5927896c1bf4941db0c401be744d5af6f7e35cd915adf75984d8746989250fb0

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2026-Jan-29 04:23:39
Detected languages English - United States
Debug artifacts C:\build\output\unity\unity\artifacts\WindowsPlayer\Win_x64_VS2022_VB_nondev_m_r\WindowsPlayer_player_Master_mono_x64.pdb
FileVersion 6000.0.67.7905730
LegalCopyright (c) 2005-2026 Unity Technologies. All rights reserved.
ProductVersion 6000.0.67f1 (78a1c2bbeb6a)

Plugin Output

Info The PE contains common functions which appear in legitimate applications. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryExW
Suspicious The PE is possibly a dropper. Resources amount for 83.9824% of the executable.
Safe VirusTotal score: 0/71 (Scanned on 2026-08-15 13:14:09) All the AVs think this file is safe.

Hashes

MD5 381f31ff4f0de811b21fc9cf58fe1c21 🔍
SHA1 93e5d9969b092f459a3705276ad620ccdc46d477 🔍
SHA256 5927896c1bf4941db0c401be744d5af6f7e35cd915adf75984d8746989250fb0 🔍
SHA3 08171458b21b1e7824e32771f8e069903cced7b8a25987468e9fad1a3b47b378 🔍
SSDeep 12288:22NCDdJr3d4XYZTBIgy7tMekGZ1sxePa9V5fZfnUPkym:KjuYhSRkGeeP+1x 🔍
Imports Hash a136217cdd3247ff6a8766561064ca0b 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x110

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 7
TimeDateStamp 2026-Jan-29 04:23:39
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0xde00
SizeOfInitializedData 0x97200
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0000000000001264 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x140000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0xa9000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 2775a5a7c1fa856e6a29a4f5a5229c31 🔍
SHA1 3e9ae8fdb588fe4aae22d549f8569008c887c898 🔍
SHA256 195697288171c6371920514965e3625060b55abd960ee1903baa797ef5e0bbfb 🔍
SHA3 fb39403bbfb970d14fc395dd6c3593ca3d0aec333b14d9249010a0924d269e75 🔍
VirtualSize 0xdc70
VirtualAddress 0x1000
SizeOfRawData 0xde00
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.46162

.rdata

MD5 25a2a8e520c4d2cf8feba1c09a169314 🔍
SHA1 f28ea680ca1529937aaff79c68aa846fa05c06cf 🔍
SHA256 581bdd057912d0cadfd53c20a099c39797e829670e731717a7206cf9d696225a 🔍
SHA3 d690ba705cd3b84798ada203315614ec99b5078f533c694645cfc4fa2cd173d0 🔍
VirtualSize 0x977c
VirtualAddress 0xf000
SizeOfRawData 0x9800
PointerToRawData 0xe200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.7014

.data

MD5 d284f7b260ed119794375a6998c5083c 🔍
SHA1 0944c690e2b7841e681f55d2a731910f8019f2ef 🔍
SHA256 79ebad17e73900bd4dd43a932cc832e1d907346973e16ac0af549524fa4b88b3 🔍
SHA3 0c023444d7239a9582798618879cf6e165fcae6d6eec1051c77592814b4894ad 🔍
VirtualSize 0x1d78
VirtualAddress 0x19000
SizeOfRawData 0xc00
PointerToRawData 0x17a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 1.89847

.pdata

MD5 d67581e7561b613930fcc4c3ee52cdc5 🔍
SHA1 a43e835342a8235efb9f656bba5c170d21641a61 🔍
SHA256 4eaf2a70ebe02f5f76d3b133d8a74d7c7eee9267519fd6a6951de4bcb2ad617b 🔍
SHA3 0ccfeafaf338d1bcb9c719ffca72875595bea8d6aea16bd26baa2a4685e84170 🔍
VirtualSize 0xf24
VirtualAddress 0x1b000
SizeOfRawData 0x1000
PointerToRawData 0x18600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.67172

_RDATA

MD5 dd297010ea596c9b749ddc72fe421330 🔍
SHA1 3213e7a4b99366f1367f1b5dc97aa4853369a784 🔍
SHA256 420a70f17663b392f63eb448853ebc800a3f7cf9c6e0b78b7e421d671dd927fd 🔍
SHA3 f4660bd566f5561530bb0e40a752616d5a8180b7180fcf869790d48f9fb6e9bf 🔍
VirtualSize 0x1f4
VirtualAddress 0x1c000
SizeOfRawData 0x200
PointerToRawData 0x19600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 3.71477

