57cbd7129a2942910d80bafaaede133eb03e4d5fe1aaa9fdc754f32c7d24b055

Resubmissions

05/07/2026, 20:03

260705-yspppabs5n8

05/07/2026, 19:58

260705-yp3r5sbs2k8

05/07/2026, 19:58

260705-ypsbeaa19q

05/07/2026, 19:56

260705-ynph5aa18n7

Analysis

user interaction
yes
max time kernel
149s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/07/2026, 20:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Ferns_Installer.exe
Size 156.5MB
Sample260705-yspppabs5n
SHA256 57cbd7129a2942910d80bafaaede133eb03e4d5fe1aaa9fdc754f32c7d24b055
MD5 b664d54732f9253a27f4da145fefc312
SHA1 22a22a9d33706840ffff372220e3ffc3190f7293
SHA512 84c373c827156cf755a577d5fb62f3c072216e9c28eba9a15cf77377b3e10164c56c2dcaf44b4f6a04e2b0b535c28024ff757256178fd43466d109fc044cc889
SSDEEP 3145728:huxtTxAQqlwovTG/ehtohUOkieYQDfnQFMifmmHZBT/G1vA9dEhkT+xgGO:hAxZYm/efohUOFwTnQHum3e1vA9dEhq
TLSH
T1F67833727A85A73FE67E563B08F5E71088371614F4A64C2A52D4488CCF6A0706EBF727
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery installer

Malware Config

Signatures

Executes dropped EXE 1 IoCs

pid	Process
4440	Ferns_Installer.tmp

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
126	discord.com
127	discord.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Ferns_Installer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Ferns_Installer.tmp

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4220	chrome.exe

Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

Inno Setup installer

installer

resource	yara_rule
behavioral1/memory/5076-0-0x0000000000B20000-0x0000000000C28000-memory.dmp	innosetup
behavioral1/memory/5076-238-0x0000000000B20000-0x0000000000C28000-memory.dmp	innosetup
behavioral1/memory/5076-9464-0x0000000000B20000-0x0000000000C28000-memory.dmp	innosetup

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134277554523062530"	chrome.exe

Modifies registry class 12 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\ferns-launcher\shell\ = "open"	Ferns_Installer.tmp
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\ferns-launcher\shell\open\command	Ferns_Installer.tmp
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\ferns-launcher	Ferns_Installer.tmp
Set value (str)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\ferns-launcher\ = "URL:Ferns Launcher Protocol"	Ferns_Installer.tmp
Set value (str)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\ferns-launcher\URL Protocol	Ferns_Installer.tmp
Set value (str)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\ferns-launcher\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Ferns\\Client\\FernsLauncher.exe,0"	Ferns_Installer.tmp
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\ferns-launcher\shell\open	Ferns_Installer.tmp
Set value (str)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\ferns-launcher\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Ferns\\Client\\FernsLauncher.exe\" \"%1\""	Ferns_Installer.tmp
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{B2C1B236-92EE-405E-B5A6-3DF92A85A1F2}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\ferns-launcher\DefaultIcon	Ferns_Installer.tmp
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\ferns-launcher\shell	Ferns_Installer.tmp

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
4440	Ferns_Installer.tmp
4440	Ferns_Installer.tmp
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
1744	chrome.exe
1744	chrome.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid	Process
664	Process not Found
664	Process not Found
664	Process not Found
664	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 15 IoCs

pid	Process
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	5012	chrome.exe
Token: SeCreatePagefilePrivilege	5012	chrome.exe
Token: SeShutdownPrivilege	5012	chrome.exe
Token: SeCreatePagefilePrivilege	5012	chrome.exe
Token: SeShutdownPrivilege	5012	chrome.exe
Token: SeCreatePagefilePrivilege	5012	chrome.exe
Token: SeShutdownPrivilege	5012	chrome.exe
Token: SeCreatePagefilePrivilege	5012	chrome.exe
Token: SeShutdownPrivilege	5012	chrome.exe
Token: SeCreatePagefilePrivilege	5012	chrome.exe
Token: SeShutdownPrivilege	5012	chrome.exe
Token: SeCreatePagefilePrivilege	5012	chrome.exe
Token: SeShutdownPrivilege	5012	chrome.exe
Token: SeCreatePagefilePrivilege	5012	chrome.exe
Token: SeShutdownPrivilege	5012	chrome.exe
Token: SeCreatePagefilePrivilege	5012	chrome.exe
Token: SeShutdownPrivilege	5012	chrome.exe
Token: SeCreatePagefilePrivilege	5012	chrome.exe
Token: SeShutdownPrivilege	5012	chrome.exe
Token: SeCreatePagefilePrivilege	5012	chrome.exe
Token: SeShutdownPrivilege	5012	chrome.exe
Token: SeCreatePagefilePrivilege	5012	chrome.exe
Token: SeShutdownPrivilege	5012	chrome.exe
Token: SeCreatePagefilePrivilege	5012	chrome.exe
Token: SeShutdownPrivilege	5012	chrome.exe
Token: SeCreatePagefilePrivilege	5012	chrome.exe
Token: SeShutdownPrivilege	5012	chrome.exe
Token: SeCreatePagefilePrivilege	5012	chrome.exe
Token: SeShutdownPrivilege	5012	chrome.exe
Token: SeCreatePagefilePrivilege	5012	chrome.exe
Token: SeShutdownPrivilege	5012	chrome.exe
Token: SeCreatePagefilePrivilege	5012	chrome.exe
Token: SeShutdownPrivilege	5012	chrome.exe
Token: SeCreatePagefilePrivilege	5012	chrome.exe
Token: SeShutdownPrivilege	5012	chrome.exe
Token: SeCreatePagefilePrivilege	5012	chrome.exe
Token: SeShutdownPrivilege	5012	chrome.exe
Token: SeCreatePagefilePrivilege	5012	chrome.exe
Token: SeShutdownPrivilege	5012	chrome.exe
Token: SeCreatePagefilePrivilege	5012	chrome.exe
Token: SeShutdownPrivilege	5012	chrome.exe
Token: SeCreatePagefilePrivilege	5012	chrome.exe
Token: SeShutdownPrivilege	5012	chrome.exe
Token: SeCreatePagefilePrivilege	5012	chrome.exe
Token: SeShutdownPrivilege	5012	chrome.exe
Token: SeCreatePagefilePrivilege	5012	chrome.exe
Token: SeShutdownPrivilege	5012	chrome.exe
Token: SeCreatePagefilePrivilege	5012	chrome.exe
Token: SeShutdownPrivilege	5012	chrome.exe
Token: SeCreatePagefilePrivilege	5012	chrome.exe
Token: SeShutdownPrivilege	5012	chrome.exe
Token: SeCreatePagefilePrivilege	5012	chrome.exe
Token: SeShutdownPrivilege	5012	chrome.exe
Token: SeCreatePagefilePrivilege	5012	chrome.exe
Token: SeShutdownPrivilege	5012	chrome.exe
Token: SeCreatePagefilePrivilege	5012	chrome.exe
Token: SeShutdownPrivilege	5012	chrome.exe
Token: SeCreatePagefilePrivilege	5012	chrome.exe
Token: SeShutdownPrivilege	5012	chrome.exe
Token: SeCreatePagefilePrivilege	5012	chrome.exe
Token: SeShutdownPrivilege	5012	chrome.exe
Token: SeCreatePagefilePrivilege	5012	chrome.exe
Token: SeShutdownPrivilege	5012	chrome.exe
Token: SeCreatePagefilePrivilege	5012	chrome.exe

Suspicious use of FindShellTrayWindow 35 IoCs

pid	Process
4440	Ferns_Installer.tmp
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe
5012	chrome.exe

Suspicious use of WriteProcessMemory 49 IoCs

description	pid	Process	procid_target
PID 5076 wrote to memory of 4440	5076	Ferns_Installer.exe	89
PID 5012 wrote to memory of 3440	5012	chrome.exe	101
PID 5012 wrote to memory of 4220	5012	chrome.exe	102
PID 5012 wrote to memory of 4144	5012	chrome.exe	103
PID 5012 wrote to memory of 4144	5012	chrome.exe	103
PID 5012 wrote to memory of 2312	5012	chrome.exe	105
PID 5012 wrote to memory of 2312	5012	chrome.exe	105
PID 5012 wrote to memory of 2020	5012	chrome.exe	106
PID 5012 wrote to memory of 2020	5012	chrome.exe	106
PID 5012 wrote to memory of 3308	5012	chrome.exe	107
PID 5012 wrote to memory of 3308	5012	chrome.exe	107
PID 5012 wrote to memory of 3080	5012	chrome.exe	108
PID 5012 wrote to memory of 3080	5012	chrome.exe	108
PID 5012 wrote to memory of 4216	5012	chrome.exe	109
PID 5012 wrote to memory of 4216	5012	chrome.exe	109
PID 5012 wrote to memory of 5976	5012	chrome.exe	111
PID 5012 wrote to memory of 5976	5012	chrome.exe	111
PID 5012 wrote to memory of 4564	5012	chrome.exe	112
PID 5012 wrote to memory of 4564	5012	chrome.exe	112
PID 5012 wrote to memory of 5296	5012	chrome.exe	113
PID 5012 wrote to memory of 5356	5012	chrome.exe	115
PID 5012 wrote to memory of 5356	5012	chrome.exe	115
PID 5012 wrote to memory of 968	5012	chrome.exe	116
PID 5012 wrote to memory of 968	5012	chrome.exe	116
PID 5012 wrote to memory of 2420	5012	chrome.exe	117
PID 5012 wrote to memory of 2420	5012	chrome.exe	117
PID 5012 wrote to memory of 5408	5012	chrome.exe	118
PID 5012 wrote to memory of 5408	5012	chrome.exe	118
PID 5012 wrote to memory of 5704	5012	chrome.exe	119
PID 5012 wrote to memory of 5704	5012	chrome.exe	119
PID 5012 wrote to memory of 3144	5012	chrome.exe	120
PID 5012 wrote to memory of 3144	5012	chrome.exe	120
PID 5012 wrote to memory of 5188	5012	chrome.exe	121
PID 5012 wrote to memory of 5188	5012	chrome.exe	121
PID 5012 wrote to memory of 5268	5012	chrome.exe	125
PID 5012 wrote to memory of 5268	5012	chrome.exe	125
PID 5012 wrote to memory of 1780	5012	chrome.exe	126
PID 5012 wrote to memory of 4912	5012	chrome.exe	127
PID 5012 wrote to memory of 5540	5012	chrome.exe	128
PID 5012 wrote to memory of 936	5012	chrome.exe	129
PID 5012 wrote to memory of 936	5012	chrome.exe	129
PID 5012 wrote to memory of 5600	5012	chrome.exe	130
PID 5012 wrote to memory of 5600	5012	chrome.exe	130
PID 5012 wrote to memory of 5724	5012	chrome.exe	131
PID 5012 wrote to memory of 4280	5012	chrome.exe	132
PID 5012 wrote to memory of 4280	5012	chrome.exe	132
PID 5012 wrote to memory of 5252	5012	chrome.exe	133
PID 5012 wrote to memory of 5252	5012	chrome.exe	133
PID 5012 wrote to memory of 1744	5012	chrome.exe	134

