hxxps://github[.]com/Happ-proxy/happ-desktop

Analysis

user interaction
yes
max time kernel
420s
max time network
417s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260911-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
13/11/2026, 11:40

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://github.com/Happ-proxy/happ-desktop
Sample261113-ntcreatz3q

Score

8^/10

discovery installer persistence ransomware

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
42	3844	chrome.exe

Checks computer location settings 2 TTPs 3 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-3202520547-175870679-441661622-1000\Control Panel\International\Geo\Nation	setup-Happ.x64.tmp
Key value queried	\REGISTRY\USER\S-1-5-21-3202520547-175870679-441661622-1000\Control Panel\International\Geo\Nation	vcredist2022_x64.exe
Key value queried	\REGISTRY\USER\S-1-5-21-3202520547-175870679-441661622-1000\Control Panel\International\Geo\Nation	VC_redist.x64.exe

Executes dropped EXE 15 IoCs

pid	Process
1228	setup-Happ.x64.exe
4168	setup-Happ.x64.tmp
2580	vcredist2022_x64.exe
2808	vcredist2022_x64.exe
4856	VC_redist.x64.exe
4132	VC_redist.x64.exe
468	VC_redist.x64.exe
3820	VC_redist.x64.exe
4612	VC_redist.x64.exe
1112	happd.exe
3416	happd.exe
2868	Happ.exe
3064	xray.exe
2052	sing-box.exe
2968	tun2proxy-bin.exe

Loads dropped DLL 64 IoCs

pid	Process
2808	vcredist2022_x64.exe
4448	VC_redist.x64.exe
3820	VC_redist.x64.exe
1112	happd.exe
1112	happd.exe
1112	happd.exe
1112	happd.exe
1112	happd.exe
1112	happd.exe
1112	happd.exe
1112	happd.exe
1112	happd.exe
1112	happd.exe
3416	happd.exe
3416	happd.exe
3416	happd.exe
3416	happd.exe
3416	happd.exe
3416	happd.exe
3416	happd.exe
3416	happd.exe
3416	happd.exe
3416	happd.exe
3416	happd.exe
3416	happd.exe
3416	happd.exe
3416	happd.exe
3416	happd.exe
3416	happd.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe

Unexpected DNS network traffic destination 64 IoCs

Network traffic to other servers than the configured DNS servers was detected on the DNS port.

description	flow	ioc	pid	Process
Destination IP	104	195.133.25.16	2868	Happ.exe
Destination IP	117	88.198.92.222	2868	Happ.exe
Destination IP	118	185.228.169.9	2868	Happ.exe
Destination IP	145	185.222.222.222	2868	Happ.exe
Destination IP	153	104.197.28.121	2868	Happ.exe
Destination IP	164	45.67.219.208	2868	Happ.exe
Destination IP	183	185.228.168.10	2868	Happ.exe
Destination IP	187	76.76.2.0	2868	Happ.exe
Destination IP	129	76.76.2.3	2868	Happ.exe
Destination IP	149	119.29.29.29	2868	Happ.exe
Destination IP	152	176.9.1.117	2868	Happ.exe
Destination IP	137	185.228.169.11	2868	Happ.exe
Destination IP	140	218.30.118.6	2868	Happ.exe
Destination IP	160	77.88.8.88	2868	Happ.exe
Destination IP	162	185.228.169.168	2868	Happ.exe
Destination IP	172	208.67.222.2	2868	Happ.exe
Destination IP	177	94.140.14.14	2868	Happ.exe
Destination IP	113	176.9.93.198	2868	Happ.exe
Destination IP	130	149.112.122.10	2868	Happ.exe
Destination IP	167	83.220.169.155	2868	Happ.exe
Destination IP	189	9.9.9.11	2868	Happ.exe
Destination IP	115	156.154.70.4	2868	Happ.exe
Destination IP	136	212.109.195.93	2868	Happ.exe
Destination IP	148	149.112.121.10	2868	Happ.exe
Destination IP	99	77.88.8.8	2868	Happ.exe
Destination IP	119	114.114.114.114	2868	Happ.exe
Destination IP	123	104.155.237.225	2868	Happ.exe
Destination IP	163	52.80.66.66	2868	Happ.exe
Destination IP	107	156.154.70.2	2868	Happ.exe
Destination IP	108	77.88.8.1	2868	Happ.exe
Destination IP	112	180.184.2.2	2868	Happ.exe
Destination IP	114	156.154.71.4	2868	Happ.exe
Destination IP	120	1.0.0.2	2868	Happ.exe
Destination IP	125	74.82.42.42	2868	Happ.exe
Destination IP	142	64.6.65.6	2868	Happ.exe
Destination IP	144	223.6.6.6	2868	Happ.exe
Destination IP	97	94.130.110.178	2868	Happ.exe
Destination IP	143	195.208.4.1	2868	Happ.exe
Destination IP	155	77.88.8.7	2868	Happ.exe
Destination IP	170	45.11.45.11	2868	Happ.exe
Destination IP	176	149.112.112.11	2868	Happ.exe
Destination IP	180	149.112.122.20	2868	Happ.exe
Destination IP	182	76.76.10.0	2868	Happ.exe
Destination IP	188	77.88.8.3	2868	Happ.exe
Destination IP	116	185.228.168.168	2868	Happ.exe
Destination IP	128	156.154.70.5	2868	Happ.exe
Destination IP	151	101.226.4.6	2868	Happ.exe
Destination IP	175	2.56.220.2	2868	Happ.exe
Destination IP	190	149.112.121.20	2868	Happ.exe
Destination IP	127	156.154.70.3	2868	Happ.exe
Destination IP	138	212.188.31.154	2868	Happ.exe
Destination IP	169	174.138.21.128	2868	Happ.exe
Destination IP	179	172.104.93.80	2868	Happ.exe
Destination IP	98	195.46.39.40	2868	Happ.exe
Destination IP	109	78.47.64.161	2868	Happ.exe
Destination IP	135	180.76.76.76	2868	Happ.exe
Destination IP	139	156.154.71.1	2868	Happ.exe
Destination IP	168	155.248.232.226	2868	Happ.exe
Destination IP	178	156.154.71.3	2868	Happ.exe
Destination IP	181	3.7.156.128	2868	Happ.exe
Destination IP	100	9.9.9.9	2868	Happ.exe
Destination IP	106	223.5.5.5	2868	Happ.exe
Destination IP	150	95.85.95.85	2868	Happ.exe
Destination IP	156	52.80.52.52	2868	Happ.exe

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515} = "\"C:\\ProgramData\\Package Cache\\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\\VC_redist.x64.exe\" /burn.runonce"	VC_redist.x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515} = "\"C:\\ProgramData\\Package Cache\\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\\VC_redist.x64.exe\" /burn.runonce"	VC_redist.x64.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
132	raw.githubusercontent.com
133	raw.githubusercontent.com

Enumerates connected drives 3 TTPs 23 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\D:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe

Drops file in System32 directory 53 IoCs

description	ioc	Process
File opened for modification	C:\Windows\system32\mfc140jpn.dll	msiexec.exe
File opened for modification	C:\Windows\system32\msvcp140_2.dll	msiexec.exe
File opened for modification	C:\Windows\system32\vccorlib140.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc140.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc140ita.dll	msiexec.exe
File created	C:\Windows\system32\mfc140deu.dll	msiexec.exe
File opened for modification	C:\Windows\system32\config\systemprofile\AppData\Local\Happ	happd.exe
File opened for modification	C:\Windows\system32\msvcp140.dll	msiexec.exe
File opened for modification	C:\Windows\system32\msvcp140_1.dll	msiexec.exe
File opened for modification	C:\Windows\system32\vcomp140.dll	msiexec.exe
File created	C:\Windows\system32\vccorlib140.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc140deu.dll	msiexec.exe
File created	C:\Windows\system32\mfc140cht.dll	msiexec.exe
File created	C:\Windows\system32\mfc140enu.dll	msiexec.exe
File created	C:\Windows\system32\mfc140fra.dll	msiexec.exe
File opened for modification	C:\Windows\system32\msvcp140_atomic_wait.dll	msiexec.exe
File opened for modification	C:\Windows\system32\concrt140.dll	msiexec.exe
File created	C:\Windows\system32\mfc140.dll	msiexec.exe
File created	C:\Windows\system32\mfc140esn.dll	msiexec.exe
File created	C:\Windows\system32\mfc140u.dll	msiexec.exe
File created	C:\Windows\system32\mfcm140.dll	msiexec.exe
File opened for modification	C:\Windows\system32\config\systemprofile\AppData\Local\Happ\push_creds.json	happd.exe
File created	C:\Windows\system32\msvcp140_1.dll	msiexec.exe
File created	C:\Windows\system32\vcomp140.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc140u.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfcm140u.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc140kor.dll	msiexec.exe
File created	C:\Windows\system32\mfc140rus.dll	msiexec.exe
File created	C:\Windows\system32\mfc140ita.dll	msiexec.exe
File created	C:\Windows\system32\mfc140jpn.dll	msiexec.exe
File created	C:\Windows\system32\mfc140kor.dll	msiexec.exe
File created	C:\Windows\system32\concrt140.dll	msiexec.exe
File created	C:\Windows\system32\vcruntime140_1.dll	msiexec.exe
File created	C:\Windows\system32\vcruntime140_threads.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc140esn.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc140rus.dll	msiexec.exe
File created	C:\Windows\system32\mfc140chs.dll	msiexec.exe
File created	C:\Windows\system32\mfcm140u.dll	msiexec.exe
File opened for modification	C:\Windows\system32\vcruntime140.dll	msiexec.exe
File opened for modification	C:\Windows\system32\vcruntime140_1.dll	msiexec.exe
File created	C:\Windows\system32\msvcp140.dll	msiexec.exe
File created	C:\Windows\system32\msvcp140_2.dll	msiexec.exe
File created	C:\Windows\system32\msvcp140_atomic_wait.dll	msiexec.exe
File created	C:\Windows\system32\vcamp140.dll	msiexec.exe
File created	C:\Windows\system32\vcruntime140.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfcm140.dll	msiexec.exe
File opened for modification	C:\Windows\system32\msvcp140_codecvt_ids.dll	msiexec.exe
File opened for modification	C:\Windows\system32\vcamp140.dll	msiexec.exe
File created	C:\Windows\system32\msvcp140_codecvt_ids.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc140chs.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc140cht.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc140enu.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc140fra.dll	msiexec.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\is-XRMZE6BURF.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-DYGAW63PDZ.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\translations\is-YXX27BOK3O.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-2ZLYX3NX49.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\is-H66Q2SHO3V.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\Qt5Compat\GraphicalEffects\is-8OT2IELVZ8.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\Qt5Compat\GraphicalEffects\is-RJSHQ72I69.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-AQLH31DKTS.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\impl\is-UJX1D4PJZJ.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Dialogs\quickimpl\qml\+Fusion\is-1I3M59UA48.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\impl\is-SBF1ONMLAK.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-0QY52DI4YC.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-LR6P404AWA.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-OMZUQ9JVHK.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-NCNYB4RH0M.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-ZPJ7U4V10B.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-UFPQ2YD55A.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\Fusion\is-CQ10FD0JC0.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\is-WI5OZRBJCT.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\Qt5Compat\GraphicalEffects\is-VXFRK9IAA4.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-TKQV1NVZXD.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\tooling\is-Q6A083HG6K.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-C7GDA83CUD.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-N1Z8X4QR52.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-YWM2SB603L.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\Imagine\is-F94T5QNI5A.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Dialogs\quickimpl\is-RA1MNEDRN7.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-EJ66XJWZQ2.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-MN8F35A6JJ.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Dialogs\quickimpl\qml\+Universal\is-XP169I5CMV.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-20WP060YGF.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-QX6D3E17UF.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\Fusion\is-FAJPS6TGSJ.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\Imagine\is-19TC71I76P.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\Imagine\impl\is-5F72AVRFZW.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\is-RBVQBIZEII.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-HOG0BUZWJD.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\Material\is-V47DRUHZ73.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtTest\is-IR12VKENAH.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\tun2\is-NUJDGGYRE1.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\platforms\is-AS3VKSM485.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-VLLG79OHEL.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-LXJ5XBJDYB.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-1QGBNFT1QM.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Dialogs\quickimpl\qml\+Fusion\is-O4HR3ESBEK.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-QHUP140O7O.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-JJR6APHQHF.tmp	setup-Happ.x64.tmp
File opened for modification	C:\Program Files\FlyFrogLLC\Happ\Qt6Qml.dll	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-OZSNV11NXB.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-92ABQEPAHE.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-B7PMLXF1ZY.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-ZKWM1HBCQ3.tmp	setup-Happ.x64.tmp
File opened for modification	C:\Program Files\FlyFrogLLC\Happ\avutil-59.dll	setup-Happ.x64.tmp
File opened for modification	C:\Program Files\FlyFrogLLC\Happ\Qt6QuickControls2FusionStyleImpl.dll	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtMultimedia\is-6QNOC0JQVC.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\Universal\is-UC4T8JYEVV.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Dialogs\quickimpl\qml\+Universal\is-ZNS3M6YND2.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\Basic\is-3D04JITYV5.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-NJW3WF6JWT.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-T2BDBDAVQH.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-NCDUN8KAXL.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-ADL5RGH4QN.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\Windows\impl\is-1LAU9L7WM7.tmp	setup-Happ.x64.tmp
File created	C:\Program Files\FlyFrogLLC\Happ\qmltooling\is-WCEGJWP5YR.tmp	setup-Happ.x64.tmp

