Analysis
-
max time kernel
84s -
max time network
89s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
20-11-2024 18:03
Behavioral task
behavioral1
Sample
VRM_DollPlayPCver.zip
Resource
win10v2004-20241007-en
General
-
Target
VRM_DollPlayPCver.zip
-
Size
110.2MB
-
MD5
4d8899109d1ae36a7527f1e457c5cc38
-
SHA1
d3cc08650844b38b80510186ed163f9a45f59a53
-
SHA256
80341633f075acdde7518575314ff1173e56624374990c88fd4fcc32e7353460
-
SHA512
41699e4ecab4265724855d0c6b1fcd1d1075eb535e6d6cc787bfeeb6253690d57203785978a71f416529265d53e4918796fd3e4f7e5746e659ad4aa56add0b69
-
SSDEEP
3145728:cMQiQbct0U9lyGTW23lfjNE4YNaF0Kn7u2j:cB1c6ujH3RpYG0OJj
Malware Config
Signatures
-
Executes dropped EXE 3 IoCs
pid Process 3420 VRM_DollPlayPCver.exe 444 UnityCrashHandler64.exe 2080 UnityCrashHandler64.exe -
Loads dropped DLL 2 IoCs
pid Process 3420 VRM_DollPlayPCver.exe 3420 VRM_DollPlayPCver.exe -
Modifies data under HKEY_USERS 15 IoCs
description ioc Process Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent LogonUI.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\StartColorMenu = "4288567808" LogonUI.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM LogonUI.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationBlurBalance = "1" LogonUI.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\AccentColorMenu = "4292311040" LogonUI.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\AccentColor = "4292311040" LogonUI.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\EnableWindowColorization = "46" LogonUI.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\AccentPalette = a6d8ff0076b9ed00429ce3000078d700005a9e000042750000264200f7630c00 LogonUI.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationColor = "3288365271" LogonUI.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationColorBalance = "89" LogonUI.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationAfterglow = "3288365271" LogonUI.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationAfterglowBalance = "10" LogonUI.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History LogonUI.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History\AutoColor = "0" LogonUI.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationGlassAttribute = "1" LogonUI.exe -
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\ 7zFM.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\ 7zFM.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2856 7zFM.exe -
Suspicious use of AdjustPrivilegeToken 6 IoCs
description pid Process Token: SeRestorePrivilege 2856 7zFM.exe Token: 35 2856 7zFM.exe Token: SeSecurityPrivilege 2856 7zFM.exe Token: SeSecurityPrivilege 2856 7zFM.exe Token: 33 3460 AUDIODG.EXE Token: SeIncBasePriorityPrivilege 3460 AUDIODG.EXE -
Suspicious use of FindShellTrayWindow 4 IoCs
pid Process 2856 7zFM.exe 2856 7zFM.exe 2856 7zFM.exe 2856 7zFM.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3420 VRM_DollPlayPCver.exe 3420 VRM_DollPlayPCver.exe 3648 LogonUI.exe -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 3420 wrote to memory of 444 3420 VRM_DollPlayPCver.exe 96 PID 3420 wrote to memory of 444 3420 VRM_DollPlayPCver.exe 96 PID 444 wrote to memory of 2080 444 UnityCrashHandler64.exe 98 PID 444 wrote to memory of 2080 444 UnityCrashHandler64.exe 98
