File scan report
Verdict Safe
Is Unity
Unity Technologies signed DLL with zero detections across 75 engines and widespread legitimate distribution.
Strong evidence · A verified publisher signature, and no engine flags it.
Treat as a legitimate Unity Player component; no further action required.
Good practice2 tips
We found nothing harmful in this file.
Use it only as part of a program you got from the developer's own website.
Keep your antivirus and Windows updates switched on.
No scanner can promise a file is 100% safe.
Reads the latest antivirus results for this file's hash. Nothing is uploaded.
Antivirus results
0 of 71 flagged
- Flagged 0
- No detection 71
- No result 4
- Code signing Unity Technologies SF
- Test run Completed
- First seen 10mo ago
Chapter 02
Why we think so
0 points against it and 3 in its favour, checked against the scan evidence.
The reasoning behind this verdict
All 71 antivirus engines that checked it returned clean results, including 17 major antivirus engines. The file is signed by Unity Technologies SF and has been submitted by 408 sources over 261 days with no malicious indicators.
Zero malicious detections from any engine tier combined with a verified Unity Technologies signature and widely seen and long established prevalence classification indicate this is a legitimate Unity Player component. Sandbox analysis produced no malicious verdict and no malicious files it created were dropped. The absence of packing, high-entropy code, or triggered rules further supports a clean determination.
What We Detected
75 antivirus engines scanned the file; none flagged it as malicious. The DLL carries a valid code-signing certificate from Unity Technologies SF. No sandbox flagged malicious behaviour and the single file it created file received no malicious verdict.
Threat Behavior
Observed MITRE techniques are routine only (T1027, T1056, T1082, etc.) and consistent with normal Unity runtime operations. No offensive techniques, persistence mechanisms, or malicious network activity were recorded.
What To Do Now
The file can be considered safe for use. Keep security software enabled and only download Unity components from official sources.
- Verified Unity Technologies signature
- Zero detections across 75 engines
- Common_old prevalence with 408 submitters
6 sources checked · 5 complete · 1 not needed or not applicable. See every source
Chapter 03
What it did in our test
It ran in our isolated test environment; no test environment rated what it did as risky.
Test run summary
Capture complete- 8sandbox rule tags
- 8spawned processes
- 0network contacts
- 5filesystem & mutex artifacts
What this file did when executed
This file was run in a sandbox and its runtime behaviour was observed.
Techniques observed in the sandbox
8MITRE ATT&CK techniques the sandbox mapped. Highlighted ones are rare in normal software; the others are common in legitimate programs too.
- T1027· Obfuscated code
- T1027.002· Obfuscated code
- T1036
- T1056· Keylogging
- T1071· Application protocol
- T1082· System recon
- T1218.011
- T1497· Sandbox evasion
Observed activity
Processes started
8Programs the file ran, with their command lines.
rundll32.exe"C:\Windows\sysnative\rundll32.exe" "C:\Users\<USER>\Desktop\attachment.dll",#1loaddll64.exeC:\Windows\System32\loaddll64.exe loaddll64.exe "C:\Users\user\Desktop\UnityPlayer.dll"cmd.exeC:\Windows\System32\cmd.exe cmd.exe /C rundll32.exe "C:\Users\user\Desktop\UnityPlayer.dll",#1rundll32.exeC:\Windows\System32\rundll32.exe rundll32.exe "C:\Users\user\Desktop\UnityPlayer.dll",#1rundll32.exeC:\Windows\System32\rundll32.exe rundll32.exe C:\Users\user\Desktop\UnityPlayer.dll,UnityMainrundll32.exeC:\Windows\System32\rundll32.exe rundll32.exe C:\Users\user\Desktop\UnityPlayer.dll,UnityMain2
Show all 8 entries for processes started
rundll32.exeC:\Windows\System32\rundll32.exe rundll32.exe "C:\Users\user\Desktop\UnityPlayer.dll",UnityMainrundll32.exeC:\Windows\System32\rundll32.exe rundll32.exe "C:\Users\user\Desktop\UnityPlayer.dll",UnityMain2
Files
5Files the file created, changed or deleted.
