ce0e555c06af318ff82d8b14f343fb284b3853a0a1ede47b6f055fb584d380c1

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2026-Jan-25 22:18:25
Detected languages English - United States
Debug artifacts C:\build\output\unity\unity\artifacts\WindowsPlayer\Win_x86_VS2022_VB_nondev_m_r\WindowsPlayer_player_Master_mono_x86.pdb
FileVersion 6000.0.66.11668421
LegalCopyright (c) 2005-2026 Unity Technologies. All rights reserved.
ProductVersion 6000.0.66f2 (b20bc5da3050)

Plugin Output

Info The PE contains common functions which appear in legitimate applications. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryExW
Suspicious The PE is possibly a dropper. Resources amount for 87.3078% of the executable.
Safe VirusTotal score: 0/72 (Scanned on 2026-04-11 20:19:57) All the AVs think this file is safe.

Hashes

MD5 a5acb6f5ae99f952fe32b9f993a60e9e
SHA1 2d1d262af501c674421b8c4746ce5f6022dd675f
SHA256 ce0e555c06af318ff82d8b14f343fb284b3853a0a1ede47b6f055fb584d380c1
SHA3 82e84b1bb05ea49a75a18621492bb7eabc50ff52f6713831398cdc455726cf66
SSDeep 6144:XBN6baIXSmWI37d+APR6K9wtgzAJBjw/Ho0HBf8GFjmDlyUnvUKECnH:xN6baKjPR6K9TALj8Ho0RNqDlJjnH
Imports Hash 0c1feba3e28a2a44b2ebaa2d44779815

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x108

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 5
TimeDateStamp 2026-Jan-25 22:18:25
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32
LinkerVersion 14.0
SizeOfCode 0xbe00
SizeOfInitializedData 0x92800
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0000125C (Section: .text)
BaseOfCode 0x1000
BaseOfData 0xd000
ImageBase 0x400000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0xa1000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 a8b05c8d97c2b6ff5c4ad41d5b00d674
SHA1 8d4daff368ff10d46ad0ae1c88117985d90d00a8
SHA256 b506eb62e842f3552bc10461fa0f7322d975efa90b117f074fedeba608e1d0fa
SHA3 fda62e1cccce21d26e8372aa797b45e26682c7226a5e109824e7c754a240079c
VirtualSize 0xbdf3
VirtualAddress 0x1000
SizeOfRawData 0xbe00
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.60855

.rdata

MD5 dd085e361be7814eff5a4a373682aafc
SHA1 1dc9fe591d85f3eb0b18a7ab1fcd788908f86e05
SHA256 ed7f6ebfc439c08044c580e3dea85e6d94fac98dd742a516e790957732b2bc84
SHA3 2da741f994a9e7d0579c93e8b2588750da4009e8eddbe52a27f5bbd1e8b84470
VirtualSize 0x5f8a
VirtualAddress 0xd000
SizeOfRawData 0x6000
PointerToRawData 0xc200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.82202

.data

MD5 2121f20321b03cff6f6020d466eda9b5
SHA1 cb128d13b514b6f7bb0ad2e34a7ef1e96651593c
SHA256 42c65c08d59045823f390ac4a7d6c26f2b8b5017da97a3c47c8a54d42e17a0f6
SHA3 e275cb633dce1b4e8aee6fab7f19317d372dfb797d27d893ad7a66ce203bb786
VirtualSize 0x147c
VirtualAddress 0x13000
SizeOfRawData 0xa00
PointerToRawData 0x12200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 2.05102

.rsrc

MD5 cb99085d214de90dd776ced1d459161b
SHA1 93dd327e98279965cb4965993b8c6a9f869e1e76
SHA256 2aa653445662f1bd2c30b8081108ad4c0216712cc21c61cd30b843fc3ecc8570
SHA3 101726345eddda7ed70787094839a003dce13a651d0a0086ca7092dc5f9a03ff
VirtualSize 0x8a020
VirtualAddress 0x15000
SizeOfRawData 0x8a200
PointerToRawData 0x12c00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 6.06829

