Analysis

  • max time kernel
    84s
  • max time network
    89s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20-11-2024 18:03

General

  • Target

    VRM_DollPlayPCver.zip

  • Size

    110.2MB

  • MD5

    4d8899109d1ae36a7527f1e457c5cc38

  • SHA1

    d3cc08650844b38b80510186ed163f9a45f59a53

  • SHA256

    80341633f075acdde7518575314ff1173e56624374990c88fd4fcc32e7353460

  • SHA512

    41699e4ecab4265724855d0c6b1fcd1d1075eb535e6d6cc787bfeeb6253690d57203785978a71f416529265d53e4918796fd3e4f7e5746e659ad4aa56add0b69

  • SSDEEP

    3145728:cMQiQbct0U9lyGTW23lfjNE4YNaF0Kn7u2j:cB1c6ujH3RpYG0OJj

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 3 IoCs
  • Loads dropped DLL 2 IoCs
  • Modifies data under HKEY_USERS 15 IoCs
  • Modifies registry class 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 6 IoCs
  • Suspicious use of FindShellTrayWindow 4 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\7-Zip\7zFM.exe
    "C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\VRM_DollPlayPCver.zip"
    1⤵
    • Modifies registry class
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    PID:2856
  • C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
    1⤵
      PID:5020
    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver.exe
      "C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver.exe"
      1⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:3420
      • C:\Users\Admin\Desktop\VRM dollplay\UnityCrashHandler64.exe
        "C:\Users\Admin\Desktop\VRM dollplay\UnityCrashHandler64.exe" --attach 3420 1825335545856
        2⤵
        • Executes dropped EXE
        • Suspicious use of WriteProcessMemory
        PID:444
        • C:\Users\Admin\Desktop\VRM dollplay\UnityCrashHandler64.exe
          "C:\Users\Admin\Desktop\VRM dollplay\UnityCrashHandler64.exe" "3420" "1825335545856"
          3⤵
          • Executes dropped EXE
          PID:2080
    • C:\Windows\system32\AUDIODG.EXE
      C:\Windows\system32\AUDIODG.EXE 0x3d8 0x41c
      1⤵
      • Suspicious use of AdjustPrivilegeToken
      PID:3460
    • C:\Windows\system32\LogonUI.exe
      "LogonUI.exe" /flags:0x4 /state0:0xa3940855 /state1:0x41c64e6d
      1⤵
      • Modifies data under HKEY_USERS
      • Suspicious use of SetWindowsHookEx
      PID:3648

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\MonoBleedingEdge\etc\mono\4.5\Browsers\Compat.browser

      Filesize

      1KB

      MD5

      0d831c1264b5b32a39fa347de368fe48

      SHA1

      187dff516f9448e63ea5078190b3347922c4b3eb

      SHA256

      8a1082057ac5681dcd4e9c227ed7fb8eb42ac1618963b5de3b65739dd77e2741

      SHA512

      4b7549eda1f8ed2c4533d056b62ca5030445393f9c6003e5ee47301ff7f44b4bd5022b74d54f571aa890b6e4593c6eded1a881500ac5ba2a720dc0ff280300af

    • C:\Users\Admin\AppData\Local\Temp\MonoBleedingEdge\etc\mono\4.5\DefaultWsdlHelpGenerator.aspx

      Filesize

      59KB

      MD5

      f7be9f1841ff92f9d4040aed832e0c79

      SHA1

      b3e4b508aab3cf201c06892713b43ddb0c43b7ae

      SHA256

      751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a

      SHA512

      380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5

    • C:\Users\Admin\Desktop\VRM dollplay\Background\é▒é╠öwîiëµæ£é═é▓Ä⌐ùRé╔é¿Ägéóé¡é╛é│éó.txt

      Filesize

      58B

      MD5

      81c44e0bc3531d523315be07646ead4b

      SHA1

      549609976b5ffada3e16624db2ee6bdb79068671

      SHA256

      8df4fb7a384610aa3a934bd047188c18f556fa1e4a821af456b479e87b3ba3ce

      SHA512

      251cabf392e6fdce9df5f373be7dd49e0d3279d8f3f14a6c3146202c5326abb351bfbc3e1d80993c1375723f395e0fa068d439092dc099975ae478d6fd33e895

    • C:\Users\Admin\Desktop\VRM dollplay\MonoBleedingEdge\EmbedRuntime\mono-2.0-bdwgc.dll

      Filesize

      4.7MB

      MD5

      ed5d80d051ff24aa6b643c3481cdccab

      SHA1

      07912c62acfdf4f53a9c5d1eaa7d4e537757ff62

      SHA256

      e3097f47f279de9586ec26007ea5d55707c1f1a551796e654894af3439c58ca6

      SHA512

      2c920f303d6d9f00a70a3cb149bfd09ad9afe2318b49fb1005a51e3ad89e0ed0e77639c9fc0f6acf8b6d9401ca66691d418a417e7a37449552ebf85334ea48b3

