RavenMeditation_Windows_09_21_2023[.]zip

resource
unpack001/RavenMeditation_Windows_09_17_2023/UnityCrashHandler64.exe
unpack001/RavenMeditation_Windows_09_17_2023/UnityPlayer.dll

resource
unpack001/RavenMeditation_Windows_09_17_2023/GameAssembly.dll
unpack001/RavenMeditation_Windows_09_17_2023/Raiven Meditation.exe
unpack001/RavenMeditation_Windows_09_17_2023/Raiven Meditation_Data/Plugins/x86_64/lib_burst_generated.dll
unpack001/RavenMeditation_Windows_09_17_2023/baselib.dll

RavenMeditation_Windows_09_21_2023.zip

SHA256 d25229855e9e4937eed72b77f9eda1df7ae364dacc9727b9491869f3619594c7
MD5 c51aa134cae70d16226fe1c662c60a89
SHA1 eca19cbd76bd0641638cbcb06539916d2d37f371
SHA512 10dc7f1e2233a8f67d4e49167b771950ae000f039a1f5152b99edab7ae128b1777bc4ce1311b301f6282e66755a0cff22c63cec64c54f28b603c06562c2a600a
SSDEEP 786432:BXI9Yp29+Gqevd2GNfY78a9IPNIVN2MzU8ZK1oTsN5wUwtZOBvAc/wgG6UE:BiYp29+k2GNg7SPN0zzRsN5wrtZQAcH1
TLSH
T1947733AA07988D5EC83490FBFF77CF8B002E467C0FF835056A3564AA4794A86797161F
MD5 SHA1 SHA512 SSDEEP TLSH

RavenMeditation_Windows_09_17_2023/GameAssembly.dll

IMPHASH b2be2923c88707d3006c6366fdab5730
SHA256 f07cf71b448173855ba6db6ed30dff0b6d6245ff80c3a1358b9e1a9affd3e785
MD5 a57704d833b5c46b81d94d090baa1d06
SHA1 46c8e99b2b354e2986d86e8248589fa93eb0c511
SHA512 1eb066e0e2a8b2054fddbfe480ba81357550f9efb455f99423486692f92ee1842addf13d5ca31d6cac86cc8b6149ef611a545906d9f0c1a95fcc2c33604ca206
SSDEEP 196608:CphHif1DWtKLjFGZt9yXYKXYb52eQrdVVdfBfgt0R91:Cp08tIuXyI+Yb52eMVdfBfgt0Rn
TLSH
T149074C9D76B54449C0BBD2B8C823440BD7F238042F786BC726A44B8D6F737D5AA76B21
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

1488932

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\UnityProjects\Raiven\Library\il2cpp_cache\linkresult_BE9F1D03BABC70CE5E52C4F0D87633A7\GameAssembly.pdb

kernel32

FlushFileBuffers GetFileAttributesExW GetFileSizeEx GetFileType GetFullPathNameW GetLongPathNameW ReadFile RemoveDirectoryW SetEndOfFile SetFilePointerEx WriteFile GetTempPathW IsDebuggerPresent CloseHandle DuplicateHandle RaiseException GetLastError SetLastError QueryPerformanceCounter QueryPerformanceFrequency GetOverlappedResult InitializeSRWLock ReleaseSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockExclusive AcquireSRWLockShared InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeConditionVariable WakeConditionVariable WakeAllConditionVariable SleepConditionVariableCS SetEvent ResetEvent ReleaseSemaphore ReleaseMutex SleepEx WaitForSingleObjectEx WaitForMultipleObjectsEx CreateMutexW CreateEventW Sleep CreateSemaphoreW QueueUserAPC GetCurrentProcess GetCurrentProcessId SwitchToThread CreateThread GetCurrentThread GetCurrentThreadId SetThreadPriority GetThreadPriority TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimes GetSystemInfo GetSystemTimeAsFileTime GetVersionExW GetNativeSystemInfo VirtualAlloc VirtualQuery CreateFileMappingW OpenFileMappingW MapViewOfFile UnmapViewOfFile FreeLibrary GetModuleFileNameW FindFirstFileExW GetProcAddress LoadLibraryW GlobalAlloc GlobalFree FormatMessageW GetComputerNameW GetTimeZoneInformation GetDynamicTimeZoneInformation GetFileInformationByHandleEx WideCharToMultiByte GetACP GetLocaleInfoW GetThreadLocale GetConsoleMode SetFilePointer GetExitCodeThread SuspendThread ResumeThread GetThreadContext VirtualFree GetProcessHeap GetCommandLineW GetCommandLineA FindClose DeleteFileW CreateFileW CreateDirectoryW GetCurrentDirectoryW SetStdHandle GetOEMCP IsValidCodePage WriteConsoleW HeapQueryInformation HeapSize HeapReAlloc EnumSystemLocalesW GetUserDefaultLCID IsValidLocale LCMapStringW CompareStringW FlsFree FlsSetValue FlsGetValue FlsAlloc HeapFree HeapAlloc GetConsoleOutputCP ReadConsoleW GetModuleHandleExW ExitProcess SetEnvironmentVariableW GetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW RtlUnwind LoadLibraryExW InterlockedFlushSList RtlPcToFileHeader RtlUnwindEx TerminateProcess InitializeSListHead IsProcessorFeaturePresent GetStartupInfoW SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext InitializeCriticalSectionAndSpinCount GetCPInfo GetStringTypeW LCMapStringEx MultiByteToWideChar DecodePointer EncodePointer InitializeCriticalSectionEx FindNextFileW GetStdHandle GetModuleHandleW RtlCaptureStackBackTrace

user32

MessageBoxA

advapi32

GetUserNameW CryptAcquireContextW CryptReleaseContext CryptGenRandom

ole32

CoCreateFreeThreadedMarshaler CoGetContextToken CoInitializeEx CoUninitialize CoTaskMemAlloc CoTaskMemFree

oleaut32

SafeArrayGetVartype SafeArrayAccessData SafeArrayGetUBound SafeArrayUnaccessData SafeArrayGetLBound SafeArrayGetDim SafeArrayDestroy SafeArrayCreate SysStringLen SysFreeString SysAllocStringLen

shell32

SHGetFolderPathW SHGetKnownFolderPath

ws2_32

WSACleanup WSAStartup gethostname gethostbyaddr socket shutdown setsockopt inet_ntop send select recvfrom ntohs WSASend listen inet_ntoa inet_addr htons htonl getsockopt getsockname getpeername ioctlsocket connect closesocket bind accept __WSAFDIsSet WSARecv WSAIoctl WSAGetLastError ntohl inet_pton getnameinfo freeaddrinfo getaddrinfo WSAPoll

iphlpapi

GetIfEntry GetAdaptersAddresses GetNetworkParams

baselib

?Baselib_SystemSemaphore_Free@il2cpp_baselib@@YAXUBaselib_SystemSemaphore_Handle@1@@Z ?Baselib_SystemSemaphore_Release@il2cpp_baselib@@YAXUBaselib_SystemSemaphore_Handle@1@I@Z ?Baselib_SystemSemaphore_Acquire@il2cpp_baselib@@YAXUBaselib_SystemSemaphore_Handle@1@@Z ?Baselib_SystemSemaphore_Create@il2cpp_baselib@@YA?AUBaselib_SystemSemaphore_Handle@1@XZ ?Baselib_Thread_GetCurrentThreadId@il2cpp_baselib@@YA_JXZ

CloseZStream CreateZStream DllCanUnloadNow DllGetActivationFactory Flush ReadZStream UnityPalGetLocalTimeZoneData UnityPalGetTimeZoneDataForID UnityPalTimeZoneInfoGetTimeZoneIDs UseUnityPalForTimeZoneInformation WriteZStream il2cpp_add_internal_call il2cpp_alloc il2cpp_allocation_granularity il2cpp_array_class_get il2cpp_array_element_size il2cpp_array_get_byte_length il2cpp_array_length il2cpp_array_new il2cpp_array_new_full il2cpp_array_new_specific il2cpp_array_object_header_size il2cpp_assembly_get_image il2cpp_bounded_array_class_get il2cpp_capture_memory_snapshot il2cpp_class_array_element_size il2cpp_class_enum_basetype il2cpp_class_for_each il2cpp_class_from_il2cpp_type il2cpp_class_from_name il2cpp_class_from_system_type il2cpp_class_from_type il2cpp_class_get_assemblyname il2cpp_class_get_bitmap il2cpp_class_get_bitmap_size il2cpp_class_get_data_size il2cpp_class_get_declaring_type il2cpp_class_get_element_class il2cpp_class_get_events il2cpp_class_get_field_from_name il2cpp_class_get_fields il2cpp_class_get_flags il2cpp_class_get_image il2cpp_class_get_interfaces il2cpp_class_get_method_from_name il2cpp_class_get_methods il2cpp_class_get_name il2cpp_class_get_namespace il2cpp_class_get_nested_types il2cpp_class_get_parent il2cpp_class_get_properties il2cpp_class_get_property_from_name il2cpp_class_get_rank il2cpp_class_get_static_field_data il2cpp_class_get_type il2cpp_class_get_type_token il2cpp_class_get_userdata_offset il2cpp_class_has_attribute il2cpp_class_has_parent il2cpp_class_has_references il2cpp_class_instance_size il2cpp_class_is_abstract il2cpp_class_is_assignable_from il2cpp_class_is_blittable il2cpp_class_is_enum il2cpp_class_is_generic il2cpp_class_is_inflated il2cpp_class_is_interface il2cpp_class_is_subclass_of il2cpp_class_is_valuetype il2cpp_class_num_fields il2cpp_class_set_userdata il2cpp_class_value_size il2cpp_current_thread_get_frame_at il2cpp_current_thread_get_stack_depth il2cpp_current_thread_get_top_frame il2cpp_current_thread_walk_frame_stack il2cpp_custom_attrs_construct il2cpp_custom_attrs_free il2cpp_custom_attrs_from_class il2cpp_custom_attrs_from_method il2cpp_custom_attrs_get_attr il2cpp_custom_attrs_has_attr il2cpp_debug_get_method_info il2cpp_debugger_set_agent_options il2cpp_domain_assembly_open il2cpp_domain_get il2cpp_domain_get_assemblies il2cpp_exception_from_name_msg il2cpp_field_get_flags il2cpp_field_get_name il2cpp_field_get_offset il2cpp_field_get_parent il2cpp_field_get_type il2cpp_field_get_value il2cpp_field_get_value_object il2cpp_field_has_attribute il2cpp_field_is_literal il2cpp_field_set_value il2cpp_field_set_value_object il2cpp_field_static_get_value il2cpp_field_static_set_value il2cpp_format_exception il2cpp_format_stack_trace il2cpp_free il2cpp_free_captured_memory_snapshot il2cpp_gc_collect il2cpp_gc_collect_a_little il2cpp_gc_disable il2cpp_gc_enable il2cpp_gc_foreach_heap il2cpp_gc_get_heap_size il2cpp_gc_get_max_time_slice_ns il2cpp_gc_get_used_size il2cpp_gc_has_strict_wbarriers il2cpp_gc_is_disabled il2cpp_gc_is_incremental il2cpp_gc_set_external_allocation_tracker il2cpp_gc_set_external_wbarrier_tracker il2cpp_gc_set_max_time_slice_ns il2cpp_gc_set_mode il2cpp_gc_start_incremental_collection il2cpp_gc_wbarrier_set_field il2cpp_gchandle_foreach_get_target il2cpp_gchandle_free il2cpp_gchandle_get_target il2cpp_gchandle_new il2cpp_gchandle_new_weakref il2cpp_get_corlib il2cpp_get_exception_argument_null il2cpp_image_get_assembly il2cpp_image_get_class il2cpp_image_get_class_count il2cpp_image_get_entry_point il2cpp_image_get_filename il2cpp_image_get_name il2cpp_init il2cpp_init_utf16 il2cpp_is_debugger_attached il2cpp_is_vm_thread il2cpp_method_get_class il2cpp_method_get_declaring_type il2cpp_method_get_flags il2cpp_method_get_from_reflection il2cpp_method_get_name il2cpp_method_get_object il2cpp_method_get_param il2cpp_method_get_param_count il2cpp_method_get_param_name il2cpp_method_get_return_type il2cpp_method_get_token il2cpp_method_has_attribute il2cpp_method_is_generic il2cpp_method_is_inflated il2cpp_method_is_instance il2cpp_monitor_enter il2cpp_monitor_exit il2cpp_monitor_pulse il2cpp_monitor_pulse_all il2cpp_monitor_try_enter il2cpp_monitor_try_wait il2cpp_monitor_wait il2cpp_native_stack_trace il2cpp_object_get_class il2cpp_object_get_size il2cpp_object_get_virtual_method il2cpp_object_header_size il2cpp_object_new il2cpp_object_unbox il2cpp_offset_of_array_bounds_in_array_object_header il2cpp_offset_of_array_length_in_array_object_header il2cpp_override_stack_backtrace il2cpp_profiler_install il2cpp_profiler_install_allocation il2cpp_profiler_install_enter_leave il2cpp_profiler_install_fileio il2cpp_profiler_install_gc il2cpp_profiler_install_thread il2cpp_profiler_set_events il2cpp_property_get_flags il2cpp_property_get_get_method il2cpp_property_get_name il2cpp_property_get_parent il2cpp_property_get_set_method il2cpp_raise_exception il2cpp_register_debugger_agent_transport il2cpp_register_log_callback il2cpp_resolve_icall il2cpp_runtime_class_init il2cpp_runtime_invoke il2cpp_runtime_invoke_convert_args il2cpp_runtime_object_init il2cpp_runtime_object_init_exception il2cpp_runtime_unhandled_exception_policy_set il2cpp_set_commandline_arguments il2cpp_set_commandline_arguments_utf16 il2cpp_set_config il2cpp_set_config_dir il2cpp_set_config_utf16 il2cpp_set_data_dir il2cpp_set_default_thread_affinity il2cpp_set_find_plugin_callback il2cpp_set_memory_callbacks il2cpp_set_temp_dir il2cpp_shutdown il2cpp_start_gc_world il2cpp_stats_dump_to_file il2cpp_stats_get_value il2cpp_stop_gc_world il2cpp_string_chars il2cpp_string_intern il2cpp_string_is_interned il2cpp_string_length il2cpp_string_new il2cpp_string_new_len il2cpp_string_new_utf16 il2cpp_string_new_wrapper il2cpp_thread_attach il2cpp_thread_current il2cpp_thread_detach il2cpp_thread_get_all_attached_threads il2cpp_thread_get_frame_at il2cpp_thread_get_stack_depth il2cpp_thread_get_top_frame il2cpp_thread_walk_frame_stack il2cpp_type_equals il2cpp_type_get_assembly_qualified_name il2cpp_type_get_attrs il2cpp_type_get_class_or_element_class il2cpp_type_get_name il2cpp_type_get_name_chunked il2cpp_type_get_object il2cpp_type_get_type il2cpp_type_is_byref il2cpp_type_is_pointer_type il2cpp_type_is_static il2cpp_unhandled_exception il2cpp_unity_install_unitytls_interface il2cpp_unity_liveness_calculation_begin il2cpp_unity_liveness_calculation_end il2cpp_unity_liveness_calculation_from_root il2cpp_unity_liveness_calculation_from_statics il2cpp_value_box

