15b164bbb3b4786102b33476506c54a75e47d85dac7b0bed33fe463c1258c152

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2025-Sep-26 11:16:27
Detected languages English - United States
Debug artifacts C:\build\output\unity\unity\artifacts\WindowsPlayer\Win64_VS2019_nondev_i_r\WindowsPlayer_player_Master_il2cpp_x64.pdb
FileVersion 2022.3.62.7762112
LegalCopyright (c) 2005-2025 Unity Technologies. All rights reserved.
ProductVersion 2022.3.62f2 (7670c08855a9)

Plugin Output

Info The PE contains common functions which appear in legitimate applications. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryExW
Suspicious The PE is possibly a dropper. Resources amount for 84.749% of the executable.
Suspicious VirusTotal score: 1/71 (Scanned on 2026-10-16 05:01:15) Trapmine: suspicious.low.ml.score

Hashes

MD5 98c9af98a4495f13707ccafa805be65c 🔍
SHA1 7b13848c6485295c83cc00ca2d88d37f9d485b35 🔍
SHA256 15b164bbb3b4786102b33476506c54a75e47d85dac7b0bed33fe463c1258c152 🔍
SHA3 a2e95a05fb5b63470eaca2a8eaf3c1e2f7440377613e6689c219af813892c5ca 🔍
SSDeep 12288:R/7g4aOD8hdnLKEN/Qmdg+3g2RBJ/Cz/czAiJ:JFaOOLKU9j3gkfTJ 🔍
Imports Hash a136217cdd3247ff6a8766561064ca0b 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x110

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 7
TimeDateStamp 2025-Sep-26 11:16:27
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0xca00
SizeOfInitializedData 0x97000
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0000000000001264 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x140000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0xa8000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 e1ace82cc0f3d159779f5c95aa7e575b 🔍
SHA1 e4a5358996f267c921e5d996de44f3525bb042ed 🔍
SHA256 bec109031034001337c9be3c07e16f6fab9c862313fc1f8fb0699672e09c63a4 🔍
SHA3 449bef44a9ee4a68767a70da31c7ceb6aa3d1da49237a84227bbfb02c7e428a2 🔍
VirtualSize 0xc8b0
VirtualAddress 0x1000
SizeOfRawData 0xca00
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.41019

.rdata

MD5 7d256bd52aef67d03e7c7253271192ec 🔍
SHA1 3ab37b847e25d6e4133478969795874663fdc77d 🔍
SHA256 8f02eaeead5b682bb4c8e1c2ed04fbaf9370103f3c335eaef21a55266bb3d95a 🔍
SHA3 82acbccd494473dd61dc80491d7cae47ae2b8aa97cef2557e30f527bd4b9de10 🔍
VirtualSize 0x948c
VirtualAddress 0xe000
SizeOfRawData 0x9600
PointerToRawData 0xce00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.65457

.data

MD5 90815aa5dc65a7dd3f93bad1bd78a77e 🔍
SHA1 608f3e69047b216dda6b0df73c30912e2fef5544 🔍
SHA256 435cb9af1df25f501f68a9700182c4d25de99c3f8e8c1ba6b16c0ca98911ff87 🔍
SHA3 e5ea90d4dd767bfa3d88e3fa2e107c2e40cac10f43498d5abd74f15888477d18 🔍
VirtualSize 0x1d38
VirtualAddress 0x18000
SizeOfRawData 0xc00
PointerToRawData 0x16400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 1.87032

.pdata

MD5 6e619149c26d436c6f07193ff1e8032b 🔍
SHA1 70aea7c26eff6d7619bd6a5a97ab259d68dd24f5 🔍
SHA256 48cb5fb202e79c0b8da5091cb440a9068502b37c8e4200eb78df617ae99fd024 🔍
SHA3 196183a21caf69a7292ff77b288d707ce7d63e2b887053ae1bc258b99d1e36f0 🔍
VirtualSize 0xef4
VirtualAddress 0x1a000
SizeOfRawData 0x1000
PointerToRawData 0x17000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.62125

_RDATA

MD5 f87f407c2a1cab208757ad1d23a2de6f 🔍
SHA1 cd739c36958f9ba7505883ae868f1a6ca71e880f 🔍
SHA256 6e4ba525d12ef66132e0738191d3a928ba74c0091a6f82bc48f892a41e2fc242 🔍
SHA3 0611ad194d9c623281cb358dbc2f2d28bb01b6eab682677ec8d16136d74414ab 🔍
VirtualSize 0x94
VirtualAddress 0x1b000
SizeOfRawData 0x200
PointerToRawData 0x18000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 1.11888

