64d7ca42f9314c623acc89cda1637fc16ef2e9360262385e1dd456c0884744ba

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2025-Oct-24 11:11:06
Detected languages English - United States
Debug artifacts C:\build\output\unity\unity\artifacts\WindowsPlayer\Win64_VS2019_nondev_i_r\WindowsPlayer_player_Master_il2cpp_x64.pdb
FileVersion 2022.3.62.9860879
LegalCopyright (c) 2005-2025 Unity Technologies. All rights reserved.
ProductVersion 2022.3.62f3 (96770f904ca7)

Plugin Output

Info The PE contains common functions which appear in legitimate applications. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryExW
Suspicious The PE is possibly a dropper. Resources amount for 84.749% of the executable.
Safe VirusTotal score: 0/69 (Scanned on 2026-07-27 03:10:54) All the AVs think this file is safe.

Hashes

MD5 88c0b71f8a9f57e0781b31f831a1acc8 🔍
SHA1 7d518a17496d0ab16b1a20b42e48d60ab070ba98 🔍
SHA256 64d7ca42f9314c623acc89cda1637fc16ef2e9360262385e1dd456c0884744ba 🔍
SHA3 cb14eb10a3dcf392699193ed8f8b53916c45c75ba1581f48d9709c330b7deebf 🔍
SSDeep 6144:5/7Fu9mpcJ/OD8st7X6IrsmpeEB0ANtWD+9MUZu:5/7g4aOD8QKIrLp8AyCvZu 🔍
Imports Hash a136217cdd3247ff6a8766561064ca0b 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x110

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 7
TimeDateStamp 2025-Oct-24 11:11:06
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0xca00
SizeOfInitializedData 0x97000
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0000000000001264 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x140000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0xa8000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 e1ace82cc0f3d159779f5c95aa7e575b 🔍
SHA1 e4a5358996f267c921e5d996de44f3525bb042ed 🔍
SHA256 bec109031034001337c9be3c07e16f6fab9c862313fc1f8fb0699672e09c63a4 🔍
SHA3 449bef44a9ee4a68767a70da31c7ceb6aa3d1da49237a84227bbfb02c7e428a2 🔍
VirtualSize 0xc8b0
VirtualAddress 0x1000
SizeOfRawData 0xca00
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.41019

.rdata

MD5 d70b2ddbfeb95da00930b91e68599514 🔍
SHA1 350472061d5a6c8d322298399cd5b20dfaea8eda 🔍
SHA256 6340660908af8cc3cde7478ee400cc2b9f37ed1a360ea8f0e5e20a4d68bede54 🔍
SHA3 80874b5ffc06e7dd7643664c5db56a570fd0b6f471885989e1f90ba81f0fedf2 🔍
VirtualSize 0x948c
VirtualAddress 0xe000
SizeOfRawData 0x9600
PointerToRawData 0xce00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.65465

.data

MD5 90815aa5dc65a7dd3f93bad1bd78a77e 🔍
SHA1 608f3e69047b216dda6b0df73c30912e2fef5544 🔍
SHA256 435cb9af1df25f501f68a9700182c4d25de99c3f8e8c1ba6b16c0ca98911ff87 🔍
SHA3 e5ea90d4dd767bfa3d88e3fa2e107c2e40cac10f43498d5abd74f15888477d18 🔍
VirtualSize 0x1d38
VirtualAddress 0x18000
SizeOfRawData 0xc00
PointerToRawData 0x16400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 1.87032

.pdata

MD5 6e619149c26d436c6f07193ff1e8032b 🔍
SHA1 70aea7c26eff6d7619bd6a5a97ab259d68dd24f5 🔍
SHA256 48cb5fb202e79c0b8da5091cb440a9068502b37c8e4200eb78df617ae99fd024 🔍
SHA3 196183a21caf69a7292ff77b288d707ce7d63e2b887053ae1bc258b99d1e36f0 🔍
VirtualSize 0xef4
VirtualAddress 0x1a000
SizeOfRawData 0x1000
PointerToRawData 0x17000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.62125

_RDATA

MD5 f87f407c2a1cab208757ad1d23a2de6f 🔍
SHA1 cd739c36958f9ba7505883ae868f1a6ca71e880f 🔍
SHA256 6e4ba525d12ef66132e0738191d3a928ba74c0091a6f82bc48f892a41e2fc242 🔍
SHA3 0611ad194d9c623281cb358dbc2f2d28bb01b6eab682677ec8d16136d74414ab 🔍
VirtualSize 0x94
VirtualAddress 0x1b000
SizeOfRawData 0x200
PointerToRawData 0x18000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 1.11888

