f487bf6834020daed0c103581d6433845b04f7692e8bd04f567dd3a1b245f7d5

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2026-Jan-27 10:18:16
Detected languages English - United States
Debug artifacts C:\build\output\unity\unity\artifacts\WindowsPlayer\Win_x64_VS2022_VB_MT_nondev_i_r\WindowsPlayer_player_Master_il2cpp_x64.pdb
FileVersion 6000.3.6.12300304
LegalCopyright (c) 2005-2026 Unity Technologies. All rights reserved.
ProductVersion 6000.3.6f1 (bbb010bdb8a3)

Plugin Output

Info The PE contains common functions which appear in legitimate applications. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryExW
Suspicious The PE is possibly a dropper. Resources amount for 84.5615% of the executable.
Safe VirusTotal score: 0/70 (Scanned on 2026-09-20 18:50:25) All the AVs think this file is safe.

Hashes

MD5 6757ebfd3c95f360f9483ff2f6b65913 🔍
SHA1 f38c32a7918c684c0db3e8aef358b38714e39210 🔍
SHA256 f487bf6834020daed0c103581d6433845b04f7692e8bd04f567dd3a1b245f7d5 🔍
SHA3 d08cab543b71c301bf198f2ac0fa8b84e637c233918161377206711be09ed2b1 🔍
SSDeep 6144:PaMjvuUwZpxUhLonlzBaNfy+HQvbmXd7QU097kDYJnp+7jiH:PtVwZpKhtA+HQytw9DpUw 🔍
Imports Hash a136217cdd3247ff6a8766561064ca0b 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x110

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 6
TimeDateStamp 2026-Jan-27 10:18:16
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0xce00
SizeOfInitializedData 0x97000
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0000000000001264 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x140000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0xa7000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 457fb5274ed18adc024e01b603e258a4 🔍
SHA1 159fdb99c377edc82c57d34217a711578edb0e63 🔍
SHA256 336709c08beca21a675f029c2d588ac0cae8cc8f42422039cbb827b6284374e5 🔍
SHA3 7d6db62af5f0503638e32b2c5a2ebd94056e5e490598ebed73cb0495875d3499 🔍
VirtualSize 0xcdb0
VirtualAddress 0x1000
SizeOfRawData 0xce00
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.45019

.rdata

MD5 3b05eeff3b4dd9b4c2a5fddba2cd4892 🔍
SHA1 760c67e653bb883b504817130c3b5ef63e5de453 🔍
SHA256 ea488979e91d556f22ad41b2f4d405a23c77d81c5212253868e1d2978563891e 🔍
SHA3 0d1f29e182893042060290390fd0190bbcb9548da22cdf05a0c216328cdaa403 🔍
VirtualSize 0x977c
VirtualAddress 0xe000
SizeOfRawData 0x9800
PointerToRawData 0xd200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.69247

.data

MD5 0822db25bce65451a1219de812eea533 🔍
SHA1 bf4c918ff2184dfeba8cd4f98b21e11d75de05e7 🔍
SHA256 8987031a7fb9e9ffe2b44dad568693d86af933f2b44447b6f5c1159bd0750a79 🔍
SHA3 83fbc2d299cd2e5b71ce2f669f319b95fcab94178c620dd04d72a1071efde7b0 🔍
VirtualSize 0x1d88
VirtualAddress 0x18000
SizeOfRawData 0xc00
PointerToRawData 0x16a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 1.90767

.pdata

MD5 017f81338461c6b246bdb8ce1bf5fc08 🔍
SHA1 aa79861d4dea94c5fd283f1359435734dfb03517 🔍
SHA256 d1cc88f6e981b629ad1f47d33507ac8b71f82346871b690375752ffc69c6063d 🔍
SHA3 e197cfb7530afb455ed4ebbd26984d4562c62ea8c9c65f07f5d04c80970ee830 🔍
VirtualSize 0xec4
VirtualAddress 0x1a000
SizeOfRawData 0x1000
PointerToRawData 0x17600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.60208

