d8c3772603082337623eb3f2dc941ff7c304b11776560507fe210badfce9019a

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2026-Jul-01 05:07:46
Detected languages English - United States
Debug artifacts C:\build\output\unity\unity\artifacts\WindowsPlayer\Win_x64_VS2022_VB_MT_nondev_i_r\WindowsPlayer_player_Master_il2cpp_x64.pdb
FileVersion 6000.5.3.12774215
LegalCopyright (c) 2005-2026 Unity Technologies. All rights reserved.
ProductVersion 6000.5.3f1 (c2eb47b3a2a9)

Plugin Output

Info The PE contains common functions which appear in legitimate applications. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryExW
Suspicious The PE is possibly a dropper. Resources amount for 84.5615% of the executable.
Suspicious No VirusTotal score. This file has never been scanned on VirusTotal.

Hashes

MD5 a39db2976fb47db293c87d9303c26d64 🔍
SHA1 26c1434d1bdc840bc424eb80ef9d4b372425d409 🔍
SHA256 d8c3772603082337623eb3f2dc941ff7c304b11776560507fe210badfce9019a 🔍
SHA3 868edccec3706763a241398fa4b35581077c4a804f87962b3892f86addcd53f5 🔍
SSDeep 6144:WaMjvuUwZpVUhL0ESuxuFnUHsLmikx3iI1lTM2ytR:WtVwZp+hJeixE 🔍
Imports Hash a136217cdd3247ff6a8766561064ca0b 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x110

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 6
TimeDateStamp 2026-Jul-01 05:07:46
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0xce00
SizeOfInitializedData 0x97000
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0000000000001264 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x140000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0xa7000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 457fb5274ed18adc024e01b603e258a4 🔍
SHA1 159fdb99c377edc82c57d34217a711578edb0e63 🔍
SHA256 336709c08beca21a675f029c2d588ac0cae8cc8f42422039cbb827b6284374e5 🔍
SHA3 7d6db62af5f0503638e32b2c5a2ebd94056e5e490598ebed73cb0495875d3499 🔍
VirtualSize 0xcdb0
VirtualAddress 0x1000
SizeOfRawData 0xce00
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.45019

.rdata

MD5 427f52c03ba92eed460ac4efefde91fa 🔍
SHA1 18e1212308e151fa7aed8a1a0658f57655c9736d 🔍
SHA256 6a0636659953571ab0ab0b39593c16a8d0de3bc1f6624fdeade9076eb22238af 🔍
SHA3 b8ad8cb85adfcfb29b909c514f5d21fd11cc5658697cfbc92c99c2f0e7347b47 🔍
VirtualSize 0x977c
VirtualAddress 0xe000
SizeOfRawData 0x9800
PointerToRawData 0xd200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.69289

.data

MD5 0822db25bce65451a1219de812eea533 🔍
SHA1 bf4c918ff2184dfeba8cd4f98b21e11d75de05e7 🔍
SHA256 8987031a7fb9e9ffe2b44dad568693d86af933f2b44447b6f5c1159bd0750a79 🔍
SHA3 83fbc2d299cd2e5b71ce2f669f319b95fcab94178c620dd04d72a1071efde7b0 🔍
VirtualSize 0x1d88
VirtualAddress 0x18000
SizeOfRawData 0xc00
PointerToRawData 0x16a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 1.90767

.pdata

MD5 017f81338461c6b246bdb8ce1bf5fc08 🔍
SHA1 aa79861d4dea94c5fd283f1359435734dfb03517 🔍
SHA256 d1cc88f6e981b629ad1f47d33507ac8b71f82346871b690375752ffc69c6063d 🔍
SHA3 e197cfb7530afb455ed4ebbd26984d4562c62ea8c9c65f07f5d04c80970ee830 🔍
VirtualSize 0xec4
VirtualAddress 0x1a000
SizeOfRawData 0x1000
PointerToRawData 0x17600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.60208

.rsrc

MD5 601af8b25b6a2f5113b0fc6d43302fad 🔍
SHA1 ec8cece8a8aa79ea85b3e157f3d7ba7f67181d83 🔍
SHA256 5703f1c4233f52cfdbff1db0a2f85f583b27fbeba68d16cdd35dc0b49eb0ca0e 🔍
SHA3 af32cb1e3a65a51e50fe0e69fa18be612d72123d19a22f59bb0ffe1826bfb410 🔍
VirtualSize 0x8a018
VirtualAddress 0x1b000
SizeOfRawData 0x8a200
PointerToRawData 0x18600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.13639