Name

.text

Size

1.6MB

Virtual Size

1.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

il2cpp

Size

10.2MB

Virtual Size

10.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2.5MB

Virtual Size

2.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1013KB

Virtual Size

3.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

656KB

Virtual Size

655KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

240KB

Virtual Size

240KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

RavenMeditation_Windows_09_17_2023/Raiven Meditation.exe

IMPHASH 5f74a5c747508e2822fdb9b687deaf42
SHA256 d5af48306a10ee515c18be643dcc1aebb79c9e824be764e5907a3a68f272a690
MD5 4c498054398728719b04e36c231af01c
SHA1 14915c6cd4468dc45fe0d3f5d1830b6817fdda4f
SHA512 7b3e8818ac84b91a5111a457b3fdf384693d601bf04ffdc5c1a74ee2734ba05206bb463909c7c6151c6ab4c806b1444c81f79a387ea74ab6ef48ffc9cc97b5f7
SSDEEP 3072:ygXpJozm2lkCspYDbMrqJ4fJJ1nQ+VY2xK/ImJvK/XA6oRfm5lbGcrp:VpC62lkCTIfJRVY5t3fgprp
TLSH
T1BAD4F6D377A50197E31EB3788CAECB35B320CDA1520E068E69FD7D63BDA528209516CD
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4704

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\buildslave\unity\build\artifacts\WindowsPlayer\Win64_VS2019_nondev_i_r\WindowsPlayer_Master_il2cpp_x64.pdb

Name

.text

Size

40KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

35KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

148B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

552KB

Virtual Size

552KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

RavenMeditation_Windows_09_17_2023/Raiven Meditation_Data/Plugins/x86_64/lib_burst_generated.dll

SHA256 f4e51d26ecc81431f45796a03607bd9efe6ba69e345abe2c0e497e0364a8e458
MD5 6e8564f95d3f99ae448ba9b8fab4bd55
SHA1 2e39d6d060b52b52f1d41dd0f7bf421a303e854e
SHA512 b8ab6d878b7f539fbaf284aa5f3cc74cdfcb4cba48e589a8c387b78e70d81ab47c7bcbfb508220d81a9ba38573f30c4b00ddfcf6f1e9a0abd25d8f77f035f9f0
SSDEEP 3072:5QNa0hM8OWakppWmMSLH7myUrA4VrlYQ6t3VWoKPS:5QNaCPOEW8H7fUrT5et3VWo
TLSH
T1A4E35CBC208764BDC52AC074067AD9A361E33C0A13854EE764D055B73DB6AE7AF7C82D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

122fae680333e8e2ba58f80110a0a78c 164a9957f2c75e5d4b481d1ceff90393 2434a4c10d01dbab5e7438b2b580d1d1 276b96e48754d7f5ba865bd7f5b37c11 2b06055de97035295dc032db19a3a735 36a800eeeae3c643da5520fa383c8c70 381a3a85c237f2f5ef34ba69d4bda072 428d454056b9288c93f4435d6e6f7fda 478bf3abafa12cba2083fb45bca79b9c 4a1dc7df3f09b836e86a41d0d8fb4229 59142aef52ef9b6ab273da58974494a1 68a8ea65a4f1ea752d1138be3be73a9a 6d933222c5b0c0c915d062861958d408 7194d9a68a20c1c6a01d3a365d4f21b9 89425a97f3f500fa810ad03f0c382542 8c2be93e18276203cbd918daa2748a10 93df17b7366cd622dfa5ea2d3c75cf0b 959783104064e8c81fba5d33d94ead01 a10c29fb1a626a4dab6bf90980926746 a185c62eba2497c95197140e5282b27a aece0ca012db7ae9f82cc8b3c490870a b0197e8b2118e6410ef3f798b24a1e6e b78f808503c8b5fe97a83e833bd5871d baf840f8150b604b0fd300ceb19dd50e burst.initialize burst.initialize.externals.122fae680333e8e2ba58f80110a0a78c_avx2 burst.initialize.externals.122fae680333e8e2ba58f80110a0a78c_x64_sse2 burst.initialize.externals.164a9957f2c75e5d4b481d1ceff90393_avx2 burst.initialize.externals.164a9957f2c75e5d4b481d1ceff90393_x64_sse2 burst.initialize.externals.2434a4c10d01dbab5e7438b2b580d1d1_avx2 burst.initialize.externals.2434a4c10d01dbab5e7438b2b580d1d1_x64_sse2 burst.initialize.externals.276b96e48754d7f5ba865bd7f5b37c11_avx2 burst.initialize.externals.276b96e48754d7f5ba865bd7f5b37c11_x64_sse2 burst.initialize.externals.2b06055de97035295dc032db19a3a735_avx2 burst.initialize.externals.2b06055de97035295dc032db19a3a735_x64_sse2 burst.initialize.externals.36a800eeeae3c643da5520fa383c8c70_avx2 burst.initialize.externals.36a800eeeae3c643da5520fa383c8c70_x64_sse2 burst.initialize.externals.381a3a85c237f2f5ef34ba69d4bda072_avx2 burst.initialize.externals.381a3a85c237f2f5ef34ba69d4bda072_x64_sse2 burst.initialize.externals.428d454056b9288c93f4435d6e6f7fda_avx2 burst.initialize.externals.428d454056b9288c93f4435d6e6f7fda_x64_sse2 burst.initialize.externals.478bf3abafa12cba2083fb45bca79b9c_avx2 burst.initialize.externals.478bf3abafa12cba2083fb45bca79b9c_x64_sse2 burst.initialize.externals.4a1dc7df3f09b836e86a41d0d8fb4229_avx2 burst.initialize.externals.4a1dc7df3f09b836e86a41d0d8fb4229_x64_sse2 burst.initialize.externals.59142aef52ef9b6ab273da58974494a1_avx2 burst.initialize.externals.59142aef52ef9b6ab273da58974494a1_x64_sse2 burst.initialize.externals.68a8ea65a4f1ea752d1138be3be73a9a_avx2 burst.initialize.externals.68a8ea65a4f1ea752d1138be3be73a9a_x64_sse2 burst.initialize.externals.6d933222c5b0c0c915d062861958d408_avx2 burst.initialize.externals.6d933222c5b0c0c915d062861958d408_x64_sse2 burst.initialize.externals.7194d9a68a20c1c6a01d3a365d4f21b9_avx2 burst.initialize.externals.7194d9a68a20c1c6a01d3a365d4f21b9_x64_sse2 burst.initialize.externals.89425a97f3f500fa810ad03f0c382542_avx2 burst.initialize.externals.89425a97f3f500fa810ad03f0c382542_x64_sse2 burst.initialize.externals.8c2be93e18276203cbd918daa2748a10_avx2 burst.initialize.externals.8c2be93e18276203cbd918daa2748a10_x64_sse2 burst.initialize.externals.93df17b7366cd622dfa5ea2d3c75cf0b_avx2 burst.initialize.externals.93df17b7366cd622dfa5ea2d3c75cf0b_x64_sse2 burst.initialize.externals.959783104064e8c81fba5d33d94ead01_avx2 burst.initialize.externals.959783104064e8c81fba5d33d94ead01_x64_sse2 burst.initialize.externals.a10c29fb1a626a4dab6bf90980926746_avx2 burst.initialize.externals.a10c29fb1a626a4dab6bf90980926746_x64_sse2 burst.initialize.externals.a185c62eba2497c95197140e5282b27a_avx2 burst.initialize.externals.a185c62eba2497c95197140e5282b27a_x64_sse2 burst.initialize.externals.aece0ca012db7ae9f82cc8b3c490870a_avx2 burst.initialize.externals.aece0ca012db7ae9f82cc8b3c490870a_x64_sse2 burst.initialize.externals.b0197e8b2118e6410ef3f798b24a1e6e_avx2 burst.initialize.externals.b0197e8b2118e6410ef3f798b24a1e6e_x64_sse2 burst.initialize.externals.b78f808503c8b5fe97a83e833bd5871d_avx2 burst.initialize.externals.b78f808503c8b5fe97a83e833bd5871d_x64_sse2 burst.initialize.externals.baf840f8150b604b0fd300ceb19dd50e_avx2 burst.initialize.externals.baf840f8150b604b0fd300ceb19dd50e_x64_sse2 burst.initialize.externals.ca60ab232d19a9f4380a530fa0d222cf_avx2 burst.initialize.externals.ca60ab232d19a9f4380a530fa0d222cf_x64_sse2 burst.initialize.externals.cf20d690c33ab495d44c548cd6a31428_avx2 burst.initialize.externals.cf20d690c33ab495d44c548cd6a31428_x64_sse2 burst.initialize.externals.da352d92cabf024fc9986011d52a4537_avx2 burst.initialize.externals.da352d92cabf024fc9986011d52a4537_x64_sse2 burst.initialize.externals.f7daf29273ab2f86d86c27c3a1d6eeb5_avx2 burst.initialize.externals.f7daf29273ab2f86d86c27c3a1d6eeb5_x64_sse2 burst.initialize.externals.f9554e48e09171c93d417c182c09c36b_avx2 burst.initialize.externals.f9554e48e09171c93d417c182c09c36b_x64_sse2 burst.initialize.statics.122fae680333e8e2ba58f80110a0a78c_avx2 burst.initialize.statics.122fae680333e8e2ba58f80110a0a78c_x64_sse2 burst.initialize.statics.164a9957f2c75e5d4b481d1ceff90393_avx2 burst.initialize.statics.164a9957f2c75e5d4b481d1ceff90393_x64_sse2 burst.initialize.statics.2434a4c10d01dbab5e7438b2b580d1d1_avx2 burst.initialize.statics.2434a4c10d01dbab5e7438b2b580d1d1_x64_sse2 burst.initialize.statics.276b96e48754d7f5ba865bd7f5b37c11_avx2 burst.initialize.statics.276b96e48754d7f5ba865bd7f5b37c11_x64_sse2 burst.initialize.statics.2b06055de97035295dc032db19a3a735_avx2 burst.initialize.statics.2b06055de97035295dc032db19a3a735_x64_sse2 burst.initialize.statics.36a800eeeae3c643da5520fa383c8c70_avx2 burst.initialize.statics.36a800eeeae3c643da5520fa383c8c70_x64_sse2 burst.initialize.statics.381a3a85c237f2f5ef34ba69d4bda072_avx2 burst.initialize.statics.381a3a85c237f2f5ef34ba69d4bda072_x64_sse2 burst.initialize.statics.428d454056b9288c93f4435d6e6f7fda_avx2 burst.initialize.statics.428d454056b9288c93f4435d6e6f7fda_x64_sse2 burst.initialize.statics.478bf3abafa12cba2083fb45bca79b9c_avx2 burst.initialize.statics.478bf3abafa12cba2083fb45bca79b9c_x64_sse2 burst.initialize.statics.4a1dc7df3f09b836e86a41d0d8fb4229_avx2 burst.initialize.statics.4a1dc7df3f09b836e86a41d0d8fb4229_x64_sse2 burst.initialize.statics.59142aef52ef9b6ab273da58974494a1_avx2 burst.initialize.statics.59142aef52ef9b6ab273da58974494a1_x64_sse2 burst.initialize.statics.68a8ea65a4f1ea752d1138be3be73a9a_avx2 burst.initialize.statics.68a8ea65a4f1ea752d1138be3be73a9a_x64_sse2 burst.initialize.statics.6d933222c5b0c0c915d062861958d408_avx2 burst.initialize.statics.6d933222c5b0c0c915d062861958d408_x64_sse2 burst.initialize.statics.7194d9a68a20c1c6a01d3a365d4f21b9_avx2 burst.initialize.statics.7194d9a68a20c1c6a01d3a365d4f21b9_x64_sse2 burst.initialize.statics.89425a97f3f500fa810ad03f0c382542_avx2 burst.initialize.statics.89425a97f3f500fa810ad03f0c382542_x64_sse2 burst.initialize.statics.8c2be93e18276203cbd918daa2748a10_avx2 burst.initialize.statics.8c2be93e18276203cbd918daa2748a10_x64_sse2 burst.initialize.statics.93df17b7366cd622dfa5ea2d3c75cf0b_avx2 burst.initialize.statics.93df17b7366cd622dfa5ea2d3c75cf0b_x64_sse2 burst.initialize.statics.959783104064e8c81fba5d33d94ead01_avx2 burst.initialize.statics.959783104064e8c81fba5d33d94ead01_x64_sse2 burst.initialize.statics.a10c29fb1a626a4dab6bf90980926746_avx2 burst.initialize.statics.a10c29fb1a626a4dab6bf90980926746_x64_sse2 burst.initialize.statics.a185c62eba2497c95197140e5282b27a_avx2 burst.initialize.statics.a185c62eba2497c95197140e5282b27a_x64_sse2 burst.initialize.statics.aece0ca012db7ae9f82cc8b3c490870a_avx2 burst.initialize.statics.aece0ca012db7ae9f82cc8b3c490870a_x64_sse2 burst.initialize.statics.b0197e8b2118e6410ef3f798b24a1e6e_avx2 burst.initialize.statics.b0197e8b2118e6410ef3f798b24a1e6e_x64_sse2 burst.initialize.statics.b78f808503c8b5fe97a83e833bd5871d_avx2 burst.initialize.statics.b78f808503c8b5fe97a83e833bd5871d_x64_sse2 burst.initialize.statics.baf840f8150b604b0fd300ceb19dd50e_avx2 burst.initialize.statics.baf840f8150b604b0fd300ceb19dd50e_x64_sse2 burst.initialize.statics.ca60ab232d19a9f4380a530fa0d222cf_avx2 burst.initialize.statics.ca60ab232d19a9f4380a530fa0d222cf_x64_sse2 burst.initialize.statics.cf20d690c33ab495d44c548cd6a31428_avx2 burst.initialize.statics.cf20d690c33ab495d44c548cd6a31428_x64_sse2 burst.initialize.statics.da352d92cabf024fc9986011d52a4537_avx2 burst.initialize.statics.da352d92cabf024fc9986011d52a4537_x64_sse2 burst.initialize.statics.f7daf29273ab2f86d86c27c3a1d6eeb5_avx2 burst.initialize.statics.f7daf29273ab2f86d86c27c3a1d6eeb5_x64_sse2 burst.initialize.statics.f9554e48e09171c93d417c182c09c36b_avx2 burst.initialize.statics.f9554e48e09171c93d417c182c09c36b_x64_sse2 ca60ab232d19a9f4380a530fa0d222cf cf20d690c33ab495d44c548cd6a31428 da352d92cabf024fc9986011d52a4537 f7daf29273ab2f86d86c27c3a1d6eeb5 f9554e48e09171c93d417c182c09c36b

