edfb62d8642c5f8a7c3d0a19d3eb668cb6b85de2e0684a99162311e75fbf5561

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2016-May-24 23:10:19
Detected languages English - United States
Debug artifacts C:\Users\BUILDU~1\AppData\Local\Temp\UnityPlayer_Symbols.pdb
FileVersion 4.7.2.11009659
ProductVersion 4.7.2.11009659
Unity Version 4.7.2f1_a7fe7b7f3d1f

Plugin Output

Info Matching compiler(s): Microsoft Visual C++ v6.0 DLL
Microsoft Visual C++ 6.0 - 8.0
MASM/TASM - sig1(h)
Microsoft Visual C++
Microsoft Visual C++ v6.0
Suspicious Strings found in the binary may indicate undesirable behavior: Contains references to system / monitoring tools:
  • rundll32.exe
Contains references to internet browsers:
  • firefox.exe
  • iexplore.exe
Tries to detect virtualized environments:
  • HARDWARE\DESCRIPTION\System
  • b3 eb 36 e4 4f 52 ce 11 9f 53 00 20 af 0b a7 70
Looks for VMWare presence:
  • VMWare
Accesses the WMI:
  • root\cimv2
Contains domain names:
  • connectiontester.unity3d.com
  • connectiontesterbeta.unity3d.com
  • curl.haxx.se
  • example.com
  • eyePosition.xyz
  • facilitator.unity3d.com
  • facilitatorbeta.unity3d.com
  • http://curl.haxx.se
  • http://curl.haxx.se/rfc/cookie_spec.html
  • http://msdl.microsoft.com
  • http://msdl.microsoft.com/download/symbols
  • http://unity3d.com
  • http://www.openssl.org
  • http://www.openssl.org/support/faq.html
  • https://stats.unity3d.com
  • https://stats.unity3d.com/HWStats.cgi
  • light.position.xyz
  • masterserver.unity3d.com
  • masterserverbeta.unity3d.com
  • microsoft.com
  • msdl.microsoft.com
  • normal.xyz
  • openssl.org
  • position.xyz
  • proxy.unity3d.com
  • proxybeta.unity3d.com
  • stats.unity3d.com
  • tangent.xyz
  • unity3d.com
  • vertex.xyz
  • www.openssl.org
Info Cryptographic algorithms detected in the binary: Uses constants related to CRC32
Uses constants related to MD5
Uses constants related to SHA1
Uses constants related to SHA256
Uses constants related to SHA512
Uses constants related to AES
Uses constants related to Blowfish
Uses constants related to TEA
Uses known Mersenne Twister constants
Microsoft's Cryptography API
Suspicious The PE is possibly packed. Unusual section name found: .trace
Unusual section name found: .bind
Suspicious The PE contains functions most legitimate programs don't use. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryW
  • LoadLibraryA
Can access the registry:
  • SHDeleteKeyA
  • RegDeleteValueA
  • RegCreateKeyExW
  • RegQueryValueExW
  • RegOpenKeyExW
  • RegSetValueExW
  • RegCreateKeyA
  • RegSetValueExA
  • RegOpenKeyExA
  • RegQueryValueExA
  • RegCloseKey
Possibly launches other programs:
  • CreateProcessW
  • ShellExecuteW
Uses Microsoft's cryptographic API:
  • CryptGetHashParam
  • CryptImportKey
  • CryptVerifySignatureA
  • CryptDestroyKey
  • CryptDestroyHash
  • CryptHashData
  • CryptReleaseContext
  • CryptCreateHash
  • CryptAcquireContextA
Can create temporary files:
  • GetTempPathW
  • CreateFileA
  • CreateFileW
Has Internet access capabilities:
  • WinHttpGetIEProxyConfigForCurrentUser
Leverages the raw socket API to access the Internet:
  • WS2_32.dll
Enumerates local disk drives:
  • GetDriveTypeA
  • GetDriveTypeW
Can use the microphone to record audio:
  • waveInOpen
Reads the contents of the clipboard:
  • GetClipboardData
Suspicious VirusTotal score: 1/72 (Scanned on 2026-01-03 23:40:53) Skyhigh: BehavesLike.Win32.Backdoor.wh

Hashes

MD5 7f5e4cbf285aeff4928dd1c09da442d1 🔍
SHA1 8be992af269613afbeab48ae9b648671aaa0fe23 🔍
SHA256 edfb62d8642c5f8a7c3d0a19d3eb668cb6b85de2e0684a99162311e75fbf5561 🔍
SHA3 b3a6146fbdb640beee2edea4411d00c7d9d7156d59ea8920e2de57e9f2cf675e 🔍
SSDeep 196608:Nlm1tEAFDXAaQcqNTZmkOOlqrpGDs9XBNIBGwosFbl/omvgEyFznSG0c7AQzKZWT:Nlm1tEAFDXAaQcqpZmkRlqrpGDs9XBuq 🔍
Imports Hash 92ef7c027e30b7aff43b5997acffe628 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x130

