adcf026d335d70438b217416025cbbbd2aa69094f614cb39f973abe1822909ca

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2026-Jan-13 20:48:25
Detected languages English - United States
Debug artifacts C:\build\output\unity\unity\artifacts\WindowsPlayer\Win_x64_VS2022_VB_MT_nondev_m_r\WindowsPlayer_player_Master_mono_x64.pdb
FileVersion 6000.3.5.10611787
LegalCopyright (c) 2005-2026 Unity Technologies. All rights reserved.
ProductVersion 6000.3.5f1 (a1ec4b2f2d19)

Plugin Output

Info The PE contains common functions which appear in legitimate applications. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryExW
Suspicious The PE is possibly a dropper. Resource 1 is possibly compressed or encrypted.
Resource 2 is possibly compressed or encrypted.
Resource 3 is possibly compressed or encrypted.
Resource 4 is possibly compressed or encrypted.
Resources amount for 84.5615% of the executable.
Safe VirusTotal score: 0/70 (Scanned on 2026-08-04 14:11:28) All the AVs think this file is safe.

Hashes

MD5 102b18f0990abc82d7f0f076124b42be 🔍
SHA1 9acac3d37f53cd703bbb8e2ecb4dabf7e87dbf4c 🔍
SHA256 adcf026d335d70438b217416025cbbbd2aa69094f614cb39f973abe1822909ca 🔍
SHA3 60eefd785607a3fcbe52be16388e108cd389c905d547647c49bdac0729920306 🔍
SSDeep 12288:xtVwZpvhILJLA0yTND965NhgxlI9GwrosD9b:x/x00kD965Esh8sZ 🔍
Imports Hash a136217cdd3247ff6a8766561064ca0b 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x110

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 6
TimeDateStamp 2026-Jan-13 20:48:25
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0xce00
SizeOfInitializedData 0x97000
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0000000000001264 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x140000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0xa7000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 457fb5274ed18adc024e01b603e258a4 🔍
SHA1 159fdb99c377edc82c57d34217a711578edb0e63 🔍
SHA256 336709c08beca21a675f029c2d588ac0cae8cc8f42422039cbb827b6284374e5 🔍
SHA3 7d6db62af5f0503638e32b2c5a2ebd94056e5e490598ebed73cb0495875d3499 🔍
VirtualSize 0xcdb0
VirtualAddress 0x1000
SizeOfRawData 0xce00
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.45019

.rdata

MD5 74c0182147d1ff41483355e41e0e7779 🔍
SHA1 0bb989e97300fc1e635caa845952811c16ddbd37 🔍
SHA256 839341adada3a981d1bd208205b01efc83ac12bcd96035afe27458ff10674cb5 🔍
SHA3 a2ae467fffdaf156f065a290b4fa5a4a31a904939a974662507c33fd20a23202 🔍
VirtualSize 0x977c
VirtualAddress 0xe000
SizeOfRawData 0x9800
PointerToRawData 0xd200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.69233

.data

MD5 0822db25bce65451a1219de812eea533 🔍
SHA1 bf4c918ff2184dfeba8cd4f98b21e11d75de05e7 🔍
SHA256 8987031a7fb9e9ffe2b44dad568693d86af933f2b44447b6f5c1159bd0750a79 🔍
SHA3 83fbc2d299cd2e5b71ce2f669f319b95fcab94178c620dd04d72a1071efde7b0 🔍
VirtualSize 0x1d88
VirtualAddress 0x18000
SizeOfRawData 0xc00
PointerToRawData 0x16a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 1.90767

.pdata

MD5 017f81338461c6b246bdb8ce1bf5fc08 🔍
SHA1 aa79861d4dea94c5fd283f1359435734dfb03517 🔍
SHA256 d1cc88f6e981b629ad1f47d33507ac8b71f82346871b690375752ffc69c6063d 🔍
SHA3 e197cfb7530afb455ed4ebbd26984d4562c62ea8c9c65f07f5d04c80970ee830 🔍
VirtualSize 0xec4
VirtualAddress 0x1a000
SizeOfRawData 0x1000
PointerToRawData 0x17600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.60208