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\VRM_DollPlayPCver.zip"1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:2856
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:5020
-
C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver.exe"C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3420 -
C:\Users\Admin\Desktop\VRM dollplay\UnityCrashHandler64.exe"C:\Users\Admin\Desktop\VRM dollplay\UnityCrashHandler64.exe" --attach 3420 18253355458562⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:444 -
C:\Users\Admin\Desktop\VRM dollplay\UnityCrashHandler64.exe"C:\Users\Admin\Desktop\VRM dollplay\UnityCrashHandler64.exe" "3420" "1825335545856"3⤵
- Executes dropped EXE
PID:2080
-
-
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x3d8 0x41c1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3460
-
C:\Windows\system32\LogonUI.exe"LogonUI.exe" /flags:0x4 /state0:0xa3940855 /state1:0x41c64e6d1⤵
- Modifies data under HKEY_USERS
- Suspicious use of SetWindowsHookEx
PID:3648
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD50d831c1264b5b32a39fa347de368fe48
SHA1187dff516f9448e63ea5078190b3347922c4b3eb
SHA2568a1082057ac5681dcd4e9c227ed7fb8eb42ac1618963b5de3b65739dd77e2741
SHA5124b7549eda1f8ed2c4533d056b62ca5030445393f9c6003e5ee47301ff7f44b4bd5022b74d54f571aa890b6e4593c6eded1a881500ac5ba2a720dc0ff280300af
-
Filesize
59KB
MD5f7be9f1841ff92f9d4040aed832e0c79
SHA1b3e4b508aab3cf201c06892713b43ddb0c43b7ae
SHA256751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
SHA512380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
-
Filesize
58B
MD581c44e0bc3531d523315be07646ead4b
SHA1549609976b5ffada3e16624db2ee6bdb79068671
SHA2568df4fb7a384610aa3a934bd047188c18f556fa1e4a821af456b479e87b3ba3ce
SHA512251cabf392e6fdce9df5f373be7dd49e0d3279d8f3f14a6c3146202c5326abb351bfbc3e1d80993c1375723f395e0fa068d439092dc099975ae478d6fd33e895
-
Filesize
4.7MB
MD5ed5d80d051ff24aa6b643c3481cdccab
SHA107912c62acfdf4f53a9c5d1eaa7d4e537757ff62
SHA256e3097f47f279de9586ec26007ea5d55707c1f1a551796e654894af3439c58ca6
SHA5122c920f303d6d9f00a70a3cb149bfd09ad9afe2318b49fb1005a51e3ad89e0ed0e77639c9fc0f6acf8b6d9401ca66691d418a417e7a37449552ebf85334ea48b3
-
Filesize
2KB
MD5ba17ade8a8e3ee221377534c8136f617
SHA18e17e2aec423a8e6fb43e8cbe6215040217bb8a3
SHA256ce1db1ad8a9512073164e3eccdc193f7eda036e1a9733caec4635de21b2865c8
SHA512c18bcbcbd4b9a20a72b1a934d70db1eafef047f34f3ba2c6357d8e3afed07ecaab861e5571ceb58c22d4d3e5ebb34b51e366a0553c3153fbc263d1d80472e297
-
Filesize
18KB
MD5b127480ee9f0b8dab6a3f73ad79dd332
SHA17d776d730cbd253564713f36573dd8366782788c
SHA256f1a6416eeedd9d040387fd85dcf7d6e074b6644c6829d08be220ff9fc32efb31
SHA51200ddca43ad38127cf71477810c46617fc2ccdc33f197e26ba761151107eff701fec2caa51e43575fb5b4fbc11f640f525ba70b6b3e97811cecabc63773492401
-
Filesize
3KB
MD5d9bc824737177af5792846f26507231c
SHA1c44835e4881d95a97b597bebff5deba0233a5887
SHA25660099cf91bb1a5717fc1f2d23cf36a61d3bfb70d9489fbb6f4bae98c560bf3d5
SHA512f9558f9e985643d8205b5534998412a5896bb6f5712bce5d6cf27469200eed64f29efc01936ab00c4a93625b0fc573036fba00ba2c4eb1d1d7c47555608f11e8
-
Filesize
2.3MB
MD555b0f8a1026a590ff835902f98c72c49
SHA1dfc39b7a69a0c16fc571b539e1fee0d6c759388a
