8cddf967592928275bbce48b0af801a2eb8709547c7b2a36c459bc7671d8d1c6

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2025-Sep-26 11:01:45
Detected languages English - United States
Debug artifacts C:\build\output\unity\unity\artifacts\WindowsPlayer\Win64_VS2019_nondev_m_r\WindowsPlayer_player_Master_mono_x64.pdb
FileVersion 2021.3.45.8976527
LegalCopyright (c) 2005-2025 Unity Technologies. All rights reserved.
ProductVersion 2021.3.45f2 (88f88f591b2e)

Plugin Output

Info Cryptographic algorithms detected in the binary: Uses constants related to TEA
Suspicious The PE is possibly packed. Unusual section name found: .bind
Info The PE contains common functions which appear in legitimate applications. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryExW
Suspicious No VirusTotal score. This file has never been scanned on VirusTotal.

Hashes

MD5 980cf678b5191c7d29ccc8b09227a939
SHA1 b6dbf67133942eec5906a3a021ab41af0e9827ab
SHA256 8cddf967592928275bbce48b0af801a2eb8709547c7b2a36c459bc7671d8d1c6
SHA3 f9f380ee93aac28e34bd94df816fab247cc0bc119dc3a3e1455e157ef1d95aa5
SSDeep 6144:mcjdyMPp1NK6dNS30koJzKiQ4Iw6II17TU6z+4S3vSi4vdgv4KJPLONhAkEuhTet:hjPp1N7SSpiIQ/rz+TS9vdgv4cTWVhcJ
Imports Hash 5f74a5c747508e2822fdb9b687deaf42

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x118

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 8
TimeDateStamp 2025-Sep-26 11:01:45
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0xa200
SizeOfInitializedData 0x96600
SizeOfUninitializedData 0
AddressOfEntryPoint 0x00000000000A5310 (Section: .bind)
BaseOfCode 0x1000
ImageBase 0x140000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0xdf000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 e98f72e89d5f88888faa75cfc8b24c27
SHA1 5c9ebe002c3a2008b5373cadb5c133ceac03375d
SHA256 d02868aa327c71d3677f95d85fcbb2f56882673a17a7f2de96f4d2e9d2327bb8
SHA3 5b1ee682ee85b0885dfa9fc40c902dd5ec7935db6141010809b4ffe6add9120d
VirtualSize 0xa140
VirtualAddress 0x1000
SizeOfRawData 0xa200
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 7.99599

.rdata

MD5 7fba40d975ae12bda5dc96ae82ffca81
SHA1 322983f06fc1e839bef4f7d964b7188d7cc0c544
SHA256 4579d8a7241edc990e9415149ccceb7eb09e89cf3a54b366474d5c46bf20ba50
SHA3 1ab7204ef6e8e53560beea24bb1b7e0076914671e28cd55aad9f55e5292cfdd5
VirtualSize 0x8cce
VirtualAddress 0xc000
SizeOfRawData 0x8e00
PointerToRawData 0xa600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.65313

.data

MD5 2e9924c581c86e57e2e2b0ac87e1aa45
SHA1 a1a176fc5c54e8c996a328e810c15c16cdb5b73d
SHA256 90b0d83be28bc06320f7b2ce10f056ecd17badc2e84e2b1533c0454096a1e5a0
SHA3 8c3bb6dfd1204e833639461f26a41ad45e7fa68dcdc97aa4908992d272dc2237
VirtualSize 0x1ce8
VirtualAddress 0x15000
SizeOfRawData 0xc00
PointerToRawData 0x13400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 1.6801

.pdata

MD5 2717431295e555cdae3fb602e2bd957e
SHA1 408d09336a1192e50edb78d3e7795fbc547ac381
SHA256 d927fd3b2aebd7b714861d2fede4d4929f356363e518385fd3c95e3262524631
SHA3 bbf9f4f071095b27e2349d9a28e1c01b5066c00143b8c5f7a393d2267f8178a5
VirtualSize 0xc54
VirtualAddress 0x17000
SizeOfRawData 0xe00
PointerToRawData 0x14000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.34687

