070798e224b8e025f19c6839c2011e522692b813a045fed6848f9cc87d6330a3

Analysis

max time kernel
149s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/09/2026, 18:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
dawn-installer.exe
Size 3.3MB
Sample260916-xdpwgacf49
SHA256 070798e224b8e025f19c6839c2011e522692b813a045fed6848f9cc87d6330a3
MD5 770ed1e6d3fa2e9ae3467482b3567277
SHA1 da93d1c6e1ce05971c29bab7b5721a880ca9fa70
SHA512 6068d0b867a34f5ad8a812dd520a5ede752728b04dc4fc58a95fd39040f147b77e19250fc0312ae6ddf9cecb04271e88a471695a8f003a1632d7d68c86ba85e1
SSDEEP 98304:uvuHiNj4jrdTJCBuqMmw4h9niv2WxHaL5sTzz:uHNUdgx3niO5e
TLSH
T1AAF52260209D9027E69E5E327312BF6605636FE568CE2432F64B3E9FF835B72D845903
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery execution persistence

Malware Config

Signatures

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-4057491610-3392471755-192832105-1000\Software\Microsoft\Windows\CurrentVersion\Run\Dawn Launcher = "\"C:\\Users\\Admin\\AppData\\Local\\Dawn\\Dawn (Feather)\\Dawn (Feather).exe\" --dawn-login-startup"	Dawn (Feather).exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Executes dropped EXE 4 IoCs

pid	Process
3408	Dawn (Feather).exe
2440	Dawn (Feather).exe
1156	Dawn (Feather).exe
2484	Dawn (Feather).exe

Hide Artifacts: Ignore Process Interrupts 1 TTPs 1 IoCs

Command interpreters often include specific commands/flags that ignore errors and other hangups.

defense_evasion

Ignore Process Interrupts

T1564.011

pid	Process
1856	powershell.exe

Loads dropped DLL 45 IoCs

pid	Process
1268	dawn-installer.exe
1268	dawn-installer.exe
1268	dawn-installer.exe
1268	dawn-installer.exe
1268	dawn-installer.exe
1268	dawn-installer.exe
1268	dawn-installer.exe
1268	dawn-installer.exe
1268	dawn-installer.exe
1268	dawn-installer.exe
1268	dawn-installer.exe
2440	Dawn (Feather).exe
2440	Dawn (Feather).exe
2440	Dawn (Feather).exe
2440	Dawn (Feather).exe
2440	Dawn (Feather).exe
2440	Dawn (Feather).exe
2440	Dawn (Feather).exe
2440	Dawn (Feather).exe
2440	Dawn (Feather).exe
2440	Dawn (Feather).exe
2440	Dawn (Feather).exe
2440	Dawn (Feather).exe
2440	Dawn (Feather).exe
2440	Dawn (Feather).exe
2440	Dawn (Feather).exe
2440	Dawn (Feather).exe
2440	Dawn (Feather).exe
2440	Dawn (Feather).exe
2440	Dawn (Feather).exe
2440	Dawn (Feather).exe
2440	Dawn (Feather).exe
2484	Dawn (Feather).exe
2484	Dawn (Feather).exe
2484	Dawn (Feather).exe
2484	Dawn (Feather).exe
2484	Dawn (Feather).exe
2440	Dawn (Feather).exe
2484	Dawn (Feather).exe
2484	Dawn (Feather).exe
2484	Dawn (Feather).exe
2484	Dawn (Feather).exe
2484	Dawn (Feather).exe
2440	Dawn (Feather).exe
2440	Dawn (Feather).exe

Command and Scripting Interpreter: PowerShell 1 TTPs 7 IoCs

Using powershell.exe command.

execution

PowerShell

T1059.001

pid	Process
712	powershell.exe
2592	powershell.exe
3628	powershell.exe
2704	powershell.exe
5548	powershell.exe
1096	powershell.exe
4388	powershell.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	dawn-installer.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Dawn (Feather).exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	Dawn (Feather).exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Dawn (Feather).exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	Dawn (Feather).exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
1096	powershell.exe
1096	powershell.exe
4388	powershell.exe
4388	powershell.exe
712	powershell.exe
712	powershell.exe
2592	powershell.exe
2592	powershell.exe
3628	powershell.exe
3628	powershell.exe
2704	powershell.exe
2704	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe
5548	powershell.exe

Suspicious use of AdjustPrivilegeToken 8 IoCs

description	pid	Process
Token: SeDebugPrivilege	1096	powershell.exe
Token: SeDebugPrivilege	4388	powershell.exe
Token: SeDebugPrivilege	712	powershell.exe
Token: SeDebugPrivilege	2592	powershell.exe
Token: SeDebugPrivilege	3628	powershell.exe
Token: SeDebugPrivilege	2704	powershell.exe
Token: SeDebugPrivilege	5548	powershell.exe
Token: SeDebugPrivilege	1856	powershell.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2440	Dawn (Feather).exe
2440	Dawn (Feather).exe
2440	Dawn (Feather).exe

Suspicious use of WriteProcessMemory 12 IoCs

description	pid	Process	procid_target
PID 1268 wrote to memory of 1096	1268	dawn-installer.exe	89
PID 1268 wrote to memory of 4388	1268	dawn-installer.exe	91
PID 1268 wrote to memory of 712	1268	dawn-installer.exe	93
PID 1268 wrote to memory of 2592	1268	dawn-installer.exe	95
PID 1268 wrote to memory of 3628	1268	dawn-installer.exe	97
PID 1268 wrote to memory of 2704	1268	dawn-installer.exe	100
PID 1268 wrote to memory of 5548	1268	dawn-installer.exe	102
PID 5548 wrote to memory of 1948	5548	powershell.exe	104
PID 1268 wrote to memory of 1856	1268	dawn-installer.exe	105
PID 1268 wrote to memory of 3408	1268	dawn-installer.exe	107
PID 3408 wrote to memory of 2440	3408	Dawn (Feather).exe	109
PID 1156 wrote to memory of 2484	1156	Dawn (Feather).exe	112