SHA2563ff94c47d633f8b8b13ec34633c90570b014b2a25f32bef79449ebd6c04b24dd
SHA51200f18f8895be2e4cc7d4a45833dd648a7af5d40f74651040a60e02e6e9ddc00af56b7fc4335ec080d38e24a24606dce7b6fbe440bad54acf288ab76957b9be2d
-
Filesize
1.0MB
MD53f735a858855cfe3ba9a2e4c5c83fe3b
SHA180cee5a8f66e8f4e6d5d3e2f277d9ec846e89f91
SHA2561051fc41a11912dc671e43139036fb6551ba5e3ce1b6ec0f607ef1d8bd4fe5df
SHA512074d7882538b7c7b937c14b9f45406d2003d24a3273a788e859424786b9fab2f7a92a7421abf7022f123873ab337df3306726fe6110cf1a75c86f4c6767644ff
-
Filesize
25.0MB
MD58dca047047455b70521317828d7cc0ea
SHA1b88cecc9aef25b04c0c0c1ad98bfcf0da1c8ed8c
SHA256cb7dc5e4aa501009d6aa91c2fa2136bfedec66aac4004ddd9812a3d17f3e0e80
SHA51229fee8363a7e8871ae2e81f45ac255ec7505b2c226a882d1cc565bb1b51eca968fc31913b8fe5b58e9d34cd4ab55db6d992499ca7dfbe9db35b78dfc52d2c1bf
-
Filesize
635KB
MD5691e54f220cec1de9a79bda6ce424a9f
SHA118347ecaee7818ee5bc5b83b2d48d465142f25a1
SHA256af7c9d3e3daecc5c56427c8e51afb8a306a53cc3b506abeacdf59f59c0ac4e3a
SHA51260e970e5dd5e9981b9c582f8e84c4b590d5d322ca5d343881c418f361e24009e6c8c67309516845b398b89ad7ee7a8ac19853406a3bbf0688e7d1dd70ee5298c
-
Filesize
43KB
MD5633d9e1bdd84eb2e481f73735b1ee590
SHA15a0f7431d42d1890a521d15d1903c9d558ac5f71
SHA256d2e03f7378cf4cd77d5d161b2988992350bff321a8706199bf96368752dea21b
SHA512cbec73bb88027ddd16e64cc16cc068444010d22cfabf227e2da463662415896948ecfc0eb6e75d17adb00de8fcd83793c886e749564bf8503db6e90015298c86
-
Filesize
12KB
MD529dde4171e02eb83b0954a4de54eefc9
SHA1accfed6301a87711cb6d6610ee2161fadfc35253
SHA256224ffc2da15de67fb2139399af3bde237fa8556a4d5ddc2e5a45a97008e7b213
SHA512522aaff972f2e8dc63a208d29bdc235fe21a85c94631005dd2b08601dc8fcc5488c1e4dec47558cdcdbbd6020467850747876daccb73844b4a341e251fd6fbc9
-
C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.AccessibilityModule.dll
Filesize12KB
MD567170f387b094bc2687567ad1c603ba0
SHA16704b9ed3b8bc8936495d520299d6fc41b9c4c2e
SHA2561e5f0b96c8b5dc10c37d2267e8e07b5d246ab7f09bbd3ebfcd527cd310dd64fd
SHA51258676f9625665722a989cb875da36e635482e6c3a1ebdb202ee814eb5660d2ca6d8122a8710768341ab450735cf83e61ddc54b01d5ec77e57fe2560231db091a
-
Filesize
63KB
MD5314e551b8b9c44802632f68d893436aa
SHA17c14648180f7c097c0e0d17d640e2ea00b60e3b0
SHA2563e2ca394531b298b163e7d7019c8f06e263bfbb6c6ee59e693a2ef6b6b7fa553
SHA512f0979d8fb45fe48d53efd8fa585045f961d325c24423c4906e33c23966754c3fb3f0b67abd524649bf510ec1351b30ed1162e5c040e571d2c3aa07417a383236
-
Filesize
142KB
MD53c7e9da9c88fed819ea677b1dc2d23ef
SHA1f15a21e03c3fede6a3d43f21158159c0867b0f1c
SHA2564043c95960b13d221c76c287e02e72b0e089400662b54c4ee578cfb6b7d581ce
SHA5126e220c0955ebd693bb496931ab02501826aba2bbe0099fa63f0d08763432da0a885f12efb45a4ab86f9dfeb845c7c9eec067c578fa125bd4436933fa5dba7bb5
-
C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.AssetBundleModule.dll
Filesize21KB
MD541ee0728dc4f3f1fe2235ed38750e30d
SHA11bfdac672fbe2a5493c97e5f29fb2b28cbdf3b80
SHA256d481567df81a4de96ac35c68a23fcac42131bd8154eb0f7b7ff383ea460be34d
SHA512dea670ae56710eb38cf35a0427852b4f410b204f9dadd15375bf7df96322d10255aa02488c5625906efd6f9793172d418e3fc3bfd6b5c64f6868c56eaa220dd0
-
Filesize
56KB
MD50e20bbce7d1f3827ff84008e3f586974
SHA16868cd8f91f488809c35aab83c9a76abd125d76f
