fe9b1495f1ddd19bd99a80f73d717936c93195c1bf5580830730c5d3caa54add

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2026-Nov-02 15:21:31
Detected languages English - United States
Debug artifacts C:\build\output\unity\unity\artifacts\WindowsPlayer\Win_x64_VS2022_VB_MT_nondev_i_r\WindowsPlayer_player_Master_il2cpp_x64.pdb
FileVersion 6000.3.28.9373741
LegalCopyright (c) 2005-2026 Unity Technologies. All rights reserved.
ProductVersion 6000.3.28f1 (8f082d2fe476)

Plugin Output

Info The PE contains common functions which appear in legitimate applications. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryExW
Suspicious The PE is possibly a dropper. Resources amount for 84.6217% of the executable.
Suspicious No VirusTotal score. This file has never been scanned on VirusTotal.

Hashes

MD5 da27c83868c2585df37a98181c7dce84 🔍
SHA1 cc254b337fde34fc2686228ed010df825024e696 🔍
SHA256 fe9b1495f1ddd19bd99a80f73d717936c93195c1bf5580830730c5d3caa54add 🔍
SHA3 d0d58a8812d93c902d2546115b1d160f2f50e97ffdf19a591d5bde6e1718ef74 🔍
SSDeep 6144:9aMjvuUwZpUUhLDyj6Ga5qy9UlWKW3U/eYXeZ6Kca2wN3ch5eUhhumFREldXdv3:9tVwZplh0SqyOYlV2XeahN2ldXBae 🔍
Imports Hash a136217cdd3247ff6a8766561064ca0b 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x110

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 6
TimeDateStamp 2026-Nov-02 15:21:31
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0xce00
SizeOfInitializedData 0x96e00
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0000000000001264 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x140000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0xa6000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 457fb5274ed18adc024e01b603e258a4 🔍
SHA1 159fdb99c377edc82c57d34217a711578edb0e63 🔍
SHA256 336709c08beca21a675f029c2d588ac0cae8cc8f42422039cbb827b6284374e5 🔍
SHA3 7d6db62af5f0503638e32b2c5a2ebd94056e5e490598ebed73cb0495875d3499 🔍
VirtualSize 0xcdb0
VirtualAddress 0x1000
SizeOfRawData 0xce00
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.45019

.rdata

MD5 b6b2f63d9a0c771b1fbc6f4a43a3b1c8 🔍
SHA1 bd0dbfda396703afa3b96f0afd5122477ca5bf39 🔍
SHA256 804f40878a8df15d0fed29fd0c188fb642f58378c49f63374cdce4b40146adbc 🔍
SHA3 5bfd4fe93140b2d641585848b4c8032c2d5bd03b80e7e1eab69f286222e798c0 🔍
VirtualSize 0x977c
VirtualAddress 0xe000
SizeOfRawData 0x9800
PointerToRawData 0xd200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.69291

.data

MD5 0822db25bce65451a1219de812eea533 🔍
SHA1 bf4c918ff2184dfeba8cd4f98b21e11d75de05e7 🔍
SHA256 8987031a7fb9e9ffe2b44dad568693d86af933f2b44447b6f5c1159bd0750a79 🔍
SHA3 83fbc2d299cd2e5b71ce2f669f319b95fcab94178c620dd04d72a1071efde7b0 🔍
VirtualSize 0x1d88
VirtualAddress 0x18000
SizeOfRawData 0xc00
PointerToRawData 0x16a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 1.90767

.pdata

MD5 017f81338461c6b246bdb8ce1bf5fc08 🔍
SHA1 aa79861d4dea94c5fd283f1359435734dfb03517 🔍
SHA256 d1cc88f6e981b629ad1f47d33507ac8b71f82346871b690375752ffc69c6063d 🔍
SHA3 e197cfb7530afb455ed4ebbd26984d4562c62ea8c9c65f07f5d04c80970ee830 🔍
VirtualSize 0xec4
VirtualAddress 0x1a000
SizeOfRawData 0x1000
PointerToRawData 0x17600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.60208

.rsrc

MD5 73c223563d7748b05ec2bcc20a774bfb 🔍
SHA1 0154c8b0a64fef55a5788044e9e1c0d967fa2ab2 🔍
SHA256 e913dd04e37284448b0f0759b2a913c5eed742158c9b4a09616e42eef11425f2 🔍
SHA3 b8a5c69578704a21bf0b40976be3c8e9416463bbe1541fe508d032960190eeab 🔍
VirtualSize 0x89ff8
VirtualAddress 0x1b000
SizeOfRawData 0x8a000
PointerToRawData 0x18600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.82356

.reloc

MD5 3ab8a3a955e5040e25556085e21a2be2 🔍
SHA1 f29b173f0ea430d70ff0803cbaa89fa1d4d024d9 🔍
SHA256 119eed3c019ffdb0bba4cee06b80d85e78a679f1bb17317cbb6a352bb4102d7a 🔍
SHA3 a5c3cb0725d2fd68e14265c6e03629d6270e73c1f049eb78b3e40b7b2535d802 🔍
VirtualSize 0x658
VirtualAddress 0xa5000
SizeOfRawData 0x800
PointerToRawData 0xa2600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 4.86735

Imports

UnityPlayer.dll UnityMain2
KERNEL32.dll HeapAlloc
WriteConsoleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
CloseHandle
RtlUnwindEx
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
GetStdHandle
WriteFile
GetModuleFileNameW
GetCurrentProcess
ExitProcess
TerminateProcess
GetModuleHandleExW
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW

Delayed Imports

AmdPowerXpressRequestHighPerformance

Ordinal 1
Address 0x18004

D3D12SDKPath

Ordinal 2
Address 0x18008

D3D12SDKVersion

Ordinal 3
Address 0xe320

NvOptimusEnablement

Ordinal 4
Address 0x18000

1

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.63403
MD5 a776ddcc7360f67958caa88f66549737 🔍
SHA1 f8675c54183f5a805d5a5a0e38f5d0c531372fc5 🔍
SHA256 b0cea8bfb5d42de6fb65b9fa6a6060ddc1f6f8609e9dc5469439ecf5d0b3ca3e 🔍
SHA3 8835b8ef7f1ce8382b7038e2cc48b1822b7771d174badd7743e47278b4c3b8ce 🔍

2

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x988
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.78879
MD5 de10a57826864501c8f3fdc26c26fdd3 🔍
SHA1 30b21b3c154f54c17626c4b943608bd13f3423ae 🔍
SHA256 257aa651f069cb5f0fc244ea0f73f8eaf1db4da609954aecfce87b442165fa87 🔍
SHA3 146ac343c2e313238954091db4ca1e655f0851bda06aaec2a703debde9715753 🔍

3

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.84434
MD5 a1d915d825ad90ea0feadce81874563b 🔍
SHA1 50eba68005bcf8ff3ab3ffd70a5eb9d7794e0923 🔍
SHA256 1cdb2f9781cd72cb2f2e5e887f5e9a2081ea7c534e977231f367d77c4b248808 🔍
SHA3 f553986b9bd2337bb32204f05379fdc36b832b39f0ba4eb7aeb71f7cb23c6502 🔍

4

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.81672
MD5 5e7785b90023955e2fd8c50cc5eab0a6 🔍
SHA1 524f00198b16bc3a272668d601d4d725db264e9c 🔍
SHA256 e6919e6ed1449930e1187c7be896e5a66fbbe057a1098799f5a3a0d2b0132c83 🔍
SHA3 61c52d8f753d49304fbe52d5b4aea4fd63d748c05aeb832b9ec4763ef77d5d75 🔍

5

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.84566
MD5 0d1c538054ee25a3abdb9eefdc95c912 🔍
SHA1 932b260fb5c98991da10768404ef4fa60c77e8b4 🔍
SHA256 8a52c8210708f42c7c7e51bc3e5a561c7e04d6c78cc553779b7dddefe4644a06 🔍
SHA3 ee82dea2a3fe1a5403d8ae1c10770d423df0065812bbae456f1050ecd3cb8225 🔍

6

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x94a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.83498
MD5 6fb74e5fc2e8f56c66e8cd680e685107 🔍
SHA1 5cc4494f94c8b88b61f039654438df34e9ace58a 🔍
SHA256 f387df831363012f988a6ce23ccb66e4075f04b0092cd979a33c5439b9d864ae 🔍
SHA3 116dac8d5b90dee6741f44d14c71b902a4dfec49817389401383266559bb678a 🔍

