filenamePathologic.exe
size650752 (0x9ee00)
md56c1bce16ed98cc8f00080f0c7ff863db
typePE32+ executable (GUI) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x110

Rich Header

lib idversiontimes used
2602571110
259257115
26125711140
257257112
259259309
2612593034
2602593019
257261283
1081
261261282
256261281
255261281
258261281

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections6
TimeDateStamp0x5d431275
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x22
Magic0x20b
LinkerVersion14.13
SizeOfCode0xa000
SizeOfInitializedData0x95c00
SizeOfUninitializedData0
AddressOfEntryPoint0x1268
BaseOfCode0x1000
ImageBase0x140000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.0
ImageVersion0.0
SubsystemVersion6.0
Reserved10
SizeOfImage0xa3000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0x8160
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x9e800xa000R-X CODE
.rdata0xb0000x87ce0x8800R-- IDATA
.data0x140000x1bb80xa00RW- IDATA
.pdata0x160000xc300xe00R-- IDATA
.rsrc0x170000x8a0d80x8a200R-- IDATA
.reloc0xa20000x6140x800R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x130000x88
IMPORT0x130880x3c
RESOURCE0x170000x8a0d8
EXCEPTION0x160000xc30
SECURITY00
BASERELOC0xa20000x614
DEBUG0x121500x54
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x121b00x100
Bound_IAT00
IAT0xb0000x220
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#111280
ICON#224400
ICON#342640
ICON#496400
ICON#5169360
ICON#6380560
ICON#7676240
ICON#81521040
ICON#92703760
GROUP_ICON#1031320
VERSION#14440
MANIFEST#116210
module_namehintordfunction_name
UnityPlayer.dllUnityMain
KERNEL32.dll1426TerminateProcess
KERNEL32.dll134CloseHandle
KERNEL32.dll1097QueryPerformanceCounter
KERNEL32.dll540GetCurrentProcessId
KERNEL32.dll544GetCurrentThreadId
KERNEL32.dll748GetSystemTimeAsFileTime
KERNEL32.dll871InitializeSListHead
KERNEL32.dll1227RtlCaptureContext
KERNEL32.dll1234RtlLookupFunctionEntry
KERNEL32.dll1241RtlVirtualUnwind
KERNEL32.dll893IsDebuggerPresent
KERNEL32.dll1460UnhandledExceptionFilter
KERNEL32.dll1395SetUnhandledExceptionFilter
KERNEL32.dll723GetStartupInfoW
KERNEL32.dll900IsProcessorFeaturePresent
KERNEL32.dll634GetModuleHandleW
KERNEL32.dll202CreateFileW
KERNEL32.dll1240RtlUnwindEx
KERNEL32.dll611GetLastError
KERNEL32.dll1335SetLastError
KERNEL32.dll307EnterCriticalSection
KERNEL32.dll955LeaveCriticalSection
KERNEL32.dll271DeleteCriticalSection
KERNEL32.dll867InitializeCriticalSectionAndSpinCount
KERNEL32.dll1444TlsAlloc
KERNEL32.dll1446TlsGetValue
KERNEL32.dll1447TlsSetValue
KERNEL32.dll1445TlsFree
KERNEL32.dll431FreeLibrary
KERNEL32.dll689GetProcAddress
KERNEL32.dll961LoadLibraryExW
KERNEL32.dll1119RaiseException
KERNEL32.dll725GetStdHandle
KERNEL32.dll1561WriteFile
KERNEL32.dll630GetModuleFileNameW
KERNEL32.dll539GetCurrentProcess
KERNEL32.dll354ExitProcess
KERNEL32.dll1560WriteConsoleW
KERNEL32.dll633GetModuleHandleExW
KERNEL32.dll846HeapFree
KERNEL32.dll842HeapAlloc
KERNEL32.dll377FindClose
KERNEL32.dll383FindFirstFileExW
KERNEL32.dll400FindNextFileW
KERNEL32.dll905IsValidCodePage
KERNEL32.dll438GetACP
KERNEL32.dll666GetOEMCP
KERNEL32.dll453GetCPInfo
KERNEL32.dll474GetCommandLineA
KERNEL32.dll475GetCommandLineW
KERNEL32.dll1003MultiByteToWideChar
KERNEL32.dll1541WideCharToMultiByte
KERNEL32.dll570GetEnvironmentStringsW
KERNEL32.dll430FreeEnvironmentStringsW
KERNEL32.dll1359SetStdHandle
KERNEL32.dll593GetFileType
KERNEL32.dll730GetStringTypeW
KERNEL32.dll943LCMapStringW
KERNEL32.dll695GetProcessHeap
KERNEL32.dll851HeapSize
KERNEL32.dll849HeapReAlloc
KERNEL32.dll419FlushFileBuffers
KERNEL32.dll494GetConsoleCP
KERNEL32.dll512GetConsoleMode
KERNEL32.dll1321SetFilePointerEx
ordentry_vafunction_name
10x14004AmdPowerXpressRequestHighPerformance
20x14000NvOptimusEnablement
module_nameWindowsPlayer.exe
flags0
timestamp2106-02-07 06:28:15
version0.0
ordinal_base1
nFunctions2
nNames2
Names(2)0x13030
Functions(2)0x13028
NameOrdinals(2)0x13038

StringTable 040904b0

FileVersion2018.4.6.13492667
ProductVersion2018.4.6.13492667
Unity Version2018.4.6f1_cde1bbcc9f0d

VS_FIXEDFILEINFO

FileVersion2018.4.6.57787
ProductVersion2018.4.6.57787
StrucVersion0x10000
FileFlagsMask0x17
FileFlags0
FileOS4
FileType0
FileSubtype0
offsetsizetypecomment
15c115HTM#
15d0645168BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK