Manalyze report for 3d5ba478c7d5078bb4d9f5552c141e749b8bd7aef9a458ae85affbeb00dbd03d

Summary

Architecture	`IMAGE_FILE_MACHINE_AMD64`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
Compilation Date	2016-Mar-11 00:21:18
Detected languages	English - United States
Debug artifacts	C:\buildslave\unity\build\build\WindowsStandaloneSupport\Variations\win64_nondevelopment_mono\player_win_x64.pdb
FileVersion	`5.3.4.16628561`
ProductVersion	`5.3.4.16628561`
Unity Version	5.3.4f1_fdbb5133b820

Plugin Output

Info	Matching compiler(s):	`MASM/TASM - sig1(h)`
Suspicious	Strings found in the binary may indicate undesirable behavior:	`Contains references to system / monitoring tools: rundll32.exe` `Contains references to internet browsers: firefox.exe iexplore.exe` `Tries to detect virtualized environments: HARDWARE\DESCRIPTION\System b3 eb 36 e4 4f 52 ce 11 9f 53 00 20 af 0b a7 70` `Looks for VMWare presence: VMWare` `Accesses the WMI: root\cimv2` Contains domain names: api.uca.cloud.unity3d.com cloud.unity3d.com config.uca.cloud.unity3d.com connectiontester.unity3d.com connectiontesterbeta.unity3d.com cs.unc.edu curl.haxx.se example.com facilitator.unity3d.com facilitatorbeta.unity3d.com http://curl.haxx.se http://curl.haxx.se/docs/http-cookies.html http://msdl.microsoft.com http://msdl.microsoft.com/download/symbols http://unity3d.com http://www.openssl.org http://www.openssl.org/support/faq.html https://api.uca.cloud.unity3d.com https://api.uca.cloud.unity3d.com/v1/events https://config.uca.cloud.unity3d.com https://stats.unity3d.com https://stats.unity3d.com/HWStats.cgi masterserver.unity3d.com masterserverbeta.unity3d.com microsoft.com msdl.microsoft.com normal.xyz openssl.org proxy.unity3d.com proxybeta.unity3d.com stats.unity3d.com tangent.xyz uca.cloud.unity3d.com unity3d.com vertex.xyz www.openssl.org
Info	Cryptographic algorithms detected in the binary:	`Uses constants related to CRC32` `Uses constants related to MD5` `Uses constants related to SHA1` `Uses constants related to SHA256` `Uses constants related to SHA512` `Uses constants related to AES` `Uses constants related to Blowfish` `Uses known Diffie-Helman primes` `Uses known Mersenne Twister constants` `Microsoft's Cryptography API`
Suspicious	The PE is possibly packed.	`Unusual section name found: data` `Unusual section name found: .trace`
Suspicious	The PE contains functions most legitimate programs don't use.	`[!] The program may be hiding some of its imports: GetProcAddress LoadLibraryW LoadLibraryA` `Functions which can be used for anti-debugging purposes: SwitchToThread` `Can access the registry: RegCloseKey RegQueryValueExW RegSetValueExW RegCreateKeyExW RegCreateKeyW RegSetValueExA RegQueryValueExA RegDeleteValueA RegOpenKeyExW SHDeleteKeyW` `Possibly launches other programs: ShellExecuteW` `Uses Windows's Native API: ntohl ntohs` `Uses Microsoft's cryptographic API: CryptDestroyHash CryptDestroyKey CryptVerifySignatureA CryptImportKey CryptAcquireContextA CryptCreateHash CryptHashData CryptGetHashParam CryptReleaseContext` `Can create temporary files: CreateFileA CreateFileW GetTempPathW` `Memory manipulation functions often used by packers: VirtualProtect VirtualAlloc` `Has Internet access capabilities: WinHttpGetIEProxyConfigForCurrentUser` `Leverages the raw socket API to access the Internet: WS2_32.dll` `Enumerates local disk drives: GetDriveTypeA GetDriveTypeW` `Can use the microphone to record audio: waveInOpen` `Reads the contents of the clipboard: GetClipboardData`
Safe	VirusTotal score: 0/72 (Scanned on 2026-04-18 07:27:50)	`All the AVs think this file is safe.`

Hashes

MD5	`120a6f620fdc5fe321bbd88ca8021923` 🔍
SHA1	`4f65145e0a93617be7fa1e90a0920adcb1312a81` 🔍
SHA256	`3d5ba478c7d5078bb4d9f5552c141e749b8bd7aef9a458ae85affbeb00dbd03d` 🔍
SHA3	`81e07086943063f9ce2781cdfcd110b04072d5c4a9a4d9558621aedd3a66c5c7` 🔍
SSDeep	`393216:ojwcJ+W/tbcV8cUiZ+aPwsUQXNR96llTTu:KZer6H` 🔍
Imports Hash	`3f389f233f94b5759bb28e7f58383ae1` 🔍

