57cbd7129a2942910d80bafaaede133eb03e4d5fe1aaa9fdc754f32c7d24b055

Resubmissions

06/06/2026, 11:22

260606-ngklgsdx5p3

06/06/2026, 11:16

260606-ndmaxacw3t7

Analysis

user interaction
yes
max time kernel
149s
max time network
97s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
06/06/2026, 11:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Ferns_Installer.exe
Size 156.5MB
Sample260606-ndmaxacw3t
SHA256 57cbd7129a2942910d80bafaaede133eb03e4d5fe1aaa9fdc754f32c7d24b055
MD5 b664d54732f9253a27f4da145fefc312
SHA1 22a22a9d33706840ffff372220e3ffc3190f7293
SHA512 84c373c827156cf755a577d5fb62f3c072216e9c28eba9a15cf77377b3e10164c56c2dcaf44b4f6a04e2b0b535c28024ff757256178fd43466d109fc044cc889
SSDEEP 3145728:huxtTxAQqlwovTG/ehtohUOkieYQDfnQFMifmmHZBT/G1vA9dEhkT+xgGO:hAxZYm/efohUOFwTnQHum3e1vA9dEhq
TLSH
T1F67833727A85A73FE67E563B08F5E71088371614F4A64C2A52D4488CCF6A0706EBF727
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery installer

Malware Config

Signatures

Executes dropped EXE 1 IoCs

pid	Process
5044	Ferns_Installer.tmp

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Ferns_Installer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Ferns_Installer.tmp

Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

Inno Setup installer

installer

resource	yara_rule
behavioral2/memory/1084-0-0x0000000000380000-0x0000000000488000-memory.dmp	innosetup
behavioral2/memory/1084-12-0x0000000000380000-0x0000000000488000-memory.dmp	innosetup
behavioral2/memory/1084-9217-0x0000000000380000-0x0000000000488000-memory.dmp	innosetup

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\ferns-launcher	Ferns_Installer.tmp
Set value (str)	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\ferns-launcher\ = "URL:Ferns Launcher Protocol"	Ferns_Installer.tmp
Set value (str)	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\ferns-launcher\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Ferns\\Client\\FernsLauncher.exe,0"	Ferns_Installer.tmp
Key created	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\ferns-launcher\shell	Ferns_Installer.tmp
Set value (str)	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\ferns-launcher\shell\ = "open"	Ferns_Installer.tmp
Key created	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\ferns-launcher\shell\open	Ferns_Installer.tmp
Set value (str)	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\ferns-launcher\URL Protocol	Ferns_Installer.tmp
Key created	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\ferns-launcher\DefaultIcon	Ferns_Installer.tmp
Key created	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\ferns-launcher\shell\open\command	Ferns_Installer.tmp
Set value (str)	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\ferns-launcher\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Ferns\\Client\\FernsLauncher.exe\" \"%1\""	Ferns_Installer.tmp

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5044	Ferns_Installer.tmp
5044	Ferns_Installer.tmp

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5044	Ferns_Installer.tmp

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 1084 wrote to memory of 5044	1084	Ferns_Installer.exe	80

C:\Users\Admin\AppData\Local\Temp\Ferns_Installer.exe
"C:\Users\Admin\AppData\Local\Temp\Ferns_Installer.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1084
- C:\Users\Admin\AppData\Local\Temp\is-F0UDN4HJ93.tmp\Ferns_Installer.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-F0UDN4HJ93.tmp\Ferns_Installer.tmp" /SL5="$40238,162626151,1019904,C:\Users\Admin\AppData\Local\Temp\Ferns_Installer.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  PID:5044

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

is-SGDZGGEY6A.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\AppTempCommon\LuaApp\Components\is-SGDZGGEY6A.tmp
Size 93B
SHA256 2a302dfa7c7366044a28fed4ed42b4092b04c323b08ac168208b5e830a08a30d
MD5 442236bb38b92a0fa8b566a20b882796
SHA1 8439b506a927e625634dee509e43745d9102ecd2
SHA512 b63e0172f1fe5e42490505e7911f7fb56665eeeb57f37fddd36d00da13e60e91a38a31dafd7b39474022c67d0b1e4203aecfaef16690cda5cd269a62e05ecdea
TLSH
T1F1B0122379D546CFB1C40582A03005800C3410B0738C0B3A5782D400C1C59211522241
MD5 SHA1 SHA512 TLSH

Submit Download

is-M3X57L8MTD.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\LuaSocialLibrariesDeps\is-M3X57L8MTD.tmp
Size 277B
SHA256 7796a00b8760b7193ad3726adbc106160b94ad06be0a59472e806ea709f3f27e
MD5 3ab96f2198f6b647418085e6606da162
SHA1 8f37db1320fb417b57cfeaa8788ae8c233303d42
SHA512 7bece3b2ea3cee7270fd8d692f8c755ec43e0e67586a11b9c9b6c0cbfd0900b338c359110771abe4d959870e0e7b353fefce6a17adce5792cf9b44bdad259e07
TLSH
T1BAD0C212B7C3D32468452E8660345E23BCFDF420BB9D11C0BAA691816181ABD44661DE
MD5 SHA1 SHA512 TLSH

Submit Download

is-EHMO88TLK1.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\UIBlox\UIBlox\Core\Utility\is-EHMO88TLK1.tmp
Size 941B
SHA256 e6612e0e7157bf3c3d17fbc99430cbec36626021d3dda1b0f2f2ec17ef72b521
MD5 47e4946e31331e5e6fb3ce10ad235af7
SHA1 484ac75b63adf29c470003d1e4b76c9a258ace10
SHA512 4fb11a5e7936fef13ec0f5b7ef60281979565efd829daf0a894466f3b45c99590ea2b6a52cf41540fd0d437eec5b81d49119da88ca20d4e0082abae1038b5b0f
TLSH
T1271114BEBC83B2A12C51343B847CA154E59B9A181AFC7091F9FB805D1F1805C003E7DD
MD5 SHA1 SHA512 TLSH

Submit Download

is-Y7K8F4O7O8.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\UIBlox\is-Y7K8F4O7O8.tmp
Size 255B
SHA256 1d9ea87e234d7c2dfe33a497c8a2d2c31894d970c23f6ce40073efe759e15a09
MD5 6168e36d1a0d44fd7186f1920ba11edc
SHA1 89298fc630158c3378369f6512a8ea0d214a7318
SHA512 e95ff43bb1e67cdbde64418fedf75187a35bbb70f521fa0c0161a1402e70f9c1528ec73555ca4aac82ae853572708982da7199efe7a70679f473d39ed5991b41
TLSH
T125D02E03FBC3C310A8423E8AB0388921FDBDF830B70C01C0B8BA2086A14067E04EB1DC
MD5 SHA1 SHA512 TLSH

Submit Download

is-RXSI4YZ9LH.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\lua-promise-df090464-1bb842c3\is-RXSI4YZ9LH.tmp
Size 242B
SHA256 9ad175f853d1ac7fdd48697aae9499ff562878fd98df6305d240a1b28b5f655d
MD5 c0e8e3a5e364c7a1e3a6e36803967dff
SHA1 cb9237f20cce82d212e4782d6402040be1963c34
SHA512 900bd17b16b0dbb79ce672aea5cc2134eb6217ddf6a517ea8c790675e7d08d64807aa2f5b1463ebc8383ffa5faf210255de47130cb460f5f4cc794011075bcd9
TLSH
T184D05E07FBC3D794EA422E8671285961FEBDF430765C81E0B86A409B61506BD84AB19C
MD5 SHA1 SHA512 TLSH

Submit Download

is-8FLGHCSW9Z.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\lua-promise-df090464-1bb842c3\lua-promise\is-8FLGHCSW9Z.tmp
Size 9KB
SHA256 5b0d1c93121221674960b7dd154c1b364448f2de922a145d93bc6d4121cae0ac
MD5 35be3a1bf8b49fae51db7338fee8e53f
SHA1 e490fd31a53726c1e6be50a0eb43236cb5cd530e
SHA512 b98ffa0ff24c7cd4c630405b7b202d504be8d6ec714396129eaa7498a34b2f59eed3e85201890a062851770ec850cd75968c0af470f29b069e153c52151f8558
SSDEEP 192:uAZ43w8lKLMprpE7tBmh46BT0Q0u2gtqtlqGc:uA23w8lKIpra7P646BT0nu2GqtlqGc
TLSH
T1FA124093FA0BB5A74C65B1B6F13F5867ED6FD410103E0684F0A48299611396CB12ACFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is-UIQTM6SRA4.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roact-navigation\is-UIQTM6SRA4.tmp
Size 245B
SHA256 69563265d73a4dc6fcd8dc7037f990e50aaf7cf011e32e096ca9e4f5d97a3eca
MD5 02efc49f84e601bf434c452269708f7d
SHA1 11763c4c423be87d6b9b05127d7a610bb6a5fb65
SHA512 29f8769c16d0ac041659e7c10358423a643272f8598b9e1e28f73b48bade128eff0f5efb55fe74bf86fd2395b4df71fab2622bf1119e4c125e512ba1a2e8f635
TLSH
T1B0D02E13FBC3C310A8062E87B0284820FCBDF420B64C51C0B87A5081600226D48AB1DC
MD5 SHA1 SHA512 TLSH

Submit Download

is-Q0NWPK183Q.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_asset-card\is-Q0NWPK183Q.tmp
Size 242B
SHA256 ab359dd77408c471bdc9274ab4547bc4ef9c00c404f29079c1340cdc1e1d32bd
MD5 c48308430f0744a0d056760f846e5fef
SHA1 b8bca04653ad51a9dc3e00a26d6f4430d8859ad1
SHA512 3f711a1f77e7517a080043aac7c63c301b536db2bd7c82e4b1f7157da851cea52a070186458bba9d1137bd0f80763146173ca1b550a07b769d4a91463122edab
TLSH
T153D05E57FFC3D760A8022E86742A4921FDFDF4207A5D41D0BC6A5185A04066D44AB59C
MD5 SHA1 SHA512 TLSH

Submit Download

is-R4L28EPVJJ.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_asset-card\is-R4L28EPVJJ.tmp
Size 247B
SHA256 968e261b51780a92ed1fe2b671b9e18b436c191be1df5a81734468e1c20578d1
MD5 56e11e22899b878524535c78aeabc2b1
SHA1 64934fb0c8c5ddc36329194a0b96116c9baba70b
SHA512 3fad9842ee34cd458ce6df6eaad3bcbb5931f2e5ad2d4d24c7847eda2cabd53a246b7687049d54ceebfa9a5187094d2e9343a9d01a81fb6be2cf1364282f9207
TLSH
T100D05E1BFBC3D364A8062E96B0384922FDBDF420775D82D0F9AA518560806AD54AB1DC
MD5 SHA1 SHA512 TLSH

Submit Download

is-QVIJ63FQHM.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_cryo\cryo\Dictionary\is-QVIJ63FQHM.tmp
Size 86B
SHA256 de12d26fa3ecb2ccd974d61e81e38de0ad81fc74414d4f0ca4a836fff1aa05cb
MD5 808f4f502813536820c7931cb044d385
SHA1 cab3f72e2609f54d289dbd90456e5e26cd76877a
SHA512 67cae16e004cdedf8ea18c5cc33c9707955fc3dc53827142051907d4f730710e85458f88ed971c3d6d9e3bc2e99a90345f97f06e0d42bb3e8099c4c8d120c164
TLSH
T18EA0122CF5C19025E00733A0603F00285633E46130B04010600540D148148C45812CD4
MD5 SHA1 SHA512 TLSH

Submit Download

is-0B14UM6C8O.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_genericpagination\is-0B14UM6C8O.tmp
Size 239B
SHA256 40e55b76ba3d9d9d20a16c89b7d3118b67355858a43778217a8abf2a532b4408
MD5 08c7e65b5b537ec75fa622a1423d5a16
SHA1 ca469e566b90ee6cfb0ae2234533116d44dc94fa
SHA512 0cabead8a9bd01d6d657feb57d3986c48c0cae54935369c17698d537c4ad41ebe3e086fb96a3f75edabe3d4209f4c20960a291b6be8040c86203eb6cdde6f156
TLSH
T1A0D05E1BFBC3D354A8122E96B4284921FDBDF430775D51D0B96A5085604067D44BB1DC
MD5 SHA1 SHA512 TLSH

Submit Download

is-72XDI0VEX4.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_iap-experience\is-72XDI0VEX4.tmp
Size 247B
SHA256 208c19d2a7b9078f39c6e05e7c6dfe4a9b5e7505e37a045670ccf5789c5f079c
MD5 5f276c095487802a612eb20c8cd67db6
SHA1 aad32229b8b6ca8e1efa87e7f7be8bf66e2b4b5d
SHA512 b9c371026590cb24a49dfb80a3a58516207837ce92ddbe24ff8143177c247d988ec7d86dc0b17ddde107095b7dd13e5a65bcf69b8c7db6cc8f15cf7a4c60ae3c
TLSH
T1B2D02B17F7C3C35064021F82B4244421FD7DF420770C02C1F9A51041500126D046B1DC
MD5 SHA1 SHA512 TLSH

Submit Download

is-49USNDMHV2.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_infinite-scroller-98304e77-0.5.6\infinite-scroller\Components\is-49USNDMHV2.tmp
Size 11B
SHA256 91d968cb191d306da58f037c6d77a34080f0b07153b96c0a10a10e0033591859
MD5 f397df655598796f6c6bc35a98faec0c
SHA1 6fad457643ad9bcec4a82a2ff3b9133e8ce4e4bd
SHA512 404d35b9be358fbe853b864551fcfbdde88490bb29e6e74131360c3f8d2ee7c3b90aa1852c2f5c504a331eb79bd2be51aa003a8e1ae1b105fca2b8a4b5ed2034
MD5 SHA1 SHA512

Submit Download

is-NB1AKBAJCE.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_infinite-scroller-98304e77-0.5.6\infinite-scroller\Components\is-NB1AKBAJCE.tmp
Size 479B
SHA256 ff14bfb9735cd84f4fc42a9555591bdaf16b32db623af3749737985d909995f5
MD5 3a009d9e21ecbdffb4c35d26fb939346
SHA1 f7851f95e4f54f1ce112dce1c773881fce9bac37
SHA512 321f61986c94e37ecad4399fa0d3ae589878816278f9f4c0defc611b7a19960fd45afb50697385b86ef5aa29649b02bdd7811a6553c4403c2b6c48899fc08a6c
TLSH
T181F0A7B4B0EBE3C54511B751D4377185FCDEF8E5913EB200D18E54DCA46012DD175995
MD5 SHA1 SHA512 TLSH