.rsrc

MD5 b08c66069cad3032e5bc9bc0495c8386 🔍
SHA1 370b2a8a54cea06d78e5c5886cbcaa68f427a19f 🔍
SHA256 7e263ff7ca09a1f784029331f5b8295fabeaf4fdac03c9ae82e8ac04569cad98 🔍
SHA3 48739c014b2514008bac87706a08b024209e3d21e43f42f06ab01876b1437232 🔍
VirtualSize 0x8a018
VirtualAddress 0x1b000
SizeOfRawData 0x8a200
PointerToRawData 0x18600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 6.30887

.reloc

MD5 3ab8a3a955e5040e25556085e21a2be2 🔍
SHA1 f29b173f0ea430d70ff0803cbaa89fa1d4d024d9 🔍
SHA256 119eed3c019ffdb0bba4cee06b80d85e78a679f1bb17317cbb6a352bb4102d7a 🔍
SHA3 a5c3cb0725d2fd68e14265c6e03629d6270e73c1f049eb78b3e40b7b2535d802 🔍
VirtualSize 0x658
VirtualAddress 0xa6000
SizeOfRawData 0x800
PointerToRawData 0xa2800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 4.86735

Imports

UnityPlayer.dll UnityMain2
KERNEL32.dll HeapAlloc
WriteConsoleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
CloseHandle
RtlUnwindEx
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
GetStdHandle
WriteFile
GetModuleFileNameW
GetCurrentProcess
ExitProcess
TerminateProcess
GetModuleHandleExW
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW

Delayed Imports

AmdPowerXpressRequestHighPerformance

Ordinal 1
Address 0x18004

D3D12SDKPath

Ordinal 2
Address 0x18008

D3D12SDKVersion

Ordinal 3
Address 0xe320

NvOptimusEnablement

Ordinal 4
Address 0x18000

1

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.09951
MD5 07bc68482eb3bb1828a9bc19ef96bbee 🔍
SHA1 4560a33597b20abce345d5456ec69f2f4a563b12 🔍
SHA256 40278acbe2f88a7d3353d15548a905a4f8da4cc9373f2cadeacc1bd4c53c2a9a 🔍
SHA3 276771ebb5bc048355488f864521ad1a80f2bda7a4311d8e8b5fdb85c06dc100 🔍

2

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x988
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.37139
MD5 4d358e6ab439faeac8bf379c39384d29 🔍
SHA1 3096505f1c9cc794af3a5b7a1be131ea754cfe79 🔍
SHA256 abbaf111dd396a9b1329d49115b66f069b14cfa043788a599fb29e5dd652cdb9 🔍
SHA3 5a3aca650978dfe0e84238204fae8ba6210ef6aaad626b635a2864c41bcbd4ad 🔍

3

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.40457
MD5 04c13922eda942e4c1c2b9a18e537172 🔍
SHA1 5492838818a6130f84767fb7b486b9d03f3eeec8 🔍
SHA256 4fa308c5e8be6a81647356568d15b2b5f2bf3d87a350515b7279e70603f39e99 🔍
SHA3 bc185e00643aef24da3e44061761de0e433aebde186f690c034bd82796f21e59 🔍

4

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.21232
MD5 d4187dda53eca7c5e3f6c5d49f412c95 🔍
SHA1 de4514686e172762720e0c65aaae6e711477f643 🔍
SHA256 b7715a21b05d4e6e1ec7485e1dc892342fdce07aad3708d4a3660e0c67cb4b34 🔍
SHA3 0d72abffa89e8620a9c529b617c92941f3b1555de0dfb4f5b27b4921a98f10be 🔍

5

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.9489
MD5 78321c7e6bda0fedf1835b5b6a66e78f 🔍
SHA1 07fdf86bb753db8af691f1264ae237cf94d8272d 🔍
SHA256 e702f99c8fb59e4a0eb9ee789fc6f6b143ea3f8cace310be8aea2e3178f524ba 🔍
SHA3 c780242194395c5eaea729868542997196f2420e3179e48af5d74bde1a6ac00d 🔍

6

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x94a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.57003
MD5 2111a6529938035d50142e4fa6cfa02e 🔍
SHA1 67fb93369453ce4847fc51ec1abc44fc1e4d3f64 🔍
SHA256 31245e08c3082255cf39e06d08f80265f81d09043f05e842405757fb7fef98b1 🔍
SHA3 e4854738d77114aa75aa2025263cdfbff30e8bfb4ef525800888362ab589045f 🔍

