244b643a1e2e214a019b737024dca

SHA512
7fc523497c58a1717ed7ce742130f3bdca8d37ed9362c711fac95adea24e49180b440c2d7a76547c960cd471c5115d0313a138993dd03cd7f2f8cd4e6c6cacc4

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.CrashReportingModule.dll

Filesize
9KB

MD5
35724caaec5a6b5c81a4c06db5e05be2

SHA1
460597033c7dfca940a823190f9821620b70444c

SHA256
4c57e2025795a5c31470ff994512f414f53cded833b984e024e4553b85704702

SHA512
c6cdd867613386e40c93e2f91197be7bde8a337df6d317e302f595ea899f465dac2733f6f7d3510c53cf6fd9b07f32e12933581fbec6e163674db24e246a3869

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.DirectorModule.dll

Filesize
12KB

MD5
8e0221abc1e1e665d99cc9173f562a50

SHA1
01f80e6f74f196e48be01feb8ab4c25978609a5f

SHA256
8fab0d579ac62e9c81eb31d85bb92c9dd5ebfccdfd683021057f9cc7116f3e79

SHA512
cd6043f38f9d13ab58d0a64c42c78969e694644fe6839da2c82264824cb6cbcab9ff7f104fbcc08bb3680af57d79479161a4a3fd8963da8e342fba0982742b92

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.FileSystemHttpModule.dll

Filesize
8KB

MD5
b2dd5fcea0f99e3ebd3e529cd5c110e2

SHA1
51dea888e8735f09a9dbc63a3c18b3eb6298c694

SHA256
a4b0e809c6083e585543e6dcd744551adb273564a7c362c27e411a37c7f84b53

SHA512
bc3f2c233645e2fd7a83397c35eab6fd37979aaa7dc3418c815a4db7a3362dc1817c62e9410f8ba72ad4d1397170ff3481879fc7133f74cb4bb2c6e3d5006db5

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.GameCenterModule.dll

Filesize
25KB

MD5
20d56d9e1915312879bb336f7bc139d9

SHA1
056da73ef87f72d0f5a896c7af582b3c7592e7f9

SHA256
febc09b16ffc8c60abbb328c290cb7f6c3a391872b4b6b9efc71470531f21ecd

SHA512
6941e33dd706267c32940ca08d0fcc0e8f2b5f1cc50cfc8da89f4313d6b79473393f5fc1743c6d53f4fe4a6314f07e81cbe40db0be4f491d439144ab7282d2f0

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.GridModule.dll

Filesize
13KB

MD5
de79c926754687b06d0dda3be949d211

SHA1
7cbd19e07cfbe1bcb411ec64ce26688da4d079eb

SHA256
9a7d9420c235cda6f58b08a251bc7a08c4ca3c6eb6acf1222800070efba23f69

SHA512
7ff767f05235e88eae057d5366d455656b54a3267ad046926b9b904e442bd81bf46e0548f97c964f5f94c37cbd36d26ae62ac065716c5eb10cc5bc5e2e4e1dd8

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.HotReloadModule.dll

Filesize
8KB

MD5
cc219d0e709fc442fe1ae441ea7642e3

SHA1
babb91d584c6b3e31d5952b430ee517f3b20bebf

SHA256
a84ce43c2b8d9b049fbf43ae5b44a913e5db0b3c2cc2ecfee22b28fc133a8f96

SHA512
5eff1dfdf0e6ba7d4f813c378ee46dd6bb4ed2cac6a0e06d76b3f04d2a94dc78cf0def74c9c8b16b02d394b01df79cb097c5a85f2429a7bbbb178b3ac2b9849c

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.IMGUIModule.dll

Filesize
143KB

MD5
1c9470b836f090df6258c9df2e48e827

SHA1
360fafaacc5ff6cdd93018f02a9a5a6212eaf3ef

SHA256
095f5b06cd67ae616afaaa6a1a768e5cf840df7140bc279e26b21438b5ed877f

SHA512
310ee701e90af6b839d480be135d7d6cece944080edcb7ed35cdcd204466127dab270c2bd7bc8bb747d1691b14d16e5ed1fba24e55d3ebf2dd5108a974bec5e0

