7066836004863328153c93ce617132237fd209ea4b2d05dc15d74663fe17be73

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2022-Sep-14 09:09:51
Detected languages English - United States
Debug artifacts C:\build\output\unity\unity\artifacts\WindowsPlayer\Win64_VS2019_nondev_i_r\WindowsPlayer_Master_il2cpp_x64.pdb
CompanyName Unity Technologies ApS
FileDescription Unity playback engine.
FileVersion 2020.3.40.12208340
InternalName UnityPlayer
LegalCopyright (c) 2022 Unity Technologies ApS. All rights reserved.
ProductName Unity
ProductVersion 2020.3.40f1 (ba48d4efcef1)

Plugin Output

Info The PE contains common functions which appear in legitimate applications. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryExW
Suspicious The PE is possibly a dropper. Resources amount for 86.3815% of the executable.
Safe VirusTotal score: 0/71 (Scanned on 2025-07-31 20:04:57) All the AVs think this file is safe.

Hashes

MD5 7086446b1e58585eaadca28b809d8100 🔍
SHA1 256308e1cf687699c5f1b20a649c907e91f8c8fd 🔍
SHA256 7066836004863328153c93ce617132237fd209ea4b2d05dc15d74663fe17be73 🔍
SHA3 345a96c3beff999ab76ea9788ef6d41a1aeb64e50cde6cd1194ad57d0ddfc3ba 🔍
SSDeep 12288:H4eC30hhologP1HRKXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXmtCCCqJXZhZa:YahG1dX 🔍
Imports Hash 5f74a5c747508e2822fdb9b687deaf42 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x108

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 7
TimeDateStamp 2022-Sep-14 09:09:51
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0xa200
SizeOfInitializedData 0x96800
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0000000000001260 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x140000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0xa5000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 dc34d9506ae9e3616b5265da7e35b1f6 🔍
SHA1 dce8f4d17ddc08b8460b046a362a27430cbe2e75 🔍
SHA256 e80b2c4dfacb7fab649683f679231937cf85d5498d6d4b5d3a3e61149f064124 🔍
SHA3 08b3146b697934b2f68c0ed66868b3c96973ed20c4a70245a96b304f456d0106 🔍
VirtualSize 0xa120
VirtualAddress 0x1000
SizeOfRawData 0xa200
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.39574

.rdata

MD5 56fdf07774644c9a69db1488f2ab284b 🔍
SHA1 ce49863ee9984a7b45d78017f56e54bf56f6c37d 🔍
SHA256 d5c31f8a7de8bfab38af72b27c3737e162180548c28f3dfaa99de726a337e6c2 🔍
SHA3 8243d89fa2e21f0d3a1f96e25fbbff0ad39ca0c573479ec68e0cda8e0f4fc9ff 🔍
VirtualSize 0x8c6e
VirtualAddress 0xc000
SizeOfRawData 0x8e00
PointerToRawData 0xa600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.65264

.data

MD5 a9e79420695e9bc679ca784c3876e94f 🔍
SHA1 85d68049c56be1369a584c2cef1f26bece917c8f 🔍
SHA256 a64f2a1dd771a4ddc2a8b9ebecec8d75683a19da0fcb7c92b1ca380ca540a055 🔍
SHA3 902fec18ac997b92fb99b25384f1c089fc9ae1ab1d849e846fff2b3a4d2bd9fa 🔍
VirtualSize 0x1cd8
VirtualAddress 0x15000
SizeOfRawData 0xc00
PointerToRawData 0x13400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 1.67624

.pdata

MD5 789f36f907239c1ceca2f8ec3f79fcb5 🔍
SHA1 11b2d5522be4b2558a7e492c53b4d86184702c90 🔍
SHA256 5e2c8dede33e201308d3fabb30b57b487ba34d524537e56449f854c9d6e560e4 🔍
SHA3 0b06f78c7fe1c1611e2e7abfd4a78a87cf82474f2ac5b4a8daa9c07fbbf85778 🔍
VirtualSize 0xc48
VirtualAddress 0x17000
SizeOfRawData 0xe00
PointerToRawData 0x14000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.36097

_RDATA

MD5 1960efd573f3d23522c840210d59fb7e 🔍
SHA1 47057bb39ae6c80b68d90c47f0cfd7d6bf123ad2 🔍
SHA256 ad5bd98e9035110e2e2e7b82ed2fe49ec0fae2d89e05400528a6b48804c441a4 🔍
SHA3 225389cba41c0a9e2c3319b0921ec1ef9962e8af175fca30c67bde60763834d4 🔍
VirtualSize 0x94
VirtualAddress 0x18000
SizeOfRawData 0x200
PointerToRawData 0x14e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 1.08512