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 8
TimeDateStamp 2016-May-24 23:10:19
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32
LinkerVersion 10.0
SizeOfCode 0x865200
SizeOfInitializedData 0x350c00
SizeOfUninitializedData 0
AddressOfEntryPoint 0x00BBA310 (Section: .bind)
BaseOfCode 0x1000
BaseOfData 0x867000
ImageBase 0x400000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 5.1
ImageVersion 0.0
SubsystemVersion 5.1
Win32VersionValue 0
SizeOfImage 0xbda000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 dc53439c4484890779ef4340fc3f33f4 🔍
SHA1 f8b7fe9540ce8d0cb353d1dfd48ae775d5ac830b 🔍
SHA256 fd3386f3c1e6dccbc416babdb48245f0e01938b966163c15e4be25edbcedec94 🔍
SHA3 5e8f9599fec5bdad3b3723655dd07d160901cf0c558bc9b7324acff1767a48d9 🔍
VirtualSize 0x86514c
VirtualAddress 0x1000
SizeOfRawData 0x865200
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.74665

.rdata

MD5 dfc5ce821858231ded737b7208c37e1c 🔍
SHA1 919843c61a9c853eb39cfedfa9aa3594454b791a 🔍
SHA256 3f21e00d27b14a18e3c358bfec9f260394e6f8c8128e5fed1612df515d624eab 🔍
SHA3 14cd962c6b6bb27a8473d8f9fdcee47be2b6b0871b0c0ca5705f065a5ff878ee 🔍
VirtualSize 0x19afc9
VirtualAddress 0x867000
SizeOfRawData 0x19b000
PointerToRawData 0x865600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.92801

.data

MD5 2415bf06e94b0e9d1deb50968d5b90b1 🔍
SHA1 38ad0d1ab100fa7ed4623fd7f57fc229f7ea767b 🔍
SHA256 e49139b36ab5474eb177f6e0ded0031dcb7e07cfa458eebf26afd28d0b064d01 🔍
SHA3 fbf95204c4a547148d6d390666d24b8f4375a5aea48eaddc08e1b8731adf7044 🔍
VirtualSize 0xcc920
VirtualAddress 0xa02000
SizeOfRawData 0x2e600
PointerToRawData 0xa00600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 5.64346

.trace

MD5 22c6c3bc0ad05187e9ca245523221912 🔍
SHA1 c0199e387dc5a69bc8eeb7187db94ce260bd9a50 🔍
SHA256 c2c88ef28577ecb4c770bc0b6918044e9eace96291919ba097b5d14b6571a87b 🔍
SHA3 e6af9b548f8f3f96afaf51b531c46e9e5631092f41600fc26bf53f91fdb3d950 🔍
VirtualSize 0x1474
VirtualAddress 0xacf000
SizeOfRawData 0x1600
PointerToRawData 0xa2ec00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.17732

_RDATA

MD5 4b3d0a18ebd9703aa2abb12289794f43 🔍
SHA1 8c9725b820b8fc74fd55474655c6f537526963cc 🔍
SHA256 d47116bf3b3b26983577195ebcec7cd4642f3801f72ecb3f34842e2b051f272c 🔍
SHA3 0c9c6e37b3172b6380064dc51012455e16a2dfa2f4bda764348c76d1fd9f0aea 🔍
VirtualSize 0x540
VirtualAddress 0xad1000
SizeOfRawData 0x600
PointerToRawData 0xa30200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.18845

.rsrc

MD5 b5ecd18de1629d214657a71843ae1b41 🔍
SHA1 2ecf9855f41af661bd8ad585603ea79df2906bcb 🔍
SHA256 28dd67d6fa671c91086d5ae2554e876ace90ff362239ef88f8591081e4e4ba0a 🔍
SHA3 4738599ec04b4229ee9997aded041f5c3b3363eee647d38e2adc197377f1d037 🔍
VirtualSize 0x8a678
VirtualAddress 0xad2000
SizeOfRawData 0x8a800
PointerToRawData 0xa30800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.32545

.reloc

MD5 d2387a98b4b94f516119ac98ba2cf1e9 🔍
SHA1 549e93269e8c4104412b786799224872d12255f8 🔍
SHA256 9a54bc993cd5991fdb04a4ad88deec225199b48ca6ac50414907ed8c34d8ef70 🔍
SHA3 72d939875a5d1b6f2ccd51be6fb9ff4e298cb4ec1d2ab7a3d14ee16d411bedd6 🔍
VirtualSize 0x5ccae
VirtualAddress 0xb5d000
SizeOfRawData 0x5ce00
PointerToRawData 0xabb000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 5.85381

.bind

MD5 456c24cbd7199afc179766a0dc4e5748 🔍
SHA1 3e36bb8ffb8906c0c673b9b3a0aa974387a16607 🔍
SHA256 c1e1523fcd978b3b0a96b3e2c5e3546e41dcd9ded319be310baf86444ae54ecf 🔍
SHA3 a42c0da9b121068a3b8c9ed89a1486820fd5252f68bcac827bce85a649e58965 🔍
VirtualSize 0x1fa90
VirtualAddress 0xbba000
SizeOfRawData 0x1fa90
PointerToRawData 0xb17e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 7.9933