Drops file in Windows directory 15 IoCs

description	ioc	Process
File created	C:\Windows\Installer\e599787.msi	msiexec.exe
File created	C:\Windows\Installer\e59979c.msi	msiexec.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log	msiexec.exe
File created	C:\Windows\Installer\inprogressinstallinfo.ipi	msiexec.exe
File created	C:\Windows\Installer\e599786.msi	msiexec.exe
File opened for modification	C:\Windows\Installer\MSIA3E9.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\e599787.msi	msiexec.exe
File created	C:\Windows\Installer\SourceHash{86AB2CC9-08BD-4643-B0F9-F82D006D72FF}	msiexec.exe
File opened for modification	C:\Windows\Installer\MSIA745.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI9B1D.tmp	msiexec.exe
File created	C:\Windows\Installer\e599774.msi	msiexec.exe
File opened for modification	C:\Windows\Installer\e599774.msi	msiexec.exe
File created	C:\Windows\Installer\SourceHash{43B0D101-A022-48F4-9D04-BA404CEB1D53}	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI9E1C.tmp	msiexec.exe

Launches sc.exe 1 IoCs

Sc.exe is a Windows utlilty to control services on the system.

pid	Process
4888	sc.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Reads the TCP/IP host and domain name from the registry 1 TTPs 5 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	happd.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	happd.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Happ.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Happ.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	sing-box.exe

System Location Discovery: System Language Discovery 1 TTPs 12 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	vcredist2022_x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	VC_redist.x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	VC_redist.x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	VC_redist.x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	VC_redist.x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	VC_redist.x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	setup-Happ.x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	setup-Happ.x64.tmp
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	VC_redist.x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	VC_redist.x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	VC_redist.x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	vcredist2022_x64.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3844	chrome.exe

Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

Inno Setup installer

installer

resource	yara_rule
behavioral1/memory/1228-318-0x0000000000F70000-0x0000000001059000-memory.dmp	innosetup
behavioral1/memory/1228-328-0x0000000000F70000-0x0000000001059000-memory.dmp	innosetup
behavioral1/memory/1228-5651-0x0000000000F70000-0x0000000001059000-memory.dmp	innosetup

Checks SCSI registry key(s) 3 TTPs 5 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 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	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000	vssvc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key created	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr	vssvc.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 10 IoCs

description	ioc	Process
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\27\52C64B7E	msiexec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27	msiexec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\29	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2a	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections	happd.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\28	msiexec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\28	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\29	msiexec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\2A	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2b	msiexec.exe

Modifies registry class 64 IoCs

description	ioc	Process
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\8800A266DCF6DD54E97A86760485EA5D\SourceList\Media	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\101D0B34220A4F84D940AB04C4BED135\Servicing_Key	msiexec.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\101D0B34220A4F84D940AB04C4BED135\Clients = 3a0000000000	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Applications\Happ.exe\shell\open\command\ = "\"C:\\Program Files\\FlyFrogLLC\\Happ\\Happ.exe\" \"%1\""	setup-Happ.x64.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\101D0B34220A4F84D940AB04C4BED135\Provider	msiexec.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\8A567BD6FA501A947AD1F646E53EEC14\SourceList\Media	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Installer\Dependencies\Microsoft.VS.VC_RuntimeAdditionalVSU_amd64,v14	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\88AAB0B9F51EF1A3CA0C2B609EDD7FC1\9CC2BA68DB8034640B9F8FD200D627FF	msiexec.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\VC,redist.x64,amd64,14.30,bundle	VC_redist.x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\happ\shell\open\command\ = "\"C:\\Program Files\\FlyFrogLLC\\Happ\\Happ.exe\" \"%1\""	setup-Happ.x64.tmp
Key created	\REGISTRY\USER\S-1-5-21-3202520547-175870679-441661622-1000_Classes\Local Settings	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\VC,redist.x64,amd64,14.44,bundle\Dependents\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}	VC_redist.x64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\101D0B34220A4F84D940AB04C4BED135	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\101D0B34220A4F84D940AB04C4BED135\SourceList	msiexec.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\8A567BD6FA501A947AD1F646E53EEC14\SourceList\Net	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\HappFile\DefaultIcon\ = "C:\\Program Files\\FlyFrogLLC\\Happ\\Happ.exe,0"	setup-Happ.x64.tmp
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\8800A266DCF6DD54E97A86760485EA5D\SourceList\Net	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\101D0B34220A4F84D940AB04C4BED135\AdvertiseFlags = "388"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\09A86F63C932FD435BC8463B1035EC53\101D0B34220A4F84D940AB04C4BED135	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\101D0B34220A4F84D940AB04C4BED135\SourceList\Media\1 = ";"	msiexec.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\88AAB0B9F51EF1A3CA0C2B609EDD7FC1	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\9CC2BA68DB8034640B9F8FD200D627FF\AuthorizedLUAApp = "0"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Installer\Dependencies\Microsoft.VS.VC_RuntimeAdditionalVSU_amd64,v14	VC_redist.x64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\HappFile\shell	setup-Happ.x64.tmp
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\8800A266DCF6DD54E97A86760485EA5D	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.VS.VC_RuntimeMinimumVSU_amd64,v14\ = "{43B0D101-A022-48F4-9D04-BA404CEB1D53}"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.VS.VC_RuntimeAdditionalVSU_amd64,v14\Dependents\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}	VC_redist.x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\HappFile\shell\open\command\ = "\"C:\\Program Files\\FlyFrogLLC\\Happ\\Happ.exe\" \"%1\""	setup-Happ.x64.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\101D0B34220A4F84D940AB04C4BED135\PackageCode = "51C7A0D0D899AA345AE972FBABA82567"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\9CC2BA68DB8034640B9F8FD200D627FF\SourceList\Media	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\happ\shell\open\command	setup-Happ.x64.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\101D0B34220A4F84D940AB04C4BED135\SourceList\PackageName = "vc_runtimeMinimum_x64.msi"	msiexec.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\8800A266DCF6DD54E97A86760485EA5D\SourceList	msiexec.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\8800A266DCF6DD54E97A86760485EA5D	msiexec.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\9CC2BA68DB8034640B9F8FD200D627FF\Clients = 3a0000000000	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Installer\Dependencies\Microsoft.VS.VC_RuntimeMinimumVSU_amd64,v14	VC_redist.x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Applications\Happ.exe\DefaultIcon\ = "C:\\Program Files\\FlyFrogLLC\\Happ\\Happ.exe,0"	setup-Happ.x64.tmp
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\8A567BD6FA501A947AD1F646E53EEC14	msiexec.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\CLASSES\INSTALLER\DEPENDENCIES\VC,REDIST.X64,AMD64,14.30,BUNDLE\DEPENDENTS\{57A73DF6-4BA9-4C1D-BBBB-517289FF6C13}	VC_redist.x64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.VS.VC_RuntimeAdditionalVSU_amd64,v14\Dependents\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}	VC_redist.x64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\happ\shell\open	setup-Happ.x64.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\101D0B34220A4F84D940AB04C4BED135\SourceList\LastUsedSource = "n;1;C:\\ProgramData\\Package Cache\\{43B0D101-A022-48F4-9D04-BA404CEB1D53}v14.44.35211\\packages\\vcRuntimeMinimum_amd64\\"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\9CC2BA68DB8034640B9F8FD200D627FF\AdvertiseFlags = "388"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\VC,redist.x64,amd64,14.44,bundle\DisplayName = "Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.44.35211"	VC_redist.x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.VS.VC_RuntimeMinimumVSU_amd64,v14\DisplayName = "Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.44.35211"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.VS.VC_RuntimeMinimumVSU_amd64,v14\Dependents\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}	VC_redist.x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\101D0B34220A4F84D940AB04C4BED135\VC_Runtime_Minimum	msiexec.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\8A567BD6FA501A947AD1F646E53EEC14\SourceList	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Applications	setup-Happ.x64.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\VC,redist.x64,amd64,14.44,bundle\Dependents	VC_redist.x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\9CC2BA68DB8034640B9F8FD200D627FF\PackageCode = "51FBA0EFEFDB3494A815FAF727EE72D7"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\happ\URL Protocol	setup-Happ.x64.tmp
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\8A567BD6FA501A947AD1F646E53EEC14	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Applications\Happ.exe\DefaultIcon	setup-Happ.x64.tmp
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\09A86F63C932FD435BC8463B1035EC53	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\101D0B34220A4F84D940AB04C4BED135\AuthorizedLUAApp = "0"	msiexec.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\VC,redist.x64,amd64,14.30,bundle\Dependents	VC_redist.x64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\happ\DefaultIcon	setup-Happ.x64.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Applications\Happ.exe\shell\open	setup-Happ.x64.tmp
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\101D0B34220A4F84D940AB04C4BED135\InstanceType = "0"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\101D0B34220A4F84D940AB04C4BED135\SourceList\Net\1 = "C:\\ProgramData\\Package Cache\\{43B0D101-A022-48F4-9D04-BA404CEB1D53}v14.44.35211\\packages\\vcRuntimeMinimum_amd64\\"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Installer\Dependencies\Microsoft.VS.VC_RuntimeAdditionalVSU_amd64,v14	VC_redist.x64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\happ	setup-Happ.x64.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\09A86F63C932FD435BC8463B1035EC53	msiexec.exe