.rsrc

MD5 c1248f5cd2a00d4137fdebe8903a6239 🔍
SHA1 d651c44b862373382ab99f670c890d751255558b 🔍
SHA256 c9555d9fb4ca2de93e305daa53e3eefbe93394d836248b8a96284d232b7db714 🔍
SHA3 b7a1b429ff8afdeb9ec790f5c4a70ed568104d1537f90286b08f9334283bf518 🔍
VirtualSize 0x8a018
VirtualAddress 0x1d000
SizeOfRawData 0x8a200
PointerToRawData 0x19800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 6.36459

.reloc

MD5 79918e2814a23b917e4a5494067a35d5 🔍
SHA1 eab8dd05e160cbff9fa1c348b6c35e7f161cf459 🔍
SHA256 cccb376562c958fee6ec06051a48d2c5c0232065e1000ce2d4b0775e46737238 🔍
SHA3 0fcd95a99b9b4e77c2e23089f450965a4028a243ef56d1928fdcfcebcc4b7120 🔍
VirtualSize 0x658
VirtualAddress 0xa8000
SizeOfRawData 0x800
PointerToRawData 0xa3a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 4.87002

Imports

UnityPlayer.dll UnityMain2
KERNEL32.dll HeapAlloc
WriteConsoleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
CloseHandle
RtlUnwindEx
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
GetStdHandle
WriteFile
GetModuleFileNameW
GetCurrentProcess
ExitProcess
TerminateProcess
GetModuleHandleExW
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW

Delayed Imports

AmdPowerXpressRequestHighPerformance

Ordinal 1
Address 0x19004

D3D12SDKPath

Ordinal 2
Address 0x19008

D3D12SDKVersion

Ordinal 3
Address 0xf320

NvOptimusEnablement

Ordinal 4
Address 0x19000

1

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.13651
MD5 32e99288273ac8732a3455e7cded5900 🔍
SHA1 ef59a400b6be0b9ba457faa5f26f81413ef642ac 🔍
SHA256 fdbbc91816c275ed93a7f1514c67d0bc917a3616c21e76aa92606dee3c38bc53 🔍
SHA3 a98aa2217b398cc8d5cd2b4145368ac04f7d14112c6658e592772825ad486b1a 🔍

2

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x988
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.08877
MD5 4abd62f760e4ca84308e0a77bb0c682b 🔍
SHA1 4d3ec3cca8a342cb8c8fd5509836d24d935ec720 🔍
SHA256 6e93049400f3ebbd4d10f2524ad85898da5261b1f46083412cc04ff19118b20b 🔍
SHA3 697a89123effc1e844a3f6b837f23cdd8f54c7470def322fb4ed2e8a30086d5b 🔍

3

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.93413
MD5 8c3bb7cc7a88a3da0fcc113a46e447f0 🔍
SHA1 84144b23cbd48de122b6105dbbae256c36b66858 🔍
SHA256 ba5d0bcffc02a5875c45d4569c0216dd908f52baca39270a941476b72f6b3a2d 🔍
SHA3 ac7d0dd70d98350c56dee1b10e43d7141752fbc8373badb6e73b30204d34da4e 🔍

4

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.27294
MD5 8fd25c158250477dc4c89b83f48b7b39 🔍
SHA1 938901dc42d9414f7d0bfef27b0b4dd5d125887b 🔍
SHA256 13aec4cef7134f6ba50999247e8b71a17bee6f98b33bd472aea64283f91651a3 🔍
SHA3 1ab475360481e7c1a03f673452943da48b9c9c6ae21fee98a86ce6a2e81b577a 🔍

5

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.29769
MD5 e7b2a9af61b13ec294c14e88819e8d28 🔍
SHA1 39c71a17e82865b0f002dd398607ae3313f31227 🔍
SHA256 4eee94ae8948d9587dc183431eb9d3d30462b854eebbb19105a602f38a8a9acd 🔍
SHA3 54a05f7b4eb5b20f498e4a04b9d1ce75ecf06a57e4d9b0a3baeac03f0ec8432d 🔍

6

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x94a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.34979
MD5 16801e437d8d1046d59245082464a903 🔍
SHA1 b0b561f74ff77f20de17d385efd42b68e5bb4944 🔍
SHA256 85232c94502a2b0a81e4e763dfc8439671594ec8713fb6ace07a4df29b21be71 🔍
SHA3 7d03593414c4bccd85125dd53db7a3e2e4607382d225e113d3bdcff3df128f91 🔍

