Overview

overview

7

Static

static

3

Ferns_Installer.exe

windows10-2004-x64

7

Ferns_Installer.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    152s
  • max time network
    122s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260629-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    05/07/2026, 22:58

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Ferns_Installer.exe
  • Size 156.5MB
  • Sample260705-2x23csgs3x
  • SHA256 57cbd7129a2942910d80bafaaede133eb03e4d5fe1aaa9fdc754f32c7d24b055
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoveryinstaller

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

    Inno Setup installer

    installer
  • Modifies registry class 10 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Ferns_Installer.exe
    "C:\Users\Admin\AppData\Local\Temp\Ferns_Installer.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:5336
    • C:\Users\Admin\AppData\Local\Temp\is-PUPDZQZMRP.tmp\Ferns_Installer.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-PUPDZQZMRP.tmp\Ferns_Installer.tmp" /SL5="$50220,162626151,1019904,C:\Users\Admin\AppData\Local\Temp\Ferns_Installer.exe"
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      PID:2056

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        is-3AMDV3M4YX.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\AppTempCommon\LuaApp\Components\is-3AMDV3M4YX.tmp
        • Size 93B
        • SHA256 2a302dfa7c7366044a28fed4ed42b4092b04c323b08ac168208b5e830a08a30d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-NZXUTUY2WD.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\LuaSocialLibrariesDeps\is-NZXUTUY2WD.tmp
        • Size 277B
        • SHA256 7796a00b8760b7193ad3726adbc106160b94ad06be0a59472e806ea709f3f27e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-BIS9MLOGCC.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\UIBlox\UIBlox\Core\Utility\is-BIS9MLOGCC.tmp
        • Size 941B
        • SHA256 e6612e0e7157bf3c3d17fbc99430cbec36626021d3dda1b0f2f2ec17ef72b521
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-7JYQ1N5FA8.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\UIBlox\is-7JYQ1N5FA8.tmp
        • Size 255B
        • SHA256 1d9ea87e234d7c2dfe33a497c8a2d2c31894d970c23f6ce40073efe759e15a09
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-6XTVWVOWZ1.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\lua-promise-df090464-1bb842c3\is-6XTVWVOWZ1.tmp
        • Size 242B
        • SHA256 9ad175f853d1ac7fdd48697aae9499ff562878fd98df6305d240a1b28b5f655d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-KJHDBWG79T.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\lua-promise-df090464-1bb842c3\lua-promise\is-KJHDBWG79T.tmp
        • Size 9KB
        • SHA256 5b0d1c93121221674960b7dd154c1b364448f2de922a145d93bc6d4121cae0ac
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        is-O6JUZ21G1N.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roact-navigation\is-O6JUZ21G1N.tmp
        • Size 245B
        • SHA256 69563265d73a4dc6fcd8dc7037f990e50aaf7cf011e32e096ca9e4f5d97a3eca
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-31TBS2LEFJ.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_asset-card\is-31TBS2LEFJ.tmp
        • Size 242B
        • SHA256 ab359dd77408c471bdc9274ab4547bc4ef9c00c404f29079c1340cdc1e1d32bd
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-T10MIE5KFB.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_asset-card\is-T10MIE5KFB.tmp
        • Size 247B
        • SHA256 968e261b51780a92ed1fe2b671b9e18b436c191be1df5a81734468e1c20578d1
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-S8JQ0X24KA.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_cryo\cryo\Dictionary\is-S8JQ0X24KA.tmp
        • Size 86B
        • SHA256 de12d26fa3ecb2ccd974d61e81e38de0ad81fc74414d4f0ca4a836fff1aa05cb
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-IT3GH90ZPF.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_genericpagination\is-IT3GH90ZPF.tmp
        • Size 239B
        • SHA256 40e55b76ba3d9d9d20a16c89b7d3118b67355858a43778217a8abf2a532b4408
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-WJGV76A88A.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_iap-experience\is-WJGV76A88A.tmp
        • Size 247B
        • SHA256 208c19d2a7b9078f39c6e05e7c6dfe4a9b5e7505e37a045670ccf5789c5f079c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-4T6RCZTKUR.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_infinite-scroller-98304e77-0.5.6\infinite-scroller\Components\is-4T6RCZTKUR.tmp
        • Size 11B
        • SHA256 91d968cb191d306da58f037c6d77a34080f0b07153b96c0a10a10e0033591859
        • MD5 SHA1 SHA512
        Submit Download

