3b2d41ca1817d3034fd851270e776b77d8dc116c425511ce4630378176516182

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2025-Oct-13 13:43:44
Detected languages English - United States
Debug artifacts C:\build\output\unity\unity\artifacts\WindowsPlayer\Win64_nondev_m_r\WindowsPlayer_Master_mono_x64.pdb
FileVersion 2019.4.41.7021524
ProductVersion 2019.4.41.7021524
Unity Version 2019.4.41f2_6b23d448b533

Plugin Output

Info The PE contains common functions which appear in legitimate applications. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryExW
Suspicious The PE is possibly a dropper. Resources amount for 86.8037% of the executable.
Safe VirusTotal score: 0/69 (Scanned on 2026-07-23 20:29:05) All the AVs think this file is safe.

Hashes

MD5 11b2749e15ff8c6652f98af4ece89504
SHA1 3f6c974aefbdb24f22bcdb484cddae820efde296
SHA256 3b2d41ca1817d3034fd851270e776b77d8dc116c425511ce4630378176516182
SHA3 ec39e28fbc1f0b81dbb658fc9da375ac148ebb9acd913a9fc2d524dddd5a9ba2
SSDeep 12288:J7qTUJxAL+m4Dxc9qeDF1qbxp+KoEzhhQP/Z29W:hq2+qeGxI4zhY/iW
Imports Hash fd60dddc87379c239e8ac49516966c3e

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x110

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 6
TimeDateStamp 2025-Oct-13 13:43:44
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0x9e00
SizeOfInitializedData 0x95e00
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0000000000001260 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x140000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0xa3000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 396787b09c7084619fd353ed4d4aa25a
SHA1 10bbf1d12fd72a6f2490dae0fb34b3e3c37d0397
SHA256 84c4f4af681e7c55e04955e3244214c6a39406c9ff283dac14b45179c7344fd2
SHA3 2dbc41d4fcc7f9459799c1f273cc7d0b29a65a800004b70b2d8024daf74dfc23
VirtualSize 0x9d70
VirtualAddress 0x1000
SizeOfRawData 0x9e00
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.39606

.rdata

MD5 d444408938d4adf089563b2fdae29283
SHA1 02aca6b80efd48a86b41ecd26a42d552c8e397fb
SHA256 fed395441aa073f1602e478c277af76bd2c9b291d92ae70d68a4748a4b7c070a
SHA3 3419b3a5585458a2959e7c3b3cefa2a4ab769efb1beb5e1bffe6da4d2e42940c
VirtualSize 0x88de
VirtualAddress 0xb000
SizeOfRawData 0x8a00
PointerToRawData 0xa200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.72673

.data

MD5 db32eedebac3d09a8db683fdd7266183
SHA1 9d3ad2e8f784250c149bc0545875f3347c1e07d5
SHA256 63a977bb7df30209d66ab0ee3c2587394d2d84b87cfabab13902a80a9f8ac2bb
SHA3 f60fb1eaea0dc406d8fd8219c5b9519256c10cea02ce9801f2b262cdde729c42
VirtualSize 0x1bc8
VirtualAddress 0x14000
SizeOfRawData 0xa00
PointerToRawData 0x12c00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 1.81338

.pdata

MD5 3ce1bc4528abab2f9296f6de2d66eb13
SHA1 236a9014dd4163c9bea0d3216c4339b71336ac60
SHA256 846c816328ade2f569bd6d1755940b260f0c1dc44653c50fa0b693d81cdc395f
SHA3 78586f62c74b7328c23e5e427db6af1753665224f815fabb19547b4c15db1d67
VirtualSize 0xc18
VirtualAddress 0x16000
SizeOfRawData 0xe00
PointerToRawData 0x13600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.30914