C:\Users\Admin\AppData\Local\Temp\dawn-installer.exe
"C:\Users\Admin\AppData\Local\Temp\dawn-installer.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1268
- C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
  "C:\Windows\Sysnative\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -File "C:\Users\Admin\AppData\Local\Temp\nscA1C6.tmp\Resolve-DawnPartnerOffer.ps1" -OffersJson "C:\Users\Admin\AppData\Local\Temp\nscA1C6.tmp\installer-offers.json" -OfferId "medal" -PercentFlagName "deployments.installer_offer_medal.percent"
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:1096
- C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
  "C:\Windows\Sysnative\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command "$ErrorActionPreference = \"Stop\"; $m = Get-Content -Raw \"C:\Users\Admin\AppData\Local\Temp\nscA1C6.tmp\manifest.json\" | ConvertFrom-Json; $i = $m.installers | Where-Object { $_.platform -eq \"windows-amd64\" -and $_.kind -eq \"app-zip\" }; if (-not $i) { Write-Error \"no windows-amd64 app-zip entry\"; exit 1 }; Write-Output $i.path; Write-Output $i.sha256; Write-Output $i.sizeBytes"
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:4388
- C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
  "C:\Windows\Sysnative\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command "$m = Get-Content -Raw \"C:\Users\Admin\AppData\Local\Temp\nscA1C6.tmp\manifest.json\" | ConvertFrom-Json; $i = $m.installers | Where-Object { $_.platform -eq \"windows-amd64\" -and $_.kind -eq \"app-zip\" }; [Console]::Out.Write($i.path.Trim())"
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:712
- C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
  "C:\Windows\Sysnative\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command "$m = Get-Content -Raw \"C:\Users\Admin\AppData\Local\Temp\nscA1C6.tmp\manifest.json\" | ConvertFrom-Json; $i = $m.installers | Where-Object { $_.platform -eq \"windows-amd64\" -and $_.kind -eq \"app-zip\" }; [Console]::Out.Write($i.sha256.Trim())"
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:2592
- C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
  "C:\Windows\Sysnative\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command "$m = Get-Content -Raw \"C:\Users\Admin\AppData\Local\Temp\nscA1C6.tmp\manifest.json\" | ConvertFrom-Json; [Console]::Out.Write($m.version.Trim())"
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:3628
- C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
  "C:\Windows\Sysnative\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command "$ErrorActionPreference = \"Stop\"; $hash = (Get-FileHash -Algorithm SHA256 \"C:\Users\Admin\AppData\Local\Temp\nscA1C6.tmp\DawnLauncher.zip\").Hash.ToLower(); $expected = \"9b4e45583ac6f57c7f210511bf6430638f2fce160bdc2bc48af140137e935e64\".Trim().ToLower(); if ($hash -ne $expected) { Write-Error \"SHA-256 mismatch: expected $expected got $hash\"; exit 1 }; Write-Output \"OK\""
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:2704
- C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
  "C:\Windows\Sysnative\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -File "C:\Users\Admin\AppData\Local\Temp\nscA1C6.tmp\Install-DawnPayload.ps1" -PayloadZip "C:\Users\Admin\AppData\Local\Temp\nscA1C6.tmp\DawnLauncher.zip" -InstallRoot "C:\Users\Admin\AppData\Local\Dawn"
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of WriteProcessMemory
  PID:5548
- - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
    "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\Admin\AppData\Local\Temp\1g2nunff\1g2nunff.cmdline"
    3⤵
    PID:1948
- C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
  "C:\Windows\Sysnative\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command "$ErrorActionPreference = \"SilentlyContinue\"; Get-AppxPackage -Name \"DawnLauncher\" | Remove-AppxPackage -ErrorAction SilentlyContinue"
  2⤵
  - Hide Artifacts: Ignore Process Interrupts
  - Suspicious use of AdjustPrivilegeToken
  PID:1856
- C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\Dawn (Feather).exe
  "C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\Dawn (Feather).exe"
  2⤵
  - Executes dropped EXE
  - Suspicious use of WriteProcessMemory
  PID:3408
- - C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\Dawn (Feather).exe
    "C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\Dawn (Feather).exe"
    3⤵
    - Adds Run key to start application
    - Executes dropped EXE
    - Loads dropped DLL
    - Checks processor information in registry
    - Suspicious use of SetWindowsHookEx
    PID:2440

C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\Dawn (Feather).exe
"C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\Dawn (Feather).exe" --dawn-login-startup
1⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1156
- C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\Dawn (Feather).exe
  "C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\Dawn (Feather).exe" --dawn-login-startup
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Checks processor information in registry
  PID:2484

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Hide Artifacts

T1564

Ignore Process Interrupts

T1564.011

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

af_NEUTER.pak

Path C:\Users\Admin\AppData\Local\Dawn\.update-stage-5548-9784a9676845455990d8875f5b62d94a\Dawn (Feather)\app\jcef\locales\af_NEUTER.pak
Size 18B
SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Submit Download

ADDITIONAL_LICENSE_INFO

Path C:\Users\Admin\AppData\Local\Dawn\.update-stage-5548-9784a9676845455990d8875f5b62d94a\Dawn (Feather)\runtime\legal\jdk.unsupported.desktop\ADDITIONAL_LICENSE_INFO
Size 49B
SHA256 ebf9777bd307ed789ceabf282a9aca168c391c7f48e15a60939352efb3ea33f9
MD5 19c9d1d2aad61ce9cb8fb7f20ef1ca98
SHA1 2db86ab706d9b73feeb51a904be03b63bee92baf
SHA512 7ec63b59d8f87a42689f544c2e8e7700da5d8720b37b41216cbd1372c47b1bc3b892020f0dd3a44a05f2a7c07471ff484e4165427f1a9cad0d2393840cd94e5b
MD5 SHA1 SHA512