_RDATA

MD5 1960efd573f3d23522c840210d59fb7e
SHA1 47057bb39ae6c80b68d90c47f0cfd7d6bf123ad2
SHA256 ad5bd98e9035110e2e2e7b82ed2fe49ec0fae2d89e05400528a6b48804c441a4
SHA3 225389cba41c0a9e2c3319b0921ec1ef9962e8af175fca30c67bde60763834d4
VirtualSize 0x94
VirtualAddress 0x18000
SizeOfRawData 0x200
PointerToRawData 0x14e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 1.08512

.rsrc

MD5 10f6d74ade4f7acdea5ec29dfc40a7b1
SHA1 b7c78c08157b1777248e2303b6be1699f2dcd79d
SHA256 014c71b987c21ae3a690f9a420feb2e57d70d6bdaa8df28031d10b98ee295155
SHA3 f3f4f986b70be92250d5727b7732a5d4d92530d8e3783dedb0bfaef8d61efb8f
VirtualSize 0x8a198
VirtualAddress 0x19000
SizeOfRawData 0x8a200
PointerToRawData 0x15000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.03845

.reloc

MD5 687aa942cda2e64adc67a829f1587240
SHA1 26058e365b4fef9cae39c529017700cd0ccfedb7
SHA256 e5b51406ab27a5065a374454ac72e242a50072d670957430f820af90f479b506
SHA3 8a51aae6ca0ea13d9513cba0336e2446957914c5ba6561a337c3afdf42f3c689
VirtualSize 0x638
VirtualAddress 0xa4000
SizeOfRawData 0x800
PointerToRawData 0x9f200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 4.79086

.bind

MD5 57b6f165cdcbe9a573dcc4f5bf95af75
SHA1 245d78dd0218a3d4752cc35d32d310bbc93e13db
SHA256 6d5abc5b5c9f09c29d90bfec0de6385ce5c141fb7eb205d56ce62f8c82ffa5c4
SHA3 cef77094c0bef3289384a98058ea4704089da1dd0fdd4f70e5894402350f35f7
VirtualSize 0x39248
VirtualAddress 0xa5000
SizeOfRawData 0x39248
PointerToRawData 0x9fa00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 7.95959

Imports

UnityPlayer.dll UnityMain
KERNEL32.dll WriteConsoleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
CloseHandle
RtlUnwindEx
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
GetCurrentProcess
ExitProcess
TerminateProcess
GetModuleHandleExW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
LCMapStringW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
CreateFileW

Delayed Imports

AmdPowerXpressRequestHighPerformance

Ordinal 1
Address 0x15004

NvOptimusEnablement

Ordinal 2
Address 0x15000

1

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x42028
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.01706
MD5 8fe4f5b54ed01ecc83b9f64f6bf399ae
SHA1 519a7f223b74044979f5ff1a3e61be4c60229b3d
SHA256 4233c26362d87c30c08c8c773172b47f78f11cfba35b2c41abd99dff63010e2d
SHA3 cdc78e692da981b66f2e396dd87cfbf65232414b0ea13b75e3a8dfdb9e6a0834

2

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.01573
MD5 db3c1858bfd0d8ea7cd8aed79d4f257f
SHA1 6ae100b9439540857095b1f036b255652f082f81
SHA256 65457d0b909cb2259e5209bd7f0408c8e9b2f7fadee7a8ab2f49f3e1b64f2b67
SHA3 8bfcfade82906b5c9694c3d02892045ca1bed78f366732218b409197bbec1e20

3

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.97728
MD5 3d8d5bf7b0763daa60524bb71c14e07a
SHA1 f9ec3c8935494d44870fe5310d534c371c7db9ce
SHA256 1dce1e4019cc101e95e72320671760cb659ce367c3d638abecb2e1e163803af7
SHA3 cb8a14c2374782d0031cc8c729d73ec825f44ce3e8e351ebb6574e6a2da509de

4

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x94a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.02421
MD5 4aefbc749a8b33ba8319b2eb702c5fb8
SHA1 9348eefc7b4701b0e59041d913eaf0f9849e2243
SHA256 d06637372cf5447ba42653f4cf646225037820b7103013023fd7bb78592ef081
SHA3 96027b5680680685e1ff21d28f071979b90078e9a258fcd3540a6511859f8274