Imports

HID.DLL HidP_GetButtonCaps
HidP_GetCaps
HidD_GetProductString
HidP_GetValueCaps
HidP_MaxDataListLength
HidP_GetData
HidD_GetPreparsedData
HidD_FreePreparsedData
HidD_GetHidGuid
WS2_32.dll htonl
inet_addr
closesocket
WSACleanup
getsockname
connect
gethostbyname
htons
WSAStartup
WSAAsyncGetHostByName
WSACancelAsyncRequest
gethostbyaddr
getaddrinfo
freeaddrinfo
getpeername
getsockopt
send
recv
shutdown
listen
accept
ntohs
bind
recvfrom
sendto
__WSAFDIsSet
WSASetLastError
select
setsockopt
inet_ntoa
ioctlsocket
gethostname
socket
WSAGetLastError
KERNEL32.dll WriteFile
FindClose
DeleteFileW
RemoveDirectoryW
FindNextFileW
FindFirstFileW
GetModuleFileNameW
lstrcpynA
lstrcpyA
lstrcpynW
FreeLibrary
GetCommandLineW
GetProcAddress
LoadLibraryW
CancelIo
GetOverlappedResult
CreateEventW
ExpandEnvironmentStringsA
CreateMutexA
GetCurrentThreadId
RaiseException
VerifyVersionInfoW
VerSetConditionMask
GetCurrentProcess
GetModuleHandleA
GetVersionExW
GetSystemInfo
GlobalMemoryStatusEx
GetUserDefaultLangID
GetComputerNameW
LoadLibraryA
GetTempPathW
GetModuleHandleW
GetVersionExA
GetCurrentProcessId
SetUnhandledExceptionFilter
WaitForSingleObject
CreateThread
OutputDebugStringA
SetLastError
GetEnvironmentVariableA
GetFileAttributesA
GetModuleFileNameA
GetCurrentDirectoryA
ResumeThread
GetThreadContext
SuspendThread
GetCurrentThread
IsBadReadPtr
GetWindowsDirectoryA
GetFullPathNameW
CreateSemaphoreA
Sleep
WaitForSingleObjectEx
ReleaseSemaphore
InterlockedCompareExchange
SleepEx
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
SetThreadPriority
GlobalAlloc
CopyFileW
SetEvent
ResetEvent
FileTimeToDosDateTime
FileTimeToLocalFileTime
lstrlenA
GetFileTime
VirtualQuery
MoveFileExW
GetSystemTimeAsFileTime
CreateDirectoryW
IsDebuggerPresent
SetErrorMode
WritePrivateProfileStringW
HeapAlloc
HeapReAlloc
HeapFree
RtlUnwind
EncodePointer
DecodePointer
ExitProcess
SetConsoleCtrlHandler
ExitThread
DuplicateHandle
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetStdHandle
HeapCreate
IsProcessorFeaturePresent
InterlockedIncrement
InterlockedDecrement
HeapSize
GetLocaleInfoW
UnhandledExceptionFilter
TerminateProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
InterlockedExchange
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetHandleCount
GetFileType
SetStdHandle
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
CompareStringW
SetEnvironmentVariableA
CreateFileA
WriteConsoleW
GetProcessHeap
GetFullPathNameA
lstrcmpiA
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
VirtualFree
VirtualAlloc
GetProcessAffinityMask
OpenEventA
GetSystemDirectoryA
GetDateFormatA
GetTimeFormatA
CreateSemaphoreW
CreateMutexW
SignalObjectAndWait
ReleaseMutex
FlushConsoleInputBuffer
GetVersion
GetFileAttributesW
GlobalMemoryStatus
SetFileAttributesW
GlobalLock
GlobalUnlock
FormatMessageW
GetFileSize
ReadFile
CreateFileW
SetEndOfFile
SetFilePointer
CloseHandle
CreateProcessW
WideCharToMultiByte
FormatMessageA
LocalFree
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
GetLastError
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
InterlockedExchangeAdd
FileTimeToSystemTime
GetFileInformationByHandle
PeekNamedPipe
GetDriveTypeA
FindFirstFileExA
GetTimeZoneInformation
ReadConsoleInputA
SetConsoleMode
GetCurrentDirectoryW
GetDriveTypeW
WaitForMultipleObjects
TerminateThread
SetThreadAffinityMask
HeapValidate
CreateEventA
HeapWalk
USER32.dll EnumWindows
SendMessageA
SetForegroundWindow
ShowWindow
IsIconic
RegisterWindowMessageA
GetUserObjectInformationA
GetThreadDesktop
GetParent
SendMessageTimeoutA
GetWindowLongA
SetWindowPos
GetClientRect
CreateDialogParamA
SetWindowLongA
GetDlgItem
ChangeDisplaySettingsA
GetWindowPlacement
AdjustWindowRectEx
EnumDisplaySettingsA
GetDesktopWindow
UnregisterClassW
GetRawInputDeviceList
GetRawInputDeviceInfoW
GetRawInputData
RegisterRawInputDevices
wsprintfA
GetCursorPos
GetWindowRect
OpenClipboard
EmptyClipboard
CloseClipboard