    • C:\Users\Admin\Desktop\VRM dollplay\MonoBleedingEdge\etc\mono\4.0\settings.map

      Filesize

      2KB

      MD5

      ba17ade8a8e3ee221377534c8136f617

      SHA1

      8e17e2aec423a8e6fb43e8cbe6215040217bb8a3

      SHA256

      ce1db1ad8a9512073164e3eccdc193f7eda036e1a9733caec4635de21b2865c8

      SHA512

      c18bcbcbd4b9a20a72b1a934d70db1eafef047f34f3ba2c6357d8e3afed07ecaab861e5571ceb58c22d4d3e5ebb34b51e366a0553c3153fbc263d1d80472e297

    • C:\Users\Admin\Desktop\VRM dollplay\MonoBleedingEdge\etc\mono\4.0\web.config

      Filesize

      18KB

      MD5

      b127480ee9f0b8dab6a3f73ad79dd332

      SHA1

      7d776d730cbd253564713f36573dd8366782788c

      SHA256

      f1a6416eeedd9d040387fd85dcf7d6e074b6644c6829d08be220ff9fc32efb31

      SHA512

      00ddca43ad38127cf71477810c46617fc2ccdc33f197e26ba761151107eff701fec2caa51e43575fb5b4fbc11f640f525ba70b6b3e97811cecabc63773492401

    • C:\Users\Admin\Desktop\VRM dollplay\MonoBleedingEdge\etc\mono\config

      Filesize

      3KB

      MD5

      d9bc824737177af5792846f26507231c

      SHA1

      c44835e4881d95a97b597bebff5deba0233a5887

      SHA256

      60099cf91bb1a5717fc1f2d23cf36a61d3bfb70d9489fbb6f4bae98c560bf3d5

      SHA512

      f9558f9e985643d8205b5534998412a5896bb6f5712bce5d6cf27469200eed64f29efc01936ab00c4a93625b0fc573036fba00ba2c4eb1d1d7c47555608f11e8

    • C:\Users\Admin\Desktop\VRM dollplay\UCL2.0\License Logo\LUUL_logo-guideline.pdf

      Filesize

      2.3MB

      MD5

      55b0f8a1026a590ff835902f98c72c49

      SHA1

      dfc39b7a69a0c16fc571b539e1fee0d6c759388a

      SHA256

      3ff94c47d633f8b8b13ec34633c90570b014b2a25f32bef79449ebd6c04b24dd

      SHA512

      00f18f8895be2e4cc7d4a45833dd648a7af5d40f74651040a60e02e6e9ddc00af56b7fc4335ec080d38e24a24606dce7b6fbe440bad54acf288ab76957b9be2d

    • C:\Users\Admin\Desktop\VRM dollplay\UnityCrashHandler64.exe

      Filesize

      1.0MB

      MD5

      3f735a858855cfe3ba9a2e4c5c83fe3b

      SHA1

      80cee5a8f66e8f4e6d5d3e2f277d9ec846e89f91

      SHA256

      1051fc41a11912dc671e43139036fb6551ba5e3ce1b6ec0f607ef1d8bd4fe5df

      SHA512

      074d7882538b7c7b937c14b9f45406d2003d24a3273a788e859424786b9fab2f7a92a7421abf7022f123873ab337df3306726fe6110cf1a75c86f4c6767644ff

    • C:\Users\Admin\Desktop\VRM dollplay\UnityPlayer.dll

      Filesize

      25.0MB

      MD5

      8dca047047455b70521317828d7cc0ea

      SHA1

      b88cecc9aef25b04c0c0c1ad98bfcf0da1c8ed8c

      SHA256

      cb7dc5e4aa501009d6aa91c2fa2136bfedec66aac4004ddd9812a3d17f3e0e80

      SHA512

      29fee8363a7e8871ae2e81f45ac255ec7505b2c226a882d1cc565bb1b51eca968fc31913b8fe5b58e9d34cd4ab55db6d992499ca7dfbe9db35b78dfc52d2c1bf

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver.exe

      Filesize

      635KB

      MD5

      691e54f220cec1de9a79bda6ce424a9f

      SHA1

      18347ecaee7818ee5bc5b83b2d48d465142f25a1

      SHA256

      af7c9d3e3daecc5c56427c8e51afb8a306a53cc3b506abeacdf59f59c0ac4e3a

      SHA512

      60e970e5dd5e9981b9c582f8e84c4b590d5d322ca5d343881c418f361e24009e6c8c67309516845b398b89ad7ee7a8ac19853406a3bbf0688e7d1dd70ee5298c

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.AIModule.dll

      Filesize

      43KB

      MD5

      633d9e1bdd84eb2e481f73735b1ee590

      SHA1

      5a0f7431d42d1890a521d15d1903c9d558ac5f71

      SHA256

      d2e03f7378cf4cd77d5d161b2988992350bff321a8706199bf96368752dea21b

      SHA512

      cbec73bb88027ddd16e64cc16cc068444010d22cfabf227e2da463662415896948ecfc0eb6e75d17adb00de8fcd83793c886e749564bf8503db6e90015298c86

