Overview

overview

7

Static

static

3

Ferns_Installer.exe

windows10-2004-x64

7

Ferns_Installer.exe

windows11-ltsc_2024-x64

7

Resubmissions

05/07/2026, 20:03

260705-yspppabs5n8

05/07/2026, 19:58

260705-yp3r5sbs2k8

05/07/2026, 19:58

260705-ypsbeaa19q

05/07/2026, 19:56

260705-ynph5aa18n7

Analysis

  • user interaction
    yes
  • max time kernel
    30s
  • max time network
    37s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    05/07/2026, 19:56

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Ferns_Installer.exe
  • Size 156.5MB
  • Sample260705-ynph5aa18n
  • SHA256 57cbd7129a2942910d80bafaaede133eb03e4d5fe1aaa9fdc754f32c7d24b055
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoveryinstaller

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Inno Setup is an open-source installation builder for Windows applications. 2 IoCs

    Inno Setup installer

    installer
  • Modifies registry class 10 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Ferns_Installer.exe
    "C:\Users\Admin\AppData\Local\Temp\Ferns_Installer.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4224
    • C:\Users\Admin\AppData\Local\Temp\is-96PG9B3Y6X.tmp\Ferns_Installer.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-96PG9B3Y6X.tmp\Ferns_Installer.tmp" /SL5="$701E2,162626151,1019904,C:\Users\Admin\AppData\Local\Temp\Ferns_Installer.exe"
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      PID:1196

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        is-27C443K4H7.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\AppTempCommon\LuaApp\Components\is-27C443K4H7.tmp
        • Size 93B
        • SHA256 2a302dfa7c7366044a28fed4ed42b4092b04c323b08ac168208b5e830a08a30d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-LFD322DQOY.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\LuaSocialLibrariesDeps\is-LFD322DQOY.tmp
        • Size 277B
        • SHA256 7796a00b8760b7193ad3726adbc106160b94ad06be0a59472e806ea709f3f27e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-3PSOLWXPXC.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\UIBlox\UIBlox\Core\Utility\is-3PSOLWXPXC.tmp
        • Size 941B
        • SHA256 e6612e0e7157bf3c3d17fbc99430cbec36626021d3dda1b0f2f2ec17ef72b521
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-K3R2UO5PLD.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\UIBlox\is-K3R2UO5PLD.tmp
        • Size 255B
        • SHA256 1d9ea87e234d7c2dfe33a497c8a2d2c31894d970c23f6ce40073efe759e15a09
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-FM93CF4962.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\lua-promise-df090464-1bb842c3\is-FM93CF4962.tmp
        • Size 242B
        • SHA256 9ad175f853d1ac7fdd48697aae9499ff562878fd98df6305d240a1b28b5f655d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-RIAO5YJ8SY.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\lua-promise-df090464-1bb842c3\lua-promise\is-RIAO5YJ8SY.tmp
        • Size 9KB
        • SHA256 5b0d1c93121221674960b7dd154c1b364448f2de922a145d93bc6d4121cae0ac
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        is-20LA0AEQVD.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roact-navigation\is-20LA0AEQVD.tmp
        • Size 245B
        • SHA256 69563265d73a4dc6fcd8dc7037f990e50aaf7cf011e32e096ca9e4f5d97a3eca
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-A2V49PZVSF.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_asset-card\is-A2V49PZVSF.tmp
        • Size 242B
        • SHA256 ab359dd77408c471bdc9274ab4547bc4ef9c00c404f29079c1340cdc1e1d32bd
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-V73WHQACJI.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_asset-card\is-V73WHQACJI.tmp
        • Size 247B
        • SHA256 968e261b51780a92ed1fe2b671b9e18b436c191be1df5a81734468e1c20578d1
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-4HSF20VS2M.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_cryo\cryo\Dictionary\is-4HSF20VS2M.tmp
        • Size 86B
        • SHA256 de12d26fa3ecb2ccd974d61e81e38de0ad81fc74414d4f0ca4a836fff1aa05cb
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-FE1HK3DFEQ.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_genericpagination\is-FE1HK3DFEQ.tmp
        • Size 239B
        • SHA256 40e55b76ba3d9d9d20a16c89b7d3118b67355858a43778217a8abf2a532b4408
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-G0X9ROF13H.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_iap-experience\is-G0X9ROF13H.tmp
        • Size 247B
        • SHA256 208c19d2a7b9078f39c6e05e7c6dfe4a9b5e7505e37a045670ccf5789c5f079c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-14BQ9OW4ZD.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_infinite-scroller-98304e77-0.5.6\infinite-scroller\Components\is-14BQ9OW4ZD.tmp
        • Size 11B
        • SHA256 91d968cb191d306da58f037c6d77a34080f0b07153b96c0a10a10e0033591859
        • MD5 SHA1 SHA512
        Submit Download