.rsrc

MD5 7cd1056fc1827f6fd0d3c5fedfba2513 🔍
SHA1 f931d78c934794ba7de2ceae506b761f3eb58e29 🔍
SHA256 a257261607c7681499044adc21b875cdc80930d3c9793b362e1b1bda8b0fc261 🔍
SHA3 dda315920f9ba2f19a344e1302de128aed0c21a1db7f69710bb1e6b35df1cb1a 🔍
VirtualSize 0x8a198
VirtualAddress 0x1c000
SizeOfRawData 0x8a200
PointerToRawData 0x18200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 6.22564

.reloc

MD5 ef1e558d46106d87320dd822be1ddc48 🔍
SHA1 10f7b05d107451bd01cf446da512c619fc35bf50 🔍
SHA256 34d7b771018e478ba05cd24ec377fd34919d65ec63c43f49e1ab319785368929 🔍
SHA3 cc295f58e62efe5c59cad1febf1ce620404450135f442c20ba55235b492ddac9 🔍
VirtualSize 0x654
VirtualAddress 0xa7000
SizeOfRawData 0x800
PointerToRawData 0xa2400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 4.84209

Imports

UnityPlayer.dll UnityMain2
KERNEL32.dll HeapAlloc
WriteConsoleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
CloseHandle
RtlUnwindEx
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
GetStdHandle
WriteFile
GetModuleFileNameW
GetCurrentProcess
ExitProcess
TerminateProcess
GetModuleHandleExW
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW

Delayed Imports

AmdPowerXpressRequestHighPerformance

Ordinal 1
Address 0x18004

NvOptimusEnablement

Ordinal 2
Address 0x18000

1

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x42028
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.17033
MD5 ed6d3b2b58b19660efff7bca79e5197b 🔍
SHA1 d59ecd9ce8548c23092fe090807394d94e08c646 🔍
SHA256 ee7f643b45aee2196a62a39c39c89f7649d582405593f98a4812ca0b683bc050 🔍
SHA3 b1abb31504be426d42c5c5cfa4907110febe5b8655558c62cee2c35d20f81066 🔍

2

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.20796
MD5 4445476f28611133e9707fc0c7911fa1 🔍
SHA1 fd9eb2070ef6db9e3bddb223ccc0dc0e2d7abcee 🔍
SHA256 c62bd0789619f2bbccbeaf3f0b61469574db90b49554eff0fef73bc754f2444a 🔍
SHA3 036bbdee6ce2e8baa1bc4d2bf6af2bdf17daa82587a09b32b7c6d6ee399b31e1 🔍

3

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.25937
MD5 80f034b4d194e28178b5d702d55196c2 🔍
SHA1 9fa89cd6b97c3f0ddecf51efc423d0613764f516 🔍
SHA256 8b12dd9475fd69778a836d78fe010dd7d4dddd3fd56d954294c7428572fcd2ad 🔍
SHA3 7c24beff4e3b7c36d4038ddd8dc262e00391aa3af11920b9a22de1f2fb541887 🔍

4

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x94a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.29126
MD5 f2fe65adb43c1454da4ad7c83340f2bf 🔍
SHA1 e82425fdb5bc42b960e8881bb8aa9db82840c834 🔍
SHA256 21b56c3d49533351692822c81248f4f5bfdf103bd87e86a83160a50a3ea6741c 🔍
SHA3 f852fe66eb6e62accfe30d4e89f6e6916244e259440faf27132f579f247de245 🔍

5

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.33679
MD5 afa04fe75544466deb7d59b69c654db7 🔍
SHA1 8755a7919b5d2b72c15f147d6e4907c4fd643877 🔍
SHA256 119ede0f2e8140cff05f6ebd12b6e573281c8c746feb06a92784bb25a6c34ceb 🔍
SHA3 3fed80b4f40884a161737b820c077f5c2e96b9eb9f7c41ad0588ee77deacfbf4 🔍

6

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.31758
MD5 ef0dda41d2e27abfabdfd0fded3e5f8c 🔍
SHA1 e4be0c1022203b4f1f2797bdcafd9abe6b8b656b 🔍
SHA256 874fa0b3c932db6d77a88d2808267c042b466d3f1b5f925352a304c4e288b2ab 🔍
SHA3 6a1046690f1c86c46659ac7592e9df7e9fd42e7201d73c3a52f1ff16a120e9b4 🔍