SHA2565efd437ecde83296153a63172bfaf8a54729d6ef49cc1a90787c670b9c436a3a
SHA5128f984e18eceb76d67dd595fc9e32a965f45177453dc509f2371147429391c1a0a0f68d81c3803c288cbfa55e4009b2566677668211161d012607b076a1196f65
-
Filesize
15KB
MD5fa93ee2c83c263ada2d105a507b902a7
SHA1bc718b2365513ac4e0e59f1beb354d3b32688a56
SHA256d2bf168458c90f4531f9a5468ac0b6064271ab701dad813a4fd1df93fb84f825
SHA51232a36aa8d8000be9afc4ea716357edfa1d0653f2acf3d6254fb27663040bd9743202feda40379d75c298263cb0802803eb7eb2ff6a83ce66159b3db8ce86047f
-
C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.ClusterInputModule.dll
Filesize10KB
MD512fd008f8770717fd6bfc3f63618b433
SHA1b77b62f5d06cf05ab75d541e7335309e0b0f7e65
SHA2565d22a99279aaf71f79d47c65e30936b8e6da3f354a5c34baff62266ff3fbe85d
SHA512cfe17881bf9eeab81254f7d2a9579486a2c97a5649c3981035ff486120626879b0b1084a59588755b1e4b8d3c4e8e2b5a03c4f2b68c59d0f41789b6f73833345
-
C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.ClusterRendererModule.dll
Filesize9KB
MD5de7eb49ce4c01408dc2e73d5abf402f9
SHA1eb9527d9dde55fa1114b2cc81d22de1da978d91b
SHA2565b1cb68a9bfb1755d0a6c4d6446161f26128999a381a85c1286592298405ed6a
SHA512ab45d92cb35c523f8db6bf63762141ee2be94ac5e0b84a96a778cb0309541caa8e74245c7eb1175eeebd1812fca1da340cbc9c69d385ded4c3b9463eead6d07e
-
Filesize
990KB
MD532f769addcd79e8faf8acce08d6d9a58
SHA1f58d7cba21645b8414fc6e9d3a93058f6973eec4
SHA2569cbd669f76900a90025b7ace9a90025360eda03ed0877f630bd2ad91713f9969
SHA512cbb7ce6ef90cf39c281d9d8d1e4003480ae92c96b9f9f4bcf4a55854d9b04dbcf06b47108344f0169b304fe7f4477a1267f62e77f785341999adb8e8c3c697a2
-
C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.CrashReportingModule.dll
Filesize9KB
MD5008ee519aa035ca253a895ac60584d3c
SHA14016319e737ab17577bd8f2d7ffe0ab1660ede1c
SHA2566e84fe8e3b8633257d337b9ed1faabec0ba17d420cb4497914f3a302eef625bd
SHA51268e7da83a9d7a291d26b34f12a32d4aa1c2a72b362366d408dd1d6fe294534272bd164d9c2fc8e7d705a9e3006027e695eb323c3a7a09c99bf5d62b013002b5e
-
Filesize
17KB
MD55b56e7cef5ce1a7e04aef5bed6266c34
SHA197f97fc585dbcb63fec24f878d7eb2b9ab86a399
SHA25677e268f9400d5ad31f992318733caa485bce5b8a0730761d13cc340695a4a623
SHA512154a282049440ebe3a2f29780ff5e3958dd4e6b3b012d97b1216abfaa488d6386dacbbfc3dafdb9154a0c140efbf73bd8799576ce8b175321783e59eada360dd
-
Filesize
13KB
MD50bb287638c9a4c16b0d2f51ceaec7642
SHA13f8bd6df7f06e54ebb679d8e3f892d9027559c83
SHA256d6f78c997409439f998b053c3d75865323cc7985461524846efb09de1c7f9d90
SHA5124915b6c4a018572f8e7714d45a61392647635f2b6c58d7d276ae455ad9b665faa3410ebb6fa6a7fd3c737b3bdc34247ed23918bdc19a354562c7461fb1647c01
-
Filesize
26KB
MD5ab88b1a810e4127648a57834ccc965c5
SHA14f8a5e137040da21367423a936294b9460aaa565
SHA2568831dfadef1c9a97beafde9cb911fc2678c0e8e981e5172b4cc05f37c23aeea6
SHA512718f1d59c2aa32dd98c4919aef3d634966221f7d92fec617b7fb8555b11b16eaa11ad601c8b21ded7bd588fa908ecc63b38df11e542667f46a07cfc1e85cbcc6
-
Filesize
13KB
MD52eda0d49e619f28fe2f2199320e8f132
SHA1f105637a3e300f3869432046b27339bdc24d3c73
SHA256e0542742b63793b769edc0bbece9c1905b435337602d22617bf8d04c0d4a3a50
SHA512638d5486336b279f547e5add962a14f6fb99541e3f8eabe901b48b82f1b16f961047f3cc49e80872c33133d47ced9bd1ba93b3a333007843ca81dc39ba1bfeb4
-
Filesize
8KB
MD5a913a0662a1171cb84f326b2410d05c2
SHA1648ff9d56bcae49fae899f646c06d2f9c86f9192