.rsrc

MD5 06f74f11cd438f2e03954af6cd1cb1dc 🔍
SHA1 48ceb84a3dd2a0c65a6b85663663c6c34c5dcd9f 🔍
SHA256 05b537380c07b4037e58d711e2f7405ad8592a669b251759e4138bcc5016c62c 🔍
SHA3 a48629242586a120e1c735f1744f62e7f67f0f383653c5d86bb291d6be9fe793 🔍
VirtualSize 0x8a2a8
VirtualAddress 0x19000
SizeOfRawData 0x8a400
PointerToRawData 0x15000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.51745

.reloc

MD5 a9c3cf69888151777a2a472fa85313df 🔍
SHA1 a5410c074ce059a802887d8ef48a198d601aa9e3 🔍
SHA256 02d5b365a568a1cfd46be8549a8fee9793a57a8d69c3544d8232330a87a3d7ad 🔍
SHA3 874351b3eea840f9c0337e4533e9a1b535fab5c0ccdeba911f149a1902c60a44 🔍
VirtualSize 0x634
VirtualAddress 0xa4000
SizeOfRawData 0x800
PointerToRawData 0x9f400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 4.78467

Imports

UnityPlayer.dll UnityMain
KERNEL32.dll WriteConsoleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
CloseHandle
RtlUnwindEx
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
GetCurrentProcess
ExitProcess
TerminateProcess
GetModuleHandleExW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
LCMapStringW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
CreateFileW

Delayed Imports

AmdPowerXpressRequestHighPerformance

Ordinal 1
Address 0x15004

NvOptimusEnablement

Ordinal 2
Address 0x15000

1

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x42028
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.49909
MD5 489a04250ef380f46b9f0cd08b61508c 🔍
SHA1 0db48120b07a290d9cb617c618fb178701444cc3 🔍
SHA256 58efbde034001ce056b7fbfd4df998c310f45a0d7ef539478b85c4d02ac6d715 🔍
SHA3 e104fcdb6f509e3e06020fb83ef13ab3fb0adeaf5829f9381b9e5a1481c9ace8 🔍

2

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.49621
MD5 8fa1c30dce384c74035c36320a35fabc 🔍
SHA1 9d15829a392f83c73045ea09571fc9235837f3cb 🔍
SHA256 f2a9bde893a049a99eaff5901062f0c7fd72ddc31f6336c98156961b966fa769 🔍
SHA3 b2150656c454272de5abcb22007ff6573ef1663c574349f7e4c6d1ffc5dbb811 🔍

3

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.47679
MD5 160eb857456af077e70ebae4dd3eb464 🔍
SHA1 ff40b8cf3881d4b52f507e79906660fbb564d92d 🔍
SHA256 fdee8d3001ef43631bf0e98a208b0bd1ed23d1297e3707f25374f1493c42a05e 🔍
SHA3 9199dea8ede94f192c049f5dc70b395765db0b288093b9da38317ac57cfe43c4 🔍

4

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x94a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.50593
MD5 2b043a08930c71b5415eda06abaa0093 🔍
SHA1 1fac4589d869338abbadead96fb0f7f577ded191 🔍
SHA256 41aed1e0b57a7666c42a3b84542d738064f9ba84d3022251e01cd55a501b4e2f 🔍
SHA3 e2a81fd5a29d256200048d3c256dc5445465a48fb5fcbeb610008e6e26de3491 🔍

5

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.55974
MD5 d62672bc0e0f2ade71fc78a45da3ff1d 🔍
SHA1 5dbafad6331349d583e1a01d6ab3bab92962f801 🔍
SHA256 d435ee10d796cd4f714deba0276ae211555d6c29db2f2ee8842675f02d894438 🔍
SHA3 9bce243639f63aed459b3e380fc81e5d664aee05faae4bcfcbf295a828a9c5c6 🔍

6

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.56153
MD5 5ad01f7bce652b4d89faab806c7dcf78 🔍
SHA1 b8cb8e3ecdbf684a27bfd3168e400fd3d84346b0 🔍
SHA256 32f4e250ac493950345f86975d66c8956ab42df4eb2f3bc087ecb2741045ba4f 🔍
SHA3 663cacbd9d8a6a14775dfebd7ba92da387227a0361d8f614304c41aef2b2a530 🔍

7

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.61596
MD5 b22c8c38408259a637f00aaf71edf505 🔍
SHA1 84e44f066c6ba3df4af2a53afcff6dbb45a0c412 🔍
SHA256 885e09889fe2aeb889402785124b87b6d6955f0976933f19a319aca58807fe4c 🔍
SHA3 55c07ec8f652f97f962b2bfdc503c0acb5807b9d8ad46c33428122b93025b9dc 🔍