.rsrc

MD5 db8ed97cb1f1779126775a7f24b9ea04 🔍
SHA1 bf929257480f71ca8458e970ac9d0ded46c07240 🔍
SHA256 adde4076cdbee4adbaa8c6974e8fb30e441ad981b4c03ab792daca5ac6706a32 🔍
SHA3 8d32415a05c532fbc2c0352e3eee5a3409d804f4b75d2fde6ed07b38fabdd4a2 🔍
VirtualSize 0x8a198
VirtualAddress 0x1c000
SizeOfRawData 0x8a200
PointerToRawData 0x18200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 3.5332

.reloc

MD5 ef1e558d46106d87320dd822be1ddc48 🔍
SHA1 10f7b05d107451bd01cf446da512c619fc35bf50 🔍
SHA256 34d7b771018e478ba05cd24ec377fd34919d65ec63c43f49e1ab319785368929 🔍
SHA3 cc295f58e62efe5c59cad1febf1ce620404450135f442c20ba55235b492ddac9 🔍
VirtualSize 0x654
VirtualAddress 0xa7000
SizeOfRawData 0x800
PointerToRawData 0xa2400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 4.84209

Imports

UnityPlayer.dll UnityMain2
KERNEL32.dll HeapAlloc
WriteConsoleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
CloseHandle
RtlUnwindEx
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
GetStdHandle
WriteFile
GetModuleFileNameW
GetCurrentProcess
ExitProcess
TerminateProcess
GetModuleHandleExW
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW

Delayed Imports

AmdPowerXpressRequestHighPerformance

Ordinal 1
Address 0x18004

NvOptimusEnablement

Ordinal 2
Address 0x18000

1

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x42028
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.24215
MD5 c3600986ca82ddc8f648d6feee9339df 🔍
SHA1 715eb9727d450df2d97c06203f12bcacaa3e2c08 🔍
SHA256 b69dfd7cd1ca6afae488efb06b2181d33e26a588400070b916dac09405e79ddf 🔍
SHA3 1f775ac1348645e53d6f82aa344f54d05b107c562500116fe849f6cc052167bb 🔍

2

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.41478
MD5 42803b34ba86052b6a9d9435f3a5093b 🔍
SHA1 c056fc8ef514b74f14afb007edd79404b343a4d1 🔍
SHA256 589aa29a0085c26862fb4e8f48e8814d5be5904ea136c5b9e213d1c2130bf007 🔍
SHA3 09e33535641a1396ce29f6f1b28b64a5a5a9f2463b2fa3866853b4131ddfc600 🔍

3

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.73372
MD5 c43a570c65a0639592bd79a617fd79e4 🔍
SHA1 01e75811c8b5c46fc6f63d967c33bab9a799dc0c 🔍
SHA256 4e1c9282a07d325469ee3b66042959c2edddac8a3bc78089fd714e4fca7ad295 🔍
SHA3 25ce37cce27aeb0611a72f2d6b09f40ada10278266b3f561182a517d183a35de 🔍

4

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x94a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.01731
MD5 8cc309ad5b7012ef6039d37e82dce409 🔍
SHA1 b3a4e5252e8efd83fecc21639d43709a01f2e084 🔍
SHA256 fbedc927ba9d20f49876a349c8f458f1972ea3640d21795d0f46fe37477072a2 🔍
SHA3 40daa7a1c9d53b5a189061627af68b0fbc057617c4922181bf39594fcb2f99bf 🔍

5

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.34952
MD5 1a684b968aa2896326cb4dd30a20516f 🔍
SHA1 43b1fac5e381beb7da2a015b6571ef3b5caaa519 🔍
SHA256 5df2c8e02307cb804b2b9565b8dafaf8b22fa7893bc361def02073b0d043f1c9 🔍
SHA3 bce495f8c808d8e9767da6e6b5a3ab4f0bf55906a16c18ec6af1ed1bcfe7c904 🔍

6

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.715
MD5 b5396201a969eb18246d48be1dcdafdb 🔍
SHA1 4c69c55efa0a11b3c5849275713d5aee9ae8eac3 🔍
SHA256 bee54506e713b572eac2a1aa7c8fe76a0d70fd728dc2fe674bc6e150d3996443 🔍
SHA3 43de8bd45ca06fa80e44e2b58a4342723832e4fa88cc0cf1098c3260835d7a4f 🔍

