75609c864c3f409348c7458c3b306cfe54f9c891fcfdc98010d0e5cb9c28b960

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2025-May-07 08:58:45
Detected languages English - United States
Debug artifacts C:\build\output\unity\unity\artifacts\WindowsPlayer\Win_x64_VS2022_VB_nondev_m_r\WindowsPlayer_player_Master_mono_x64.pdb
FileVersion 6000.0.49.8654346
LegalCopyright (c) 2005-2025 Unity Technologies. All rights reserved.
ProductVersion 6000.0.49f1 (840e0a9776d9)

Plugin Output

Info The PE contains common functions which appear in legitimate applications. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryExW
Suspicious The PE is possibly a dropper. Resources amount for 83.9824% of the executable.
Safe VirusTotal score: 0/70 (Scanned on 2026-08-10 10:00:47) All the AVs think this file is safe.

Hashes

MD5 07834675684bc79379b5047ada5cdd39 🔍
SHA1 1089ffb05d2de3330ea90362afc51b00eb63dc6e 🔍
SHA256 75609c864c3f409348c7458c3b306cfe54f9c891fcfdc98010d0e5cb9c28b960 🔍
SHA3 b4c3698bb30f959ff8b7c58c60373354b94309bea100511e8f5a0bd5b51de2af 🔍
SSDeep 12288:R2NCD1Jr3de0ueCFfp3AomDGVH6ZNZLRHja6a0q9Iy5h6HvwksxXVEUdXSwiOZ0:XbZueChNJSyH6DZLRm6ad9jhXksxXVE 🔍
Imports Hash ce1183cc150987a99aef5749f22af81e 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x110

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 7
TimeDateStamp 2025-May-07 08:58:45
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0xde00
SizeOfInitializedData 0x97200
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0000000000001260 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x140000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0xa9000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 a5e0bf1e14a18380e4aa8fcfecd45cfd 🔍
SHA1 320e758c261b51cdf475ac1fe2d2b8b0f65ee37a 🔍
SHA256 9f9a743b5e5c12b459f7533a90382644af884df3aef68c9d7ac7d662735f193e 🔍
SHA3 0371197b472ffeeb91e1e7c7a9605222c7eee7431b878edcb558990adc374905 🔍
VirtualSize 0xdc70
VirtualAddress 0x1000
SizeOfRawData 0xde00
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.46141

.rdata

MD5 991e0c354783bfc73e12fd6c40ad8820 🔍
SHA1 80245e015e8da72e2c3da7d4371b4b02865f713a 🔍
SHA256 7e4ac6244453a48ce45b997beee9708404cc3b6cc4099a3a244bd5de8ba0a840 🔍
SHA3 01d7ad0c69c190645aaa906c8055f49ea9173021cbb5fe67a651fc5d6287c8c3 🔍
VirtualSize 0x977a
VirtualAddress 0xf000
SizeOfRawData 0x9800
PointerToRawData 0xe200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.70067

.data

MD5 d284f7b260ed119794375a6998c5083c 🔍
SHA1 0944c690e2b7841e681f55d2a731910f8019f2ef 🔍
SHA256 79ebad17e73900bd4dd43a932cc832e1d907346973e16ac0af549524fa4b88b3 🔍
SHA3 0c023444d7239a9582798618879cf6e165fcae6d6eec1051c77592814b4894ad 🔍
VirtualSize 0x1d78
VirtualAddress 0x19000
SizeOfRawData 0xc00
PointerToRawData 0x17a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 1.89847

.pdata

MD5 583bf012d5970545541b47ad6f1b2dc4 🔍
SHA1 ed34342900f8481a1f09e9f73fe8bb0d1e528eb6 🔍
SHA256 a7a9a284c12beceaf69e80c98bb9708078c1ee29e3581bf7c44e24e7535c04eb 🔍
SHA3 e57cf3023698fe8882221ba469ca26d236b8a3d44b7d67f42d621316177425fe 🔍
VirtualSize 0xf24
VirtualAddress 0x1b000
SizeOfRawData 0x1000
PointerToRawData 0x18600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.67239

_RDATA

MD5 dd297010ea596c9b749ddc72fe421330 🔍
SHA1 3213e7a4b99366f1367f1b5dc97aa4853369a784 🔍
SHA256 420a70f17663b392f63eb448853ebc800a3f7cf9c6e0b78b7e421d671dd927fd 🔍
SHA3 f4660bd566f5561530bb0e40a752616d5a8180b7180fcf869790d48f9fb6e9bf 🔍
VirtualSize 0x1f4
VirtualAddress 0x1c000
SizeOfRawData 0x200
PointerToRawData 0x19600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 3.71477