        is-G00PI6IALB.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_infinite-scroller-98304e77-0.5.6\infinite-scroller\Components\is-G00PI6IALB.tmp
        • Size 479B
        • SHA256 ff14bfb9735cd84f4fc42a9555591bdaf16b32db623af3749737985d909995f5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-Q63BM61FJR.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_infinite-scroller-98304e77-0.5.6\infinite-scroller\Components\is-Q63BM61FJR.tmp
        • Size 763B
        • SHA256 5c64fba19fa8f1463161a2ae63223c53fe4b476cb11798c3b8646ee323bedde6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-3PKBQ9L1GD.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_networking-users\networking-users\is-3PKBQ9L1GD.tmp
        • Size 112B
        • SHA256 4cb300623ea92cab461551982738574c1c840462a20db4f10180f3c3f704143c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-BH8VJF90O9.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_networking-users\networking-users\is-BH8VJF90O9.tmp
        • Size 1KB
        • SHA256 e0720a05671afc31d0e084d77ca3c3dc7ce70a73082430421a15f224816b2c73
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-Q7H9S1VL07.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_purchase-prompt-deps\is-Q7H9S1VL07.tmp
        • Size 279B
        • SHA256 b2b3bea7701e1319ec50b2682bca390d7e4995d36bc9b80925033b1a4ad03376
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-0INOBGMX79.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_purchase-prompt\is-0INOBGMX79.tmp
        • Size 259B
        • SHA256 ee2b76b3bf4f07b185a32ca32834a6543ac7e02500d678b753ffcbc03b1ef2c6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-8R2TK72AVR.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_purchase-prompt\purchase-prompt\Actions\is-8R2TK72AVR.tmp
        • Size 107B
        • SHA256 249e2c590813a8f4ef4acbb0dd049fda5ccffe98ae373f43e38c3c0b1fa4f78d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-HQMD69R15J.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_purchase-prompt\purchase-prompt\Actions\is-HQMD69R15J.tmp
        • Size 113B
        • SHA256 d0fb8c19897a0fb0535126931f181b6219ff799421d1452c560ca57485fcb0fc
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-0LBDHQ55QE.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_purchase-prompt\purchase-prompt\Localization\Locales\is-0LBDHQ55QE.tmp
        • Size 706B
        • SHA256 54439b9542f022d546a2ada7758748406fe9b89641f96411cbe253d9fb168de7
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-W15UKW82AW.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_roact-gamepad\roact-gamepad\is-W15UKW82AW.tmp
        • Size 632B
        • SHA256 da001abe84d9ce0f767b8350d0493b5372d13c07285f3ea26fa79f56e9f9f056
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-5PZOEQCS4M.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-a0ab4747-d06ccc8a\rodux\is-5PZOEQCS4M.tmp
        • Size 1KB
        • SHA256 c3d600481ef7544a4b53326354269a74916854bb7dd158e10771d13889f75046
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-8BDEOYNOZB.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-a0ab4747-d06ccc8a\rodux\is-8BDEOYNOZB.tmp
        • Size 2KB
        • SHA256 96ce1feaa1978b2eca1622a2f5a465ea84222c492aef2697e04d238f44ac975f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-9ZK7FYPW41.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-a0ab4747-d06ccc8a\rodux\is-9ZK7FYPW41.tmp
        • Size 493B
        • SHA256 9112ad34ecca4ef942eb930868519b6328a11cfd5a2b519d93002b3e5fd38a57
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-FXFBXYV4ZB.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-a0ab4747-d06ccc8a\rodux\is-FXFBXYV4ZB.tmp
        • Size 1KB
        • SHA256 495e805fa3011e62edbf2f333316f212fb2a176dd0abe2ce0a84d044246a16ef