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x120`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_AMD64`
NumberofSections	`11`
TimeDateStamp	2016-Mar-11 00:21:18
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xf0`
Characteristics	`IMAGE_FILE_EXECUTABLE_IMAGE` `IMAGE_FILE_LARGE_ADDRESS_AWARE`

Image Optional Header

Magic	`PE32+`
LinkerVersion	`10.0`
SizeOfCode	`0xeb1c00`
SizeOfInitializedData	`0x5ca200`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x000000000076CC50 (Section: .text)`
BaseOfCode	`0x1000`
ImageBase	`0x140000000`
SectionAlignment	`0x1000`
FileAlignment	`0x200`
OperatingSystemVersion	`5.2`
ImageVersion	`0.0`
SubsystemVersion	`5.2`
Win32VersionValue	`0`
SizeOfImage	`0x1482000`
SizeOfHeaders	`0x400`
Checksum	`0`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT` `IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE`
SizeofStackReserve	`0x100000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`4a19827c5280f5b83de4d2d9db7e796e 🔍`
SHA1	`6095f617eaaaa4e809fec9c4ed9e89d84fbf321f 🔍`
SHA256	`d3dec3933d1e3cfd4a4d83915ad96f427ca205cdc1768e2e4e4b61293900be8d 🔍`
SHA3	`b510b8525bef779e28f50ed06985b476c37030f81337a32099855097b9d23165 🔍`
VirtualSize	`0xeb1a6c`
VirtualAddress	`0x1000`
SizeOfRawData	`0xeb1c00`
PointerToRawData	`0x400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`6.50096`

.rdata

MD5	`71331a7249c08705ec9bbdfd17a25cbd 🔍`
SHA1	`28ed5f29d147ac0d70ea5bd6997921fa88be92e7 🔍`
SHA256	`ad64d6615057364fea73f9cbc32704efe3f194b2e599355fe133ec55bc68ab51 🔍`
SHA3	`45d40b9aa91efd2242c7690c44da2ea913decc0cd82223e560996a83903e9b0e 🔍`
VirtualSize	`0x2ca524`
VirtualAddress	`0xeb3000`
SizeOfRawData	`0x2ca600`
PointerToRawData	`0xeb2000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`6.23458`

.data

MD5	`1a6f88169a37efe512cbc5b1ccc8699c 🔍`
SHA1	`fdfd21c626b609147bde931d45dea9fbd76f6b10 🔍`
SHA256	`fea159ff08e0df98816c7afbe5a4e705afe41be5d9cfdd4bfd5e0ed25fc220f8 🔍`
SHA3	`1d89093ca54845594b299d7c5a0fb9662f08f671e1bb03c0aba4689afb4cd12d 🔍`
VirtualSize	`0x181aa0`
VirtualAddress	`0x117e000`
SizeOfRawData	`0xa7000`
PointerToRawData	`0x117c600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`5.00542`

.pdata

MD5	`0e52fdd8e6b55d9a42fa6f4be649d917 🔍`
SHA1	`b8069d96578ffa006cb87699a75ac00fd2cd56f5 🔍`
SHA256	`aeb5c3da7163fd92cf3e6462c1c4b84135fbfa258330dcdce209e5cd4f893c04 🔍`
SHA3	`fa1e1446ef7f7437b3d861f7f22ead2f86fb08f3ffa32a36692411aacee9b874 🔍`
VirtualSize	`0xc0444`
VirtualAddress	`0x1300000`
SizeOfRawData	`0xc0600`
PointerToRawData	`0x1223600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`6.77951`

text

MD5	`2a38ddc6ef7aecb5d424985583447393 🔍`
SHA1	`cf5e18a866422821645635397306a201cafe3cc4 🔍`
SHA256	`3d3c876e072dc1958f9866a4c23be8f2b4b344c32717844608ebac34719fd822 🔍`
SHA3	`d0351c9b57dd39b76ebaa0e5d7f3b20e8cea50626c04e4a9a5e68138069ccc22 🔍`
VirtualSize	`0x2f35`
VirtualAddress	`0x13c1000`
SizeOfRawData	`0x3000`
PointerToRawData	`0x12e3c00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_EXECUTE`
Entropy	`5.80466`

data

MD5	`fa1f8e536493b8bff5cbae15b1cada56 🔍`
SHA1	`a1b8bcea4cf678514c5aff7286f765812c93ec9f 🔍`
SHA256	`cf3966ed1969631124f5c7c9ba0bce614f49e3b215c64d9fc74f314c11b260b0 🔍`
SHA3	`a1e21fca24f948f12af7abb69cd0143197ae9f3a23229e228643918fe742d153 🔍`
VirtualSize	`0x6754`
VirtualAddress	`0x13c4000`
SizeOfRawData	`0x6800`
PointerToRawData	`0x12e6c00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`6.39644`

