a44341f2d8af7f000d6d9ec6324c7e1e5bb1f0dc0d60aaee2ca6eadf02814313

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2026-Jul-22 08:03:31
Detected languages English - United States
Debug artifacts C:\build\output\unity\unity\artifacts\WindowsPlayer\Win_x64_VS2022_VB_MT_nondev_i_r\WindowsPlayer_player_Master_il2cpp_x64.pdb
FileVersion 6000.3.21.12592689
LegalCopyright (c) 2005-2026 Unity Technologies. All rights reserved.
ProductVersion 6000.3.21f1 (c02631ffc030)

Plugin Output

Info The PE contains common functions which appear in legitimate applications. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryExW
Suspicious The PE is possibly a dropper. Resources amount for 84.6223% of the executable.
Suspicious No VirusTotal score. This file has never been scanned on VirusTotal.

Hashes

MD5 9dfbc57a1238e7d4034f8925e3861570 🔍
SHA1 7dd1536d27a9a3f0b8d342218285ab872d215381 🔍
SHA256 a44341f2d8af7f000d6d9ec6324c7e1e5bb1f0dc0d60aaee2ca6eadf02814313 🔍
SHA3 4bbc1ffbeef1a5684e4cf70b1773004e718e58bf84d4489d5fc0565d635624d3 🔍
SSDeep 6144:eaMjvuUwZp9UhLuqoYc+EnS8qUuN4qT06ROVn/wNtSkklNiRdTxdMRK/TcPDoZ:etVwZpmhy+GSRUuOqT0l4oNiR1xe 🔍
Imports Hash a136217cdd3247ff6a8766561064ca0b 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x110

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 6
TimeDateStamp 2026-Jul-22 08:03:31
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0xce00
SizeOfInitializedData 0x96e00
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0000000000001264 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x140000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0xa6000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 457fb5274ed18adc024e01b603e258a4 🔍
SHA1 159fdb99c377edc82c57d34217a711578edb0e63 🔍
SHA256 336709c08beca21a675f029c2d588ac0cae8cc8f42422039cbb827b6284374e5 🔍
SHA3 7d6db62af5f0503638e32b2c5a2ebd94056e5e490598ebed73cb0495875d3499 🔍
VirtualSize 0xcdb0
VirtualAddress 0x1000
SizeOfRawData 0xce00
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.45019

.rdata

MD5 49697610a3d53571bf64e39bcc91bcc1 🔍
SHA1 977faa85da9bdd57121a1925d04285521a7c509c 🔍
SHA256 68f966db167bfda9f9166baeee101406ab1082989a9e89b8108441c754f3f843 🔍
SHA3 f7959bb0fbcc20ef24c24f453996483f79c0ef574f3c3a811fe2173acdddcec0 🔍
VirtualSize 0x977c
VirtualAddress 0xe000
SizeOfRawData 0x9800
PointerToRawData 0xd200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.69254

.data

MD5 0822db25bce65451a1219de812eea533 🔍
SHA1 bf4c918ff2184dfeba8cd4f98b21e11d75de05e7 🔍
SHA256 8987031a7fb9e9ffe2b44dad568693d86af933f2b44447b6f5c1159bd0750a79 🔍
SHA3 83fbc2d299cd2e5b71ce2f669f319b95fcab94178c620dd04d72a1071efde7b0 🔍
VirtualSize 0x1d88
VirtualAddress 0x18000
SizeOfRawData 0xc00
PointerToRawData 0x16a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 1.90767

.pdata

MD5 017f81338461c6b246bdb8ce1bf5fc08 🔍
SHA1 aa79861d4dea94c5fd283f1359435734dfb03517 🔍
SHA256 d1cc88f6e981b629ad1f47d33507ac8b71f82346871b690375752ffc69c6063d 🔍
SHA3 e197cfb7530afb455ed4ebbd26984d4562c62ea8c9c65f07f5d04c80970ee830 🔍
VirtualSize 0xec4
VirtualAddress 0x1a000
SizeOfRawData 0x1000
PointerToRawData 0x17600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.60208