SHA25682ed52a4ec966f124762d83e0f59928868a98ddbaa4ee5a92eea48a34a5c4114
SHA5126756b75b865e1ff3a930f06f2d098cae17be78188cbf4261379f1fedf36c9c3c4d3cef14a3f82e36c9cf088ca2a0d9e56197f12acd1b7c4daa2e4f7c758499af
-
Filesize
153KB
MD5fcaff9a3e2f1bd9ccba06a5f5d5230e0
SHA16233f094b655a522de9a8602b876b1e1fd7ccb71
SHA256ca85b168e1576f47d7216c069d217ecba84f6be9f3a32d9d2f5a29b8750a0cdf
SHA512da69749c25e4757b07337506bbbf546ce756ae42e69ca94ed03d8d1b5007b3bd83f4128d4cf274c545d8ed9f176aaccdfdb4b65d903b987416983da7a157b77c
-
C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.ImageConversionModule.dll
Filesize13KB
MD5dbbe8050b1c38f42c52fe566bc306a9d
SHA183655db29cf195c34896213d0f366c9e073db055
SHA256f139ba93472653aeb2118b6ae19aff688d2ce97070e40afcd2e43b06c76d7314
SHA512781902f780aff57fc0d143591a6f4fa7f367397cd97c0800ecbd003d686d0d237fcc16fd4b659f9bdb241dccbfdfddf033b8a220ad013a273ca97f062a0e15e4
-
C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.InputLegacyModule.dll
Filesize25KB
MD5369b66ad6db24e0327a8cd391826a01d
SHA1fd9ab9232081186f880b165af36cd29612a2ab8d
SHA256c61311358e85d9f568aebefb1ce3869af5180bae8478ef474bf095e7cf322fa8
SHA512b3dc25ce8aa6238b945e029ebf92cf08652f3e0be1cceed7864985ad2a64b81c05cb9066d14c7295a44d8c77234890fb1617fb613b23a09b5b1e863188bd5d18
-
Filesize
12KB
MD5dcde0acb59d8bc53beefa443b296e2c4
SHA1270b7c60ea30ea700c7d4050f4bf5a4dc75aa2bb
SHA2564fd07d628c008c09b5076e7839c50e56039d9c4e0e2dad0209305edc0dbc31b4
SHA512e5afed76c3582d4896ce678f7aae2c52e561b5ea08aaa8a92b9c905d8f294a02f8999e3214d7e082b04c5d5ee739ba99f54e89acf5e87aac611991a30c931bd1
-
C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.JSONSerializeModule.dll
Filesize10KB
MD5688645525d7316aea069d45b89c6cdf0
SHA1e618615c9916601182c54d761ab3b0126c973b40
SHA25673f67e7e493417a50db3b2a33310dc3b2aae47ce6bd4f846a50bce92a086143a
SHA51270abbaa51dab662b5588c2238f48c7bb4833278d454b341af260c8617598c42d641748630e9f70abb45604fb6a983873f879560e028dfe91a31f1749ac5252d6
-
C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.LocalizationModule.dll
Filesize9KB
MD5239b326911795fd245c87e6d1bdd3501
SHA1e922395610753a0ba3b22c566dc7a47d16c751d6
SHA2568e5a46e68b0bcea0caaa4688066f169dff47c5b38fdb171b1125764b081ad5ac
SHA512ccd7cb0db4fb95cc4cd4d304b61e5feb961d5ab1141bdf8a94524347ae08d3a5a8356711a702c5f0971290776e93301b8266507c37bcc2171c1455e3372f167d
-
C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.ParticleSystemModule.dll
Filesize132KB
MD540af01be3880ce9ea6908f6079dc6698
SHA1912d0adb62345929245d2e5485eb50105ba1f9d9
SHA2564a047608187bce1539f144ee246f04a0140cd16fbdddd52eec33e66db0e54299
SHA51272598070fa20c3427f40c5bb3faac7ac8d4fbfef54327b956dee5430106f3967f56672e2f10d15887e105dff2c0eaf3fce110e458c4447af6593c9218980a164
-
C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.PerformanceReportingModule.dll
Filesize9KB
MD569422e06705926a41be1e8165bbe409b
SHA16ca82754d2077a874f3225def34255bb692025c0
SHA256d5a03585abe440233a64f97e3e3385cfbc53ef7b3ac05229da12c944b1178a4d
SHA512c47bc6b4b5d3ae481a9fc56da96064ecd1a85382d6a1ef1a80228c93d7c8140f9d9db7a55e7cd626b64a4f476366938fd32a1ffbe3625461ac053660c982eb01
-
Filesize
103KB
MD558d9ba97fd7edc021278f36007c1d87b
SHA14c365d8ffce72c2beea0b69454656405f8a52728