7

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.82635
MD5 b447c4f8fa20b9f35997ecdf4054864d 🔍
SHA1 e3af4f74d1f4ef4c540ad6a565e887044e296a3c 🔍
SHA256 ec22b2543828f058c52e59dc8150bd0b1ea73ffdcc9ca2c9cd19b723225c3b90 🔍
SHA3 b45c68888d8a6337e61a9ed642ac95e3116580e67bec1a73acfc54f78d417e90 🔍

8

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.81431
MD5 67d0ca1fa4b676c94c9ec223a1a70ea1 🔍
SHA1 94d8a4a593ddd5f4255ab1cc6e79665f739aa372 🔍
SHA256 cdd63c7c889d8cc77c70ab024fc2dcda05f45f33f35fcae6e663514f60fd56d9 🔍
SHA3 dd93480b23e763a2ae7a164ef7b628dad95610f32fcc81f6cccd4e7dd519299b 🔍

9

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x42028
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.80597
MD5 9ab56fb6f6ce03c96319f34d8b74e025 🔍
SHA1 7cd57538a80168326b64ed25172805f85c51b8bf 🔍
SHA256 f4f85324b061455bbe1ce01e54b97ba9c510dae4b4f7e86e6f07353f4ea1c5da 🔍
SHA3 d86a35a359e3174828b808f2d9a79cb47ec7122f8bba083f20e8637764839fb0 🔍

103

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x84
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.04448
Detected Filetype Icon file
MD5 3bf2dac037ce87794e66ff7f054e913f 🔍
SHA1 52ca961fd37ad960905a681d1db5157508ef1602 🔍
SHA256 2a87b1f32c5d0435090c72c392b75394f706e5750eff64fd85d25e1c622ee581 🔍
SHA3 8454d3273522657b5926068082b2cb88f6dbf352e7e9568008c0e33c792f349b 🔍

1 (#2)

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x210
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.55553
MD5 5d855f2963e60c41e928aad804b025ba 🔍
SHA1 26b15e1c16578e074a74d6a469e92f2b29902bff 🔍
SHA256 0ff7f2e192fe10b91646617a2ebe30d3d72258705ac3f3d66a2263dc1e6bfb60 🔍
SHA3 24d65db516b6f101bb6f55cf05a91bd54d0dcda75bd0cc0c13e8a2b9858b8fa8 🔍

1 (#3)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x522
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.21152
MD5 2fe105521c08a12b3c7ec1f8cebb8080 🔍
SHA1 8c0f4de5e8b67bbce40cd0da378d6c44b7dcffcc 🔍
SHA256 7b869d77787211c23ca2eeaec8b31acca8b24b7f74038b846b2952f0b230f16e 🔍
SHA3 7a7f34eaf54431e64300ca8fc59327e03fbf3d3c9296a4bdfeda3d9053c9bc7b 🔍

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 6000.3.28.2093
ProductVersion 6000.3.28.2093
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_UNKNOWN
Language English - United States
FileVersion (#2) 6000.3.28.9373741
LegalCopyright (c) 2005-2026 Unity Technologies. All rights reserved.
ProductVersion (#2) 6000.3.28f1 (8f082d2fe476)
Resource LangID English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2026-Nov-02 15:21:31
Version 0.0
SizeofData 151
AddressOfRawData 0x15d68
PointerToRawData 0x14f68
Referenced File C:\build\output\unity\unity\artifacts\WindowsPlayer\Win_x64_VS2022_VB_MT_nondev_i_r\WindowsPlayer_player_Master_il2cpp_x64.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2026-Nov-02 15:21:31
Version 0.0
SizeofData 20
AddressOfRawData 0x15e00
PointerToRawData 0x15000

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2026-Nov-02 15:21:31
Version 0.0
SizeofData 836
AddressOfRawData 0x15e14
PointerToRawData 0x15014

TLS Callbacks

Load Configuration

Size 0x140
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x140018040

RICH Header

XOR Key 0x7914df52
Unmarked objects 0
ASM objects (28900) 5
C++ objects (28900) 138
C objects (28900) 10
Imports (28900) 2
ASM objects (34321) 9
C objects (34321) 16
C++ objects (34321) 40
Imports (34433) 3
Total imports 89
C++ objects (34433) 2
Exports (34433) 1
Resource objects (34433) 1
Linker (34433) 1

Errors

Leave a comment

No comments yet.