.rsrc

MD5 41d6421a83741df083ef5cd7477d0053 🔍
SHA1 39b9623a61d6559734a8fb7485505b1db5ac4f92 🔍
SHA256 39b19d22fb0b2ef0c73a1fbc7b98a2a78b254c69951dc061943dcb7e4f6a0e10 🔍
SHA3 69f052d7c8d94926728cebee80b50113777b8a88178c38c8e2d92295427efbca 🔍
VirtualSize 0x8a018
VirtualAddress 0x1b000
SizeOfRawData 0x8a200
PointerToRawData 0x18600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 3.8204

.reloc

MD5 3ab8a3a955e5040e25556085e21a2be2 🔍
SHA1 f29b173f0ea430d70ff0803cbaa89fa1d4d024d9 🔍
SHA256 119eed3c019ffdb0bba4cee06b80d85e78a679f1bb17317cbb6a352bb4102d7a 🔍
SHA3 a5c3cb0725d2fd68e14265c6e03629d6270e73c1f049eb78b3e40b7b2535d802 🔍
VirtualSize 0x658
VirtualAddress 0xa6000
SizeOfRawData 0x800
PointerToRawData 0xa2800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 4.86735

Imports

UnityPlayer.dll UnityMain2
KERNEL32.dll HeapAlloc
WriteConsoleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
CloseHandle
RtlUnwindEx
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
GetStdHandle
WriteFile
GetModuleFileNameW
GetCurrentProcess
ExitProcess
TerminateProcess
GetModuleHandleExW
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW

Delayed Imports

AmdPowerXpressRequestHighPerformance

Ordinal 1
Address 0x18004

D3D12SDKPath

Ordinal 2
Address 0x18008

D3D12SDKVersion

Ordinal 3
Address 0xe320

NvOptimusEnablement

Ordinal 4
Address 0x18000

1

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.58118
MD5 6b352bb1a5a2ed39aa59067711c433b9 🔍
SHA1 9a3c0092e375fe557274df16f7b385a8a290e73e 🔍
SHA256 31319725649e488dc85a0cd8181cecfa4762fd3dd9d080d66f4cae491c39a92d 🔍
SHA3 6577698c0b884fc392aae25a81ae457468cb3537860236badcc67a16472ed5b1 🔍

2

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x988
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.32506
MD5 942bdd1059ea9064e9be349017ad7b7c 🔍
SHA1 24173138b05b865ffdacb4a918015020da6d6b14 🔍
SHA256 00e761c15c2d6530332d8a85752e75fef695aa805118163937c557de4c080ae3 🔍
SHA3 516469835c7be9dbcccab1c75de3e0b1ac0d426d760f298e55ef8e14cf521411 🔍

3

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.04641
MD5 5d1a24c33337a803cde6d9fb9c25779a 🔍
SHA1 e12169e86c79ac30667c9b949adde3b157373ddb 🔍
SHA256 57873f12297bb5c74494b9100ac26ff4004bb8d3e98a5190dff266200ee93ebe 🔍
SHA3 742d8537cda8deb847b5bb3250dcf776f42d0ac994323cd059d17d5b3557a00c 🔍

4

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.60155
MD5 74843740f4f993a77bff531c5975c11f 🔍
SHA1 23297f1aa21e3fb0e88d2ce31beb48cbe2e44ccd 🔍
SHA256 b46dff183e8fe198b4f8d089763156b8a40dab616c22bf99666e11bed92f2768 🔍
SHA3 b13b9446ab16e80649d81c96e14d785838ef10263f12716a2afa8878df307e89 🔍

5

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.32781
MD5 a23ac4ff635af3e59449dd8ce186d2de 🔍
SHA1 77c13cc36c7e9841c65dc77d269b6ee7935bdb1e 🔍
SHA256 0f8fdbdaf7e2470403e2e5f1e62bc157c1914cb349063de756265d5f30a91fd8 🔍
SHA3 f50cbf1afe51a39e2bad3df32910e314b775582cdde8eeed4aa6afcafe94055d 🔍

6

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x94a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.07657
MD5 840e559c1527711b56354dc4e34c4e98 🔍
SHA1 e90ffa54cdfcd1f90e13c27d68469211432b4786 🔍
SHA256 50eb0a4551c2fa3d56b1a4bede642ca333257144dc2a1c13ac759a2903d317a0 🔍
SHA3 492efc4932aefd3f5117946211001fa50c208eb3dd9984878bba7c1c3b758458 🔍