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
2868	Happ.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
1872	chrome.exe
1872	chrome.exe
4168	setup-Happ.x64.tmp
4168	setup-Happ.x64.tmp
4944	msiexec.exe
4944	msiexec.exe
4944	msiexec.exe
4944	msiexec.exe
4944	msiexec.exe
4944	msiexec.exe
4944	msiexec.exe
4944	msiexec.exe
4168	setup-Happ.x64.tmp
4168	setup-Happ.x64.tmp
4168	setup-Happ.x64.tmp
4168	setup-Happ.x64.tmp
3416	happd.exe
3416	happd.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2052	sing-box.exe
2052	sing-box.exe
2052	sing-box.exe
2052	sing-box.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2868	Happ.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs

pid	Process
1872	chrome.exe
1872	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1872	chrome.exe
Token: SeCreatePagefilePrivilege	1872	chrome.exe
Token: SeShutdownPrivilege	1872	chrome.exe
Token: SeCreatePagefilePrivilege	1872	chrome.exe
Token: SeShutdownPrivilege	1872	chrome.exe
Token: SeCreatePagefilePrivilege	1872	chrome.exe
Token: SeShutdownPrivilege	1872	chrome.exe
Token: SeCreatePagefilePrivilege	1872	chrome.exe
Token: SeShutdownPrivilege	1872	chrome.exe
Token: SeCreatePagefilePrivilege	1872	chrome.exe
Token: SeShutdownPrivilege	1872	chrome.exe
Token: SeCreatePagefilePrivilege	1872	chrome.exe
Token: SeShutdownPrivilege	1872	chrome.exe
Token: SeCreatePagefilePrivilege	1872	chrome.exe
Token: SeShutdownPrivilege	1872	chrome.exe
Token: SeCreatePagefilePrivilege	1872	chrome.exe
Token: SeShutdownPrivilege	1872	chrome.exe
Token: SeCreatePagefilePrivilege	1872	chrome.exe
Token: SeShutdownPrivilege	1872	chrome.exe
Token: SeCreatePagefilePrivilege	1872	chrome.exe
Token: SeShutdownPrivilege	1872	chrome.exe
Token: SeCreatePagefilePrivilege	1872	chrome.exe
Token: SeShutdownPrivilege	1872	chrome.exe
Token: SeCreatePagefilePrivilege	1872	chrome.exe
Token: SeShutdownPrivilege	1872	chrome.exe
Token: SeCreatePagefilePrivilege	1872	chrome.exe
Token: SeShutdownPrivilege	1872	chrome.exe
Token: SeCreatePagefilePrivilege	1872	chrome.exe
Token: SeShutdownPrivilege	1872	chrome.exe
Token: SeCreatePagefilePrivilege	1872	chrome.exe
Token: SeShutdownPrivilege	1872	chrome.exe
Token: SeCreatePagefilePrivilege	1872	chrome.exe
Token: SeShutdownPrivilege	1872	chrome.exe
Token: SeCreatePagefilePrivilege	1872	chrome.exe
Token: SeShutdownPrivilege	1872	chrome.exe
Token: SeCreatePagefilePrivilege	1872	chrome.exe
Token: SeShutdownPrivilege	1872	chrome.exe
Token: SeCreatePagefilePrivilege	1872	chrome.exe
Token: SeShutdownPrivilege	1872	chrome.exe
Token: SeCreatePagefilePrivilege	1872	chrome.exe
Token: SeShutdownPrivilege	1872	chrome.exe
Token: SeCreatePagefilePrivilege	1872	chrome.exe
Token: SeShutdownPrivilege	1872	chrome.exe
Token: SeCreatePagefilePrivilege	1872	chrome.exe
Token: SeShutdownPrivilege	1872	chrome.exe
Token: SeCreatePagefilePrivilege	1872	chrome.exe
Token: SeShutdownPrivilege	1872	chrome.exe
Token: SeCreatePagefilePrivilege	1872	chrome.exe
Token: SeShutdownPrivilege	1872	chrome.exe
Token: SeCreatePagefilePrivilege	1872	chrome.exe
Token: SeBackupPrivilege	1340	vssvc.exe
Token: SeRestorePrivilege	1340	vssvc.exe
Token: SeAuditPrivilege	1340	vssvc.exe
Token: SeShutdownPrivilege	4856	VC_redist.x64.exe
Token: SeIncreaseQuotaPrivilege	4856	VC_redist.x64.exe
Token: SeSecurityPrivilege	4944	msiexec.exe
Token: SeCreateTokenPrivilege	4856	VC_redist.x64.exe
Token: SeAssignPrimaryTokenPrivilege	4856	VC_redist.x64.exe
Token: SeLockMemoryPrivilege	4856	VC_redist.x64.exe
Token: SeIncreaseQuotaPrivilege	4856	VC_redist.x64.exe
Token: SeMachineAccountPrivilege	4856	VC_redist.x64.exe
Token: SeTcbPrivilege	4856	VC_redist.x64.exe
Token: SeSecurityPrivilege	4856	VC_redist.x64.exe
Token: SeTakeOwnershipPrivilege	4856	VC_redist.x64.exe

Suspicious use of FindShellTrayWindow 51 IoCs

pid	Process
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
4168	setup-Happ.x64.tmp
2808	vcredist2022_x64.exe
3820	VC_redist.x64.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe

Suspicious use of SendNotifyMessage 36 IoCs

pid	Process
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
1872	chrome.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe
2868	Happ.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2868	Happ.exe
2868	Happ.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 1872 wrote to memory of 632	1872	chrome.exe	83
PID 1872 wrote to memory of 3844	1872	chrome.exe	84
PID 1872 wrote to memory of 4812	1872	chrome.exe	85
PID 1872 wrote to memory of 4812	1872	chrome.exe	85
PID 1872 wrote to memory of 2560	1872	chrome.exe	87
PID 1872 wrote to memory of 2560	1872	chrome.exe	87
PID 1872 wrote to memory of 3860	1872	chrome.exe	89
PID 1872 wrote to memory of 3860	1872	chrome.exe	89
PID 1872 wrote to memory of 2240	1872	chrome.exe	88
PID 1872 wrote to memory of 2240	1872	chrome.exe	88
PID 1872 wrote to memory of 2808	1872	chrome.exe	95
PID 1872 wrote to memory of 2144	1872	chrome.exe	101
PID 1872 wrote to memory of 4424	1872	chrome.exe	102
PID 1872 wrote to memory of 2392	1872	chrome.exe	103
PID 1872 wrote to memory of 2452	1872	chrome.exe	104
PID 1228 wrote to memory of 4168	1228	setup-Happ.x64.exe	109
PID 4168 wrote to memory of 2580	4168	setup-Happ.x64.tmp	110
PID 2580 wrote to memory of 2808	2580	vcredist2022_x64.exe	111
PID 2808 wrote to memory of 4856	2808	vcredist2022_x64.exe	112
PID 4132 wrote to memory of 468	4132	VC_redist.x64.exe	122
PID 468 wrote to memory of 3820	468	VC_redist.x64.exe	123
PID 4856 wrote to memory of 2532	4856	VC_redist.x64.exe	124
PID 2532 wrote to memory of 4448	2532	VC_redist.x64.exe	125
PID 4448 wrote to memory of 3980	4448	VC_redist.x64.exe	126
PID 3820 wrote to memory of 4612	3820	VC_redist.x64.exe	127
PID 4168 wrote to memory of 2172	4168	setup-Happ.x64.tmp	128
PID 4168 wrote to memory of 4484	4168	setup-Happ.x64.tmp	131
PID 4168 wrote to memory of 1112	4168	setup-Happ.x64.tmp	133
PID 4168 wrote to memory of 4888	4168	setup-Happ.x64.tmp	135
PID 4168 wrote to memory of 2868	4168	setup-Happ.x64.tmp	140
PID 2868 wrote to memory of 3064	2868	Happ.exe	141
PID 2868 wrote to memory of 2052	2868	Happ.exe	143
PID 2868 wrote to memory of 2968	2868	Happ.exe	145

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012
Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://github.com/Happ-proxy/happ-desktop
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x21c,0x220,0x224,0x1f8,0x228,0x7ffd7ba1c728,0x7ffd7ba1c734,0x7ffd7ba1c740
  2⤵
  PID:632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1608,i,16719291669275057559,16303402205774603104,524288 --field-trial-handle=2040,i,1346983945778220262,17127016206949678802,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=2148 /prefetch:3
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:3844
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1704,i,13849141135254358978,7278840027515093963,262144 --field-trial-handle=2040,i,1346983945778220262,17127016206949678802,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=2036 /prefetch:2
  2⤵
  PID:4812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2284,i,16081937585608022482,4625728809395829520,524288 --field-trial-handle=2040,i,1346983945778220262,17127016206949678802,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=2648 /prefetch:8
  2⤵
  PID:2560
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3264,i,102637913720052944,2820293549145761611,2097152 --field-trial-handle=2040,i,1346983945778220262,17127016206949678802,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3144 /prefetch:1
  2⤵
  PID:2240
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3268,i,1291919970609216662,2517626915747744999,2097152 --field-trial-handle=2040,i,1346983945778220262,17127016206949678802,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3300 /prefetch:1
  2⤵
  PID:3860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5372,i,15104824084230826020,15079167056869929238,524288 --field-trial-handle=2040,i,1346983945778220262,17127016206949678802,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:2808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5784,i,8703586325275332998,9538634664303190920,524288 --field-trial-handle=2040,i,1346983945778220262,17127016206949678802,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5792 /prefetch:8
  2⤵
  PID:2144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5812,i,15560572056388636343,6581840152858466717,524288 --field-trial-handle=2040,i,1346983945778220262,17127016206949678802,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5820 /prefetch:8
  2⤵
  PID:4424
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5816,i,1115619831327667039,17288361227795242967,524288 --field-trial-handle=2040,i,1346983945778220262,17127016206949678802,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5744 /prefetch:8
  2⤵
  PID:2392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5892,i,14637862707017703447,12270466551233323449,524288 --field-trial-handle=2040,i,1346983945778220262,17127016206949678802,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:2452