C:\Users\Admin\AppData\Local\Temp\Ferns_Installer.exe
"C:\Users\Admin\AppData\Local\Temp\Ferns_Installer.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:5076
- C:\Users\Admin\AppData\Local\Temp\is-0QAEJ4S3GJ.tmp\Ferns_Installer.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-0QAEJ4S3GJ.tmp\Ferns_Installer.tmp" /SL5="$90232,162626151,1019904,C:\Users\Admin\AppData\Local\Temp\Ferns_Installer.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  PID:4440

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffbf77cc728,0x7ffbf77cc734,0x7ffbf77cc740
  2⤵
  PID:3440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1940,i,1562143226987762204,15384416238512677748,524288 --field-trial-handle=2100,i,11027519513867629477,17548007112941308274,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2212 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1720,i,17466685179983663860,16109978478616238132,262144 --field-trial-handle=2100,i,11027519513867629477,17548007112941308274,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2096 /prefetch:2
  2⤵
  PID:4144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2460,i,13900814040931244431,11112088658748990243,524288 --field-trial-handle=2100,i,11027519513867629477,17548007112941308274,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2424 /prefetch:8
  2⤵
  PID:2312
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3184,i,11631071212526505769,5227518180890830353,2097152 --field-trial-handle=2100,i,11027519513867629477,17548007112941308274,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3192 /prefetch:1
  2⤵
  PID:2020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3200,i,4844422521425624771,1649651789758023096,2097152 --field-trial-handle=2100,i,11027519513867629477,17548007112941308274,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:3308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4332,i,7155936393309588993,10907040738900598473,2097152 --field-trial-handle=2100,i,11027519513867629477,17548007112941308274,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4356 /prefetch:2
  2⤵
  PID:3080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4712,i,18234660996616373699,8428192068538300604,2097152 --field-trial-handle=2100,i,11027519513867629477,17548007112941308274,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4672 /prefetch:1
  2⤵
  PID:4216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4648,i,17151070532211767984,10296931360877787056,524288 --field-trial-handle=2100,i,11027519513867629477,17548007112941308274,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4912 /prefetch:8
  2⤵
  PID:5976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5052,i,5478326003303103439,17531806705395237118,524288 --field-trial-handle=2100,i,11027519513867629477,17548007112941308274,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5064 /prefetch:8
  2⤵
  PID:4564
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5704,i,10816396922187073556,8578836001756638173,524288 --field-trial-handle=2100,i,11027519513867629477,17548007112941308274,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5108 /prefetch:8
  2⤵
  PID:5296
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5124,i,1835432768420937545,4282406034990327739,2097152 --field-trial-handle=2100,i,11027519513867629477,17548007112941308274,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5704 /prefetch:1
  2⤵
  PID:5356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4644,i,15674484052339910151,15561106186791491190,2097152 --field-trial-handle=2100,i,11027519513867629477,17548007112941308274,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5912 /prefetch:1
  2⤵
  PID:968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=3216,i,12209209437190547112,15253217387359954811,2097152 --field-trial-handle=2100,i,11027519513867629477,17548007112941308274,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6152 /prefetch:1
  2⤵
  PID:2420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=6464,i,15994671107613171366,16997465183809843937,2097152 --field-trial-handle=2100,i,11027519513867629477,17548007112941308274,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5224 /prefetch:1
  2⤵
  PID:5408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=3208,i,15026685343721207122,6699399282246738253,2097152 --field-trial-handle=2100,i,11027519513867629477,17548007112941308274,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4656 /prefetch:1
  2⤵
  PID:5704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=3332,i,1281156163934020400,15470887718804554452,2097152 --field-trial-handle=2100,i,11027519513867629477,17548007112941308274,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3300 /prefetch:1
  2⤵
  PID:3144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=3344,i,8951024114267196756,2695395426599694670,2097152 --field-trial-handle=2100,i,11027519513867629477,17548007112941308274,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6592 /prefetch:1
  2⤵
  PID:5188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6992,i,10409619629103915386,15173012584945713239,2097152 --field-trial-handle=2100,i,11027519513867629477,17548007112941308274,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7032 /prefetch:1
  2⤵
  PID:5268
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6604,i,17961125438542700129,3615113036267458242,524288 --field-trial-handle=2100,i,11027519513867629477,17548007112941308274,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6612 /prefetch:8
  2⤵
  PID:1780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6592,i,11341107279429320944,9344928417067875497,524288 --field-trial-handle=2100,i,11027519513867629477,17548007112941308274,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6660 /prefetch:8
  2⤵
  PID:4912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3208,i,2223347571881498304,6572843033598446973,524288 --field-trial-handle=2100,i,11027519513867629477,17548007112941308274,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6708 /prefetch:8
  2⤵
  PID:5540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=4368,i,940030121491576791,569369541359510441,2097152 --field-trial-handle=2100,i,11027519513867629477,17548007112941308274,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7076 /prefetch:1
  2⤵
  PID:936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6608,i,15004188558620136140,3822953474181047821,2097152 --field-trial-handle=2100,i,11027519513867629477,17548007112941308274,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6648 /prefetch:1
  2⤵
  PID:5600
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=7012,i,9295078598956177072,17243167505199765003,524288 --field-trial-handle=2100,i,11027519513867629477,17548007112941308274,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6908 /prefetch:8
  2⤵
  - Modifies registry class
  PID:5724
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=6948,i,16833527620480231031,14064893282087224728,524288 --field-trial-handle=2100,i,11027519513867629477,17548007112941308274,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4440 /prefetch:8
  2⤵
  PID:4280
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=5888,i,17994700251129431304,11868317945816717870,2097152 --field-trial-handle=2100,i,11027519513867629477,17548007112941308274,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=876 /prefetch:1
  2⤵
  PID:5252
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6640,i,9673096734382546106,9076791289067520307,262144 --field-trial-handle=2100,i,11027519513867629477,17548007112941308274,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6328 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1744

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1924

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4780

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

is-H20VQWN4O8.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\AppTempCommon\LuaApp\Components\is-H20VQWN4O8.tmp
Size 93B
SHA256 2a302dfa7c7366044a28fed4ed42b4092b04c323b08ac168208b5e830a08a30d
MD5 442236bb38b92a0fa8b566a20b882796
SHA1 8439b506a927e625634dee509e43745d9102ecd2
SHA512 b63e0172f1fe5e42490505e7911f7fb56665eeeb57f37fddd36d00da13e60e91a38a31dafd7b39474022c67d0b1e4203aecfaef16690cda5cd269a62e05ecdea
TLSH
T1F1B0122379D546CFB1C40582A03005800C3410B0738C0B3A5782D400C1C59211522241
MD5 SHA1 SHA512 TLSH

Submit Download

is-KC19N2MISH.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\LuaSocialLibrariesDeps\is-KC19N2MISH.tmp
Size 277B
SHA256 7796a00b8760b7193ad3726adbc106160b94ad06be0a59472e806ea709f3f27e
MD5 3ab96f2198f6b647418085e6606da162
SHA1 8f37db1320fb417b57cfeaa8788ae8c233303d42
SHA512 7bece3b2ea3cee7270fd8d692f8c755ec43e0e67586a11b9c9b6c0cbfd0900b338c359110771abe4d959870e0e7b353fefce6a17adce5792cf9b44bdad259e07
TLSH
T1BAD0C212B7C3D32468452E8660345E23BCFDF420BB9D11C0BAA691816181ABD44661DE
MD5 SHA1 SHA512 TLSH

Submit Download

is-XGA2IZH3UO.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\UIBlox\UIBlox\Core\Utility\is-XGA2IZH3UO.tmp
Size 941B
SHA256 e6612e0e7157bf3c3d17fbc99430cbec36626021d3dda1b0f2f2ec17ef72b521
MD5 47e4946e31331e5e6fb3ce10ad235af7
SHA1 484ac75b63adf29c470003d1e4b76c9a258ace10
SHA512 4fb11a5e7936fef13ec0f5b7ef60281979565efd829daf0a894466f3b45c99590ea2b6a52cf41540fd0d437eec5b81d49119da88ca20d4e0082abae1038b5b0f
TLSH
T1271114BEBC83B2A12C51343B847CA154E59B9A181AFC7091F9FB805D1F1805C003E7DD
MD5 SHA1 SHA512 TLSH

Submit Download

is-NZV248S6ZR.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\UIBlox\is-NZV248S6ZR.tmp
Size 255B
SHA256 1d9ea87e234d7c2dfe33a497c8a2d2c31894d970c23f6ce40073efe759e15a09
MD5 6168e36d1a0d44fd7186f1920ba11edc
SHA1 89298fc630158c3378369f6512a8ea0d214a7318
SHA512 e95ff43bb1e67cdbde64418fedf75187a35bbb70f521fa0c0161a1402e70f9c1528ec73555ca4aac82ae853572708982da7199efe7a70679f473d39ed5991b41
TLSH
T125D02E03FBC3C310A8423E8AB0388921FDBDF830B70C01C0B8BA2086A14067E04EB1DC
MD5 SHA1 SHA512 TLSH

Submit Download

is-UFDXZDNWKS.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\lua-promise-df090464-1bb842c3\is-UFDXZDNWKS.tmp
Size 242B
SHA256 9ad175f853d1ac7fdd48697aae9499ff562878fd98df6305d240a1b28b5f655d
MD5 c0e8e3a5e364c7a1e3a6e36803967dff
SHA1 cb9237f20cce82d212e4782d6402040be1963c34
SHA512 900bd17b16b0dbb79ce672aea5cc2134eb6217ddf6a517ea8c790675e7d08d64807aa2f5b1463ebc8383ffa5faf210255de47130cb460f5f4cc794011075bcd9
TLSH
T184D05E07FBC3D794EA422E8671285961FEBDF430765C81E0B86A409B61506BD84AB19C
MD5 SHA1 SHA512 TLSH

Submit Download

is-2SS8SODQ64.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\lua-promise-df090464-1bb842c3\lua-promise\is-2SS8SODQ64.tmp
Size 9KB
SHA256 5b0d1c93121221674960b7dd154c1b364448f2de922a145d93bc6d4121cae0ac
MD5 35be3a1bf8b49fae51db7338fee8e53f
SHA1 e490fd31a53726c1e6be50a0eb43236cb5cd530e
SHA512 b98ffa0ff24c7cd4c630405b7b202d504be8d6ec714396129eaa7498a34b2f59eed3e85201890a062851770ec850cd75968c0af470f29b069e153c52151f8558
SSDEEP 192:uAZ43w8lKLMprpE7tBmh46BT0Q0u2gtqtlqGc:uA23w8lKIpra7P646BT0nu2GqtlqGc
TLSH
T1FA124093FA0BB5A74C65B1B6F13F5867ED6FD410103E0684F0A48299611396CB12ACFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is-YL05XTWOXE.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roact-navigation\is-YL05XTWOXE.tmp
Size 245B
SHA256 69563265d73a4dc6fcd8dc7037f990e50aaf7cf011e32e096ca9e4f5d97a3eca
MD5 02efc49f84e601bf434c452269708f7d
SHA1 11763c4c423be87d6b9b05127d7a610bb6a5fb65
SHA512 29f8769c16d0ac041659e7c10358423a643272f8598b9e1e28f73b48bade128eff0f5efb55fe74bf86fd2395b4df71fab2622bf1119e4c125e512ba1a2e8f635
TLSH
T1B0D02E13FBC3C310A8062E87B0284820FCBDF420B64C51C0B87A5081600226D48AB1DC
MD5 SHA1 SHA512 TLSH