Submit Download

ASSEMBLY_EXCEPTION

Path C:\Users\Admin\AppData\Local\Dawn\.update-stage-5548-9784a9676845455990d8875f5b62d94a\Dawn (Feather)\runtime\legal\jdk.unsupported.desktop\ASSEMBLY_EXCEPTION
Size 44B
SHA256 b998cda101e5a1ebcfb5ff9cddd76ed43a2f2169676592d428b7c0d780665f2a
MD5 7caf4cdbb99569deb047c20f1aad47c4
SHA1 24e7497426d27fe3c17774242883ccbed8f54b4d
SHA512 a1435e6f1e4e9285476a0e7bc3b4f645bbafb01b41798a2450390e16b18b242531f346373e01d568f6cc052932a3256e491a65e8b94b118069853f2b0c8cd619
MD5 SHA1 SHA512

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Dawn\.update-stage-5548-9784a9676845455990d8875f5b62d94a\Dawn (Feather)\runtime\legal\jdk.unsupported.desktop\LICENSE
Size 33B
SHA256 86e0516b888276a492b19f9a84f5a866ed36925fae1510b3a94a0b6213e69192
MD5 16989bab922811e28b64ac30449a5d05
SHA1 51ab20e8c19ee570bf6c496ec7346b7cf17bd04a
SHA512 86571f127a6755a7339a9ed06e458c8dc5898e528de89e369a13c183711831af0646474986bae6573bc5155058d5f38348d6bfdeb3fd9318e98e0bf7916e6608
MD5 SHA1 SHA512

Submit Download

README.JAVASE

Path C:\Users\Admin\AppData\Local\Dawn\.update-stage-5548-9784a9676845455990d8875f5b62d94a\Dawn (Feather)\runtime\legal\jdk.unsupported.desktop\README.JAVASE
Size 39B
SHA256 a599d79ec20f64079704f1ed4588d5c725ff798824f7d22838a5fb7bd0b01ddb
MD5 e2c44ace8282e391297221a64474ab30
SHA1 42bce25b27e52811fc22677e2c3bd3b6d2fe95b8
SHA512 13d36059b448ad3265ed1441070cf3c51b428bfa5793f2278e79485673963a4b0968e7870c154431ed181e973dc54ab4fe8ca5fa7ee0a59cd60cef017377f3b4
MD5 SHA1 SHA512

Submit Download

Dawn (Feather).exe

Path C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\Dawn (Feather).exe
Size 905KB
SHA256 6678fd68ebfdb7d2694fd0d541ba8d98f354b0d9bc1d323e24ad6e648a62a63d
MD5 7ec6e500cd2b35daa003749e041028e4
SHA1 1177ef798ecdbda8428ed8b280abec692e3cb1f8
SHA512 46283edc8c69b010e30dabd34e4a93f7372bab9c5d3fa8f7083289ce93270751350469c1f1e2fa44810a5e1d4c147fac3f8fc3ecb98eee1fadb92aabd02d340e
SSDEEP 12288:opyDcGs+09VuYUY6kP7B6aCSId2fd9UTQOp01:tcGM7u9Y6kP7M8XUTQO+1
TLSH
T12E157C25615C00B6D1AB8A319702BB12D6727DC50698652BF3923E6FFE33771ED29B03
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

classlist

Path C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\runtime\lib\classlist
Size 199KB
SHA256 3550a7756e254b4490021e90d366f4a7b3faac7ecfd2ea2daa4ddaf39fe4b423
MD5 75bf28824e72dde6c69f6be56a36dc6b
SHA1 b146ae64656ed815bf4a0adb3713f26306a817ce
SHA512 de0b80cbf72b376acb2a95bba81b229cbe3bb76d50b94c08b7bf7afa5ff4ad7a88f61c11c48e21135959e5598534e648ae0d3e7278bf1f0a154837bec47f7a42
SSDEEP 3072:NHKAJ8yx/SccgLRxrjUlUv2PodfcG7JscnJRIUa6zQ:8AJ8yx/SccgLRxrjUlUv2PodfcG7JwP
TLSH
T1DA148413D08D74726684E5EFD46203196004C9736C06E9ACD6568AC2F1EBDFE853FEEA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ct.sym

Path C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\runtime\lib\ct.sym
Size 10.4MB
SHA256 db7333432609fb2c1e440bfd08688841307f8b0281615af8080bcf1f62d72d79
MD5 d59051b698aba2c26d7a1ef3da71c346
SHA1 b83b4ba670772609c55b768baddf3b2f67cd768e
SHA512 37e5662acef1cb79f5ad0796f5d045912143cc418914a0f28f8cd6f68ac14e1d948510e28e547b0301a69c10a3a6087e8db8f4a00b60c83eac4032c9dbe383ed
SSDEEP 196608:XjF5FO8UEVul3dKEHwl/bc4iOiJN6ZaYHa:XnJUe6gawlTniOibMa
TLSH
T18FB65A2DBFC49087DA53A1B684218773B5A885F95181F19B061E0CB8BAF1EB10F53EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fontconfig.bfc

Path C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\runtime\lib\fontconfig.bfc
Size 4KB
SHA256 18db3daa9e2e8dd036195daeac943d0c1b95b1ecaef5e5eb087cf93f2211d636
MD5 2dd9616d3a470c4d0623747f702a6f8e
SHA1 82bb6bc33a681dd8d1e28f1641bce77b933a8c05
SHA512 24c85cdbb47fcd246bdb3340374469173ba66e57558bb449c60abad1dacbbde8538804228fa6958da9970515470d8dfeb8858e65bb6a3d8ce76cf1d9e2611f2c
SSDEEP 96:00UKe8mIRluBbsnCBj7BFBBOPicbXdaWYssByad7pV:WhZsK5bBEicbxZsXp
TLSH
T16BA1CE01E4FB9308F2FBFB76A7B990598D72F855BA73CA6C1010415E47A25408E52F3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fontconfig.properties.src