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4712

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:836

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2820

C:\Users\Admin\Downloads\setup-Happ.x64.exe
"C:\Users\Admin\Downloads\setup-Happ.x64.exe"
1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1228
- C:\Users\Admin\AppData\Local\Temp\is-VCUGH936QI.tmp\setup-Happ.x64.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-VCUGH936QI.tmp\setup-Happ.x64.tmp" /SL5="$F01E0,124853549,893440,C:\Users\Admin\Downloads\setup-Happ.x64.exe"
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Drops file in Program Files directory
  - System Location Discovery: System Language Discovery
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:4168
- - C:\Users\Admin\AppData\Local\Temp\is-UZZ0WB7MLS.tmp\vcredist2022_x64.exe
    "C:\Users\Admin\AppData\Local\Temp\is-UZZ0WB7MLS.tmp\vcredist2022_x64.exe" /passive /norestart
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Suspicious use of WriteProcessMemory
    PID:2580
  - - C:\Windows\Temp\{6614CEE7-6B22-488A-A280-9907AB751B04}\.cr\vcredist2022_x64.exe
      "C:\Windows\Temp\{6614CEE7-6B22-488A-A280-9907AB751B04}\.cr\vcredist2022_x64.exe" -burn.clean.room="C:\Users\Admin\AppData\Local\Temp\is-UZZ0WB7MLS.tmp\vcredist2022_x64.exe" -burn.filehandle.attached=680 -burn.filehandle.self=720 /passive /norestart
      4⤵
      Checks computer location settings
      Executes dropped EXE
      Loads dropped DLL
      System Location Discovery: System Language Discovery
      Suspicious use of FindShellTrayWindow
      Suspicious use of WriteProcessMemory
      PID:2808
    - - C:\Windows\Temp\{3F5CAF06-6E39-417B-8493-CC274216402D}\.be\VC_redist.x64.exe
        
        "C:\Windows\Temp\{3F5CAF06-6E39-417B-8493-CC274216402D}\.be\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{CF1DCBF7-1387-48CE-86C9-61497B3A5DDE} {2ECE5A00-230E-4DAB-A8FC-443FF33C1B05} 2808
        5⤵
        Executes dropped EXE
        Adds Run key to start application
        System Location Discovery: System Language Discovery
        Modifies registry class
        Suspicious use of AdjustPrivilegeToken
        Suspicious use of WriteProcessMemory
        
        PID:4856
      - C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
        
        "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -uninstall -quiet -burn.related.upgrade -burn.ancestors={d8bbe9f9-7c5b-42c6-b715-9ee898a2e515} -burn.filehandle.self=1060 -burn.embedded BurnPipe.{A86C5CAB-309A-445E-85D0-07D11098FEEA} {C3885885-FFE1-4116-AF15-FE05BE9A71B2} 4856
        6⤵
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:2532
        
        C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
        
        "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -burn.filehandle.attached=544 -burn.filehandle.self=564 -uninstall -quiet -burn.related.upgrade -burn.ancestors={d8bbe9f9-7c5b-42c6-b715-9ee898a2e515} -burn.filehandle.self=1060 -burn.embedded BurnPipe.{A86C5CAB-309A-445E-85D0-07D11098FEEA} {C3885885-FFE1-4116-AF15-FE05BE9A71B2} 4856
        7⤵
        Loads dropped DLL
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:4448
        
        C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
        
        "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{5708E25F-817E-4516-BB62-C15EC7DD3876} {27D6F3DD-424D-433D-9FFA-4164DE7A9C65} 4448
        8⤵
        System Location Discovery: System Language Discovery
        Modifies registry class
        
        PID:3980
- - C:\Windows\SYSTEM32\schtasks.exe
    "schtasks.exe" /Delete /TN "Happ Proxy Autostart" /F
    3⤵
    PID:2172
- - C:\Windows\system32\schtasks.exe
    "schtasks.exe" /Delete /TN "Happ Proxy Autostart v2" /F
    3⤵
    PID:4484
- - C:\Program Files\FlyFrogLLC\Happ\happd.exe
    "C:\Program Files\FlyFrogLLC\Happ\happd.exe" --register
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:1112
- - C:\Windows\system32\sc.exe
    "sc.exe" start HappService
    3⤵
    - Launches sc.exe
    PID:4888
- - C:\Program Files\FlyFrogLLC\Happ\Happ.exe
    "C:\Program Files\FlyFrogLLC\Happ\Happ.exe"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Unexpected DNS network traffic destination
    - Reads the TCP/IP host and domain name from the registry
    - Suspicious behavior: AddClipboardFormatListener
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious behavior: GetForegroundWindowSpam
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of SendNotifyMessage
    - Suspicious use of SetWindowsHookEx
    - Suspicious use of WriteProcessMemory
    PID:2868
  - - C:\Program Files\FlyFrogLLC\Happ\core\xray.exe
      "C:\Program Files\FlyFrogLLC\Happ\core\xray.exe" --version
      4⤵
      Executes dropped EXE
      PID:3064
  - - C:\Program Files\FlyFrogLLC\Happ\tun\sing-box.exe
      "C:\Program Files\FlyFrogLLC\Happ\tun\sing-box.exe" version
      4⤵
      Executes dropped EXE
      Reads the TCP/IP host and domain name from the registry
      Suspicious behavior: EnumeratesProcesses
      PID:2052
  - - C:\Program Files\FlyFrogLLC\Happ\tun2\tun2proxy-bin.exe
      "C:\Program Files\FlyFrogLLC\Happ\tun2\tun2proxy-bin.exe" --version
      4⤵
      Executes dropped EXE
      PID:2968

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Checks SCSI registry key(s)
- Suspicious use of AdjustPrivilegeToken
PID:1340

C:\Windows\system32\srtasks.exe
C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
1⤵
PID:4220

C:\Windows\system32\msiexec.exe
C:\Windows\system32\msiexec.exe /V
1⤵
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Windows directory
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:4944

C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe
"C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe" /burn.runonce
1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4132
- C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe
  "C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe" /passive /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20261113114213.log"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:468
- - C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe
    "C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe" -burn.filehandle.attached=520 -burn.filehandle.self=540 /passive /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20261113114213.log"
    3⤵
    - Checks computer location settings
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of WriteProcessMemory
    PID:3820
  - - C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe
      "C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{4EE55A70-9249-4E81-90D8-4CA73BAA74EB} {F96485C5-7BE3-4A68-83C9-53A2FA93F4F4} 3820
      4⤵
      Executes dropped EXE
      Adds Run key to start application
      System Location Discovery: System Language Discovery
      Modifies registry class
      PID:4612

C:\Program Files\FlyFrogLLC\Happ\happd.exe
"C:\Program Files\FlyFrogLLC\Happ\happd.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- Reads the TCP/IP host and domain name from the registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
PID:3416

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

e599779.rbs

Path C:\Config.Msi\e599779.rbs
Size 19KB
SHA256 7270ffda66d2b0f2d21cb239edbf6eeff91e1baa0fb2e72acd5f59c1c4fa9a6b
MD5 2dae81b0d9604079748091d4263d1525
SHA1 414fe476c9d407ef4ea39236fd26f86c6e533a14
SHA512 09464c65ad534e5650b66cfdac9acadb1e4ebc240730f74a38c143835f7e1b9c5f3a18c2ab067ba869a1686324a726d6987e7a716d925644b397054a00cbe5e7
SSDEEP 192:HzRF1kRa15dXcFUADIc1L+W+y4+agPuWb7:HzRF6RaTeC81L/cib7
TLSH
T17F92FC426A80C9E2D8766B30CD671F653B76DBD5A350838B50DC90308F93BCA2F9D69D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e599785.rbs

Path C:\Config.Msi\e599785.rbs
Size 19KB
SHA256 508211f07c7f1480109cc899e7111f85e6237082ee549e0cf7cfc1a019108d47
MD5 a3783fab363889681d96cd0d8215308d
SHA1 0915e932b80b42e0b9d48e837e6a31e1b104a388
SHA512 0c1098de24497531f709c8f64bb6b7ac4a3b9992bca9f4c1b74f5a154504e9c61754043c8b6f5cbf96b8c50fcbf630f19915427d23f5afa37fc3d43b84211555
SSDEEP 384:HvOGnJXMjZ7Up+BFqiO6V0gJu0uJu0Goa2D8Lfv/8c3zMZxq+nNwzQ6R:HvOGnJXMjZ7Up+BFIguFuR
TLSH
T1AB92CB016640C5E3D8A62B70DD4B67243BB5D7CAA355A38B41DCC1308FA77CA7F9D24A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e59978c.rbs

Path C:\Config.Msi\e59978c.rbs
Size 21KB
SHA256 1a4ef6485fddd134a5f41cbd1e5b5519e6c320c8fbad305badc70ab9b9558947
MD5 f1be02a8fb99a8db6776da469c3be27e
SHA1 894244516b196079820e922bfcbfbb76a1a0ab00
SHA512 6dfa4a2066595d790a2723d95bdff20df940e006eb3d97ca0417faf786911076961546a26a4fc25686faf536f80d27795854de89b07b020ca960e184cc2c5755
SSDEEP 384:+8RXGRrnAKxNAUhUC7xJjrMNYPVIbS/WwQDCeJyLgpxkP:+AWTAKhCsx
TLSH
T1A0A21D03768099E3D86227B1DD671BA43B72E7D99350434B10ECD1388F633C72F5AA9A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e59979b.rbs

Path C:\Config.Msi\e59979b.rbs
Size 21KB
SHA256 052d3a18d856b8774bc9cb0bd1747b0c3908fb470db1bc8ccef20169302ebed3
MD5 f939c974862f3d60127b83f226cc160b
SHA1 db880a39feddb118bcd61f8a8b81c3abbe7d77c2
SHA512 90cdb7bb0662c0f46c5a4ffad1d1f0be05c2003d9405743a1e94da0c6404595cb1f79dad85edefc7b618e7836b65ddbd7d04aba649dc935c149e880ba3dbdc45
SSDEEP 384:+rNvDIAZxEth/phSYjK4WbJGwaZsalckU72eC67JkE5KLJpUJpsrr6c+0dWg:+dDIAZxEth/phSYujbJBTsEKrr6/0dP
TLSH
T118A20D42BA40D2D3D8A62B70CD97672437B5D3DAA755434B10CC90348F937DA2F9AACB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Happ.exe