.rsrc

MD5 a89db860e5fe8a74c67d066da2132e6e
SHA1 9b8c956313b1eca2181b41ca11f13e320e0729cf
SHA256 f84500f7e516339dd9eec270ec1ce8484a5bc18acd9de5c47fd33c4f5bba31f2
SHA3 74dcf9fa64ba68441e229c73a98cfcd5f0100f9b85469a1ddc7d6b218a1f1ae3
VirtualSize 0x8a148
VirtualAddress 0x17000
SizeOfRawData 0x8a200
PointerToRawData 0x14400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 6.07614

.reloc

MD5 15c60be0054361c5f282b9c542c4b5cd
SHA1 3414732e68613e7ee32812f73810341e1aa3c9b2
SHA256 1597710aaca61843fdb13da316d06290830148f7e34074bef548abcbffa3b72c
SHA3 dba1e0d3f98cd89e8c35eb26f42dfaa9d0746b81262aa44f970150cf3cd45691
VirtualSize 0x614
VirtualAddress 0xa2000
SizeOfRawData 0x800
PointerToRawData 0x9e600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 4.75713

Imports

UnityPlayer.dll UnityMain
KERNEL32.dll GetModuleHandleExW
WriteConsoleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
CloseHandle
RtlUnwindEx
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
GetCurrentProcess
ExitProcess
TerminateProcess
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
LCMapStringW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
CreateFileW

Delayed Imports

AmdPowerXpressRequestHighPerformance

Ordinal 1
Address 0x14004

NvOptimusEnablement

Ordinal 2
Address 0x14000

1

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x42028
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.04259
MD5 b41971486f0ef4e6827d8fe767223b1b
SHA1 4fe81e9fab4117f4bbb5246f2461066f3e3426ca
SHA256 a9652e0dfe93f168a98c4c7eba560a0207e2227470967f5a3b19d07539154b97
SHA3 c24b50f4e966dac361b049d7977368add57370d76a0d937423ba2a6a8a024de0

2

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.0684
MD5 f9e4eacb809d74cbc9dc03f0380b56a9
SHA1 41926c1d65f648a661aeea3f62c811f453e47987
SHA256 0c1c9a92f57210239f48939a0636e72ae685bf521a7da5b2c7dd0906db329a07
SHA3 450179b48a94f24f8433a675ff82f778115f573bf78c3d7acbd822d7f0b82e03

3

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.08774
MD5 dab0cb7267d5459227f9296a4f2ae8f2
SHA1 d9d9c90b57d3455f95235527fce419db7f10f130
SHA256 83140acc1b241deeaec59130c3a49ecde8d60e5bfd254e7007c1144f83e3a612
SHA3 39a618dbc08b6749c63a56569c0fede1fb163b0ac62988d50b4ff5d8182ced27

4

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x94a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.10418
MD5 6150f09c91474d92b46ac54d0abb8cde
SHA1 d928d119c3a39b97ba31684b5a883ed04af9a294
SHA256 3387ca70badb13fdf89688271613bf7a9199c66c7223b4a11f3add507fa8dbd6
SHA3 36bcfbb42525ed75bfc37fec2f4f9379adbcd0fb3357a67ee098878f0b2048cf

5

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.12857
MD5 f80f5bba02135c1de5c1c33f45132731
SHA1 0ef679279339b41d09def163a6db948c07ff87cb
SHA256 6adfefd2a8b546842fc17cd685013314be2083d9e7251369332f160172c92b97
SHA3 be79bb77aa657a84eb2e433e6b16baa154e89712f611798cb05feb39d5057b04

6

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.10433
MD5 29813bd4431514e8a591ada7ea516c63
SHA1 9d94ea04e19f3afd03ea4e25426e28329f670a1a
SHA256 ab966f165fbac51a008661483d279eefe6b49369f523588bc5628465d4d748cd
SHA3 e99f3188b7b2aed3f88b65c8a657a805240e793966edb55563a632aa8c7da3ea

7

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.15193
MD5 47380ca29b748e31a17f0e50ff943e97
SHA1 ab770ec05436dba1a8687adb16d8f45197ced188
SHA256 ea3f6c4dbf6191057b4b64c9f72269b268d20c63e7224cd33f11b7b64fe9adde
SHA3 c6a79039f494d6a828f082f1242b4159bba613cd1db2475377d7da84f6cc01da