Path C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\runtime\lib\fontconfig.properties.src
Size 12KB
SHA256 dab4e26663d5ede2bb5f21ff629a3858b80ee01eb0f4b06984d1f4eefd6f8b0e
MD5 fff32a90805b5b049f4baabe2ebe331e
SHA1 6cce3c7f2012506e80b0b14184bb71da11df5213
SHA512 ada66a934c4153120b7c6dd9d6f4abd62377e83c6215fe393a500804fcd89e2d945a843268cdb5df698ac83f10108c8569f079b8c6a457f658546ba932fd2b54
SSDEEP 192:YTh0WcTkCtTBElDWnsNi8bTM1d5CN59/Ywca9nB2RqhCQPBifGuo7xd:YTh1cRnHeR9B2Rqhhgaxd
TLSH
T13342660E220C0BDABBBDA85231F6A9127D1DA47F4282AF4735FC8609DE555D1F692333
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DroidSans-Bold.ttf

Path C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\runtime\lib\fonts\DroidSans-Bold.ttf
Size 189KB
SHA256 2f529a3e60c007979d95d29794c3660694217fb882429fb33919d2245fe969e9
MD5 3c0f650c88f1dd66abf4e2d86b2789b8
SHA1 560e4bcafdebaf29645fbf92633a2ae0d2f9801f
SHA512 8c7f3b9fc97e0789ce4ca1ecd95f3e75a67ffaecd1896373368b8924d740d3e930a10c133ed83e8a6d8160fadafda54400c12fedc9a921b7263e1d0f73f63f81
SSDEEP 3072:lcM77D0fhWtStY60Gn6JkXNUBUdUKHL4I1/Y04+GpZ:KJWYCNIBXSCGKHLa04+4Z
TLSH
T15A147C8E17021B96FBC261B58278F3D4470BB737067B8A0F78F91539548A2B55DB0BCA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DroidSans.ttf

Path C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\runtime\lib\fonts\DroidSans.ttf
Size 186KB
SHA256 f51b88945f4c1b236f44b8d55a2d304316869127e95248c435c23f1e4142a7db
MD5 9e94decf013d3e2c9adcc0b97cc5ce44
SHA1 62f2841f61e4be66a0303cd1567ed2d300b4e31c
SHA512 0ac4a03bd238daf68e5f7bb8ff307a8098b839c4c6ede94eb28af5fc8d250905da8a9c77cf9fa8946610e7290fe84b3273184dbf71f0148522384aaee86143ec
SSDEEP 3072:M+b3K4MO6bJa5Tvp1fRtLHRVAnNNaKvv4wKpZ:M+m9OgMxv3fRBHcnnaKvv4wcZ
TLSH
T15A147D8A570357D6F7C261BA8374F2D84B1AB733063B4A0F69F91639508D2B41DB0BDA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DroidSansMono.ttf

Path C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\runtime\lib\fonts\DroidSansMono.ttf
Size 116KB
SHA256 12b552de765dc1265d64f9f5566649930dde4dba07da0251d9f92801e70a1047
MD5 78c0de8abf66567262ee5e4e653fc11c
SHA1 133fb6cf26ea073b456fb557b94ce8c46143b117
SHA512 b109674d8fb6ebd0d040ff8ee9b65fb7183ce4d99a28d85ed8a7232852adb7f9c050ff96546ad0814c5ef79511442333f214c34f5b9c66fb77092e32bc87e2f0
SSDEEP 3072:B3CXpFV/JBpKNSZrYfe4i9VbxSYX3o4Cr:B3CZFV3INSYe4i99AYo4Q
TLSH
T1A5C37E0F8B136F19ED532FB5C7E12390DB65B808A306C31B668A57A375DF3905A84F29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DroidSansMonoDotted.ttf

Path C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\runtime\lib\fonts\DroidSansMonoDotted.ttf
Size 114KB
SHA256 bf8c5e6b662df177af25226e61c34d6cf6ae23bb39939530347a81a5b5bbffc8
MD5 2532adf29ae0fdd2e016959ed5123086
SHA1 808f6c55a493513676f824d644e12d4f9ca661a4
SHA512 ee6650e763f3bc84e8844b1bb3ed73e2734d9156d970c6f1f5b04dce129d38cdeecd7430f03f8b552c02d94ef1c0fa8875839a4037f3968756c5a0258f4dab64
SSDEEP 3072:7+pJ11achCpl19F6HN2eUebsKyDbgxmboWU:7+z114Xm2eUyhyUmboWU
TLSH
T19FB37E0F9B632F09ED522FBD83A133E09766F814A305C30F568A5AF2A5DF3514D94B29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DroidSansMonoSlashed.ttf

Path C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\runtime\lib\fonts\DroidSansMonoSlashed.ttf
Size 114KB
SHA256 01550d67b4c7a8c113da222a26f0e77f39d9fe2264369c7cc2d8f6962682be35
MD5 d5540faa206983c791843a3a55e3cb98
SHA1 715214e5045d738234eef9724799f3061db75b40
SHA512 c3ccf669c0a2ef443aa63c58324de81b1c9833b7d05f503a2aa153d3ee56c393da3f7b9f417694fddd2deb4e06759a1e2b611f06aaa2209ae6108365ae4262e9
SSDEEP 3072:TAJ11achCpl19F6HN2eUebsKyDbgxmbo4H:To114Xm2eUyhyUmbo4H
TLSH
T12DB37D0F9B632F09ED522FBD83A133E09766F814A305C30F568A5AF2A5DF3514D94B29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DroidSerif-Bold.ttf