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.ImageConversionModule.dll

Filesize
9KB

MD5
fae5abcfac04ef22a3731aebc5fa299b

SHA1
302566fd8cb4c84712b7920e7a260ad3018b222b

SHA256
37b6b15d45a576483cbd6b8741d6406f4e4e86b2867c4340b53b09dc1c00bff6

SHA512
ed34071d53c7f44a22ca213c91d229a7e311fb9614dc438cdac15e745d0d0cf638a1a6a1fb0e602d03d0a9ba9844b48ea02ca9bb330d82120591a9ceb084e211

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.InputModule.dll

Filesize
11KB

MD5
fe1037f476878272d866f12882a50150

SHA1
d3112c3d545bd8c490fbe6a4c12e9a9edc1f948e

SHA256
0475e206794166a336be6764b97cafbe09e252df97b96ee44f7e1108333a5a40

SHA512
8c0d26f579eb463087df5b7d1b6251b9af14525b2a507598859fb7a17f102448f6d24a8bb4cd57c96a1aeb2e6b42e4b5fa1aaa1c5957ae2de5044a6769f2ac55

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.JSONSerializeModule.dll

Filesize
10KB

MD5
4d445686a2e69d5f79cbcd100b058e69

SHA1
b1bfc617a9038b6f7e7ce503f026e34d26b87a9b

SHA256
f1d5379d029c3d474e63eb2d69aa685135c619fef3735e4cfe2f00cc48e9851b

SHA512
3a159ae54a75be5cd4c2aeeb9b5f1ac2930998814864e6dc4d814e2ada6b9361cf556d1ac864975cda63324cf2a6a9418906b1ea33642427dab76a71ac567ecc

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.LocalizationModule.dll

Filesize
9KB

MD5
b5813da35fc00856f4f926e32c8d799c

SHA1
07d85a357843b045ffc70408717255910b480d69

SHA256
be6e9935ae3436c191f735c77e35170ed5f6249a2fa0870f43a9e46e0adf4928

SHA512
1ef229f70462fd0d7b4be44ed2ee08727ae5a11be940807f8e8579d3d0bc2ccdd87d477445b443bef18268f523ba743156965d8090fc4c9c280dd59d9d06aa2e

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.ParticleSystemModule.dll

Filesize
125KB

MD5
66d6195fe2e4d77af88e93c3d58fbf62

SHA1
181255c2bc5c3e64cae5feaa5053f83f195d4a9d

SHA256
fefa536c24f527421f36c143465b96277e84cbbe15ea51aa09c33d1b3a576259

SHA512
f8d4094e2a85974910d830bee68d857216718a12c993d06763e0df47a878cf4e4a2fa16bb5c183cd9d9cd3b81d6650032e96a9515e444de186e076d4143a711d

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.PerformanceReportingModule.dll

Filesize
8KB

MD5
255d5bc915f622d00fc36c7362d9e073

SHA1
c42b6f50d0521f0da4bf0b733b3d7e648e4b050b

SHA256
5eaaf01d0a6653016c3c2926a8b7911a716029097db393e61d5cccec880ada3e

SHA512
6f7ad202111c049372f15d836200ac71a06074c312f7e4153519fa82e5edc1a19c4089736c1d9608fde6f7e84adefa1f2588346663bf5f1281e66b06d88dc7d1

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.Physics2DModule.dll

Filesize
91KB

MD5
6c8a2df9293d1f8811db4d8c5df69021

SHA1
7fdc60d8aa4f78c5070143aa5b1bcfbf626c4b8d

SHA256
c661c60a94dd9e2c56920d480822b5e324badda81e939c817deae26c04df0b20

SHA512
3ad9fd84b266d1a929fc8090c8c5e027106de18838c7fd25b570cc2dfb3cb5b5ac10371b3a04462ffaef2941e893359f80db0a1c386f3cc8bffd2f85a1e8f585