.trace

MD5	`fcf4ba823b2ea50880ebf257870a61a0 🔍`
SHA1	`9e6df439cfd2f5c573822d968c0b8f797c7b735e 🔍`
SHA256	`2b7de242d03c3f1845cea57088ee0d4bd399e4c55debebe5fc4a7c7d6e5016d0 🔍`
SHA3	`dd50cbd4729b619f62e16fa5d6094aba673ca0a78aedbf1aa699ea0095632ba3 🔍`
VirtualSize	`0xb08`
VirtualAddress	`0x13cb000`
SizeOfRawData	`0xc00`
PointerToRawData	`0x12ed400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`5.71291`

.data1

MD5	`f5688adfeaf35cd6be99948b3e39f323 🔍`
SHA1	`2f55833ab355e954606909994f39dda329ac124f 🔍`
SHA256	`e4c3899536c9b4e013c94c9d414ad6c0902675cabdca901b48355f1cfc5b257c 🔍`
SHA3	`250e3c80907146c70bf643680ffe1d340a35f3acc2c6b24760df231480e9ac57 🔍`
VirtualSize	`0x40`
VirtualAddress	`0x13cc000`
SizeOfRawData	`0x200`
PointerToRawData	`0x12ee000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`0.436447`

_RDATA

MD5	`329d53a140b4d0fd594e3c0debe8baa2 🔍`
SHA1	`e8fd5056d465b0a4922433487623904aa890ecc0 🔍`
SHA256	`4d61edd598a7cb2e01106cf131790bd4d74e0e05090ce77c4302679bdb07eff7 🔍`
SHA3	`422958b960e7ae5e5d73875578057e58e4700f788a0097109281f9ff8545d742 🔍`
VirtualSize	`0x1200`
VirtualAddress	`0x13cd000`
SizeOfRawData	`0x1200`
PointerToRawData	`0x12ee200`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`3.74821`

.rsrc

MD5	`84cc18151ff9865d86249b84b5927dcc 🔍`
SHA1	`a4a9ac3d64ac0bcc93cdb7463425d3d85027f672 🔍`
SHA256	`b3e904e0403b3bfc80fec5d5b077ea5f71b2d9c54e7fb465d8a331b22e9521b2 🔍`
SHA3	`878dd44675bbbd915a6e395aacd05afcc912053bcbdb1a9d7e03cd01e007ee49 🔍`
VirtualSize	`0x8a678`
VirtualAddress	`0x13cf000`
SizeOfRawData	`0x8a800`
PointerToRawData	`0x12ef400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`5.83326`

.reloc

MD5	`d9a4927a39a7b03139b1031a461d4ca2 🔍`
SHA1	`c717c127f2f991bc89abde782b74e9eaf11b1ce9 🔍`
SHA256	`d2514ecdd398bd0cc3365f717b8714ba3bca13effb02d97763744258dcb6ea16 🔍`
SHA3	`e8206590195d293cce6f60debaa736224db69b3225a72cd885d5d06816367754 🔍`
VirtualSize	`0x2781a`
VirtualAddress	`0x145a000`
SizeOfRawData	`0x27a00`
PointerToRawData	`0x1379c00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`4.38356`