7

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.91074
MD5 1d81965fb7c90a7c42b1cb847dca2f54 🔍
SHA1 fa1ac3893b42d9d6143726fff47aba890bdb8f58 🔍
SHA256 445a064679fb5bd1b40dcb032c80b6d8c8dd7478e6b95710c952b5ae71a07530 🔍
SHA3 49139d93c748caf439847afcb73d2e13394cb09193caa60441b2a8fc78b18434 🔍

8

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.74625
MD5 ada7fecf9f9180ac1470d2c42b69c6d9 🔍
SHA1 f4aae4f11d6c2853fe81feb846532468675ad7cf 🔍
SHA256 ef92b16b272e82171b17c198bfd8608b77261267c54db3bf4a3d4d66d2a7025a 🔍
SHA3 4ee1a11cd49542d805d7476817f5ff3c8cbd6826749bb1bc3423230dfa684e40 🔍

9

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x42028
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.63859
MD5 f218f78cdaddc73b34de74a15f612f41 🔍
SHA1 76ba1ac503eed7d6dc145e5ebe979475b4eb58cb 🔍
SHA256 38071340f7f60ea0451d82406d8bddc31e4d0ee9c9af88c1598e560070ba4d63 🔍
SHA3 8d727cd4a657acb8b94301ffbc048df38e576b2afb06aaed201a4af420a1a76d 🔍

103

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x84
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.04448
Detected Filetype Icon file
MD5 3bf2dac037ce87794e66ff7f054e913f 🔍
SHA1 52ca961fd37ad960905a681d1db5157508ef1602 🔍
SHA256 2a87b1f32c5d0435090c72c392b75394f706e5750eff64fd85d25e1c622ee581 🔍
SHA3 8454d3273522657b5926068082b2cb88f6dbf352e7e9568008c0e33c792f349b 🔍

1 (#2)

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x20c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.54695
MD5 c8ad85698efcd3c00f93dcf310cfe0bf 🔍
SHA1 4e110bce8503c79cde65d2c8b111aabb2173bd56 🔍
SHA256 230812cf46ee117031a1ea0f4af2f366b49bec309b44946126f1e8e661d9ee11 🔍
SHA3 95b3cf58478f115ad582d40c90091a88ae69c019ad6cf0a4215766ac044d394a 🔍

1 (#3)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x545
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.24993
MD5 9df530c2f4fbe460da74e130d5d351a9 🔍
SHA1 f8719b6c74e0179556c1a18f214d6c1bbff8f823 🔍
SHA256 3c357bd1125971bda05bc59eaeca279da41715741e2535e9e75c94273b1c3a1f 🔍
SHA3 ce3dd46f87bd462f8730fca18daea6df444422f8d88b810aefbd7b2e62536dee 🔍

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 6000.3.6.45072
ProductVersion 6000.3.6.45072
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_UNKNOWN
Language English - United States
FileVersion (#2) 6000.3.6.12300304
LegalCopyright (c) 2005-2026 Unity Technologies. All rights reserved.
ProductVersion (#2) 6000.3.6f1 (bbb010bdb8a3)
Resource LangID English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2026-Jan-27 10:18:16
Version 0.0
SizeofData 151
AddressOfRawData 0x15d68
PointerToRawData 0x14f68
Referenced File C:\build\output\unity\unity\artifacts\WindowsPlayer\Win_x64_VS2022_VB_MT_nondev_i_r\WindowsPlayer_player_Master_il2cpp_x64.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2026-Jan-27 10:18:16
Version 0.0
SizeofData 20
AddressOfRawData 0x15e00
PointerToRawData 0x15000

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2026-Jan-27 10:18:16
Version 0.0
SizeofData 836
AddressOfRawData 0x15e14
PointerToRawData 0x15014

TLS Callbacks

Load Configuration

Size 0x140
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x140018040

RICH Header

XOR Key 0x7914df52
Unmarked objects 0
ASM objects (28900) 5
C++ objects (28900) 138
C objects (28900) 10
Imports (28900) 2
ASM objects (34321) 9
C objects (34321) 16
C++ objects (34321) 40
Imports (34433) 3
Total imports 89
C++ objects (34433) 2
Exports (34433) 1
Resource objects (34433) 1
Linker (34433) 1

Errors

Leave a comment

No comments yet.