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.PhysicsModule.dll

Filesize
83KB

MD5
c55112bd91902e941504d45f1fdcd8e3

SHA1
0593d17e4bd5c3f2eae9337afaad97144c25eed3

SHA256
98d99566cc16f3da3314fff3675fc966453640621499c10c1c4faeff6d6bafe4

SHA512
a791e06c77aa645465a44b48e7c594ed461e18c563d0ec6a6a81bb2a03817968d23907ab99fed96dde7b26c7466cee9cb0f1c62e60327c506f9ca1001a354568

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.ProfilerModule.dll

Filesize
8KB

MD5
50a5dcf70ecd101ab68b6d9c49caec54

SHA1
42485582ad30e0f2e805d8753f2640b1bf072f69

SHA256
d3e5217762cd2695b76f65981c0155a5d99e9e28e7626c725eae10e4601567cd

SHA512
d75b01f1d56176aec9e05ca04cf394fcb9633ca9bba50b681654ef13609e1d94fc324997a7a8bf8629432ae32df48711a04daf3494bd2f87e5a819de14fa46cd

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.ScreenCaptureModule.dll

Filesize
9KB

MD5
21b716e5ace608c2b0415546b6817ffd

SHA1
53eb487a0359c4b1e933e226e459652d443a0328

SHA256
07ffb54d68648e66408ef7d65a9b84033c45a868113db7f845ebfb3b473e14cc

SHA512
81c693804c710f5e3d34d92de4566dd59a2e33bb95f12b22bb9177bd97e1caa3e24d8b6060b1ba72195492075fc8e8a57851d85ac876f184f777f129c80cc7f2

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.SharedInternalsModule.dll

Filesize
19KB

MD5
e8a1d709acb9b8a7b9dd7768c312f3d0

SHA1
d6bb400532aa7ec6f2e8e420dcf8096660f43a63

SHA256
da8763f3e550de21e497be6b94e7adf8a2c141768b22a031fa126050e508eafa

SHA512
09aac2e3239836b4759003c1ac5d54e021bdb85b4db8f5a24d807607eccbb23705a3d94ccba9a2ab00cbf1eecd3559ab3dc4a5b405f7f52fee9d46f0dbc9b6f4

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.SpriteMaskModule.dll

Filesize
9KB

MD5
6398a1c430b3d78120ef714afe38b750

SHA1
6af671b630a15742a3fdcd19503e8c6a87a93b95

SHA256
6ae7b46beae6714ce87eb233400cdea5e6475a0bcabd461d8eac92917202cf86

SHA512
30f96a956a0fc44a3b2fe2eaa0067d636e854341b920e2a59fb728a6cb7142907d286d86d0e4a590b32fe5f2e0cff3d36c4d03a0b27b2d51cb0b615c1ce6537e

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.SpriteShapeModule.dll

Filesize
9KB

MD5
02d7b08f7997b590b34a1624d6f92d3b

SHA1
78472c5af151963a49a41d6cfbc8754c12320241

SHA256
26f365554e8341350ef0eb445bdeb195311cd6d72cae8e4d2ab8cfc3e5e34660

SHA512
28d08bbf811d93db3ec4fe513c4389d04195f280fcf3bb85945c2647bdc187c19bdfa4dfa6b80ec812c62cc588a4906beb64c3da53ded5e82b8f8a67f78e93bc

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.StreamingModule.dll

Filesize
8KB

MD5
7442380b0b8a71adc47c73cb21955c04

SHA1
c2256a4689b589899650b496a8f5072b1477f683

SHA256
782eaa1ce41adfa951eecb223c0797130f156fc1526a987c40bf14474465d613

SHA512
7459add589f2f8767a495e129656294bf064638dc0015694a0b1667ff19f8e185683cac5471e5dd70bfe1f2c87c94629df40ba9338f9dab44bee42cc549cfc86

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.StyleSheetsModule.dll

Filesize
16KB

MD5
435d753fcf8427d5e34a9f64967dc50c

SHA1
371db24bca7a852af3daab5a4c736c25056b4838

SHA256
c2f23fdeaad10411a17b57f5f1ad7fa40141b6d3faf5f804dff95bacb08fecb2

SHA512
d2d320a8f46fe2372d895d2a4ebf544b2f33cf33b5a3ac471cba942688209c3a2bfc778108b6436ba1d0b76c78c95742d1fe8090f026dc3def35dfec66470c7f