.reloc

MD5 668d45377f3a89bf5ddfb7f1916d8740
SHA1 86f396d7d5855b20067e2aeb68ed0fde5470c752
SHA256 a19349aaea4814052cf9032becef2ba669e488da3e4efbb968329025093ee218
SHA3 e3b1383b15df07d2aa892d1e3234848c0133c5a007057d3f331abea44ba4d65f
VirtualSize 0xe9c
VirtualAddress 0xa0000
SizeOfRawData 0x1000
PointerToRawData 0x9ce00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 6.27386

Imports

UnityPlayer.dll UnityMain2
KERNEL32.dll HeapAlloc
WriteConsoleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
CloseHandle
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
DecodePointer
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
LCMapStringW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW

Delayed Imports

AmdPowerXpressRequestHighPerformance

Ordinal 1
Address 0x13004

D3D12SDKPath

Ordinal 2
Address 0x13008

D3D12SDKVersion

Ordinal 3
Address 0xd160

NvOptimusEnablement

Ordinal 4
Address 0x13000

1

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.11287
MD5 fb818ca3d1a8f9fc4d8573e1c0728177
SHA1 f47de36e537bfcdda2c26d97e68d7f7698623817
SHA256 460110f6c57bf0d54c2a57448df8b2523ab79b07020adbcff8160379b56fa3af
SHA3 5510519b1e03a6dd57a3e9fca4feac35fd873dccdf823f48e67302d51396687f

2

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x988
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.33146
MD5 66de329f1dfa17f9283d180ed2233616
SHA1 f870286f7bbab62d85299d24ebe7867c8eb885f3
SHA256 2017db5b12b007ca4e9cafe6865c39bc516a398f0371821730e5260a2bff607d
SHA3 80a74104278a9fee08b3936dc09fa86ee42ccb8736014ad9635a686a4feae94a

3

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.32181
MD5 c72ed5d950e1bb30c72123376b84b111
SHA1 944390f94d2f5137549e8d710eeae8001a96dd82
SHA256 5f3b8ae90cde2da1dffe8af482bf6da75d8a1a72e256c0f2e50c13612016d38d
SHA3 3117813f9cfc83deb8b29d54917bc1330c0d1361f638cb059c32917825e41db4

4

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.17292
MD5 3669ab79186f508eb3dedfcb7cb7c67a
SHA1 4945d9d49a0bf3499a468d8e039d3ac6db799dc4
SHA256 a792e5bf3932767e29a880b4c8c31525592ca68256ab23e2b194db9ade3afd60
SHA3 a22ea098c36eb3ecf414ed43b447d62893b485759706f2e1ab9fd58896127ede

5

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.15005
MD5 3095818bdcceb870457a10bc6eb58456
SHA1 ea8ca7df210b85b0781c47e76b0e1ff4fe3a8d5b
SHA256 4f3d2f245540827d7fbcc5b4ed3fd884f947bdd0758ee94f0a7236fd98d80160
SHA3 488fcab6bae325d3d215e2f2097d91ba24b9a06a8f29919c1dfc5cfae8670357

6

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x94a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.06851
MD5 79b83450a7ac21235be931dff4d602a4
SHA1 083f55241eb2fc1ca3fa1adf1422e0583a708b38
SHA256 10f83bffa671a2f0b53490dc707fcac6ee33b6c1a22727221f9d44063a0fa287
SHA3 532b118dddd1b8a3f174718db117f57c8cfdab908292719885d471818b722690

7

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.03841
MD5 56dd5fcea8615e8e77d644d3571607af
SHA1 babecc32d1c963f8b1b06332e04ffabc95119302
SHA256 382af9c9a8832b75006cfc0dc87ff1a7b7de4cfff4565cdb5dc474b575c00a1d
SHA3 2255506eec313465d31ceaaab6c24ace86ab837e32a2e9c5f5d5979ee9b15b7c