8

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x988
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.61698
MD5 c66d45dd3afd527d0d23a13425e88f92 🔍
SHA1 59c5e7ce44222a7f34162467a01cd7e25ce68940 🔍
SHA256 7feb2503d62a532d2082587bc188d0f8a913873c8241737e43e17046887e281c 🔍
SHA3 fefa811472f5f5e0e94647b0f85108acb2f58ea5c9d7776edb116fc229b476de 🔍

9

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.61921
MD5 4774779aa95aa1495aed8865c572711e 🔍
SHA1 e45224336175576d97eb1cc9cf3da2bd08af9116 🔍
SHA256 4e154626d4f18eb1756527ce21ad5b1ec9ec83d482c00ec0039a7261ba8f81e1 🔍
SHA3 afc3d8c8341d465a439186a6618ab65a5297ea825adf07dac42011980ab0aab2 🔍

103

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x84
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.04448
Detected Filetype Icon file
MD5 f7731730720cfe035cf030b40d0e2eb6 🔍
SHA1 d046e23f2ee2b93ad96be8e1dc9120ecf3915091 🔍
SHA256 5c92a41adaf3265071482fd1a182ae8702c168636a7d9ff51798ee3a1dfc8500 🔍
SHA3 6f2d12e4c63c131a3f7f48293996e2be05da351536d013affe5d2265965ce657 🔍

1 (#2)

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x31c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.5192
MD5 bd992ccd43a8800210bd048f7651ef68 🔍
SHA1 6b8b2b5ff8152cea0dbe563528046c50eadb38c0 🔍
SHA256 cc2b8b880c0d7a70d57dfc482aa2c6e86efbb79a31737e445edddc7aec87757c 🔍
SHA3 e4d2f0bbc0b5d7755bf4fd76563ce87ada202d55f139b6a23b4a147d551963aa 🔍

1 (#3)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x6c1
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.37708
MD5 aab7e8aafe7b06ab3d003b54ab5e18ed 🔍
SHA1 dccf0408f43059df37b755f3241a8b4b35c728af 🔍
SHA256 fb88b19523afd8fed48eddfd10805a3a0a45997bbf8fac04d595ddf93c1a88a8 🔍
SHA3 a981b8e907b79cd9448766ace938dfd96560d11c29e6ba165912a8508bd52ca7 🔍

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 2020.3.40.18644
ProductVersion 2020.3.40.18644
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_UNKNOWN
Language English - United States
CompanyName Unity Technologies ApS
FileDescription Unity playback engine.
FileVersion (#2) 2020.3.40.12208340
InternalName UnityPlayer
LegalCopyright (c) 2022 Unity Technologies ApS. All rights reserved.
ProductName Unity
ProductVersion (#2) 2020.3.40f1 (ba48d4efcef1)
Resource LangID English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2022-Sep-14 09:09:51
Version 0.0
SizeofData 136
AddressOfRawData 0x13730
PointerToRawData 0x11d30
Referenced File C:\build\output\unity\unity\artifacts\WindowsPlayer\Win64_VS2019_nondev_i_r\WindowsPlayer_Master_il2cpp_x64.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2022-Sep-14 09:09:51
Version 0.0
SizeofData 20
AddressOfRawData 0x137b8
PointerToRawData 0x11db8

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2022-Sep-14 09:09:51
Version 0.0
SizeofData 712
AddressOfRawData 0x137cc
PointerToRawData 0x11dcc

TLS Callbacks

Load Configuration

Size 0x130
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x140015030

RICH Header

XOR Key 0x69197163
Unmarked objects 0
C objects (VS2017 v14.15 compiler 26715) 10
ASM objects (VS2017 v14.15 compiler 26715) 5
C++ objects (VS2017 v14.15 compiler 26715) 136
Imports (VS2017 v14.15 compiler 26715) 2
C++ objects (VS 2015/2017/2019 runtime 28427) 37
C objects (VS 2015/2017/2019 runtime 28427) 16
ASM objects (VS 2015/2017/2019 runtime 28427) 8
Imports (VS2019 Update 5 (16.5.4-5) compiler 28614) 3
Total imports 85
C++ objects (VS2019 Update 5 (16.5.4-5) compiler 28614) 2
Exports (VS2019 Update 5 (16.5.4-5) compiler 28614) 1
Resource objects (VS2019 Update 5 (16.5.4-5) compiler 28614) 1
Linker (VS2019 Update 5 (16.5.4-5) compiler 28614) 1

Errors

Leave a comment

No comments yet.