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.SubstanceModule.dll

Filesize
12KB

MD5
616ff262a2da66de7b66e4527de8ce14

SHA1
4784123523d9dd8dc711d9606693003f1fe47dbf

SHA256
1b4a3ba5ae524811f50e51ba187eb3a532283116602fad40bc0721b6b3d831b6

SHA512
2cc7027de75047a905bcfbe5c1affc46c80cb818735af252e1e9200cbfe2788cab22565141dc5532584abbaeed50d8e10bcb3b5a9000d10bed8f61b0e9f9405e

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.TLSModule.dll

Filesize
8KB

MD5
9f1d7c09f9fb275515ac7e34a2746bea

SHA1
5a9c50e17124dafc78973784e0697d5f6099e801

SHA256
e071b7776c5c662bfc914ef736e49b680ede163abdf85d6a1eca59ca853e9ed6

SHA512
60faf6da856b65c5469453a2d277ba2d28d3b3b250bde08507206d9cd181c2a4ae50728174c47b031c59b0115f8df7b484b8880550d434426acfe52793d5dc50

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.TerrainModule.dll

Filesize
61KB

MD5
34580860b5f1d9f70e54c217b047de77

SHA1
665cdacd655eaf77af40b3b9385721f9913e1b58

SHA256
a309d349903466d807ca346294e940357504265669678afd7a4d9453aa179791

SHA512
1c9caf2f5b0f1b5973043f286591c5b786c55cf67f3fe6035524cd771e2301f6a4d3c5941723045c1be0875da277ea8572925767e4270e43b208e7ee8ba6bc96

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.TerrainPhysicsModule.dll

Filesize
8KB

MD5
ecf601c7532d467efe9705923e1186a2

SHA1
db7920f49fbd7cb8321a84732986885195044d39

SHA256
24cebd0be6e720891d95b9dcd22554c5aeb0050054dc2f0e7b431d9f06e44c1a

SHA512
d9a9e15d9fc7bc6ab69dee9e189bbe55048209677af17ac400b10088b28277a536b6fa62a4d03a559c5a4c61b601596dc1790834f97a2e9fd41be3276a80f0df

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.TextCoreModule.dll

Filesize
37KB

MD5
bed71bd4e6bc1cf65feb4b588707b5a3

SHA1
3a32aef501adb666b1034e8a64d9a7ca591e1836

SHA256
48d1f1004c539baa2866969e7cc44fb2eb97410e49b8cb39f3879bcb9175f5d2

SHA512
ba13b90a7e38db9315ae34c111228941fe877c340ec69440e0c1514e65b6af08abed9ad9bddbf8f649a8887635c7cb3c62b6b169517e7a4d82b9e75476ba325f

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.TextRenderingModule.dll

Filesize
26KB

MD5
b7e9c465e2be7628aa9c4c2bf26109e3

SHA1
a7a961d9c339812bfe52349dd98f70608e368b90

SHA256
cb9fa16373a2031d1141801dcab5fb59c6c757b2a6eeef7d6c290f5464f9e4bf

SHA512
01cff5cea7a9837ba78672d1e75ec105f0cf0daadb55654fcfcfb8bcc045e9684d2b09884de052c3ef6451a0bb94c52995c449868b6c7fc8c2e4f237170466cf

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.TilemapModule.dll

Filesize
23KB

MD5
6efaeda79e436179e4537dbcb1e30344

SHA1
80ad689abb04c669dcbf2ec9d68f2c40dc3c9a40

SHA256
f36212da0e0895a2e54eb9eec899d45428784307527e27a4482fa2bf8bf56efc

SHA512
a79745c6b986651c16125648436438768ee6ae84ba0863fa2a7ef1c5bd1f5d188f9206226b38357fc4e3c0a5b22b3dbc0eab1ac76f43d3de12b391243b58fbc4