Path C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\runtime\lib\fonts\DroidSerif-Bold.ttf
Size 180KB
SHA256 c746c6383a03effbcad6ccb028e4b39e87071ff1a146a24fb2110a23e05776bb
MD5 3b6c3214b028debd9f175b63f71508e0
SHA1 294fa99ceaf6077ab633b5a7c7db761e2f76cf8c
SHA512 35108ca1ec9ea95aec8161ded836c6464014318828fd7f5fe09f85ecb04054ffd9780a59a094a98e544a6a7a617def558c7a5afd3ee82a7930ced6e8fc16427d
SSDEEP 3072:iSJZesxZ8IvIuUY+nrBDCMf4IETHhbsYd7UVViiFfW3SOGxL47ybJVu:ioZjjUYUBB3E7hbBQZW3exL4ebJVu
TLSH
T156048D5EA7022F25D692B674C3B4F3D01B2BB4056B07C61B3AE89A32598D158DFC4FC6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DroidSerif-BoldItalic.ttf

Path C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\runtime\lib\fonts\DroidSerif-BoldItalic.ttf
Size 185KB
SHA256 1aba99421b31afe890182663270c28bc619f00d8746234da3dda054cd5bf09b0
MD5 1f5dc2bf62705a7d09533b1538c9c173
SHA1 b7f2d37c3a062be671774ff52f4fd95cbef813ce
SHA512 7f67257fb4f19b4b240c21054433655b653584a1cd98198ddab78ae2eb34db29731f5844b133446138d1df5b4ef4e966ff28abbebbc5aec10b6419586608d9d8
SSDEEP 3072:Qsoij4exRRzvzlpW7NrpyTorMc+5gBJF/kwqAPBi7HSMF/Z34qybJYt:MUbzvjgNlIEfs1AYDSMF/Z34XbJYt
TLSH
T162046D0E93023B26D5E275B9C374F3E04B2B7816A703852A7AB45671B9F919C9DD0FC2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DroidSerif-Italic.ttf

Path C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\runtime\lib\fonts\DroidSerif-Italic.ttf
Size 173KB
SHA256 02c0108dea583e393fbcbec39c7093e9a3095a09d65e37fafff9a9b7a89123a4
MD5 1262ad9a9f243ef2e7c80c0bb5f0060d
SHA1 bdd8aad5e6ac546d11e7378bdfabeac7ccbdadfc
SHA512 493c81d81e258c0e0be32e2e76c840fa523504201e801a8bb4e5e2f769af36f677486c17dad504f4812d161db7e83f58890ae4d79939ca39c27664ac4409d9d6
SSDEEP 3072:9sIQKPhrrz85GRmS4UJoBiY89AFi09mGotPcKmnnsr41ybJYt:9sIQ0FmPUmBiY8UijtPc1n04EbJYt
TLSH
T186048E1EA7016F26E9E5367AC730F3F04627B817EA139B1E7AF5027598991E85E40FC0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DroidSerif-Regular.ttf

Path C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\runtime\lib\fonts\DroidSerif-Regular.ttf
Size 168KB
SHA256 ae32140265dbe0dfde24b9abd222be9210a531888f014ff9b2326aba2d6fd777
MD5 e18165ce2b700b1b4daca82e276fcac5
SHA1 805c5f975e02f488fa1dd1dd0d44ed4f93b0fab4
SHA512 cf48d4ea1289953f906e510d114633300193144e7aa24d9c33c3dba2088ad8283efdd668c9888f9bdfe75296a662bb094d46f8aa847910894bb066aa4df4b9ef
SSDEEP 3072:AIVimyEc4ealpgp9uQEB00KYlnrum5hF8wkEf3OnfZqPdkh4LybJVu:RirEc4eyDHuyFRPOcPdkh4ObJVu
TLSH
T1A6F39E0D77072F19E6E67A7AC3B8F2F4461AAC065B03852335E48A7314DE1A85FC4BD8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FiraCode-Bold.ttf

Path C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\runtime\lib\fonts\FiraCode-Bold.ttf
Size 316KB
SHA256 37a609b7e27516ce0cf55cb7550edd1a1cbd8cd5bc028415a1d520c426c10357
MD5 01f3d4803613ee9556769509a85dba50
SHA1 2b76ec1606beb867e20a5550587919b9b809ef9e
SHA512 6cfea5acbd70ef2e548dbde848da895bb387515e62a8005cb95a51c58d04a66cfb94cdc237fc26f7a1a7f1449b081a428af940477b0cacda5e8d2038cd9c8138
SSDEEP 6144:FXYoTfbKvG/Nu0W99sAlBoOSkW4Lj/3AUe4WYGcqxBFVSWi9KHjHPDDN:io6vG/NNy9sMoc3c3HjHXN
TLSH
T116644B0BFB91D90AE6261F35867A430B63B3E5402717A78BE04D3B6ECCDB1F01A515DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FiraCode-Light.ttf

Path C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\runtime\lib\fonts\FiraCode-Light.ttf
Size 278KB
SHA256 965786b0157a8f0607701077e226acab9d7a66b2b32f01848c46bb54b24bcb9a
MD5 93f948964a49886cbcc390bd52ecbf36
SHA1 742dfe5f0572f45e7a0cee89aba6acba5966f88a
SHA512 a2e6fb721b9d35a5025df30fa8a1845d82b0c5f969b976e921f2f717413232781029f7a9ff0074476f233dd45d476bf14a5943353a5e51112c1c211c43ec8593
SSDEEP 6144:6XqoTE/9MiXqm6XLWYGow5oD3XKHjHPtDN:joax6XLWYGow5GqHjH1N
TLSH
T163547D0BF3A2D90BE5264F79C666434922E3E9516613B34BE48C3F6ECCDB1F409152E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FiraCode-Medium.ttf

Path C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\runtime\lib\fonts\FiraCode-Medium.ttf
Size 288KB
SHA256 f94d9fa1ffb46463e6d8fda12041088397adea1c47de7c50a8f9f57ce9a6d788
MD5 38989befe49ab72063b68518a4531cc8
SHA1 618ab666b664ea8ca413e5e73725e644cea260ca
SHA512 99da289171cc8589db85b5eee69bff328f8e0d8e201764266771a1c335f3413214d904f1274060516041e8ea837d9875d9d21b68c988ba854563607189753520
SSDEEP 6144:+9OXfoTZJJ/vJBHfyCjDom++SqrvDm2mWVVtAxdMKHjHP9DN:+9SonBH6iDoYdnaHjHlN
TLSH
T1DE547D0BF3A2D90AE6365F798676434962A3F8506717A38FD04D3BAECCCB1F445212D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FiraCode-Regular.ttf