7

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.16924
MD5 4f6795c3db2d7c28b374d54bf62d0246 🔍
SHA1 b5f490a4d7933f29ce2b087f88db1174ee3ba722 🔍
SHA256 3f2d7423541f62203c3382e9ad016510ef8a3c954be6cc4d5cfc10cf0a4c5ee4 🔍
SHA3 47f6b7afaa17966cc3d6af1245ea26b22c75e3a001e577eb9e3775240ec71335 🔍

8

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x988
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.43111
MD5 16587607c104ad9168b133abeb67490b 🔍
SHA1 f106c8cec6fda5b1473dc632a411f20ec542fb18 🔍
SHA256 2e222a40b48606f56c5d9a24dda9d9eb860fbf13f40d624d9d8a77c2eaeedcde 🔍
SHA3 d30d32dd1389049220aa3b5280e25832cd05a52ddae0a43f4b1b442fc051f0a9 🔍

9

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.6526
MD5 d2bf88498c17328013e8d78c61a3cd52 🔍
SHA1 c20a67030210a7b10d718e7bcb0e3c472b836a8e 🔍
SHA256 c512480302a8a38b2973a6922a7a5eec790b4f27cc91cc40cf4584d8ac0d1fff 🔍
SHA3 c0ecadd5b5b455385dfbf0f703ae53084635a8cd5f8a65bd22d33d82897e4982 🔍

103

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x84
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.04448
Detected Filetype Icon file
MD5 f7731730720cfe035cf030b40d0e2eb6 🔍
SHA1 d046e23f2ee2b93ad96be8e1dc9120ecf3915091 🔍
SHA256 5c92a41adaf3265071482fd1a182ae8702c168636a7d9ff51798ee3a1dfc8500 🔍
SHA3 6f2d12e4c63c131a3f7f48293996e2be05da351536d013affe5d2265965ce657 🔍

1 (#2)

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x210
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.5636
MD5 b1896eb56c83e3d5bda752f7877f6007 🔍
SHA1 97f0feebce60693f5e9fedc0b6315e05d622c812 🔍
SHA256 d47790db30a8476cc148d07cdf009ad8cd39e133770a6ef588406deb63b5abb0 🔍
SHA3 8b4890a75f1d58cb0c54ebf85722125e36d0219bb82586dba8fe638d54362119 🔍

1 (#3)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x6c1
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.37708
MD5 aab7e8aafe7b06ab3d003b54ab5e18ed 🔍
SHA1 dccf0408f43059df37b755f3241a8b4b35c728af 🔍
SHA256 fb88b19523afd8fed48eddfd10805a3a0a45997bbf8fac04d595ddf93c1a88a8 🔍
SHA3 a981b8e907b79cd9448766ace938dfd96560d11c29e6ba165912a8508bd52ca7 🔍

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 2022.3.62.30479
ProductVersion 2022.3.62.30479
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_UNKNOWN
Language English - United States
FileVersion (#2) 2022.3.62.9860879
LegalCopyright (c) 2005-2025 Unity Technologies. All rights reserved.
ProductVersion (#2) 2022.3.62f3 (96770f904ca7)
Resource LangID English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2025-Oct-24 11:11:06
Version 0.0
SizeofData 143
AddressOfRawData 0x15aec
PointerToRawData 0x148ec
Referenced File C:\build\output\unity\unity\artifacts\WindowsPlayer\Win64_VS2019_nondev_i_r\WindowsPlayer_player_Master_il2cpp_x64.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2025-Oct-24 11:11:06
Version 0.0
SizeofData 20
AddressOfRawData 0x15b7c
PointerToRawData 0x1497c

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2025-Oct-24 11:11:06
Version 0.0
SizeofData 768
AddressOfRawData 0x15b90
PointerToRawData 0x14990

TLS Callbacks

Load Configuration

Size 0x138
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x140018030

RICH Header

XOR Key 0xe5e06b0d
Unmarked objects 0
ASM objects (28900) 5
C++ objects (28900) 138
C objects (28900) 10
Imports (28900) 2
C++ objects (VS 2015/2017/2019 runtime 29118) 39
C objects (VS 2015/2017/2019 runtime 29118) 16
ASM objects (VS 2015/2017/2019 runtime 29118) 9
Imports (VS2019 Update 8 (16.8.0-1) compiler 29333) 3
Total imports 89
C++ objects (VS2019 Update 8 (16.8.0-1) compiler 29333) 3
Exports (VS2019 Update 8 (16.8.0-1) compiler 29333) 1
Resource objects (VS2019 Update 8 (16.8.0-1) compiler 29333) 1
Linker (VS2019 Update 8 (16.8.0-1) compiler 29333) 1

Errors

Leave a comment

No comments yet.