Path C:\Program Files\FlyFrogLLC\Happ\Happ.exe
Size 20.4MB
SHA256 eb6d902cd5e5224c1c2a624c61db25d7dc4f195fe8ec37d83ae1db8123b4c68e
MD5 d2ff632c3e04d82dc686e77f85ec0a0a
SHA1 be155948f6635d4e9de6f5c109da4368ecfbf8f3
SHA512 97ca9c3acbc55c789a05065476b7db2b223aabdc1e6c35fb974718aa25b5c36c902bba803380f8e43627ce9f9a3ed6fe56448e34695ff6db4dbfc72a1968a13b
SSDEEP 393216:o3cNO18C0AJVQm1a+FWx0mrmL6/i5gA9TF:stHxRmrm2UgA
TLSH
T17327E01ABE944694E4E6C23CC75A4613E272BC2563E383FB21687A654F3B2E31D3D741
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt6Core.dll

Path C:\Program Files\FlyFrogLLC\Happ\Qt6Core.dll
Size 9.9MB
SHA256 22c113a5644b875b2c85482723cd5d2e6a3a4029169778fcc78adde08ef3b6aa
MD5 34084ab9444b43ea81aed28ca2513091
SHA1 9d021629b0900d0f92599e734ef48377fbbb2307
SHA512 06066b22a91392df440e2eaccd87c953fe1b6b0678dcd037dba79290cdd1322595194a1c4fd5fb03a24a7279980278e42ab0360acf67453b646e2ee8d0f21bc9
SSDEEP 98304:RoB9Y4db9sWFZhCUlKFdu9CwJsv6t3Im6hJMANkMa/3qzs:OYoJsWkkKFdu9CwJsv6t3qSAq/3qg
TLSH
T140A6290766FA0141F6F7D634CAB75126DB72BC865B3196DF025822291E337F09E3A326
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt6Gui.dll

Path C:\Program Files\FlyFrogLLC\Happ\Qt6Gui.dll
Size 9.1MB
SHA256 19265a4e76efc12ef5f5bcf59be6c6a5b9b59ec4c89660797738bd2da7f719cc
MD5 7fca31dbc6fa55f5a6c1b49e97b3e26e
SHA1 516ab7baa3fb6fc478a963e842d75bd6d5303c81
SHA512 e27577bfa18646a8bfe1db26695ceb6eb25553f5b76793cd93636662031c68a165571f16388bed8d25572d5566230c0d49381e0168f45f14d6cc417f2558efcc
SSDEEP 98304:H0NalC95b/Y0+6duqcprtoc6QMzqs5ROWlWA9:H0Z95b1duqcprtp6QM8WlWw
TLSH
T154A69D97B3A911C8D56BD13D8B9B5517EBB2300503529BDB01A1CA592F33BF12ABF321
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt6Network.dll

Path C:\Program Files\FlyFrogLLC\Happ\Qt6Network.dll
Size 1.7MB
SHA256 75ff0896a618f4f5b602f391eb4917a55fd738b2e751d2cf18244a0de3619184
MD5 c4aeeb3c55bef8d1f1fb423ec80e17ea
SHA1 d6476688b9e89ee7832255d1efde89ba4332933d
SHA512 b73e3f2ab974a3e3a37c33bc48d05926919fd2b72812faade2ef95059db02f5d7467beda0c653de82ff84d708bae966647a90082a2c4cf5c2d695b755125790a
SSDEEP 49152:ML4bTLBqp8UcswuLTyOJrQ/jDANtXNJV+5:LTzwXN6
TLSH
T179855B17A3E50296C46FC179CB0B8A07EB73700587A29BDB42658F552F63BE22B7D350
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt6Sql.dll

Path C:\Program Files\FlyFrogLLC\Happ\Qt6Sql.dll
Size 309KB
SHA256 e8e723e895236a0d6baf8b1c24079398330e50e99414b39c5af86561f58b50cd
MD5 30025b8a2f8f28e25a651aaea4e2900c
SHA1 7959b3b275bc625671e84a1ee2affb1eac990fd4
SHA512 6b52975898fd3dd7085cd8269212634b288fc6a6dafef15f6b937cd268207fa90a7a9434fffe9d9ecbbb6efd66f9f6bd580dab56b860b35929b1f4ce4e229259
SSDEEP 6144:kZ+Au9ctsaD2qOKMgBefj/ouSQdHHtPxPIDEB:kHLt/SjljQuVLh
TLSH
T19B644A07B7A50D96E41BC67CC647C506EAB37C004762DBDF53698A562E37BE26E3C220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

concrt140.dll

Path C:\Program Files\FlyFrogLLC\Happ\concrt140.dll
Size 316KB
SHA256 2405355f0a58067b258f8df33c327e3a3d716eaac5a3a5aebb757842d85bd376
MD5 5fe9a647921ded8a2fad92deb9ec4ab2
SHA1 1ce87fac4c22aae82a81ddb26952c074b744e78d
SHA512 11fe4c0519cb1df73695ce38b5fdea2a563de565116a47ff0032d5a68b8c51fe732ad66738a7167e56d79193c60af9204a7ee0beae8ff8bb75abd0b484c2d764
SSDEEP 6144:jfjSd54rw5k9cZW1Cbfpri5/ww8VRj7nWzg/p8Wcz:DOP4rwK9c0ILqzocz
TLSH
T16C64398A76140CE6F96BE039C553851BE6F2BC416352D3CB0264839E6F637D1E93A732
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

happd.exe

Path C:\Program Files\FlyFrogLLC\Happ\happd.exe
Size 3.6MB
SHA256 5996e785ee23dd516bb88e733f657625de54defef8b9b2689c6285300e133a12
MD5 9f3d049f97de426a9db0d70406f4deed
SHA1 35a3c16a469fbc467ac4d7a82fa9afd1a4fbcc53
SHA512 dfe20663fc7d1727cdf06ab4cef191201498eb9eab8a1f7bc440148f6cfabddab11917906d68fb3a6d2024d901a734ccd62b060ba306ce5b7456c7f23793794e
SSDEEP 49152:DVbKnPu4OHdLZC4SfrVjMNvIGLi8OoLAVMuT+HgAPAD4XhU0IhkEcyrT4zGP64zZ:Ou4OHdLZtJZfnGDqhDRCKL
TLSH
T1B5068D9AA7A801EAD46BC23CC5564603D7B1F816577097CF0A645ABA1F73BE10F7EB00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icu.dll

Path C:\Program Files\FlyFrogLLC\Happ\icu.dll
Size 2.2MB
SHA256 67156cab8760909ed94851ce01036778d160e24dd5b4d088a8acd3b05bd05cea
MD5 f7e73497fa0618a4eb02b5c433db368d
SHA1 e859ad242b41be4f60031af6665a46ac45ef92bf
SHA512 47cc203811778179c0c758c263982140d8c2edd119a75ce3d316e29391fb5b29af9eacf5e721f48d1f0806705bd092f39d054fcf7cef033e3d19d0d47b42b22a
SSDEEP 24576:xjXgogHSfnB2F1JY1eGORG6mN7nLaZrIXgJqXMPAEqurc28rDEYFUwr9d2gFe1o:lfggtWGrlnLaiQ08PAODRYF7r9dne
TLSH
T1CBA58C43F6AA40A1C1BBD27CC6A74B0BD3B23C254F3197DF12A4469A1F63BE1553A391
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140.dll

Path C:\Program Files\FlyFrogLLC\Happ\msvcp140.dll
Size 544KB
SHA256 0f885b509a685d2bbfa652fed26b5fb31d88fbdab0a978c641d1c7b8aa460aa9
MD5 bc88b387cafa556068b5c5d6ff3ccc8f
SHA1 b370eca8fa727e46cf61d834fcc956698b02e1fd
SHA512 b7aee12e1bf86027e3c42ae28f6f6fb34dca81c1f5af6983ea4aac559f2fedf945956a381f529c553d71bc83cd71dcbad12266fad86c944f17f63db92b8ca95b
SSDEEP 12288:tdkDYbKloU7/7mozO39V5WZyhNFdQEKZm+jWodEEVLa69sU:tdnGoU/7m/V5WZ8dQEKZm+jWodEER7N
TLSH
T10BC41A27F74A06B0E195E3B8A1838702D7F1BC598322E3C752EB955D2F573D0A63B690
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140_1.dll

Path C:\Program Files\FlyFrogLLC\Happ\msvcp140_1.dll
Size 35KB
SHA256 bfad5aef4c63a669e3c140655cdfdf395b6c979b400a447bd5dcb65ed8826c3d
MD5 2a214cb2f0f9473e7765ee3b8db8651e
SHA1 9ce5c3d6c7d94b175f136f552af8771dca6147b3
SHA512 ea9a759babdec5818fa1e430d1cb453cac762cfaa8f934e01d7182100f66cae21527962696f5bd963fcb0fba2c0f38bf4028e75f89e9e599ddee008021646a33
SSDEEP 384:3jJ2J9VQH+qNy09dmFWcS5gW7YZ1gr4iSt+e92xS+R9zWd/I1IHRN7SUl8BR9zTr:d8QH+qNy0PmgogU9v2ci9zeHSn9z3
TLSH
T1C3F25D86F7248442EC674970C699EE837C3DB3D25B50969B17A5F61C0DA33C1FA34A2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140_2.dll

Path C:\Program Files\FlyFrogLLC\Happ\msvcp140_2.dll
Size 273KB
SHA256 3ea06f0ee098b4823cb79599df3780e7f23cce52c19aac31d2a0d47efe33a5e9
MD5 3151333808c2c2339d5f5466df70b7dc
SHA1 e48159bb2127ec812ff679f6fabc41141009f26a
SHA512 8f1daa078e124dc89b51b84baab8d6cc2d77497be23b2ba95ef3fee54d9034e17bf5cd15a4043d025699972cae20f9c46d2e7bef48e4283f3ad9ca6b84fc64d1
SSDEEP 3072:1J51P7emwi1j+XZi7b1dbqtH0h6XV3Q0JPQo07ICl3Sg2xmygdCg2LMeDh5FD799:1JbjwvnQo/iy5L/XxTWrNM
TLSH
T1AD543912B51A2EBFC5D6E8B04939B416FC223A418775C48A57C31C8D9E2BB437FE3529
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140_atomic_wait.dll

Path C:\Program Files\FlyFrogLLC\Happ\msvcp140_atomic_wait.dll
Size 49KB
SHA256 640b2aefced484d0368eea5bdd06addd0658a3a70a49256e560d6923b404a479
MD5 44aec42494531580bca182b0e2fb19c2
SHA1 a85a6a4de6656e5969fa4ab15f2230dfe2839e75
SHA512 d8afb5bbb1394fd14c3ec8ecdd4c02e1c6f23031b15173b1448dfd4915c392bb8512cd41eccb449db19969397a09046d27d54db704c8122ff62c12ff5a89c9d6
SSDEEP 768:ayMsqh8UGchsJr3KbYA5XeDmqw4DYPW9zr0JD0io9z7p1uF:W+UjCKb/5XeCqgazrURgz91G
TLSH
T19C337DDDA7684083E5678634C1A4E517FA7AB7E20710D6EF4352F0890FA37D1AE34B1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140_codecvt_ids.dll

Path C:\Program Files\FlyFrogLLC\Happ\msvcp140_codecvt_ids.dll
Size 31KB
SHA256 f2069a52880ec885ee7f0511186100eb7fada0411a2b4948fafea7735b878a18
MD5 3ece3fb90bfaea8e9a5fb7139ff9cbdc
SHA1 91b19dd0db24a5cbd944eca9c67fad3b53f9c154
SHA512 c059ffd80de25ad10d34064b1e9421666525da67710de0ac445cfc45b8139715dd946f7e90c1e0d719c60e3d5902e3229db4496c87d674c0012c9b4a8c2b2291
SSDEEP 384:p7GVNpd36sRWioEWEw4himRSt+efdDtdQ5R9zpU8NSqHRN7w9ju0R9zlWdo:5GVsfaw4DYd7ds9zmMEu49z0G
TLSH
T19BE27C89DA3C4487EC9B5C7082ACDE477C3D77C60A10569B4392F5181DA33C6EB3866E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is-2QVJELFG96.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\Basic\is-2QVJELFG96.tmp
Size 1KB
SHA256 c450201e728ed0569d36fba1838c6b0115410f629f950d46b5a04db589dac9db
MD5 d2f4682b5b6a5b447930eec0466ef4bf
SHA1 91f47f2469f66c7399d3629c57ee6f9544614f89
SHA512 b4161ae204467a9259f2a6c70cbe6111a619a77f86561eb417cb683f12b4fc9b06b4e6d3e43c5e76115d173e551bde4047174a44522c1d3d45e2730ee7adce3c
TLSH
T15A210024417703700235CBA7EE03D8E8E712E2139546905B3B2C95A81FF48E1D35376A
MD5 SHA1 SHA512 TLSH

Submit Download

is-01S1YPX1D0.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-01S1YPX1D0.tmp
Size 240B
SHA256 d6b25f5b487194c92adf069493a3cf5cc9246a9bd14e333cbad62fb531fbe672
MD5 55351afc67efd91bfae843afbcaaa8b0
SHA1 ecb238f0a63baf5cbec899c8be9353c4890179fa
SHA512 b136245f0e2da649f2b59913920313e940cb32f12dc1f5c93a6c26e280a5032d8b574afd607087a6e9847e70d8a05c4ff1070dcf2a5ca1d85fa95c0186bf20d5
TLSH
T105D022E5B1D4BEA762A51354605DA097C6398EEF2D202052ABE1B22DD53010CE09638A
MD5 SHA1 SHA512 TLSH

Submit Download

is-0ZRCQ11PX2.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-0ZRCQ11PX2.tmp
Size 210B
SHA256 f85b2a74823a54b1d904d44b638204ae78301a91eabacfc1dc7f07508c384057
MD5 a53be3f2aac6ceb758f6d7669f5d3c1f
SHA1 86f8e6e4553dbebcc5048f5ec922da300ecb76a8
SHA512 4b58e4c8465df0dec6e022a1f91ea481ec50ae97e9ab88deaef59fd1e42e6e0030bf80b597b2c86f2a6d53b7b7b27547a778fb9e53cc225dc3f54f5c97c0fd12
TLSH
T198D012B5B209ADBF869B0753426C8209CC014D280A461156A406722D963140E9096A86
MD5 SHA1 SHA512 TLSH

Submit Download

is-10AD7FBVX9.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-10AD7FBVX9.tmp
Size 183B
SHA256 b2e9b5268db1594656d584a35cc7083fcc5fb41b6768dbd7448054d1904d780d
MD5 351f1dee99f98be06a03d7119b3b60f0
SHA1 43ae172b68fcacfbc1f326c0df7bcbd00ea4dbf2
SHA512 b08fd497a11095df514ca1af6da608f16d98bc0156f30a24998b97cef6f8cb98d21ce8b6c0c7e6f4fa162d57933d3fa35ba40937bfd4190b4c04e3eaf9606f7f
TLSH
T17DC080D7B5C34D394D5652124B3C905189940DD71950100B8005F07CD53205571505D1
MD5 SHA1 SHA512 TLSH

Submit Download

is-1ASCGYVA75.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-1ASCGYVA75.tmp
Size 166B
SHA256 7b24c72a494b81a4e61be17014a8c5bfa2dfd457fbff4cbec0845793d3fca0b4
MD5 d802494a42a7c978084749a07e7a9a6e
SHA1 f53239078957f34424a5746afbeaf98e8e9b33e9
SHA512 43bd43efaad7449668077969493c4140b04909a5f28c3b66e0aea1d703b7f521ead19d252447ddc4b0dd9a688824a44ba3e6eb72b1e3798dd3481f41fa3b066f
TLSH
T11EC08CE3E55C1811C45A123682AA04A2BC694C6A6C2960032A9A78BC5E3288882C8603
MD5 SHA1 SHA512 TLSH

Submit Download

is-1POJR0G0ER.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-1POJR0G0ER.tmp
Size 133B
SHA256 17f228ea1db9440f773814cc95b70a585a6e25935b8828012cc53a731745d4e9
MD5 68134715a4245866ef9ea9eae870c6c5
SHA1 3e9a1e1c17ec97b6b2211077fe949f203b0a55ed
SHA512 b42233111bcc27e961b662526bca26f50eb4102729076340ae17559d22ad5d93bc469a52143481136b668b0e708341991f121d6dff839864edc6356527ee958a
TLSH
T19AC02BD302920C3CC9800333C6460988B330326005804A41718686231813D9585C2302
MD5 SHA1 SHA512 TLSH

Submit Download

is-1SUH02FL20.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-1SUH02FL20.tmp
Size 145B
SHA256 d7bea5e577872de5fc9bde61b81660d4d9b73a8864d28b69246f7994a1af2631
MD5 d08f949bf1232461109500688582473a
SHA1 623fe638713e87f4888c41d8c4ccc8f95f96231a
SHA512 c1923f85334aaafa8385e022749d7734371d25c5af3cac5392bacb45269b34c009d47d2bfe6c46dc5e8e54102b73ba6d577cb37ab6acb7723fe47d75e93c6137
TLSH
T170C02BE2A14298B4DC0B0632C415C81ADE30AAEE1D4F0BD45C0FC43758C3446B0F0380
MD5 SHA1 SHA512 TLSH

Submit Download

is-1T81QSO6FM.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-1T81QSO6FM.tmp
Size 171B
SHA256 840b43337d232f04aed0b3209a43a0b25bb5f4bb53920620c7e0bcc155743daa
MD5 c5bf70b32da28a72b9907db3192fdc55
SHA1 6fd954665a546c517567fc708645c02a33fd3f46
SHA512 5d7c0924eee3f2b0be4f1cb71a118905131362f5871c2973bde24ba305739db51f541f491421f88beae78f586a3a1b4fee9fbd25c5e2527f6c159fc1b7c5ee35
TLSH
T176C08CE2A220AEE5C1CE003E4289210289EA8D1C3E274102F645D435AAE110E46C679F
MD5 SHA1 SHA512 TLSH

Submit Download

is-20I4582NH3.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-20I4582NH3.tmp
Size 164B
SHA256 e2ee0ed4ccf6d0e468b02b83598f0487cc3167d508c6e08e6490b925d8305474
MD5 84b1c5af5460f1468c4cd17bfb7d7ffc
SHA1 a9c6259103be4cde24e9a85e5ebd7f663ba3db97
SHA512 a7394e01336bee9993ee2603bd7abcd56d86e815e502fab58d52311e998ffa512d3dba9a99bfb9dc7cf935d67b779059ab1b1baf53a6c9ec63c4b05cbdd5ac82
TLSH
T16AC080E01EB7597BF3040177655AD130ADB6471459195614C1DD9D3D984910EC055513
MD5 SHA1 SHA512 TLSH

Submit Download

is-2FHQPV8RGG.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-2FHQPV8RGG.tmp
Size 176B
SHA256 86b21bca5d4ca34b3d22456b4df8d1ab5521f0d14a46edf7dece8cf1e61d6a3e
MD5 793f8a6e3b366e4dd14332921062d6f5
SHA1 5d0f0b10f592f3cc0ae367217a899ad82714a3d0
SHA512 8e78a9627bf0e8821d3ab5b00c889a13cfc810ed878a4c003e20b7f9603ccdbb92f148d721f5274b544b4c804e9c1543a5ff1fa5e58ffcbdfe7b70031a9602b0
TLSH
T167C0C0F303F75CF5C1C333F391304000CB3D120D0820014E111A40AC040210A60A5203
MD5 SHA1 SHA512 TLSH

Submit Download

is-2XRVYZJ6X3.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-2XRVYZJ6X3.tmp
Size 233B
SHA256 96248a359822f167a7195dd2e4c93099701c65c93d470157d1ebab9164b086f3
MD5 f333da6c1ebe712dea399127579ebed6
SHA1 372d0449bcc40a94b168cfbf4e13c9dd21f10028
SHA512 df130cbb9a12c17a0f02f3921e4ee5dc7a58db8f693ca31bdfddc48d73105d6f6e1f2ca44245c3c2190ee169cd346b50daec1f321c8462756a5fa1fcf69f74cf
TLSH
T1C5D022BA6386BE6287F852B2D72B708D95AA1C8A1909152BE064F4385570F2E4240423
MD5 SHA1 SHA512 TLSH

Submit Download

is-3PFP4GK48O.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-3PFP4GK48O.tmp
Size 92B
SHA256 4a812392a115a37694707507b84dc3c789fb3880c298cce2a7d31f1d837f601f
MD5 c710613ae2b8f9e620c1663ebb8a8de5
SHA1 fce48edc3b6183fedf5fc3ff29c68c7afcaea290
SHA512 c35dc15a92d3df91ba6b0a2c1458b5841f4df5dcf8706566ebd7e72e609b96e7f09c8141cd099a805234318d127e147c21cb58601781b151f6bbdf61a44ab67a
TLSH
T108B012EB56400E28C0A2013B673A8040C4B072078A310104090584305C125440544352
MD5 SHA1 SHA512 TLSH

Submit Download

is-49SWAFEWW1.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-49SWAFEWW1.tmp
Size 875B
SHA256 6001207502a85ce95a405c9100e575994dab92e04fd28c1c66eefc69c52dc3ad
MD5 775918baa819c1f84b2d51392985de66
SHA1 1dc21dc416d21177ccd58bdbf93596cb5ecc997a
SHA512 98d4cabd4361dc4e2226e0a2911c918a52e51cd8ce67348d0996dac0607922776b0fc72d6a527e6d46f8c12e71c606d6fa4634db9bbd18cfcc3a4a26d317f42f
TLSH
T1B5114652DA5F1477A9B0300895DD01D0DA611E4035693AF7858A7EE94036ED71C9C3A7
MD5 SHA1 SHA512 TLSH