7

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.36471
MD5 fb233eed19455c1ae48b586e72e57062 🔍
SHA1 9abe0f86c5894f7bd80823d3ec8cda9ff2cca4ef 🔍
SHA256 69fb52804dd89507a4b27dedf2bf79ae442c5f3ade17362569e0c70f5ea16e1e 🔍
SHA3 9c93452f88c4f9a457ff4ac8990adc3645cb1ccb7db21246f5162b10220a0e1f 🔍

8

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x988
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.28382
MD5 177a9145fa7b98111cc389389c908404 🔍
SHA1 a21080493e0548bccbe1efa5c22fc239f3f91008 🔍
SHA256 17aee4f8aff84c3369f7c24cdcac9e74edbbe0a2d42b5c326b56e34d0817e79c 🔍
SHA3 5090aaa1429a974fea396c53bd77b66871f142d357fd77ad0f59a1283ed5a953 🔍

9

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.11727
MD5 0eae3d3fe0ec7086095082d084b25e2b 🔍
SHA1 297266c982e7003ee1dd6a3cc75e353a249614dc 🔍
SHA256 f4d5a3ec048f9f16b6bb79387a3148b719630b3d484a73e4958809521f863232 🔍
SHA3 ce29cf63ee399efa150f3ee848cf6f48fa05396cc62c61f67357eac41723d062 🔍

103

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x84
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.04448
Detected Filetype Icon file
MD5 f7731730720cfe035cf030b40d0e2eb6 🔍
SHA1 d046e23f2ee2b93ad96be8e1dc9120ecf3915091 🔍
SHA256 5c92a41adaf3265071482fd1a182ae8702c168636a7d9ff51798ee3a1dfc8500 🔍
SHA3 6f2d12e4c63c131a3f7f48293996e2be05da351536d013affe5d2265965ce657 🔍

1 (#2)

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x210
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.55946
MD5 a817f5c1ee4993dc4fb84fbfc5cbd0bb 🔍
SHA1 ffb6bbc9ea4d9108b994b5b4d71fc558827c88a6 🔍
SHA256 4a7fde3055000864489cc4abddfe9a8c5dfbd3b0129f76c59e1b5068b2c8459d 🔍
SHA3 86d49d4ea4b0e3900b5aa666f910c3aff9973b8e17aa1aac4a9b04dc06fd3953 🔍

1 (#3)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x6c1
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.37708
MD5 aab7e8aafe7b06ab3d003b54ab5e18ed 🔍
SHA1 dccf0408f43059df37b755f3241a8b4b35c728af 🔍
SHA256 fb88b19523afd8fed48eddfd10805a3a0a45997bbf8fac04d595ddf93c1a88a8 🔍
SHA3 a981b8e907b79cd9448766ace938dfd96560d11c29e6ba165912a8508bd52ca7 🔍

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 2022.3.62.28864
ProductVersion 2022.3.62.28864
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_UNKNOWN
Language English - United States
FileVersion (#2) 2022.3.62.7762112
LegalCopyright (c) 2005-2025 Unity Technologies. All rights reserved.
ProductVersion (#2) 2022.3.62f2 (7670c08855a9)
Resource LangID English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2025-Sep-26 11:16:27
Version 0.0
SizeofData 143
AddressOfRawData 0x15aec
PointerToRawData 0x148ec
Referenced File C:\build\output\unity\unity\artifacts\WindowsPlayer\Win64_VS2019_nondev_i_r\WindowsPlayer_player_Master_il2cpp_x64.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2025-Sep-26 11:16:27
Version 0.0
SizeofData 20
AddressOfRawData 0x15b7c
PointerToRawData 0x1497c

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2025-Sep-26 11:16:27
Version 0.0
SizeofData 768
AddressOfRawData 0x15b90
PointerToRawData 0x14990

TLS Callbacks

Load Configuration

Size 0x138
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x140018030

RICH Header

XOR Key 0xe5e06b0d
Unmarked objects 0
ASM objects (28900) 5
C++ objects (28900) 138
C objects (28900) 10
Imports (28900) 2
C++ objects (VS 2015/2017/2019 runtime 29118) 39
C objects (VS 2015/2017/2019 runtime 29118) 16
ASM objects (VS 2015/2017/2019 runtime 29118) 9
Imports (VS2019 Update 8 (16.8.0-1) compiler 29333) 3
Total imports 89
C++ objects (VS2019 Update 8 (16.8.0-1) compiler 29333) 3
Exports (VS2019 Update 8 (16.8.0-1) compiler 29333) 1
Resource objects (VS2019 Update 8 (16.8.0-1) compiler 29333) 1
Linker (VS2019 Update 8 (16.8.0-1) compiler 29333) 1

Errors

Leave a comment

No comments yet.