3ecc2eea5ce2acfcaa6868ab7d8252b9a07910ea440405e62817890f4ef6bd50

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2026-May-06 06:23:16
Detected languages English - United States
Debug artifacts C:\build\output\unity\unity\artifacts\WindowsPlayer\Win_x64_VS2022_VB_nondev_m_r\WindowsPlayer_player_Master_mono_x64.pdb
FileVersion 6000.0.75.2503836
LegalCopyright (c) 2005-2026 Unity Technologies. All rights reserved.
ProductVersion 6000.0.75f1 (26349cd2a5c8)

Plugin Output

Info The PE contains common functions which appear in legitimate applications. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryExW
Suspicious The PE is possibly a dropper. Resources amount for 83.9824% of the executable.
Safe VirusTotal score: 0/71 (Scanned on 2026-09-10 00:30:48) All the AVs think this file is safe.

Hashes

MD5 104b161ff3c1d28fe97523704eeaf3fd 🔍
SHA1 dd2c565956ef07cdd04e99811fe03a83a9d428a7 🔍
SHA256 3ecc2eea5ce2acfcaa6868ab7d8252b9a07910ea440405e62817890f4ef6bd50 🔍
SHA3 4fb58ab5810f6e9ab2d5a5e67b123d85bedb8d01d79a7cd1e92a3d8416fb1442 🔍
SSDeep 6144:T2E4CD20ZB4Gr34QiH+XXHSZuD3wQnJfnrLcyTL1fT2Nk/Bo+RcDXeRrwvY8KgR:T2NCDdJr3d4cHwy3dfnrhtXnRKeR+N 🔍
Imports Hash a136217cdd3247ff6a8766561064ca0b 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x110

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 7
TimeDateStamp 2026-May-06 06:23:16
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0xde00
SizeOfInitializedData 0x97200
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0000000000001264 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x140000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0xa9000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 2775a5a7c1fa856e6a29a4f5a5229c31 🔍
SHA1 3e9ae8fdb588fe4aae22d549f8569008c887c898 🔍
SHA256 195697288171c6371920514965e3625060b55abd960ee1903baa797ef5e0bbfb 🔍
SHA3 fb39403bbfb970d14fc395dd6c3593ca3d0aec333b14d9249010a0924d269e75 🔍
VirtualSize 0xdc70
VirtualAddress 0x1000
SizeOfRawData 0xde00
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.46162

.rdata

MD5 ff33dc5bae1e0e175765e35b7048c864 🔍
SHA1 2e06acf456f72f90875f9e0d285a17f7dd18d7a9 🔍
SHA256 bf5445821600a1a62e30cd125c00d275a9c427f4999cc8be3157f4050b7cb375 🔍
SHA3 083580c5eb52195100756c134ca20c0faba8b20774b95f4cb0cadf43a8a07ad7 🔍
VirtualSize 0x977c
VirtualAddress 0xf000
SizeOfRawData 0x9800
PointerToRawData 0xe200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.70164

.data

MD5 d284f7b260ed119794375a6998c5083c 🔍
SHA1 0944c690e2b7841e681f55d2a731910f8019f2ef 🔍
SHA256 79ebad17e73900bd4dd43a932cc832e1d907346973e16ac0af549524fa4b88b3 🔍
SHA3 0c023444d7239a9582798618879cf6e165fcae6d6eec1051c77592814b4894ad 🔍
VirtualSize 0x1d78
VirtualAddress 0x19000
SizeOfRawData 0xc00
PointerToRawData 0x17a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 1.89847

.pdata

MD5 d67581e7561b613930fcc4c3ee52cdc5 🔍
SHA1 a43e835342a8235efb9f656bba5c170d21641a61 🔍
SHA256 4eaf2a70ebe02f5f76d3b133d8a74d7c7eee9267519fd6a6951de4bcb2ad617b 🔍
SHA3 0ccfeafaf338d1bcb9c719ffca72875595bea8d6aea16bd26baa2a4685e84170 🔍
VirtualSize 0xf24
VirtualAddress 0x1b000
SizeOfRawData 0x1000
PointerToRawData 0x18600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.67172

_RDATA

MD5 dd297010ea596c9b749ddc72fe421330 🔍
SHA1 3213e7a4b99366f1367f1b5dc97aa4853369a784 🔍
SHA256 420a70f17663b392f63eb448853ebc800a3f7cf9c6e0b78b7e421d671dd927fd 🔍
SHA3 f4660bd566f5561530bb0e40a752616d5a8180b7180fcf869790d48f9fb6e9bf 🔍
VirtualSize 0x1f4
VirtualAddress 0x1c000
SizeOfRawData 0x200
PointerToRawData 0x19600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 3.71477