Submit Download

is-6MHO4X9S75.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_asset-card\is-6MHO4X9S75.tmp
Size 242B
SHA256 ab359dd77408c471bdc9274ab4547bc4ef9c00c404f29079c1340cdc1e1d32bd
MD5 c48308430f0744a0d056760f846e5fef
SHA1 b8bca04653ad51a9dc3e00a26d6f4430d8859ad1
SHA512 3f711a1f77e7517a080043aac7c63c301b536db2bd7c82e4b1f7157da851cea52a070186458bba9d1137bd0f80763146173ca1b550a07b769d4a91463122edab
TLSH
T153D05E57FFC3D760A8022E86742A4921FDFDF4207A5D41D0BC6A5185A04066D44AB59C
MD5 SHA1 SHA512 TLSH

Submit Download

is-QJDDFX9KS5.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_asset-card\is-QJDDFX9KS5.tmp
Size 247B
SHA256 968e261b51780a92ed1fe2b671b9e18b436c191be1df5a81734468e1c20578d1
MD5 56e11e22899b878524535c78aeabc2b1
SHA1 64934fb0c8c5ddc36329194a0b96116c9baba70b
SHA512 3fad9842ee34cd458ce6df6eaad3bcbb5931f2e5ad2d4d24c7847eda2cabd53a246b7687049d54ceebfa9a5187094d2e9343a9d01a81fb6be2cf1364282f9207
TLSH
T100D05E1BFBC3D364A8062E96B0384922FDBDF420775D82D0F9AA518560806AD54AB1DC
MD5 SHA1 SHA512 TLSH

Submit Download

is-1L3V5N9JEF.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_cryo\cryo\Dictionary\is-1L3V5N9JEF.tmp
Size 86B
SHA256 de12d26fa3ecb2ccd974d61e81e38de0ad81fc74414d4f0ca4a836fff1aa05cb
MD5 808f4f502813536820c7931cb044d385
SHA1 cab3f72e2609f54d289dbd90456e5e26cd76877a
SHA512 67cae16e004cdedf8ea18c5cc33c9707955fc3dc53827142051907d4f730710e85458f88ed971c3d6d9e3bc2e99a90345f97f06e0d42bb3e8099c4c8d120c164
TLSH
T18EA0122CF5C19025E00733A0603F00285633E46130B04010600540D148148C45812CD4
MD5 SHA1 SHA512 TLSH

Submit Download

is-7N6MY4Y9LT.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_genericpagination\is-7N6MY4Y9LT.tmp
Size 239B
SHA256 40e55b76ba3d9d9d20a16c89b7d3118b67355858a43778217a8abf2a532b4408
MD5 08c7e65b5b537ec75fa622a1423d5a16
SHA1 ca469e566b90ee6cfb0ae2234533116d44dc94fa
SHA512 0cabead8a9bd01d6d657feb57d3986c48c0cae54935369c17698d537c4ad41ebe3e086fb96a3f75edabe3d4209f4c20960a291b6be8040c86203eb6cdde6f156
TLSH
T1A0D05E1BFBC3D354A8122E96B4284921FDBDF430775D51D0B96A5085604067D44BB1DC
MD5 SHA1 SHA512 TLSH

Submit Download

is-14K7WMWTXH.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_iap-experience\is-14K7WMWTXH.tmp
Size 247B
SHA256 208c19d2a7b9078f39c6e05e7c6dfe4a9b5e7505e37a045670ccf5789c5f079c
MD5 5f276c095487802a612eb20c8cd67db6
SHA1 aad32229b8b6ca8e1efa87e7f7be8bf66e2b4b5d
SHA512 b9c371026590cb24a49dfb80a3a58516207837ce92ddbe24ff8143177c247d988ec7d86dc0b17ddde107095b7dd13e5a65bcf69b8c7db6cc8f15cf7a4c60ae3c
TLSH
T1B2D02B17F7C3C35064021F82B4244421FD7DF420770C02C1F9A51041500126D046B1DC
MD5 SHA1 SHA512 TLSH

Submit Download

is-9VBIVO83N0.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_infinite-scroller-98304e77-0.5.6\infinite-scroller\Components\is-9VBIVO83N0.tmp
Size 763B
SHA256 5c64fba19fa8f1463161a2ae63223c53fe4b476cb11798c3b8646ee323bedde6
MD5 113044c5129d315dfa55689ec5de0033
SHA1 741eadc1f96638f67d8b6f0512b6521904fd24b6
SHA512 1a7c4def2e811ed27c88ef3f997ede1cc20092538d911db6cf1c7c6cbb573a949bf18ce1047890dd695d979bf3b32d7ad35281c920ee94993bf8c3cc09a67db3
TLSH
T1DC0197E7699204C16F2B0293C77F8E31F0396496DB34A482B0409A1CE0482FDD7AF9ED
MD5 SHA1 SHA512 TLSH

Submit Download

is-J2T1HRVRHB.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_infinite-scroller-98304e77-0.5.6\infinite-scroller\Components\is-J2T1HRVRHB.tmp
Size 11B
SHA256 91d968cb191d306da58f037c6d77a34080f0b07153b96c0a10a10e0033591859
MD5 f397df655598796f6c6bc35a98faec0c
SHA1 6fad457643ad9bcec4a82a2ff3b9133e8ce4e4bd
SHA512 404d35b9be358fbe853b864551fcfbdde88490bb29e6e74131360c3f8d2ee7c3b90aa1852c2f5c504a331eb79bd2be51aa003a8e1ae1b105fca2b8a4b5ed2034
MD5 SHA1 SHA512

Submit Download

is-R3KQUXJZWB.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_infinite-scroller-98304e77-0.5.6\infinite-scroller\Components\is-R3KQUXJZWB.tmp
Size 479B
SHA256 ff14bfb9735cd84f4fc42a9555591bdaf16b32db623af3749737985d909995f5
MD5 3a009d9e21ecbdffb4c35d26fb939346
SHA1 f7851f95e4f54f1ce112dce1c773881fce9bac37
SHA512 321f61986c94e37ecad4399fa0d3ae589878816278f9f4c0defc611b7a19960fd45afb50697385b86ef5aa29649b02bdd7811a6553c4403c2b6c48899fc08a6c
TLSH
T181F0A7B4B0EBE3C54511B751D4377185FCDEF8E5913EB200D18E54DCA46012DD175995
MD5 SHA1 SHA512 TLSH

Submit Download

is-BNF1V1004U.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_networking-users\networking-users\is-BNF1V1004U.tmp
Size 1KB
SHA256 e0720a05671afc31d0e084d77ca3c3dc7ce70a73082430421a15f224816b2c73
MD5 9c271b7fa2e1ac02e3727d3f78c4198a
SHA1 b3092a97abfea60e42ed7fa974ab430499c8c800
SHA512 1444c24b6156b8fdbcbb9bdd8a4645ed85db9c0a3edd36eb425b60a8c739d26d68dd78134cd0d82918a54e380aa69d3b23bb2fb8f3c5fa0e79cdfd0048ae9774
TLSH
T1BF1180DFE003005278821FE2BDBF7424A7BAE810147D9185D4EE8061A992B1DF8B369B
MD5 SHA1 SHA512 TLSH

Submit Download

is-GUDR00RV0S.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_networking-users\networking-users\is-GUDR00RV0S.tmp
Size 112B
SHA256 4cb300623ea92cab461551982738574c1c840462a20db4f10180f3c3f704143c
MD5 e32df457834f40e36d1776da916ef889
SHA1 f15e9985b28246ccff6eda299296742b1d23e1f9
SHA512 67a5cbdaf89add5bcd12385c9bffa875d3c6a2b1f6f5b6ef54bb3506a640e7a0e7ba152cbcbef814b1bfa769d4a7251295ea18bcc66d32a1ad9247d2358bc9d0
TLSH
T11BB092B3A8C7B1839220FBC3C938CB01AB8182B0B42F023E5C09964880B2A80C66A410
MD5 SHA1 SHA512 TLSH

Submit Download

is-0D78EJFQ2W.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_purchase-prompt-deps\is-0D78EJFQ2W.tmp
Size 279B
SHA256 b2b3bea7701e1319ec50b2682bca390d7e4995d36bc9b80925033b1a4ad03376
MD5 829683498619afafbedfa454defd292a
SHA1 6e1ae8a041930f21b25ee7c169b08a2f167ca212
SHA512 5759179a5204f2d933e3d1d49396fb344d7b67ce91115c857ff36cd16f8a7bb4b9569c18923367d20d669f87fc96dfbf25a706f84d453b3389867ac779b8e46a
TLSH
T166D0C203FFD3EB2465052E86F0341620FD7DF4A0764841C0B97A208575802BD04A71D8
MD5 SHA1 SHA512 TLSH

Submit Download

is-TBY6XUAKQ5.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_purchase-prompt\is-TBY6XUAKQ5.tmp
Size 259B
SHA256 ee2b76b3bf4f07b185a32ca32834a6543ac7e02500d678b753ffcbc03b1ef2c6
MD5 9de4999a9af39ca1d0ab433fd86dde4e
SHA1 f801150a4a0d28089d845eae7ccd418df1b9d2c1
SHA512 7181b7bec6a1d712ec67910f000f377cfd94b833cd382ff97497369f06cc208db3a81f59b671e408c6fbeb405239d8efca3ed39f98ea9ddb400638f18672c7c6
TLSH
T1EAD02E03FBC3D325A8062E8AB0388928FCBDF420764D06C0FDAA518A70803AD44AB1DD
MD5 SHA1 SHA512 TLSH

Submit Download

is-BDAANWEIVV.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_purchase-prompt\purchase-prompt\Actions\is-BDAANWEIVV.tmp
Size 113B
SHA256 d0fb8c19897a0fb0535126931f181b6219ff799421d1452c560ca57485fcb0fc
MD5 f76ab74f369ef7386257be49b7e4c201
SHA1 3881686848d3fffbc86bfe8c4bd1c82d6f72b709
SHA512 b8531c0e425e9a56ebe8ec2802457c084ba0244e1e2438b48f76072603ea2b23ffacbfcefc366d84a6f09900cd308509303480e60e3bbaa76f9fbfbea69cff4d
TLSH
T1C1B092CC3D82F2201D1B3AC2C0A2C8C37FBA848404168020AC8BE0011B621E0478206D
MD5 SHA1 SHA512 TLSH

Submit Download

is-UIXGIYP70T.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_purchase-prompt\purchase-prompt\Actions\is-UIXGIYP70T.tmp
Size 107B
SHA256 249e2c590813a8f4ef4acbb0dd049fda5ccffe98ae373f43e38c3c0b1fa4f78d
MD5 ce13061e116a8defa74565a544c07ecb
SHA1 6d30778b5a0817c2954124ecf209369eb1d36e5f
SHA512 31784583d22efd6b28cf1c75317900d28a77d33c8f1a4e5be8cae08f5ef287f0f638e6ce1217e2d7b6f3b0f309b68702f3091f26e3f6b429ed3c307f78f0bd73
TLSH
T16FB092C83C82F2202C1B39C2C0A2C8C77FBA848004164020A85BE0011B621E0078206C
MD5 SHA1 SHA512 TLSH

Submit Download

is-8VCLO9BCC3.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_purchase-prompt\purchase-prompt\Localization\Locales\is-8VCLO9BCC3.tmp
Size 706B
SHA256 54439b9542f022d546a2ada7758748406fe9b89641f96411cbe253d9fb168de7
MD5 c80e3e1ea55f88af6e1cf362450a9288
SHA1 0ce682c7797a88a0b4d5236fda9eb80bec463d17
SHA512 bea47b956ef677dd7e271a6a15f1d45a0dee2ea659fb407c01d87204aa629553ea3eeab4f9989f978d80365d8da40f432813b96e9717dd26ebe4b7d2651f28ed
TLSH
T1F0018BF32E81C7101613D75665A8E001FC328C944767C299790D81DFB99B969334DDB9
MD5 SHA1 SHA512 TLSH