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.TimelineModule.dll

Filesize
8KB

MD5
179b4abb939257c6c9527c2b755f68b6

SHA1
35ac1e5374521a0839f19b9b6ef9d54daddb9230

SHA256
322766e6162bb897a7d42dc6f14f52545d5f6114535d212f0c94e1bc97606742

SHA512
0ad15d5794af7b58b0a675ec0cf57c318f2cf708b3d97ee1e535b0eb4a07f840ae94764161643262b36908ba2ba52f00abf56452a087fd6782e75c923aa7217e

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.UIElementsModule.dll

Filesize
343KB

MD5
b68f44eb5767df966bd0c19b26ce1b6c

SHA1
4d6dccfe347eb901787485cccd7571bb6096fba2

SHA256
8d8b5872e5b8f6e9b7857b1bc6a3425ea5dccc1c7b44a53accf5a1edbd0f790a

SHA512
71f4b92b8d57b1c254d2b39d9d564c757afa89aecb91680f1abdf6fef814b5a453e39d2e3ae0a3e4225c170a7c09eb3722d9a29911f5094b11ceb76190a0a888

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.UIModule.dll

Filesize
21KB

MD5
d04302511d4700d3ed12bef552a4c4fd

SHA1
8f32fba05278afc806c37f4772f2878b97511b70

SHA256
03f321a483644d6c9cdb4f42d013fd30c6421af0a1749140e113813874172718

SHA512
b9e46018900d8d0bed3a282f6b98de13834363b746e821394d8a154754877c962e78978d7253a99e401be4050be630b1594361cd02fd0c1f3a588f1571ca7ae8

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.UNETModule.dll

Filesize
76KB

MD5
45b62ed9faaad280463b99f4b5172405

SHA1
6758dea188b8fb92fd812981209f3058bfe6186f

SHA256
abb2fd9936c5076966780c15bea961191e411d2086d0626d95d5405c744c8006

SHA512
d0289cef884537c21beded83a49f4e8cdfa501889314177ca7c561c3b3e9d19c2fb45eb0a3ea93d0ec1b56f6a64d26091fa32d8e901a9cb958814bc38183b326

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.UmbraModule.dll

Filesize
8KB

MD5
6614dcc1cc738b9da59029c9b09c43e0

SHA1
5692dc8d0b830d35b7cb588cace5d3a8f9285183

SHA256
480dd9e94da370eb4061f5e83ff062dbccac6d99b67e14a92ead203323a57e42

SHA512
a06ff4f9df6480d4c6ed14f9bcb5ea910f79037240897b8e4d31c77e12d51994d6ab6d2e8ada9efb28b17c1eb11aa9674874df6f21f2d35a172caffbfbd6ba44

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.UnityAnalyticsModule.dll

Filesize
23KB

MD5
73a0771433a4260995f7d9064751c9b6

SHA1
b170dc7930441d529fef99de91f21eba552719d8

SHA256
5c5d31811dbf82415192a93b8ab7dcef075517c5aea04dc73fa0d9168933f0bc

SHA512
927832d1af006990a7e579d4958245d90f96c19f01dbb515651d6f3902c0c6f9610696f754d4e6dcb4dc7dfeaa1d83e94f5104dd6533399b6e24fb1121571e47

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.UnityConnectModule.dll

Filesize
10KB

MD5
af5c62b5768f27bb794964451bb0f3b9

SHA1
53998013ae36e4b58b4b7ff3d727991067864230

SHA256
e9c91dee0d4e9da8e8ff0f0673fb3279b39ef9c8c48a2944329917989b369d64

SHA512
0674cfe73fbcfe6920b137a81fd6379c9d09f264e5254658a7a55bfddff0bbcb58ce95f23a9d192258576470e37b3e556bd44b28e6b46949d3d6324bc11c5ac5

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.UnityTestProtocolModule.dll

Filesize
8KB

MD5
6f3db9782ecb8c582e10b438c800d0d5

SHA1
a360f9d5e58e6ecab88499c5ec5a6ef28f4f9056

SHA256
39dd949b2d2558b785d9c39fc1144869d86e03e78483a9ca8dbd86ded3f1f415

SHA512
0c06bcd73b2a44aac2878c62e016b735360ab27dc3b334af91695910156c0fc3aa5a4032b06b347817668f737e39857d8b5f6b48714461b63726789caa9329bb