8

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.03796
MD5 63a06aa35846197796e634f3ee5e8e5b
SHA1 679e3cf17acac7b7d276f355de7d63728e117c93
SHA256 f721d3484bbce9f979b43292beb683bef994b91560c77f58ffe999bd5392d0c7
SHA3 de33b22675298032d6d6fa4aa4f24425b2822f8fc36f8b2ecb35766ef8887db4

9

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x42028
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.04445
MD5 5ffd062e1f8b235c13ef7719ffcd1db0
SHA1 a139ba763e904f6b7ac3ea8f2c8854b55f4a9e1d
SHA256 ad5d4dfd257272dc2d1d4129f6c2e8aef1db5909d9de11701204287dde58fbcb
SHA3 90caa32f67c18dbcf6344472d08bf7e465fbb838844adfeda089df5cfdb4bc79

103

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x84
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.04448
Detected Filetype Icon file
MD5 3bf2dac037ce87794e66ff7f054e913f
SHA1 52ca961fd37ad960905a681d1db5157508ef1602
SHA256 2a87b1f32c5d0435090c72c392b75394f706e5750eff64fd85d25e1c622ee581
SHA3 8454d3273522657b5926068082b2cb88f6dbf352e7e9568008c0e33c792f349b

1 (#2)

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x214
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.48793
MD5 bbd5ce271b776587d2bde43ef6ecd142
SHA1 026f949ddccd6a1cd9a653248db0eb9bba8666ca
SHA256 b214c9edb76357d8d01f84556f7859f9173cf32a88ef806e2fb6c1c724a9c789
SHA3 28c89b3815eb022711a3263c2d67badd1385e498fe58cc8aef3f3ee8caacc4c2

1 (#3)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x545
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.24993
MD5 9df530c2f4fbe460da74e130d5d351a9
SHA1 f8719b6c74e0179556c1a18f214d6c1bbff8f823
SHA256 3c357bd1125971bda05bc59eaeca279da41715741e2535e9e75c94273b1c3a1f
SHA3 ce3dd46f87bd462f8730fca18daea6df444422f8d88b810aefbd7b2e62536dee

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 6000.0.66.3013
ProductVersion 6000.0.66.3013
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_UNKNOWN
Language English - United States
FileVersion (#2) 6000.0.66.11668421
LegalCopyright (c) 2005-2026 Unity Technologies. All rights reserved.
ProductVersion (#2) 6000.0.66f2 (b20bc5da3050)
Resource LangID English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2026-Jan-25 22:18:25
Version 0.0
SizeofData 146
AddressOfRawData 0x11f5c
PointerToRawData 0x1115c
Referenced File C:\build\output\unity\unity\artifacts\WindowsPlayer\Win_x86_VS2022_VB_nondev_m_r\WindowsPlayer_player_Master_mono_x86.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2026-Jan-25 22:18:25
Version 0.0
SizeofData 20
AddressOfRawData 0x11ff0
PointerToRawData 0x111f0

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2026-Jan-25 22:18:25
Version 0.0
SizeofData 768
AddressOfRawData 0x12004
PointerToRawData 0x11204

TLS Callbacks

Load Configuration

Size 0xc0
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x413040
SEHandlerTable 0x411e9c
SEHandlerCount 10

RICH Header

XOR Key 0xb80cc5d4
Unmarked objects 0
ASM objects (28900) 10
C++ objects (28900) 141
C objects (28900) 20
Imports (28900) 2
C++ objects (33218) 38
C objects (33218) 18
ASM objects (33218) 18
Imports (33523) 3
Total imports 81
C++ objects (33523) 2
Exports (33523) 1
Resource objects (33523) 1
Linker (33523) 1

Errors

Leave a comment

No comments yet.