Submit Download

is-3RR8AGY2IS.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_roact-gamepad\roact-gamepad\is-3RR8AGY2IS.tmp
Size 632B
SHA256 da001abe84d9ce0f767b8350d0493b5372d13c07285f3ea26fa79f56e9f9f056
MD5 8a6ea8417f0a068865f6abd5255589c3
SHA1 a82b1dcc4f08e36ac355de4d71cbfc9cf672c44d
SHA512 8f65214d31547817515b1a23aac064d08ac65fb14c01d70778b35e65b4f2766db5ee079aad127de471ebbfb0cf636192765e5bde6fd1c82f72464e83c5b21a15
TLSH
T108F0DDAA684377712801353BD87C9194E56BEEA416F97090F8FE401C3B1C01C003EBEC
MD5 SHA1 SHA512 TLSH

Submit Download

is-1NRO6Y5PGJ.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-a0ab4747-d06ccc8a\rodux\is-1NRO6Y5PGJ.tmp
Size 2KB
SHA256 96ce1feaa1978b2eca1622a2f5a465ea84222c492aef2697e04d238f44ac975f
MD5 c06dcf5ee80c92feced9b502c86251e9
SHA1 60d2f427356a98d82309ba98d62e21bc68564904
SHA512 f04523247ee16b85ace2321f12c1fcd5ee1d575ccebf9b4adad41391507a9cdada0e6287c361f6895306cd2c953e91eb11d7098e77bed242c3cfcb6f043dd1e4
TLSH
T1EB41D45CF0DF20C59D0B72DAA83B411479BBD6426678224435D6EAA0C4F46CD57D2ECF
MD5 SHA1 SHA512 TLSH

Submit Download

is-43SIEUIPGR.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-a0ab4747-d06ccc8a\rodux\is-43SIEUIPGR.tmp
Size 1KB
SHA256 495e805fa3011e62edbf2f333316f212fb2a176dd0abe2ce0a84d044246a16ef
MD5 8403a01bd88bccbbb46909c66734307e
SHA1 ad8a0eede3c5b7d18ce00576cc0775c80011cef2
SHA512 8b1f0d0221d6c2eb76340a415d42221bed68c42f8e9f57a7669ba2e5a47ab846523b1fb40cfb708da0c24f335c99bcc91ab0031616cc2f4b1551c6ebf592395e
TLSH
T196413B64F2CF2CAFDC99324AC47D9058BD9FD8242129262475C7801668F415C89AEE9F
MD5 SHA1 SHA512 TLSH

Submit Download

is-8Q95ZB3205.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-a0ab4747-d06ccc8a\rodux\is-8Q95ZB3205.tmp
Size 493B
SHA256 9112ad34ecca4ef942eb930868519b6328a11cfd5a2b519d93002b3e5fd38a57
MD5 8392959645f38760c25add370ab0fb6c
SHA1 fec9f2a7d7ae0257c2b09e2a1a2a2391c2a3e678
SHA512 87ae1d811265880b5cb9f3f1fa2af5f2f761c67ceaf875a8675f95f74d4dc28a2dae2de949a9a3101fb29d488404f8332b108f709c4b104e27c0fb21408cab97
TLSH
T1C1F09E93B6873A6E5DD13668C53E04E4FF67E8013211111070C255A5B51512DC13FB7E
MD5 SHA1 SHA512 TLSH

Submit Download

is-K9O3FJ1O6X.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-a0ab4747-d06ccc8a\rodux\is-K9O3FJ1O6X.tmp
Size 264B
SHA256 10c508b7b393ad1f0d826befe068b0be96cca79b4966d0c0f181be66f8cca861
MD5 0ff9e9d69e2be8d8db93fa05469792ae
SHA1 a3e52db5c0f0542c1b5f0a43296c6337fbe515a7
SHA512 849ebfc903bd908939d4dcfd8d58c9dbc495a75521020ecea48f307fc906f8d2fd45916885dcd3d78ffd3e6c01985a035fe88dee04208f4789b7486b7c943a03
TLSH
T1F7D05E4DB0CB676EAF817024C03F48B1F9ABDB0027A611C0B8869256383059EC0BFF68
MD5 SHA1 SHA512 TLSH

Submit Download

is-L642GRM3VP.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-a0ab4747-d06ccc8a\rodux\is-L642GRM3VP.tmp
Size 1KB
SHA256 49faff1a64dd19aeb1c9c9572719e7657de451907fd396427c846635785442aa
MD5 5f6006d06974cd9ae75ad0f86acf2636
SHA1 7edcc0b0cb093237038c0965a181e5dffe347cf0
SHA512 b25a189de43ef4aee203e3ec0370df690806e5de4393f23cea5693580ab11027ca933458d9d644184d3d674c0ce1c0b98dbc7bcb0e76996540f6ab29e0ec4ab4
TLSH
T1BD21F87CF68F608A981B3A9FB93D95083D6FC458603C2A04F5C7A86644E965C5DA1CCD
MD5 SHA1 SHA512 TLSH

Submit Download

is-LVIZ0KQDVL.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-a0ab4747-d06ccc8a\rodux\is-LVIZ0KQDVL.tmp
Size 1KB
SHA256 c3d600481ef7544a4b53326354269a74916854bb7dd158e10771d13889f75046
MD5 b5086523857f7966a929aba2a32d029e
SHA1 90430487e03c9cc156e4f2ed4a687a228a9532e8
SHA512 593305631641e06eb8374ee9a9edc9d175894dcf7a6e7308aa187f60184d3e1116afb6446ab983ff4b18b7c149614a1f09d3f3aab879595a4a7ca8fc79a05fe3
TLSH
T1A9113A55F34F24AA984F3456B035718C7DBAD8D0443C2918B0C7ADBD0AE8694C9DBDDD
MD5 SHA1 SHA512 TLSH

Submit Download

is-M5WU6IR3XB.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-a0ab4747-d06ccc8a\rodux\is-M5WU6IR3XB.tmp
Size 1KB
SHA256 93b4f42e6a929cdca91aa0ce852ed8b8dfece2ef638948fabf8ab960ddb5f278
MD5 c19c633062e402028f605f22dca8d9d3
SHA1 79f5e49171f9236c7a1ef653128f86540bf22b9d
SHA512 d7ea7dcce85d0952f8b9dee653c1938c21b840ca6899f6429b786cf03a35ef5c7b6fd0fedb4f0d2c87ca4e610fcd875ff793a3a19d9e60711e58e2b760074601
TLSH
T1C821C5A4F1EF78ABA84736A9E03F9098FD2FE455117A2210B0C3445058F459C859FE9E
MD5 SHA1 SHA512 TLSH

Submit Download

is-UW0G5B0H9Z.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-a0ab4747-d06ccc8a\rodux\is-UW0G5B0H9Z.tmp
Size 178B
SHA256 2b5ae697c53843e3a47406bf183a7e6bb11d2d3c6558122e48c7b9928699a2a0
MD5 3c3deb8043e857994c1538cafc674822
SHA1 894905c6e236eaed1fdde9b5d2281594df4fc069
SHA512 0ac66ac5ae4060271a50ec84bd76a520217cee8253ba7f01e5e7ce2f1ec0d89d601818bc29dd151e357c683441e415957f3ffdff6f09730abf34b1425a6ba13f
TLSH
T10CC0126CF5C66019E00735E8EC36041C692BD44170741455B0C610F04598BEC1913CD9
MD5 SHA1 SHA512 TLSH

Submit Download

is-3D453F16S0.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\roblox_rodux-users\is-3D453F16S0.tmp
Size 280B
SHA256 1a162fb261072bbc9261ef2fe32273cab5f9c07b9e0222d3ee7e5c53ba82a95d
MD5 3083aa1386ae9b78587fc9f566b19407
SHA1 46c9c7ab52f7b11387899a5c6118aa3bdca530b0
SHA512 0267eef62eae55cf37ee84863005c2dbdc8e211cbb5014be80cdce843030e298e0eaba9e73b4781cafd61d419dedbd1be77f24937e855196e286e58f9cb8d7da
TLSH
T1AFD0C247FFD7D32964012F8669245E11F8BDF420779D05E8B96601D6644836D046E2EC
MD5 SHA1 SHA512 TLSH

Submit Download

is-MCO6JPTKP3.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-0bf501c2-f322c986\is-MCO6JPTKP3.tmp
Size 270B
SHA256 8cb6aa6d41f241e088c860714f633def082d8264c2d1318abb580038f54d6216
MD5 1a4ef3622577a4ac7a0cb4d600fcb85f
SHA1 83036ed3a6707d9518ea37b124d2103c5f5976fd
SHA512 acd6d179699c8894e4911e3da0d7ba2b6ad731d722ee7987ef7fdc722430ab2284e7e10b69621d49ebd6307b483fbcac7e961a353e3c09a4d83a101e9374f3a2
TLSH
T10CD0C207FBC3C312D4021FD670280853FC7DB520B72805D1B96680855441A6E0C7B199
MD5 SHA1 SHA512 TLSH

Submit Download

is-2ZTV50O6C7.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\NetworkStatus\is-2ZTV50O6C7.tmp
Size 101B
SHA256 6519f59d68989568a88e2f20fffdda72087311daafd8124e3b7829d05ab901a5
MD5 ebd8e1b1713f6af244b949724841ca2c
SHA1 dca9e19651f74132e022a5c4da64992d784e990b
SHA512 5b7816f29c385f1dcaecf7990c92b8e08329ba148210c04b55dd19d038747d3f53a644482fd37beebefd037c955bf8a9e692aa6ed358be91d4f885243d3a6c10
TLSH
T15BB0928A39C392229C22CFE960200002F63BE810101C2D616A5A919010D05AA40A3885
MD5 SHA1 SHA512 TLSH

Submit Download

is-34WUQTFPO1.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\NetworkStatus\is-34WUQTFPO1.tmp
Size 99B
SHA256 07578aec1292beffd3811cce7ed09d496253245970feed11596dec4c6dba4456
MD5 ddbe71671da13a7da1d44a18f4335032
SHA1 5d242fa4745820e73f8c9abd265f162baf7ae837
SHA512 02d8b7217decdc7830e4f35306f252081ad6e51e22e0d09973ffd7a38c11effdd1724d0c08e3a843dc8c92364c37aa081aa6dfe437c3f174e05aec037e287799
TLSH
T11EB0929A39C392219C22CFEE60600002F63BF810201C29A1694A91900080AAA40E3884
MD5 SHA1 SHA512 TLSH

Submit Download

is-4UA57G4MIE.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\NetworkStatus\is-4UA57G4MIE.tmp
Size 277B
SHA256 aa2d6899ec3f36f3637fb13e4db490e726ee53c88689dc088e33a71b87ccd9b6
MD5 bdbe08728ccddb2a90ce19e3be745302
SHA1 14f3c18b3c20c988b355988ad8c03899a4cb52b1
SHA512 b4e7e18f1c8a45460a42a1d9de23ba38d9e2f287d2c6f8529548d9b2a34daf417237bcec253da55cfc1dad01e2818da53ca820713e919a45ab09d19dfc171128
TLSH
T105D01798BEC5F52CED9237C48432D505FE6BEA12710384A8C4888ADAA2915C1C9038BF
MD5 SHA1 SHA512 TLSH

Submit Download

is-EY39EW5XLV.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\NetworkStatus\is-EY39EW5XLV.tmp
Size 431B
SHA256 3eabe75a8daaa45c0f9b83c66899dadc82576b53022078db2c26b45036937ae7
MD5 7c4c1ad7c382374050ae94da6c48b66e
SHA1 81aa509ff7d68875216cf4a8a48f68b6a822cdbb
SHA512 1a3bf63d3bef43abddf422b386754436dcdeceeefa6830120e94058c01f8e5dbfb65fc54bfed4bb6b7efc40a410772ad3d9ec29e2199a5e7af0cfde5dbe7f157
TLSH
T136E02763F09254C6BB2013D0523A9B00EC1BE5A1715B02FE5099530850DA40EA09FD9C
MD5 SHA1 SHA512 TLSH

Submit Download

is-KUU35PBI87.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\NetworkStatus\is-KUU35PBI87.tmp
Size 227B
SHA256 4fc12be217b12d6b163803195bc647d38265ef2afe2dde8dab1d0741701cf160
MD5 ff5bcc83363753d13ee63ed8ee762570
SHA1 df069143cf45ba39cdf9840844fa8a9cd0db4590
SHA512 7b9d487c00cede9d3a93b56721ab795210ecb3751b4ad08174881409b1790ba01f98f72ad4c8ad908344652dc3b0ecac7d9986735a7b123d34fdca04c7b17525
TLSH
T1A6D052AEB26B8563F5706436827A0228E5AED60232280360602C0D1926082E9C9100AE
MD5 SHA1 SHA512 TLSH

Submit Download

is-YWCUKIDU42.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\NetworkStatus\is-YWCUKIDU42.tmp
Size 86B
SHA256 10d8af321ed223823b0f8c5e2a1de4eac4dab87e3397db8b46abec59f1107e2d
MD5 09043aeba4a2ff7bcc050937f7667dba
SHA1 76b40d72a30a03e486c0c7ff6668ef60a78d50df
SHA512 d18a16967b1a07e3004265d9a806e829960ad990bf74567006d6bb2084f7b94e207e1767de79c255fc364f32de2fd446f1c04d55ed29b2d446f0492722ef0dda
TLSH
T14BA0120998C19A80A9C3358040178B04ECACC65050BF00DCD72C02C95040064C027818
MD5 SHA1 SHA512 TLSH

Submit Download

is-NABSYRHQIB.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\RequestBuilder\is-NABSYRHQIB.tmp
Size 100B
SHA256 8ca0e3b50c875b8ece36b159068fd3ca73c677f3ee13ecc287a6f85ebde28903
MD5 a19880b31d14117f0e3d3c434d789fdd
SHA1 921bffe297359ece1e5fb34d668be3600722f51b
SHA512 daa7c17e8b81bb5af4a39cdf8b8d4be214dcfe69b8b4cb130abfd9557e2388930425e1005b7097d907203adc77f90655df21fcff81c84254be830c2675f5be29
TLSH
T132B0928A3DC39622AE22CFE960200402F63BF810101D2961698A929040805AA84A3998
MD5 SHA1 SHA512 TLSH

Submit Download

is-NVI0LFM5GA.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\RequestBuilder\is-NVI0LFM5GA.tmp
Size 98B
SHA256 063e091b70949bd1e52d57ae6805949d37f53c6f193dae108970c6d01200882b
MD5 d1851e20caaafa0ea877f24f81553ab0
SHA1 49f0898f24dff8edd5fa1036bd8962ba26183d2a
SHA512 ffe88619c29b36c008c3e3a0f5650298971bc8cd1049b48bb434cf003c11265690dd1de7cb03369192530b7b6bba8c8e92ac71042aac36807ffb82b3f793c1f6
TLSH
T12EB012CA7EC39621DC23CFED64700012F73BFC20201C2A71694A919000C05BF45E3C88
MD5 SHA1 SHA512 TLSH

Submit Download

is-WN2ZE9DUQE.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\RequestBuilder\is-WN2ZE9DUQE.tmp
Size 39B
SHA256 4af127b610dc880d82427ed4f8b752b0800bc9af11995850e33074cbb71b50f3
MD5 4cd35c20c4e726be167e22c2e0c9a0f2
SHA1 46be585110b69b2ebc2d0953a725a551b6b13ad5
SHA512 60239126b82b004889136550314f9b58accd2cff5c44c7f63fc22fbfea16b63b1759b73c1d0d6d2b0913d0c90cdbcb311b5fd38a7508e69f5b07d2f9aeeacccb
MD5 SHA1 SHA512

Submit Download

is-X6DWYN0TFL.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\RequestBuilder\is-X6DWYN0TFL.tmp
Size 3KB
SHA256 5e73bef439d48980573eea1f52dceb176def1449ff36758029c0b5bf4da6dac0
MD5 ae1ef70d5f0810c8498a40d0899af6d0
SHA1 b4ca5a2aa44fa53bc3b2b1f629b04cccb7a97d1b
SHA512 343706ce4379b05a688029fa0e13f1d99309864b94aa04509a6509a6c7cad7d10b9ee9cb92e9177c14a3ea049f3aea3be3b2ff7af40899648efc2304841b05d3
TLSH
T1B251AC3BB1827B86A6D33E54C43FAA46EE2A7590211DC271E07541DE3935E2C8235FBD
MD5 SHA1 SHA512 TLSH

Submit Download

is-927KZ9ZYF5.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-927KZ9ZYF5.tmp
Size 154B
SHA256 f29fcd2635b4951684ab6c6774f3f2bdf7b7c50211a4189be589bdebf93c1f0f
MD5 ef78e7300d7e6018de865c2be5ca008e
SHA1 5c1610ae2e5ba9b367d8dc9025f4690ebaea1aa1
SHA512 e23dcb1dad51d3c2608798ce82501ce804f06bc769efa05751f771476185a61a5b4850b190fb8f304f039aa9dc45d4dd744fde4b7bdc9c09e9bb67c912374d78
TLSH
T164C08C9725839102DCA363D2C82BF200F36AE990367E2432CC0900D113A41ACC7028E0
MD5 SHA1 SHA512 TLSH

Submit Download

is-DET2LFY3U3.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-DET2LFY3U3.tmp
Size 391B
SHA256 1cdbe8651b99a04ffbffcf15f1e12a96d0026a38e5da7eba8344376d71b65855
MD5 14d0354618cbad305c6fea66bd8a0abc
SHA1 40e16cc3c6b4ba94580e75a90c4353c8d534ddac
SHA512 dabf37ccb8173b13747ed5b72d5c372a0d1f0ca6c3816607be1973e28e9f00a2010aca53972f3a6373a5dafef1a2c941e465066f9be93bdde749dca6f881d83d
TLSH
T1BCE092A4B48FB34ECE933691C57F10198C7FD262372A40056055E1EB643454AC6AFE9D
MD5 SHA1 SHA512 TLSH

Submit Download

is-G0RW9YZT0G.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-G0RW9YZT0G.tmp
Size 1KB
SHA256 30daab8b42dd1733d08d1db1427c63a06b2a26b4b7e7efba91018cb70fbfe7bf
MD5 8ad555da9c98536fbb7f6da32a413728
SHA1 41f8995668b3f9c5fc698887bd1023b0ad94bbcf
SHA512 6c91394c7f21881a74e15b0c0f420b49ab47ee63b086b542c7ffcdcb29ff4c743d7da126736e8ede3dc2c98e0f119ce3698aac2c5edebb5bdb00d15d3479d38d
TLSH
T1F2212D29256AF19D50C37BF059377F0CF0B28390652EE5EE502407F821D8238995B9BF
MD5 SHA1 SHA512 TLSH

Submit Download

is-KML3EV9SE2.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-KML3EV9SE2.tmp
Size 94B
SHA256 186e3ccd9a001df0eb061577947ec2d8b8b5b26b08a69f4a572b40e86b275f73
MD5 b80fdfb8f65d4e22488b41b2b7ba80f2
SHA1 36e7757b0e343a5e7d49987ba7ce68423d238a69
SHA512 ce6603e89d52afd3afdfa3da1409bd5b17eb9a791a1df543097462ee7228d5cf3d4c8698945c741b163a132927613f3ee287afb8c80c836a8bd9da1feeba10e4
TLSH
T1DBB012C739C392128C23CFED70300003F62BFC10101C2D516A56819010D05AF40A3C41
MD5 SHA1 SHA512 TLSH

Submit Download

is-KTNJ8EH5I6.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-KTNJ8EH5I6.tmp
Size 1KB
SHA256 f82e3b36d8204961ababa9be3cdf3304fc531871e0b59524a172096fe8222509
MD5 d8386ca6b9d52f480fffc4aa647d3501
SHA1 a42bcd984e0b733d85721a0256f129a3941bc9d9
SHA512 a99e908b36895a94fd622edeca35131dc498e223f46b517acf82555e4ad75db2c26b5f19f7922ad6f70ec12e7eb2cfeb254bd67f99e0058f97e7119c7efb7076
TLSH
T1613112A2F647B3A14953323991BF94C5FC7CE420272440807898906D3D76A6BC57BEED
MD5 SHA1 SHA512 TLSH

Submit Download

is-PKS7H7CV5P.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-PKS7H7CV5P.tmp
Size 91B
SHA256 5293c0086c40ddb2cc13d4c3a63310939d36e4688d7108b31bc7d3bd97326db9
MD5 73d69aca16f861158657183bb1a92350
SHA1 039ad1b1decb0d0140a902e58536db4ba202f3dd
SHA512 219b743617d4871c79e2416697c9942eb3e27c694cfce8919b5d4295bb1fabc9ba0b3259980309e4c79ec3f75135a3a3853fd3a03e13dc8f1f92602efc0f227a
TLSH
T1CFB012C67EC396118C23CFDD64300012F62BFC20201C2A616946819000C05BF45A3C44
MD5 SHA1 SHA512 TLSH

Submit Download

is-RN7MJQ5Z56.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-RN7MJQ5Z56.tmp
Size 97B
SHA256 d724788dd7f461984ce924d751e9d6258a779e66c9c04c9806e83a4b001a1d6f
MD5 ef5e39b86599bf194d76361bf62ac1aa
SHA1 992d644681610d46a54a3e35287da2bc4b04688d
SHA512 058b69226b30f2c89928fc852bc1e710ea64a906212755096a882818d37581e0e3bdb828b79c6f06ea2b7c7aa1a32b0a19a72f36a958d78aa37982f2832cad73
TLSH
T168B0128639C39212AC23CFDD60300612F72BFC10201C79517946829001D05AF41B3C44
MD5 SHA1 SHA512 TLSH

Submit Download

is-ZIDRH0XRMW.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-ZIDRH0XRMW.tmp
Size 155B
SHA256 219258dad492c3446064bea71bc006badee416cf7ecdfbddb3d25dcdf514ae2f
MD5 8163203fd39b926407a7ca2a4be7e10f
SHA1 3a75da3090c591b2c1299c7e59e9c1ca620dda5a
SHA512 0fe1246088f0c5f64dd85254efbbac26db964077e46766160cedf2b7ccae96eb69b23580e24102fb47946f4d56b7e373203e86ff4886daa4ed56706682f4b532
TLSH
T1C7C08CD624839102DC93A3D2D82AF200F36BCE90366A2532C80A00D513A016DC7028E4
MD5 SHA1 SHA512 TLSH

Submit Download

is-ZYS4FT2IBS.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-78851836-f6938ebd\rodux-networking\is-ZYS4FT2IBS.tmp
Size 513B
SHA256 b9532584ac376ac0ff794dc49faf6ff46c7fb41b27d6a7f4bade1c6cbe8a2d53
MD5 f78b689e51c133c0c8a94cab62b8eb13
SHA1 7a408d9039a70d1125f78c58a2d827fb42e08a06
SHA512 f66b52ad4af33e295abc501b955dfb43b876b0886e63933e4eca925f543324ee2d01f6be94ac222679ff2cf3d512d88ba08f2e12d6e26faa24873d618236f0e8
TLSH
T17CF02BBBBA59FC118B233297D037E354B83EE01263AE95B9C045488414F400F95B7965
MD5 SHA1 SHA512 TLSH

Submit Download

is-RDCPJGYN5X.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-e2ed13e9-8902a6aa\is-RDCPJGYN5X.tmp
Size 242B
SHA256 c1403279db23f924c7b9a5737002d4d9fd39fbf774fb2027822965f5464162c2
MD5 8b22154353dd2aaed3794cf92d999c2a
SHA1 22531772cc1a68d3b896f090d4fb4135b8f1662d
SHA512 1662441cf000f70ed6920b90c06ef3a2710958a2f2f33759185f3b2c0d4b91ca5071745051dabf4716e90d3c5f22e20007985882e489ad5fcca26418d4648d9f
TLSH
T1DFD05E07FBC3E351A8022F86B0284921FDBDF430B75C52E2B86A4089606176D49AB19C
MD5 SHA1 SHA512 TLSH

Submit Download

is-D7F48ARIB0.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-e2ed13e9-8902a6aa\rodux-networking\NetworkStatus\is-D7F48ARIB0.tmp
Size 635B
SHA256 7726cb609cf22c037e02ccb0701f6cc218bb76cda5c3a35fc38bb563d79146f3
MD5 06d2c4f9720a6adc2e2c0dbf6352dec2
SHA1 f7fbf2a606f66ecd095d4d832039a6f6c91fcad8
SHA512 8434e05b1831a8f36565175f0a128c64840a4292af23b31e619d8e7bd137ad37109dc454856be770e6e86db65d82ddb946bc1f5159c912c9efbd91ae8102798e
TLSH
T1F3F09E9DE0C3A5B5AC2177E1843856E4EE23DF1136696455B97E05856080AACC00BDE8
MD5 SHA1 SHA512 TLSH

Submit Download

is-WJVKLV9WDG.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-e2ed13e9-8902a6aa\rodux-networking\NetworkStatus\is-WJVKLV9WDG.tmp
Size 668B
SHA256 673fa1519ce542d1c8fb6edb56d011e06d9fe7f50097f3be5a6ff704aa7a7db7
MD5 ab793f280246317f90f8dde5936f907c
SHA1 d62983ba90045464da5a58b85e13075ab5bfb55d
SHA512 47f0fa6badba419bcfce7dfc3fc64d022340b6a8f77a19b377759ce1c7724720e9de8aa9d8697de5597b85eea8448bc625a26360824b83f95fcf3cbfadc88e25
TLSH
T1EB0120F8FA8EB064AE537598C47B41C4FF3FD831112E1410F09580A955B41ED856FDAD
MD5 SHA1 SHA512 TLSH

Submit Download

is-WJW2IK4XJK.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-e2ed13e9-8902a6aa\rodux-networking\NetworkStatus\is-WJW2IK4XJK.tmp
Size 100B
SHA256 530d0c8472b0879a6674e9bd743bced935e8e9c8111e82e5080a966ea5431e20
MD5 553e6790573d7e2ec7c7d9cda047a75a
SHA1 ffe2c8ebbc9e6cd90038584b3678229351b2b31c
SHA512 abd95c84b8c705d13294b7b924680d867afef6984d42c2549e1f01a65de670a446e511a0df789438d0676c81f3250fd580725bed4da0077b1bfb638ba5fb4857
TLSH
T1AAB092CA3DC392219C23CFE9B0200042F63BE820101C6D616A4A91A010C09AA40E3D84
MD5 SHA1 SHA512 TLSH

Submit Download

is-DZXI3LUL69.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\Packages\_Index\rodux-networking-e2ed13e9-8902a6aa\rodux-networking\is-DZXI3LUL69.tmp
Size 93B
SHA256 2e74892968e4e166e80c6da97c585e39918ee6e9c614f42ec9e3e1a724428b5b
MD5 9a355b3a2709212de4ce12bbfe43ab9f
SHA1 84d9093568f722d52a47c14d531db9664201074c
SHA512 9d3dd9386aeff89b1b77acbb923226e1b0f6e8fa155e5df5f74015ad56076a2a7cac422a2b7693f8d0a995f0eff00b437a50e4fccfb85267259c4b1a713a3ecf
TLSH
T1CFB012C63DC392218C23CFDDB0300002F62BFC20101C7D516A4681A010C09AF40E3D40
MD5 SHA1 SHA512 TLSH

Submit Download

is-FTRHMIB38U.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\LuaPackages\RoactUtilities\is-FTRHMIB38U.tmp
Size 207B
SHA256 0e9c0118853f1e532c8d685ba49f866db0d985d4eb75bf0f08e5fb906f0a3821
MD5 9cc7abcaea1a9606e1f9b84cfeeaf895
SHA1 5789b25d048a3aa26bfaec478a0f0ebe42bdc3c2
SHA512 fb3e6ab40d9adfda6858f0279daf4c5da7357f1837a96b958c7c947479a3cdf1d90e4dc5bda0bf85938934fb8114b99d1ade31aa3db195e11316a8acf220c44a
TLSH
T1AED0C933799F55C7BAC449C7507481412C242CBC62483E2A6AC2DBE1D5CAD7C3512143
MD5 SHA1 SHA512 TLSH

Submit Download

is-JQJ5FF73ZF.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\textures\ui\LuaApp\graphic\is-JQJ5FF73ZF.tmp
Size 71KB
SHA256 1a03e6f6a0de045aa588544c392d671c040b82a5598b4246af04f5a74910dc89
MD5 3fec0191b36b9d9448a73ff1a937a1f7
SHA1 bee7d28204245e3088689ac08da18b43eae531ba
SHA512 a8ab2bc2d937963af36d3255c6ea09cae6ab1599996450004bb18e8b8bdfbdde728821ac1662d8a0466680679011d8f366577b143766838fe91edf08a40353ce
SSDEEP 1536:mkeIYNLNDni8w1CeVoNtjWf6qf+yaq1y53jUlu3tZbDlFNMFphN:fkDiDADAfjI3jUwFFNq9
TLSH
T1C76312C11695DE6D80AA5795416EFBEBFC9252942FC167E300C063933838D8B6D5E2BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is-RC2IBBTDKA.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\textures\ui\LuaApp\graphic\is-RC2IBBTDKA.tmp
Size 20KB
SHA256 fc57f32c26087eef61b37850d60934eda1100ca8773f08e487191a74766053d1
MD5 4f8f43c5d5c2895640ed4fdca39737d5
SHA1 fb46095bdfcab74d61e1171632c25f783ef495fa
SHA512 7aebc0f79b2b23a76fb41df8bab4411813ffb1abc5e2797810679c0eaa690e7af7561b8473405694bd967470be337417fa42e30f0318acbf171d8f31620a31aa
SSDEEP 384:DKy5t41PQOZeZspyI2wYZsNSHnZ/5CnMjF3jrwJSb0DfQFbXx3y3JE1UFYAK:h54QOZeZsp7YsNSHJ5CMjF3jukFbXx37
TLSH
T115A2E0467A278D40F22255A3A2FFD69305C8048B05E04CE6BC49B9DCFC76CF999035AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is-3BMVCO1M53.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\ExtraContent\textures\ui\LuaDiscussions\is-3BMVCO1M53.tmp
Size 247B
SHA256 0a6a5cafb4dee0d8c1d182ddec9f68ca0471d7fc820cf8dc2d68f27a35cd3386
MD5 81ce54dfd6605840a1bd2f9b0b3f807d
SHA1 4a3a4c05b9c14c305a8bb06c768abc4958ba2f1c
SHA512 57069c8ac03dd0fdfd97e2844c19138800ff6f7d508c26e5bc400b30fe78baa0991cc39f0f86fa10cd5d12b6b11b0b09c1a770e5cb2fdca157c2c8986a09e5ff
TLSH
T1B5D097DB55B2BE3BAF8308B482A5B0804B7BE91429058F0F0E80951B410CC0AC6D0302
MD5 SHA1 SHA512 TLSH

Submit Download

is-21V0VTO67A.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\PlatformContent\pc\textures\cobblestone\is-21V0VTO67A.tmp
Size 176B
SHA256 ff11c95774ee0405666fa313f1e53ebb46b1352bfff3456ac2b2caccdab07b4d
MD5 f527b5859d7ca6c080ba954f3013883f
SHA1 3d00b598b1fb762ae0921bcc49ca189f05f417d2
SHA512 e908a29c4316a15f5c16a005c69b402e0525b80e0c3284d6f19074ab8b05d62d079ecf43974b223a68d7c56cbf1789df69ab260553de1aab0edfbdad5e6d654d
TLSH
T11EC01202A08C53E2C70D0D34412B3304C1AA00110423C40507C41C833307130C5B1C40
MD5 SHA1 SHA512 TLSH

Submit Download

is-6XIZFGI9MC.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\content\configs\DateTimeLocaleConfigs\is-6XIZFGI9MC.tmp
Size 2KB
SHA256 5d588b6cb27cfcf985e460635ec1b331d090345455592c4ab7a1d4e82dba4c03
MD5 63f6651063c2fb335191890286e00de7
SHA1 422194440a9d08a8eb058b81c57506341eb4ed30
SHA512 f835741c00e5a2789ea004ec0d6d3be1ceff008249eb323c05cc6bf141a41389978720999516130beaf1b5ac0e9242ab9cd8046b264241ea46067690f130602b
TLSH
T109419F2BC0C45E9B8EB677A9711AC382F48103BF45600C7B75BC8A6D8F3591B0B59A1E
MD5 SHA1 SHA512 TLSH

Submit Download

is-WMJOKJHT4Q.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\content\configs\DateTimeLocaleConfigs\is-WMJOKJHT4Q.tmp
Size 2KB
SHA256 39c368d993bba3f5ed4a5912705ded57293b4a908c1379d2883f9bd65cd4deea
MD5 f6c70ae470c8c0bffdf31e1dc1af67c2
SHA1 a1f8f6a57c77618b2bba599dab9ab48176ffd6c8
SHA512 e2e50de1a90b91e68a5668443f91b03b4d8bb544dbe3f67a53b49618a7a92762617054a37de5b62869c1390acd76295ba355dec71f9565749f26c0a16dd7a5ac
TLSH
T18741E52BC1C85E9B8EB677BA711AC382F48003BF45600C7B75BD866D4F3591B0B49A1E
MD5 SHA1 SHA512 TLSH

Submit Download

is-J7EGD83HUX.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\content\textures\MorpherEditor\is-J7EGD83HUX.tmp
Size 546B
SHA256 993e3655350f2292ce54b472f355aaf42d0d71fde4ffea717d0b9875f6dd204e
MD5 27e25e8e79253929eaabe7ebb9a41019
SHA1 9eed3db83b00ff4175e84928466c5ee724976753
SHA512 238cbebe41bda44d153bbde931d4ff5accca44f7a96b999238aab6eaa840d944543c80ae863d7f0601d16551f67c819884159f553a5ea85b95a2ee0a92f9eb76
TLSH
T117F026F684674566CCA6DEE3E51AD2149C33FD860064EC4985045C3633AB5C954C7547
MD5 SHA1 SHA512 TLSH

Submit Download

is-C9VH3SSTD9.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\content\textures\StudioUIEditor\is-C9VH3SSTD9.tmp
Size 130B
SHA256 630303ec4701779eaf86cc9fbf744b625becda53badc7271cbb6ddc56e638d70
MD5 521fb651c83453bf42d7432896040e5e
SHA1 8fdbf2cc2617b5b58aaa91b94b0bf755d951cad9
SHA512 8fa0a50e52a3c7c53735c7dd7af275ebc9c1843f55bb30ebe0587a85955a8da94ff993822d233f7ed118b1070a7d67718b55ba4a597dc49ed2bf2a3836c696f6
TLSH
T1DEC02BC1B42E383A8419D02743C6C010DC2E404405341834011340194210AB143D0762
MD5 SHA1 SHA512 TLSH

Submit Download

is-RQJG0CPJTN.tmp

Path C:\Users\Admin\AppData\Local\Ferns\Client\content\textures\TerrainTools\is-RQJG0CPJTN.tmp
Size 985B
SHA256 c7bae6d856f3bd9f00c122522eb3534d0d198a9473b6a379a5c3458181870646
MD5 2cb16991a26dc803f43963bdc7571e3f
SHA1 12ad66a51b60eeaed199bc521800f7c763a3bc7b
SHA512 4c9467e5e2d83b778d0fb8b6fd97964f8d8126f07bfd50c5d68c256703f291ceaed56be057e8e2c591b2d2c49f6b7e099a2b7088d0bf5bdd901433459663b1f8
TLSH
T1EE11255AE4501983565EEAC694FE40275913488099D5F055B9CAC82F08342BD446DACB
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 028dea0031f1f73e7fa319a0db3c9b8ebd0cd292f85bd0b250edf20f22633b75
MD5 ec66be76a1660504062f2552b14f70d0
SHA1 f77e17feee482c761befdd5051163fc68d18a104
SHA512 5089ae6e424fdf28614dea3fecac566097940fd238cea9a98ef31b78c5d4c8831e9acb3556b1e7b23d5f93c6e94239fe466cc7eef03e9238532b276718b35193
TLSH
T1BDE02B9AC821EC375CFD8B5D54944646DE30135717A0855B373C82088FB667705859AC
MD5 SHA1 SHA512 TLSH

Submit Download

f_00000c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000c
Size 81KB
SHA256 7101bfe700890c59515275207e8398d77fa650742100c0b1108ad13619444cda
MD5 add7de1293fe65ca0f771796af0d8220
SHA1 f3c3c806a1d02c006942369e663b93c883d0b0d0
SHA512 85abc19c27604e9475e19362a22dcc2bf615c2df24081ff2258b0e58e1946f5aa6e2a19f2a119db0d1171ea7ca94a80191c438479543fb04274ddc5987493944
SSDEEP 1536:uRh820dVU94oXuFQuRygW+DiexhVmE//EtvEhtB84FCwOgBXNej:uU2XRuFQEDieNZ//avyp4w7BXNC
TLSH
T15B831290F5B5448F8CE2932C617C06F36B5753DF1C17536898453E1EAE71A148CE2AF9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000026