SHA256a3cbcf28f3c58c1bc819b10305f271eb3941f08b0450329f8752794a6a287253
SHA51222f224f62b0754ceff6aac15e637a5b5e393c808ec27ecc5239f17e8d74ed68ea02d249a6a4f68afc68211730fe3096eb7aff7bbea507339bdb7632ccfb16077
-
Filesize
85KB
MD53ab3b2525166a3c28cf867c281e7ae08
SHA1cb5717fb6dceefb3689ee294a87d1538e96cbe25
SHA25630569022ff4d831b858ef5d51ff970c1521d5b003dc3ee9c7507394e19551e16
SHA512b9da3748c0b03c28789134261674589168e12648b3e14e953931fa1e9cf2cd0a29977e6da4087e4e1c43ced3e779d5e39c56329f6c92b85dfa6e104ed8614cbc
-
Filesize
8KB
MD5770362130d4d1ff4ffdfb0bd29ada728
SHA109d6a7d2f492a963d0aaf1ea59fc46ecd6b205a6
SHA2563f76f1db00bb104d0fcdd6f0196ed773f3868b3bcad24bfbe25ce18a10f698b7
SHA512b31c3a16a687b2e693a847945e510ae7bdffa40fa7e757270d58eb38e0fc0efcc441ff94dfcfc690fcdc4dd7c5fcc5a4ed75c8e7db0a18e2671e2a800fce2cd3
-
C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.ScreenCaptureModule.dll
Filesize9KB
MD5f77c38ae0aae1efea9bc65e7fda70e5c
SHA14b7649548735d6583d77b0fcc08406cb454da357
SHA2563a2037535b3a7e6acd65ee973c96af0052ccd4fd60266f7f6dd429327a8d9d2d
SHA512d7e1c6da2cb5a1451f42df0200db48b73d2b4173a2dddbcd28de96c27f2a2949f80547dcba39bf43358d0fa7fdd1e77cc02f2120f5711c70ed3594ab5525a92c
-
C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.SharedInternalsModule.dll
Filesize19KB
MD5a58faafa09ace4f4c44dbedafc2fb172
SHA10a6b0eaec42f1068c4cbd7a66e11b5c3d38c209f
SHA25697406b3568fbab883f2703bc7b74b22e96cbabb54e067051fbb8099c79553080
SHA5127249cd91ae8081368d91ebe3d3ec13b2a62b5afd28c44feb2fd684e06dc6c90da4cc30e71ce3a697b56c8cb23cb5683e7987796a3fd91a5cee49ea39e2668950
-
Filesize
10KB
MD5ba57addb13d49a7356b1fb0d1d1827e2
SHA1b962c3ca1ffe9faaf4a2f62fb328e2c480b8c12c
SHA256760671f8343c98a0cd81e759bfd25355a445e6c1a28aadf8a9942011e5fd7952
SHA512ea0f54fcdae8d451d4d591efbe461d284be0e4410bf739b4e5273fcba59b70c41223b6d4bcdbdddd72ded283de281c2d377efa85818c1627535ceafe23a5d42e
-
C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.SpriteShapeModule.dll
Filesize14KB
MD5478d652bc676cc5706a13cc0253a568d
SHA1b2250e791d3f40c6f6b101e853b046556905aa10
SHA256b2fc0a55b4088dd6d079c0a7030cfc9f776d6154a74db1b3b88e8d986da79ac3
SHA512f774175d788788f399927d4394241802b9056f9b398dcf4b81af9ba58d49c83eed92c346cde725a3837a316957eca9c059fa85afa33aafce1905595db8477db5
-
Filesize
9KB
MD53c6b2ec2adab89fbc22c01d7d03f76d1
SHA1f1373a5679c1ee3486bc223a01703419ef27b70a
SHA256a7f599d9ca9ec7ee63a697924153d0a739de136371ae307a0cbb462c22714e58
SHA512eac85602919e47b04a5e2b02020dc4eaeaeacdcc7ca2609b3bc421644b49ffe63b5d898204d6e5d32c6e636bad800faedc0cefac9cdf0b47c7bee89669af2acf
-
Filesize
13KB
MD5b9ea4399bb1f898a557f70b4812475fb
SHA1df668874cfb86622e815852509b144c06e278eba
SHA25600ad22e04cab7a463b69a9837326f4b460e1e7fd762f871bdf6c2c58a4ba49c1
SHA5121ad95ccf460f27d2dffb957a48a3e5e3e955537e3c8918ff52ea8348bd5bcc6d5b005a605e7b11e5854d00dc95d606582c56add574ea6d275a4f2c7ff570469f
-
Filesize
16KB
MD58c8aea652593f23cda24c177ae03e5df
SHA1a968ec6d3f4d899eda9d17da82cbf4ffa4405521
SHA256a7e08a4abe59da73613ffec325e8df0256f53754ce8401b980bd371707d3330c
SHA512d99b377c062b3e0b7aa910bf7febd5c889165155e013732e82daebf6526f3db844649843712aa15a17e3aadf23a8989dd0b5baceaed0a3c656428dccfbd46283
-
Filesize
8KB
MD5913a0dffa0edb47adc6dd6fc0eb4e3f8
SHA1226a01db999c6de9c41c66c2c79744baaa730c2d