SetClipboardData
CreateWindowExW
DestroyWindow
OffsetRect
DefWindowProcW
DestroyCursor
LoadCursorA
SetCursor
GetSystemMetrics
GetDC
ReleaseDC
CreateIconIndirect
GetUserObjectInformationW
GetProcessWindowStation
MessageBoxW
wvsprintfA
MonitorFromWindow
GetCaretBlinkTime
PeekMessageA
GetMessageA
DispatchMessageA
ValidateRect
EnumDisplayDevicesA
EnumDisplayMonitors
GetMonitorInfoA
LoadImageA
DialogBoxParamA
IsDlgButtonChecked
CheckDlgButton
CreateDialogParamW
PeekMessageW
IsDialogMessageW
TranslateMessage
DispatchMessageW
MsgWaitForMultipleObjects
EnableWindow
SetWindowTextW
RegisterClassW
PostQuitMessage
SetWindowLongW
GetWindowLongW
SetCursorPos
IsWindowVisible
ScreenToClient
GetClipboardData
IsClipboardFormatAvailable
SetCapture
ReleaseCapture
UnregisterDeviceNotification
RegisterDeviceNotificationW
SystemParametersInfoW
ClientToScreen
GetAsyncKeyState
ClipCursor
ShowCursor
GetFocus
SetFocus
WindowFromPoint
RegisterClassExW
DialogBoxParamW
EndDialog
GetAncestor
SendDlgItemMessageW
SetDlgItemTextA
SetDlgItemTextW
MessageBoxA
CopyRect
GetKeyState
LoadIconA
VERSION.dll GetFileVersionInfoW
GetFileVersionInfoSizeW
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
ole32.dll CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
StringFromGUID2
CoCreateGuid
CoInitialize
CoUninitialize
CoSetProxyBlanket
SHLWAPI.dll PathFileExistsW
SHDeleteKeyA
PathCanonicalizeW
PathIsDirectoryW
ADVAPI32.dll CryptGetHashParam
CryptImportKey
CryptVerifySignatureA
CryptDestroyKey
RegDeleteValueA
GetUserNameA
RegCreateKeyExW
RegQueryValueExW
CryptDestroyHash
CryptHashData
CryptReleaseContext
RegOpenKeyExW
RegSetValueExW
RegCreateKeyA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegisterEventSourceA
ReportEventA
DeregisterEventSource
CryptCreateHash
CryptAcquireContextA
GDI32.dll SwapBuffers
GetObjectA
GetDeviceCaps
ChoosePixelFormat
SetPixelFormat
DeleteObject
CreateBitmap
CreateDIBSection
SHELL32.dll ShellExecuteW
CommandLineToArgvW
SHGetFolderPathW
OPENGL32.dll glIsTexture
glGetTexParameteriv
glTexSubImage2D
glPixelStorei
glCopyTexSubImage2D
glDrawBuffer
glReadBuffer
glDrawArrays
wglDeleteContext
glBegin
glVertex3f
glNormal3f
glColor4f
glEnd
glHint
glLightModelf
glLoadIdentity
glMaterialfv
glMaterialf
glReadPixels
glFinish
glFogi
glFogf
glFogfv
glLightModelfv
glLightf
glLightfv
glTexGeni
glTexGenfv
glTexEnvfv
glScissor
glViewport
glColor4fv
glLightModeli
glColorMaterial
glGetFloatv
glMultMatrixf
glMatrixMode
glPolygonMode
glFrontFace
glClearColor
glClearDepth
glClearStencil
glClear
glIsEnabled
glStencilFunc
glStencilOp
glStencilMask
glDepthFunc
glDepthMask
glCullFace
glPolygonOffset
glColorMask
glDisable
glBlendFunc
glEnable
glAlphaFunc
glTexEnvi
glTexEnvf
glDisableClientState
glEnableClientState
glColorPointer
glVertexPointer
glNormalPointer
glTexCoordPointer
glDrawElements
glGetString
glGetError
glDeleteTextures
glGenTextures
glBindTexture
glTexParameteri
glTexImage2D
wglGetProcAddress
glGetIntegerv
wglShareLists
wglGetCurrentDC
wglGetCurrentContext
wglMakeCurrent
wglCreateContext
glLoadMatrixf
WINMM.dll waveInOpen
waveInStart
waveInGetDevCapsW
waveInGetDevCapsA
waveInUnprepareHeader
waveInPrepareHeader
waveInAddBuffer
waveOutGetPosition
waveOutReset
waveOutWrite
waveInClose
waveOutOpen
waveOutClose
waveOutGetDevCapsW
waveOutGetDevCapsA
waveOutGetNumDevs
waveInGetNumDevs
timeBeginPeriod
timeEndPeriod
timeGetTime
waveInReset
waveOutUnprepareHeader
waveOutPrepareHeader
OLEAUT32.dll SysStringLen
SysAllocString
VariantChangeType
VariantClear
VariantInit
SysFreeString
MSACM32.dll acmStreamConvert
acmStreamUnprepareHeader
acmFormatSuggest
acmStreamOpen
acmStreamSize
acmStreamPrepareHeader
IMM32.dll ImmReleaseContext
ImmSetOpenStatus
ImmGetConversionStatus
ImmGetCompositionStringW
ImmAssociateContextEx
ImmAssociateContext
ImmGetContext
ImmSetCompositionStringW
DNSAPI.dll DnsQuery_A
DnsFree
IPHLPAPI.DLL GetIpAddrTable
WINHTTP.dll WinHttpGetIEProxyConfigForCurrentUser