        is-MOS0MTMS46.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_infinite-scroller-98304e77-0.5.6\infinite-scroller\Components\is-MOS0MTMS46.tmp
        • Size 763B
        • SHA256 5c64fba19fa8f1463161a2ae63223c53fe4b476cb11798c3b8646ee323bedde6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-WXIW926SQ0.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_infinite-scroller-98304e77-0.5.6\infinite-scroller\Components\is-WXIW926SQ0.tmp
        • Size 479B
        • SHA256 ff14bfb9735cd84f4fc42a9555591bdaf16b32db623af3749737985d909995f5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-D1FGMHQ305.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_networking-users\networking-users\is-D1FGMHQ305.tmp
        • Size 1KB
        • SHA256 e0720a05671afc31d0e084d77ca3c3dc7ce70a73082430421a15f224816b2c73
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-ZE3OOBWTO3.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_networking-users\networking-users\is-ZE3OOBWTO3.tmp
        • Size 112B
        • SHA256 4cb300623ea92cab461551982738574c1c840462a20db4f10180f3c3f704143c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-MYL7YNNT6E.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_purchase-prompt-deps\is-MYL7YNNT6E.tmp
        • Size 279B
        • SHA256 b2b3bea7701e1319ec50b2682bca390d7e4995d36bc9b80925033b1a4ad03376
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-XZ2BE9Z18M.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_purchase-prompt\is-XZ2BE9Z18M.tmp
        • Size 259B
        • SHA256 ee2b76b3bf4f07b185a32ca32834a6543ac7e02500d678b753ffcbc03b1ef2c6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-D39D2BIY0H.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_purchase-prompt\purchase-prompt\Actions\is-D39D2BIY0H.tmp
        • Size 107B
        • SHA256 249e2c590813a8f4ef4acbb0dd049fda5ccffe98ae373f43e38c3c0b1fa4f78d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-XLZV0IDNWN.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_purchase-prompt\purchase-prompt\Actions\is-XLZV0IDNWN.tmp
        • Size 113B
        • SHA256 d0fb8c19897a0fb0535126931f181b6219ff799421d1452c560ca57485fcb0fc
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-D8N2HHX7JE.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_purchase-prompt\purchase-prompt\Localization\Locales\is-D8N2HHX7JE.tmp
        • Size 706B
        • SHA256 54439b9542f022d546a2ada7758748406fe9b89641f96411cbe253d9fb168de7
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-87KW01FO0K.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_roact-gamepad\roact-gamepad\is-87KW01FO0K.tmp
        • Size 632B
        • SHA256 da001abe84d9ce0f767b8350d0493b5372d13c07285f3ea26fa79f56e9f9f056
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-19NQOVVFNL.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-a0ab4747-d06ccc8a\rodux\is-19NQOVVFNL.tmp
        • Size 1KB
        • SHA256 49faff1a64dd19aeb1c9c9572719e7657de451907fd396427c846635785442aa
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-1ZU1UK02Y1.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-a0ab4747-d06ccc8a\rodux\is-1ZU1UK02Y1.tmp
        • Size 264B
        • SHA256 10c508b7b393ad1f0d826befe068b0be96cca79b4966d0c0f181be66f8cca861
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-9MYKSFA17L.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-a0ab4747-d06ccc8a\rodux\is-9MYKSFA17L.tmp
        • Size 493B
        • SHA256 9112ad34ecca4ef942eb930868519b6328a11cfd5a2b519d93002b3e5fd38a57
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-BJQD7WXW5V.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-a0ab4747-d06ccc8a\rodux\is-BJQD7WXW5V.tmp
        • Size 2KB
        • SHA256 96ce1feaa1978b2eca1622a2f5a465ea84222c492aef2697e04d238f44ac975f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-CME18B4SZB.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-a0ab4747-d06ccc8a\rodux\is-CME18B4SZB.tmp