RavenMeditation_Windows_09_17_2023/Raiven Meditation_Data/Resources/unity default resources

SHA256 175562137243739b2c9549b8bbe13bc730324972dfbaff4601c22645cc4ff18e
MD5 4b36bcef394bc13d5b7063215497990c
SHA1 c4a0794f1f0f030cf3810ddd05adeb702886b9bb
SHA512 4bf2378bd346ef3c8579cd2855f9f310c0400515396ece60dcc59f2c5d2b745634969050a63251028b4df9cb027dcba3f444bdacbdc7e5e566cf26473ea2a748
SSDEEP 6144:v0p1zj6Ipj/LdeK7aFAc3OE7pEODIh703YWO/OJ9WqWmKySHCkcC1Fdj38mXpgkQ:M4A6T8hNPOjdWZZFdrA7n
TLSH
T1142619035A61F49AD857203D4E730DE0D16F96F8C6D64F82271B2138EBF35E676229E8
MD5 SHA1 SHA512 SSDEEP TLSH

RavenMeditation_Windows_09_17_2023/Raiven Meditation_Data/Resources/unity_builtin_extra

SHA256 ddb5dd6a65f13e10ce502aa60a4310d9fbb4d6192988199ab1c8794c485a183e
MD5 c1b040b435410f895b9a5db9b08e81fc
SHA1 5023b0f0028cf2e983dda3777895f9197c8e9447
SHA512 65990df565edfa8c345ea323dbcc67b15dffc319267d96b1eedb12d7938d18e2a75efeab07da6be115ee7cb4a1cb36145c12d062c5613dd9d5b521e18c6aca6b
SSDEEP 1536:ztAZ0gtDkIYWwzORu/9pab1ST4MaZ9inb8iGMEi+Mi+Zm6X1jrH8ieiNjrHpi273:5gtwIIquab1SZsw7pi2sTa5TXn6biF/
TLSH
T12674C47D635B597FCC20193748690B73973265F81BED4F276E6C2FAC29EA248AB14700
MD5 SHA1 SHA512 SSDEEP TLSH

RavenMeditation_Windows_09_17_2023/Raiven Meditation_Data/RuntimeInitializeOnLoads.json

SHA256 b826852b6a5524269c61b5f280b4ca9bc3f7fd68449b9e6f25346fbdf0f48f58
MD5 56c5211578fce611cf4be88e493a980a
SHA1 4f1de176bb74b604574781ce797a8a3619b618c2
SHA512 cfcb7c5b78c16610f03f031c5aaa7fd76ad7fad2fcf6f75ff72169e1ed46dc38e931f1e0b40aef66e2424b62d4ff7e93657f85ae12ba2e92d30ebb400fc1a7a1
TLSH
T1DD01526C32C68F3F2F8FEB91B9E6175938B4091F5BC70C41D97C6E2B665B3821485468
MD5 SHA1 SHA512 TLSH

RavenMeditation_Windows_09_17_2023/Raiven Meditation_Data/ScriptingAssemblies.json

SHA256 08ba6e36c8561fead51fbaf637b510c46eb5c1746fb48d72c53805153734ac3d
MD5 9df0d4aa2de6b2ef7eff4b95d5295e9e
SHA1 9e1b888d835fd1569e6c55e956cf1bfd3999b126
SHA512 5b0bc76d82413cc977997d090b6a16f2d0d389ec7da9b2a31990706c0108e4a251604c98d43e6c66633c89ab9154ab47d010f7a2132d608b337bd29cf1b35349
TLSH
T16651AEF6D18B26C71ECD5ED38C389CCC39D300A20A6490650EBEA39FA938CD63D096D5
MD5 SHA1 SHA512 TLSH

RavenMeditation_Windows_09_17_2023/Raiven Meditation_Data/StreamingAssets/2DAnimationSampleAssetBundles/2DAnimationSampleAssetBundles

SHA256 885f8ecf3f62f16285fe7258381e462afb932edb76d08a7a8c8fd4c82f22973c
MD5 d7cb6cd4c137fb25f5cb9bf24b9e78e3
SHA1 33c85636538fdf0ab0ec87d3817ff818a52aa95e
SHA512 b72ab9fcd582c8ca9e3b6d4f411c8fc773fb64496b4c40e1addd2c6543237fcdd066cff35cd0acdeae613a992207c0bdb877c04ba14a58b251faf7ad3e3cc5e5
TLSH
T14311D8078F778910DD04DF300272783813AC693195C0FF5DA1707CDB5542556414E8D8
MD5 SHA1 SHA512 TLSH

RavenMeditation_Windows_09_17_2023/Raiven Meditation_Data/StreamingAssets/2DAnimationSampleAssetBundles/2DAnimationSampleAssetBundles.manifest

SHA256 58535ff039cf1c58b25bf7312ab2f685b700ebeb7e1f4167890ce9a7c8bec034
MD5 8186531b44bcdc711bd9b62bb4235099
SHA1 a03ef0978f293e834a5f998d1e615240edb803bd
SHA512 463ae4889f5d91e067ef6e7db07963ae6d8869d7fd998f97d41ebb58e83d37be214e701c20a3ac7f323e2f9610c57579ce90b3b63f358e81f72d47664748ccb7
TLSH
T1ACC0120004497603E129D5E15479A2332143EA5F541AC46872CD27153F4E3D561764F4
MD5 SHA1 SHA512 TLSH

RavenMeditation_Windows_09_17_2023/Raiven Meditation_Data/StreamingAssets/2DAnimationSampleAssetBundles/rikrpoison

SHA256 6f45942d1576dbf86edebc59ecaa7f0a19f5f8cae681ff604688031b89829b1f
MD5 96bef523758442e7eb0a613b7db326a5
SHA1 8dd1c08d099d12673b764daeb34585dee4ec414a
SHA512 00a0de0f57f6c4523e9900c5c28c7f1c524359ee541b6986e493f0b7021d462063f8c8153974e039616e64c9501beeb46e9f03254fb1e1a31238ea94f427a69f
SSDEEP 6144:btaEWRwd/fsnQU260ANJml2cEgOQHWdzeV7UwHs8vmpgIB01PYZjSdK8teQKI/bk:btzWR43iQUlN/Y2dzSJHs8vmpFS6xsKr
TLSH
T12C8423E58CB60ED9E5390265779BB286EEEB009DF9170EDC78F0055E02D20D4BA6C4CB
MD5 SHA1 SHA512 SSDEEP TLSH

RavenMeditation_Windows_09_17_2023/Raiven Meditation_Data/StreamingAssets/2DAnimationSampleAssetBundles/rikrpoison.manifest

SHA256 b864da8442720c7623a091a0e137f86e58d16baad55ffbca7dc5018831f844ca
MD5 03ef2806e6fb55b4f0369614207be3ae
SHA1 8316ac9e3ee8e981ed4fa39f214de38e319f2148
SHA512 26d986812bc501ce8bcc4750dd3ff3ee2f9b35c4ad978d69501ce11ab437a6931898deea5ff2b20f5678194f79934d095d0ad2635d862cb7c792aab3922b3c1e
TLSH
T1F401CB48B918A99296DF8BC34039C2CE8071B123C515F79CEDBC1A8413CA6AC13BE77C
MD5 SHA1 SHA512 TLSH

RavenMeditation_Windows_09_17_2023/Raiven Meditation_Data/StreamingAssets/2DAnimationSampleAssetBundles/rikrrage

SHA256 2db98434a444008ee3c542c51034498f840507f26843517724252f77e6e093c6
MD5 259bdc35b89ead5d5660a41a7e10fcb1
SHA1 5d26313a5f3b274782c74000ad447af4f9553bc8
SHA512 8b4889bd8baec20fa8eb481f7db38e82665c85f5b3190c57447dc926e04eb1bd439e9a6acf62a3a7543998ce32d99d46f0dfb5e86262cb0aa419958f8930c2b3
SSDEEP 6144:yc0kGlCBGBTb0KNAmPEkpXr/ep6JzEt9SMlv/6q7q4zZC25dDQq62YlS96B:ycJhGBTrNAmPbVr/8MzI937XVrMr9
TLSH
T1BD7423A438CFF57CBDEA43C1C29DA680F7F406BA1DC6B1CD49526C6911BBAC62B1E404
MD5 SHA1 SHA512 SSDEEP TLSH

RavenMeditation_Windows_09_17_2023/Raiven Meditation_Data/StreamingAssets/2DAnimationSampleAssetBundles/rikrrage.manifest