Submit Download

is-NJNSRRN4MZ.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_infinite-scroller-98304e77-0.5.6\infinite-scroller\Components\is-NJNSRRN4MZ.tmp
Size 763B
SHA256 5c64fba19fa8f1463161a2ae63223c53fe4b476cb11798c3b8646ee323bedde6
MD5 113044c5129d315dfa55689ec5de0033
SHA1 741eadc1f96638f67d8b6f0512b6521904fd24b6
SHA512 1a7c4def2e811ed27c88ef3f997ede1cc20092538d911db6cf1c7c6cbb573a949bf18ce1047890dd695d979bf3b32d7ad35281c920ee94993bf8c3cc09a67db3
TLSH
T1DC0197E7699204C16F2B0293C77F8E31F0396496DB34A482B0409A1CE0482FDD7AF9ED
MD5 SHA1 SHA512 TLSH

Submit Download

is-59SBGVQZEC.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_networking-users\networking-users\is-59SBGVQZEC.tmp
Size 112B
SHA256 4cb300623ea92cab461551982738574c1c840462a20db4f10180f3c3f704143c
MD5 e32df457834f40e36d1776da916ef889
SHA1 f15e9985b28246ccff6eda299296742b1d23e1f9
SHA512 67a5cbdaf89add5bcd12385c9bffa875d3c6a2b1f6f5b6ef54bb3506a640e7a0e7ba152cbcbef814b1bfa769d4a7251295ea18bcc66d32a1ad9247d2358bc9d0
TLSH
T11BB092B3A8C7B1839220FBC3C938CB01AB8182B0B42F023E5C09964880B2A80C66A410
MD5 SHA1 SHA512 TLSH

Submit Download

is-M9OUSGHX07.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_networking-users\networking-users\is-M9OUSGHX07.tmp
Size 1KB
SHA256 e0720a05671afc31d0e084d77ca3c3dc7ce70a73082430421a15f224816b2c73
MD5 9c271b7fa2e1ac02e3727d3f78c4198a
SHA1 b3092a97abfea60e42ed7fa974ab430499c8c800
SHA512 1444c24b6156b8fdbcbb9bdd8a4645ed85db9c0a3edd36eb425b60a8c739d26d68dd78134cd0d82918a54e380aa69d3b23bb2fb8f3c5fa0e79cdfd0048ae9774
TLSH
T1BF1180DFE003005278821FE2BDBF7424A7BAE810147D9185D4EE8061A992B1DF8B369B
MD5 SHA1 SHA512 TLSH

Submit Download

is-X8SKTSN1V0.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_purchase-prompt-deps\is-X8SKTSN1V0.tmp
Size 279B
SHA256 b2b3bea7701e1319ec50b2682bca390d7e4995d36bc9b80925033b1a4ad03376
MD5 829683498619afafbedfa454defd292a
SHA1 6e1ae8a041930f21b25ee7c169b08a2f167ca212
SHA512 5759179a5204f2d933e3d1d49396fb344d7b67ce91115c857ff36cd16f8a7bb4b9569c18923367d20d669f87fc96dfbf25a706f84d453b3389867ac779b8e46a
TLSH
T166D0C203FFD3EB2465052E86F0341620FD7DF4A0764841C0B97A208575802BD04A71D8
MD5 SHA1 SHA512 TLSH

Submit Download

is-QO5LVIF5N8.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_purchase-prompt\is-QO5LVIF5N8.tmp
Size 259B
SHA256 ee2b76b3bf4f07b185a32ca32834a6543ac7e02500d678b753ffcbc03b1ef2c6
MD5 9de4999a9af39ca1d0ab433fd86dde4e
SHA1 f801150a4a0d28089d845eae7ccd418df1b9d2c1
SHA512 7181b7bec6a1d712ec67910f000f377cfd94b833cd382ff97497369f06cc208db3a81f59b671e408c6fbeb405239d8efca3ed39f98ea9ddb400638f18672c7c6
TLSH
T1EAD02E03FBC3D325A8062E8AB0388928FCBDF420764D06C0FDAA518A70803AD44AB1DD
MD5 SHA1 SHA512 TLSH

Submit Download

is-AT9BMB19WF.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_purchase-prompt\purchase-prompt\Actions\is-AT9BMB19WF.tmp
Size 113B
SHA256 d0fb8c19897a0fb0535126931f181b6219ff799421d1452c560ca57485fcb0fc
MD5 f76ab74f369ef7386257be49b7e4c201
SHA1 3881686848d3fffbc86bfe8c4bd1c82d6f72b709
SHA512 b8531c0e425e9a56ebe8ec2802457c084ba0244e1e2438b48f76072603ea2b23ffacbfcefc366d84a6f09900cd308509303480e60e3bbaa76f9fbfbea69cff4d
TLSH
T1C1B092CC3D82F2201D1B3AC2C0A2C8C37FBA848404168020AC8BE0011B621E0478206D
MD5 SHA1 SHA512 TLSH

Submit Download

is-VSSFH4T9NY.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_purchase-prompt\purchase-prompt\Actions\is-VSSFH4T9NY.tmp
Size 107B
SHA256 249e2c590813a8f4ef4acbb0dd049fda5ccffe98ae373f43e38c3c0b1fa4f78d
MD5 ce13061e116a8defa74565a544c07ecb
SHA1 6d30778b5a0817c2954124ecf209369eb1d36e5f
SHA512 31784583d22efd6b28cf1c75317900d28a77d33c8f1a4e5be8cae08f5ef287f0f638e6ce1217e2d7b6f3b0f309b68702f3091f26e3f6b429ed3c307f78f0bd73
TLSH
T16FB092C83C82F2202C1B39C2C0A2C8C77FBA848004164020A85BE0011B621E0078206C
MD5 SHA1 SHA512 TLSH

Submit Download

is-2WV6NJYH6T.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_purchase-prompt\purchase-prompt\Localization\Locales\is-2WV6NJYH6T.tmp
Size 706B
SHA256 54439b9542f022d546a2ada7758748406fe9b89641f96411cbe253d9fb168de7
MD5 c80e3e1ea55f88af6e1cf362450a9288
SHA1 0ce682c7797a88a0b4d5236fda9eb80bec463d17
SHA512 bea47b956ef677dd7e271a6a15f1d45a0dee2ea659fb407c01d87204aa629553ea3eeab4f9989f978d80365d8da40f432813b96e9717dd26ebe4b7d2651f28ed
TLSH
T1F0018BF32E81C7101613D75665A8E001FC328C944767C299790D81DFB99B969334DDB9
MD5 SHA1 SHA512 TLSH

Submit Download

is-OT9RUBOVID.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_roact-gamepad\roact-gamepad\is-OT9RUBOVID.tmp
Size 632B
SHA256 da001abe84d9ce0f767b8350d0493b5372d13c07285f3ea26fa79f56e9f9f056
MD5 8a6ea8417f0a068865f6abd5255589c3
SHA1 a82b1dcc4f08e36ac355de4d71cbfc9cf672c44d
SHA512 8f65214d31547817515b1a23aac064d08ac65fb14c01d70778b35e65b4f2766db5ee079aad127de471ebbfb0cf636192765e5bde6fd1c82f72464e83c5b21a15
TLSH
T108F0DDAA684377712801353BD87C9194E56BEEA416F97090F8FE401C3B1C01C003EBEC
MD5 SHA1 SHA512 TLSH