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.ARModule.dll

      Filesize

      12KB

      MD5

      29dde4171e02eb83b0954a4de54eefc9

      SHA1

      accfed6301a87711cb6d6610ee2161fadfc35253

      SHA256

      224ffc2da15de67fb2139399af3bde237fa8556a4d5ddc2e5a45a97008e7b213

      SHA512

      522aaff972f2e8dc63a208d29bdc235fe21a85c94631005dd2b08601dc8fcc5488c1e4dec47558cdcdbbd6020467850747876daccb73844b4a341e251fd6fbc9

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.AccessibilityModule.dll

      Filesize

      12KB

      MD5

      67170f387b094bc2687567ad1c603ba0

      SHA1

      6704b9ed3b8bc8936495d520299d6fc41b9c4c2e

      SHA256

      1e5f0b96c8b5dc10c37d2267e8e07b5d246ab7f09bbd3ebfcd527cd310dd64fd

      SHA512

      58676f9625665722a989cb875da36e635482e6c3a1ebdb202ee814eb5660d2ca6d8122a8710768341ab450735cf83e61ddc54b01d5ec77e57fe2560231db091a

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.AndroidJNIModule.dll

      Filesize

      63KB

      MD5

      314e551b8b9c44802632f68d893436aa

      SHA1

      7c14648180f7c097c0e0d17d640e2ea00b60e3b0

      SHA256

      3e2ca394531b298b163e7d7019c8f06e263bfbb6c6ee59e693a2ef6b6b7fa553

      SHA512

      f0979d8fb45fe48d53efd8fa585045f961d325c24423c4906e33c23966754c3fb3f0b67abd524649bf510ec1351b30ed1162e5c040e571d2c3aa07417a383236

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.AnimationModule.dll

      Filesize

      142KB

      MD5

      3c7e9da9c88fed819ea677b1dc2d23ef

      SHA1

      f15a21e03c3fede6a3d43f21158159c0867b0f1c

      SHA256

      4043c95960b13d221c76c287e02e72b0e089400662b54c4ee578cfb6b7d581ce

      SHA512

      6e220c0955ebd693bb496931ab02501826aba2bbe0099fa63f0d08763432da0a885f12efb45a4ab86f9dfeb845c7c9eec067c578fa125bd4436933fa5dba7bb5

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.AssetBundleModule.dll

      Filesize

      21KB

      MD5

      41ee0728dc4f3f1fe2235ed38750e30d

      SHA1

      1bfdac672fbe2a5493c97e5f29fb2b28cbdf3b80

      SHA256

      d481567df81a4de96ac35c68a23fcac42131bd8154eb0f7b7ff383ea460be34d

      SHA512

      dea670ae56710eb38cf35a0427852b4f410b204f9dadd15375bf7df96322d10255aa02488c5625906efd6f9793172d418e3fc3bfd6b5c64f6868c56eaa220dd0

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.AudioModule.dll

      Filesize

      56KB

      MD5

      0e20bbce7d1f3827ff84008e3f586974

      SHA1

      6868cd8f91f488809c35aab83c9a76abd125d76f

      SHA256

      5efd437ecde83296153a63172bfaf8a54729d6ef49cc1a90787c670b9c436a3a

      SHA512

      8f984e18eceb76d67dd595fc9e32a965f45177453dc509f2371147429391c1a0a0f68d81c3803c288cbfa55e4009b2566677668211161d012607b076a1196f65

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.ClothModule.dll

      Filesize

      15KB

      MD5

      fa93ee2c83c263ada2d105a507b902a7

      SHA1

      bc718b2365513ac4e0e59f1beb354d3b32688a56

      SHA256

      d2bf168458c90f4531f9a5468ac0b6064271ab701dad813a4fd1df93fb84f825

      SHA512

      32a36aa8d8000be9afc4ea716357edfa1d0653f2acf3d6254fb27663040bd9743202feda40379d75c298263cb0802803eb7eb2ff6a83ce66159b3db8ce86047f

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.ClusterInputModule.dll

      Filesize

      10KB

      MD5

      12fd008f8770717fd6bfc3f63618b433

      SHA1

      b77b62f5d06cf05ab75d541e7335309e0b0f7e65

      SHA256

      5d22a99279aaf71f79d47c65e30936b8e6da3f354a5c34baff62266ff3fbe85d

      SHA512

      cfe17881bf9eeab81254f7d2a9579486a2c97a5649c3981035ff486120626879b0b1084a59588755b1e4b8d3c4e8e2b5a03c4f2b68c59d0f41789b6f73833345

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.ClusterRendererModule.dll

      Filesize

      9KB

      MD5

      de7eb49ce4c01408dc2e73d5abf402f9

      SHA1

      eb9527d9dde55fa1114b2cc81d22de1da978d91b

      SHA256

      5b1cb68a9bfb1755d0a6c4d6446161f26128999a381a85c1286592298405ed6a

      SHA512

      ab45d92cb35c523f8db6bf63762141ee2be94ac5e0b84a96a778cb0309541caa8e74245c7eb1175eeebd1812fca1da340cbc9c69d385ded4c3b9463eead6d07e