SHA2560ce5f457222e9e46d5b56b03036a5172351d55d7ceec503a65b0ed52b9da4281
SHA512f56387ea34343ad4587adb6f3f7f0c27044c09fc6ba6ad6909072a980d52a448cb85780a0e67ae6e37fe33bf99f8899403f6eb37ef4e89f1c6c70e7aff66f671
-
Filesize
79KB
MD52f1a60cfb23a5fb8f8e7b881614f32c7
SHA175f4457a2b38e1f2864f06ccb0552e82330eb75b
SHA2561106fdcbaf0a3388855bcb5fac6d635dd530b776a9b4361cc101ea60f2743d05
SHA512dab10f55ed1dbcc2bae79cfd6f223d824bc834b9fffe7dabcdd7d1f4c4bf8dedb7588c3ccf39e57643438b234dfe60689878ea372e7c7354ecb94bae8e01e3be
-
C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.TerrainPhysicsModule.dll
Filesize9KB
MD53966da705eee5fea4833b04f659abc39
SHA143544d0ea9e55d3ab36f34d7b8d7bc4d10652c83
SHA256b82fbf6f0a5bc715c965f045a564462fa91f02537572504c00c5ebb3722dcd12
SHA512f837506ce4cfc79a510e8f688dd3a999a27e3e28975e9ae1b569b3397f90324f48eeb45614839a315cc92741498cc9b2a9d7e646d0a40707ceb6a3c178dced42
-
Filesize
182KB
MD53158d464f27554a66796a1a1e41d6523
SHA169b6a974c076ec2c3297818412b11367cd3447bf
SHA2563ea37c73cbdf4a5586b6d676a12a882ed2a7c8d13114eda36e2966832502ebe1
SHA512f14a3b9b2520e0ee99f9df03c9db70e80b82afb496d525c5fabfed904dfadd9120b4665b01f43a7a1474c055a27313793d7f103a6ca7bf8b2bd99716f484fa0c
-
C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.TextRenderingModule.dll
Filesize27KB
MD5208c5cec79e6a884dcb95d3aea993048
SHA109e003b55c000a4aa482c19ba9c03e6f669ecf69
SHA25682b727e11f621b8ae0678eae6fbbce2280749601467ce96d2ddc7f3f51507bb0
SHA51216d21a619d94d955da7335694b47956a00ae7a1e5b73bc5924377151baa9e4fce451cb119b06276082b28c476dbf61e6fd4af4dab095688ab6af8b90064c65fe
-
Filesize
24KB
MD579b6e744247ca45655d5e7f5d69e2308
SHA1939c7a40fba63bf117b5155b715a202b5d280a01
SHA2568bad72ba9d229af232c40326cdb7f3f32f2f9d84e05316544f4df829256a8113
SHA5126e387494c33472ef8f6af5349b41f825924f98f9eabe9c2ffc0355a79c291ee8b80718e71f882df6d40a717863bb09927cac1aa28e4f7c49c40039f3a833c1ec
-
Filesize
713KB
MD5869d5bb5ccd72066810b5e206f657fde
SHA169233c7c5122a46d10c45e6733fdc030464efbbd
SHA2562c66b92ba086dd3026900b742b2bd55edf1f63b0fec95166028b4254a2552bc8
SHA512b5dde43643f15c067e7e8d12eaa294d1c10833d15f7ae6585def0836d7412146b491c0d3d315b0f87304330df3e9914eec98c1212599670bf711f9f18b3dcb08
-
Filesize
23KB
MD5747ad1a0ee049165a2e7ffeb52f138cc
SHA1187d89cd50d8b0eb84e3f874e389a8810aab48de
SHA256d27a5ecc3f80a21f3a082574393a2f1652efd6dfdfd8bfaf01e37a3562e53b91
SHA512e840428d1e6e05a433b94102d742a4b3da4b9f80bea9ce4be7d7d6a6996e6a516805f78368fc65c14eae2ba9eebbe3266a4d9f7047a3f5740d9e1bf2af8b5c36
-
Filesize
75KB
MD5e017fe3c977b53cddead188a56870864
SHA19be15a953f7f0cef47bc13544726d9c67235a4b0
SHA256a744d6702c5df0a4f06572074c513eff6b6b5a7b28b6dfc5a26b654e2bdb99e5
SHA5121a43f124e8570847bf047b4bba3bf186fcbb51a591f47f44545e44b9345480a66a2c388cbc45d1c949a051ef76188491213e5281283a845bfc1efc5e0b82fd88
-
Filesize
8KB
MD5829a09ab809ab02431d8879219b6a6ee
SHA1d6ae7ca07e3961f9437ca50bde250ea6cdc9282c
SHA25624c5f12421dc9260d67105ccdd5a180e8bf64442e8edcfd5374563262c252a54
SHA512c462cb031a3c23e9bd4f9627d888f0bfbbc6224a095344fbfc50b5a93f998bc1857f9634e4d6cf45aa10845fa60addba7bd60c9e90d6666433fb1c82939507b0
-
C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.UnityAnalyticsModule.dll
Filesize32KB
MD50ccdc9779c483ca24939d94ec6a4f891