7

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.42752
MD5 63e3c1635169b7cbcaacc6aa7229e2d3 🔍
SHA1 8ab9c8719b372c64193ecdf926c264afd782854f 🔍
SHA256 028bff27b5fe5a75f4fa7c0fff62c1ff8f310b4db95869146301e6fafff5b417 🔍
SHA3 b7f7c85997e280855fa764c180fa9953462cbdef4a47e94cbac94f9e99892561 🔍

8

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.25417
MD5 6e6148d779fc7bef8c45be153e1a53e9 🔍
SHA1 50dc04fd4265a01811f17cea7c2f8d32e0591f2c 🔍
SHA256 fcd87f0803c8c5483f984a9e4d2fb7cc863532fd8268d5873b7a4c878563192b 🔍
SHA3 f89ef033ae315e5461ea1a78dde996662b487998d2de4e05afcb59e43ed9de32 🔍

9

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x42028
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.11294
MD5 ec0a1ba01b9b773c9b9795f7fcc3dd2e 🔍
SHA1 898f22fd822f27bd0c933eb420ff87f7eb7af4a6 🔍
SHA256 d19227ecd886807c7df395213e5f1489ffffe9131eaf85f31b7a106bd630ec36 🔍
SHA3 4d37af7e41b7ef641133db966de6b6eb3927ce08a369568d8fea5703df311334 🔍

103

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x84
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.04448
Detected Filetype Icon file
MD5 3bf2dac037ce87794e66ff7f054e913f 🔍
SHA1 52ca961fd37ad960905a681d1db5157508ef1602 🔍
SHA256 2a87b1f32c5d0435090c72c392b75394f706e5750eff64fd85d25e1c622ee581 🔍
SHA3 8454d3273522657b5926068082b2cb88f6dbf352e7e9568008c0e33c792f349b 🔍

1 (#2)

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x20c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.5735
MD5 a719513759cdb904df8ec575b1b86a3b 🔍
SHA1 bda0592fed97cca44bca8f06fd96345476931af1 🔍
SHA256 d5f2e06b5d50a5c16c64e621755c7d94e9b40bd60d16b0098e231a31ec14727c 🔍
SHA3 b990f99b6d678247d3abf35d2686ff5c9f66f6ecaaab6f6fa2804177471a894e 🔍

1 (#3)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x545
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.24993
MD5 9df530c2f4fbe460da74e130d5d351a9 🔍
SHA1 f8719b6c74e0179556c1a18f214d6c1bbff8f823 🔍
SHA256 3c357bd1125971bda05bc59eaeca279da41715741e2535e9e75c94273b1c3a1f 🔍
SHA3 ce3dd46f87bd462f8730fca18daea6df444422f8d88b810aefbd7b2e62536dee 🔍

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 6000.3.5.60491
ProductVersion 6000.3.5.60491
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_UNKNOWN
Language English - United States
FileVersion (#2) 6000.3.5.10611787
LegalCopyright (c) 2005-2026 Unity Technologies. All rights reserved.
ProductVersion (#2) 6000.3.5f1 (a1ec4b2f2d19)
Resource LangID English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2026-Jan-13 20:48:25
Version 0.0
SizeofData 149
AddressOfRawData 0x15d68
PointerToRawData 0x14f68
Referenced File C:\build\output\unity\unity\artifacts\WindowsPlayer\Win_x64_VS2022_VB_MT_nondev_m_r\WindowsPlayer_player_Master_mono_x64.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2026-Jan-13 20:48:25
Version 0.0
SizeofData 20
AddressOfRawData 0x15e00
PointerToRawData 0x15000

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2026-Jan-13 20:48:25
Version 0.0
SizeofData 836
AddressOfRawData 0x15e14
PointerToRawData 0x15014

TLS Callbacks

Load Configuration

Size 0x140
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x140018040

RICH Header

XOR Key 0x7914df52
Unmarked objects 0
ASM objects (28900) 5
C++ objects (28900) 138
C objects (28900) 10
Imports (28900) 2
ASM objects (34321) 9
C objects (34321) 16
C++ objects (34321) 40
Imports (34433) 3
Total imports 89
C++ objects (34433) 2
Exports (34433) 1
Resource objects (34433) 1
Linker (34433) 1

Errors

Leave a comment

No comments yet.