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000026
Size 38KB
SHA256 13da02ce62b1a388a7c8d6f3bd286fe774ee2b91ac63d281523e80b2a8a063bc
MD5 ff5eccde83f118cea0224ebbb9dc3179
SHA1 0ad305614c46bdb6b7bb3445c2430e12aecee879
SHA512 03dc88f429dd72d9433605c7c0f5659ad8d72f222da0bb6bf03b46f4a509b17ec2181af5db180c2f6d11c02f39a871c651be82e28fb5859037e1bbf6a7a20f6b
SSDEEP 768:w35mZVsqT7RAo+6tbgLdolT9YSswcTWa+O/dm8ae41u37qt+:1xTO3kb0dolT998WhO/Hae4jt+
TLSH
T11B030292A14018CA6EAE219576CCC7A7F4745D89DA081DD619CD01F0FCB326BBB51A3F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 11KB
SHA256 309a3be4045bf11157845db00c6865fe7b21ecc9d76050cca54545e99922b34f
MD5 fdb389ca1f34351518caeb3878302b32
SHA1 ec6c10702543b3edad4b2d9cc2826036ee6f21fd
SHA512 ed074e4c97edade2818fbfc944d879b8ab0c4af35ee38271794daa94425689074449cd60b1a7e781b436c572604c823308e459359a9fe152429dcb4d2227a61e
SSDEEP 192:SMfU8YkyPMDiwvwMrtpAoDsy7rGpe1+e7zlE:S987bGwLAAsKGw1+Z
TLSH
T16432D362436507CAD743AAB4F1D3A298BDFB487349FB0D25A1D0987D460EB8D1E834CE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 7904621931a1a3c4f0430ed62f27d38465aa97875bd9c0a9c1b39721339a11d9
MD5 9ec86036ca04ad89b5df9be972ba22bb
SHA1 feb02313062484d8301192964a744ea0b0742576
SHA512 baa414f24d5cd9e309ae4d159656937ae2178d020423880fd822fd82f9ded676f38dcbd5803ec2932bac2dcd5275c32a4a02953363413a8e43f4267d4fd78e9d
SSDEEP 192:D4363Gmt0ENRMfaItYtY7Sy8gHiVourLmj3iO9cr5rpl:D4363Gmt0ENRMfaItYtY7Sy8gHiVourF
TLSH
T1CA02BFF3C3E88A2D851162F45B253E2FCE5A1918432C3D7A89E5AF4B93E1475E10174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 e72cee7859c9405fcd93571d1b6eaa90e2e744a7e21bc34402e35437df8a832f
MD5 f33d69579c937e1e51ab021e7e931199
SHA1 b82e20eb1a7af32401958fc2c4cb8964f55a2713
SHA512 06b6e2168da54872c65421bd2a649568a1cdec041e78cf3889306bf79b9799a8dbff73f38555b746522ce552fbd33a1907855eb742a6bb732f105866d324fca2
SSDEEP 192:7RLOOtD8+K5LDADv7ApAPRp2Tp9qHsb+WNnIn0d62Lc8r2i+kwoVyIsnAUgtaJ:7RLOn5EkUXokwgL2w8r2i+s8
TLSH
T1F942E62EEE14697B6CDAC329F9113763E7F5203561D42E80EAFC8A1C25D75CD2227017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 8e5a4514fa90345da542af0ef34809512dbf1608e2ffd62622f3811b427f1589
MD5 9b40ae6ab037da877dae1c1e7b26cceb
SHA1 2e59ae68dab8e8e8d1fa206a7e751af016969c5b
SHA512 26197a0462e9c912e2bdfe229916a7c39dd8e1e0a0cecd1da8a81522583728e223c5ec26892db914d9d8adda93f989ef13a5f2978f5fc45131efcd6a98661c6f
SSDEEP 192:7RxAOOtD8+K5LDADv7PpAPRpV4XZ9qHsb+WNnIn0udEac8r2i+kwHVyIsnAUgraJ:7RxAOn5EzUXCkwg7E/8r2i+Be
TLSH
T1D452E62FEE14697BACDAD229F9213767E7F5203561C12E80EAFC8A1C25D75CD2227017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 898c4d3298e0ea415fc2e95dff515d070ebb998e67a14d1a4488897a721aa3b8
MD5 fa0bf15313993773c786bc02f0f6a9e5
SHA1 0dcb7c0d948f2b8c6b0ade0b3f5367a556cf1dca
SHA512 7e509b71aef79b230d93de1dc7001d0bd3782d900cd21e617fa45faa971b142812cdc9cbf15c1fbfcfaa66ed0962ba2e6a4fd653dfe2ec8714b1f21309168f08
SSDEEP 192:7RxAOOtD8+K5LDADv7ApAPRpVTZ9qHsb+WNnIn0FqYlc8r2i+kwHVyIsnAUgraJ:7RxAOn5EkUXjkwg/Ym8r2i+Be
TLSH
T1EC52E62FEE14697BACDAD329F9253767E7F5202561C02E80EAFC8A1C25D75CD2227017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 13805701603dbbca9403b94e006c712edafb4f98a8e0ae4ce0ad1b025b835f93
MD5 28aca1b912d001e337a9e715a111a353
SHA1 177a8b35a6fa74a15deedffd79dc9066169fc496
SHA512 0e554b40f873ea651a22f9b91cf52ad45cc99b35e2db0e34845d695aa13aaf61497b6646f39f5b0ba26fc4a43100e92a0aff8ad949d0289fb397cfe00b0cede5
SSDEEP 384:V7jxY7KxkXqKf/pUZNCgVLH2HfgsluX7pLuLcSjvKXODx4+ErU31PHG0pdpS8gfp:V3xY7KxkXqKf/pUZNCgVLH2HfgskX7pf
TLSH
T1A4720967AC0C9E374F94D6CCDC277B4FADB5015B61E9886483FA981903D5BCA110A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\abdef219-a241-4f81-aab8-4d459b47fbb8\index-dir\the-real-index
Size 48B
SHA256 a5a79c89b144606cd9bcdfb01081db75506ff8fdd9956569dc028a55175a7829
MD5 5cdb82b1798f8b4283e9a95a77a4ec54
SHA1 753f147d6a80b7713dee959099a813461360166d
SHA512 7868b1a9eaaf809fc9c65fbec46ca2285fb508d9924c8f5eeb89628ba214876a456b449d5f5383bd6b50dd2ffeccd9df6d0a07541a7f3bbf8a1a80486c8b610d
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\abdef219-a241-4f81-aab8-4d459b47fbb8\index-dir\the-real-index
Size 72B
SHA256 66382f86240ff8cf870d50cb9ee421807a761449029e124a9224399251108bda
MD5 344aed85d26103da3a3ad92af4d4358c
SHA1 c2559051ef3df63a7faa986590178c7701314ea1
SHA512 7cdc09662a6521350d72729fd8c2d2f4ce385ec7639b6869bb5007f375b77e9e651067334884185738442e396de40027cb2cb159c6a2c5bda533e8fcb8de1798
TLSH
T1BEA00268C5442215C25469B11473815C57416C258004025651A0005EED541C84613014
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\b2775d2a-8e83-4f9f-9c61-91aa6e95f18a\index-dir\the-real-index
Size 72B
SHA256 19cdad68fc76eefb013c9d1dfdc7fc8f74fd5991ddfa798ed8a29e501bd4ad05
MD5 5a1f5c2dd5e0d4f0c420cb4db3130357
SHA1 1107278c0c1566120ca4e64b1396b65088bd37bd
SHA512 a21e7ae6815e08a3560349259f0e234efae96da7f41f2512f1e2d26169e967b995e98c3965a92213fab04143f59481cfab7ebeb3ffdbcb40a9b4564dab8fa3c3
TLSH
T137A00222AE749404E01117F030B3018413116DF90C5D1201419D257DC9DF3B1DA95754
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\b2775d2a-8e83-4f9f-9c61-91aa6e95f18a\index-dir\the-real-index
Size 48B
SHA256 eecd9f397e2fba76a1a97dfc440ace1e9aec6141e962cd69437280ccda3a55fa
MD5 dbaecc5f2c1290017b281d2a0f5b07b1
SHA1 79f802c8574de6944ea7b364574ce331e490e0e7
SHA512 2d2d8e7f9b42d32a4b7ed1b5f9305c62094feed3e1bc7bf2c32b87019cca1fcc372a7ea35e399bd2c22e3d2e3f3521ac6c627e40ac05f0669d8c033f00421df0
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 226B
SHA256 a8d4c3a2b5c142c8b18497a79119a4f7d9c5376364e03db420887a4472ada976
MD5 50ef30d39acbe505f8debe18bdbd0197
SHA1 21580a12401d236f724e03830ad32eac3025b5f9
SHA512 3b228f4c73f0b3956d0b358255a067d6866740dcd53ee9ea62e2e3a564daec92ff85eb9daa31e879decbb6979a104924b296c858cfa153f867fa3fcaf4367b96
TLSH
T147D0979BE02000B2DB6E8BD00E3350764B323CC8018C808C9442202C4C04A538012F2A
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 233B
SHA256 c87918734fa8d6bfbe24d48744816f346f882b03123a4d3ce6091831d858f260
MD5 cfac77a3479d860e78993b5ebd4790fd
SHA1 ceeb0fd86f96443e43b62a8fa10819a4067ecb1a
SHA512 e02fd2bbbde478ae1ffc431c7af1f4fd904225ec5e7b3770b5fa108afde64114e5646f4c50e28ebce93b98dea47a9646627a8db7f7a1e0041e19bd542b354f97
TLSH
T190D0A79BE46104A2DB6A4BD10E3350B64B727CC81589D59C9552302D5874A57D121F6A
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 229B
SHA256 0ee92325da9a4b377501f7c5623832f5bf4f4b22170ff354e899eecd0b9cbabd
MD5 0e3c606d045ef6bf0b1e330b07bff45a
SHA1 dd12f68e79173827a025abf03d2f52b78a73c471
SHA512 5587bb66e6f52ef89338affbbd0873f250a5c03439ad89128d060374a3f3e71d20c718b9d7632de2944808dee3057799cc5d33a2468fd63591e1bc8ae7bcbac9
TLSH
T17ED0979BE42000A2EB6A8BD00E3380760B3238CC0189914C9462202D0800A02A012F7B
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5959de.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt~RFe5959de.TMP
Size 138B
SHA256 bf14439686d81228a8bf0552a2baa50437ceebc9101c3b3efcd30650d7e81fea
MD5 c70f9accf2287b18241990e622043149
SHA1 52c715649a50a9cc6e9db6e7415751af8383e1b1
SHA512 b03e32b31fd02679069372488533c7dfcddfeb4f829b6bfa50ec90fe6c4ae0eca4e68ac84a693173e8c7b9a7c6974e7eb3bfb639c0149009fca4f5bae3d7ae5a
TLSH
T12DC02B57F4000472CB2806920333805E47123CCC0D8AC84D942330242834F236202FB5
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 d74c05758ca287cd22b1dcd28292bea4ff7f0ad1c3f50f30825938d06cba2baf
MD5 084c3f04f0ca0933f2363e3403144348
SHA1 36d73fa0b2c26badfac79f3890864771f1e994fa
SHA512 1e3153943177fbdad2b33cdc1e365038259b1e26d1c9f41f2b080c0de2fb6c02007755de8ec5a3c09f3014b52735c09020d90dbb168840afe6c7a122a7d076ed
TLSH
T1ADB01240D4025222C06603F01147148871145F10960A170243E46D32C8293618014051
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58f373.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58f373.TMP
Size 96B
SHA256 2f523d2d4533fcd6c0158f62ef70cddc86f73b4cda1334c97522dc4348461fc4
MD5 a48508d8d023dd640e343b1ac418ba4a
SHA1 5ced9658b6b592f05276c1cea7f3ae9feca29feb
SHA512 c39ff2b3cc2af657d903d64e8fbd10d621cf5b895ce779f4f882917add3313a82cc982325249be4f509d87f83de81c9627023c25a69d871d64cbe1383ff20a05
TLSH
T196B022C0C2023202C0A333B022A3E8C8B020CF20C203020282E00AAACC382320020020
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 233KB
SHA256 1c1dab7d26356d600c8e4025333549df7aad539e5c4bc533c2fb727818ceba97
MD5 164fe7ac442de2022d729e3c3b741535
SHA1 01a61b2b2dccda398f5d70c2bc31f1c4a5e32912
SHA512 678c48d752e0c80e68ec1b80ad588e8b99d8c72a6e3ccbe4f50c39960accff7665b112cf8b7ff78e297bed2b50233fca747ae2c53624082331784ca3c4ecf855
SSDEEP 6144:0P8pYw80nubFS/sBNxmm7Rkm1tYpBeh2BAoG:0ENBUDZR9oBGcAoG
TLSH
T1A83413273C919E7BA9A9FB2DB4031F1F4EB14C65C920EED68DC49F4872A434D1A48978
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 234KB
SHA256 fccd5c209fb05882fb6831a6616b3c110f61188f87293569f1befbb479c5db58
MD5 7bbd01a85783e72b89610e6ec4401b2b
SHA1 d9f4a179adb3c1948cee689c6c4b8b4ab3ed199d
SHA512 88a932fb71c1abb29069b4bd0d895c2e6616cb584d34cd96e901d7f8e23e47252b36acdba913687733e108f2d39e36411de647c7c5cbf093e006ab67fd647554
SSDEEP 6144:sPP8pYw80nubFS/sBNxmm7Rkm1tYpBeh2BAoG:aENBUDZR9oBGcAoG
TLSH
T1BB3413373C519D7BEDB8BF1DA4021A2F0EF14D66C920EED6DCC85F4872A92491D489B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 94dcadcffc462f08b3516068a73256ada4333e624784e034413c8647401c12b6
MD5 9e29dbff7a7a94e20b0f369958a6e020
SHA1 4ef81b1f28aa693d2e72b42cd30a6437c419fd6f
SHA512 605d425810943b93cb051447d3319ad7d208d4eb8e67849e28b5c649d50294fac699a8c172a0d2538327b85087e771ddf43ad88660a5514ff32e5ca9599d6908
SSDEEP 3072:AvGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMg:Vm7Rkm1tYpBeh2BAog
TLSH
T1AAC3023B9D75EC3B5CB5A74EB08E0B1E2EF149A6C920DE9288D85B0437F97CD0A44934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 233KB
SHA256 bc5629964f0ed34501cfdb2f99b09aa767a243afd2833b6c90490e04158f3411
MD5 a2639f086992dfc21016b1eda003c819
SHA1 093f3107c60fe48c0da74e4c9c25faa2083d4f4e
SHA512 799708d2d0da9e297542896f0bd9458c960e80c552760374fa18dc819184c49f7d7fc131b4bed6d5c50cb47f819d3c3726248a66a3d615095b787a9a0dc71215
SSDEEP 6144:tP8pYw80nubFS/sBNxmm7Rkm1tYpBeh2BAoG:tENBUDZR9oBGcAoG
TLSH
T1B53413273C919E7BA9A9FB2DB4031F1F4EB14C65C920EED68DC49F4872A434D1A48978
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 233KB
SHA256 1795a37dd8e001c758bc491a8c0772f77df1db67ec63bad7571251eabc7811b0
MD5 c8d2650c4fb58cea1748c7e69c3f0cfd
SHA1 f24b043dcaab3d08b7a445fe3d6f47ec6168561f
SHA512 803051b805aeb1961458b46e45b8747f6d5a0868c0727cc818091343fccb7531ac00906ee1c053159001025dc57fa5eb49c4e88f4c58012e299453d473f2be8c
SSDEEP 6144:xP8pYw80nubFS/sBNxmm7Rkm1tYpBeh2BAoG:xENBUDZR9oBGcAoG
TLSH
T1093413273C919E7BA9A9FB2DB4031F1F4EB14C65C920EED68DC49F4872A434D1A48974
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 234KB
SHA256 fbc5bb6b8ecf3188ee1566726465d85deed5e756a156f6546f91d0b59fce43ef
MD5 ea51aaee8d81abd0c690a41bdc63f81e
SHA1 d98a89400ad0384f9c11a6ff1dd49b9e452ed2f3
SHA512 6ea45d7a9e8f5d4c0483225d0faf3a0855bf288f999799f86789b156888ca128329b6a7294677909248b9c1f15f5025153254b3e96d59ede8de132b7ef805782
SSDEEP 6144:OPP8pYw80nubFS/sBNxmm7Rkm1tYpBeh2BAoG:8ENBUDZR9oBGcAoG
TLSH
T1B83413373C519D7BEDB8BF1DA4021A2F0DF14D66C920EE96DCC89F4872A924D1D48974
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 234KB
SHA256 c5497e72d04dde44f13472741449e6554484a20c94a4110eb66806fa0e57fe7c
MD5 8a862377fb139855237149c93b528319
SHA1 c0a9b325045991c676946b89239ab2aff66d8d3c
SHA512 91b62ae6d1642ee61242d8aa58bf1240d16f11cf0452ab3100a020b8a18193ac139910fd6942ca33da1ccf4a2863ac22d1322d54a738d63f24756025afd46129
SSDEEP 6144:ZPP8pYw80nubFS/sBNxmm7Rkm1tYpBeh2BAoG:hENBUDZR9oBGcAoG
TLSH
T1723413373C519D7BEDB8BF1DA4021A2F0EF14D66C920EED6DCC89F4872A92491D489B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Ferns_Installer.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-0QAEJ4S3GJ.tmp\Ferns_Installer.tmp
Size 3.7MB
SHA256 34826c370a10e036f8edaf778ee7a5ef5c337a499a99f052df8e602b27610a66
MD5 4f5586eb38e6d71ad834a7652fc09d9f
SHA1 1daf17d6dd6f369d66f7d511e8a463bf427ab27c
SHA512 517273acbdcfb78481110a80354874afd4c2dfd728028c71ef981fca8ac16406456121837ab02a85021cce8c67152830ed17c57644accb8daea5f24d1d4868b2
SSDEEP 49152:g3SA9I3bZxTZElVySH6UNoO7zjQynN4s7UUZyE8eECaN2Ml3334FE:gCbWroSkynN4sQ+TdMl3334C
TLSH
T1BE068D13B388643FD06B1A395837BA54583F7A7229168C675BF40E8C8F752842E3A777
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

memory/4440-9113-0x0000000000590000-0x0000000000954000-memory.dmp

Download

memory/4440-248-0x0000000000DF0000-0x0000000000DF1000-memory.dmp

Download

memory/4440-241-0x0000000000590000-0x0000000000954000-memory.dmp

Download

memory/4440-5-0x0000000000DF0000-0x0000000000DF1000-memory.dmp

Download

memory/4440-9463-0x0000000000590000-0x0000000000954000-memory.dmp

Download

memory/4440-9403-0x0000000000590000-0x0000000000954000-memory.dmp

Download

memory/4440-5555-0x0000000000590000-0x0000000000954000-memory.dmp

Download

memory/5076-0-0x0000000000B20000-0x0000000000C28000-memory.dmp

Download

memory/5076-238-0x0000000000B20000-0x0000000000C28000-memory.dmp

Download

memory/5076-9464-0x0000000000B20000-0x0000000000C28000-memory.dmp

Download