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\UnityEngine.dll

Filesize
71KB

MD5
2b1a5348e29b986181670be2e3c0dcab

SHA1
70eb2b1d0a81deb7fb7f94fbadd067cee2fe2783

SHA256
4a436f325c99de49d030bdc7d9f12d019f716da384c55266360f4fac113a40d5

SHA512
ffd16739bfd7b9bfd5ee40f40d20496e7d7fe36ed6f42a8d3cf872e9cbddb2fc3f26525c4926af683f20438e8a4a227dc2cf6d3a01c31824f3e220ee7a7c1649

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Managed\mscorlib.dll

Filesize
2.5MB

MD5
14a447d16a9f5400b1bfaa611ea8dc29

SHA1
9d3724fbda2e1f0008ee57cef4ff3cecab8191a5

SHA256
5394ab5b327b042bb0fa4d05bc8f17de1840b4d8befdf45f55999459d882e841

SHA512
7befaaca63fbe0b468c1b73e8b5502ad48bba4bddeb3a6f97687a91bdcb7bdf6e22feac3c16783c27c8fdc5e9546e4ebee4425ddf9dd3620a3559e159b1d1339

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\Resources\unity default resources

Filesize
3.6MB

MD5
112cdb737994df3495b6f375a812c99f

SHA1
3076070ea0ce4b4b9f3e6c3163936fb97e9b59d0

SHA256
26a432bd5dc1f76ce9ae5cfc656fc15a8b1679c13a1912da76888ac59886dc26

SHA512
15c43bfef3b44725a88226c2ff606552eb5f21cad773e9c088c062aba04fe04271cf06f4fdc23f9cdf2416d91afea9b50083a003df4024e6209b115a31d5d636

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\app.info

Filesize
23B

MD5
aa6c15bfe3223783ea76d26c222275e1

SHA1
13acbb2742de79ca417feaf1a782d06dc03fa464

SHA256
0f8a9ebc0df15e51a4499fe8b11b0d7ca3132de96435b9d4f81966baccbe983e

SHA512
205f8938246939f437139b782ace4a4b321f52336fbcf3b8a90884018c3fe08442573816cbe1af836407c3ea6fbc6244b6e353e85775f7fb8c95ddbc26298f50

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\boot.config

Filesize
124B

MD5
4b3d9799e7a6fdcef9f052e37ce0c3e4

SHA1
68b7d23a4a692251ed6c833f118eaff6af9c3e87

SHA256
6b4073eb98036bcea718067cf8e5e23f8be08faedd16c8fa9cdd10aad0929c79

SHA512
cb07fa7e04663d0c38a9fa579d03f83d9d9e8ca4b524fae7c4a5b6f5b75fc8717d077f8adb2e8fc8b6aacf9196ead39ee1813d5e17882cc9fa269572cd92adcc

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\Patcher_Data\globalgamemanagers

Filesize
52KB

MD5
01339969919159b0faa90e86bc8aef0e

SHA1
b11fc93b77c5183449141da9628a8c4fa0616ea8

SHA256
94b230ba11a98599feef7624b57c34cd747cca9ce44511cbd5a13bf324c6fa45

SHA512
a3bf85b5e872af3f25f3c0ba3e982b34eeda8e870a8fc85ee4def34c7c1727a95fd7ca8aed86fa98cace3b2fdf4f21eeab36cf3de468b607185344f7b655b63e

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\UnityCrashHandler64.exe

Filesize
1.4MB

MD5
4233f7be982965af42d21d0295515278

SHA1
0ff433b6d59b9548895f08c4923f56cef3fae355

SHA256
2c9d4a45cfa4975a99d13b031bc3e3ac2d01fde4d5159d250e0d9dadd70b0d55

SHA512
6012228f34bba66d91c053312986b81840f39ee0c44ef7a4de96e55b98e4c03b791d46c82712efdd0dce03d9e0838aa3d8a24c7e813e13413132ff0a27a6d6fc