- Written
C:\Users\<USER>\AppData\LocalLow\Unknown Vendor\Unknown Unity Application\Player.log - Written
C:\Users\user\AppData\LocalLow\Unknown Vendor - Written
C:\Users\user\AppData\LocalLow\Unknown Vendor\Unknown Unity Application - Written
C:\Users\user\AppData\LocalLow\Unknown Vendor\Unknown Unity Application\Player.log - Written
\Device\ConDrv\\Connect
Sandbox background — not the file
1The analysis machine's own processes and connections, recorded in every run.
- VM process
conhost.exeC:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Files this sample writes at runtime
This file drops 1 child at runtime. None are currently flagged malicious in our cache. 1 has no saved verdict and was not checked; that is missing coverage, not a finding.
- f25f228e95f6d8f05ec2…dc61f7Not checkedno saved verdict
Chapter 04
Technical details
None of the 71 antivirus engines that checked it flag it; signed by Unity Technologies SF.
Sources checked
Every check behind this verdict
6 sources checked · 5 complete · 1 not needed or not applicable. Complete means the check returned a usable result; it does not mean the file is safe.
File fingerprint
- Last analyzed
- Sep 7, 2026, 10:40 AM UTC
- SHA-256
b18b328000c79f5dc1d3eb6762dfbc97cd878ae150eb8559b913dca2ea298d04- SHA-1
499c5636833c37ac725b12fc344b7a742dc1d031- MD5
461a7364b0cadec7bdcaab0bd7060d51
About this file
UnityPlayer is a Win32 DLL file of 33.7 MB.
- Type and size
- Win32 DLL · 33.7 MB
- Signer
- Unity Technologies SFValid code signature.
- First seen
- Dec 20, 2025On VirusTotal.
- Submitted by
- 408 distinct sources
- Packer
- None detected
- Entropy
- 7.62 of 8
First scanned
Antivirus consensus
0 of 71 engines flagged this file
4 of the 75 engines returned no result for this file (file type not supported, or the scan did not finish), so they did not check it.
- Tier-118 engines0flagged
- Tier-236 engines0flagged
- Low-trust17 engines0flagged
View all 75 engine results
- AcronisClean
- AhnLab-V3Clean
- AlibabaClean
- alibabacloudClean
- ALYacClean
- Antiy-AVLClean
- APEXClean
- ArcabitClean
- AvastClean
- Avast-MobileNo result
- AVGClean
- AviraClean
- BitDefenderClean
- BitDefenderFalxNo result
- BkavClean
- CAT-QuickHealClean
- ClamAVClean
- CMCClean
- CrowdStrikeClean
- CTXClean
- CylanceClean
- CynetClean
- DeepInstinctClean
- DrWebClean
- ElasticClean
- EmsisoftClean
- ESET-NOD32Clean
- F-SecureClean
- FortinetClean
- GDataClean
- GoogleClean
- GridinsoftClean
- huorongClean
- IkarusClean
- JiangminClean
- K7AntiVirusClean
- K7GWClean
- KasperskyClean
- KingsoftClean
- LionicClean
- MalwarebytesClean
- MaxSecureClean
- McAfeeDClean
- MicrosoftClean
- MicroWorld-eScanClean
- NANO-AntivirusClean
- PaloaltoClean
- PandaClean
- RisingClean
- SangforClean
- SentinelOneClean
- SkyhighClean
- SophosClean
- SUPERAntiSpywareClean
- SymantecClean
- SymantecMobileInsightNo result
- TACHYONClean
- tehtrisClean
- TencentClean
- TrapmineClean
- TrellixENSClean
- TrendMicroClean
- TrendMicro-HouseCallClean
- TrustlookNo result
- VaristClean
- VBA32Clean
- VIPREClean
- VirITClean
- ViRobotClean
- WebrootClean
- XcitiumClean
- YandexClean
- ZillyaClean
- ZoneAlarmClean
- ZonerClean
Section entropy & packers
No high-entropy executable section or known packer signature was detected. Data and resource sections can still have high entropy without indicating packed code.
How widely this file has been seen
Widely seen in the wild for a long time. High prior this is legitimate; isolated detections on common-old files are usually false positives.
Chapter 05
Questions & answers
Short answers to the 7 questions people ask most about this file.
Is UnityPlayer safe?
What is UnityPlayer?
How many antivirus engines detected UnityPlayer?
Is UnityPlayer digitally signed?
What is the SHA-256 hash of UnityPlayer?
Is it safe to use UnityPlayer?
How up to date is this analysis of UnityPlayer?
Community
Member reviews and reports for this exact file hash.