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.CoreModule.dll

      Filesize

      990KB

      MD5

      32f769addcd79e8faf8acce08d6d9a58

      SHA1

      f58d7cba21645b8414fc6e9d3a93058f6973eec4

      SHA256

      9cbd669f76900a90025b7ace9a90025360eda03ed0877f630bd2ad91713f9969

      SHA512

      cbb7ce6ef90cf39c281d9d8d1e4003480ae92c96b9f9f4bcf4a55854d9b04dbcf06b47108344f0169b304fe7f4477a1267f62e77f785341999adb8e8c3c697a2

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.CrashReportingModule.dll

      Filesize

      9KB

      MD5

      008ee519aa035ca253a895ac60584d3c

      SHA1

      4016319e737ab17577bd8f2d7ffe0ab1660ede1c

      SHA256

      6e84fe8e3b8633257d337b9ed1faabec0ba17d420cb4497914f3a302eef625bd

      SHA512

      68e7da83a9d7a291d26b34f12a32d4aa1c2a72b362366d408dd1d6fe294534272bd164d9c2fc8e7d705a9e3006027e695eb323c3a7a09c99bf5d62b013002b5e

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.DSPGraphModule.dll

      Filesize

      17KB

      MD5

      5b56e7cef5ce1a7e04aef5bed6266c34

      SHA1

      97f97fc585dbcb63fec24f878d7eb2b9ab86a399

      SHA256

      77e268f9400d5ad31f992318733caa485bce5b8a0730761d13cc340695a4a623

      SHA512

      154a282049440ebe3a2f29780ff5e3958dd4e6b3b012d97b1216abfaa488d6386dacbbfc3dafdb9154a0c140efbf73bd8799576ce8b175321783e59eada360dd

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.DirectorModule.dll

      Filesize

      13KB

      MD5

      0bb287638c9a4c16b0d2f51ceaec7642

      SHA1

      3f8bd6df7f06e54ebb679d8e3f892d9027559c83

      SHA256

      d6f78c997409439f998b053c3d75865323cc7985461524846efb09de1c7f9d90

      SHA512

      4915b6c4a018572f8e7714d45a61392647635f2b6c58d7d276ae455ad9b665faa3410ebb6fa6a7fd3c737b3bdc34247ed23918bdc19a354562c7461fb1647c01

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.GameCenterModule.dll

      Filesize

      26KB

      MD5

      ab88b1a810e4127648a57834ccc965c5

      SHA1

      4f8a5e137040da21367423a936294b9460aaa565

      SHA256

      8831dfadef1c9a97beafde9cb911fc2678c0e8e981e5172b4cc05f37c23aeea6

      SHA512

      718f1d59c2aa32dd98c4919aef3d634966221f7d92fec617b7fb8555b11b16eaa11ad601c8b21ded7bd588fa908ecc63b38df11e542667f46a07cfc1e85cbcc6

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.GridModule.dll

      Filesize

      13KB

      MD5

      2eda0d49e619f28fe2f2199320e8f132

      SHA1

      f105637a3e300f3869432046b27339bdc24d3c73

      SHA256

      e0542742b63793b769edc0bbece9c1905b435337602d22617bf8d04c0d4a3a50

      SHA512

      638d5486336b279f547e5add962a14f6fb99541e3f8eabe901b48b82f1b16f961047f3cc49e80872c33133d47ced9bd1ba93b3a333007843ca81dc39ba1bfeb4

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.HotReloadModule.dll

      Filesize

      8KB

      MD5

      a913a0662a1171cb84f326b2410d05c2

      SHA1

      648ff9d56bcae49fae899f646c06d2f9c86f9192

      SHA256

      82ed52a4ec966f124762d83e0f59928868a98ddbaa4ee5a92eea48a34a5c4114

      SHA512

      6756b75b865e1ff3a930f06f2d098cae17be78188cbf4261379f1fedf36c9c3c4d3cef14a3f82e36c9cf088ca2a0d9e56197f12acd1b7c4daa2e4f7c758499af

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.IMGUIModule.dll

      Filesize

      153KB

      MD5

      fcaff9a3e2f1bd9ccba06a5f5d5230e0

      SHA1

      6233f094b655a522de9a8602b876b1e1fd7ccb71

      SHA256

      ca85b168e1576f47d7216c069d217ecba84f6be9f3a32d9d2f5a29b8750a0cdf

      SHA512

      da69749c25e4757b07337506bbbf546ce756ae42e69ca94ed03d8d1b5007b3bd83f4128d4cf274c545d8ed9f176aaccdfdb4b65d903b987416983da7a157b77c

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.ImageConversionModule.dll

      Filesize

      13KB

      MD5

      dbbe8050b1c38f42c52fe566bc306a9d

      SHA1

      83655db29cf195c34896213d0f366c9e073db055

      SHA256

      f139ba93472653aeb2118b6ae19aff688d2ce97070e40afcd2e43b06c76d7314

      SHA512

      781902f780aff57fc0d143591a6f4fa7f367397cd97c0800ecbd003d686d0d237fcc16fd4b659f9bdb241dccbfdfddf033b8a220ad013a273ca97f062a0e15e4