Path C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\runtime\lib\fonts\FiraCode-Regular.ttf
Size 292KB
SHA256 28c3ae21a853f1d74673384c7a0d620abb0e877b8c6cd8b64173a95512476824
MD5 d60b1090972c3e6230c555347da880db
SHA1 8312082ca5e551a7299c758fa62ef9e6e9c3d158
SHA512 a1342a9566c1baeb0fc89c16e6c2dfce5786c4fe823ffd0fd5948ad2c99b1e7786da3cd1887e38d48e16e7dfd4353a2629828d1a57c839ce88489e9755f86759
SSDEEP 6144:PX5oToM8mZYOuMncNJggoQUxQNYKHjHPNDN:hoAOpcPBoTgHjH1N
TLSH
T190546C0BF3A2D90AEA265F75C67A434A62D3E9506717A34FE04D3B6ECCCB0F409512E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FiraCode-Retina.ttf

Path C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\runtime\lib\fonts\FiraCode-Retina.ttf
Size 288KB
SHA256 e8aad8140dd254b73bac71205ec4e0cc3f1c3914aa73f514e2cc4b3cf937d35d
MD5 2f7bfe28b1954979587e0a79dcae2bef
SHA1 19b8820ec824ecc0793eb676e9f81cc415725146
SHA512 9e5427a1a4f1866d0d48fafee6f3b88fceb4b593d35df298bc1ed07a9a577f4f73aa5ddeebfca6ccb9d6c9c38e0e81b5d6e9442b3c792d6268e019c6b1ff3153
SSDEEP 6144:xXCoTpKV6OPs7xngudfo4/ANxKHjHP0DN:Qow5Ps7xffo4RHjHAN
TLSH
T16A547C0BF3B2D90AE6261F75C676434A6293E9507617A38FD08C3E6ECCCB1F449512E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Inconsolata.ttf

Path C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\runtime\lib\fonts\Inconsolata.ttf
Size 21KB
SHA256 691b7811a052b517a1b23c83b29aab3ac2ea0bd19a3f0816cf32aa1f1b1793b2
MD5 f230738d04c55dae6c193ebb64e4bae5
SHA1 438fb4b035d393f016859ebdd7a58e17bae93d41
SHA512 cd41d2abef46735bb38f83194c2d9c88b10e8cad133243a15809b9fbcd3af185b4b784e3c3c1b2dccae1a332dbfed40eb0e2281afed227a497c5e99a15693f51
SSDEEP 384:vQ7em2UczfoblkOMfF52hMxR02jBytxcoaUGH3HMH2eDBPZVH+oQYIZLF:vQ7emFczIMt5c0yteoahXsWUBPLeoQTH
TLSH
T156A28D4AF3668A9ED53278FCD53023E0CE5DFD25A272971F9386FFACA1817404E54825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

font.conf

Path C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\runtime\lib\fonts\font.conf
Size 584B
SHA256 10be692d96ca5b3abc7bff76685c777e62d3e8db5e1628d83ddcabbc141df2a5
MD5 34bb62687693a1aa965440d894fb01af
SHA1 5f8a438fe9e0f0750e4cc844f99bcc87d9288c69
SHA512 5e97a086ba0e17e687112c446f70785aea0b3abee8eddb3910f8b92632d930ec8a99185e6e8552f5c7cd928b1bde1743923c5d04422d2995433017662314f65f
TLSH
T13CF02B52D1FEAD027884AA13BB0D329A6E8193BB60479288F4DC67050FAB44257B355E
MD5 SHA1 SHA512 TLSH

Submit Download

fonts.dir

Path C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\runtime\lib\fonts\fonts.dir
Size 35KB
SHA256 6b41d9e657bf9f835d12fd06bcc35af7f3874459f44c8f56ccad058a3e46623b
MD5 ef30bf1438850d163d51e4e78168cc84
SHA1 1309d420728429e5c6f8341f1b620b0514ac75e2
SHA512 8d86ca6575c9cdbd27ddebc12c022e3379ac6ceca74234106cded8a969370e9f2b02407fb9558f427cbdab4f42ac98975686198eb11abb8c32e57a45d57c6778
SSDEEP 384:P+5hMSx7AXi1QkcLWMzTaVl42lHzOJ0gA3Cwfnql1IG1XDeZEwQnygPcrSkXxsAF:wrSkXxsA9zapanAECfCSLEF6Tlu
TLSH
T146F29D53CEC0D297921D9452A77E8630E6B72827D477E60FCC163AC15782AF8C292FD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jawt.lib

Path C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\runtime\lib\jawt.lib
Size 1KB
SHA256 ae7545b2d473329b330c725ccd00ddc4859bd4fd52b35d50336582b5ec081afe
MD5 1dfd21eec466bf4622de8c18ebd42611
SHA1 52fb2059763fa420824c74f22bef473ae26df019
SHA512 10c7eff6074a94a7a9ee82b14741220a089114d63cb73e89478604681f7b293847a8e60ff8757279009e289783065ef2bd4af58789b948fd75888fc948566d7d
TLSH
T19A3191A29FA34C57CE3CC132D4CAA450627C24412305BEBFBADD09A14FB6DD4F9A1C06
MD5 SHA1 SHA512 TLSH

