b26ee6e2f4ff4aa0f3cd722295926a769f8932e93efe592cd247793b7e544839

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2021-Jan-12 15:48:31
Detected languages English - United States
Debug artifacts C:\buildslave\unity\build\artifacts\WindowsPlayer\Win32_nondev_m_r\WindowsPlayer_Master_mono_x86.pdb
FileVersion 2019.4.18.3346596
ProductVersion 2019.4.18.3346596
Unity Version 2019.4.18f1_3310a4d4f880

Plugin Output

Info Matching compiler(s): Microsoft Visual C++ 6.0 - 8.0
Info The PE contains common functions which appear in legitimate applications. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryExW
Suspicious The PE is possibly a dropper. Resources amount for 88.2452% of the executable.
Safe VirusTotal score: 0/70 (Scanned on 2026-03-05 20:07:13) All the AVs think this file is safe.

Hashes

MD5 6c208faff82e2f2755bb8b654fba5172
SHA1 cede30733e5b6aaff30b216f48150d33b6b94a13
SHA256 b26ee6e2f4ff4aa0f3cd722295926a769f8932e93efe592cd247793b7e544839
SHA3 797fe5d96c9fe40b7c895a9dad2284d2eb247510ef70be9bcb62954fb4aca5fb
SSDeep 6144:/Vls9uR6S3lRDt+E4pTcGq6cfh5fz7xxCUu/rsYrZGqiCP:N+5S1dtzYTcd5fz7xxCUqQYrIqxP
Imports Hash 93d7bb032e5b4ede025420a3defb9706

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x118

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 5
TimeDateStamp 2021-Jan-12 15:48:31
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32
LinkerVersion 14.0
SizeOfCode 0xae00
SizeOfInitializedData 0x91e00
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0000125D (Section: .text)
BaseOfCode 0x1000
BaseOfData 0xc000
ImageBase 0x400000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0xa0000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 db1f15be09b789283a7850e61d3d2ed9
SHA1 3dc68d97a4b336170e796e7de67d9ed7406ca1a7
SHA256 39173c9dc8014fc31a05bf2b5a2403004e7946b3d1f00ea28644f708f7abee8b
SHA3 7ddd3e8ecae2eefe04d89c92d06533589dd4befb048f6f574d748661c48d3197
VirtualSize 0xac07
VirtualAddress 0x1000
SizeOfRawData 0xae00
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.59524

.rdata

MD5 1e5a5ecf062c84169a381be7f2a35320
SHA1 14653b3f95b7302894a4c68d9e96f7103669888b
SHA256 6af59dd01fcbb28439c25d0bed18fa1422751bc7f5e96aaf58c343b9d86f97b9
SHA3 942ecf4a408dbda6c6bcb739a66206ce3b7c29e16a39131b73aefe1e45db9ec1
VirtualSize 0x593e
VirtualAddress 0xc000
SizeOfRawData 0x5a00
PointerToRawData 0xb200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.86005

.data

MD5 1e19c674a19facad078a63ef812dda50
SHA1 65f38401a2b3fc61f41771c1e72e9aa73fd10799
SHA256 c4cf693f8d4d834aff4a4197177982ea8c0b8cb49af91fefe52400f22f4be1e2
SHA3 b01bb11e9989bb2c8315f2bb119c2fec9f66f8c08ab4350959948bc6b6f03bfb
VirtualSize 0x12b4
VirtualAddress 0x12000
SizeOfRawData 0x800
PointerToRawData 0x10c00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 2.00867

.rsrc

MD5 36afba51580cd29fe5abb230409f6f64
SHA1 d20bdf1bb3416343beede661b29b846cf6f5165d
SHA256 8175c1ac5759b4bfd74475f93b228c43bece182bc4245ef006fa2c7edbeb38fa
SHA3 6039b811d035839f91cd8e59b1f09bdae314056d9fb95b003dc34d8ae4871095
VirtualSize 0x8a0d8
VirtualAddress 0x14000
SizeOfRawData 0x8a200
PointerToRawData 0x11400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.17913