Imports

HID.DLL	`HidD_GetHidGuid` `HidP_GetCaps` `HidD_GetProductString` `HidP_GetButtonCaps` `HidD_GetPreparsedData` `HidP_GetValueCaps` `HidP_MaxDataListLength` `HidP_GetData` `HidD_FreePreparsedData`
GDI32.dll	`CreateDIBSection` `CreateBitmap` `DeleteObject` `GetObjectA` `ChoosePixelFormat` `GetDeviceCaps` `SetPixelFormat` `SwapBuffers`
USER32.dll	`OffsetRect` `GetAncestor` `UnregisterClassW` `GetDesktopWindow` `EnumDisplaySettingsA` `AdjustWindowRectEx` `GetWindowPlacement` `SetWindowLongA` `ChangeDisplaySettingsA` `GetDlgItem` `SetWindowLongPtrA` `CreateDialogParamA` `GetWindowLongPtrA` `SetWindowPos` `GetWindowRect` `GetParent` `GetThreadDesktop` `GetUserObjectInformationA` `EnumWindows` `RegisterWindowMessageA` `SendMessageA` `SendMessageTimeoutA` `CopyRect` `ShowWindow` `SetForegroundWindow` `GetRawInputDeviceList` `GetRawInputDeviceInfoW` `GetRawInputData` `RegisterRawInputDevices` `CreateIconIndirect` `ReleaseDC` `GetDC` `GetSystemMetrics` `SetCursor` `LoadCursorA` `DestroyCursor` `DefWindowProcW` `DestroyWindow` `CreateWindowExW` `CloseClipboard` `SetClipboardData` `EmptyClipboard` `OpenClipboard` `GetClipboardData` `IsClipboardFormatAvailable` `SetCapture` `MessageBoxA` `SetDlgItemTextW` `IsIconic` `SetDlgItemTextA` `SendDlgItemMessageW` `LoadIconA` `EndDialog` `DialogBoxParamW` `RegisterClassExW` `MessageBoxW` `WindowFromPoint` `ReleaseCapture` `UnregisterDeviceNotification` `DispatchMessageA` `TranslateMessage` `PtInRect` `GetClientRect` `GetWindowLongA` `GetMessageExtraInfo` `RegisterDeviceNotificationW` `SystemParametersInfoW` `ClientToScreen` `GetAsyncKeyState` `ScreenToClient` `IsWindowVisible` `GetCursorPos` `GetKeyState` `wsprintfA` `GetUserObjectInformationW` `wvsprintfA` `MonitorFromWindow` `GetCaretBlinkTime` `UpdateWindow` `PeekMessageA` `GetMessageA` `ValidateRect` `EnumDisplayDevicesA` `SetFocus` `GetFocus` `ShowCursor` `SetCursorPos` `ClipCursor` `GetWindowLongPtrW` `SetWindowLongPtrW` `PostQuitMessage` `RegisterClassW` `SetWindowTextW` `CopyImage` `EnableWindow` `MsgWaitForMultipleObjects` `DispatchMessageW` `IsDialogMessageW` `PeekMessageW` `CreateDialogParamW` `CheckDlgButton` `IsDlgButtonChecked` `DialogBoxParamA` `LoadImageA` `GetMonitorInfoA` `EnumDisplayMonitors` `GetProcessWindowStation`
ADVAPI32.dll	`CryptDestroyHash` `RegCloseKey` `RegQueryValueExW` `RegSetValueExW` `RegCreateKeyExW` `GetUserNameA` `RegCreateKeyW` `RegSetValueExA` `RegQueryValueExA` `RegDeleteValueA` `CryptDestroyKey` `CryptVerifySignatureA` `CryptImportKey` `CryptAcquireContextA` `CryptCreateHash` `CryptHashData` `CryptGetHashParam` `RegOpenKeyExW` `RegisterEventSourceW` `ReportEventW` `CryptReleaseContext` `DeregisterEventSource`
WS2_32.dll	`getprotobyname` `getpeername` `WSACancelAsyncRequest` `WSAAsyncGetHostByName` `recvfrom` `recv` `ntohl` `WSAEnumNetworkEvents` `WSAResetEvent` `WSAWaitForMultipleEvents` `WSACreateEvent` `WSACloseEvent` `WSAEventSelect` `sendto` `send` `bind` `select` `getsockopt` `__WSAFDIsSet` `ntohs` `freeaddrinfo` `WSASetLastError` `setsockopt` `ioctlsocket` `gethostname` `socket` `WSAGetLastError` `htons` `connect` `getsockname` `inet_addr` `WSAStartup` `inet_ntoa` `htonl` `gethostbyname` `closesocket` `WSACleanup` `WSAIoctl` `getaddrinfo` `getnameinfo` `accept` `listen` `WSASetEvent` `shutdown`
KERNEL32.dll	`InterlockedPopEntrySList` `InterlockedPushEntrySList` `InitializeSListHead` `GetThreadPriority` `GetProcessAffinityMask` `FlushConsoleInputBuffer` `ExpandEnvironmentStringsA` `VerifyVersionInfoA` `SetThreadAffinityMask` `SwitchToThread` `GetProcessHeap` `CreateFileA` `WriteConsoleW` `SetEnvironmentVariableA` `CompareStringW` `InterlockedFlushSList` `IsValidLocale` `EnumSystemLocalesA` `GetLocaleInfoA` `GetUserDefaultLCID` `GetStringTypeW` `GetTickCount` `GetEnvironmentStringsW` `OpenEventA` `LCMapStringW` `SetStdHandle` `FlushFileBuffers` `GetConsoleMode` `GetConsoleCP` `GetFileType` `GetSystemDirectoryA` `SetHandleCount` `GetOEMCP` `GetACP` `GetCPInfo` `TerminateProcess` `UnhandledExceptionFilter` `GetLocaleInfoW` `FlsAlloc` `FlsFree` `FlsSetValue` `FlsGetValue` `HeapCreate` `GetVersion` `HeapSetInformation` `GetStdHandle` `GetStartupInfoW` `GetCommandLineA` `ExitThread` `DuplicateHandle` `SetConsoleCtrlHandler` `HeapSize` `HeapQueryInformation` `ExitProcess` `EncodePointer` `DecodePointer` `RtlPcToFileHeader` `HeapFree` `HeapReAlloc` `FreeEnvironmentStringsW` `GetThreadLocale` `SignalObjectAndWait` `HeapAlloc` `RtlUnwindEx` `SetErrorMode` `GlobalMemoryStatus` `VirtualQuery` `GetFileTime` `lstrlenA` `FileTimeToLocalFileTime` `FileTimeToDosDateTime` `GetFileSize` `TerminateThread` `CreateMutexW` `GetTimeZoneInformation` `GetLocalTime` `FormatMessageA` `CreateFileMappingA` `MapViewOfFile` `UnmapViewOfFile` `ReleaseMutex` `GetWindowsDirectoryW` `ResetEvent` `InitializeCriticalSection` `IsDebuggerPresent` `GetSystemTimeAsFileTime` `SetThreadPriority` `TryEnterCriticalSection` `LeaveCriticalSection` `EnterCriticalSection` `DeleteCriticalSection` `InitializeCriticalSectionAndSpinCount` `RaiseException` `SleepEx` `FlushInstructionCache` `CreateSemaphoreW` `GetDateFormatA` `GetTimeFormatA` `SetEvent` `GetFullPathNameW` `GetCurrentDirectoryA` `GetVersionExA` `GetModuleFileNameA` `GetFileAttributesA` `GetEnvironmentVariableA` `OutputDebugStringA` `GetCurrentThread` `RtlCaptureContext` `SuspendThread` `GetThreadContext` `FileTimeToSystemTime` `ResumeThread` `GetFileInformationByHandle` `RtlLookupFunctionEntry` `RtlVirtualUnwind` `SetLastError` `PeekNamedPipe` `GetDriveTypeA` `FindFirstFileExA` `ReadConsoleInputA` `SetConsoleMode` `GetFullPathNameA` `IsValidCodePage` `CreateSemaphoreA` `CloseHandle` `Sleep` `WaitForSingleObjectEx` `ReleaseSemaphore` `CreateEventA` `MultiByteToWideChar` `GetProcAddress` `FreeLibrary` `GetModuleHandleW` `LoadLibraryW` `TlsAlloc` `TlsFree` `TlsGetValue` `TlsSetValue` `VirtualProtect` `VirtualAlloc` `VirtualFree` `GetSystemInfo` `GetLastError` `WideCharToMultiByte` `ReadFile` `SetFilePointerEx` `WriteFile` `SetFilePointer` `SetEndOfFile` `GetFileAttributesExW` `CreateFileW` `SetFileAttributesW` `GetFileAttributesW` `CopyFileW` `MoveFileExW` `FindClose` `FindNextFileW` `FindFirstFileW` `FindFirstFileExW` `CreateDirectoryW` `RemoveDirectoryW` `DeleteFileW` `SetFileTime` `SystemTimeToFileTime` `GetSystemTime` `GetModuleFileNameW` `QueryPerformanceFrequency` `QueryPerformanceCounter` `LocalFree` `FormatMessageW` `GlobalUnlock` `GlobalLock` `GlobalAlloc` `GetModuleHandleA` `lstrcpynA` `lstrcpyA` `lstrcpynW` `GetCommandLineW` `CancelIo` `GetOverlappedResult` `CreateEventW` `ExpandEnvironmentStringsW` `CreateMutexA` `GetCurrentThreadId` `VerifyVersionInfoW` `VerSetConditionMask` `GetVersionExW` `GlobalMemoryStatusEx` `GetCurrentProcess` `GetUserDefaultLangID` `GetComputerNameW` `GetTempPathW` `LoadLibraryA` `GetCurrentProcessId` `SetUnhandledExceptionFilter` `WaitForSingleObject` `CreateThread` `GetCurrentDirectoryW` `OpenEventW` `DebugBreak` `GetDriveTypeW`
VERSION.dll	`GetFileVersionInfoSizeA` `GetFileVersionInfoA` `GetFileVersionInfoSizeW` `GetFileVersionInfoW` `VerQueryValueA`
ole32.dll	`CoCreateGuid` `StringFromGUID2` `CoCreateInstance` `CoSetProxyBlanket` `CoTaskMemAlloc` `CoInitialize` `CoUninitialize` `CoTaskMemFree`
SHLWAPI.dll	`PathCanonicalizeW` `PathFileExistsW` `SHDeleteKeyW`
SHELL32.dll	`CommandLineToArgvW` `SHGetFolderPathW` `SHFileOperationW` `ShellExecuteW`
OPENGL32.dll	`glColor4f` `glColorPointer` `glEnableClientState` `glVertexPointer` `glNormalPointer` `glTexCoordPointer` `glDisableClientState` `glIsTexture` `glLoadIdentity` `glGetTexParameteriv` `glTexSubImage2D` `glPixelStorei` `glCopyTexSubImage2D` `glReadBuffer` `glGetBooleanv` `glGetError` `glTexParameterf` `glDrawElements` `glDrawArrays` `glGetIntegerv` `glGenTextures` `glBindTexture` `glTexImage2D` `glTexParameteri` `glReadPixels` `glDeleteTextures` `glFinish` `glDrawBuffer` `glScissor` `glViewport` `glGetFloatv` `glMultMatrixf` `glMatrixMode` `glLoadMatrixf` `glPolygonMode` `glFrontFace` `glClearColor` `glClearDepth` `glClearStencil` `glClear` `glStencilMask` `glDepthFunc` `glDepthMask` `glCullFace` `glPolygonOffset` `glColorMask` `glDisable` `glBlendFunc` `glEnable` `glGetString` `wglGetCurrentDC` `wglGetCurrentContext` `wglCreateContext` `wglDeleteContext` `wglShareLists` `wglGetProcAddress` `wglMakeCurrent`
WINMM.dll	`waveOutReset` `waveOutPrepareHeader` `timeGetTime` `timeEndPeriod` `timeBeginPeriod` `waveInGetNumDevs` `waveOutGetNumDevs` `waveOutGetDevCapsA` `waveOutGetDevCapsW` `waveOutClose` `waveOutOpen` `waveOutUnprepareHeader` `waveOutWrite` `waveOutGetPosition` `waveInAddBuffer` `waveInPrepareHeader` `waveInUnprepareHeader` `waveInGetDevCapsA` `waveInGetDevCapsW` `waveInStart` `waveInOpen` `waveInClose` `waveInReset`
OLEAUT32.dll	`VariantChangeType` `VariantClear` `VariantInit` `SysFreeString` `SysAllocString`
MSACM32.dll	`acmStreamPrepareHeader` `acmStreamConvert` `acmStreamUnprepareHeader` `acmFormatSuggest` `acmStreamOpen` `acmStreamSize`
IMM32.dll	`ImmSetCompositionStringW` `ImmReleaseContext` `ImmAssociateContext` `ImmAssociateContextEx` `ImmGetConversionStatus` `ImmSetOpenStatus` `ImmGetCompositionStringW` `ImmGetContext`
DNSAPI.dll	`DnsFree` `DnsQuery_A`
IPHLPAPI.DLL	`GetIpAddrTable`
WINHTTP.dll	`WinHttpGetIEProxyConfigForCurrentUser`