SHA256 6d39c3c6c012b2674946338c35b595440189da3efe54815c1098954e12a22d1b
MD5 0d0a1435a411d1360872f56baa5c0087
SHA1 42214196331874f469aa765163d75e33dc3a1a3e
SHA512 95d818ca05fda15a8f97528e6373348360a00b474ad5a4bf3d3f1ff58d64becaedf049a49990ada479b3c1ab37864b67748754419cf596e74d98239363dd10e9
TLSH
T1F401CB487A2891A28BDF9A934075C28E4071B123D045F3ACA9BC090413CA95C13BEB7C
MD5 SHA1 SHA512 TLSH

RavenMeditation_Windows_09_17_2023/Raiven Meditation_Data/app.info

SHA256 c2ab12f8fad875383d492f3c58258f78b54e5064eb5b6604203e071357ebb90d
MD5 a931ffc306ca47b9c0139873e3f1351a
SHA1 985eb8bca4108f8240f1565eb8a004175bd4c4c3
SHA512 97eb335d16a9291bb063ea6fbcdd8549cba82c81140524b1bb6cb9df6844eeb2860c0e20bb6d7de77de80b85b19437a4635d9d549f38ee7dfd09ed3fe23de06c
MD5 SHA1 SHA512

RavenMeditation_Windows_09_17_2023/Raiven Meditation_Data/boot.config

SHA256 25202c8f0caa8139d220c1db829ac0445de52047059b03c920c7d145ddfeb4ba
MD5 2b77119d737c1c2caf66bc03e37efed2
SHA1 07516483372e39b828f8a4d8a6f3e13f2a607b22
SHA512 53de04a485fc86e9327e39f6c2efce794f44295817f7106fc66e814e3f690209ee04c33b08c21dd951a15fbe472bf7b5a92acec465130319b85fa5ac09f9baf2
TLSH
T16CA00244F6FC3B8562C8C016A8EA6ED3F77A8546541A35FAF6D021A8336980D66039B2
MD5 SHA1 SHA512 TLSH

RavenMeditation_Windows_09_17_2023/Raiven Meditation_Data/globalgamemanagers

SHA256 1896a1e0c2d5ecd7a0263516207ff0a34ad3e2dbc53b55790d2ceaf7f2a912f7
MD5 e6f73112517f79531f5747e3260a8ec8
SHA1 4338d8e219c18300811d27aca282b5f704e9cfde
SHA512 149b13865aa21df7d59915af951a7583bacb4ca5fa7883ad37f32cb51efbe6f9aace798c8ded4bb5dcf41d78d90da341b234c631e13f79d14cf94741ddb3dac0
SSDEEP 768:nP2lqkNt/w0l0HwV6F4OEObCbNqGLRqJuvdAJlN/+SWQ:nOlqkj/w3HwV6aOZbC/REuuJSSW
TLSH
T18563175ADF82CD97C423AABACCB50A02BB71FCC54716CB1752707D781CBA3994DC4A4A
MD5 SHA1 SHA512 SSDEEP TLSH

RavenMeditation_Windows_09_17_2023/Raiven Meditation_Data/globalgamemanagers.assets

SHA256 cd2b2f133329ea69148d3d2a0c2f91ce01a1669a5a701350119a2a09d8d9d9e1
MD5 112c6dbe4c1c7eda39f072a48547fc52
SHA1 cc462efae50341874c5337fc534ee97d30c4604e
SHA512 ce7cac98f4172372eed845b5780e15fba054524565bbdf7d0be55e93f4251d15d1039063cf55eaababed31b3994893ba691a9e30ecf1dd71ce6f8954a87ba03a
SSDEEP 1536:hB6WUh7uVgKmMjJY4GoYG3fxSN4QcXt+f211jEfwogatebwirSWC3/l1:hB60VgKmMjnSyGgLSxl1
TLSH
T1DCC3EFF323841D97DD88293B4D71474C36B086B74BE4A23676F4B954A97E28E2F72321
MD5 SHA1 SHA512 SSDEEP TLSH

RavenMeditation_Windows_09_17_2023/Raiven Meditation_Data/il2cpp_data/Metadata/global-metadata.dat

SHA256 1c739c2988a8f31eca1aaa99c747dff7497be3a9f9e7e800f48f17afdc45ac16
MD5 dd869e01213839a67895271b45030082
SHA1 d5ce620d45abfe7e04b6c32f17ad2ac01e8f140f
SHA512 21d89714a0e2bc11ffd79e14726b1d29c84351ea2e92b15d7fcfa6edbed41fad8ea7675956260bb553532c431fed78ca0a9581e6fc8984c01ffe727e795ce892
SSDEEP 49152:NsQ8x9SwlhrVU4CUeZIgA6weQ+4QDSl3dQfuuXczKIrxkpa21K8JXC:NtnA6weZDSl3KpnIrxkpa2vS
TLSH
T16616D721FAA0D6A9C15911B64C4E83CC5730ADCBDF0A971B3348B77D7872158BEA76C8
MD5 SHA1 SHA512 SSDEEP TLSH

RavenMeditation_Windows_09_17_2023/Raiven Meditation_Data/il2cpp_data/Resources/mscorlib.dll-resources.dat

SHA256 c5baa176a5b72cd545266340e42102d393a5e43d38c95796bc828918bb95277f
MD5 21d06dbc8af6432b2b49536ed30609af
SHA1 11a1c0e2ab2f8c06fe4507535ed47e0dd279a60d
SHA512 2971f54eaa14c3ce6e2352e5a1aea5b044f0894bf4eac92de8cd92515b6473b5ca56ebfcad4369a9d4935cbefea2540a83f332fd4d832c37768310e8776ceb5e
SSDEEP 3072:c5j+evAPQ48RhHkXKSmLZsumnWpevI1kMqXkD3by+BEL:crvS8rHXSmJmnjvXkSr
TLSH
T1F7746CD8B5728E76FE57A9BCE85E928D43D9C1E2C182523B3D75C2E04D52386181EE3C
MD5 SHA1 SHA512 SSDEEP TLSH

RavenMeditation_Windows_09_17_2023/Raiven Meditation_Data/il2cpp_data/etc/mono/2.0/Browsers/Compat.browser

SHA256 8a1082057ac5681dcd4e9c227ed7fb8eb42ac1618963b5de3b65739dd77e2741
MD5 0d831c1264b5b32a39fa347de368fe48
SHA1 187dff516f9448e63ea5078190b3347922c4b3eb
SHA512 4b7549eda1f8ed2c4533d056b62ca5030445393f9c6003e5ee47301ff7f44b4bd5022b74d54f571aa890b6e4593c6eded1a881500ac5ba2a720dc0ff280300af
TLSH
T1EA3171A238DCACE0ED7300B3FA1F14897F1A897F5B8A1505748BA1560B019B443BB39D
MD5 SHA1 SHA512 TLSH

RavenMeditation_Windows_09_17_2023/Raiven Meditation_Data/il2cpp_data/etc/mono/2.0/DefaultWsdlHelpGenerator.aspx

SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
MD5 f7be9f1841ff92f9d4040aed832e0c79
SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
TLSH
T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
MD5 SHA1 SHA512 SSDEEP TLSH

RavenMeditation_Windows_09_17_2023/Raiven Meditation_Data/il2cpp_data/etc/mono/2.0/machine.config

SHA256 edc5bcf685d930a607bc097927260a3f9ac7f52dd809db68158298bfd934b7ce
MD5 cad24142abba464dd90777c3d347ef88
SHA1 d8db7111fce5a08d8b7c9a6e1e0ad2fbf34cfe12
SHA512 5d3ee2ee7921c95cc30790ae670fcadcf091d4fa1b9b5e1b9c7500c67230abe25467236ed160c51aa662e764ccea10e4955887359a65b09432b727abf27f8454
SSDEEP 384:PbBtBtWR5RwRqrR2RN3RPfRaRvRyRaRIKbX/y4RpQXWBE43g:DuY
TLSH
T11ED203703609BDAE494227235C54FA8046BF57196BA86D0CB5FF625CFE2688BD3032D7
MD5 SHA1 SHA512 SSDEEP TLSH

RavenMeditation_Windows_09_17_2023/Raiven Meditation_Data/il2cpp_data/etc/mono/2.0/settings.map

SHA256 49c6160f9d54af4270a3b4e997fc4a8301f79b9e2070118fa46ddbcbbc44f9a2
MD5 22c818a23169e12bd3c8587b6394c731
SHA1 dd2be2dbccd34736719301aee92429d4258ea5a0
SHA512 c1352e817e01277413a1790a94a4f979dc1b8333874fef28d735441c034c97bf8ce501fd9cd04c47d25541a0c1d54fcd4dd3bee9ac3e8fbde83ada9a1d2662d7
TLSH
T1D3511138F708B5F50682052EA45A94D243B6023FA779495C71ECC13D6F2684B83B32DD
MD5 SHA1 SHA512 TLSH

RavenMeditation_Windows_09_17_2023/Raiven Meditation_Data/il2cpp_data/etc/mono/2.0/web.config

SHA256 3c1a76a5849074b437d297656a208a3bef6d84b982153542b9c797046c601dfc
MD5 2b6303c4f12762b71051db6e947f90a4
SHA1 a4d7e05516f63d6ab67327b299d4fb2852cb840b
SHA512 80f5da60654e1851ef21526e434b32d94e18883a08bacbbaa0e1f85b80469c46510b6ddb9b429f16cc4be89c6f2bb2627bbae9cb1d0c7e45b665efb7721c6d86
SSDEEP 192:wcedeaZ0sEMYaWN5bs6yyzEVkEYEG/Z1f5v6CuCCrtQzPwkP/waeKjy:wj5YaWPs6/1zwya
TLSH
T1FE32BD34171DEDDD8B9066530420ABE162BF9B5A2744CD4CF1EF2329EB5548BE3611E3
MD5 SHA1 SHA512 SSDEEP TLSH

RavenMeditation_Windows_09_17_2023/Raiven Meditation_Data/il2cpp_data/etc/mono/4.0/Browsers/Compat.browser

SHA256 8a1082057ac5681dcd4e9c227ed7fb8eb42ac1618963b5de3b65739dd77e2741
MD5 0d831c1264b5b32a39fa347de368fe48
SHA1 187dff516f9448e63ea5078190b3347922c4b3eb
SHA512 4b7549eda1f8ed2c4533d056b62ca5030445393f9c6003e5ee47301ff7f44b4bd5022b74d54f571aa890b6e4593c6eded1a881500ac5ba2a720dc0ff280300af
TLSH
T1EA3171A238DCACE0ED7300B3FA1F14897F1A897F5B8A1505748BA1560B019B443BB39D
MD5 SHA1 SHA512 TLSH

RavenMeditation_Windows_09_17_2023/Raiven Meditation_Data/il2cpp_data/etc/mono/4.0/DefaultWsdlHelpGenerator.aspx

SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
MD5 f7be9f1841ff92f9d4040aed832e0c79
SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
TLSH
T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
MD5 SHA1 SHA512 SSDEEP TLSH

RavenMeditation_Windows_09_17_2023/Raiven Meditation_Data/il2cpp_data/etc/mono/4.0/machine.config

SHA256 6919d5af506aae0d93e91bd83418a81895a5554b9f54cf94aad20d025a4db664
MD5 24c866ce8037fcdca2287234eddff637
SHA1 9245befcd116458e9619694f1a785c50fa61b58e
SHA512 f9960b5d5e7db35fe4a492dbba1f90cd0f0f0c4d84349baf33de3a941de57cffdec670b5be9862306503f7b5d57a697208921e7099cea13d4daf3310840ff4d2
SSDEEP 384:PbtltttttSRtNRtcRtGrRtSRtBDRp5Rt70gRt2RtTf1RDRty6ugyunHMSeuWuGR0:7Kn
TLSH
T1FAE2F0703609BDEE08432B235C6499C447BF57096AA86C4CB5FF725CEE2688B97132D7
MD5 SHA1 SHA512 SSDEEP TLSH

RavenMeditation_Windows_09_17_2023/Raiven Meditation_Data/il2cpp_data/etc/mono/4.0/settings.map

SHA256 ce1db1ad8a9512073164e3eccdc193f7eda036e1a9733caec4635de21b2865c8
MD5 ba17ade8a8e3ee221377534c8136f617
SHA1 8e17e2aec423a8e6fb43e8cbe6215040217bb8a3
SHA512 c18bcbcbd4b9a20a72b1a934d70db1eafef047f34f3ba2c6357d8e3afed07ecaab861e5571ceb58c22d4d3e5ebb34b51e366a0553c3153fbc263d1d80472e297
TLSH
T1DF511238F748B5F50682092EA45A84D243B6063FB679499C71ECD13D6F2684B93B32DD
MD5 SHA1 SHA512 TLSH

RavenMeditation_Windows_09_17_2023/Raiven Meditation_Data/il2cpp_data/etc/mono/4.0/web.config