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-GFGHDL9XTA.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-a0ab4747-d06ccc8a\rodux\is-GFGHDL9XTA.tmp
        • Size 264B
        • SHA256 10c508b7b393ad1f0d826befe068b0be96cca79b4966d0c0f181be66f8cca861
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-LX8AZY3I1S.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-a0ab4747-d06ccc8a\rodux\is-LX8AZY3I1S.tmp
        • Size 1KB
        • SHA256 49faff1a64dd19aeb1c9c9572719e7657de451907fd396427c846635785442aa
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-WK96VVR3RE.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-a0ab4747-d06ccc8a\rodux\is-WK96VVR3RE.tmp
        • Size 1KB
        • SHA256 93b4f42e6a929cdca91aa0ce852ed8b8dfece2ef638948fabf8ab960ddb5f278
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-ZK962XWWDG.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-a0ab4747-d06ccc8a\rodux\is-ZK962XWWDG.tmp
        • Size 178B
        • SHA256 2b5ae697c53843e3a47406bf183a7e6bb11d2d3c6558122e48c7b9928699a2a0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-WZ4D53KZCO.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-users\is-WZ4D53KZCO.tmp
        • Size 280B
        • SHA256 1a162fb261072bbc9261ef2fe32273cab5f9c07b9e0222d3ee7e5c53ba82a95d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-WTJEAV8BYG.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-0bf501c2-f322c986\is-WTJEAV8BYG.tmp
        • Size 270B
        • SHA256 8cb6aa6d41f241e088c860714f633def082d8264c2d1318abb580038f54d6216
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-22LQWZ263W.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\NetworkStatus\is-22LQWZ263W.tmp
        • Size 277B
        • SHA256 aa2d6899ec3f36f3637fb13e4db490e726ee53c88689dc088e33a71b87ccd9b6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-6WXZ63UGBO.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\NetworkStatus\is-6WXZ63UGBO.tmp
        • Size 101B
        • SHA256 6519f59d68989568a88e2f20fffdda72087311daafd8124e3b7829d05ab901a5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-DLUORWIB4T.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\NetworkStatus\is-DLUORWIB4T.tmp
        • Size 99B
        • SHA256 07578aec1292beffd3811cce7ed09d496253245970feed11596dec4c6dba4456
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-V1EQAK6OLR.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\NetworkStatus\is-V1EQAK6OLR.tmp
        • Size 227B
        • SHA256 4fc12be217b12d6b163803195bc647d38265ef2afe2dde8dab1d0741701cf160
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-VSHBR9J7XS.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\NetworkStatus\is-VSHBR9J7XS.tmp
        • Size 431B
        • SHA256 3eabe75a8daaa45c0f9b83c66899dadc82576b53022078db2c26b45036937ae7
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-WJWQ00SY4C.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\NetworkStatus\is-WJWQ00SY4C.tmp
        • Size 86B
        • SHA256 10d8af321ed223823b0f8c5e2a1de4eac4dab87e3397db8b46abec59f1107e2d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-15XTLNOCRX.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\RequestBuilder\is-15XTLNOCRX.tmp
        • Size 100B
        • SHA256 8ca0e3b50c875b8ece36b159068fd3ca73c677f3ee13ecc287a6f85ebde28903
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-SBXGCEAW9T.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\RequestBuilder\is-SBXGCEAW9T.tmp
        • Size 98B
        • SHA256 063e091b70949bd1e52d57ae6805949d37f53c6f193dae108970c6d01200882b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-T2CWFGJNSA.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\RequestBuilder\is-T2CWFGJNSA.tmp
        • Size 39B
        • SHA256 4af127b610dc880d82427ed4f8b752b0800bc9af11995850e33074cbb71b50f3
        • MD5 SHA1 SHA512
        Submit Download