Delayed Imports

AmdPowerXpressRequestHighPerformance

Ordinal	`1`
Address	`0x119e818`

NvOptimusEnablement

Ordinal	`2`
Address	`0x119e814`

1

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x468`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.16253`
MD5	`ac04ab5cba05fb6b4591379801b151ed 🔍`
SHA1	`71c1132da05c18ec9674d4a3d9512eb5a67b0e3d 🔍`
SHA256	`914dda709d22901626653baa4ee0d1a2ce2d035262582594a619e4e909c31831 🔍`
SHA3	`127a5885af8ceec8e1a61e5d0dd5349cb3a713536cf6cfc3ce741d5b5253cf03 🔍`

2

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x988`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`6.34022`
MD5	`94ef376dd02961caf10835327967c4d6 🔍`
SHA1	`dc51ef41260158fa600aad88e9c86f4242db6cfe 🔍`
SHA256	`29f4e19bba2831b5090e7226a8914ef8cdf7b4b9df828e00d759205b6a2c062d 🔍`
SHA3	`30adc7cb4bea3ae21c1aeb8b71303a1555da36fb987ebe879915f4aa80ef93ca 🔍`

3

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x10a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.7881`
MD5	`3dcc05becc8b4a248c97f66056890a46 🔍`
SHA1	`a21fe67def46e035c641a23d207ccea7cd57c06b 🔍`
SHA256	`37af5095f914318293d1835bc2ffcb7300ab8230bc2c967215003c2146f400c6 🔍`
SHA3	`88c32739627ede6f717e2f92509d7962c44a1e92e9709ae4cb28e29f68450152 🔍`