Submit Download

default.jfc

Path C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\runtime\lib\jfr\default.jfc
Size 39KB
SHA256 26f2d7bf2f8473b3849f9480629eee695edf59fd667da838890a22919237718a
MD5 addb23b132c5c9545a8457c0035f4f12
SHA1 977a996ef63c11b220ec531873931fd29143b4da
SHA512 8e4ad89801b77586543d5a0d287288acbf9a240148e2ee0751770703f33eb1281493767239f2c27ff6ed1f9559b2cc6a1bbf1da6a471af82a144d8e7eded9572
SSDEEP 192:j9ILlN+iQK3LQeaWHT9cA0tza9gVWTnuAgb0/G0uemdP8NP8Gq:j9I5N+6kjWzSza9gQTnsGpuPmPZq
TLSH
T1B303F05005E8AE9D62CE9F3BCF6566035CB194F3616AB03470EC3E945F9949242F38FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

profile.jfc

Path C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\runtime\lib\jfr\profile.jfc
Size 39KB
SHA256 3e2c847608b1e7d182337f56bbf75b6a026ba4e9634b398bd92aec865e9ea8a7
MD5 30d02712f05511787469c5cb13e4c3b6
SHA1 fd750d24688dbad3f45d653637ada1ac89f6826e
SHA512 9731bf2ce695783acb3eabbab88bd131ee0caf2c1963648fac14a287d3fa83d360fe24233f78464d847bda3a48b8eaa2b9f5ad17d816bf9339a23ca5384cf252
SSDEEP 192:jbsh62+HK3LQeqPMT9cC0Gza9hVT0UuAgb0/G0UumKP8NP8Gq:jbsA2+qkxP+bza9hZ0UsGnxPmPZq
TLSH
T14A03E05005E8AE9D628E9F3BCF6566035CB194F3616AB03470EC3E945F9949242F38FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jrt-fs.jar

Path C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\runtime\lib\jrt-fs.jar
Size 107KB
SHA256 67160cc16382621dedd6061098be3ed1abbee232a3678da5b75655c24377770d
MD5 0195b101ef04467360f5007f40844c46
SHA1 ae1b5ac6361054f5b1851814429572a1bbb5e6aa
SHA512 8ec5f4590d59ca4370d7c36fcde5258c393600b533723f3c378704843dbea42ab9037d057b6b0b9aae456851c9d8ee7b33d3ebb11d4a7623aa5a129d611a9704
SSDEEP 1536:YoErfAmPCc6Pxs6MVz9dUfxsjxjP0Qvmg7mFI5raPaebz8owL2uEt3aTnOfRGhi:YNbAmEPxszdUfQFmFzPkTLI3aTaRB
TLSH
T11EB3E13B3BD68453F0222771E884C30E24A158EA85DEB12E4164C5898BF3EF55E65BFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jvm.cfg

Path C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\runtime\lib\jvm.cfg
Size 29B
SHA256 aa9efb969444c1484e29adecab55a122458090616e766b2f1230ef05bc3867e0
MD5 7ce21bdcfa333c231d74a77394206302
SHA1 c5a940d2dee8e7bfc01a87d585ddca420d37e226
SHA512 8b37a1a5600e0a4e5832021c4db50569e33f1ddc8ac4fc2f38d5439272b955b0e3028ea10dec0743b197aa0def32d9e185066d2bac451f81b99539d34006074b
MD5 SHA1 SHA512

Submit Download

jvm.lib

Path C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\runtime\lib\jvm.lib
Size 1.2MB
SHA256 2668fa994062b4ed0f55c88b955e0863cf23edbb63f001537923f41bccbf574f
MD5 f909ff2738bf272db50452be74c0d138
SHA1 775e209112ddc9f0486546c2f4c6f29514fe13f3
SHA512 f3ddb064c4053960015ee1ce8b01903527f339e2b6fb94623b6f2d4edac09889e1b8151d8c00181d87e332309215df566b9138d6e9e369cc13f3b6d6c04867b2
SSDEEP 6144:otV/6mkDb+sX5D/SHjzovWYf2LtZixZ8ZkoImk+Or6vL1B:QJk/5D/SH/oHf2LCxZ8+B+Or6vLn
TLSH
T1B345AA39C0166C3BB16DE5288B6E91F78BAF48148221B3E33A4E7F51C7B752FD601526
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

psfont.properties.ja

Path C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\runtime\lib\psfont.properties.ja
Size 3KB
SHA256 5a4bd51b969bf187ff86d94f4a71fdfbfa602762975fa3c73d264b4575f7c78f
MD5 d4c735bf5756759a1c3bc8de408629fc
SHA1 67c15e05a398b4ce6409d530a058f7e1b2208c20
SHA512 8124b25decfa64a65433ff2ce1f0f7bdf304abe2997568abc35264a705f07152aa993b543da37c4132b4b1b606743c825c90a0eb17b268518d478f5cf0889062
TLSH
T15C71EFA04FB8A7191422069571EFBBD8E61A7FD2C235B14794F168029049DFDFB88B37
MD5 SHA1 SHA512 TLSH

Submit Download

psfontj2d.properties

Path C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\runtime\lib\psfontj2d.properties
Size 11KB
SHA256 cfb2f55fc4a22368567273c38f1afe3fc627ad56710a1d922ada68015710e53f
MD5 f42a635f91f94d6794dc5d1ea87dee18
SHA1 2797b5185e9c6f34dea22349faea83687132483d
SHA512 84520412f1596f584c174c50e2d906d6370f6fc60af10963f659690f82a83e4da4238b37201049dc45fb736ce4c087d7e31f78d8823e7e85f999e9dc7189399b
SSDEEP 192:9ThMPwn+Cyub3Ee4OECKDIcYOhAgZ50OKDQLT2IcpRuWRbHr9NRXUh/QTv9Ho39I:9ThkxzubEFOEscAW5VKsCfHz8RPxGt
TLSH
T1E8326581853C2674115307A2728FAFC0EE5DEAB59430A32790F5B602569EEF02F69F36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blocked.certs