Submit Download

is-1IENW8PGBF.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-a0ab4747-d06ccc8a\rodux\is-1IENW8PGBF.tmp
Size 2KB
SHA256 96ce1feaa1978b2eca1622a2f5a465ea84222c492aef2697e04d238f44ac975f
MD5 c06dcf5ee80c92feced9b502c86251e9
SHA1 60d2f427356a98d82309ba98d62e21bc68564904
SHA512 f04523247ee16b85ace2321f12c1fcd5ee1d575ccebf9b4adad41391507a9cdada0e6287c361f6895306cd2c953e91eb11d7098e77bed242c3cfcb6f043dd1e4
TLSH
T1EB41D45CF0DF20C59D0B72DAA83B411479BBD6426678224435D6EAA0C4F46CD57D2ECF
MD5 SHA1 SHA512 TLSH

Submit Download

is-3M79D19W2E.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-a0ab4747-d06ccc8a\rodux\is-3M79D19W2E.tmp
Size 178B
SHA256 2b5ae697c53843e3a47406bf183a7e6bb11d2d3c6558122e48c7b9928699a2a0
MD5 3c3deb8043e857994c1538cafc674822
SHA1 894905c6e236eaed1fdde9b5d2281594df4fc069
SHA512 0ac66ac5ae4060271a50ec84bd76a520217cee8253ba7f01e5e7ce2f1ec0d89d601818bc29dd151e357c683441e415957f3ffdff6f09730abf34b1425a6ba13f
TLSH
T10CC0126CF5C66019E00735E8EC36041C692BD44170741455B0C610F04598BEC1913CD9
MD5 SHA1 SHA512 TLSH

Submit Download

is-7LL66HLTT7.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-a0ab4747-d06ccc8a\rodux\is-7LL66HLTT7.tmp
Size 264B
SHA256 10c508b7b393ad1f0d826befe068b0be96cca79b4966d0c0f181be66f8cca861
MD5 0ff9e9d69e2be8d8db93fa05469792ae
SHA1 a3e52db5c0f0542c1b5f0a43296c6337fbe515a7
SHA512 849ebfc903bd908939d4dcfd8d58c9dbc495a75521020ecea48f307fc906f8d2fd45916885dcd3d78ffd3e6c01985a035fe88dee04208f4789b7486b7c943a03
TLSH
T1F7D05E4DB0CB676EAF817024C03F48B1F9ABDB0027A611C0B8869256383059EC0BFF68
MD5 SHA1 SHA512 TLSH

Submit Download

is-8UNZT282EU.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-a0ab4747-d06ccc8a\rodux\is-8UNZT282EU.tmp
Size 1KB
SHA256 c3d600481ef7544a4b53326354269a74916854bb7dd158e10771d13889f75046
MD5 b5086523857f7966a929aba2a32d029e
SHA1 90430487e03c9cc156e4f2ed4a687a228a9532e8
SHA512 593305631641e06eb8374ee9a9edc9d175894dcf7a6e7308aa187f60184d3e1116afb6446ab983ff4b18b7c149614a1f09d3f3aab879595a4a7ca8fc79a05fe3
TLSH
T1A9113A55F34F24AA984F3456B035718C7DBAD8D0443C2918B0C7ADBD0AE8694C9DBDDD
MD5 SHA1 SHA512 TLSH

Submit Download

is-MA32E69UQD.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-a0ab4747-d06ccc8a\rodux\is-MA32E69UQD.tmp
Size 1KB
SHA256 495e805fa3011e62edbf2f333316f212fb2a176dd0abe2ce0a84d044246a16ef
MD5 8403a01bd88bccbbb46909c66734307e
SHA1 ad8a0eede3c5b7d18ce00576cc0775c80011cef2
SHA512 8b1f0d0221d6c2eb76340a415d42221bed68c42f8e9f57a7669ba2e5a47ab846523b1fb40cfb708da0c24f335c99bcc91ab0031616cc2f4b1551c6ebf592395e
TLSH
T196413B64F2CF2CAFDC99324AC47D9058BD9FD8242129262475C7801668F415C89AEE9F
MD5 SHA1 SHA512 TLSH

Submit Download

is-N477CV1494.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-a0ab4747-d06ccc8a\rodux\is-N477CV1494.tmp
Size 1KB
SHA256 93b4f42e6a929cdca91aa0ce852ed8b8dfece2ef638948fabf8ab960ddb5f278
MD5 c19c633062e402028f605f22dca8d9d3
SHA1 79f5e49171f9236c7a1ef653128f86540bf22b9d
SHA512 d7ea7dcce85d0952f8b9dee653c1938c21b840ca6899f6429b786cf03a35ef5c7b6fd0fedb4f0d2c87ca4e610fcd875ff793a3a19d9e60711e58e2b760074601
TLSH
T1C821C5A4F1EF78ABA84736A9E03F9098FD2FE455117A2210B0C3445058F459C859FE9E
MD5 SHA1 SHA512 TLSH

Submit Download

is-S2EONN5BSS.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-a0ab4747-d06ccc8a\rodux\is-S2EONN5BSS.tmp
Size 1KB
SHA256 49faff1a64dd19aeb1c9c9572719e7657de451907fd396427c846635785442aa
MD5 5f6006d06974cd9ae75ad0f86acf2636
SHA1 7edcc0b0cb093237038c0965a181e5dffe347cf0
SHA512 b25a189de43ef4aee203e3ec0370df690806e5de4393f23cea5693580ab11027ca933458d9d644184d3d674c0ce1c0b98dbc7bcb0e76996540f6ab29e0ec4ab4
TLSH
T1BD21F87CF68F608A981B3A9FB93D95083D6FC458603C2A04F5C7A86644E965C5DA1CCD
MD5 SHA1 SHA512 TLSH

Submit Download

is-ZOHWCD4XKW.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-a0ab4747-d06ccc8a\rodux\is-ZOHWCD4XKW.tmp
Size 493B
SHA256 9112ad34ecca4ef942eb930868519b6328a11cfd5a2b519d93002b3e5fd38a57
MD5 8392959645f38760c25add370ab0fb6c
SHA1 fec9f2a7d7ae0257c2b09e2a1a2a2391c2a3e678
SHA512 87ae1d811265880b5cb9f3f1fa2af5f2f761c67ceaf875a8675f95f74d4dc28a2dae2de949a9a3101fb29d488404f8332b108f709c4b104e27c0fb21408cab97
TLSH
T1C1F09E93B6873A6E5DD13668C53E04E4FF67E8013211111070C255A5B51512DC13FB7E
MD5 SHA1 SHA512 TLSH

Submit Download

is-TVKPWFMEE7.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-users\is-TVKPWFMEE7.tmp
Size 280B
SHA256 1a162fb261072bbc9261ef2fe32273cab5f9c07b9e0222d3ee7e5c53ba82a95d
MD5 3083aa1386ae9b78587fc9f566b19407
SHA1 46c9c7ab52f7b11387899a5c6118aa3bdca530b0
SHA512 0267eef62eae55cf37ee84863005c2dbdc8e211cbb5014be80cdce843030e298e0eaba9e73b4781cafd61d419dedbd1be77f24937e855196e286e58f9cb8d7da
TLSH
T1AFD0C247FFD7D32964012F8669245E11F8BDF420779D05E8B96601D6644836D046E2EC
MD5 SHA1 SHA512 TLSH