SHA1739128c878f10e42e65bce65305715f8a95bc61c
SHA256623d5db5deac5a22dac7f394b307f9bafb62317acda74c767ed635831eb182af
SHA512d24beed1226da363ed45756707781e441a4449fcbf67ea02377aef866a6bb60fe07fd60ef3a481247b49a0c63a74d16329689a6854ca9f5d0e37dbd5aa820beb
-
C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.UnityConnectModule.dll
Filesize10KB
MD5832688f667647b8f5b36dbdb0e39a1d9
SHA142141df14fe1ac5b052aaf3e4b5bfab84af32d13
SHA256140878d59f38259eff2847702da824a67b3a9277a4b072b183060921bb0f11a8
SHA51202384f6046b3aa5903524bb252ea9836d96ef6040f32454b153d9fc6b60e938166d95ef907ef1e71710ad0e73ac8f6b9bb4eefe8fca509bec78b3e6fbbc1cbb6
-
C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.UnityTestProtocolModule.dll
Filesize8KB
MD550d91406969a44098ad0729a7a41eae3
SHA1a88ec6b65584f8dc4338cf1cf473100c9ac3eb43
SHA256a977930cd0aaa2366c7cef7dfd73c495e072e9c0da51d2a3171a408ca95b3c39
SHA5126269b600d67a7b37443852a7fdc981768e8e5aadb05b8849617d90125351ee8ea9cdc3d29af64009b085e3e51d8fe1d05001094bd318cf352c2b6062b0441092
-
C:\Users\Admin\Desktop\VRM dollplay\VRM_DollPlayPCver_Data\Managed\UnityEngine.UnityWebRequestModule.dll
Filesize42KB
MD55156a33bb183d3d1cb056aa7777eee5c
SHA16a5d38f49f4ab591edddebb2ebe887a7ff86aa12
SHA25648fa97b126d110b5b9daee6fa368eb1b0da948b80d5d128a2ed26527e5f361e0
SHA51286e292219fd9d4a2a5e57cee92b21026db1713bc0426ac44b74cf5fabc378b923343d75c7e5753ee0bcef620ae4261d1a255db5f5632edd76d3326d23a8d1f82
-
Filesize
84KB
MD55af199bdf50ae1cb0dcc25a53689643f
SHA172277de663822590ba358ad182c5fbfb9f87cf91
SHA2563742efddb93a4a4ca3d66742783f7c5df688fae72e7187c3d13835bd340729f3
SHA512f951e1e2852076d2e0f79f12ebc10d60452421e1b43b23da188c6cb5044cd33c00fedbade7d6c486b9c4978a559590a8c64d8e05a65bac5b4321b9434035f865
-
Filesize
3.9MB
MD5459241930cb0aae5a2f6f09c8fff75cc
SHA14ee039a526a0a31238daaef020bfb3a813524b6a
SHA2566b226d4b6bc520438f81a45cb478b0d13d2187ed679936bf9a2b82978198511c
SHA51231d4ce4bdaa5073a315212febe03fbe121b6e598d2bdb9890d5cae68c9c554bca91d86f4f645eaa60488f13efb6c61721d9e5863bc80d5a487dfb4d2acd4d3c5
-
Filesize
3.7MB
MD5dab5f3c3e100824ae7e91815c564a608
SHA15af241574144085d717215f88caf20c56d07858d
SHA2567b4ec48745b3a28232f7598738754255c9536f00ae3dfb0279f564a0bac55241
SHA5121584d2dc5f65cb523ebb056d321e0312ad92cfd15da563c1c1fbf4cc3065b4eb85a82c977259441c05c31e35128f49a06e711d26718c4d2614eb86123a588ecd
-
Filesize
32B
MD5bdc48d71da728d72987c22b2f3206984
SHA18bde9082e6f5aa3db574ba138cc6cb543af602d5
SHA25641170e392c5f697fe97d1c5412a3818ff8256b7fea19afad3f6d7ecfb3a22b86
SHA512933cd6df20254bf52ca255df714b2b913480213b1ac398845c7a188fd6a2179751f920a8c1a2179f992ea9da83fd45949b08d5c3f68143d0c26af45bd89359c2
-
Filesize
62B
MD5100da3c20e8e4a12d9f1009ca8a525d7
SHA1957413b32f40221f581e0fc5a1582ad429c5dea4
SHA25678cc47cbbed8923df2d9eb2da0c8fd7b3b400b3353544adb47c327802fc0ba56
SHA5124d28d05522a0c8c5684df3b3c90344ce1aa1d6455bfe1a0edac02ea73c1a4b36c8d113376565bd0d44e8962f4bc330ce768dbfb2b64a1d926435e6f0b1675c80
-
Filesize
108KB
MD573b29c700940e60add165f774795d119
SHA1ffc6f432170e6acafcd52b574890134c45b5bb3b
SHA256dece20d78829a489798877ad77aaf5e81031cc49a48d8a29409374af9a95a9d8
SHA5122385a0e30e6d2c5c1585c3c87615496d27fa5f6c6cc0e54d5c57c31b5258718b06ccb4a9395e9fb02a25925cb06120e2da69f224ea1c1f5b59896e17d4db696d