.reloc

MD5 25e1753d72af594ac26f64810125b391
SHA1 7c0624cc0d5cc961ea96284928f1c1b04158e7d2
SHA256 2a418bf5f3798d42ded392bd99424322fa6065dbd2b03837f229a7f8ac14f2af
SHA3 dea2e06065ca3c2a46313e341e3ac93a3971a8e885926fed33373f60955f6dae
VirtualSize 0xdcc
VirtualAddress 0x9f000
SizeOfRawData 0xe00
PointerToRawData 0x9b600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 6.4902

Imports

UnityPlayer.dll UnityMain
KERNEL32.dll WriteConsoleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
CloseHandle
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
DecodePointer
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
LCMapStringW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
CreateFileW

Delayed Imports

AmdPowerXpressRequestHighPerformance

Ordinal 1
Address 0x12004

NvOptimusEnablement

Ordinal 2
Address 0x12000

1

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x42028
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.91623
MD5 1b05b53214adf37261d53614c4f3a564
SHA1 66bcbfcd052253ef2374d2224c0f08889a4ac891
SHA256 26c65adb2d376f6ea760753dd39a082024450c07c9b3bd7ae84aaef1f55d59b4
SHA3 2b0b6b2e1ea426c432c4ebf5034b14aa4b6cb54a55ecb350d99617714de15b16

2

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.09686
MD5 e2e26c4eb9f2f713a32075602e667c85
SHA1 ee5decd6eace349a5859ffdbb291cd00a4b388b3
SHA256 17af73bd424d028b8b18ff3279ee0959f5868122e0bd9d00ac752e213a41de5a
SHA3 6daf1c42fe008f1302bba53c2807d8cd6e240a369aa38a85dd0b6243a02f5a90

3

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.43082
MD5 7cad735f7c62aa20c03fdcf95e23deb5
SHA1 00a7655311be41d0ab4d4b422e0ec07510375851
SHA256 83ce249023eeffb16d5af45c03db94dcc51d4c7a94a12b0cfa6e3e23e8157bcc
SHA3 684b377e6ef858108f5f5d2e54b1f3bad0d9f8e2b7db7bd5bb46262211ed29c2

4

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x94a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.66545
MD5 87f02015f4c9a67703c00160364c76f9
SHA1 a72edca81ebb1a6f282369aa998e804f4e553c09
SHA256 88b9b3b625bb6b13aed2c007223093adff7da0cbcf7df8952e8e27bc8308bdec
SHA3 a4ddf5aec955e33abb9f851aa2551f3e2b4d12e6114298aa81dc71deb9af3e04

5

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.9259
MD5 8dff03baf10672a27b37815e410ab589
SHA1 826710866ec7b28ba135512b4b5db4e62e1b7767
SHA256 df6dca191745f02760c53c579e6707a4d52d154d7206226a85c7b07b91f01e5c
SHA3 6a108b0e725783058b163a6aeeccf396a4b53960b5996fad02af9f04df738c8a

6

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.09781
MD5 2c055e5e0b7784d92889a5c7c929308f
SHA1 a9ff1269330e9fa07b21329619413cd21c55115a
SHA256 c6808e476be95972366f6bfd52d1ba23bc0205936afd86282a27ca3ec32744ee
SHA3 3b71df105f797009478a57c1613ad175b4a48694c9036f9ac69591735510be79

7

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.20566
MD5 8a9d668aa4447909b2d267bb9b2a9281
SHA1 6dbfe1b64aa295e67ac49ff0694f3a60379783f3
SHA256 99db2700626dd2133be9dec17a15f70e2f558e75fba4eaa10db2139249cd70b8
SHA3 e22a911866fa3e708c53523c66f352d57f4590ba77a5c4b4816e429788594769

