a28790570b42058b68b59e14af068a6afd5b6f825afb3452fb6cb55fcb994430

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2024-Jan-19 20:19:03
Detected languages English - United States
Debug artifacts C:\build\output\unity\unity\artifacts\WindowsPlayer\Win64_VS2019_nondev_i_r\WindowsPlayer_player_Master_il2cpp_x64.pdb
FileVersion 2022.3.18.13802474
LegalCopyright (c) 2005-2024 Unity Technologies. All rights reserved.
ProductVersion 2022.3.18f1 (d29bea25151d)

Plugin Output

Info The PE contains common functions which appear in legitimate applications. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryExW
Suspicious The PE is possibly a dropper. Resources amount for 84.7496% of the executable.
Safe VirusTotal score: 0/69 (Scanned on 2026-07-28 03:49:50) All the AVs think this file is safe.

Hashes

MD5 b28035c47055830731c9ac24550cce3f 🔍
SHA1 05bb81b7c32856f66441754136a13f57d8e70c81 🔍
SHA256 a28790570b42058b68b59e14af068a6afd5b6f825afb3452fb6cb55fcb994430 🔍
SHA3 8b13658f403448f50f1ece1380b83dbcc5b2bc820cc82f964ccec244e8352935 🔍
SSDeep 3072:rQJ/VdFgIW9mYucJ/OD8JlsI93TIc0n8NxBVYi79NhOPatVa0yhWcohK:A/7FG9mpcJ/OD8iHne4iRNgatLy0cgK 🔍
Imports Hash ce1183cc150987a99aef5749f22af81e 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x110

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 7
TimeDateStamp 2024-Jan-19 20:19:03
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0xca00
SizeOfInitializedData 0x97000
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0000000000001260 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x140000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0xa8000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 c908b9c0303dc1f82726ca4dae00b772 🔍
SHA1 e81e70cb017880d2883f88a85d9a5ba6176ebcc1 🔍
SHA256 6e577d9deae653a5181b5a961bc5d68133d0e0c5371dc8bf2e7a30f6ef4d5cb2 🔍
SHA3 deefbce421cada627162918879ac6eda8099d036762180ad5ebfb4cbd66be7e2 🔍
VirtualSize 0xc8b0
VirtualAddress 0x1000
SizeOfRawData 0xca00
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.41078

.rdata

MD5 57770765637eb6ac31a3a294b656df4b 🔍
SHA1 94b53554fef3a4616bb574735b4dcca72a667bd3 🔍
SHA256 90e43b54bbd2c9a73ef4bcb95f2878fed0d35d774c31743a179929dd54f35148 🔍
SHA3 4542462cb4621304f44a8b5ee2a9cb2673969382de4f08cf2d66ec4bd59f0d53 🔍
VirtualSize 0x948a
VirtualAddress 0xe000
SizeOfRawData 0x9600
PointerToRawData 0xce00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.65326

.data

MD5 90815aa5dc65a7dd3f93bad1bd78a77e 🔍
SHA1 608f3e69047b216dda6b0df73c30912e2fef5544 🔍
SHA256 435cb9af1df25f501f68a9700182c4d25de99c3f8e8c1ba6b16c0ca98911ff87 🔍
SHA3 e5ea90d4dd767bfa3d88e3fa2e107c2e40cac10f43498d5abd74f15888477d18 🔍
VirtualSize 0x1d38
VirtualAddress 0x18000
SizeOfRawData 0xc00
PointerToRawData 0x16400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 1.87032

.pdata

MD5 c69bce38ac69d0b835120a5590e69f0c 🔍
SHA1 c063139b665bfd43ee632f0741b4b5279a71f404 🔍
SHA256 1d79cfdb10b0e6f61968ed084c55a6ae07421354bf9072b12d090926728f3852 🔍
SHA3 5b320838ebff98a9e30dc5b9258ca4079fcb7cde4304c61cfe2dd57bb750842e 🔍
VirtualSize 0xef4
VirtualAddress 0x1a000
SizeOfRawData 0x1000
PointerToRawData 0x17000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.62843

_RDATA

MD5 f87f407c2a1cab208757ad1d23a2de6f 🔍
SHA1 cd739c36958f9ba7505883ae868f1a6ca71e880f 🔍
SHA256 6e4ba525d12ef66132e0738191d3a928ba74c0091a6f82bc48f892a41e2fc242 🔍
SHA3 0611ad194d9c623281cb358dbc2f2d28bb01b6eab682677ec8d16136d74414ab 🔍
VirtualSize 0x94
VirtualAddress 0x1b000
SizeOfRawData 0x200
PointerToRawData 0x18000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 1.11888