SHA256 f1a6416eeedd9d040387fd85dcf7d6e074b6644c6829d08be220ff9fc32efb31
MD5 b127480ee9f0b8dab6a3f73ad79dd332
SHA1 7d776d730cbd253564713f36573dd8366782788c
SHA512 00ddca43ad38127cf71477810c46617fc2ccdc33f197e26ba761151107eff701fec2caa51e43575fb5b4fbc11f640f525ba70b6b3e97811cecabc63773492401
SSDEEP 384:lJJuAr8F1mJ1ayCk5+HK5YaW41DBWTwahst/tlLvSqwwU4FVXaS7L3nHIXYFXc//:jbpJX91Xbi
TLSH
T1E1820030472EDEDE8E522B9355208A9272AB575B23449C8CF1FF2365EB46487D3321E7
MD5 SHA1 SHA512 SSDEEP TLSH

RavenMeditation_Windows_09_17_2023/Raiven Meditation_Data/il2cpp_data/etc/mono/4.5/Browsers/Compat.browser

SHA256 8a1082057ac5681dcd4e9c227ed7fb8eb42ac1618963b5de3b65739dd77e2741
MD5 0d831c1264b5b32a39fa347de368fe48
SHA1 187dff516f9448e63ea5078190b3347922c4b3eb
SHA512 4b7549eda1f8ed2c4533d056b62ca5030445393f9c6003e5ee47301ff7f44b4bd5022b74d54f571aa890b6e4593c6eded1a881500ac5ba2a720dc0ff280300af
TLSH
T1EA3171A238DCACE0ED7300B3FA1F14897F1A897F5B8A1505748BA1560B019B443BB39D
MD5 SHA1 SHA512 TLSH

RavenMeditation_Windows_09_17_2023/Raiven Meditation_Data/il2cpp_data/etc/mono/4.5/DefaultWsdlHelpGenerator.aspx

SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
MD5 f7be9f1841ff92f9d4040aed832e0c79
SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
TLSH
T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
MD5 SHA1 SHA512 SSDEEP TLSH

RavenMeditation_Windows_09_17_2023/Raiven Meditation_Data/il2cpp_data/etc/mono/4.5/machine.config

SHA256 ef9b9387168fd1dd6c996f96c134d9c44f8eb06f9587004bf997252a520182d6
MD5 0869544722561f5aff0eefc83fc7b001
SHA1 1e118f4b5c1c6a7b1858e3fccb1b1d1095561976
SHA512 ced7c9a5363cabdb87b01ed6b4ca190a690640dddf5cbcc0438acdc611a8ee942cb6cd73c78d3fc2d59f70171f22ac832a10b1e23758dc92599ee24acd978ac2
SSDEEP 384:PbtltttttSRtNRtcRtGrRtSRtTf5Rt70zDgRt2Rtuj4f1RDRty6ugyunHMSeuWuh:dkn
TLSH
T13CE2F1703609BDEE08432B235C6499C447BF57096AA86C4CB5FF725CEE2688B97132D7
MD5 SHA1 SHA512 SSDEEP TLSH

RavenMeditation_Windows_09_17_2023/Raiven Meditation_Data/il2cpp_data/etc/mono/4.5/settings.map

SHA256 ce1db1ad8a9512073164e3eccdc193f7eda036e1a9733caec4635de21b2865c8
MD5 ba17ade8a8e3ee221377534c8136f617
SHA1 8e17e2aec423a8e6fb43e8cbe6215040217bb8a3
SHA512 c18bcbcbd4b9a20a72b1a934d70db1eafef047f34f3ba2c6357d8e3afed07ecaab861e5571ceb58c22d4d3e5ebb34b51e366a0553c3153fbc263d1d80472e297
TLSH
T1DF511238F748B5F50682092EA45A84D243B6063FB679499C71ECD13D6F2684B93B32DD
MD5 SHA1 SHA512 TLSH

RavenMeditation_Windows_09_17_2023/Raiven Meditation_Data/il2cpp_data/etc/mono/4.5/web.config

SHA256 15a2c7a9242bf54d3ccb3e07fa6d8f84ba8b303d8877243787a1103009941bdb
MD5 08101241b15b53ef0ab908f6d388881f
SHA1 ea3e2ad6d71d483c54b12852dcbdcd0baa569988
SHA512 a1ee7f17bb069ac42483d1f98ca839ff1bd06f3fc15cd379dff4aca3732a5dac24dc17e15acc8f8fa39e60e186219f4fd70664f9ea284002274a4ff8609791ed
SSDEEP 384:lJJuAr8F1mJ1ayCk5+HK5YaW41DBWTwa6st/tlLvSqwwU4FVXaS7L3nHIXYFXc//:jbpJi91Xbi
TLSH
T14D820030472EDEDE8E522B9355208A9272AB575B23449C8CF1FF2365EB46487D3321E7
MD5 SHA1 SHA512 SSDEEP TLSH

RavenMeditation_Windows_09_17_2023/Raiven Meditation_Data/il2cpp_data/etc/mono/browscap.ini

SHA256 4ddd50f31fb968f30bedefc253a46dc3f2890192d05cdaa9e0a64a056eee807e
MD5 378be809df7d15aac75a175693e25fbb
SHA1 2d5454e161de8a5b65910f27bd70d9d0ad8fa476
SHA512 d0d181e806cbd2c016eb0a8786f7d9db877463eaac0195db4e891be111c9ed87491a1abcfa0d9ed7c2743e004e1f4a3f4789333d0b535e63358c672ae833c363
SSDEEP 1536:D+dN5JLXlU4XteKJeYPMxBUm9huPj3bkeoO3cTKr0AzhjRzi0v5XfDlVlvr778BN:DYPEBOPjLkeOTA0AzhJMutEbbt0oK7M
TLSH
T18364FCC27495A47A9135DF3234F2D34957B39B9A8CBF9C4CD8628810DE61C0653BBAF2
MD5 SHA1 SHA512 SSDEEP TLSH

RavenMeditation_Windows_09_17_2023/Raiven Meditation_Data/il2cpp_data/etc/mono/config

SHA256 60099cf91bb1a5717fc1f2d23cf36a61d3bfb70d9489fbb6f4bae98c560bf3d5
MD5 d9bc824737177af5792846f26507231c
SHA1 c44835e4881d95a97b597bebff5deba0233a5887
SHA512 f9558f9e985643d8205b5534998412a5896bb6f5712bce5d6cf27469200eed64f29efc01936ab00c4a93625b0fc573036fba00ba2c4eb1d1d7c47555608f11e8
TLSH
T114610CABF16C48F87171266692FFFBEC51B380A0DD3D2105AE11DA021927F67C853AC6
MD5 SHA1 SHA512 TLSH

RavenMeditation_Windows_09_17_2023/Raiven Meditation_Data/il2cpp_data/etc/mono/mconfig/config.xml

SHA256 0c56e34c69124510fa8c19e7b4c2ca6c1c4ff460ae19f798dd0ca035809e396d
MD5 f34b330f20dce1bdcce9058fca287099
SHA1 936520d5bb5c00a1985d7a4c4f0ef763a9031862
SHA512 d6d4a8321eb44c117755a41a2590296be86a0568d27a5347f9d7f32f2d151d8f7e169675c83faed2dab5ad0f8d81858f8cd1167e439cd4bff7e68c243e3544fd
SSDEEP 192:Bt074zTxASaKp3T7pJsPpPT8B13eeaVonGdEBMmhVbeyeTfWDBzmAwdavahmhNIa:LAMDp35JyPCCu96yJwgag
TLSH
T1E9C25025B9FC9DE7050240236E61A1969F7383B7527C3808B0FD63989FAA54743932FB
MD5 SHA1 SHA512 SSDEEP TLSH

RavenMeditation_Windows_09_17_2023/Raiven Meditation_Data/level0

SHA256 3dc4dd0c119524167d9dae87afee6becd8b9084514d6bdf58a53f0c987763e0c
MD5 ae500e6241e4b652123008bff21ae9b5
SHA1 1059e82e1cb82a6afe12c2e4cfeae4e44711d0c3
SHA512 ce8813eda649a6598888d82e7e8bb507798f7b9a05b52d29c896d0a5467d0587a530740cf8f36eaa1e90f6d9d06481df67a261658e5577f701c385a1032c4288
SSDEEP 1536:qKNgJDZyBrpB7yRgkx2d4ioQ4I7iiUTCAL7XYNOs8Kc85n8ohO/bwBKa1Em2PTUF:ngl2L1LHsTYNOsmGks
TLSH
T16DB42355EB829B4BD476373355E34F98F730E1884B2FA33323A8662D7CD63885E82495
MD5 SHA1 SHA512 SSDEEP TLSH

RavenMeditation_Windows_09_17_2023/Raiven Meditation_Data/resources.assets

SHA256 5b474bdccb293dab1be741aab151d98cb2532241a31d5a495da66d0cd4968d9a
MD5 82652cfa6d1181ae73192fca0118c49f
SHA1 cb3f3d1fc0666f7b354ade11fd46f6c8005c817f
SHA512 c777dc4e4b201995a8544576a2e9fa1101f6db2f630c42e34a06be2b04fd636589767fe3b9106d79d80a1b4d4a8d3c11ae8474425f876913fb288f1329b917ef
SSDEEP 384:xlPjWxMpy0ueWNVF0PjoxMpy0uoVNVFaFCEVi6K57zU3xl6:xlXCA3jwiJHExl
TLSH
T125923067131F1EBBCDB142BB44B20FD29B71FBBA569E9BB31A78861C1CE11482F15200
MD5 SHA1 SHA512 SSDEEP TLSH

RavenMeditation_Windows_09_17_2023/Raiven Meditation_Data/resources.assets.resS

SHA256 3cc19318f95b2a6eebec873885b3920438d2344cf1f120a4c241c75a8783555a
MD5 d5a28dfced062017e2adf3f014b2ceea
SHA1 a1e7b7e5c1876bc1c883527a2a6d0759231e192f
SHA512 3504069efbae05283ebe3a3fff2e3d22ffb655411427ae2e728c672baabe98a63ecbd01c5a55961403bbb327a5edcd87d36e4310f0d45505fd2e87b474c8c02d
SSDEEP 6144:UrcGfpO4HvjoSRO1n9q3X371QojtSfR3vsnS1JJxwXwc21:DFgS1KXwH
TLSH
T1F57450429FA8D4BF5280182F5A7694F4D04F5BFBC71C2FE32B73624795A3B9202156E8
MD5 SHA1 SHA512 SSDEEP TLSH

RavenMeditation_Windows_09_17_2023/Raiven Meditation_Data/sharedassets0.assets

SHA256 b9814906cb9d5c596aa26b129478963ba28bc5cb067031e9ad3dd582ddc77466
MD5 b6a15771924cc48317529377415af788
SHA1 66c42a13eb6531a3b7f40a2b2b10291829d425af
SHA512 f6590d7778150582ca232ff066b091628111eca7f6da36c864494c42795af495f16bba18e16e31077aeebb6acc83fcd30ac9703c0cd272e610888ef278a8a662
SSDEEP 24576:rfQ36FBeYxXqAHxgLmd9Ut/oNmxqWC7dTKJd9b6nZTMgjm0Rz2:rY36DeW7H0OS6nagjmZ
TLSH
T178567CD4DAE59E2FEB20D5B641633F18872DDC8827E113B7A614B87DDCF91084D0ACA6
MD5 SHA1 SHA512 SSDEEP TLSH

RavenMeditation_Windows_09_17_2023/Raiven Meditation_Data/sharedassets0.assets.resS

SHA256 8d36a4796f51b8cd25a9d04884cd77ff37fc0511d0c0926a84ce018fa6163f9b
MD5 deee265a181370aa743f5078b6e6f481
SHA1 a7c81dc6ecbb8e05db6a7453e08fbc88764e56b7
SHA512 821c89798d2c399904cb3b18d5c1ef4c9f82701be86085b03320b30ee1f1dbcb742b773c9d9ce8932f5daeabf6a62a91bcff2e2fdee8b4432f015e768bf9adab
SSDEEP 12288:3PKVtUMUiWLsCA/QjLfffffffffffffffffffffffffffffffffffffffffffffO:iVXUi8sGEuXE5ejgUWIa2+54+eTe1l3
TLSH
T137B605075A6DD3B9E0B1D6B411DF6CB9ED0588B0C7A207C502AA352BFA7335672731E2
MD5 SHA1 SHA512 SSDEEP TLSH

RavenMeditation_Windows_09_17_2023/Raiven Meditation_Data/sharedassets0.resource

SHA256 2fddd08fc99268837253b37e1e0e18b0baa7f7463aaf282e401cd6f01004bff7
MD5 ba5f6a3118d176f71624bb94f5f01333
SHA1 0345c9a0a410e74bcd00dea109ec019ae00a566e
SHA512 687da2205a340aed273d805869c3adddd46a6c98e7cda5c77f98d57cdfffea7f70541a31857e4af0697b90fa8d70a97d03f17daff225f1bbb387f59ea9438ae2
SSDEEP 196608:uThgweoOWLYpbS/VDz+GDt9/X/LF76ZdCyx+JL0OGzJ1bYdRyqVBAMCqG:KGoobStpDt9/vF6yyxCM/bYdRyq3A2
TLSH
T1FEA633AFCB190DC4EC1CA5AB7F6EDADE8339C8B74A187B1275093593CE6701519E801E
MD5 SHA1 SHA512 SSDEEP TLSH