Submit Download

is-UBV6XZQ834.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-0bf501c2-f322c986\is-UBV6XZQ834.tmp
Size 270B
SHA256 8cb6aa6d41f241e088c860714f633def082d8264c2d1318abb580038f54d6216
MD5 1a4ef3622577a4ac7a0cb4d600fcb85f
SHA1 83036ed3a6707d9518ea37b124d2103c5f5976fd
SHA512 acd6d179699c8894e4911e3da0d7ba2b6ad731d722ee7987ef7fdc722430ab2284e7e10b69621d49ebd6307b483fbcac7e961a353e3c09a4d83a101e9374f3a2
TLSH
T10CD0C207FBC3C312D4021FD670280853FC7DB520B72805D1B96680855441A6E0C7B199
MD5 SHA1 SHA512 TLSH

Submit Download

is-5B6PA18QU5.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\NetworkStatus\is-5B6PA18QU5.tmp
Size 99B
SHA256 07578aec1292beffd3811cce7ed09d496253245970feed11596dec4c6dba4456
MD5 ddbe71671da13a7da1d44a18f4335032
SHA1 5d242fa4745820e73f8c9abd265f162baf7ae837
SHA512 02d8b7217decdc7830e4f35306f252081ad6e51e22e0d09973ffd7a38c11effdd1724d0c08e3a843dc8c92364c37aa081aa6dfe437c3f174e05aec037e287799
TLSH
T11EB0929A39C392219C22CFEE60600002F63BF810201C29A1694A91900080AAA40E3884
MD5 SHA1 SHA512 TLSH

Submit Download

is-9MNFPVO8FR.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\NetworkStatus\is-9MNFPVO8FR.tmp
Size 277B
SHA256 aa2d6899ec3f36f3637fb13e4db490e726ee53c88689dc088e33a71b87ccd9b6
MD5 bdbe08728ccddb2a90ce19e3be745302
SHA1 14f3c18b3c20c988b355988ad8c03899a4cb52b1
SHA512 b4e7e18f1c8a45460a42a1d9de23ba38d9e2f287d2c6f8529548d9b2a34daf417237bcec253da55cfc1dad01e2818da53ca820713e919a45ab09d19dfc171128
TLSH
T105D01798BEC5F52CED9237C48432D505FE6BEA12710384A8C4888ADAA2915C1C9038BF
MD5 SHA1 SHA512 TLSH

Submit Download

is-HMBLN1YXX7.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\NetworkStatus\is-HMBLN1YXX7.tmp
Size 431B
SHA256 3eabe75a8daaa45c0f9b83c66899dadc82576b53022078db2c26b45036937ae7
MD5 7c4c1ad7c382374050ae94da6c48b66e
SHA1 81aa509ff7d68875216cf4a8a48f68b6a822cdbb
SHA512 1a3bf63d3bef43abddf422b386754436dcdeceeefa6830120e94058c01f8e5dbfb65fc54bfed4bb6b7efc40a410772ad3d9ec29e2199a5e7af0cfde5dbe7f157
TLSH
T136E02763F09254C6BB2013D0523A9B00EC1BE5A1715B02FE5099530850DA40EA09FD9C
MD5 SHA1 SHA512 TLSH

Submit Download

is-HN0Y3FCDU4.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\NetworkStatus\is-HN0Y3FCDU4.tmp
Size 101B
SHA256 6519f59d68989568a88e2f20fffdda72087311daafd8124e3b7829d05ab901a5
MD5 ebd8e1b1713f6af244b949724841ca2c
SHA1 dca9e19651f74132e022a5c4da64992d784e990b
SHA512 5b7816f29c385f1dcaecf7990c92b8e08329ba148210c04b55dd19d038747d3f53a644482fd37beebefd037c955bf8a9e692aa6ed358be91d4f885243d3a6c10
TLSH
T15BB0928A39C392229C22CFE960200002F63BE810101C2D616A5A919010D05AA40A3885
MD5 SHA1 SHA512 TLSH

Submit Download

is-MIMUHGK63T.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\NetworkStatus\is-MIMUHGK63T.tmp
Size 86B
SHA256 10d8af321ed223823b0f8c5e2a1de4eac4dab87e3397db8b46abec59f1107e2d
MD5 09043aeba4a2ff7bcc050937f7667dba
SHA1 76b40d72a30a03e486c0c7ff6668ef60a78d50df
SHA512 d18a16967b1a07e3004265d9a806e829960ad990bf74567006d6bb2084f7b94e207e1767de79c255fc364f32de2fd446f1c04d55ed29b2d446f0492722ef0dda
TLSH
T14BA0120998C19A80A9C3358040178B04ECACC65050BF00DCD72C02C95040064C027818
MD5 SHA1 SHA512 TLSH

Submit Download

is-TXC8L6H9LH.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\NetworkStatus\is-TXC8L6H9LH.tmp
Size 227B
SHA256 4fc12be217b12d6b163803195bc647d38265ef2afe2dde8dab1d0741701cf160
MD5 ff5bcc83363753d13ee63ed8ee762570
SHA1 df069143cf45ba39cdf9840844fa8a9cd0db4590
SHA512 7b9d487c00cede9d3a93b56721ab795210ecb3751b4ad08174881409b1790ba01f98f72ad4c8ad908344652dc3b0ecac7d9986735a7b123d34fdca04c7b17525
TLSH
T1A6D052AEB26B8563F5706436827A0228E5AED60232280360602C0D1926082E9C9100AE
MD5 SHA1 SHA512 TLSH

Submit Download

is-4PJ8IB09B5.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\RequestBuilder\is-4PJ8IB09B5.tmp
Size 98B
SHA256 063e091b70949bd1e52d57ae6805949d37f53c6f193dae108970c6d01200882b
MD5 d1851e20caaafa0ea877f24f81553ab0
SHA1 49f0898f24dff8edd5fa1036bd8962ba26183d2a
SHA512 ffe88619c29b36c008c3e3a0f5650298971bc8cd1049b48bb434cf003c11265690dd1de7cb03369192530b7b6bba8c8e92ac71042aac36807ffb82b3f793c1f6
TLSH
T12EB012CA7EC39621DC23CFED64700012F73BFC20201C2A71694A919000C05BF45E3C88
MD5 SHA1 SHA512 TLSH

Submit Download

is-7PR7DQ4WWX.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\RequestBuilder\is-7PR7DQ4WWX.tmp
Size 100B
SHA256 8ca0e3b50c875b8ece36b159068fd3ca73c677f3ee13ecc287a6f85ebde28903
MD5 a19880b31d14117f0e3d3c434d789fdd
SHA1 921bffe297359ece1e5fb34d668be3600722f51b
SHA512 daa7c17e8b81bb5af4a39cdf8b8d4be214dcfe69b8b4cb130abfd9557e2388930425e1005b7097d907203adc77f90655df21fcff81c84254be830c2675f5be29
TLSH
T132B0928A3DC39622AE22CFE960200402F63BF810101D2961698A929040805AA84A3998
MD5 SHA1 SHA512 TLSH

Submit Download

is-BVXPFL23WD.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\RequestBuilder\is-BVXPFL23WD.tmp
Size 39B
SHA256 4af127b610dc880d82427ed4f8b752b0800bc9af11995850e33074cbb71b50f3
MD5 4cd35c20c4e726be167e22c2e0c9a0f2
SHA1 46be585110b69b2ebc2d0953a725a551b6b13ad5
SHA512 60239126b82b004889136550314f9b58accd2cff5c44c7f63fc22fbfea16b63b1759b73c1d0d6d2b0913d0c90cdbcb311b5fd38a7508e69f5b07d2f9aeeacccb
MD5 SHA1 SHA512