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.InputLegacyModule.dll

      Filesize

      25KB

      MD5

      369b66ad6db24e0327a8cd391826a01d

      SHA1

      fd9ab9232081186f880b165af36cd29612a2ab8d

      SHA256

      c61311358e85d9f568aebefb1ce3869af5180bae8478ef474bf095e7cf322fa8

      SHA512

      b3dc25ce8aa6238b945e029ebf92cf08652f3e0be1cceed7864985ad2a64b81c05cb9066d14c7295a44d8c77234890fb1617fb613b23a09b5b1e863188bd5d18

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.InputModule.dll

      Filesize

      12KB

      MD5

      dcde0acb59d8bc53beefa443b296e2c4

      SHA1

      270b7c60ea30ea700c7d4050f4bf5a4dc75aa2bb

      SHA256

      4fd07d628c008c09b5076e7839c50e56039d9c4e0e2dad0209305edc0dbc31b4

      SHA512

      e5afed76c3582d4896ce678f7aae2c52e561b5ea08aaa8a92b9c905d8f294a02f8999e3214d7e082b04c5d5ee739ba99f54e89acf5e87aac611991a30c931bd1

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.JSONSerializeModule.dll

      Filesize

      10KB

      MD5

      688645525d7316aea069d45b89c6cdf0

      SHA1

      e618615c9916601182c54d761ab3b0126c973b40

      SHA256

      73f67e7e493417a50db3b2a33310dc3b2aae47ce6bd4f846a50bce92a086143a

      SHA512

      70abbaa51dab662b5588c2238f48c7bb4833278d454b341af260c8617598c42d641748630e9f70abb45604fb6a983873f879560e028dfe91a31f1749ac5252d6

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.LocalizationModule.dll

      Filesize

      9KB

      MD5

      239b326911795fd245c87e6d1bdd3501

      SHA1

      e922395610753a0ba3b22c566dc7a47d16c751d6

      SHA256

      8e5a46e68b0bcea0caaa4688066f169dff47c5b38fdb171b1125764b081ad5ac

      SHA512

      ccd7cb0db4fb95cc4cd4d304b61e5feb961d5ab1141bdf8a94524347ae08d3a5a8356711a702c5f0971290776e93301b8266507c37bcc2171c1455e3372f167d

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.ParticleSystemModule.dll

      Filesize

      132KB

      MD5

      40af01be3880ce9ea6908f6079dc6698

      SHA1

      912d0adb62345929245d2e5485eb50105ba1f9d9

      SHA256

      4a047608187bce1539f144ee246f04a0140cd16fbdddd52eec33e66db0e54299

      SHA512

      72598070fa20c3427f40c5bb3faac7ac8d4fbfef54327b956dee5430106f3967f56672e2f10d15887e105dff2c0eaf3fce110e458c4447af6593c9218980a164

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.PerformanceReportingModule.dll

      Filesize

      9KB

      MD5

      69422e06705926a41be1e8165bbe409b

      SHA1

      6ca82754d2077a874f3225def34255bb692025c0

      SHA256

      d5a03585abe440233a64f97e3e3385cfbc53ef7b3ac05229da12c944b1178a4d

      SHA512

      c47bc6b4b5d3ae481a9fc56da96064ecd1a85382d6a1ef1a80228c93d7c8140f9d9db7a55e7cd626b64a4f476366938fd32a1ffbe3625461ac053660c982eb01

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.Physics2DModule.dll

      Filesize

      103KB

      MD5

      58d9ba97fd7edc021278f36007c1d87b

      SHA1

      4c365d8ffce72c2beea0b69454656405f8a52728

      SHA256

      a3cbcf28f3c58c1bc819b10305f271eb3941f08b0450329f8752794a6a287253

      SHA512

      22f224f62b0754ceff6aac15e637a5b5e393c808ec27ecc5239f17e8d74ed68ea02d249a6a4f68afc68211730fe3096eb7aff7bbea507339bdb7632ccfb16077

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.PhysicsModule.dll

      Filesize

      85KB

      MD5

      3ab3b2525166a3c28cf867c281e7ae08

      SHA1

      cb5717fb6dceefb3689ee294a87d1538e96cbe25

      SHA256

      30569022ff4d831b858ef5d51ff970c1521d5b003dc3ee9c7507394e19551e16

      SHA512

      b9da3748c0b03c28789134261674589168e12648b3e14e953931fa1e9cf2cd0a29977e6da4087e4e1c43ced3e779d5e39c56329f6c92b85dfa6e104ed8614cbc

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.ProfilerModule.dll

      Filesize

      8KB

      MD5

      770362130d4d1ff4ffdfb0bd29ada728

      SHA1

      09d6a7d2f492a963d0aaf1ea59fc46ecd6b205a6

      SHA256

      3f76f1db00bb104d0fcdd6f0196ed773f3868b3bcad24bfbe25ce18a10f698b7

      SHA512

      b31c3a16a687b2e693a847945e510ae7bdffa40fa7e757270d58eb38e0fc0efcc441ff94dfcfc690fcdc4dd7c5fcc5a4ed75c8e7db0a18e2671e2a800fce2cd3