        • Size 1KB
        • SHA256 93b4f42e6a929cdca91aa0ce852ed8b8dfece2ef638948fabf8ab960ddb5f278
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-E6DENB9IUP.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-a0ab4747-d06ccc8a\rodux\is-E6DENB9IUP.tmp
        • Size 1KB
        • SHA256 c3d600481ef7544a4b53326354269a74916854bb7dd158e10771d13889f75046
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-HYSDPV9YYI.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-a0ab4747-d06ccc8a\rodux\is-HYSDPV9YYI.tmp
        • Size 1KB
        • SHA256 495e805fa3011e62edbf2f333316f212fb2a176dd0abe2ce0a84d044246a16ef
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-VSA7114OY5.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-a0ab4747-d06ccc8a\rodux\is-VSA7114OY5.tmp
        • Size 178B
        • SHA256 2b5ae697c53843e3a47406bf183a7e6bb11d2d3c6558122e48c7b9928699a2a0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-IBR8Z5AVAY.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-users\is-IBR8Z5AVAY.tmp
        • Size 280B
        • SHA256 1a162fb261072bbc9261ef2fe32273cab5f9c07b9e0222d3ee7e5c53ba82a95d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-RDO0YJDSDB.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-0bf501c2-f322c986\is-RDO0YJDSDB.tmp
        • Size 270B
        • SHA256 8cb6aa6d41f241e088c860714f633def082d8264c2d1318abb580038f54d6216
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-EBXDXL5TUT.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\NetworkStatus\is-EBXDXL5TUT.tmp
        • Size 227B
        • SHA256 4fc12be217b12d6b163803195bc647d38265ef2afe2dde8dab1d0741701cf160
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-OSPN8ADV35.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\NetworkStatus\is-OSPN8ADV35.tmp
        • Size 86B
        • SHA256 10d8af321ed223823b0f8c5e2a1de4eac4dab87e3397db8b46abec59f1107e2d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-RNB3P2TX42.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\NetworkStatus\is-RNB3P2TX42.tmp
        • Size 99B
        • SHA256 07578aec1292beffd3811cce7ed09d496253245970feed11596dec4c6dba4456
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-TF1SCTB5J3.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\NetworkStatus\is-TF1SCTB5J3.tmp
        • Size 101B
        • SHA256 6519f59d68989568a88e2f20fffdda72087311daafd8124e3b7829d05ab901a5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-VXOPAVVLAJ.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\NetworkStatus\is-VXOPAVVLAJ.tmp
        • Size 277B
        • SHA256 aa2d6899ec3f36f3637fb13e4db490e726ee53c88689dc088e33a71b87ccd9b6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-ZV5JDYB2VO.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\NetworkStatus\is-ZV5JDYB2VO.tmp
        • Size 431B
        • SHA256 3eabe75a8daaa45c0f9b83c66899dadc82576b53022078db2c26b45036937ae7
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-C9ADU3IO3H.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\RequestBuilder\is-C9ADU3IO3H.tmp
        • Size 98B
        • SHA256 063e091b70949bd1e52d57ae6805949d37f53c6f193dae108970c6d01200882b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-NZ4UQ3Q3K4.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\RequestBuilder\is-NZ4UQ3Q3K4.tmp
        • Size 3KB
        • SHA256 5e73bef439d48980573eea1f52dceb176def1449ff36758029c0b5bf4da6dac0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-WHE8O5ZY0H.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\RequestBuilder\is-WHE8O5ZY0H.tmp
        • Size 39B
        • SHA256 4af127b610dc880d82427ed4f8b752b0800bc9af11995850e33074cbb71b50f3
        • MD5 SHA1 SHA512
        Submit Download