.reloc

MD5 3ab8a3a955e5040e25556085e21a2be2 🔍
SHA1 f29b173f0ea430d70ff0803cbaa89fa1d4d024d9 🔍
SHA256 119eed3c019ffdb0bba4cee06b80d85e78a679f1bb17317cbb6a352bb4102d7a 🔍
SHA3 a5c3cb0725d2fd68e14265c6e03629d6270e73c1f049eb78b3e40b7b2535d802 🔍
VirtualSize 0x658
VirtualAddress 0xa6000
SizeOfRawData 0x800
PointerToRawData 0xa2800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 4.86735

Imports

UnityPlayer.dll UnityMain2
KERNEL32.dll HeapAlloc
WriteConsoleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
CloseHandle
RtlUnwindEx
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
GetStdHandle
WriteFile
GetModuleFileNameW
GetCurrentProcess
ExitProcess
TerminateProcess
GetModuleHandleExW
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW

Delayed Imports

AmdPowerXpressRequestHighPerformance

Ordinal 1
Address 0x18004

D3D12SDKPath

Ordinal 2
Address 0x18008

D3D12SDKVersion

Ordinal 3
Address 0xe320

NvOptimusEnablement

Ordinal 4
Address 0x18000

1

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.61943
MD5 e9a3b1a316d7e56e776dcc8a40bb2032 🔍
SHA1 d359a0d639fef7d0ca37d6bbc11fadb86d2ebf96 🔍
SHA256 eb0f4b60dd25490bcea3b9da34a5013a6942e4dab162f605b5d2b7d17fcd59d9 🔍
SHA3 a462c4bd98e8ce856d86c3186165ccd7fb73a923a396da25344cfff4c2b88de1 🔍

2

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x988
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.68232
MD5 37dd35f627e9b0e8962fa6a0e4899f10 🔍
SHA1 bf2257a69858c83b65df37c26141630ebceb8c37 🔍
SHA256 0e97fc9d1c84c26179cb0fde34cab098591e6d3eca292e61700c61c869f5e521 🔍
SHA3 faef35411e9fd801c2f7310c48ac434f3f7bda74cae46ae437e56a15cbf50724 🔍

3

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.6124
MD5 a53c9c85ceefe66ccf5692f87f439e10 🔍
SHA1 362e16d682235cf378f66178b04775e5b19d44b9 🔍
SHA256 092322e234153059fd2291dae3fe964ec9bffdaf6f5abbe97ad112634ada68c2 🔍
SHA3 39f48cd47879a0106ee66fbba44647fd2e2c437823d2e900b0192b34b3f156ce 🔍

4

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.4303
MD5 f926cf03ce3cc700dedbf7031e5ad957 🔍
SHA1 148f0d862ed9e5af27ea94b0c2395606cd6ef97b 🔍
SHA256 d0d568dd231dd9f1146c211eb4febf1c998e780b9ba7d485a0c7383b4dddb9e6 🔍
SHA3 528777f9ca62005bc14e2eac09174cbdf77ba15569fa76fee4cbdbdf1c1c1b6e 🔍

5

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.36167
MD5 5377a839c3f0be80f3bfd4985ec3809d 🔍
SHA1 8965976c8a7afcb963f1b6f854edae7aa79f5912 🔍
SHA256 99c58814da1926dcdb037db1880fd1fe9c0a1a7eb627331d3d9b836d6692f3c6 🔍
SHA3 5469c71d46a91f1080e3153ffeb55ed00c36720dbee3333f582ebdc5e398ea9d 🔍

6

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x94a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.23386
MD5 adc29e32402c4c989bc2e20db6ec4409 🔍
SHA1 3dad0d0a88d3e4f5a253ec8de65b5998fa3b6fd2 🔍
SHA256 37412bbba5a5c0bcea90a1d37666c61ad3201b5dcdc0d6c896c335270472b956 🔍
SHA3 9833b4c921809e34502cc1dba424c81ae7d441800ce5f64db39edd712bce92a9 🔍