RavenMeditation_Windows_09_17_2023/UnityCrashHandler64.exe

IMPHASH 7261cecbf32f4bbf7025540dbfda4728
SHA256 f7ec5a660acfcb43ca7be58e39776328e26b1d943863339a922aa6387ec7172b
MD5 2308cc68a7c4f444083bbb086053f4d9
SHA1 ce656336e4a7eecd8a895d4d447ad176140d1fca
SHA512 b76cb56ac6256fd01a8ac91401311430c66e8ea110d40ee7416481e9153af6aa0286991d9de25d093c5498c2054559120f39c619921745830822084ff8d2cfe6
SSDEEP 12288:hGDIljJDkjFeW17Rxj2gKp4KvQV6WbrTHgXoF5EKAjxLWchU:hGDIljJQcWhRxiwK4VprTHaTK4VbhU
TLSH
T150457B1A6694C4E9E2668074C552D6FEE3B23C56C76182DB22E47E9B3F377901D3E320
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

da:b5:a9:0e:00:94:54:7b:59:d6:ec:ff:18:99:4f:9e:a8:22:b7:6f

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=Unity Technologies ApS,OU=Developer Services,O=Unity Technologies ApS,L=København,C=DK

Chains

Oct 13, 2021

CN=Unity Technologies ApS,OU=Developer Services,O=Unity Technologies ApS,L=København,C=DK

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Unity Technologies ApS,OU=Developer Services,O=Unity Technologies ApS,L=København,C=DK

Serial Number

0f:7c:5a:5e:06:2a:bd:ba:fc:be:1e:c6:3d:4c:30:52

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 14, 2021 - Jul 18, 2024

Minor OS version

0

Major OS version

6

Entry point

256464

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\buildslave\unity\build\artifacts\UnityCrashHandler\release_Win64_VS2019\UnityCrashHandler64.pdb

user32

SetForegroundWindow SetWindowTextW InflateRect UnionRect LookupIconIdFromDirectoryEx GetDlgItem SendMessageW SetWindowPos GetWindowLongA OffsetRect SendDlgItemMessageA AdjustWindowRect EndDialog CreateIconFromResourceEx DialogBoxParamA LoadImageA GetIconInfo

kernel32

InterlockedPopEntrySList DuplicateHandle VirtualProtect GetVersionExW UnregisterWait RegisterWaitForSingleObject SetThreadAffinityMask GetProcessAffinityMask GetNumaHighestNodeNumber DeleteTimerQueueTimer ChangeTimerQueueTimer CreateTimerQueueTimer GetLogicalProcessorInformation SignalObjectAndWait CreateTimerQueue WriteConsoleW GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP GetACP IsValidCodePage HeapQueryInformation HeapSize HeapReAlloc EnumSystemLocalesW GetUserDefaultLCID IsValidLocale HeapFree HeapAlloc FreeLibraryAndExitThread GetConsoleCP GetConsoleMode SetConsoleCtrlHandler GetFileType SetStdHandle GetModuleHandleExW ExitProcess InterlockedFlushSList CloseHandle RaiseException GetCurrentThread OpenThread GetThreadTimes GetModuleHandleA GetProcAddress EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount TryEnterCriticalSection DeleteCriticalSection WaitForSingleObjectEx SwitchToThread CreateThread GetCurrentThreadId SetThreadPriority GetThreadPriority RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind FreeLibrary GetModuleFileNameA GetModuleFileNameW LoadLibraryA LoadLibraryW MultiByteToWideChar WideCharToMultiByte GetCurrentProcess SuspendThread ResumeThread TlsGetValue TlsSetValue GetThreadContext GetLastError SetLastError CreateEventW CreateFileW DeleteFileW FindClose FindFirstFileW FindFirstFileExW FindNextFileW QueryDepthSList GetFileAttributesA GetFileAttributesW ReadFile SetFilePointerEx WriteFile GetEnvironmentVariableA GetCurrentDirectoryA OutputDebugStringA GetSystemTime ReadProcessMemory VerSetConditionMask GetSystemTimeAsFileTime GetCurrentProcessId GetModuleHandleW WaitForSingleObject LocalFree FormatMessageW VerifyVersionInfoW CreateToolhelp32Snapshot Thread32First Thread32Next GetStdHandle GetFileSize GetTempPathW SetEvent WaitForMultipleObjectsEx TerminateProcess GetExitCodeProcess CreateProcessW GetProcessId GetThreadId OpenProcess CopyFileExW AllocConsole SetErrorMode GetCommandLineW InitializeCriticalSection CreateEventA TerminateThread GetExitCodeThread LoadLibraryExW LoadResource LockResource SizeofResource FindResourceA EnumResourceNamesA GetFileSizeEx IsDebuggerPresent QueryPerformanceCounter QueryPerformanceFrequency ReleaseSemaphore TlsAlloc TlsFree VirtualAlloc VirtualFree InterlockedPushEntrySList RtlUnwindEx RtlPcToFileHeader GetLocaleInfoW LCMapStringW CompareStringW GetCPInfo DecodePointer EncodePointer GetTickCount GetStringTypeW InitializeSListHead IsProcessorFeaturePresent GetStartupInfoW SetUnhandledExceptionFilter UnhandledExceptionFilter ResetEvent UnregisterWaitEx FlushFileBuffers Sleep

dbghelp

SymRegisterFunctionEntryCallback64 SymLoadModuleEx

shell32

CommandLineToArgvW SHCreateDirectoryExW

ole32

CoCreateGuid CoTaskMemFree CoInitializeEx

psapi

GetModuleFileNameExW

advapi32

GetUserNameA

wininet

InternetOpenA HttpQueryInfoA HttpSendRequestA HttpOpenRequestA InternetConnectA InternetCrackUrlA InternetCloseHandle

gdi32

GetObjectA

version

VerQueryValueA GetFileVersionInfoA GetFileVersionInfoSizeA

Name

.text

Size

518KB

Virtual Size

517KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

157KB

Virtual Size

156KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

11KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

30KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

148B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

472KB

Virtual Size

471KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

RavenMeditation_Windows_09_17_2023/UnityPlayer.dll

IMPHASH 8d1e251fdfb8a70dcb75cb3aae69c989
SHA256 0c403773020e914d2bd01985e2bbfe98985bacd86accee594176b5c7989ae46c
MD5 da0fa94502671d5c34b9c552053a64f7
SHA1 14119e6c43d9f7d147349cb1d674bf321eeeedbb
SHA512 4b4a4275907f357d71a8d9f4ab4ece9701c4fae3f5732e3caa22fcf34d630c8fefaf440b9bbb1922af7538e9c8f1c6220fe1af5827fcb94901c476d4df646a05
SSDEEP 393216:RoQ3r6V0U0Sdb1O7ji+wKjw8ORwehV563UAIp95MoxTupwCM3UN:RoRzBqjw8tXNmUN
TLSH
T1C957AEA662F900E8C47BE474961BA91BF7B1344603319AEB13E146696F73BF016BF710
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

be:9b:27:76:48:8b:d0:88:81:ee:63:a7:d1:dc:32:76:31:fc:9c:f4

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=Unity Technologies ApS,OU=Developer Services,O=Unity Technologies ApS,L=København,C=DK

Chains

Oct 13, 2021

CN=Unity Technologies ApS,OU=Developer Services,O=Unity Technologies ApS,L=København,C=DK

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Unity Technologies ApS,OU=Developer Services,O=Unity Technologies ApS,L=København,C=DK

Serial Number

0f:7c:5a:5e:06:2a:bd:ba:fc:be:1e:c6:3d:4c:30:52

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 14, 2021 - Jul 18, 2024

Minor OS version

0

Major OS version

6

Entry point

22287444

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\buildslave\unity\build\artifacts\UnityPlayer\Win64_VS2019_nondev_i_r\UnityPlayer_Win64_il2cpp_x64.pdb

kernel32

ReadFile RemoveDirectoryW SetEndOfFile SetFileAttributesW SetFilePointer SetFilePointerEx SetFileTime GetCurrentThreadId OpenThread SuspendThread ResumeThread LocalFree FormatMessageW CopyFileW MoveFileExW ReplaceFileW SystemTimeToFileTime Thread32First Thread32Next CreateMutexA RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetEnvironmentVariableA GetCurrentDirectoryA GetCurrentDirectoryW GetFileAttributesA DebugBreak SetUnhandledExceptionFilter SetLastError GetErrorMode TerminateProcess CreateThread GetThreadContext ReadProcessMemory GetModuleFileNameA LocalAlloc GetOverlappedResult CancelIo ResetEvent GetTickCount GetStartupInfoA SetConsoleCtrlHandler GetSystemInfo SetDllDirectoryW SleepEx RaiseException GetThreadTimes SwitchToThread SetThreadPriority GetThreadPriority InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection FormatMessageA GetWindowsDirectoryW CreateIoCompletionPort GetQueuedCompletionStatus AttachConsole InitializeCriticalSectionAndSpinCount TryEnterCriticalSection ReleaseSemaphore GetLocalTime GetTimeZoneInformation GetFileSizeEx IsDebuggerPresent CreateSemaphoreExW TlsAlloc TlsFree GetNativeSystemInfo VirtualQuery GetFileSize GetConsoleMode GetLogicalProcessorInformationEx HeapQueryInformation HeapSize HeapReAlloc GetModuleHandleExW ExitProcess GetModuleFileNameW RtlPcToFileHeader RtlUnwindEx UnregisterWaitEx QueryDepthSList DuplicateHandle FindFirstFileExW FreeLibraryAndExitThread UnregisterWait RegisterWaitForSingleObject GetProcessAffinityMask GetNumaHighestNodeNumber GetFileAttributesExW ChangeTimerQueueTimer CreateTimerQueueTimer GetLogicalProcessorInformation SignalObjectAndWait CreateTimerQueue GetStartupInfoW IsProcessorFeaturePresent UnhandledExceptionFilter GetCPInfo GetStringTypeW GetLocaleInfoW LCMapStringW CompareStringW DecodePointer EncodePointer GetSystemDirectoryW InitializeCriticalSectionEx GlobalMemoryStatus GetFileType InterlockedFlushSList InterlockedPushEntrySList InterlockedPopEntrySList InitializeSListHead ExitThread CreateWaitableTimerA SetWaitableTimer OpenEventA ReadConsoleInputW FlushConsoleInputBuffer SetThreadAffinityMask GetStdHandle GetDriveTypeW GetFileInformationByHandle PeekNamedPipe SystemTimeToTzSpecificLocalTime FileTimeToSystemTime HeapFree HeapAlloc GetDateFormatW GetTimeFormatW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetProcessHeap SetStdHandle SetConsoleMode IsValidCodePage GetACP GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW WriteConsoleW GetSystemDirectoryA GlobalMemoryStatusEx SetErrorMode LoadLibraryExW GetCurrentThread GetCurrentProcess GetModuleHandleA MultiByteToWideChar CreateEventExW WaitForMultipleObjectsEx ReadConsoleW VirtualFree VirtualProtect VirtualAlloc GetProcessId CreateProcessW GetExitCodeProcess WaitForMultipleObjects CreateEventW CreatePipe SetHandleInformation OutputDebugStringA FindFirstFileW FindClose CreateFileW CreateDirectoryW ExpandEnvironmentStringsW GetSystemTimeAsFileTime GetSystemTime GlobalLock GlobalUnlock GlobalAlloc GetTempFileNameW GetFileAttributesW DeleteFileW GetFullPathNameW GetDiskFreeSpaceExW DeleteTimerQueueTimer GetTempPathW WriteFile FindNextFileW CreateToolhelp32Snapshot K32GetProcessMemoryInfo GetUserDefaultLocaleName GetSystemPowerStatus GetComputerNameW LoadLibraryW GetVersionExW GetModuleHandleW FlushFileBuffers CreateFileA RtlUnwind GetCommandLineW QueryPerformanceFrequency QueryPerformanceCounter GetLastError WaitForSingleObject Sleep CreateEventA WaitForSingleObjectEx SetEvent CloseHandle VerifyVersionInfoW VerSetConditionMask WideCharToMultiByte LoadLibraryA GetProcAddress FreeLibrary GetCurrentProcessId TlsSetValue GetConsoleCP TlsGetValue