Submit Download

is-XPW1EOX6L5.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\RequestBuilder\is-XPW1EOX6L5.tmp
Size 3KB
SHA256 5e73bef439d48980573eea1f52dceb176def1449ff36758029c0b5bf4da6dac0
MD5 ae1ef70d5f0810c8498a40d0899af6d0
SHA1 b4ca5a2aa44fa53bc3b2b1f629b04cccb7a97d1b
SHA512 343706ce4379b05a688029fa0e13f1d99309864b94aa04509a6509a6c7cad7d10b9ee9cb92e9177c14a3ea049f3aea3be3b2ff7af40899648efc2304841b05d3
TLSH
T1B251AC3BB1827B86A6D33E54C43FAA46EE2A7590211DC271E07541DE3935E2C8235FBD
MD5 SHA1 SHA512 TLSH

Submit Download

is-CEDJJDEX2A.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-CEDJJDEX2A.tmp
Size 1KB
SHA256 30daab8b42dd1733d08d1db1427c63a06b2a26b4b7e7efba91018cb70fbfe7bf
MD5 8ad555da9c98536fbb7f6da32a413728
SHA1 41f8995668b3f9c5fc698887bd1023b0ad94bbcf
SHA512 6c91394c7f21881a74e15b0c0f420b49ab47ee63b086b542c7ffcdcb29ff4c743d7da126736e8ede3dc2c98e0f119ce3698aac2c5edebb5bdb00d15d3479d38d
TLSH
T1F2212D29256AF19D50C37BF059377F0CF0B28390652EE5EE502407F821D8238995B9BF
MD5 SHA1 SHA512 TLSH

Submit Download

is-CXV28HU5ZS.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-CXV28HU5ZS.tmp
Size 1KB
SHA256 f82e3b36d8204961ababa9be3cdf3304fc531871e0b59524a172096fe8222509
MD5 d8386ca6b9d52f480fffc4aa647d3501
SHA1 a42bcd984e0b733d85721a0256f129a3941bc9d9
SHA512 a99e908b36895a94fd622edeca35131dc498e223f46b517acf82555e4ad75db2c26b5f19f7922ad6f70ec12e7eb2cfeb254bd67f99e0058f97e7119c7efb7076
TLSH
T1613112A2F647B3A14953323991BF94C5FC7CE420272440807898906D3D76A6BC57BEED
MD5 SHA1 SHA512 TLSH

Submit Download

is-JBMWPPWVGZ.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-JBMWPPWVGZ.tmp
Size 513B
SHA256 b9532584ac376ac0ff794dc49faf6ff46c7fb41b27d6a7f4bade1c6cbe8a2d53
MD5 f78b689e51c133c0c8a94cab62b8eb13
SHA1 7a408d9039a70d1125f78c58a2d827fb42e08a06
SHA512 f66b52ad4af33e295abc501b955dfb43b876b0886e63933e4eca925f543324ee2d01f6be94ac222679ff2cf3d512d88ba08f2e12d6e26faa24873d618236f0e8
TLSH
T17CF02BBBBA59FC118B233297D037E354B83EE01263AE95B9C045488414F400F95B7965
MD5 SHA1 SHA512 TLSH

Submit Download

is-JS8OPDFOU8.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-JS8OPDFOU8.tmp
Size 91B
SHA256 5293c0086c40ddb2cc13d4c3a63310939d36e4688d7108b31bc7d3bd97326db9
MD5 73d69aca16f861158657183bb1a92350
SHA1 039ad1b1decb0d0140a902e58536db4ba202f3dd
SHA512 219b743617d4871c79e2416697c9942eb3e27c694cfce8919b5d4295bb1fabc9ba0b3259980309e4c79ec3f75135a3a3853fd3a03e13dc8f1f92602efc0f227a
TLSH
T1CFB012C67EC396118C23CFDD64300012F62BFC20201C2A616946819000C05BF45A3C44
MD5 SHA1 SHA512 TLSH

Submit Download

is-NT7FM1ON5X.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-NT7FM1ON5X.tmp
Size 391B
SHA256 1cdbe8651b99a04ffbffcf15f1e12a96d0026a38e5da7eba8344376d71b65855
MD5 14d0354618cbad305c6fea66bd8a0abc
SHA1 40e16cc3c6b4ba94580e75a90c4353c8d534ddac
SHA512 dabf37ccb8173b13747ed5b72d5c372a0d1f0ca6c3816607be1973e28e9f00a2010aca53972f3a6373a5dafef1a2c941e465066f9be93bdde749dca6f881d83d
TLSH
T1BCE092A4B48FB34ECE933691C57F10198C7FD262372A40056055E1EB643454AC6AFE9D
MD5 SHA1 SHA512 TLSH

Submit Download

is-PTIWZ9N3C0.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-PTIWZ9N3C0.tmp
Size 154B
SHA256 f29fcd2635b4951684ab6c6774f3f2bdf7b7c50211a4189be589bdebf93c1f0f
MD5 ef78e7300d7e6018de865c2be5ca008e
SHA1 5c1610ae2e5ba9b367d8dc9025f4690ebaea1aa1
SHA512 e23dcb1dad51d3c2608798ce82501ce804f06bc769efa05751f771476185a61a5b4850b190fb8f304f039aa9dc45d4dd744fde4b7bdc9c09e9bb67c912374d78
TLSH
T164C08C9725839102DCA363D2C82BF200F36AE990367E2432CC0900D113A41ACC7028E0
MD5 SHA1 SHA512 TLSH

Submit Download

is-SNQ1L7L26G.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-SNQ1L7L26G.tmp
Size 97B
SHA256 d724788dd7f461984ce924d751e9d6258a779e66c9c04c9806e83a4b001a1d6f
MD5 ef5e39b86599bf194d76361bf62ac1aa
SHA1 992d644681610d46a54a3e35287da2bc4b04688d
SHA512 058b69226b30f2c89928fc852bc1e710ea64a906212755096a882818d37581e0e3bdb828b79c6f06ea2b7c7aa1a32b0a19a72f36a958d78aa37982f2832cad73
TLSH
T168B0128639C39212AC23CFDD60300612F72BFC10201C79517946829001D05AF41B3C44
MD5 SHA1 SHA512 TLSH

Submit Download

is-U9KDEYKT3G.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-U9KDEYKT3G.tmp
Size 94B
SHA256 186e3ccd9a001df0eb061577947ec2d8b8b5b26b08a69f4a572b40e86b275f73
MD5 b80fdfb8f65d4e22488b41b2b7ba80f2
SHA1 36e7757b0e343a5e7d49987ba7ce68423d238a69
SHA512 ce6603e89d52afd3afdfa3da1409bd5b17eb9a791a1df543097462ee7228d5cf3d4c8698945c741b163a132927613f3ee287afb8c80c836a8bd9da1feeba10e4
TLSH
T1DBB012C739C392128C23CFED70300003F62BFC10101C2D516A56819010D05AF40A3C41
MD5 SHA1 SHA512 TLSH