Download Submit
C:\Users\Admin\AppData\Local\Temp\patcher\UnityPlayer.dll

Filesize
22.3MB

MD5
3f29c993787328c46236c261264470a3

SHA1
079cf53b57b2d3f725a467473afe0bd7b62fe308

SHA256
97e7152e01b20db787f4dbb8c5ad3efb8061c9be6235d7625c63617f51933888

SHA512
7f9a0d8614f7b882434159c9cb264689369efd200c21c48ff04f017db1714e09b098ff0419db0d769ae69630994c00696e1d3833d4d7330ba4971dbd8a4e1c76

Download Submit
\Users\Admin\AppData\Local\Temp\patcher\Mono\EmbedRuntime\mono.dll

Filesize
2.5MB

MD5
d826d1c2dc1d33ff80267ba54a499fa1

SHA1
87ee0353433f335c1a7b6451e65efffb01026158

SHA256
ba2735ab73a45775bfdf471d43bcfe09361363506d6a0cffa360b2594132c78b

SHA512
c7b1272dadcc6d25c701983af06e1f0e226a4f8a37a8f258d26e294157e370a5ea666651e3263be5f959092de1c1315a8a5f5f8ed3b81f3bb063398b97e2b52f

Download Submit
\Users\Admin\AppData\Local\Temp\patcher\Patcher.exe

Filesize
635KB

MD5
0481df324c7f054f14ea6dfaa3f26db5

SHA1
deca19b227fa46affde869f935810e9ed1a3e07f

SHA256
301e71f35024c4f3f70929ff48c508d00a092f3be46d0bcbee504ce00881100d

SHA512
9ff9dc32d34f805935aafe2bac91356f3ff35e207464892dbf3c29f62db96b55e39bc75dad104be0d9a784283390a6fa43ff1da52f15bb7d6e69e1f7e0524339

Download Submit
\Users\Admin\AppData\Local\Temp\patcher\UnityCrashHandler64.exe

Filesize
1.4MB

MD5
4233f7be982965af42d21d0295515278

SHA1
0ff433b6d59b9548895f08c4923f56cef3fae355

SHA256
2c9d4a45cfa4975a99d13b031bc3e3ac2d01fde4d5159d250e0d9dadd70b0d55

SHA512
6012228f34bba66d91c053312986b81840f39ee0c44ef7a4de96e55b98e4c03b791d46c82712efdd0dce03d9e0838aa3d8a24c7e813e13413132ff0a27a6d6fc

Download Submit
\Users\Admin\AppData\Local\Temp\patcher\UnityPlayer.dll

Filesize
22.3MB

MD5
3f29c993787328c46236c261264470a3

SHA1
079cf53b57b2d3f725a467473afe0bd7b62fe308

SHA256
97e7152e01b20db787f4dbb8c5ad3efb8061c9be6235d7625c63617f51933888

SHA512
7f9a0d8614f7b882434159c9cb264689369efd200c21c48ff04f017db1714e09b098ff0419db0d769ae69630994c00696e1d3833d4d7330ba4971dbd8a4e1c76

Download Submit
memory/1108-69-0x00000000047A0000-0x00000000048A0000-memory.dmp

Filesize
1024KB

Download
memory/1108-70-0x0000000004310000-0x0000000004410000-memory.dmp

Filesize
1024KB

Download
memory/1108-123-0x000000000C400000-0x000000000C500000-memory.dmp

Filesize
1024KB

Download
memory/1108-122-0x0000000004FF0000-0x0000000005000000-memory.dmp

Filesize
64KB

Download
memory/1108-125-0x0000000004310000-0x0000000004410000-memory.dmp

Filesize
1024KB

Download
memory/1108-124-0x00000000047A0000-0x00000000048A0000-memory.dmp

Filesize
1024KB

Download
memory/1108-126-0x0000000004FF0000-0x0000000005000000-memory.dmp

Filesize
64KB

Download
memory/1108-127-0x000000000C400000-0x000000000C500000-memory.dmp

Filesize
1024KB

Download