.rsrc

MD5 94d37c992fa2687ba16ed767d520401c 🔍
SHA1 297b4154b2bd6c9a7a7ccd369fad1b1369ce5894 🔍
SHA256 58b81b64d8acb8dfa31fb48c240bce312fefb76ba57d261f10c8b2c1fc75ffab 🔍
SHA3 384a97981bef1746f25c38842594f9e58e6b8cb5b14f1e58fd90f7c9ef6f7423 🔍
VirtualSize 0x8a000
VirtualAddress 0x1b000
SizeOfRawData 0x8a000
PointerToRawData 0x18600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.93362

.reloc

MD5 3ab8a3a955e5040e25556085e21a2be2 🔍
SHA1 f29b173f0ea430d70ff0803cbaa89fa1d4d024d9 🔍
SHA256 119eed3c019ffdb0bba4cee06b80d85e78a679f1bb17317cbb6a352bb4102d7a 🔍
SHA3 a5c3cb0725d2fd68e14265c6e03629d6270e73c1f049eb78b3e40b7b2535d802 🔍
VirtualSize 0x658
VirtualAddress 0xa5000
SizeOfRawData 0x800
PointerToRawData 0xa2600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 4.86735

Imports

UnityPlayer.dll UnityMain2
KERNEL32.dll HeapAlloc
WriteConsoleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
CloseHandle
RtlUnwindEx
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
GetStdHandle
WriteFile
GetModuleFileNameW
GetCurrentProcess
ExitProcess
TerminateProcess
GetModuleHandleExW
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW

Delayed Imports

AmdPowerXpressRequestHighPerformance

Ordinal 1
Address 0x18004

D3D12SDKPath

Ordinal 2
Address 0x18008

D3D12SDKVersion

Ordinal 3
Address 0xe320

NvOptimusEnablement

Ordinal 4
Address 0x18000

1

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.6867
MD5 6b702271c6522da44164929bd4616b0c 🔍
SHA1 7917cf8b069bddae0f1020fcc785880b0a48a1b6 🔍
SHA256 af46f335b9d4963a56521f35dd4d03c335cbc97d18fcbaeff05e23346f37f3b9 🔍
SHA3 b9d37481a8dbc2ebf67c6ec8a0bd94820707f5ff1605fda73a4672c3f7013749 🔍

2

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x988
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.8686
MD5 975daf180e812ed4f55fe1da724e204e 🔍
SHA1 bdba37844643af7e11d6f45ab824b9869f8e3845 🔍
SHA256 52cdb4438ff98cdb6f3466ede4c91e1b6c33816bfa299b08286d840a2164c906 🔍
SHA3 8839c534739ef95e4d5b8da57b9604a326293293c16dd1d55de26676ddc9e11c 🔍

3

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.9366
MD5 b459734a61953ec19dcc6d26430388b7 🔍
SHA1 b12876be6ab896e1dc4816b259b5ae5820a989ce 🔍
SHA256 ae8596b67980053a103c12a3cffd70840ee11b35f31f264d8e846bb921384c30 🔍
SHA3 4daf980512165cfe389a599dec193bdd973c23f6d5b92692c4e9fd38c71cd98d 🔍

4

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.90546
MD5 eea2f8011a12c01bb5d3c1bda958e6cd 🔍
SHA1 de5e5d780a9ac2bc80aa9f217e792c7e2e7ebd5a 🔍
SHA256 6048e48b489bc89bf6fd40506cfca91f3ef83e03bfedc571d1452f7f472109af 🔍
SHA3 46260333ce8cd6c44d467eed54ac65903505ee57ee48fb4665ad9c9e603fd640 🔍

5

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.94313
MD5 b169d30c85b718ef26e97a7033b3f149 🔍
SHA1 c70811003885ea09693857ed31c96de6faf5be98 🔍
SHA256 ebd88a2d15917f6a9b835d73193960e3ea01a66a4d29668ce0f071c65065a929 🔍
SHA3 ccb125fb179014dc80ee16f5d75591777e437f5e42f3f78cd6ed5d54c3f3ead2 🔍

6

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x94a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.92
MD5 1ab35267474578fc04043a43d7fc43c5 🔍
SHA1 d25d9ca3618fc34a0872486ec56be29ad6e28945 🔍
SHA256 30f15414e910e765fe9dc2d7c2850b5330ded3484885d542383cf2cd14d11b17 🔍
SHA3 814ddec2fd4f59d992befe4ddacd5bda18af6fb85ced12b899cd2d42c61bc10a 🔍