Delayed Imports

??$Transfer@V?$StreamedBinaryRead@$00@@@AnimationEvent@@QAEXAAV?$StreamedBinaryRead@$00@@@Z

Ordinal 1
Address 0x34df50

??$Transfer@V?$StreamedBinaryRead@$00@@@Behaviour@@QAEXAAV?$StreamedBinaryRead@$00@@@Z

Ordinal 2
Address 0xec0a0

??$Transfer@V?$StreamedBinaryRead@$00@@@Component@Unity@@QAEXAAV?$StreamedBinaryRead@$00@@@Z

Ordinal 3
Address 0xc1b0

??$Transfer@V?$StreamedBinaryRead@$00@@@GameObject@Unity@@QAEXAAV?$StreamedBinaryRead@$00@@@Z

Ordinal 4
Address 0x100d0

??$Transfer@V?$StreamedBinaryRead@$00@@@GlobalGameManager@@QAEXAAV?$StreamedBinaryRead@$00@@@Z

Ordinal 5
Address 0xa530

??$Transfer@V?$StreamedBinaryRead@$00@@@LevelGameManager@@QAEXAAV?$StreamedBinaryRead@$00@@@Z

Ordinal 6
Address 0xa530

??$Transfer@V?$StreamedBinaryRead@$00@@@NamedObject@@QAEXAAV?$StreamedBinaryRead@$00@@@Z

Ordinal 7
Address 0x13de0

??$Transfer@V?$StreamedBinaryRead@$00@@@Object@@IAEXAAV?$StreamedBinaryRead@$00@@@Z

Ordinal 8
Address 0x786110

??$Transfer@V?$StreamedBinaryRead@$00@@@Renderer@@QAEXAAV?$StreamedBinaryRead@$00@@@Z

Ordinal 9
Address 0xea390

??$Transfer@V?$StreamedBinaryRead@$0A@@@@AnimationEvent@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z

Ordinal 10
Address 0x34de70

??$Transfer@V?$StreamedBinaryRead@$0A@@@@Behaviour@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z

Ordinal 11
Address 0xebee0

??$Transfer@V?$StreamedBinaryRead@$0A@@@@Component@Unity@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z

Ordinal 12
Address 0xc180

??$Transfer@V?$StreamedBinaryRead@$0A@@@@GameObject@Unity@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z

Ordinal 13
Address 0xffc0

??$Transfer@V?$StreamedBinaryRead@$0A@@@@GlobalGameManager@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z

Ordinal 14
Address 0xa530

??$Transfer@V?$StreamedBinaryRead@$0A@@@@LevelGameManager@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z

Ordinal 15
Address 0xa530

??$Transfer@V?$StreamedBinaryRead@$0A@@@@NamedObject@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z

Ordinal 16
Address 0x13d60

??$Transfer@V?$StreamedBinaryRead@$0A@@@@Object@@IAEXAAV?$StreamedBinaryRead@$0A@@@@Z

Ordinal 17
Address 0x786110

??$Transfer@V?$StreamedBinaryRead@$0A@@@@Renderer@@QAEXAAV?$StreamedBinaryRead@$0A@@@@Z

Ordinal 18
Address 0xea200

??$Transfer@V?$StreamedBinaryWrite@$0A@@@@AnimationEvent@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z

Ordinal 19
Address 0x34daa0

??$Transfer@V?$StreamedBinaryWrite@$0A@@@@Behaviour@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z

Ordinal 20
Address 0xebf30

??$Transfer@V?$StreamedBinaryWrite@$0A@@@@Component@Unity@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z

Ordinal 21
Address 0xc1e0

??$Transfer@V?$StreamedBinaryWrite@$0A@@@@GameObject@Unity@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z

Ordinal 22
Address 0xefe0

??$Transfer@V?$StreamedBinaryWrite@$0A@@@@GlobalGameManager@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z

Ordinal 23
Address 0xa530

??$Transfer@V?$StreamedBinaryWrite@$0A@@@@LevelGameManager@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z