.rsrc

MD5 037ed8cf30c811c840f2df36e75dcbec 🔍
SHA1 ee42c2e8fac73d14d102b9ec3dc685a223bd97d6 🔍
SHA256 6b14ad98afc2d8bf53c3c80f298f965e7d74b94bf49657029b0ba605b7f3e55d 🔍
SHA3 aa6ee00d0e4dfe6a576006b6bb009f0c4205fd2799d79634c6f882101b79574e 🔍
VirtualSize 0x8a1a0
VirtualAddress 0x1c000
SizeOfRawData 0x8a200
PointerToRawData 0x18200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.73724

.reloc

MD5 ef1e558d46106d87320dd822be1ddc48 🔍
SHA1 10f7b05d107451bd01cf446da512c619fc35bf50 🔍
SHA256 34d7b771018e478ba05cd24ec377fd34919d65ec63c43f49e1ab319785368929 🔍
SHA3 cc295f58e62efe5c59cad1febf1ce620404450135f442c20ba55235b492ddac9 🔍
VirtualSize 0x654
VirtualAddress 0xa7000
SizeOfRawData 0x800
PointerToRawData 0xa2400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 4.84209

Imports

UnityPlayer.dll UnityMain
KERNEL32.dll HeapAlloc
WriteConsoleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
CloseHandle
RtlUnwindEx
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
GetStdHandle
WriteFile
GetModuleFileNameW
GetCurrentProcess
ExitProcess
TerminateProcess
GetModuleHandleExW
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW

Delayed Imports

AmdPowerXpressRequestHighPerformance

Ordinal 1
Address 0x18004

NvOptimusEnablement

Ordinal 2
Address 0x18000

1

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x42028
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.94836
MD5 7b3b6e88804553b9586dc2ec3b97b564 🔍
SHA1 bf0c86c8ce6fec18592d62becbb059fd437c507f 🔍
SHA256 532e9683d488963fedcd94ffcfaf3bc691d65d02f4bf56e7a01b18eaa52299a5 🔍
SHA3 4230828d79e625ac429dbed4bf4d7c3673a7e9d27271d658952a754bf5121f44 🔍

2

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.81887
MD5 31cd9aa0b49ef3be22e02689eaf05da7 🔍
SHA1 10ba13b68bd00ceef539bf8ab192bb439eaf5200 🔍
SHA256 7bbefdd6e2a3604597acbf745bf98d5412dcaedc9953fd523c1ec8bc16c11a2f 🔍
SHA3 64b44167ae1db62c328464c7c6c6ec15c76c82c04f2b2e2d6bef111b9530f6b9 🔍

3

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.20603
MD5 acca303967d4612547a6902f28d7d1e2 🔍
SHA1 07bd23a9b5f1dfa50eb5de717e6543575ce47ea9 🔍
SHA256 a9a8d06de40e851b21e0e44795beab2e74673bd211d7a0413a4d40b351049fa8 🔍
SHA3 48e50a0d32e8bf698017b1cad192fea96a30e721bed3c769cbb9972845c15016 🔍

4

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x94a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.38035
MD5 5994643862fcc06ef4675cc2ce89865d 🔍
SHA1 eecffa3fb2ca4e861b08c90b180c2a6879a2eb67 🔍
SHA256 f9aae13fc5f0bbc2d87c48eff0141c846c7f3f478391cc22cec007300ed08a6c 🔍
SHA3 34bbe2a41929dd01a282717172d193352a98a8b2794f3116931c9167f491b673 🔍

5

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.66941
MD5 553667c11016df8b1682f9c0fd71a428 🔍
SHA1 7f6afea927986611d10002f1970dc7a56242f6a2 🔍
SHA256 e4fb429f52c4cd05ee6fee284f8f6a9a3638ffd222af882762cd20f987441e02 🔍
SHA3 193df30906d952ab4d32bf39ee580e1658437b0d940d88835bde545ee33edc64 🔍

6

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.82125
MD5 3777f9add29e0380008c2c1629014973 🔍
SHA1 cf04f2d9440ab6ee7a2809d86c03bbbf368a1370 🔍
SHA256 d3658550571c90215b2f66d2ef398092a22c4c3f89cee558700293c42248b1f2 🔍
SHA3 fe27febbc7e6727ec5d1f2b4659c0b737a3ec60ad2c87e44394fb264f3a8eda1 🔍