4

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x25a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`6.35553`
MD5	`722dd715da597b8d898cb56226f2863b 🔍`
SHA1	`198202ada6f18bf0ffd7b5681298cc8e422c487f 🔍`
SHA256	`046b32c8f98bb725e66c940f0678294e9e314c0e20aa02ae64fb1a6b417d4fd6 🔍`
SHA3	`bcbf76df40cb41351f3792c074ca9af4ae368e20a930c16936d40b9d07937f0f 🔍`

5

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x4228`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.75119`
MD5	`db44035a45420301c57f55e3e7d74c5d 🔍`
SHA1	`8b3e1a175117e4615d69fbad0909770beeeab8b9 🔍`
SHA256	`28b78163cc04ef978cd2f1a8c398fc12dad7eb3c814bdcdff22b7f5b90259cbe 🔍`
SHA3	`dc90d72bdd082e5f71dfd2fa38acd93da4aa997e7ba50372a414b73a03fa31f0 🔍`

6

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x94a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`6.17657`
MD5	`a6b79d6218eab65b829a6fe4d302532d 🔍`
SHA1	`bb48194f6cb2b6ce384023e2e3479190fae9ae41 🔍`
SHA256	`e689e10c5e0e1f6646a65abb367ca3625b25739a4518405e298f5dacf1a1724a 🔍`
SHA3	`9c9d749473feed0ab4429c140a859f4545a2bde80421034c559860941d85f61e 🔍`

7

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x10828`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.61972`
MD5	`e32b13e643811b1a668a14eb3a3637c7 🔍`
SHA1	`f12a1a9fe8d016b0298b559803c41a1608f10f2b 🔍`
SHA256	`8074e675acb2d6850041bcd5f0765af47d4fe0b647f676453a4a25e9ab23bfb7 🔍`
SHA3	`bd40878f6279e531c966e8c6591c8ba142e95cb28d35d1f12b8bb2e4563649db 🔍`

8

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x25228`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.98834`
MD5	`35454cc7e4728f941cb7b48a2cecf2a5 🔍`
SHA1	`48e69867cd3693a43f1541bcbc32cf5305b7caff 🔍`
SHA256	`f918bf669fd162a02af9c5ccdbf0830f36c236ceba08778b81dac3a3d21b1f70 🔍`
SHA3	`25d33b79c7d779c8817549f00cb2c8124e025c2e0aefb262e4fa7f54a723f250 🔍`

9

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x42028`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.59472`
MD5	`897cbe053d7d012486e04eb72f91e32d 🔍`
SHA1	`6f6b1d03d9880e89846a499092fe60f8e2e34de5 🔍`
SHA256	`a7731f8dd1919b0fec1ea31a33021e3405c8d4d0d0f5df13ec04533328a07b27 🔍`
SHA3	`9f444a62af7f8e45a3698a65c8ce48396d725925c81245b3bb21c283c3f4bee3 🔍`

9 (#2)

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x124`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.99471`
MD5	`b62b6b1e4cd3054ab1b07b033356d108 🔍`
SHA1	`c0170ce1c06de46e62508e1d774d64e952cd111a 🔍`
SHA256	`6a3c71d7f89e83280ff2aa75c76d49c3239060f8ee53cfc2692e05c4fc9c7eab 🔍`
SHA3	`9e885ae1d0f740d603c9ef2ca1a92c8a61ddb587a0f50bee653496e0ac8fe4f6 🔍`

105

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x10c`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.98084`
MD5	`2165d3c35627dfb0f24dfa8839b650c1 🔍`
SHA1	`5168d394292dd31902f3f8112b22cd604529f378 🔍`
SHA256	`7aa854f2b6bf3241c666d0b851ecaea27082934a4b2fa43db752591dfcf9434e 🔍`
SHA3	`395d76a75afaab97318d9ea2f3785b5ade74331f689f98e69f22f301be84d67a 🔍`

107

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x1c2`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.19606`
MD5	`e71ed01bef9a6e44b5a60f28e2d14320 🔍`
SHA1	`28a0948d37b93bfd392044a4338968bd3f4de535 🔍`
SHA256	`af380b7f1f6bedba49ef3833569a36314f9834b759bfbdc7f5474d65081186c6 🔍`
SHA3	`a275daef8cf31a8e4d53a63b80b73137c0c41a126920ed0b63416f8643332d35 🔍`