8

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x988
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.10687
MD5 d01c37a948fdf69ce6e39f0509960987
SHA1 e237eca58e037889d9f902c806bb6e00af34584c
SHA256 d2adec96d0cc78084968167486f4db5d9c059bbc6dc7886ff7effe2515af8889
SHA3 1c434cd6a9621ab48993a30386a52c50adbd4aa837d212934ea671c5eaa51a66

9

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.94823
MD5 59d761b3b59dff972f3b8b55568c186b
SHA1 0df1219746139c69727baf485929681c54fdf3f8
SHA256 bb80515422981ba0d9d475a066ee78707143d57745f236bbb2e8d1642d7b294a
SHA3 7d0727c4f8736d5ae4079498725965570359c7a2b7ea30a288b230b304d738c2

103

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x84
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.04448
Detected Filetype Icon file
MD5 f7731730720cfe035cf030b40d0e2eb6
SHA1 d046e23f2ee2b93ad96be8e1dc9120ecf3915091
SHA256 5c92a41adaf3265071482fd1a182ae8702c168636a7d9ff51798ee3a1dfc8500
SHA3 6f2d12e4c63c131a3f7f48293996e2be05da351536d013affe5d2265965ce657

1 (#2)

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x1c0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.4096
MD5 e97ed495c6341a3425807b54aaca0b7e
SHA1 b4c2f9cce71bc5e072911eaf6b47579467ab6aa9
SHA256 d3b6965dfd589a73068e2d5b5b952db4c9e50f4fe0338ca118c3b744890a54d3
SHA3 7d7618bbb67ec1f3f15cfd91a39c73563a79fc3daab6a394b12a13f12ef9103d

1 (#3)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x6c1
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.37708
MD5 aab7e8aafe7b06ab3d003b54ab5e18ed
SHA1 dccf0408f43059df37b755f3241a8b4b35c728af
SHA256 fb88b19523afd8fed48eddfd10805a3a0a45997bbf8fac04d595ddf93c1a88a8
SHA3 a981b8e907b79cd9448766ace938dfd96560d11c29e6ba165912a8508bd52ca7

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 2019.4.41.9172
ProductVersion 2019.4.41.9172
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_UNKNOWN
Language English - United States
FileVersion (#2) 2019.4.41.7021524
ProductVersion (#2) 2019.4.41.7021524
Unity Version 2019.4.41f2_6b23d448b533
Resource LangID English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2025-Oct-13 13:43:44
Version 0.0
SizeofData 127
AddressOfRawData 0x123d0
PointerToRawData 0x115d0
Referenced File C:\build\output\unity\unity\artifacts\WindowsPlayer\Win64_nondev_m_r\WindowsPlayer_Master_mono_x64.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2025-Oct-13 13:43:44
Version 0.0
SizeofData 20
AddressOfRawData 0x12450
PointerToRawData 0x11650

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2025-Oct-13 13:43:44
Version 0.0
SizeofData 696
AddressOfRawData 0x12464
PointerToRawData 0x11664

TLS Callbacks

Load Configuration

Size 0x100
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x140014028

RICH Header

XOR Key 0x2a1ac2b2
Unmarked objects 0
C objects (VS2015/2017 runtime 25711) 10
ASM objects (VS2015/2017 runtime 25711) 5
C++ objects (VS2015/2017 runtime 25711) 141
Imports (VS2015/2017 runtime 25711) 2
C++ objects (VS 2015/2017 runtime 26706) 38
C objects (VS 2015/2017 runtime 26706) 16
ASM objects (VS 2015/2017 runtime 26706) 8
Imports (VS 2015/2017 runtime 27012) 3
Total imports 82
C++ objects (VS 2015/2017 runtime 27012) 2
Exports (VS 2015/2017 runtime 27012) 1
Resource objects (VS 2015/2017 runtime 27012) 1
Linker (VS 2015/2017 runtime 27012) 1

Errors

Leave a comment

No comments yet.