Submit Download

is-52S9P9VKR5.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-52S9P9VKR5.tmp
Size 1KB
SHA256 04ef55069cbc71bcafcf10807da3e0fbf7db7c205bd6dd88156b30ee0c6f1af1
MD5 8cb137e930af899627685ae56ab5f4b9
SHA1 26c7f6281169c82eb81e5790b83caa137d7d18b3
SHA512 4df38645941853a3ac71e3166fdaa1459da3b7174fb55ed9d8e39b2f4ea9ad50baf0aca9f660f6a262d85858295ef5a72f246d9da382b34fcf5826fa2944eba6
TLSH
T16A2184E28368190883B71239D18102A904416E2936A772AB50B3F87D5F33209D5D8B8A
MD5 SHA1 SHA512 TLSH

Submit Download

is-5YT5KHGYED.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-5YT5KHGYED.tmp
Size 972B
SHA256 d23404eb8e4bd8c8416449e1d07697b3bdf3ec7be58308f7ef92ec59fc6270df
MD5 8d5f1f321548527d2fd80f78281a99aa
SHA1 e75acab51766389553caa8a06bc7784cb4caf77d
SHA512 87989bf2d9aac185be9da491140f8974462116d58f78235b6b1f70c504d8d5ac4d73a2eaedb36944434c4c7a7f3b51dca5f0aaaaa9f842462da72eaac7e16ec4
TLSH
T19811449E7178187529553B6FE6207BD48FD601F804BE437BD68B4132941791F104D343
MD5 SHA1 SHA512 TLSH

Submit Download

is-63MKEV26IM.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-63MKEV26IM.tmp
Size 310B
SHA256 4a094c584b7e0dc23291d778861ead37d087ef0e43574e8d43bae27239648298
MD5 363b737d758196d26bc9a43d3230b36d
SHA1 2d82a3dc128168bae89f1ebec712739df0299260
SHA512 c1c9566e0692733b0d24af5420edebd965fed9959370b331615384e7b961ad7076d914169054d857ebf7b3b0f484d1bcf5400c3f98637afbfa7189fb40123bea
TLSH
T176E02BC1F2404C6AE44D713AC56ED0C1FC614E39DD1F4068963939AD4B35B09C248999
MD5 SHA1 SHA512 TLSH

Submit Download

is-6AEHI89CVW.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-6AEHI89CVW.tmp
Size 170B
SHA256 c4aad4b26d1304bc4a920fad31fed7b549951855852034ce126a38194e92af56
MD5 db039c9b392c68e2a383c39cd71bc2d2
SHA1 229d93a27de177038d1ed873e8c97ce70de98b33
SHA512 136b2ffd660a7ef1ca0cb849d772f7cc144d71fdab080941247570f94463d908eb040c1044569f74224929754ff3f24cf3794cf553e74afdca92f9e67dd67120
TLSH
T106C02BD376260C3985DC2231C24990D0D8663E083B0003294004753C613150941C9E47
MD5 SHA1 SHA512 TLSH

Submit Download

is-89JA6GAI24.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-89JA6GAI24.tmp
Size 977B
SHA256 a547ed23a7f28777996b58b610ed9ac1c0500042e0d70682f893a8508709717d
MD5 02fda16613d36a4a6ebaf6f029d83962
SHA1 a16b730c5d84eefe94ccf2abf4467f6f74c84198
SHA512 c97b8c93bd1aac3b502d09f7bf4c38e777662d32ff15b98bf414ea023293644ce4ba8f575db9e53640d9ae9242f254d196a9a3809ebf768eb9c2dd103a31b754
TLSH
T19211B7460912D8F1D72304268F28269087DDDD9808D34263146A723C2FB4C343F338C1
MD5 SHA1 SHA512 TLSH

Submit Download

is-8W200TTY16.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-8W200TTY16.tmp
Size 268B
SHA256 041eafd27095db66f2dcd137b39c381394b7a9f44f34409d83ab9e8e50c160b9
MD5 fe6aac7f0a6feda12771c9bf58c28ea9
SHA1 8a8814c70af3e8d65b515364baef7aa5ef210271
SHA512 f4dfbd1b5471417919dc7d68fa3c3de7c9f1dc3e38a0197aa5b4a2ea622afcb4e07802d894a2e39c736e2671f169c27ea38f09685ecbd050caf27dce1db54f59
TLSH
T12DD02B57F160B8D4C69A432345A86893A615420C220659454056A4B4E94312AA5C9AA1
MD5 SHA1 SHA512 TLSH

Submit Download

is-8X3ANFAZBE.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-8X3ANFAZBE.tmp
Size 1KB
SHA256 9bde42438a2f0178ba8c90156c738a4a5fb80578ca70ff6e82810d57d74e7a3e
MD5 b7fecb64028f80840fc0b55382adad82
SHA1 204007dbbacf7c2ea154342862ef434300384e76
SHA512 904119c9a72d36ba7f5db26e24c5bacc6f3ce458fab5886c25ad16e6d99719c35fa423eda0d59b829fb9c37acc99f9f29121c4fa019abafdeebef9d054842189
TLSH
T1AB21E9AD46CB0A2EFA42F8EBD29A11C432521DB20C2674E6CB9132E97B32185574F916
MD5 SHA1 SHA512 TLSH

Submit Download

is-92ABQEPAHE.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-92ABQEPAHE.tmp
Size 935B
SHA256 60f757e557455aef99ad54ae55c3e8d18347fdef0bdc5af176055e154e7b8f38
MD5 2f2fb4bb6e72e89435b356a6cf44c81e
SHA1 11f3ee2d3f0cd0dd9002b33399a714d0721abf56
SHA512 ac4bffda40907144446200808994e35c1a8512d95f3c71fc7bf6ccb41853e7dd44f63424ae1fb592a54677fb6bb3e778335541fdc6f0720b0f990cf72af93128
TLSH
T1B91163DB3918BCD685990A2F156A3211917A5E1D2025DB23A15CB8BB0F70F88A08E88A
MD5 SHA1 SHA512 TLSH

Submit Download

is-9VBS4PKVWX.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-9VBS4PKVWX.tmp
Size 3KB
SHA256 6c6b7c12d0a9080109e8cf1e5ba23a535cf195a85a01fe9bb4a1f66cdda9657c
MD5 a0708b620f28a233b4c04fcdd0adb1bf
SHA1 3fddd781bab07ad7bcec7e7692a9f58535983c3b
SHA512 095625a299ddc7c9fda511bf448c3ed4e48a5a4b5542e441a6aefbbca28ae2b5faa67634f6531a7a08cc0d749903f319bb7a9a643abb3379349ccc7bd1a92920
TLSH
T18C814BADB87D31B6F47A6139C2726E7C5067974D0821C85B4C5774C27B07870271A6D6
MD5 SHA1 SHA512 TLSH

Submit Download

is-AQ9AS2ENC8.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-AQ9AS2ENC8.tmp
Size 745B
SHA256 46b24c8416c8b349a455d78475d8bb99ba260fa6ea3b722e15dc312bcd7db53d
MD5 4be333ceb84890cb44c74e109ad45a7c
SHA1 e60b25c24e685d92c5954f9b98fc0a93d8435b95
SHA512 9ccbf59ba616cfcdef923a24b45e3dd64a916142a1d7c6e1ff3b12b0417ff16e651ea75f024c283ceeae74ae5701ead20fddf74b2cf6cc0ca3ba17dda8c6594f
TLSH
T1EF0144C59F310D2ADE23609F55A0002DF4F48D2C0BB4F1328EA8BA6C4C7A110CC92246
MD5 SHA1 SHA512 TLSH

Submit Download

is-B2865Y1RDR.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-B2865Y1RDR.tmp
Size 687B
SHA256 d1424af3aeb805bca2375f3c01c885525be4561065ff1118fd5e3fcde63d2757
MD5 62199edbe5440c2c1095792e71adda22
SHA1 e9312cc29994f648f657a7431bad629dec49a67c
SHA512 c7d8c67a38cca7065d2e60e2c8b908c972bdc1a42997702f8d02a6a76c7a96a7d4b92eabe9fc1b48c743c58a9b0685c5837bd998557d25dc6e0706df70695ad7
TLSH
T1CF016222337D4CCEE3CF89A5406C15258C3B8E321A032215833238EC5D3BB00C1C22A2
MD5 SHA1 SHA512 TLSH

Submit Download

is-B7PMLXF1ZY.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-B7PMLXF1ZY.tmp
Size 683B
SHA256 349cb567bded99187024758d0cb9cda60b55227a4d7fe1763f7f41753f692d7c
MD5 d0e50dd9b89b841d6ef1cd78d2e3d1f6
SHA1 9018ef9ff9e0f1946be96597b5f344715efaa773
SHA512 8d09c2d0f369a673c8d9b7092b46b0ad68320a217fd4936133727331e6125ae0129c4986c3503cccca8246058ff7b07e70cb30456f480c6950490fcaa87f4d0d
TLSH
T1B50162FB16C32956B604D0E19850B80C05397F26BE520DAF5538FD2E8472D0FE782A07
MD5 SHA1 SHA512 TLSH

Submit Download

is-BTD3SLX727.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-BTD3SLX727.tmp
Size 252B
SHA256 da6467096444fe58b05cff749dd89bed45f413fcc15bf9447554fea332fce5ff
MD5 f113da1e692b045076bf439989ad8d20
SHA1 c70fb72b53f8f18b6aacbb236fdba8f7439615c9
SHA512 501756677e72a7b39f54f053b37cccea93bf60a9559da5b62c61d887de52b30303e03bde5b3ceb9523fb35c6e51c3cae62f83a6f359a9332887edce6c72fa260
TLSH
T15ED0A75F2125BCE98E1105330D5822D3FA7D89577005214EC79D9266AE9313970659CB
MD5 SHA1 SHA512 TLSH

Submit Download

is-C70A82LR5V.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-C70A82LR5V.tmp
Size 257B
SHA256 507fd11cc0ef9c76294413ec13a078a70771235a6379a8e285a8b27b7a7776d7
MD5 f48080bb65c527b3f6bf113461bdc2fc
SHA1 51844b7d70019fd2522bdf9de305c36ad5823bfc
SHA512 a4891e0a5baf2c62da271e743ba320874c50f8eea65813ee1bd95d24cedde312cda76a709f51e8dc29d6b8ee5c09f485299853262eb821a75fb907262b863f4f
TLSH
T1EED023B1C381CC22C0C3000320424230ED00FE0E7014076850EF3C1C2C382427CCA80E
MD5 SHA1 SHA512 TLSH

Submit Download

is-CVTTKTJ55K.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-CVTTKTJ55K.tmp
Size 83B
SHA256 8285acc7fe450d3a72eed1432566f7aa90af7ee33a154aa7402dc707018979b7
MD5 abd4a5f439d8f789c9f460945c09fefd
SHA1 dad89434297a1fcb7baa221f8c924fe1e0df9cfc
SHA512 d73432e7014978d01ee440de8144ec6d9d62cbc3c8e040de94dc2b7c2aac4c62d5582ac3dea1c1619d7e4bb9582af8a96cdf836aa292149ae3b1bef74f5dfdf0
TLSH
T1D9A012E28F4068A8D09502778526D070C876010100B30008901A8230B540A0010C4302
MD5 SHA1 SHA512 TLSH