7

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.45674
MD5 7218906f632d612f01437be528e177bb 🔍
SHA1 728bd296f6e6d4fda9783d480b1de194b6203e6b 🔍
SHA256 86a8ecab21e9baaccd68dd94b65544d813805c9187ff715c262be13732bf6c8f 🔍
SHA3 0424b51e7f1f4aedd563098174a5128d1895f98490d681dd4fe278b1874405f0 🔍

8

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.94815
MD5 122aeacf793da076e2b7ac6b5b69bf07 🔍
SHA1 23087bf316ae2fbbb67a0e7133d0a876cdbcf744 🔍
SHA256 01e6f67efae47110423091ad5603fa27bcd57a3dfdf7e2a923069bdce491a8db 🔍
SHA3 38f17310c187bbdd4a5767c550732d5aaa1f4d694f780dc92683737fd6a0c7fa 🔍

9

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x42028
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.94708
MD5 32405e33b0ce9447bfb1064420168f61 🔍
SHA1 a10ee4037d5cfee09ae4736ac09e8d97d40d552a 🔍
SHA256 d9c9454be5ba251b818250652cd1e14dd2492ebe3ca4f2cae867f7cac02796b5 🔍
SHA3 7dbff0b944ee6b346f3e4bbbe80eef00b488b2b3f8f640d4e1babea9568239df 🔍

103

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x84
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.04448
Detected Filetype Icon file
MD5 3bf2dac037ce87794e66ff7f054e913f 🔍
SHA1 52ca961fd37ad960905a681d1db5157508ef1602 🔍
SHA256 2a87b1f32c5d0435090c72c392b75394f706e5750eff64fd85d25e1c622ee581 🔍
SHA3 8454d3273522657b5926068082b2cb88f6dbf352e7e9568008c0e33c792f349b 🔍

1 (#2)

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x214
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.52131
MD5 aac948a8f79b15bba9798d0b710c5508 🔍
SHA1 658000c0f85ae110fc181092f8e0c747a46beafb 🔍
SHA256 ad8bc992cc2492288bb72cc9d2747a334c3591006737c6da4d67fd5cc152641e 🔍
SHA3 b078ea71ef2b6d96230b8cb42c056f74d3955a92cb97f4c149452830118bf2b2 🔍

1 (#3)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x522
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.21152
MD5 2fe105521c08a12b3c7ec1f8cebb8080 🔍
SHA1 8c0f4de5e8b67bbce40cd0da378d6c44b7dcffcc 🔍
SHA256 7b869d77787211c23ca2eeaec8b31acca8b24b7f74038b846b2952f0b230f16e 🔍
SHA3 7a7f34eaf54431e64300ca8fc59327e03fbf3d3c9296a4bdfeda3d9053c9bc7b 🔍

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 6000.3.21.9777
ProductVersion 6000.3.21.9777
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_UNKNOWN
Language English - United States
FileVersion (#2) 6000.3.21.12592689
LegalCopyright (c) 2005-2026 Unity Technologies. All rights reserved.
ProductVersion (#2) 6000.3.21f1 (c02631ffc030)
Resource LangID English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2026-Jul-22 08:03:31
Version 0.0
SizeofData 151
AddressOfRawData 0x15d68
PointerToRawData 0x14f68
Referenced File C:\build\output\unity\unity\artifacts\WindowsPlayer\Win_x64_VS2022_VB_MT_nondev_i_r\WindowsPlayer_player_Master_il2cpp_x64.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2026-Jul-22 08:03:31
Version 0.0
SizeofData 20
AddressOfRawData 0x15e00
PointerToRawData 0x15000

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2026-Jul-22 08:03:31
Version 0.0
SizeofData 836
AddressOfRawData 0x15e14
PointerToRawData 0x15014

TLS Callbacks

Load Configuration

Size 0x140
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x140018040

RICH Header

XOR Key 0x7914df52
Unmarked objects 0
ASM objects (28900) 5
C++ objects (28900) 138
C objects (28900) 10
Imports (28900) 2
ASM objects (34321) 9
C objects (34321) 16
C++ objects (34321) 40
Imports (34433) 3
Total imports 89
C++ objects (34433) 2
Exports (34433) 1
Resource objects (34433) 1
Linker (34433) 1

Errors

Leave a comment

No comments yet.