        is-W7W9HD2MBY.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\RequestBuilder\is-W7W9HD2MBY.tmp
        • Size 3KB
        • SHA256 5e73bef439d48980573eea1f52dceb176def1449ff36758029c0b5bf4da6dac0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-8YU5T2E9UD.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-8YU5T2E9UD.tmp
        • Size 91B
        • SHA256 5293c0086c40ddb2cc13d4c3a63310939d36e4688d7108b31bc7d3bd97326db9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-E77FLFW95S.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-E77FLFW95S.tmp
        • Size 154B
        • SHA256 f29fcd2635b4951684ab6c6774f3f2bdf7b7c50211a4189be589bdebf93c1f0f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-LY8H3LSJQW.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-LY8H3LSJQW.tmp
        • Size 155B
        • SHA256 219258dad492c3446064bea71bc006badee416cf7ecdfbddb3d25dcdf514ae2f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-NAK3P2PJTK.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-NAK3P2PJTK.tmp
        • Size 513B
        • SHA256 b9532584ac376ac0ff794dc49faf6ff46c7fb41b27d6a7f4bade1c6cbe8a2d53
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-RZIFPD6GD2.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-RZIFPD6GD2.tmp
        • Size 1KB
        • SHA256 30daab8b42dd1733d08d1db1427c63a06b2a26b4b7e7efba91018cb70fbfe7bf
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-SJLJLQP62C.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-SJLJLQP62C.tmp
        • Size 97B
        • SHA256 d724788dd7f461984ce924d751e9d6258a779e66c9c04c9806e83a4b001a1d6f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-XZEPW5NHWF.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-XZEPW5NHWF.tmp
        • Size 391B
        • SHA256 1cdbe8651b99a04ffbffcf15f1e12a96d0026a38e5da7eba8344376d71b65855
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-Y1APV4RK62.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-Y1APV4RK62.tmp
        • Size 1KB
        • SHA256 f82e3b36d8204961ababa9be3cdf3304fc531871e0b59524a172096fe8222509
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-YBTWO3R4AK.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-YBTWO3R4AK.tmp
        • Size 94B
        • SHA256 186e3ccd9a001df0eb061577947ec2d8b8b5b26b08a69f4a572b40e86b275f73
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-H3VY501FC4.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-e2ed13e9-8902a6aa\is-H3VY501FC4.tmp
        • Size 242B
        • SHA256 c1403279db23f924c7b9a5737002d4d9fd39fbf774fb2027822965f5464162c2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-AGUCB65O7I.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-e2ed13e9-8902a6aa\rodux-networking\NetworkStatus\is-AGUCB65O7I.tmp
        • Size 635B
        • SHA256 7726cb609cf22c037e02ccb0701f6cc218bb76cda5c3a35fc38bb563d79146f3
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-LXUU640G6C.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-e2ed13e9-8902a6aa\rodux-networking\NetworkStatus\is-LXUU640G6C.tmp
        • Size 668B
        • SHA256 673fa1519ce542d1c8fb6edb56d011e06d9fe7f50097f3be5a6ff704aa7a7db7
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-TS7KNGJX2S.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-e2ed13e9-8902a6aa\rodux-networking\NetworkStatus\is-TS7KNGJX2S.tmp
        • Size 100B
        • SHA256 530d0c8472b0879a6674e9bd743bced935e8e9c8111e82e5080a966ea5431e20
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-AINEIBZTUJ.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-e2ed13e9-8902a6aa\rodux-networking\is-AINEIBZTUJ.tmp
        • Size 93B
        • SHA256 2e74892968e4e166e80c6da97c585e39918ee6e9c614f42ec9e3e1a724428b5b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-BOYXR3SEDJ.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\RoactUtilities\is-BOYXR3SEDJ.tmp