Ordinal 24
Address 0xa530

??$Transfer@V?$StreamedBinaryWrite@$0A@@@@NamedObject@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z

Ordinal 25
Address 0x13e80

??$Transfer@V?$StreamedBinaryWrite@$0A@@@@Object@@IAEXAAV?$StreamedBinaryWrite@$0A@@@@Z

Ordinal 26
Address 0x786110

??$Transfer@V?$StreamedBinaryWrite@$0A@@@@Renderer@@QAEXAAV?$StreamedBinaryWrite@$0A@@@@Z

Ordinal 27
Address 0xea530

??$Transfer@VProxyTransfer@@@AnimationEvent@@QAEXAAVProxyTransfer@@@Z

Ordinal 28
Address 0x34db80

??$Transfer@VProxyTransfer@@@Behaviour@@QAEXAAVProxyTransfer@@@Z

Ordinal 29
Address 0xebe90

??$Transfer@VProxyTransfer@@@Component@Unity@@QAEXAAVProxyTransfer@@@Z

Ordinal 30
Address 0xd690

??$Transfer@VProxyTransfer@@@GameObject@Unity@@QAEXAAVProxyTransfer@@@Z

Ordinal 31
Address 0xfc10

??$Transfer@VProxyTransfer@@@GlobalGameManager@@QAEXAAVProxyTransfer@@@Z

Ordinal 32
Address 0xa530

??$Transfer@VProxyTransfer@@@LevelGameManager@@QAEXAAVProxyTransfer@@@Z

Ordinal 33
Address 0xa530

??$Transfer@VProxyTransfer@@@NamedObject@@QAEXAAVProxyTransfer@@@Z

Ordinal 34
Address 0x13c40

??$Transfer@VProxyTransfer@@@Object@@IAEXAAVProxyTransfer@@@Z

Ordinal 35
Address 0x786110

??$Transfer@VProxyTransfer@@@Renderer@@QAEXAAVProxyTransfer@@@Z

Ordinal 36
Address 0xeacc0

??$Transfer@VRemapPPtrTransfer@@@AnimationEvent@@QAEXAAVRemapPPtrTransfer@@@Z

Ordinal 37
Address 0x34d7c0

??$Transfer@VRemapPPtrTransfer@@@Behaviour@@QAEXAAVRemapPPtrTransfer@@@Z

Ordinal 38
Address 0xe8da0

??$Transfer@VRemapPPtrTransfer@@@Component@Unity@@QAEXAAVRemapPPtrTransfer@@@Z

Ordinal 39
Address 0xbd10

??$Transfer@VRemapPPtrTransfer@@@GameObject@Unity@@QAEXAAVRemapPPtrTransfer@@@Z

Ordinal 40
Address 0xdca0

??$Transfer@VRemapPPtrTransfer@@@GlobalGameManager@@QAEXAAVRemapPPtrTransfer@@@Z

Ordinal 41
Address 0xa530

??$Transfer@VRemapPPtrTransfer@@@LevelGameManager@@QAEXAAVRemapPPtrTransfer@@@Z

Ordinal 42
Address 0xa530

??$Transfer@VRemapPPtrTransfer@@@NamedObject@@QAEXAAVRemapPPtrTransfer@@@Z

Ordinal 43
Address 0x13ec0

??$Transfer@VRemapPPtrTransfer@@@Object@@IAEXAAVRemapPPtrTransfer@@@Z

Ordinal 44
Address 0x786110

??$Transfer@VRemapPPtrTransfer@@@Renderer@@QAEXAAVRemapPPtrTransfer@@@Z

Ordinal 45
Address 0xea180

??$Transfer@VSafeBinaryRead@@@AnimationEvent@@QAEXAAVSafeBinaryRead@@@Z

Ordinal 46
Address 0x34dc80

??$Transfer@VSafeBinaryRead@@@Behaviour@@QAEXAAVSafeBinaryRead@@@Z

Ordinal 47
Address 0xec000

??$Transfer@VSafeBinaryRead@@@Component@Unity@@QAEXAAVSafeBinaryRead@@@Z

Ordinal 48
Address 0xd6e0

??$Transfer@VSafeBinaryRead@@@GameObject@Unity@@QAEXAAVSafeBinaryRead@@@Z

Ordinal 49
Address 0xfeb0

??$Transfer@VSafeBinaryRead@@@GlobalGameManager@@QAEXAAVSafeBinaryRead@@@Z

Ordinal 50
Address 0xa530

??$Transfer@VSafeBinaryRead@@@LevelGameManager@@QAEXAAVSafeBinaryRead@@@Z

Ordinal 51
Address 0xa530

??$Transfer@VSafeBinaryRead@@@NamedObject@@QAEXAAVSafeBinaryRead@@@Z

Ordinal 52
Address 0x13d20

??$Transfer@VSafeBinaryRead@@@Object@@IAEXAAVSafeBinaryRead@@@Z

Ordinal 53
Address 0x786110

??$Transfer@VSafeBinaryRead@@@Renderer@@QAEXAAVSafeBinaryRead@@@Z

Ordinal 54
Address 0xeafe0

AgPmDestroySourceConnection

Ordinal 55
Address 0x8560f0

AgPmEventEnabled

Ordinal 56
Address 0x856150

AgPmEventLoggingEnabled

Ordinal 57
Address 0x856170

AgPmSubmitEvent

Ordinal 58
Address 0x856130

AmdPowerXpressRequestHighPerformance