Path C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\runtime\lib\security\blocked.certs
Size 2KB
SHA256 583500b76965eb54b03493372989ab4d3426f85462d1db232c5ae6706a4d6c58
MD5 8273f70416f494f7fa5b6c70a101e00e
SHA1 aeaebb14fbf146fbb0aaf347446c08766c86ca7f
SHA512 e697a57d64ace1f302300f83e875c2726407f8daf7c1d38b07ab8b4b11299fd698582d825bee817a1af85a285f27877a9e603e48e01c72e482a04dc7ab12c8da
TLSH
T1CC512CCAD15E02DA9D407BE208EC82A7779381B2AB2C442A2BF60F420577C5DD73B8C5
MD5 SHA1 SHA512 TLSH

Submit Download

cacerts

Path C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\runtime\lib\security\cacerts
Size 129KB
SHA256 707312d3e8018928f53d108e4534f628cbbfad18196df1a2e72884300be1a69f
MD5 881adfcde495d7617f386bd5a5e266a3
SHA1 8ac5c4224e29351fb5d1242511652816361be139
SHA512 b56f14cf167ae0f59f6e33fa92b61a8b78346eb7320dbafb37ec220864d42cd484dc87743ce3f1f9e9accf8873a6f1add329a7da99ea6205e167d46ccbba855f
SSDEEP 3072:6W50keopPrPXMvYrSuZe1AXA7BTMly8Jg96K:D7pP0Hus6XAlTMl4L
TLSH
T160D35B8B0F3D7405BFE2DE48A688D7277D76F3E42E9695271121C1E41E92BA07C8D12E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

public_suffix_list.dat

Path C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\runtime\lib\security\public_suffix_list.dat
Size 223KB
SHA256 37e71e43c8605f29b9072f152d0ea4708735cdf335a5b68b2bc2f875760806c3
MD5 10b97553377f635919a0febd997fbb6b
SHA1 6ca1cdb596c0c478101c9337bd7d8e9b524875cc
SHA512 6d54c7759840942f408072be79eb66f2d753e0b4094c98efab036f20f2dd8f04f46b2dc0ab7b81b2b412b223c5b6a52b6c79352355627f66efce23a764450d88
SSDEEP 3072:nA3pISlZio3o5MPG4KaF+hChCDBzmgOmbhseoYeUORwZ6OI0mGxzV3qCVMVzke8J:nA3pISlZiushN3SImxSIJua4
TLSH
T15424DD5A6EE9AD0DC01381374072929AD729A21C5E49EF1F1B4470A81CF5E9B2F43FDE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tzdb.dat

Path C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\runtime\lib\tzdb.dat
Size 100KB
SHA256 36cf71e63ce2816fe4456e9195e6c27fa7c9cd431c89ba762eba394ec2c7a1e3
MD5 df8a313edca47a1b2537b7ec047ce4de
SHA1 449cd5af08a45e2b017e670b3df9c8bf06de0c7e
SHA512 7c4c67d5793bdbf3f9b7dec1360b9278ad7206e66f6917568e2fc04e0fbc019b504edc35870eae143f9f313d5b7eca81404d5c4783c7fc61e0f8a1ec1d18e36e
SSDEEP 1536:N0ExeF88hPdr92L674jAGubVj0Lg/////UzJbPdJPNL0mIT/M4Z3jyxU:NPeq8hPdrcWzbVj0hJzdxuT/5ToU
TLSH
T149A3C4B57F7150B7B2CB8122262B5B93097DAC816FC3084675B4BD4E8A76AD7203335E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tzmappings

Path C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\runtime\lib\tzmappings
Size 15KB
SHA256 3929ab1380771d0d542d91cfbae02ce519a76678f5f63813739a6c6b98dc6d72
MD5 f2c6e7d7e1856acd650426427dc72cbd
SHA1 42fcb6d986381170cdef3aeaaf9f8ddc124fdec0
SHA512 3fff765acea8b4b2f1d01ee080920db815212ef05a75832a4a01e174886544b1320f85229d43d5077e050bf8309a2d467d784e828b82cfd095fa1caca7780b35
SSDEEP 192:LQW46R4S2t0ZvH4LacPZ5E1DBMpLcnyhAXnEo2nh+E4:LQW46R4jtavQSRqwSL4
TLSH
T15F622585B06622E4C073EC0D3F227AD3F886F3C49AC69A4D2953C366BD059B766D5837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

release

Path C:\Users\Admin\AppData\Local\Dawn\Dawn (Feather)\runtime\release
Size 1KB
SHA256 ffba67b5eff5d9064c6ec635b4656a235300f57bbb123cff29016b2e48e32f6c
MD5 50ff146f3b805eee89cb631614eb6589
SHA1 508c859a8613cb468bd089f692641b221ab7ed76
SHA512 ab8351c3822d44274e86837def96cc8720c43fbb46d28d82eadd9726b0d83e0498d506a4868db2eaba003a9e8fffc2785cc78713e3b0c0b0d228feef7b8c109d
TLSH
T11C21BE2FD01E88B09F9402C365B4C92FF5DDA9364582ACA4AE8B84C4B077BB7C579129
MD5 SHA1 SHA512 TLSH

Submit Download

ModuleAnalysisCache

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache
Size 67KB
SHA256 848c5f4546807462a33f21b7f6d9f5700ba652460e91c5c065677eb58355bec0
MD5 d56deba64fc160586ed5903cdd309694
SHA1 9c366faf72a9e6d63a36bfb6cd152ed81f86919a
SHA512 a6497d07b45434b77a9ae4a37d1aae55c6d20cebf72493e6db5746abea9bfee5e78b96782caf20ecafc076b7e3bb895d0b3bc0ef0e56c6fab178bf1ecad9d416
SSDEEP 1536:iKLg07Yo2hk3MTfKQ1PflJdpHYLh4iUxpR40i71YigMJyPTOdB4V3CNBQkj2Ra5c:iKLg07Yo2hk3MTfKQ1PflJd9YLqiUpRf
TLSH
T1AD636292E9204E75E1A66F3EF15622627C30394690F8113211DC25EFA987D970B1FBFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download