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.ScreenCaptureModule.dll

      Filesize

      9KB

      MD5

      f77c38ae0aae1efea9bc65e7fda70e5c

      SHA1

      4b7649548735d6583d77b0fcc08406cb454da357

      SHA256

      3a2037535b3a7e6acd65ee973c96af0052ccd4fd60266f7f6dd429327a8d9d2d

      SHA512

      d7e1c6da2cb5a1451f42df0200db48b73d2b4173a2dddbcd28de96c27f2a2949f80547dcba39bf43358d0fa7fdd1e77cc02f2120f5711c70ed3594ab5525a92c

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.SharedInternalsModule.dll

      Filesize

      19KB

      MD5

      a58faafa09ace4f4c44dbedafc2fb172

      SHA1

      0a6b0eaec42f1068c4cbd7a66e11b5c3d38c209f

      SHA256

      97406b3568fbab883f2703bc7b74b22e96cbabb54e067051fbb8099c79553080

      SHA512

      7249cd91ae8081368d91ebe3d3ec13b2a62b5afd28c44feb2fd684e06dc6c90da4cc30e71ce3a697b56c8cb23cb5683e7987796a3fd91a5cee49ea39e2668950

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.SpriteMaskModule.dll

      Filesize

      10KB

      MD5

      ba57addb13d49a7356b1fb0d1d1827e2

      SHA1

      b962c3ca1ffe9faaf4a2f62fb328e2c480b8c12c

      SHA256

      760671f8343c98a0cd81e759bfd25355a445e6c1a28aadf8a9942011e5fd7952

      SHA512

      ea0f54fcdae8d451d4d591efbe461d284be0e4410bf739b4e5273fcba59b70c41223b6d4bcdbdddd72ded283de281c2d377efa85818c1627535ceafe23a5d42e

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.SpriteShapeModule.dll

      Filesize

      14KB

      MD5

      478d652bc676cc5706a13cc0253a568d

      SHA1

      b2250e791d3f40c6f6b101e853b046556905aa10

      SHA256

      b2fc0a55b4088dd6d079c0a7030cfc9f776d6154a74db1b3b88e8d986da79ac3

      SHA512

      f774175d788788f399927d4394241802b9056f9b398dcf4b81af9ba58d49c83eed92c346cde725a3837a316957eca9c059fa85afa33aafce1905595db8477db5

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.StreamingModule.dll

      Filesize

      9KB

      MD5

      3c6b2ec2adab89fbc22c01d7d03f76d1

      SHA1

      f1373a5679c1ee3486bc223a01703419ef27b70a

      SHA256

      a7f599d9ca9ec7ee63a697924153d0a739de136371ae307a0cbb462c22714e58

      SHA512

      eac85602919e47b04a5e2b02020dc4eaeaeacdcc7ca2609b3bc421644b49ffe63b5d898204d6e5d32c6e636bad800faedc0cefac9cdf0b47c7bee89669af2acf

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.SubstanceModule.dll

      Filesize

      13KB

      MD5

      b9ea4399bb1f898a557f70b4812475fb

      SHA1

      df668874cfb86622e815852509b144c06e278eba

      SHA256

      00ad22e04cab7a463b69a9837326f4b460e1e7fd762f871bdf6c2c58a4ba49c1

      SHA512

      1ad95ccf460f27d2dffb957a48a3e5e3e955537e3c8918ff52ea8348bd5bcc6d5b005a605e7b11e5854d00dc95d606582c56add574ea6d275a4f2c7ff570469f

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.SubsystemsModule.dll

      Filesize

      16KB

      MD5

      8c8aea652593f23cda24c177ae03e5df

      SHA1

      a968ec6d3f4d899eda9d17da82cbf4ffa4405521

      SHA256

      a7e08a4abe59da73613ffec325e8df0256f53754ce8401b980bd371707d3330c

      SHA512

      d99b377c062b3e0b7aa910bf7febd5c889165155e013732e82daebf6526f3db844649843712aa15a17e3aadf23a8989dd0b5baceaed0a3c656428dccfbd46283

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.TLSModule.dll

      Filesize

      8KB

      MD5

      913a0dffa0edb47adc6dd6fc0eb4e3f8

      SHA1

      226a01db999c6de9c41c66c2c79744baaa730c2d

      SHA256

      0ce5f457222e9e46d5b56b03036a5172351d55d7ceec503a65b0ed52b9da4281

      SHA512

      f56387ea34343ad4587adb6f3f7f0c27044c09fc6ba6ad6909072a980d52a448cb85780a0e67ae6e37fe33bf99f8899403f6eb37ef4e89f1c6c70e7aff66f671

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.TerrainModule.dll

      Filesize

      79KB

      MD5

      2f1a60cfb23a5fb8f8e7b881614f32c7

      SHA1

      75f4457a2b38e1f2864f06ccb0552e82330eb75b

      SHA256

      1106fdcbaf0a3388855bcb5fac6d635dd530b776a9b4361cc101ea60f2743d05

      SHA512

      dab10f55ed1dbcc2bae79cfd6f223d824bc834b9fffe7dabcdd7d1f4c4bf8dedb7588c3ccf39e57643438b234dfe60689878ea372e7c7354ecb94bae8e01e3be