8

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x988
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.47575
MD5 fc09245ff36450c0075829f0146dbd44
SHA1 6f018046849defc6b82ce8b4d3951ff52cc098a3
SHA256 55a2df096cb05222d135dc98fead861c9bc2b2914f3cc2078bc19cd9ea6d5833
SHA3 b509d614a03536c2d30cca73e131f99ed42bdabb85731e7d5e34e653fbf58959

9

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.58382
MD5 5c1e78e003c6c104cfe969143ea15e33
SHA1 dda15d529084450b6c3d4ed3ef203fc75d5f0eb4
SHA256 908f57393a910bb0302c27c2005e77a9f5735350bce64037ee40e4e0e9777cdf
SHA3 d83d8f7d27f4635b319270f6e396cfe701a88d8e8577a0fd84c0062c2a08d192

103

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x84
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.04448
Detected Filetype Icon file
MD5 f7731730720cfe035cf030b40d0e2eb6
SHA1 d046e23f2ee2b93ad96be8e1dc9120ecf3915091
SHA256 5c92a41adaf3265071482fd1a182ae8702c168636a7d9ff51798ee3a1dfc8500
SHA3 6f2d12e4c63c131a3f7f48293996e2be05da351536d013affe5d2265965ce657

1 (#2)

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x1c0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.40917
MD5 f328e22a71722ee74397c468faa48450
SHA1 4951af76cfc3439becb07e539566eeb8493f702e
SHA256 8c9bd596387c71822d86e118b1cf247c664ad27b6e1f93ea600c0153d4e84c84
SHA3 0fb26d7baef0b6b63b95d79edeb9aec47bd8bacf382e4eaae59a6511e3339e33

1 (#3)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x655
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.37545
MD5 e64f0e3051453730fcd59e3487fff82c
SHA1 881f9506d98c7244ee2e6cc48de59fb5fe9394a0
SHA256 cc5206d924557aebbb34ea990bff63d51f03f95c9618f11ba16f5bd0d969f3b2
SHA3 e68e9754b0692216d6b7991ec0b28f737203d4f0979404b4bfd5728ed3214e3d

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 2019.4.18.4260
ProductVersion 2019.4.18.4260
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_UNKNOWN
Language English - United States
FileVersion (#2) 2019.4.18.3346596
ProductVersion (#2) 2019.4.18.3346596
Unity Version 2019.4.18f1_3310a4d4f880
Resource LangID English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2021-Jan-12 15:48:31
Version 0.0
SizeofData 125
AddressOfRawData 0x10bbc
PointerToRawData 0xfdbc
Referenced File C:\buildslave\unity\build\artifacts\WindowsPlayer\Win32_nondev_m_r\WindowsPlayer_Master_mono_x86.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2021-Jan-12 15:48:31
Version 0.0
SizeofData 20
AddressOfRawData 0x10c3c
PointerToRawData 0xfe3c

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2021-Jan-12 15:48:31
Version 0.0
SizeofData 672
AddressOfRawData 0x10c50
PointerToRawData 0xfe50

TLS Callbacks

Load Configuration

Size 0xa0
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x412018
SEHandlerTable 0x410bb0
SEHandlerCount 3

RICH Header

XOR Key 0x64797d74
Unmarked objects 0
ASM objects (VS2015/2017 runtime 25711) 10
C++ objects (VS2015/2017 runtime 25711) 144
C objects (VS2015/2017 runtime 25711) 18
Imports (VS2015/2017 runtime 25711) 2
C++ objects (VS 2015/2017 runtime 26706) 36
C objects (VS 2015/2017 runtime 26706) 17
ASM objects (VS 2015/2017 runtime 26706) 18
Imports (VS 2015/2017 runtime 27012) 3
Total imports 78
C++ objects (VS 2015/2017 runtime 27012) 2
Exports (VS 2015/2017 runtime 27012) 1
Resource objects (VS 2015/2017 runtime 27012) 1
Linker (VS 2015/2017 runtime 27012) 1

Errors

Leave a comment

No comments yet.