user32

GetDoubleClickTime EnumDisplaySettingsA GetCaretBlinkTime DestroyWindow CreateWindowExW ShowWindow UpdateWindow PeekMessageA MsgWaitForMultipleObjects GetClientRect GetWindowRect GetDisplayConfigBufferSizes QueryDisplayConfig DisplayConfigGetDeviceInfo GetDesktopWindow EnumDisplayDevicesA MonitorFromWindow ReleaseDC AllowSetForegroundWindow TrackMouseEvent OpenClipboard CloseClipboard SetClipboardData GetClipboardData EmptyClipboard IsClipboardFormatAvailable SetCursor EnumDisplaySettingsW LoadIconW SetWindowLongA AdjustWindowRectEx GetWindowPlacement GetDC EnumDisplayMonitors GetMonitorInfoW GetMonitorInfoA MonitorFromRect SetWindowLongPtrW SetWindowLongPtrA GetWindowLongPtrW LoadCursorA DestroyCursor DestroyIcon LoadImageW GetThreadDesktop ClipCursor ShowCursor SetWindowTextW ValidateRect KillTimer SetTimer GetFocus RegisterClassW PostQuitMessage DefWindowProcW SendMessageW GetMessageA GetRawInputDeviceList RegisterRawInputDevices GetRawInputDeviceInfoW GetUserObjectInformationW GetProcessWindowStation MessageBoxW GetRawInputData SystemParametersInfoW GetWindowLongA PtInRect ScreenToClient ClientToScreen GetCursorPos SetCursorPos GetSystemMetrics ReleaseCapture SetCapture MapVirtualKeyW MapVirtualKeyA ToUnicode GetKeyNameTextW GetAsyncKeyState GetKeyState GetActiveWindow SetFocus IsWindowVisible UnregisterDeviceNotification RegisterDeviceNotificationW GetMessageExtraInfo GetMessageTime GetMessagePos DispatchMessageA TranslateMessage GetKeyboardLayoutNameW LoadIconA GetParent OffsetRect CopyRect MessageBoxA SendDlgItemMessageW SetDlgItemTextW SetDlgItemTextA EndDialog DialogBoxParamW SetWindowPos RegisterClassExW UnregisterClassW EnumWindows SetForegroundWindow IsIconic SendMessageTimeoutA RegisterWindowMessageA GetUserObjectInformationA DragDetect

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

ole32

CoTaskMemAlloc PropVariantClear PropVariantCopy CoCreateGuid StringFromGUID2 CoInitialize CoSetProxyBlanket CoUninitialize CoCreateInstance CoTaskMemFree CoCreateFreeThreadedMarshaler

shlwapi

SHDeleteKeyW PathCanonicalizeW

setupapi

SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInterfaces SetupDiGetDeviceInterfaceDetailW SetupDiGetClassDevsA SetupDiEnumDeviceInfo

advapi32

CryptGenRandom CryptReleaseContext CryptAcquireContextA RegSetValueExA RegQueryValueExA RegDeleteValueA RegCreateKeyW GetUserNameA GetTokenInformation GetSidSubAuthority OpenProcessToken RegSetValueExW RegCreateKeyExW RegCloseKey RegQueryValueExW RegOpenKeyExW CryptEncrypt CryptImportKey CryptDestroyKey ReportEventW RegisterEventSourceW DeregisterEventSource CryptDestroyHash CryptHashData CryptCreateHash CryptGetHashParam CryptAcquireContextW

gdi32

SetPixelFormat SwapBuffers GetDeviceCaps ChoosePixelFormat

shell32

ShellExecuteW SHGetFolderPathW CommandLineToArgvW SHFileOperationW

opengl32

wglGetCurrentContext wglGetProcAddress wglDeleteContext wglGetCurrentDC wglMakeCurrent wglCreateContext

winmm

waveOutOpen waveOutGetDevCapsW waveInStart waveInAddBuffer waveOutClose waveOutPrepareHeader waveOutGetDevCapsA waveOutGetNumDevs waveInUnprepareHeader waveInPrepareHeader waveInClose waveInOpen waveInGetDevCapsW waveInGetDevCapsA waveInReset waveInGetNumDevs waveOutGetPosition waveOutReset waveOutWrite waveOutUnprepareHeader timeEndPeriod timeBeginPeriod timeGetTime

oleaut32

SysAllocString VariantInit SysFreeString VariantClear VariantChangeType

imm32

ImmSetCompositionStringW ImmGetCompositionStringW ImmAssociateContextEx ImmAssociateContext ImmReleaseContext ImmGetConversionStatus ImmNotifyIME ImmGetContext

winhttp

WinHttpGetIEProxyConfigForCurrentUser

bcrypt

BCryptGenRandom

hid

HidP_SetUsageValue HidP_SetUsages HidP_GetData HidP_MaxDataListLength HidP_GetValueCaps HidP_GetButtonCaps HidP_GetCaps HidD_GetHidGuid HidD_GetPreparsedData HidD_FreePreparsedData HidD_GetProductString HidD_GetManufacturerString HidD_GetSerialNumberString HidD_GetAttributes

crypt32

CertVerifyCertificateChainPolicy CertFreeCertificateChain CertGetCertificateChain CertAddEncodedCertificateToStore CertFreeCertificateContext CertOpenStore CertCloseStore

ws2_32

WSASendDisconnect gethostbyaddr WSACancelAsyncRequest WSAAsyncGetHostByName WSASetEvent WSAResetEvent WSAEventSelect WSAEnumNetworkEvents WSAWaitForMultipleEvents WSASocketW WSACreateEvent WSACloseEvent getsockopt WSARecvFrom getprotobyname gethostbyname getpeername ntohl getnameinfo freeaddrinfo getaddrinfo WSAIoctl WSACleanup WSAStartup gethostname socket shutdown setsockopt sendto htonl recvfrom accept WSASocketA WSAGetLastError WSASetLastError send select recv ntohs listen inet_addr htons getsockname ioctlsocket connect closesocket bind __WSAFDIsSet

Name

.text

Size

21.7MB

Virtual Size

21.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3.5MB

Virtual Size

3.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

388KB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

1.0MB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rodata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

68KB

Virtual Size

67KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

126KB

Virtual Size

126KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=37, id=259, version=26715,

count=18, id=260, version=28427,

count=30, id=259, version=28427,

count=1, id=109, productName=VS2005 build 50727, version=50727,

count=99, id=260, productName=VS2017 v15.9.5 build 27026, version=27026,

count=436, id=260, productName=VS2015 UPD2 build 23918, version=23918,

count=111, id=261, productName=VS2015 Update 3 [14.0] build 24210, version=24210,

count=9, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=34, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,

count=124, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,

count=9, id=261, productName=VS2015 [14.0] build 23026, version=23026,

count=219, id=261, version=26715,

count=2, id=262, version=26715,

count=66, id=260, version=26715,

count=41, id=257, version=26715,

count=550, id=1, productName=Unmarked objects,

count=7, id=199, version=41118,

count=141, id=261, version=28427,

count=59, productName=Unmarked objects (old),

count=264, id=260, productName=VS2019 v16.5.5 build 28614, version=28614,

count=821, id=261, productName=VS2019 v16.5.5 build 28614, version=28614,

count=1, id=256, productName=VS2019 v16.5.5 build 28614, version=28614,

count=1, id=255, productName=VS2019 v16.5.5 build 28614, version=28614,

count=1, id=258, productName=VS2019 v16.5.5 build 28614, version=28614,

RavenMeditation_Windows_09_17_2023/baselib.dll

IMPHASH 40f38dfbf20ebf135bdd6665a7b17480
SHA256 9a424e33e157298edd047a5fb11020538c019bd0ac7ec392d3669edad950be5c
MD5 1a16398639192398751dd4db81e39557
SHA1 2665ad979f8ac9937f13936a93c5bd90af4a91aa
SHA512 b600673014e6f53563c0b5ba5c2f0c0a6769724c24a937baa543c7d1ebc1201d60ef4a9a159d9ea90c2a84d241c3c16ed127241bbce7b43b568cbb8aaebed0af
SSDEEP 6144:RJp/ok+IMufGAIxyn9Mv3wNQd9CuATwOGzuqE4ffO57udYohS7be5g87NH:tok4Am3eQd1OAubCOgCotNH
TLSH
T1EFA46C59736414BAE5778078C9578A0BE7B278061765D7EF03A0C77A2F237A05A3F322
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

79312

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\buildslave\unity\build\artifacts\baselib\Win64_VS2019_nondev_i_r\baselib_Win64_Master_il2cpp_x64.pdb

ws2_32

accept WSAWaitForMultipleEvents WSASocketW WSAIoctl WSACreateEvent WSACloseEvent WSAGetLastError shutdown setsockopt sendto send select recvfrom recv listen getsockopt getsockname ioctlsocket connect closesocket bind __WSAFDIsSet

kernel32

UnhandledExceptionFilter WriteConsoleW SetStdHandle GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose SetFilePointerEx HeapQueryInformation HeapSize HeapReAlloc RaiseException GetLastError CreateFileW GetFileAttributesW GetFileSizeEx ReadFile IsDebuggerPresent CloseHandle QueryPerformanceCounter QueryPerformanceFrequency ReleaseSemaphore WaitForSingleObject WaitForSingleObjectEx CreateSemaphoreExW SwitchToThread CreateThread GetCurrentThreadId ResumeThread TlsAlloc TlsFree GetThreadId GetNativeSystemInfo VirtualAlloc VirtualFree VirtualQuery FreeLibrary GetModuleHandleW GetProcAddress LoadLibraryW FormatMessageW MultiByteToWideChar WideCharToMultiByte Sleep EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection DeleteCriticalSection SetLastError InitializeCriticalSectionAndSpinCount CreateEventW TlsGetValue TlsSetValue GetSystemTimeAsFileTime GetTickCount EncodePointer DecodePointer LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo SetEvent ResetEvent RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetCurrentProcessId InitializeSListHead GetCurrentProcess TerminateProcess CreateTimerQueue SignalObjectAndWait SetThreadPriority GetThreadPriority GetLogicalProcessorInformation CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask RegisterWaitForSingleObject UnregisterWait GetCurrentThread GetThreadTimes FreeLibraryAndExitThread GetModuleFileNameW GetModuleHandleA LoadLibraryExW GetVersionExW VirtualProtect DuplicateHandle InterlockedPopEntrySList InterlockedPushEntrySList InterlockedFlushSList QueryDepthSList UnregisterWaitEx GetConsoleMode RtlUnwindEx RtlPcToFileHeader GetModuleHandleExW ExitProcess HeapAlloc HeapFree IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetStdHandle GetFileType FlushFileBuffers WriteFile GetConsoleCP