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.TerrainPhysicsModule.dll

      Filesize

      9KB

      MD5

      3966da705eee5fea4833b04f659abc39

      SHA1

      43544d0ea9e55d3ab36f34d7b8d7bc4d10652c83

      SHA256

      b82fbf6f0a5bc715c965f045a564462fa91f02537572504c00c5ebb3722dcd12

      SHA512

      f837506ce4cfc79a510e8f688dd3a999a27e3e28975e9ae1b569b3397f90324f48eeb45614839a315cc92741498cc9b2a9d7e646d0a40707ceb6a3c178dced42

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.TextCoreModule.dll

      Filesize

      182KB

      MD5

      3158d464f27554a66796a1a1e41d6523

      SHA1

      69b6a974c076ec2c3297818412b11367cd3447bf

      SHA256

      3ea37c73cbdf4a5586b6d676a12a882ed2a7c8d13114eda36e2966832502ebe1

      SHA512

      f14a3b9b2520e0ee99f9df03c9db70e80b82afb496d525c5fabfed904dfadd9120b4665b01f43a7a1474c055a27313793d7f103a6ca7bf8b2bd99716f484fa0c

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.TextRenderingModule.dll

      Filesize

      27KB

      MD5

      208c5cec79e6a884dcb95d3aea993048

      SHA1

      09e003b55c000a4aa482c19ba9c03e6f669ecf69

      SHA256

      82b727e11f621b8ae0678eae6fbbce2280749601467ce96d2ddc7f3f51507bb0

      SHA512

      16d21a619d94d955da7335694b47956a00ae7a1e5b73bc5924377151baa9e4fce451cb119b06276082b28c476dbf61e6fd4af4dab095688ab6af8b90064c65fe

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.TilemapModule.dll

      Filesize

      24KB

      MD5

      79b6e744247ca45655d5e7f5d69e2308

      SHA1

      939c7a40fba63bf117b5155b715a202b5d280a01

      SHA256

      8bad72ba9d229af232c40326cdb7f3f32f2f9d84e05316544f4df829256a8113

      SHA512

      6e387494c33472ef8f6af5349b41f825924f98f9eabe9c2ffc0355a79c291ee8b80718e71f882df6d40a717863bb09927cac1aa28e4f7c49c40039f3a833c1ec

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.UIElementsModule.dll

      Filesize

      713KB

      MD5

      869d5bb5ccd72066810b5e206f657fde

      SHA1

      69233c7c5122a46d10c45e6733fdc030464efbbd

      SHA256

      2c66b92ba086dd3026900b742b2bd55edf1f63b0fec95166028b4254a2552bc8

      SHA512

      b5dde43643f15c067e7e8d12eaa294d1c10833d15f7ae6585def0836d7412146b491c0d3d315b0f87304330df3e9914eec98c1212599670bf711f9f18b3dcb08

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.UIModule.dll

      Filesize

      23KB

      MD5

      747ad1a0ee049165a2e7ffeb52f138cc

      SHA1

      187d89cd50d8b0eb84e3f874e389a8810aab48de

      SHA256

      d27a5ecc3f80a21f3a082574393a2f1652efd6dfdfd8bfaf01e37a3562e53b91

      SHA512

      e840428d1e6e05a433b94102d742a4b3da4b9f80bea9ce4be7d7d6a6996e6a516805f78368fc65c14eae2ba9eebbe3266a4d9f7047a3f5740d9e1bf2af8b5c36

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.UNETModule.dll

      Filesize

      75KB

      MD5

      e017fe3c977b53cddead188a56870864

      SHA1

      9be15a953f7f0cef47bc13544726d9c67235a4b0

      SHA256

      a744d6702c5df0a4f06572074c513eff6b6b5a7b28b6dfc5a26b654e2bdb99e5

      SHA512

      1a43f124e8570847bf047b4bba3bf186fcbb51a591f47f44545e44b9345480a66a2c388cbc45d1c949a051ef76188491213e5281283a845bfc1efc5e0b82fd88

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.UmbraModule.dll

      Filesize

      8KB

      MD5

      829a09ab809ab02431d8879219b6a6ee

      SHA1

      d6ae7ca07e3961f9437ca50bde250ea6cdc9282c

      SHA256

      24c5f12421dc9260d67105ccdd5a180e8bf64442e8edcfd5374563262c252a54

      SHA512

      c462cb031a3c23e9bd4f9627d888f0bfbbc6224a095344fbfc50b5a93f998bc1857f9634e4d6cf45aa10845fa60addba7bd60c9e90d6666433fb1c82939507b0

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.UnityAnalyticsModule.dll

      Filesize

      32KB

      MD5

      0ccdc9779c483ca24939d94ec6a4f891

      SHA1

      739128c878f10e42e65bce65305715f8a95bc61c

      SHA256

      623d5db5deac5a22dac7f394b307f9bafb62317acda74c767ed635831eb182af

      SHA512

      d24beed1226da363ed45756707781e441a4449fcbf67ea02377aef866a6bb60fe07fd60ef3a481247b49a0c63a74d16329689a6854ca9f5d0e37dbd5aa820beb