7

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.05393
MD5 6ee908f87c0dae9824cd2f275ee7ce32 🔍
SHA1 3e950870af470453565b702add003947224dc6f5 🔍
SHA256 404ab169fd7020bf8a20888aae04337e0b24090f1d1f7f76c69369efa9afb98f 🔍
SHA3 2b86798667a8d030dbd8b58d2eec77e6e2a3e5364230f5ac5590eeab884ab722 🔍

8

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x988
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.15381
MD5 884aab6e876854e25deeec035092f7a4 🔍
SHA1 d3e9ad04082fbc4db7250b5270705e9ad07ee1d3 🔍
SHA256 39b71d4322d779737648eed7718f3fd718bd21f442e5a3a0649c68084384e157 🔍
SHA3 89238b1bf4f2c7b121d5e197e37e029fc5742c870118dc2a04deea5a0beb103d 🔍

9

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.24328
MD5 d7da6ad14ee1add40500227583d0fe81 🔍
SHA1 67e4d99ed398612afd89d60335913bb59e0afda5 🔍
SHA256 d6b975ff9351a4689b066bce9951306752a503f68cb7bf42548533df7e588607 🔍
SHA3 60ee9228896403c163163b2fbe1778099f32b0f83ddba05f549a1ac6303f3a8f 🔍

103

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x84
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.04448
Detected Filetype Icon file
MD5 f7731730720cfe035cf030b40d0e2eb6 🔍
SHA1 d046e23f2ee2b93ad96be8e1dc9120ecf3915091 🔍
SHA256 5c92a41adaf3265071482fd1a182ae8702c168636a7d9ff51798ee3a1dfc8500 🔍
SHA3 6f2d12e4c63c131a3f7f48293996e2be05da351536d013affe5d2265965ce657 🔍

1 (#2)

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x214
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.54742
MD5 c2836dd55ffda2108ac87f5d26cabfba 🔍
SHA1 4d1d5f5dab134939847c12afed40cff870c75398 🔍
SHA256 84e3847272816d451b4303ba5648a78ec662e5563f716a015b06559c7dc5e96f 🔍
SHA3 b30bdb2af9144df9f50ba27c7872dd05681f6ff554bdb8ac1fb6cb8b192b32d8 🔍

1 (#3)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x6c1
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.37708
MD5 aab7e8aafe7b06ab3d003b54ab5e18ed 🔍
SHA1 dccf0408f43059df37b755f3241a8b4b35c728af 🔍
SHA256 fb88b19523afd8fed48eddfd10805a3a0a45997bbf8fac04d595ddf93c1a88a8 🔍
SHA3 a981b8e907b79cd9448766ace938dfd96560d11c29e6ba165912a8508bd52ca7 🔍

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 2022.3.18.39914
ProductVersion 2022.3.18.39914
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_UNKNOWN
Language English - United States
FileVersion (#2) 2022.3.18.13802474
LegalCopyright (c) 2005-2024 Unity Technologies. All rights reserved.
ProductVersion (#2) 2022.3.18f1 (d29bea25151d)
Resource LangID English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2024-Jan-19 20:19:03
Version 0.0
SizeofData 143
AddressOfRawData 0x15aec
PointerToRawData 0x148ec
Referenced File C:\build\output\unity\unity\artifacts\WindowsPlayer\Win64_VS2019_nondev_i_r\WindowsPlayer_player_Master_il2cpp_x64.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2024-Jan-19 20:19:03
Version 0.0
SizeofData 20
AddressOfRawData 0x15b7c
PointerToRawData 0x1497c

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2024-Jan-19 20:19:03
Version 0.0
SizeofData 768
AddressOfRawData 0x15b90
PointerToRawData 0x14990

TLS Callbacks

Load Configuration

Size 0x138
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x140018030

RICH Header

XOR Key 0xe5e06b0d
Unmarked objects 0
ASM objects (28900) 5
C++ objects (28900) 138
C objects (28900) 10
Imports (28900) 2
C++ objects (VS 2015/2017/2019 runtime 29118) 39
C objects (VS 2015/2017/2019 runtime 29118) 16
ASM objects (VS 2015/2017/2019 runtime 29118) 9
Imports (VS2019 Update 8 (16.8.0-1) compiler 29333) 3
Total imports 89
C++ objects (VS2019 Update 8 (16.8.0-1) compiler 29333) 3
Exports (VS2019 Update 8 (16.8.0-1) compiler 29333) 1
Resource objects (VS2019 Update 8 (16.8.0-1) compiler 29333) 1
Linker (VS2019 Update 8 (16.8.0-1) compiler 29333) 1

Errors

Leave a comment

No comments yet.