5

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.07843
MD5 863ff5faafff79dfb5bcdca8421487e4
SHA1 2e1e3d20d8c731930b6f8957f6c61dc66f97d09e
SHA256 c49da261f26fa2268a6ee925a53525c17ea62e17850140031fc195bd3154419c
SHA3 1ab6485d96cf3ed2079de03f545f4f4f417f535358b835ccd5656a994a835776

6

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.1047
MD5 f53e18e25a6c3e4513a1c9fc5cadf459
SHA1 d174ed72c33aef769554ceca833fca4e1898dfcf
SHA256 dd9350baba56558e160c18cb66dfa0db26e9083b52ddeecf8f6aa1245c7b3e01
SHA3 637bc22391f3ad03a7931ce8eb931a6b21f0cf7c6f70076fd76ad792b3e82f82

7

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.18739
MD5 72f918953331b0995e30bdcf89378493
SHA1 9a5ad23bcf220fec459e3065e5df75c35da20680
SHA256 3d8b36488c0765035763c5e658f020f7b3913ee4a21a3f3d794e4c7245814746
SHA3 e9713aa46f92ef3095eb9c39d136c49ceb84ab423e682aab12c1c2c92c5b8934

8

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x988
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.20228
MD5 d1ef16b8e5059776d50cc62809a2105d
SHA1 f015afe330a579419e06ed650892265f2f984dac
SHA256 71f4af5e2d6c8b6a747988a4219f38a561ba15e08eb186d4f4547c3438f93879
SHA3 68bd6a3e4448e423b9e9a4252cbdd180f8ac64794502febf3a1b0b9a91fbaf79

9

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.31464
MD5 cd8926071ec702f39491824b15d4d75d
SHA1 8f433d8f6fc5d9ba685e1ac4e1986c1de90d51db
SHA256 05c6fbdbb6faebc022eaee39bafdf8d6011f25512332ba7c49368b4dc58ccea4
SHA3 b269222413c7029689e6f96a4dcbe68993ad17bd17f8aaa0b9d13ea551441d14

103

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x84
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.04448
Detected Filetype Icon file
MD5 f7731730720cfe035cf030b40d0e2eb6
SHA1 d046e23f2ee2b93ad96be8e1dc9120ecf3915091
SHA256 5c92a41adaf3265071482fd1a182ae8702c168636a7d9ff51798ee3a1dfc8500
SHA3 6f2d12e4c63c131a3f7f48293996e2be05da351536d013affe5d2265965ce657

1 (#2)

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x210
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.57464
MD5 8832c4fe974774a03e7bea2333fa8d5b
SHA1 bb7a7828c0d29bef02eb761904bb06196464bc91
SHA256 43b4067bdabb28ff16028db2af7e5b702aa96472d7b1e4119e90bd6d84a77fb8
SHA3 ec1047157ab26041e94597b78569cb8385e518d6b1ef7c34dae19f3ae238a9c7

1 (#3)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x6c1
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.37708
MD5 aab7e8aafe7b06ab3d003b54ab5e18ed
SHA1 dccf0408f43059df37b755f3241a8b4b35c728af
SHA256 fb88b19523afd8fed48eddfd10805a3a0a45997bbf8fac04d595ddf93c1a88a8
SHA3 a981b8e907b79cd9448766ace938dfd96560d11c29e6ba165912a8508bd52ca7

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 2021.3.45.63631
ProductVersion 2021.3.45.63631
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_UNKNOWN
Language English - United States
FileVersion (#2) 2021.3.45.8976527
LegalCopyright (c) 2005-2025 Unity Technologies. All rights reserved.
ProductVersion (#2) 2021.3.45f2 (88f88f591b2e)
Resource LangID English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2025-Sep-26 11:01:45
Version 0.0
SizeofData 141
AddressOfRawData 0x13780
PointerToRawData 0x11d80
Referenced File C:\build\output\unity\unity\artifacts\WindowsPlayer\Win64_VS2019_nondev_m_r\WindowsPlayer_player_Master_mono_x64.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2025-Sep-26 11:01:45
Version 0.0
SizeofData 20
AddressOfRawData 0x13810
PointerToRawData 0x11e10

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2025-Sep-26 11:01:45
Version 0.0
SizeofData 712
AddressOfRawData 0x13824
PointerToRawData 0x11e24

TLS Callbacks

Load Configuration

Size 0x138
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x140015030

RICH Header

Errors

Leave a comment

No comments yet.