.rsrc

MD5 138e9959ed30f16d047a5bcdd36864b5 🔍
SHA1 af194868ffecf7645a4899b170e06bcb07e0a844 🔍
SHA256 56130f38416333053dd8c0888764ba5a640df0fd31ac4185879ea3916ef73996 🔍
SHA3 1de0ee9f0483a5fc706c7e118de1576362cbe3bb7b1236591db969d85267d65e 🔍
VirtualSize 0x8a018
VirtualAddress 0x1d000
SizeOfRawData 0x8a200
PointerToRawData 0x19800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 6.12849

.reloc

MD5 79918e2814a23b917e4a5494067a35d5 🔍
SHA1 eab8dd05e160cbff9fa1c348b6c35e7f161cf459 🔍
SHA256 cccb376562c958fee6ec06051a48d2c5c0232065e1000ce2d4b0775e46737238 🔍
SHA3 0fcd95a99b9b4e77c2e23089f450965a4028a243ef56d1928fdcfcebcc4b7120 🔍
VirtualSize 0x658
VirtualAddress 0xa8000
SizeOfRawData 0x800
PointerToRawData 0xa3a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 4.87002

Imports

UnityPlayer.dll UnityMain2
KERNEL32.dll HeapAlloc
WriteConsoleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
CloseHandle
RtlUnwindEx
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
GetStdHandle
WriteFile
GetModuleFileNameW
GetCurrentProcess
ExitProcess
TerminateProcess
GetModuleHandleExW
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW

Delayed Imports

AmdPowerXpressRequestHighPerformance

Ordinal 1
Address 0x19004

D3D12SDKPath

Ordinal 2
Address 0x19008

D3D12SDKVersion

Ordinal 3
Address 0xf320

NvOptimusEnablement

Ordinal 4
Address 0x19000

1

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.22298
MD5 88b094ba4332d119f9f658dd769259d9 🔍
SHA1 64da6bb044d8b4a2a0dfb9ba9a8737090d0ecf98 🔍
SHA256 8fc336c87f20a4b1066b4e22a4cf4eb0f08ad5fb40840d234b6f888238ddd680 🔍
SHA3 a7f262b0cae73e0da8ff3c3cbee7210c82edf371e8065a9bda141546097a72bd 🔍

2

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x988
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.25166
MD5 2a2b694e4f896f0a51c3f258735eb219 🔍
SHA1 d895c115d90f38b795033d16fc9f391a711c4716 🔍
SHA256 dca02a46f61479e04c476969170a9deba17cd254c6da1c0db7ce0d0544bb8053 🔍
SHA3 dbd83f122a14273ad1162d451356128195f7f1e2fea5303b9133cc7bbe073c9a 🔍

3

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.28708
MD5 9f2d14aaa6a2367f4c47701df79d8ef2 🔍
SHA1 499c816b6614ef2c3745db25f31c6f3dfabe60a9 🔍
SHA256 c6b627c18fd06ce89b1aa845a236a7e8e7f8a25bcdd3a591ad9034ad08728819 🔍
SHA3 0b2efcbb2a5a531e595cb919fb90342b786d59c62a3231144bb865ed5b4c51e6 🔍

4

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.23113
MD5 590df370998f5ef42c0556fd68a1ffa7 🔍
SHA1 349177c0defe2396238e395c29cd5639f5928d6b 🔍
SHA256 a623be6ec7772f91319ce2cf8776ce587f1b566125cd70726a71845877687f62 🔍
SHA3 c5c19aa164a1f549defbdf00e69d329f8db6a3fde6961291abf173e61a107d2a 🔍

5

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.2283
MD5 6fe2d592b6a1c0563d194cdbd75c6317 🔍
SHA1 c956234865592301bf8ced1dc37bc27d08bc0051 🔍
SHA256 6858d3b8aa5698ccce018c747610dfd266c9cb30e26e11ee6ca0da5330c7a09c 🔍
SHA3 b716f392729bf345699c47feeac213ad7332ceeefbce6dab49c63b885238a37f 🔍

6

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x94a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.19005
MD5 52c9fbef30d2ebe268f28b856785b19a 🔍
SHA1 899ce398c958ed9dd55ef58a07fcc72d1478349d 🔍
SHA256 adb1e8247878f9e6e52a3f4171ae72b966cd2e677ed8a045be56e5e27e94aa37 🔍
SHA3 2e48e7e3a18ec172e70a0dfe450725fbfe03c4a92539c799589a6358d99b6cf6 🔍