Submit Download

is-Z48VI24LO9.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-Z48VI24LO9.tmp
Size 155B
SHA256 219258dad492c3446064bea71bc006badee416cf7ecdfbddb3d25dcdf514ae2f
MD5 8163203fd39b926407a7ca2a4be7e10f
SHA1 3a75da3090c591b2c1299c7e59e9c1ca620dda5a
SHA512 0fe1246088f0c5f64dd85254efbbac26db964077e46766160cedf2b7ccae96eb69b23580e24102fb47946f4d56b7e373203e86ff4886daa4ed56706682f4b532
TLSH
T1C7C08CD624839102DC93A3D2D82AF200F36BCE90366A2532C80A00D513A016DC7028E4
MD5 SHA1 SHA512 TLSH

Submit Download

is-J2I8ABRKLA.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-e2ed13e9-8902a6aa\is-J2I8ABRKLA.tmp
Size 242B
SHA256 c1403279db23f924c7b9a5737002d4d9fd39fbf774fb2027822965f5464162c2
MD5 8b22154353dd2aaed3794cf92d999c2a
SHA1 22531772cc1a68d3b896f090d4fb4135b8f1662d
SHA512 1662441cf000f70ed6920b90c06ef3a2710958a2f2f33759185f3b2c0d4b91ca5071745051dabf4716e90d3c5f22e20007985882e489ad5fcca26418d4648d9f
TLSH
T1DFD05E07FBC3E351A8022F86B0284921FDBDF430B75C52E2B86A4089606176D49AB19C
MD5 SHA1 SHA512 TLSH

Submit Download

is-MEUI9ZXUFH.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-e2ed13e9-8902a6aa\rodux-networking\NetworkStatus\is-MEUI9ZXUFH.tmp
Size 100B
SHA256 530d0c8472b0879a6674e9bd743bced935e8e9c8111e82e5080a966ea5431e20
MD5 553e6790573d7e2ec7c7d9cda047a75a
SHA1 ffe2c8ebbc9e6cd90038584b3678229351b2b31c
SHA512 abd95c84b8c705d13294b7b924680d867afef6984d42c2549e1f01a65de670a446e511a0df789438d0676c81f3250fd580725bed4da0077b1bfb638ba5fb4857
TLSH
T1AAB092CA3DC392219C23CFE9B0200042F63BE820101C6D616A4A91A010C09AA40E3D84
MD5 SHA1 SHA512 TLSH

Submit Download

is-U56R70DQ69.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-e2ed13e9-8902a6aa\rodux-networking\NetworkStatus\is-U56R70DQ69.tmp
Size 668B
SHA256 673fa1519ce542d1c8fb6edb56d011e06d9fe7f50097f3be5a6ff704aa7a7db7
MD5 ab793f280246317f90f8dde5936f907c
SHA1 d62983ba90045464da5a58b85e13075ab5bfb55d
SHA512 47f0fa6badba419bcfce7dfc3fc64d022340b6a8f77a19b377759ce1c7724720e9de8aa9d8697de5597b85eea8448bc625a26360824b83f95fcf3cbfadc88e25
TLSH
T1EB0120F8FA8EB064AE537598C47B41C4FF3FD831112E1410F09580A955B41ED856FDAD
MD5 SHA1 SHA512 TLSH

Submit Download

is-ZEZC58T3WL.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-e2ed13e9-8902a6aa\rodux-networking\NetworkStatus\is-ZEZC58T3WL.tmp
Size 635B
SHA256 7726cb609cf22c037e02ccb0701f6cc218bb76cda5c3a35fc38bb563d79146f3
MD5 06d2c4f9720a6adc2e2c0dbf6352dec2
SHA1 f7fbf2a606f66ecd095d4d832039a6f6c91fcad8
SHA512 8434e05b1831a8f36565175f0a128c64840a4292af23b31e619d8e7bd137ad37109dc454856be770e6e86db65d82ddb946bc1f5159c912c9efbd91ae8102798e
TLSH
T1F3F09E9DE0C3A5B5AC2177E1843856E4EE23DF1136696455B97E05856080AACC00BDE8
MD5 SHA1 SHA512 TLSH

Submit Download

is-H1IDXX36L6.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-e2ed13e9-8902a6aa\rodux-networking\is-H1IDXX36L6.tmp
Size 93B
SHA256 2e74892968e4e166e80c6da97c585e39918ee6e9c614f42ec9e3e1a724428b5b
MD5 9a355b3a2709212de4ce12bbfe43ab9f
SHA1 84d9093568f722d52a47c14d531db9664201074c
SHA512 9d3dd9386aeff89b1b77acbb923226e1b0f6e8fa155e5df5f74015ad56076a2a7cac422a2b7693f8d0a995f0eff00b437a50e4fccfb85267259c4b1a713a3ecf
TLSH
T1CFB012C63DC392218C23CFDDB0300002F62BFC20101C7D516A4681A010C09AF40E3D40
MD5 SHA1 SHA512 TLSH

Submit Download

is-JTVP1P3J35.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\RoactUtilities\is-JTVP1P3J35.tmp
Size 207B
SHA256 0e9c0118853f1e532c8d685ba49f866db0d985d4eb75bf0f08e5fb906f0a3821
MD5 9cc7abcaea1a9606e1f9b84cfeeaf895
SHA1 5789b25d048a3aa26bfaec478a0f0ebe42bdc3c2
SHA512 fb3e6ab40d9adfda6858f0279daf4c5da7357f1837a96b958c7c947479a3cdf1d90e4dc5bda0bf85938934fb8114b99d1ade31aa3db195e11316a8acf220c44a
TLSH
T1AED0C933799F55C7BAC449C7507481412C242CBC62483E2A6AC2DBE1D5CAD7C3512143
MD5 SHA1 SHA512 TLSH

Submit Download

is-55H2XEC2KF.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\textures\ui\LuaApp\graphic\is-55H2XEC2KF.tmp
Size 71KB
SHA256 1a03e6f6a0de045aa588544c392d671c040b82a5598b4246af04f5a74910dc89
MD5 3fec0191b36b9d9448a73ff1a937a1f7
SHA1 bee7d28204245e3088689ac08da18b43eae531ba
SHA512 a8ab2bc2d937963af36d3255c6ea09cae6ab1599996450004bb18e8b8bdfbdde728821ac1662d8a0466680679011d8f366577b143766838fe91edf08a40353ce
SSDEEP 1536:mkeIYNLNDni8w1CeVoNtjWf6qf+yaq1y53jUlu3tZbDlFNMFphN:fkDiDADAfjI3jUwFFNq9
TLSH
T1C76312C11695DE6D80AA5795416EFBEBFC9252942FC167E300C063933838D8B6D5E2BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is-P38TS9OFC8.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\textures\ui\LuaApp\graphic\is-P38TS9OFC8.tmp
Size 20KB
SHA256 fc57f32c26087eef61b37850d60934eda1100ca8773f08e487191a74766053d1
MD5 4f8f43c5d5c2895640ed4fdca39737d5
SHA1 fb46095bdfcab74d61e1171632c25f783ef495fa
SHA512 7aebc0f79b2b23a76fb41df8bab4411813ffb1abc5e2797810679c0eaa690e7af7561b8473405694bd967470be337417fa42e30f0318acbf171d8f31620a31aa
SSDEEP 384:DKy5t41PQOZeZspyI2wYZsNSHnZ/5CnMjF3jrwJSb0DfQFbXx3y3JE1UFYAK:h54QOZeZsp7YsNSHJ5CMjF3jukFbXx37
TLSH
T115A2E0467A278D40F22255A3A2FFD69305C8048B05E04CE6BC49B9DCFC76CF999035AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is-C4SPF8D8FZ.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\textures\ui\LuaDiscussions\is-C4SPF8D8FZ.tmp
Size 247B
SHA256 0a6a5cafb4dee0d8c1d182ddec9f68ca0471d7fc820cf8dc2d68f27a35cd3386
MD5 81ce54dfd6605840a1bd2f9b0b3f807d
SHA1 4a3a4c05b9c14c305a8bb06c768abc4958ba2f1c
SHA512 57069c8ac03dd0fdfd97e2844c19138800ff6f7d508c26e5bc400b30fe78baa0991cc39f0f86fa10cd5d12b6b11b0b09c1a770e5cb2fdca157c2c8986a09e5ff
TLSH
T1B5D097DB55B2BE3BAF8308B482A5B0804B7BE91429058F0F0E80951B410CC0AC6D0302
MD5 SHA1 SHA512 TLSH