Ordinal 59
Address 0xa0387c

NvOptimusEnablement

Ordinal 60
Address 0xa03878

NxCreateCoreSDK

Ordinal 61
Address 0x72b910

1

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.89297
MD5 e553ce158810b95900583a8359303724 🔍
SHA1 fd00116c796b663ed0501b19060177b63610c5a0 🔍
SHA256 e5239804789df49dd4f5d9f646e579a52be74e8a41d972d229fd96592449149a 🔍
SHA3 921c110d23476eba90b122ae50d09c7d5f1d23e7abe6db6bb07c9196d1767f06 🔍

2

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x988
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.34707
MD5 b05e4458d0ebdd8ab0b87781919ee0e8 🔍
SHA1 12c0f025fd83bc70a4171146489279a7e266bfaa 🔍
SHA256 0b6da2060ffd4e2f56cdf86011d2170b174562d2102e39a85ae06fc224895869 🔍
SHA3 1b099f6dd8c9412f384a9f92c2a66088e40bec302ba2b55014882945f200895e 🔍

3

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.07243
MD5 767e572733dd7999d4275453254c0ae4 🔍
SHA1 aa7062636c719a581bd9b9bd3a86050a9eec6d77 🔍
SHA256 d1ed7cf26ae9b25aabc1c63cdc426ad727a9801f4d038d343b1d830cf451c3b7 🔍
SHA3 223d5a3e42dfc950a4c7d2213280f4b721c5608311d7c0790e2ab3738723137f 🔍

4

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.35622
MD5 d4c35d99748e5bd6cacf3cfa9f8ad24d 🔍
SHA1 4d1113c0a7a1d2702861703c46d6ffa7d4494809 🔍
SHA256 d0eda9ca8e19af5659e9a839c986b8f2e2dc2142f36792e0fb7161cb59b0f512 🔍
SHA3 c0efc73023a6bd98c9070905e139952ab894bf0043200007177a95c14867af8a 🔍

5

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.38819
MD5 848bf675ba67c89506b73919e7fec5a0 🔍
SHA1 ee08bb15c11570d3e374cb4638ee214d8f24fb4a 🔍
SHA256 f1241300ce3ca78a15b6e07f70e4141e54a8204245e8c0dbda3d13f29012fc36 🔍
SHA3 3323fe39f2775be039e2c67d93699ca43c90493e0a12ad408b8de878a79de8b2 🔍

6

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x94a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.34592
MD5 6ee324464b38cba0fcebccfbd01f8ae3 🔍
SHA1 8357e05153ee85ef3eb3644e0b83e41f0080da68 🔍
SHA256 845fc9cfd69f02258faae6bf6427edebef5f254cd39d56c227dd94559c19ca89 🔍
SHA3 9c80da785922faa4965239dca7f105a1eeeea464b9e2fa65370dad7e8d34c081 🔍

7

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.32672
MD5 97df30de05eed569d0f07305a7b4e96e 🔍
SHA1 b71a2e5e46a1b787e50d4d90553c1ed7419c9a3c 🔍
SHA256 c9ad28c610c2cce7986e4be00a51d8eb16e80776503f56393d6d9f0e789d54f6 🔍
SHA3 09214e0ba41733a47c0f459760412155597c78e684895794b4373c1adaaa5951 🔍

8

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.29494
MD5 b3a0fc328d0ee329fe02c0c7d6b73b4a 🔍
SHA1 1b683f50d76757bc7a48e1af5582de6d2aa82111 🔍
SHA256 415a06133e89629cf2e03a98cff784f5965bf2a45686f3f391e76bf0409948df 🔍
SHA3 b253f5369f953e8d4e9ac17463ab99bdb23b7c3db00d900a0fcd7cdc12ff4108 🔍

9

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x42028
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.31205
MD5 b4cd56dae25accbadfe2c3b4261dfd4e 🔍
SHA1 8c2f9d61999891eef153fa1d1edd3e2939320c65 🔍
SHA256 30ca4f8487ec9fadcc3e7941c8a7f5f0249902e505a6bb38e95b6788d8404a39 🔍
SHA3 7be8b10c9660a5fa6c53edff755f0ffcd4a20fc5dd12bd539dfd5f5627be7219 🔍

9 (#2)

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x124
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.99471
MD5 b62b6b1e4cd3054ab1b07b033356d108 🔍
SHA1 c0170ce1c06de46e62508e1d774d64e952cd111a 🔍
SHA256 6a3c71d7f89e83280ff2aa75c76d49c3239060f8ee53cfc2692e05c4fc9c7eab 🔍
SHA3 9e885ae1d0f740d603c9ef2ca1a92c8a61ddb587a0f50bee653496e0ac8fe4f6 🔍