7

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.15724
MD5 94bb3ede277b64f2c2375a30e452cac8 🔍
SHA1 88710146a5cc33228877d9b71ac83288a639a8b2 🔍
SHA256 e23ef04b88afbba3a77718e57f908dce535390c47ac0c3da14bdcebd1d2f9729 🔍
SHA3 b1d32a6e9abb157de5993497102b8ba46e9bd6d3ece3782a0c3dd4e3eb420320 🔍

8

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.08507
MD5 bc6c63d819463a1816f03d6140ddd2ad 🔍
SHA1 87813e2a4cf25eed296f72f3d526f576ab333bcc 🔍
SHA256 3d6724e55111d14524ccde7e1262a4161203531b1875857d6b7bc02064015877 🔍
SHA3 f79012c838069c9cfc31246a210ddec9b7081405ac8632106cf4af767a2eb624 🔍

9

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x42028
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.04947
MD5 ee883842b8a32a9d4af77e5622ba0afc 🔍
SHA1 c957d9d7a566c2f235abfd791601df6cd2877fc4 🔍
SHA256 9efd052d28162baeb90b674fd73ed0a858e0c2d9daf0ba76e5008803f22097aa 🔍
SHA3 e16abc8f5a9c4a314b88fc7616c089d246e4a20ccc8f5164d8b23291bfde9804 🔍

103

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x84
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.04448
Detected Filetype Icon file
MD5 3bf2dac037ce87794e66ff7f054e913f 🔍
SHA1 52ca961fd37ad960905a681d1db5157508ef1602 🔍
SHA256 2a87b1f32c5d0435090c72c392b75394f706e5750eff64fd85d25e1c622ee581 🔍
SHA3 8454d3273522657b5926068082b2cb88f6dbf352e7e9568008c0e33c792f349b 🔍

1 (#2)

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x20c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.569
MD5 9a1a0d6d9651de7bbf43f7bcf5d6abdb 🔍
SHA1 eb646527878bbe9cf5cf5cecbe73e69fba4661ec 🔍
SHA256 3c547335ddda0c79438ca7831e9b7028dbb1a6925accf08f9b471d11036a1f76 🔍
SHA3 c91de9a66bea238a28138a5dc32392d43716b5a9d63d774840dbdcda71b876f3 🔍

1 (#3)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x545
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.24993
MD5 9df530c2f4fbe460da74e130d5d351a9 🔍
SHA1 f8719b6c74e0179556c1a18f214d6c1bbff8f823 🔍
SHA256 3c357bd1125971bda05bc59eaeca279da41715741e2535e9e75c94273b1c3a1f 🔍
SHA3 ce3dd46f87bd462f8730fca18daea6df444422f8d88b810aefbd7b2e62536dee 🔍

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 6000.5.3.60231
ProductVersion 6000.5.3.60231
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_UNKNOWN
Language English - United States
FileVersion (#2) 6000.5.3.12774215
LegalCopyright (c) 2005-2026 Unity Technologies. All rights reserved.
ProductVersion (#2) 6000.5.3f1 (c2eb47b3a2a9)
Resource LangID English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2026-Jul-01 05:07:46
Version 0.0
SizeofData 151
AddressOfRawData 0x15d68
PointerToRawData 0x14f68
Referenced File C:\build\output\unity\unity\artifacts\WindowsPlayer\Win_x64_VS2022_VB_MT_nondev_i_r\WindowsPlayer_player_Master_il2cpp_x64.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2026-Jul-01 05:07:46
Version 0.0
SizeofData 20
AddressOfRawData 0x15e00
PointerToRawData 0x15000

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2026-Jul-01 05:07:46
Version 0.0
SizeofData 836
AddressOfRawData 0x15e14
PointerToRawData 0x15014

TLS Callbacks

Load Configuration

Size 0x140
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x140018040

RICH Header

XOR Key 0x7914df52
Unmarked objects 0
ASM objects (28900) 5
C++ objects (28900) 138
C objects (28900) 10
Imports (28900) 2
ASM objects (34321) 9
C objects (34321) 16
C++ objects (34321) 40
Imports (34433) 3
Total imports 89
C++ objects (34433) 2
Exports (34433) 1
Resource objects (34433) 1
Linker (34433) 1

Errors

Leave a comment

No comments yet.