        • Size 207B
        • SHA256 0e9c0118853f1e532c8d685ba49f866db0d985d4eb75bf0f08e5fb906f0a3821
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-51ZMQ7ONCK.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\textures\ui\LuaApp\graphic\is-51ZMQ7ONCK.tmp
        • Size 71KB
        • SHA256 1a03e6f6a0de045aa588544c392d671c040b82a5598b4246af04f5a74910dc89
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        is-PKHJV61CB3.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\textures\ui\LuaApp\graphic\is-PKHJV61CB3.tmp
        • Size 20KB
        • SHA256 fc57f32c26087eef61b37850d60934eda1100ca8773f08e487191a74766053d1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        is-J98AA2EHCW.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\textures\ui\LuaDiscussions\is-J98AA2EHCW.tmp
        • Size 247B
        • SHA256 0a6a5cafb4dee0d8c1d182ddec9f68ca0471d7fc820cf8dc2d68f27a35cd3386
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-WXJE9GWW3V.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\PlatformContent\pc\textures\cobblestone\is-WXJE9GWW3V.tmp
        • Size 176B
        • SHA256 ff11c95774ee0405666fa313f1e53ebb46b1352bfff3456ac2b2caccdab07b4d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-PPQJYE4B56.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\content\configs\DateTimeLocaleConfigs\is-PPQJYE4B56.tmp
        • Size 2KB
        • SHA256 5d588b6cb27cfcf985e460635ec1b331d090345455592c4ab7a1d4e82dba4c03
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-ULW9DLQ02X.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\content\configs\DateTimeLocaleConfigs\is-ULW9DLQ02X.tmp
        • Size 2KB
        • SHA256 39c368d993bba3f5ed4a5912705ded57293b4a908c1379d2883f9bd65cd4deea
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-6NOH71N69Z.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\content\textures\MorpherEditor\is-6NOH71N69Z.tmp
        • Size 546B
        • SHA256 993e3655350f2292ce54b472f355aaf42d0d71fde4ffea717d0b9875f6dd204e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-2RPFDSRWYD.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\content\textures\StudioUIEditor\is-2RPFDSRWYD.tmp
        • Size 130B
        • SHA256 630303ec4701779eaf86cc9fbf744b625becda53badc7271cbb6ddc56e638d70
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-QNOC6L3WR2.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\content\textures\TerrainTools\is-QNOC6L3WR2.tmp
        • Size 985B
        • SHA256 c7bae6d856f3bd9f00c122522eb3534d0d198a9473b6a379a5c3458181870646
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        Ferns_Installer.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\is-PUPDZQZMRP.tmp\Ferns_Installer.tmp
        • Size 3.7MB
        • SHA256 34826c370a10e036f8edaf778ee7a5ef5c337a499a99f052df8e602b27610a66
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/2056-6-0x0000000002790000-0x0000000002791000-memory.dmp
        Download

        memory/2056-6779-0x0000000000AB0000-0x0000000000E74000-memory.dmp
        Download

        memory/2056-318-0x0000000000AB0000-0x0000000000E74000-memory.dmp
        Download

        memory/2056-321-0x0000000002790000-0x0000000002791000-memory.dmp
        Download

        memory/2056-9189-0x0000000000AB0000-0x0000000000E74000-memory.dmp
        Download

        memory/2056-9219-0x0000000000AB0000-0x0000000000E74000-memory.dmp
        Download

        memory/5336-0-0x0000000000720000-0x0000000000828000-memory.dmp
        Download

        memory/5336-317-0x0000000000720000-0x0000000000828000-memory.dmp
        Download

        memory/5336-9220-0x0000000000720000-0x0000000000828000-memory.dmp
        Download