        is-X09ZJSQ1I6.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\RequestBuilder\is-X09ZJSQ1I6.tmp
        • Size 100B
        • SHA256 8ca0e3b50c875b8ece36b159068fd3ca73c677f3ee13ecc287a6f85ebde28903
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-3OFG397PFB.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-3OFG397PFB.tmp
        • Size 94B
        • SHA256 186e3ccd9a001df0eb061577947ec2d8b8b5b26b08a69f4a572b40e86b275f73
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-BMF1UFEPX7.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-BMF1UFEPX7.tmp
        • Size 155B
        • SHA256 219258dad492c3446064bea71bc006badee416cf7ecdfbddb3d25dcdf514ae2f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-DFV2RJ8W7D.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-DFV2RJ8W7D.tmp
        • Size 391B
        • SHA256 1cdbe8651b99a04ffbffcf15f1e12a96d0026a38e5da7eba8344376d71b65855
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-KQ5QYUB4GM.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-KQ5QYUB4GM.tmp
        • Size 1KB
        • SHA256 f82e3b36d8204961ababa9be3cdf3304fc531871e0b59524a172096fe8222509
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-MDIQKDJ6ZY.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-MDIQKDJ6ZY.tmp
        • Size 513B
        • SHA256 b9532584ac376ac0ff794dc49faf6ff46c7fb41b27d6a7f4bade1c6cbe8a2d53
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-MIM30IOYI8.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-MIM30IOYI8.tmp
        • Size 97B
        • SHA256 d724788dd7f461984ce924d751e9d6258a779e66c9c04c9806e83a4b001a1d6f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-NUQ1SOP68I.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-NUQ1SOP68I.tmp
        • Size 1KB
        • SHA256 30daab8b42dd1733d08d1db1427c63a06b2a26b4b7e7efba91018cb70fbfe7bf
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-SXEN56WNT1.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-SXEN56WNT1.tmp
        • Size 154B
        • SHA256 f29fcd2635b4951684ab6c6774f3f2bdf7b7c50211a4189be589bdebf93c1f0f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-TVWDO1ORGJ.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-TVWDO1ORGJ.tmp
        • Size 91B
        • SHA256 5293c0086c40ddb2cc13d4c3a63310939d36e4688d7108b31bc7d3bd97326db9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-BR3XB3HKB5.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-e2ed13e9-8902a6aa\is-BR3XB3HKB5.tmp
        • Size 242B
        • SHA256 c1403279db23f924c7b9a5737002d4d9fd39fbf774fb2027822965f5464162c2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-QUB9ISP28P.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-e2ed13e9-8902a6aa\rodux-networking\NetworkStatus\is-QUB9ISP28P.tmp
        • Size 100B
        • SHA256 530d0c8472b0879a6674e9bd743bced935e8e9c8111e82e5080a966ea5431e20
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-TZH42T7W2P.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-e2ed13e9-8902a6aa\rodux-networking\NetworkStatus\is-TZH42T7W2P.tmp
        • Size 635B
        • SHA256 7726cb609cf22c037e02ccb0701f6cc218bb76cda5c3a35fc38bb563d79146f3
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-Y5VIGNU72U.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-e2ed13e9-8902a6aa\rodux-networking\NetworkStatus\is-Y5VIGNU72U.tmp
        • Size 668B
        • SHA256 673fa1519ce542d1c8fb6edb56d011e06d9fe7f50097f3be5a6ff704aa7a7db7
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-LU34CVV0N0.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-e2ed13e9-8902a6aa\rodux-networking\is-LU34CVV0N0.tmp
        • Size 93B