105

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x10c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.98084
MD5 2165d3c35627dfb0f24dfa8839b650c1 🔍
SHA1 5168d394292dd31902f3f8112b22cd604529f378 🔍
SHA256 7aa854f2b6bf3241c666d0b851ecaea27082934a4b2fa43db752591dfcf9434e 🔍
SHA3 395d76a75afaab97318d9ea2f3785b5ade74331f689f98e69f22f301be84d67a 🔍

107

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x1c2
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.19606
MD5 e71ed01bef9a6e44b5a60f28e2d14320 🔍
SHA1 28a0948d37b93bfd392044a4338968bd3f4de535 🔍
SHA256 af380b7f1f6bedba49ef3833569a36314f9834b759bfbdc7f5474d65081186c6 🔍
SHA3 a275daef8cf31a8e4d53a63b80b73137c0c41a126920ed0b63416f8643332d35 🔍

108

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0xdc
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.23439
MD5 89647fd8d7ee80b9e9e46db2a1053a29 🔍
SHA1 10dd88f00a8f56cce48908628abe1215235f624a 🔍
SHA256 692985cf029eb28098357336ea128b16211fb8fb8ab3e8f90949a952a2514f65 🔍
SHA3 01c77f889f7bb48a0744fe4f076df03cf74591df831c9d043237c2a7a7426f3e 🔍

109

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x8e
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.09377
MD5 839f2e562a1f062fd873414ab28cf1d2 🔍
SHA1 ed961a5852bd1ac5b55fa8fd70fa8213754abc57 🔍
SHA256 296b7d861a9ee473d4e8a62f9d7adb025d1fbe8e61206870f426e5c870a98936 🔍
SHA3 6a4b1fab7319e07585d923be21a3d852ecc1988286973bf8440e25f2a35a3cd0 🔍

103

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x84
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.04448
Detected Filetype Icon file
MD5 3bf2dac037ce87794e66ff7f054e913f 🔍
SHA1 52ca961fd37ad960905a681d1db5157508ef1602 🔍
SHA256 2a87b1f32c5d0435090c72c392b75394f706e5750eff64fd85d25e1c622ee581 🔍
SHA3 8454d3273522657b5926068082b2cb88f6dbf352e7e9568008c0e33c792f349b 🔍

1 (#2)

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x1b0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.34377
MD5 55052c5eb49254d2d835a6a49ec77948 🔍
SHA1 fd233e3015241d057ab8472dbc830b65a5401b4d 🔍
SHA256 a2a4d3fddf6ae2055cbf522c38007225264b9883775b88e69b53f1462532392c 🔍
SHA3 20e6f6f737e45509a7360f0dd2f28a2e3a8661255d3e9a9516c68bc9ad049b94 🔍

1 (#3)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x581
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.37424
MD5 ed4212968d15a196c34d461040b44336 🔍
SHA1 4d331b10588bcfeb306ba2ad31ce5ee96e12667c 🔍
SHA256 b91c0fd1d3a91447a5b1207d1f625d19a6a0df1921aac32c60ffbd8e0a11ef00 🔍
SHA3 914a36db86cc3ab4399e6e59366be51f0f6dae23a7a55f7e19ea927f9dd1a2b0 🔍

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 4.7.2.65147
ProductVersion 4.7.2.65147
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_UNKNOWN
Language English - United States
FileVersion (#2) 4.7.2.11009659
ProductVersion (#2) 4.7.2.11009659
Unity Version 4.7.2f1_a7fe7b7f3d1f
Resource LangID English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2016-May-24 23:10:19
Version 0.0
SizeofData 85
AddressOfRawData 0x9e0c60
PointerToRawData 0x9df260
Referenced File C:\Users\BUILDU~1\AppData\Local\Temp\UnityPlayer_Symbols.pdb

TLS Callbacks

Load Configuration

RICH Header

XOR Key 0xf8360ac6
Unmarked objects 0
ASM objects (VS2008 build 21022) 2
C objects (VS2012 build 50727 / VS2005 build 50727) 1
C++ objects (VS2008 SP1 build 30729) 402
C objects (VS2008 SP1 build 30729) 23
C++ objects (VS2010 build 30319) 1
C objects (VS2003 (.NET) build 4035) 1
C++ objects (VS2003 (.NET) build 4035) 29
Imports (VS2008 SP1 build 30729) 38
Imports (VS2003 (.NET) build 4035) 3
Total imports 546
152 (20115) 8
ASM objects (VS2010 SP1 build 40219) 68
Unmarked objects (#2) 177
C objects (VS2010 SP1 build 40219) 876
C++ objects (VS2010 SP1 build 40219) 1162
Exports (VS2010 SP1 build 40219) 1
Resource objects (VS2010 SP1 build 40219) 1
Linker (VS2010 SP1 build 40219) 1

Errors

Leave a comment

No comments yet.