Submit Download

is-6H9I9VZ5C8.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\PlatformContent\pc\textures\cobblestone\is-6H9I9VZ5C8.tmp
Size 176B
SHA256 ff11c95774ee0405666fa313f1e53ebb46b1352bfff3456ac2b2caccdab07b4d
MD5 f527b5859d7ca6c080ba954f3013883f
SHA1 3d00b598b1fb762ae0921bcc49ca189f05f417d2
SHA512 e908a29c4316a15f5c16a005c69b402e0525b80e0c3284d6f19074ab8b05d62d079ecf43974b223a68d7c56cbf1789df69ab260553de1aab0edfbdad5e6d654d
TLSH
T11EC01202A08C53E2C70D0D34412B3304C1AA00110423C40507C41C833307130C5B1C40
MD5 SHA1 SHA512 TLSH

Submit Download

is-3TUOZ9BB83.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\content\configs\DateTimeLocaleConfigs\is-3TUOZ9BB83.tmp
Size 2KB
SHA256 5d588b6cb27cfcf985e460635ec1b331d090345455592c4ab7a1d4e82dba4c03
MD5 63f6651063c2fb335191890286e00de7
SHA1 422194440a9d08a8eb058b81c57506341eb4ed30
SHA512 f835741c00e5a2789ea004ec0d6d3be1ceff008249eb323c05cc6bf141a41389978720999516130beaf1b5ac0e9242ab9cd8046b264241ea46067690f130602b
TLSH
T109419F2BC0C45E9B8EB677A9711AC382F48103BF45600C7B75BC8A6D8F3591B0B59A1E
MD5 SHA1 SHA512 TLSH

Submit Download

is-DH9OQLD0QY.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\content\configs\DateTimeLocaleConfigs\is-DH9OQLD0QY.tmp
Size 2KB
SHA256 39c368d993bba3f5ed4a5912705ded57293b4a908c1379d2883f9bd65cd4deea
MD5 f6c70ae470c8c0bffdf31e1dc1af67c2
SHA1 a1f8f6a57c77618b2bba599dab9ab48176ffd6c8
SHA512 e2e50de1a90b91e68a5668443f91b03b4d8bb544dbe3f67a53b49618a7a92762617054a37de5b62869c1390acd76295ba355dec71f9565749f26c0a16dd7a5ac
TLSH
T18741E52BC1C85E9B8EB677BA711AC382F48003BF45600C7B75BD866D4F3591B0B49A1E
MD5 SHA1 SHA512 TLSH

Submit Download

is-9KTKRAK0QO.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\content\textures\MorpherEditor\is-9KTKRAK0QO.tmp
Size 546B
SHA256 993e3655350f2292ce54b472f355aaf42d0d71fde4ffea717d0b9875f6dd204e
MD5 27e25e8e79253929eaabe7ebb9a41019
SHA1 9eed3db83b00ff4175e84928466c5ee724976753
SHA512 238cbebe41bda44d153bbde931d4ff5accca44f7a96b999238aab6eaa840d944543c80ae863d7f0601d16551f67c819884159f553a5ea85b95a2ee0a92f9eb76
TLSH
T117F026F684674566CCA6DEE3E51AD2149C33FD860064EC4985045C3633AB5C954C7547
MD5 SHA1 SHA512 TLSH

Submit Download

is-LQ43KBGTCB.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\content\textures\StudioUIEditor\is-LQ43KBGTCB.tmp
Size 130B
SHA256 630303ec4701779eaf86cc9fbf744b625becda53badc7271cbb6ddc56e638d70
MD5 521fb651c83453bf42d7432896040e5e
SHA1 8fdbf2cc2617b5b58aaa91b94b0bf755d951cad9
SHA512 8fa0a50e52a3c7c53735c7dd7af275ebc9c1843f55bb30ebe0587a85955a8da94ff993822d233f7ed118b1070a7d67718b55ba4a597dc49ed2bf2a3836c696f6
TLSH
T1DEC02BC1B42E383A8419D02743C6C010DC2E404405341834011340194210AB143D0762
MD5 SHA1 SHA512 TLSH

Submit Download

is-2Y9V218N9X.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\content\textures\TerrainTools\is-2Y9V218N9X.tmp
Size 985B
SHA256 c7bae6d856f3bd9f00c122522eb3534d0d198a9473b6a379a5c3458181870646
MD5 2cb16991a26dc803f43963bdc7571e3f
SHA1 12ad66a51b60eeaed199bc521800f7c763a3bc7b
SHA512 4c9467e5e2d83b778d0fb8b6fd97964f8d8126f07bfd50c5d68c256703f291ceaed56be057e8e2c591b2d2c49f6b7e099a2b7088d0bf5bdd901433459663b1f8
TLSH
T1EE11255AE4501983565EEAC694FE40275913488099D5F055B9CAC82F08342BD446DACB
MD5 SHA1 SHA512 TLSH

Submit Download

Ferns_Installer.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-F0UDN4HJ93.tmp\Ferns_Installer.tmp
Size 3.7MB
SHA256 34826c370a10e036f8edaf778ee7a5ef5c337a499a99f052df8e602b27610a66
MD5 4f5586eb38e6d71ad834a7652fc09d9f
SHA1 1daf17d6dd6f369d66f7d511e8a463bf427ab27c
SHA512 517273acbdcfb78481110a80354874afd4c2dfd728028c71ef981fca8ac16406456121837ab02a85021cce8c67152830ed17c57644accb8daea5f24d1d4868b2
SSDEEP 49152:g3SA9I3bZxTZElVySH6UNoO7zjQynN4s7UUZyE8eECaN2Ml3334FE:gCbWroSkynN4sQ+TdMl3334C
TLSH
T1BE068D13B388643FD06B1A395837BA54583F7A7229168C675BF40E8C8F752842E3A777
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1084-12-0x0000000000380000-0x0000000000488000-memory.dmp

Download

memory/1084-9217-0x0000000000380000-0x0000000000488000-memory.dmp

Download

memory/1084-0-0x0000000000380000-0x0000000000488000-memory.dmp

Download

memory/5044-5-0x0000000002910000-0x0000000002911000-memory.dmp

Download

memory/5044-8362-0x00000000001F0000-0x00000000005B4000-memory.dmp

Download

memory/5044-14-0x0000000002910000-0x0000000002911000-memory.dmp

Download

memory/5044-9216-0x00000000001F0000-0x00000000005B4000-memory.dmp

Download

memory/5044-13-0x00000000001F0000-0x00000000005B4000-memory.dmp

Download