7

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.15938
MD5 919e4502224b3edff7e414ef555f30e1 🔍
SHA1 bc1e83b305e7be5c5a2547a5afcb9b0c252b824b 🔍
SHA256 071ed6c98be2903f0f2bd27107c2b380a21d1cbb32aa327d2a9ab7a3fc387c64 🔍
SHA3 f57ed5ec8ef4c857cb4047e32d51272a9e45e26a82b9985ab2c311013d099200 🔍

8

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.1175
MD5 20a03d344c4d5aeb788c052da4d8c14b 🔍
SHA1 1dfa85534cccb0a817bf9593493f93621b355939 🔍
SHA256 71a285e44574d28900ba370e39b980ff85667247f43b609a2676531d3a93b11a 🔍
SHA3 4a07d75388016172138ea712c8ee92b02d21b3250cda08ece600895585cf7daa 🔍

9

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x42028
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.08126
MD5 bdb8698ad9857ae3cc8f4d951affa683 🔍
SHA1 165231e56c5ce07f58c22a865eb21fcd6814ce18 🔍
SHA256 bf2df19c02f275c8cdf2dee43b99cfa69acd2067fa75a56c321904b246c41d6c 🔍
SHA3 e50035853492b5a2cf7151cd4c1be5b90c269183db2fb0459b3607820f9673be 🔍

103

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x84
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.04448
Detected Filetype Icon file
MD5 3bf2dac037ce87794e66ff7f054e913f 🔍
SHA1 52ca961fd37ad960905a681d1db5157508ef1602 🔍
SHA256 2a87b1f32c5d0435090c72c392b75394f706e5750eff64fd85d25e1c622ee581 🔍
SHA3 8454d3273522657b5926068082b2cb88f6dbf352e7e9568008c0e33c792f349b 🔍

1 (#2)

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x210
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.51328
MD5 97316ddbfc853323bafd936b20e9374f 🔍
SHA1 14dff266f15878edd515a530bafd2cd522ea9218 🔍
SHA256 7758289d2a93d83f65c15a79ab2ac2b451198e132adbbe56e6104dc4f38a85dd 🔍
SHA3 29c0db6a9ed359734f4532d1fbe2d35f7c667211601dc0cab52ac2a10df1bcb6 🔍

1 (#3)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x545
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.24993
MD5 9df530c2f4fbe460da74e130d5d351a9 🔍
SHA1 f8719b6c74e0179556c1a18f214d6c1bbff8f823 🔍
SHA256 3c357bd1125971bda05bc59eaeca279da41715741e2535e9e75c94273b1c3a1f 🔍
SHA3 ce3dd46f87bd462f8730fca18daea6df444422f8d88b810aefbd7b2e62536dee 🔍

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 6000.0.75.13468
ProductVersion 6000.0.75.13468
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_UNKNOWN
Language English - United States
FileVersion (#2) 6000.0.75.2503836
LegalCopyright (c) 2005-2026 Unity Technologies. All rights reserved.
ProductVersion (#2) 6000.0.75f1 (26349cd2a5c8)
Resource LangID English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2026-May-06 06:23:16
Version 0.0
SizeofData 146
AddressOfRawData 0x16d58
PointerToRawData 0x15f58
Referenced File C:\build\output\unity\unity\artifacts\WindowsPlayer\Win_x64_VS2022_VB_nondev_m_r\WindowsPlayer_player_Master_mono_x64.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2026-May-06 06:23:16
Version 0.0
SizeofData 20
AddressOfRawData 0x16dec
PointerToRawData 0x15fec

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2026-May-06 06:23:16
Version 0.0
SizeofData 852
AddressOfRawData 0x16e00
PointerToRawData 0x16000

TLS Callbacks

Load Configuration

Size 0x140
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x140019040

RICH Header

XOR Key 0x7139305b
Unmarked objects 0
ASM objects (28900) 5
C++ objects (28900) 138
C objects (28900) 10
Unmarked objects (#2) 1
Imports (28900) 2
C++ objects (33218) 40
C objects (33218) 16
ASM objects (33218) 17
Imports (33523) 3
Total imports 89
C++ objects (33523) 2
Exports (33523) 1
Resource objects (33523) 1
Linker (33523) 1

Errors

Leave a comment

No comments yet.