??0AbortShim@il2cpp_baselib@@QEAA@P6A_NW4Baselib_ErrorCode@1@PEAX@Z1@Z ??0Thread@il2cpp_baselib@baselib@@QEAA@$$QEAV012@@Z ??0Thread@il2cpp_baselib@baselib@@QEAA@XZ ??1Thread@il2cpp_baselib@baselib@@QEAA@XZ ??4AbortShim@il2cpp_baselib@@QEAAAEAV01@$$QEAV01@@Z ??4AbortShim@il2cpp_baselib@@QEAAAEAV01@AEBV01@@Z ??4Thread@il2cpp_baselib@baselib@@QEAAAEAV012@$$QEAV012@@Z ??6il2cpp_baselib@@YAAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@AEAV12@AEBW4Baselib_ErrorCode@0@@Z ?Baselib_Debug_IsDebuggerAttached@il2cpp_baselib@@YA_NXZ ?Baselib_DynamicLibrary_Close@il2cpp_baselib@@YAXUBaselib_DynamicLibrary_Handle@1@@Z ?Baselib_DynamicLibrary_GetFunction@il2cpp_baselib@@YAPEAXUBaselib_DynamicLibrary_Handle@1@PEBDPEAUBaselib_ErrorState@1@@Z ?Baselib_DynamicLibrary_Open@il2cpp_baselib@@YA?AUBaselib_DynamicLibrary_Handle@1@PEBDPEAUBaselib_ErrorState@1@@Z ?Baselib_ErrorState_Explain@il2cpp_baselib@@YAIPEBUBaselib_ErrorState@1@QEADIW4Baselib_ErrorState_ExplainVerbosity@1@@Z ?Baselib_ErrorState_FormatAndStoreExtraInformation@il2cpp_baselib@@YA_KPEBDPEAD@Z ?Baselib_FileIO_EventQueue_Create@il2cpp_baselib@@YA?AUBaselib_FileIO_EventQueue@1@XZ ?Baselib_FileIO_EventQueue_Dequeue@il2cpp_baselib@@YA_KUBaselib_FileIO_EventQueue@1@QEAUBaselib_FileIO_EventQueue_Result@1@_KI@Z ?Baselib_FileIO_EventQueue_Free@il2cpp_baselib@@YAXUBaselib_FileIO_EventQueue@1@@Z ?Baselib_FileIO_File_Close@il2cpp_baselib@@YAXUBaselib_FileIO_File@1@@Z ?Baselib_FileIO_File_Open@il2cpp_baselib@@YA?AUBaselib_FileIO_File@1@UBaselib_FileIO_EventQueue@1@PEBD_KW4Baselib_FileIO_Priority@1@@Z ?Baselib_FileIO_File_Read@il2cpp_baselib@@YAXUBaselib_FileIO_File@1@QEAUBaselib_FileIO_ReadRequest@1@_K2W4Baselib_FileIO_Priority@1@@Z ?Baselib_Memory_AlignedAllocate@il2cpp_baselib@@YAPEAX_K0@Z ?Baselib_Memory_AlignedFree@il2cpp_baselib@@YAXPEAX@Z ?Baselib_Memory_AlignedReallocate@il2cpp_baselib@@YAPEAXPEAX_K1@Z ?Baselib_Memory_Allocate@il2cpp_baselib@@YAPEAX_K@Z ?Baselib_Memory_AllocatePages@il2cpp_baselib@@YA?AUBaselib_Memory_PageAllocation@1@_K00W4Baselib_Memory_PageState@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_Memory_Free@il2cpp_baselib@@YAXPEAX@Z ?Baselib_Memory_GetPageSizeInfo@il2cpp_baselib@@YAXPEAUBaselib_Memory_PageSizeInfo@1@@Z ?Baselib_Memory_Reallocate@il2cpp_baselib@@YAPEAXPEAX_K@Z ?Baselib_Memory_ReleasePages@il2cpp_baselib@@YAXUBaselib_Memory_PageAllocation@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_Memory_SetPageState@il2cpp_baselib@@YAXPEAX_K1W4Baselib_Memory_PageState@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_NetworkAddress_Decode@il2cpp_baselib@@YAXPEBUBaselib_NetworkAddress@1@PEAW4Baselib_NetworkAddress_Family@1@QEADIPEAGPEAUBaselib_ErrorState@1@@Z ?Baselib_NetworkAddress_Encode@il2cpp_baselib@@YAXPEAUBaselib_NetworkAddress@1@W4Baselib_NetworkAddress_Family@1@QEBDGPEAUBaselib_ErrorState@1@@Z ?Baselib_Process_Abort@il2cpp_baselib@@YAXW4Baselib_ErrorCode@1@@Z ?Baselib_RegisteredNetwork_BufferSlice_Create@il2cpp_baselib@@YA?AUBaselib_RegisteredNetwork_BufferSlice@1@UBaselib_RegisteredNetwork_Buffer@1@II@Z ?Baselib_RegisteredNetwork_BufferSlice_Empty@il2cpp_baselib@@YA?AUBaselib_RegisteredNetwork_BufferSlice@1@XZ ?Baselib_RegisteredNetwork_Buffer_Deregister@il2cpp_baselib@@YAXUBaselib_RegisteredNetwork_Buffer@1@@Z ?Baselib_RegisteredNetwork_Buffer_Register@il2cpp_baselib@@YA?AUBaselib_RegisteredNetwork_Buffer@1@UBaselib_Memory_PageAllocation@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_RegisteredNetwork_Endpoint_Create@il2cpp_baselib@@YA?AUBaselib_RegisteredNetwork_Endpoint@1@PEBUBaselib_NetworkAddress@1@UBaselib_RegisteredNetwork_BufferSlice@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_RegisteredNetwork_Endpoint_Empty@il2cpp_baselib@@YA?AUBaselib_RegisteredNetwork_Endpoint@1@XZ ?Baselib_RegisteredNetwork_Endpoint_GetNetworkAddress@il2cpp_baselib@@YAXUBaselib_RegisteredNetwork_Endpoint@1@PEAUBaselib_NetworkAddress@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_RegisteredNetwork_Socket_UDP_Close@il2cpp_baselib@@YAXUBaselib_RegisteredNetwork_Socket_UDP@1@@Z ?Baselib_RegisteredNetwork_Socket_UDP_Create@il2cpp_baselib@@YA?AUBaselib_RegisteredNetwork_Socket_UDP@1@PEBUBaselib_NetworkAddress@1@W4Baselib_NetworkAddress_AddressReuse@1@IIPEAUBaselib_ErrorState@1@@Z ?Baselib_RegisteredNetwork_Socket_UDP_DequeueRecv@il2cpp_baselib@@YAIUBaselib_RegisteredNetwork_Socket_UDP@1@QEAUBaselib_RegisteredNetwork_CompletionResult@1@IPEAUBaselib_ErrorState@1@@Z ?Baselib_RegisteredNetwork_Socket_UDP_DequeueSend@il2cpp_baselib@@YAIUBaselib_RegisteredNetwork_Socket_UDP@1@QEAUBaselib_RegisteredNetwork_CompletionResult@1@IPEAUBaselib_ErrorState@1@@Z ?Baselib_RegisteredNetwork_Socket_UDP_GetNetworkAddress@il2cpp_baselib@@YAXUBaselib_RegisteredNetwork_Socket_UDP@1@PEAUBaselib_NetworkAddress@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_RegisteredNetwork_Socket_UDP_ProcessRecv@il2cpp_baselib@@YA?AW4Baselib_RegisteredNetwork_ProcessStatus@1@UBaselib_RegisteredNetwork_Socket_UDP@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_RegisteredNetwork_Socket_UDP_ProcessSend@il2cpp_baselib@@YA?AW4Baselib_RegisteredNetwork_ProcessStatus@1@UBaselib_RegisteredNetwork_Socket_UDP@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_RegisteredNetwork_Socket_UDP_ScheduleRecv@il2cpp_baselib@@YAIUBaselib_RegisteredNetwork_Socket_UDP@1@PEBUBaselib_RegisteredNetwork_Request@1@IPEAUBaselib_ErrorState@1@@Z ?Baselib_RegisteredNetwork_Socket_UDP_ScheduleSend@il2cpp_baselib@@YAIUBaselib_RegisteredNetwork_Socket_UDP@1@PEBUBaselib_RegisteredNetwork_Request@1@IPEAUBaselib_ErrorState@1@@Z ?Baselib_RegisteredNetwork_Socket_UDP_WaitForCompletedRecv@il2cpp_baselib@@YA?AW4Baselib_RegisteredNetwork_CompletionQueueStatus@1@UBaselib_RegisteredNetwork_Socket_UDP@1@IPEAUBaselib_ErrorState@1@@Z ?Baselib_RegisteredNetwork_Socket_UDP_WaitForCompletedSend@il2cpp_baselib@@YA?AW4Baselib_RegisteredNetwork_CompletionQueueStatus@1@UBaselib_RegisteredNetwork_Socket_UDP@1@IPEAUBaselib_ErrorState@1@@Z ?Baselib_Socket_Bind@il2cpp_baselib@@YAXUBaselib_Socket_Handle@1@PEBUBaselib_NetworkAddress@1@W4Baselib_NetworkAddress_AddressReuse@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_Socket_Close@il2cpp_baselib@@YAXUBaselib_Socket_Handle@1@@Z ?Baselib_Socket_Create@il2cpp_baselib@@YA?AUBaselib_Socket_Handle@1@W4Baselib_NetworkAddress_Family@1@W4Baselib_Socket_Protocol@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_Socket_GetAddress@il2cpp_baselib@@YAXUBaselib_Socket_Handle@1@PEAUBaselib_NetworkAddress@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_Socket_Poll@il2cpp_baselib@@YAXPEAUBaselib_Socket_PollFd@1@IIPEAUBaselib_ErrorState@1@@Z ?Baselib_Socket_TCP_Accept@il2cpp_baselib@@YA?AUBaselib_Socket_Handle@1@U21@PEAUBaselib_ErrorState@1@@Z ?Baselib_Socket_TCP_Connect@il2cpp_baselib@@YAXUBaselib_Socket_Handle@1@PEBUBaselib_NetworkAddress@1@W4Baselib_NetworkAddress_AddressReuse@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_Socket_TCP_Listen@il2cpp_baselib@@YAXUBaselib_Socket_Handle@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_Socket_TCP_Recv@il2cpp_baselib@@YAIUBaselib_Socket_Handle@1@PEAXIPEAUBaselib_ErrorState@1@@Z ?Baselib_Socket_TCP_Send@il2cpp_baselib@@YAIUBaselib_Socket_Handle@1@PEAXIPEAUBaselib_ErrorState@1@@Z ?Baselib_Socket_UDP_Recv@il2cpp_baselib@@YAIUBaselib_Socket_Handle@1@QEAUBaselib_Socket_Message@1@IPEAUBaselib_ErrorState@1@@Z ?Baselib_Socket_UDP_Send@il2cpp_baselib@@YAIUBaselib_Socket_Handle@1@QEAUBaselib_Socket_Message@1@IPEAUBaselib_ErrorState@1@@Z ?Baselib_SystemFutex_Notify@il2cpp_baselib@@YAXPEAHIW4Baselib_WakeupFallbackStrategy@1@@Z ?Baselib_SystemFutex_Wait@il2cpp_baselib@@YAXPEAHHI@Z ?Baselib_SystemSemaphore_Acquire@il2cpp_baselib@@YAXUBaselib_SystemSemaphore_Handle@1@@Z ?Baselib_SystemSemaphore_Create@il2cpp_baselib@@YA?AUBaselib_SystemSemaphore_Handle@1@XZ ?Baselib_SystemSemaphore_Free@il2cpp_baselib@@YAXUBaselib_SystemSemaphore_Handle@1@@Z ?Baselib_SystemSemaphore_Release@il2cpp_baselib@@YAXUBaselib_SystemSemaphore_Handle@1@I@Z ?Baselib_SystemSemaphore_TryAcquire@il2cpp_baselib@@YA_NUBaselib_SystemSemaphore_Handle@1@@Z ?Baselib_SystemSemaphore_TryTimedAcquire@il2cpp_baselib@@YA_NUBaselib_SystemSemaphore_Handle@1@I@Z ?Baselib_TLS_Alloc@il2cpp_baselib@@YA_KXZ ?Baselib_TLS_Free@il2cpp_baselib@@YAX_K@Z ?Baselib_Thread_Create@il2cpp_baselib@@YAPEAUBaselib_Thread@1@UBaselib_Thread_Config@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_Thread_GetCurrentThreadId@il2cpp_baselib@@YA_JXZ ?Baselib_Thread_GetId@il2cpp_baselib@@YA_JPEAUBaselib_Thread@1@@Z ?Baselib_Thread_Join@il2cpp_baselib@@YAXPEAUBaselib_Thread@1@IPEAUBaselib_ErrorState@1@@Z ?Baselib_Thread_SupportsThreads@il2cpp_baselib@@YA_NXZ ?Baselib_Thread_YieldExecution@il2cpp_baselib@@YAXXZ ?Baselib_Timer_GetHighPrecisionTimerTicks@il2cpp_baselib@@YA_KXZ ?Baselib_Timer_GetTicksToNanosecondsConversionRatio@il2cpp_baselib@@YA?AUBaselib_Timer_TickToNanosecondConversionRatio@1@XZ ?Baselib_Timer_GetTimeSinceStartupInSeconds@il2cpp_baselib@@YANXZ ?Baselib_Timer_TickToNanosecondsConversionFactor@il2cpp_baselib@@3NB ?Baselib_Timer_WaitForAtLeast@il2cpp_baselib@@YAXI@Z ?Call@AbortShim@il2cpp_baselib@@QEAA_NW4Baselib_ErrorCode@2@@Z ?CreateThread@Thread@il2cpp_baselib@baselib@@CAPEAUBaselib_Thread@2@P6AXPEAX@Z0@Z ?Detail_Baselib_EventSemaphore_SemaphoreBased_AcquireNonSet@il2cpp_baselib@@YAXHPEAUBaselib_EventSemaphore@@@Z ?Detail_Baselib_EventSemaphore_SemaphoreBased_TryTimedAcquireNonSet@il2cpp_baselib@@YA_NHPEAUBaselib_EventSemaphore@@I@Z ?Empty@AbortShim@il2cpp_baselib@@SA?AV12@XZ ?GetCurrentId@Thread@il2cpp_baselib@baselib@@SA_JXZ ?GetId@Thread@il2cpp_baselib@baselib@@QEAA_JXZ ?SetAbortShim@il2cpp_baselib@@YA?AVAbortShim@1@V21@@Z ?ShimmableAbort@il2cpp_baselib@@YAXW4Baselib_ErrorCode@1@@Z ?SupportsThreads@Thread@il2cpp_baselib@baselib@@SA_NXZ ?TryJoin@Thread@il2cpp_baselib@baselib@@QEAA_NV?$duration@IU?$ratio@$00$0DOI@@std@@@chrono@std@@@Z ?YieldExecution@Thread@il2cpp_baselib@baselib@@SAXXZ ?detail_AssertLog@il2cpp_baselib@@YAXPEBDZZ

Sharing

General

Malware Config

Signatures

File Explorer