.rsrc

MD5 406b1828ef42000aecd1b9d152b1e92e 🔍
SHA1 94facd1f0678ca8d68372a85f0b23202c72fa8e2 🔍
SHA256 763ac8dc846d324eae0e27d35e7d9995248a3070e891809f05824d9b69e54e17 🔍
SHA3 7165a30d7f18893958e956b546e1f2232a4076b6ec2930b4f87dd11e143f8981 🔍
VirtualSize 0x8a018
VirtualAddress 0x1d000
SizeOfRawData 0x8a200
PointerToRawData 0x19800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 6.28305

.reloc

MD5 79918e2814a23b917e4a5494067a35d5 🔍
SHA1 eab8dd05e160cbff9fa1c348b6c35e7f161cf459 🔍
SHA256 cccb376562c958fee6ec06051a48d2c5c0232065e1000ce2d4b0775e46737238 🔍
SHA3 0fcd95a99b9b4e77c2e23089f450965a4028a243ef56d1928fdcfcebcc4b7120 🔍
VirtualSize 0x658
VirtualAddress 0xa8000
SizeOfRawData 0x800
PointerToRawData 0xa3a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 4.87002

Imports

UnityPlayer.dll UnityMain
KERNEL32.dll HeapAlloc
WriteConsoleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
CloseHandle
RtlUnwindEx
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
GetStdHandle
WriteFile
GetModuleFileNameW
GetCurrentProcess
ExitProcess
TerminateProcess
GetModuleHandleExW
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW

Delayed Imports

AmdPowerXpressRequestHighPerformance

Ordinal 1
Address 0x19004

D3D12SDKPath

Ordinal 2
Address 0x19008

D3D12SDKVersion

Ordinal 3
Address 0xf320

NvOptimusEnablement

Ordinal 4
Address 0x19000

1

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.29504
MD5 c5953daf6ddd65f572568fa394bcf57a 🔍
SHA1 a66ce80b075ba5739f7ac620b2a6621090985b03 🔍
SHA256 2b96b9a9131dd8a0c0ce5beac877098c8961fd19e450f2dcd92725470a38900a 🔍
SHA3 d2674a9c63ef2ba4c6f788ef2630a50f3227b975faacbf69de841aba0c208ea0 🔍

2

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x988
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.44065
MD5 8c996b822ff5bb07828362dbb78b996b 🔍
SHA1 ad9972d995852439b76e4d985e67e2ca99ac3584 🔍
SHA256 01553902c2f0072682048f9e1d0505b842266dbda5ecfc6f576b12a0c56c6667 🔍
SHA3 cd8afa692d9b0d8d9f1fb35573247ddb4bba32373c370a88d818e4350012c807 🔍

3

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.51074
MD5 ce994a804e4874e0f095bda245e4c6ef 🔍
SHA1 07de89244f59471c719a0723fd4b070f78b50f09 🔍
SHA256 da9b1cf19748bff673cb31a0b47f9037a5339182e2c25bbfd2abdc0eb3734bb9 🔍
SHA3 8b9d0a130756baac12209129afd498ac4a6826ac65e9abdb50969257d8fb59a6 🔍

4

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.44995
MD5 e647729e36ccb163a61a79ffbcba545d 🔍
SHA1 b4960dbf4896818a58875ba5272f0580cb81dac8 🔍
SHA256 c7ce74e1b7e3e37fe707a9ed446ae3e293a1dcbe48500f38c0c98dae651e6928 🔍
SHA3 e14aa4f374e55ef86a1cd39111ba6348876f573e123ba9b3aa4f5c1ea8d1f32e 🔍

5

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.44968
MD5 8ab8f01c17ef01cf2db901a8a3301799 🔍
SHA1 b42d1e6b14335beaa91871daf56117f10f388d85 🔍
SHA256 de0218ad38ed834249fd10b01fc1cd2a2c8dabfe7cf0536ad720b0d1fc5985a1 🔍
SHA3 9292de04a6f1ea4dd3e93258d77c8a0d6909508bb16d8a5fae05a556865320da 🔍

6

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x94a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.38091
MD5 9c14fdcb437d5cba6847ba81efd8f2f1 🔍
SHA1 4842ddb94f3e4f78b3f6614247ed4a61036dbd7e 🔍
SHA256 8aecc93c2ed6a9d61af771b174a5cd5810b902b7ebdd2bed9f8050f300403ad5 🔍
SHA3 065fb3598ba1ab81a841d1eb0dc72868c455d0ba1f731c27bace23aedee8cb1a 🔍