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.UnityConnectModule.dll

      Filesize

      10KB

      MD5

      832688f667647b8f5b36dbdb0e39a1d9

      SHA1

      42141df14fe1ac5b052aaf3e4b5bfab84af32d13

      SHA256

      140878d59f38259eff2847702da824a67b3a9277a4b072b183060921bb0f11a8

      SHA512

      02384f6046b3aa5903524bb252ea9836d96ef6040f32454b153d9fc6b60e938166d95ef907ef1e71710ad0e73ac8f6b9bb4eefe8fca509bec78b3e6fbbc1cbb6

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.UnityTestProtocolModule.dll

      Filesize

      8KB

      MD5

      50d91406969a44098ad0729a7a41eae3

      SHA1

      a88ec6b65584f8dc4338cf1cf473100c9ac3eb43

      SHA256

      a977930cd0aaa2366c7cef7dfd73c495e072e9c0da51d2a3171a408ca95b3c39

      SHA512

      6269b600d67a7b37443852a7fdc981768e8e5aadb05b8849617d90125351ee8ea9cdc3d29af64009b085e3e51d8fe1d05001094bd318cf352c2b6062b0441092

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.UnityWebRequestModule.dll

      Filesize

      42KB

      MD5

      5156a33bb183d3d1cb056aa7777eee5c

      SHA1

      6a5d38f49f4ab591edddebb2ebe887a7ff86aa12

      SHA256

      48fa97b126d110b5b9daee6fa368eb1b0da948b80d5d128a2ed26527e5f361e0

      SHA512

      86e292219fd9d4a2a5e57cee92b21026db1713bc0426ac44b74cf5fabc378b923343d75c7e5753ee0bcef620ae4261d1a255db5f5632edd76d3326d23a8d1f82

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.dll

      Filesize

      84KB

      MD5

      5af199bdf50ae1cb0dcc25a53689643f

      SHA1

      72277de663822590ba358ad182c5fbfb9f87cf91

      SHA256

      3742efddb93a4a4ca3d66742783f7c5df688fae72e7187c3d13835bd340729f3

      SHA512

      f951e1e2852076d2e0f79f12ebc10d60452421e1b43b23da188c6cb5044cd33c00fedbade7d6c486b9c4978a559590a8c64d8e05a65bac5b4321b9434035f865

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\mscorlib.dll

      Filesize

      3.9MB

      MD5

      459241930cb0aae5a2f6f09c8fff75cc

      SHA1

      4ee039a526a0a31238daaef020bfb3a813524b6a

      SHA256

      6b226d4b6bc520438f81a45cb478b0d13d2187ed679936bf9a2b82978198511c

      SHA512

      31d4ce4bdaa5073a315212febe03fbe121b6e598d2bdb9890d5cae68c9c554bca91d86f4f645eaa60488f13efb6c61721d9e5863bc80d5a487dfb4d2acd4d3c5

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Resources\unity default resources

      Filesize

      3.7MB

      MD5

      dab5f3c3e100824ae7e91815c564a608

      SHA1

      5af241574144085d717215f88caf20c56d07858d

      SHA256

      7b4ec48745b3a28232f7598738754255c9536f00ae3dfb0279f564a0bac55241

      SHA512

      1584d2dc5f65cb523ebb056d321e0312ad92cfd15da563c1c1fbf4cc3065b4eb85a82c977259441c05c31e35128f49a06e711d26718c4d2614eb86123a588ecd

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\app.info

      Filesize

      32B

      MD5

      bdc48d71da728d72987c22b2f3206984

      SHA1

      8bde9082e6f5aa3db574ba138cc6cb543af602d5

      SHA256

      41170e392c5f697fe97d1c5412a3818ff8256b7fea19afad3f6d7ecfb3a22b86

      SHA512

      933cd6df20254bf52ca255df714b2b913480213b1ac398845c7a188fd6a2179751f920a8c1a2179f992ea9da83fd45949b08d5c3f68143d0c26af45bd89359c2

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\boot.config

      Filesize

      62B

      MD5

      100da3c20e8e4a12d9f1009ca8a525d7

      SHA1

      957413b32f40221f581e0fc5a1582ad429c5dea4

      SHA256

      78cc47cbbed8923df2d9eb2da0c8fd7b3b400b3353544adb47c327802fc0ba56

      SHA512

      4d28d05522a0c8c5684df3b3c90344ce1aa1d6455bfe1a0edac02ea73c1a4b36c8d113376565bd0d44e8962f4bc330ce768dbfb2b64a1d926435e6f0b1675c80

    • C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\globalgamemanagers

      Filesize

      108KB

      MD5

      73b29c700940e60add165f774795d119

      SHA1

      ffc6f432170e6acafcd52b574890134c45b5bb3b

      SHA256

      dece20d78829a489798877ad77aaf5e81031cc49a48d8a29409374af9a95a9d8

      SHA512

      2385a0e30e6d2c5c1585c3c87615496d27fa5f6c6cc0e54d5c57c31b5258718b06ccb4a9395e9fb02a25925cb06120e2da69f224ea1c1f5b59896e17d4db696d