7

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.35781
MD5 73b4608f1684b625d291779a8ccf58c1 🔍
SHA1 c340869e5538f5416110751f44db5b9c3ca6a61a 🔍
SHA256 7f2f6e37c0ca303d713bab7dfe2482b2a6f12142b0eddc73dfc0299ca2244c3b 🔍
SHA3 4a8331ea5aecf869d290bce57b374a94324dd164309923cdd67eb4e9b1da7eb9 🔍

8

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.3714
MD5 070ff23e763426332e1929736255aef3 🔍
SHA1 796338e2f115a8872c00881d1c4a8dc98d5571aa 🔍
SHA256 7f4b792a1891623369a7a08536301bc1fd827cff6fc5154669bb8e6f64166a5c 🔍
SHA3 0fd23069953dcb9c83daa9a0f87f0ecc10037649bad422ac2e515fb8e88043fa 🔍

9

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x42028
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.36841
MD5 f7cbc65631047dbcd2db02ffd0abd9cf 🔍
SHA1 71078f99a79166899ad3202e28e2e8d12303d9bf 🔍
SHA256 ae9c8f731411a027a4ba661bab36a505a8422f94f48628cbfc3b3426a9b564da 🔍
SHA3 44e8816adcd1eca8aaec27edf68b70cc32205cfcc411ce282713c4afc41d8621 🔍

103

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x84
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.04448
Detected Filetype Icon file
MD5 3bf2dac037ce87794e66ff7f054e913f 🔍
SHA1 52ca961fd37ad960905a681d1db5157508ef1602 🔍
SHA256 2a87b1f32c5d0435090c72c392b75394f706e5750eff64fd85d25e1c622ee581 🔍
SHA3 8454d3273522657b5926068082b2cb88f6dbf352e7e9568008c0e33c792f349b 🔍

1 (#2)

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x210
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.50804
MD5 116a1431b3f25dfe0ecec6336a0d290c 🔍
SHA1 0777ce49cb8597428975ec15cf5b09e25b063338 🔍
SHA256 0feab84d905f08873a5e846c8d6b66e6da98dc085cdb45339ecd715297ccb368 🔍
SHA3 b096b827747d9bc47bb75a39654583b5afa65836ecf622d4364611bbda475436 🔍

1 (#3)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x545
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.24993
MD5 9df530c2f4fbe460da74e130d5d351a9 🔍
SHA1 f8719b6c74e0179556c1a18f214d6c1bbff8f823 🔍
SHA256 3c357bd1125971bda05bc59eaeca279da41715741e2535e9e75c94273b1c3a1f 🔍
SHA3 ce3dd46f87bd462f8730fca18daea6df444422f8d88b810aefbd7b2e62536dee 🔍

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 6000.0.67.41410
ProductVersion 6000.0.67.41410
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_UNKNOWN
Language English - United States
FileVersion (#2) 6000.0.67.7905730
LegalCopyright (c) 2005-2026 Unity Technologies. All rights reserved.
ProductVersion (#2) 6000.0.67f1 (78a1c2bbeb6a)
Resource LangID English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2026-Jan-29 04:23:39
Version 0.0
SizeofData 146
AddressOfRawData 0x16d58
PointerToRawData 0x15f58
Referenced File C:\build\output\unity\unity\artifacts\WindowsPlayer\Win_x64_VS2022_VB_nondev_m_r\WindowsPlayer_player_Master_mono_x64.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2026-Jan-29 04:23:39
Version 0.0
SizeofData 20
AddressOfRawData 0x16dec
PointerToRawData 0x15fec

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2026-Jan-29 04:23:39
Version 0.0
SizeofData 852
AddressOfRawData 0x16e00
PointerToRawData 0x16000

TLS Callbacks

Load Configuration

Size 0x140
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x140019040

RICH Header

XOR Key 0x7139305b
Unmarked objects 0
ASM objects (28900) 5
C++ objects (28900) 138
C objects (28900) 10
Unmarked objects (#2) 1
Imports (28900) 2
C++ objects (33218) 40
C objects (33218) 16
ASM objects (33218) 17
Imports (33523) 3
Total imports 89
C++ objects (33523) 2
Exports (33523) 1
Resource objects (33523) 1
Linker (33523) 1

Errors

Leave a comment

No comments yet.