7

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.3189
MD5 273274ab2e34175f3a1529f0ea78a260 🔍
SHA1 790251f90b935ccfa9259f948fdcc89f13e38bae 🔍
SHA256 26bf17bb45222c7b475fbc2374fceeb39aa60255f478f69001260b5e39c09f5e 🔍
SHA3 d88e8515a901b24887d1e4a4a3c3882d4067707a2a5334695163787584be6c95 🔍

8

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.26154
MD5 31b4a100abddcb6134056bf3e0229226 🔍
SHA1 467a772fc26318d7d2b8351f1b116bf15937714c 🔍
SHA256 ffbce9d63c8e926fd4c23b43faa0221e93db79aaa565b50bf0f1b0dd482ddfe5 🔍
SHA3 2aac42843c0a1e8092adcceffbc9fe729277164c135b291bf99d59088f32a5a9 🔍

9

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x42028
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.20554
MD5 8ad67b03d8599fdc36a15164233b649a 🔍
SHA1 029ad2de0f0d9c212303afab4fb2b630156878ec 🔍
SHA256 a61d514c1d8fd5ad0936c8f747dac9cedeb3b2b69364b0ceca93ea3c91655b0c 🔍
SHA3 568903744722f856f39857355d982bcf474d6218f16d6f4b2ff46d0fad340292 🔍

103

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x84
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.04448
Detected Filetype Icon file
MD5 3bf2dac037ce87794e66ff7f054e913f 🔍
SHA1 52ca961fd37ad960905a681d1db5157508ef1602 🔍
SHA256 2a87b1f32c5d0435090c72c392b75394f706e5750eff64fd85d25e1c622ee581 🔍
SHA3 8454d3273522657b5926068082b2cb88f6dbf352e7e9568008c0e33c792f349b 🔍

1 (#2)

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x210
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.50554
MD5 c0018cb913424cd2b96e8422e3bc6fa8 🔍
SHA1 95d9d8e4626d75eb4e47b3477ee1578266eeaad6 🔍
SHA256 0ae058eb55c5ebd8822ae91382279de1f633050ea3b5b50a8db512824992a677 🔍
SHA3 64f6db8ae2f8c876e678d5d43368eb8d48bc068e134670565171703c8320518c 🔍

1 (#3)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x545
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.24993
MD5 9df530c2f4fbe460da74e130d5d351a9 🔍
SHA1 f8719b6c74e0179556c1a18f214d6c1bbff8f823 🔍
SHA256 3c357bd1125971bda05bc59eaeca279da41715741e2535e9e75c94273b1c3a1f 🔍
SHA3 ce3dd46f87bd462f8730fca18daea6df444422f8d88b810aefbd7b2e62536dee 🔍

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 6000.0.49.3594
ProductVersion 6000.0.49.3594
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_UNKNOWN
Language English - United States
FileVersion (#2) 6000.0.49.8654346
LegalCopyright (c) 2005-2025 Unity Technologies. All rights reserved.
ProductVersion (#2) 6000.0.49f1 (840e0a9776d9)
Resource LangID English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2025-May-07 08:58:45
Version 0.0
SizeofData 146
AddressOfRawData 0x16d58
PointerToRawData 0x15f58
Referenced File C:\build\output\unity\unity\artifacts\WindowsPlayer\Win_x64_VS2022_VB_nondev_m_r\WindowsPlayer_player_Master_mono_x64.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2025-May-07 08:58:45
Version 0.0
SizeofData 20
AddressOfRawData 0x16dec
PointerToRawData 0x15fec

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2025-May-07 08:58:45
Version 0.0
SizeofData 852
AddressOfRawData 0x16e00
PointerToRawData 0x16000

TLS Callbacks

Load Configuration

Size 0x140
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x140019040

RICH Header

XOR Key 0x7139305b
Unmarked objects 0
ASM objects (28900) 5
C++ objects (28900) 138
C objects (28900) 10
Unmarked objects (#2) 1
Imports (28900) 2
C++ objects (33218) 40
C objects (33218) 16
ASM objects (33218) 17
Imports (33523) 3
Total imports 89
C++ objects (33523) 2
Exports (33523) 1
Resource objects (33523) 1
Linker (33523) 1

Errors

Leave a comment

No comments yet.