108

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0xdc`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.23439`
MD5	`89647fd8d7ee80b9e9e46db2a1053a29 🔍`
SHA1	`10dd88f00a8f56cce48908628abe1215235f624a 🔍`
SHA256	`692985cf029eb28098357336ea128b16211fb8fb8ab3e8f90949a952a2514f65 🔍`
SHA3	`01c77f889f7bb48a0744fe4f076df03cf74591df831c9d043237c2a7a7426f3e 🔍`

109

Type	`RT_DIALOG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x8e`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.09377`
MD5	`839f2e562a1f062fd873414ab28cf1d2 🔍`
SHA1	`ed961a5852bd1ac5b55fa8fd70fa8213754abc57 🔍`
SHA256	`296b7d861a9ee473d4e8a62f9d7adb025d1fbe8e61206870f426e5c870a98936 🔍`
SHA3	`6a4b1fab7319e07585d923be21a3d852ecc1988286973bf8440e25f2a35a3cd0 🔍`

103

Type	`RT_GROUP_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x84`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.04448`
Detected Filetype	Icon file
MD5	`3bf2dac037ce87794e66ff7f054e913f 🔍`
SHA1	`52ca961fd37ad960905a681d1db5157508ef1602 🔍`
SHA256	`2a87b1f32c5d0435090c72c392b75394f706e5750eff64fd85d25e1c622ee581 🔍`
SHA3	`8454d3273522657b5926068082b2cb88f6dbf352e7e9568008c0e33c792f349b 🔍`

1 (#2)

Type	`RT_VERSION`
Language	English - United States
Codepage	UNKNOWN
Size	`0x1b0`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.36177`
MD5	`622b2b3d30adbfe2b93e667489bb0b6f 🔍`
SHA1	`100c04a9d668dfded5ffe376c116cf7e4be35383 🔍`
SHA256	`fa856927002ec59a511d9e29fa7120da0d22229722f4a2dbcecf4c467006d781 🔍`
SHA3	`ad9f054f7b4e3289c9506cd9242c6f32e3b1d16b8ea662ec4a7e6e43e033f0fa 🔍`

1 (#3)

Type	`RT_MANIFEST`
Language	English - United States
Codepage	UNKNOWN
Size	`0x581`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.37424`
MD5	`ed4212968d15a196c34d461040b44336 🔍`
SHA1	`4d331b10588bcfeb306ba2ad31ce5ee96e12667c 🔍`
SHA256	`b91c0fd1d3a91447a5b1207d1f625d19a6a0df1921aac32c60ffbd8e0a11ef00 🔍`
SHA3	`914a36db86cc3ab4399e6e59366be51f0f6dae23a7a55f7e19ea927f9dd1a2b0 🔍`

Version Info

Signature	`0xfeef04bd`
StructVersion	`0x10000`
FileVersion	5.3.4.47953
ProductVersion	5.3.4.47953
FileFlags	`(EMPTY)`
FileOs	`VOS_DOS_WINDOWS32` `VOS_NT_WINDOWS32` `VOS__WINDOWS32`
FileType	`VFT_UNKNOWN`
Language	English - United States
FileVersion (#2)	5.3.4.16628561
ProductVersion (#2)	5.3.4.16628561
Unity Version	5.3.4f1_fdbb5133b820

Resource LangID	English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics	`0`
TimeDateStamp	2016-Mar-11 00:21:18
Version	`0.0`
SizeofData	`137`
AddressOfRawData	`0x1094c88`
PointerToRawData	`0x1093c88`
Referenced File	C:\buildslave\unity\build\build\WindowsStandaloneSupport\Variations\win64_nondevelopment_mono\player_win_x64.pdb

TLS Callbacks

Load Configuration

RICH Header

XOR Key	`0xf2d3a0fa`
Unmarked objects	`0`
ASM objects (VS2008 build 21022)	`2`
135 (VS2008 SP1 build 30729)	`1`
C++ objects (VS2010 build 30319)	`4`
C objects (VS2012 build 50727 / VS2005 build 50727)	`1`
C objects (VS2008 SP1 build 30729)	`27`
173 (VS2010 build 30319)	`1`
Unmarked objects (#2)	`172`
Imports (VS2008 SP1 build 30729)	`41`
Total imports	`559`
152 (20115)	`8`
ASM objects (VS2010 SP1 build 40219)	`30`
C objects (VS2010 SP1 build 40219)	`967`
C++ objects (VS2010 SP1 build 40219)	`2220`
Exports (VS2010 SP1 build 40219)	`1`
Resource objects (VS2010 SP1 build 40219)	`1`
Linker (VS2010 SP1 build 40219)	`1`

Errors

Leave a comment

No comments yet.