        • SHA256 2e74892968e4e166e80c6da97c585e39918ee6e9c614f42ec9e3e1a724428b5b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-I8MXHH05Y8.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\RoactUtilities\is-I8MXHH05Y8.tmp
        • Size 207B
        • SHA256 0e9c0118853f1e532c8d685ba49f866db0d985d4eb75bf0f08e5fb906f0a3821
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-9FWAVWG7VA.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\textures\ui\LuaApp\graphic\is-9FWAVWG7VA.tmp
        • Size 20KB
        • SHA256 fc57f32c26087eef61b37850d60934eda1100ca8773f08e487191a74766053d1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        is-YSDNJ9R6EP.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\textures\ui\LuaApp\graphic\is-YSDNJ9R6EP.tmp
        • Size 71KB
        • SHA256 1a03e6f6a0de045aa588544c392d671c040b82a5598b4246af04f5a74910dc89
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        is-5EKEXRL9QT.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\textures\ui\LuaDiscussions\is-5EKEXRL9QT.tmp
        • Size 247B
        • SHA256 0a6a5cafb4dee0d8c1d182ddec9f68ca0471d7fc820cf8dc2d68f27a35cd3386
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-W5CJVDOZ8J.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\PlatformContent\pc\textures\cobblestone\is-W5CJVDOZ8J.tmp
        • Size 176B
        • SHA256 ff11c95774ee0405666fa313f1e53ebb46b1352bfff3456ac2b2caccdab07b4d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-1J91PI4SC3.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\content\configs\DateTimeLocaleConfigs\is-1J91PI4SC3.tmp
        • Size 2KB
        • SHA256 5d588b6cb27cfcf985e460635ec1b331d090345455592c4ab7a1d4e82dba4c03
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-UKAO09JOSE.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\content\configs\DateTimeLocaleConfigs\is-UKAO09JOSE.tmp
        • Size 2KB
        • SHA256 39c368d993bba3f5ed4a5912705ded57293b4a908c1379d2883f9bd65cd4deea
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-B1OEYDH5PK.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\content\textures\MorpherEditor\is-B1OEYDH5PK.tmp
        • Size 546B
        • SHA256 993e3655350f2292ce54b472f355aaf42d0d71fde4ffea717d0b9875f6dd204e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-JJFELX37PL.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\content\textures\StudioUIEditor\is-JJFELX37PL.tmp
        • Size 130B
        • SHA256 630303ec4701779eaf86cc9fbf744b625becda53badc7271cbb6ddc56e638d70
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        is-35G87KPQAE.tmp
        • Path C:\Users\Admin\AppData\Local\Ferns\Client\content\textures\TerrainTools\is-35G87KPQAE.tmp
        • Size 985B
        • SHA256 c7bae6d856f3bd9f00c122522eb3534d0d198a9473b6a379a5c3458181870646
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        Ferns_Installer.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\is-96PG9B3Y6X.tmp\Ferns_Installer.tmp
        • Size 3.7MB
        • SHA256 34826c370a10e036f8edaf778ee7a5ef5c337a499a99f052df8e602b27610a66
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/1196-5-0x0000000003230000-0x0000000003231000-memory.dmp
        Download

        memory/1196-8480-0x0000000000740000-0x0000000000B04000-memory.dmp
        Download

        memory/1196-2710-0x0000000003230000-0x0000000003231000-memory.dmp
        Download

        memory/1196-2705-0x0000000000740000-0x0000000000B04000-memory.dmp
        Download

        memory/4224-0-0x00000000004E0000-0x00000000005E8000-memory.dmp
        Download

        memory/4224-2702-0x00000000004E0000-0x00000000005E8000-memory.dmp
        Download