Submit Download

is-CXWR6A8JP0.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-CXWR6A8JP0.tmp
Size 167B
SHA256 6d584df93b6785277a090e3c2d46ebba057d262253dfcebbb81585a9f48658c1
MD5 5829742e78fdd6cb8f893903fc814778
SHA1 e2e3a2ebaea56c3664004e7c5758967a04862d36
SHA512 7e4ccedbf24842f9f00123415c16e4858ef70b76783358601e5024d22faabe128ac78b314f9846af8c79818363c2f64ab77902e6ee67e2ea802ff76bfc1e9b72
TLSH
T151C08CCA62B15C698EC8456B938620A49CC40C5D28218A638286767C5DB232AA983783
MD5 SHA1 SHA512 TLSH

Submit Download

is-D533ARGI8E.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-D533ARGI8E.tmp
Size 243B
SHA256 2caa3a058dce9e2921d9b91f604319b111eb14032761032f683f112c816ead6a
MD5 083719bbf5132d41b380ccc1427d4f1b
SHA1 8d952c454d47aeb6511f876cae1edd0caa56f8e1
SHA512 86184671965569c777d69f1844d4f972484fc09af5e22bc70ef2b2770fe7066da84b3dfe25e5584a61fcd8162735b14a44db516b8c2d8a966c81c9d550ad03db
TLSH
T19FD022EAABA1CCAECA51403203547059E911BCC8B268AA07C397786999B8C0C81A820F
MD5 SHA1 SHA512 TLSH

Submit Download

is-FCVGI9IKJC.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-FCVGI9IKJC.tmp
Size 442B
SHA256 e04fbcc696a2ea2a326a1b7bc57f25a0e1b33091e588889da5a9d7015c595022
MD5 34b81abeeef2a5fcceb972f1e3cf2997
SHA1 e262ba643aace4b66c93842989135209a7b8df85
SHA512 e575c06e29890e63c6898b31754b419eeb73ff87d7d71d0787a8fcc3d2a30c82cdd83eb94139d9f0f25d9001da9e030d7c06ba1ea2392c191d6cd9e2112fe4f7
TLSH
T1E3F0ABDA6B9F28AA8409581A10A891228C2C1C00BC20FFCB6789B46C1570E9682C410B
MD5 SHA1 SHA512 TLSH

Submit Download

is-FKKV2PE1AB.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-FKKV2PE1AB.tmp
Size 1KB
SHA256 fc52e4eea80062b28175e6df1cebb5abe679e26035efc515184074593309bed9
MD5 bf8becffbf3ed9ad459edd457f02dc90
SHA1 6775b3079aec4db96472575283dc62f748af2ed2
SHA512 a73c232408ed82bb14e232d47abef0fd92a87e6853a48101ea8aa5364a72abde1e098fdf9ed6401af0eb0a9a12ecb7c772c5ac13fe6ab4362168daa05630bc8b
TLSH
T1B631E6E066A4C1F965B4B3A60544307A8833DE8A35A3B72BA85A358837BC4F483C469D
MD5 SHA1 SHA512 TLSH

Submit Download

is-G3EK8DB29J.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-G3EK8DB29J.tmp
Size 101B
SHA256 02530ad19a6a050f2813c5d801a9fe75c9b0fbf4508491c6abb1bbdb72b28734
MD5 27d3ae547e7e8ff9c88e8ca58a201f25
SHA1 17a828d4ec352b0ae8b6f9aa7623baaa4a920c74
SHA512 3f55067d9369c367a0da811f61369ab11e05026258fd80a546365b7cac776869e0bf222b79b75fcc7b0deb881e340271e084bd675efb51dd1473a510cf288dff
TLSH
T139B012D793754C3CC33481228B1C8113CB56073CE019415306499C650AB1216C3D8786
MD5 SHA1 SHA512 TLSH

Submit Download

is-GT9ZAL0W3I.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-GT9ZAL0W3I.tmp
Size 305B
SHA256 7ab52e7b2461658cff68eaf42c40b5a405bf7ed84ce0e89ab18936410aa066f8
MD5 765811d55891881ae1c985f918d00176
SHA1 1c1fb2dbd0424fe468bbb52b325fe45bee2b31c7
SHA512 01228184378b0975e7462508f50b625a837bc91ae316ab2f078db313f6818e3bb18bec999280a500db080171d023071b5f2b60eef413c872f22cc68f40e0a7e2
TLSH
T1D3E07D8378412CF5E9619F97982455479B15C424AF424301409C0560CDB73B368D0F61
MD5 SHA1 SHA512 TLSH

Submit Download

is-H9UZWN4U44.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-H9UZWN4U44.tmp
Size 356B
SHA256 9b2993a8b96673393b17ec53d71cb5862eb2a44ba9fd3c5f465a0bf4638a4b9d
MD5 5269f2d8235c8258090fb7a02670a2e6
SHA1 9f1a544711d0d0d2ed768aec311d0fef1585646e
SHA512 5dd304cd4f9e8b410228c36b2782265768b9b3e64ffec9ace67de5f11447a276e4a3d1c3d6942064eb1730ea7557a5e727eb41910f33f47541661546aaaa7902
TLSH
T138E0C6E2A6897C2A8B3F460A12062218C09DCE482831022BE229FC7B03F0A122C804A2
MD5 SHA1 SHA512 TLSH

Submit Download

is-HZDK2P7F7D.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-HZDK2P7F7D.tmp
Size 196B
SHA256 7f12b18d6b37e61a32acb287db7d3ae27664a3512cf1061c392e7ee8c598e872
MD5 24f6c1e06c39f15399cf661befa948bf
SHA1 a75e0e8f35c2fad064c2b5cf8712ee2be0232cfc
SHA512 d5108d8dba914a1a9f2cf64d523dd6c2dbe73ec7152899e80960a550c5c8b838ca9da9c67165a9c78120343ecd0f1ca0a664e11b873d2a190bb97b3ab4ca8b7d
TLSH
T15CD012E3F05C0C959A49237B9A00A4C0AE66DA1A0253A94610CB606EF9D6145C2D1F8A
MD5 SHA1 SHA512 TLSH

Submit Download

is-IY2M3YSX4N.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-IY2M3YSX4N.tmp
Size 489B
SHA256 815dca49e52a5b5d75379f0896f6340e90b3b4fcb36a051105f27662f8acd0ed
MD5 623e3d6991c74312b29929742eaa8d48
SHA1 c222537a0819291ec51be1de21881e32838b63c8
SHA512 edf7e320ba3d08ee1fea86e2658ab73d3cc493392f174f848c86324ec3f13dc89c582cf97f233b5462b92348852b11741db914e783803eff15cb91db0a669bd9
TLSH
T1FDF068E3693EB03B4871C7B9922B446249925F065A011007B710392DDD3214EA0D2113
MD5 SHA1 SHA512 TLSH

Submit Download

is-J0GDKBJSRZ.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-J0GDKBJSRZ.tmp
Size 177B
SHA256 3c5fafbc237f9e5f72829cc66a37dc81bcb531b9f3aeaee91a55469fd7de5073
MD5 80206c291ecad6acd0bdfdb03112a56e
SHA1 982f8e51757d0668cfb1448fe29c186f0cb35fe6
SHA512 ab17d0b68be13a6c59b340fe730e20c5c23209449c7975e83ee0c1018e3adb7c71ab2fd5bf844f7aa7bc52dabca997f509b24d65cb09ac59868c294389dfe4d1
TLSH
T11BC08CCAE35DA9709EA201BF166C24EDBE225C0B6F0A0607A052F47D1736A4A21D030F
MD5 SHA1 SHA512 TLSH

Submit Download

is-KEGPXDL2KO.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-KEGPXDL2KO.tmp
Size 337B
SHA256 dbbd1cfbfd6b58d2f6e3b91d388844599b003198cb064d17c00f5ba321dffb75
MD5 5ae4b54c81edcf9ce11c029d706da649
SHA1 e048cd2448bbdeae5f05cf2d3f8cf69acdaa6217
SHA512 567866a01f8bfb9f2e037a0a356c49daa940464483193ccb37944f2a3a6d752b1c9142b55d1dd7477e4a14185ee60d89f91f7f87df3013ed9d8ab57d24ebb7e4
TLSH
T135E07DF89391BFFA85413D25E5151B00ED380F51E047EB50C91DBBBE9D324D9808F051
MD5 SHA1 SHA512 TLSH

Submit Download

is-KUPRGMCXN4.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-KUPRGMCXN4.tmp
Size 7KB
SHA256 26c58314abbab9420da568696af5ff36287b0e569eb15d2c35904a1c7d9a32d8
MD5 c5ea165142ce0e6d621a65dee6b08c0a
SHA1 5267f9219a9b0c537803efd817157a0bd8796ef2
SHA512 52e82586e0a60f9dc6cf3f978d5766322f03ad560a54a8a00c02c7f14eda54175bf9dc414a0f871d38b6b49b58c43578da32385f4314af5d62b383588e3d580e
SSDEEP 192:RVxkzDO0r68VjwJfcG54vKG9nJ0FoD0WPHMfy:RjkzysDVjAfcGWvKG9nJ0FoI+sq
TLSH
T1CCF18DDFB115E1EC8124F672C56584A1AA0433A4AC81660A3EAD4C2FE79FF03B9494D1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is-L035R5YUHX.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-L035R5YUHX.tmp
Size 184B
SHA256 b74cf0894a7b42aae0630586e321e3cea282724a16e1ed40322cb39014c0041f
MD5 908266ce67b93472e143907653199c82
SHA1 bba4cf1937a44620899437018fd8b5d6409efd05
SHA512 7e33945d29a4f6e717e22c5eb32ab8ff9ad7900842bb08112f5ae2212fe8f01be38964cf60e1d5fa643bf998c46d478038f88e1c62c62b64c1f8bfdbd994bd34
TLSH
T170C080C7F7208DF4D598D53DA51C710949161914D936026F15E5D81D4513270855D545
MD5 SHA1 SHA512 TLSH

Submit Download

is-L3W952WWAG.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-L3W952WWAG.tmp
Size 299B
SHA256 f401fad41577c884f319583c2da31c804e7915c8d9199c5906895aa8ed78608b
MD5 a9a2b13696440cd659803b8eb63a7b13
SHA1 5961794c28b0276aba8c65bc2af4636708735569
SHA512 ec482c47f5c34c88b6594a8ab5a10898a89a048849491df0ec4533b5118049e8e86ba2d0d618f806e35b74620ca9ef08ef6bd8f2e6d75220663ce19ccbb6a788
TLSH
T1EAE02BEE3B4259649550496A86282894DD067F1410421C96181A7253163555141C8E9F
MD5 SHA1 SHA512 TLSH

Submit Download

is-M49SDH3T3E.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-M49SDH3T3E.tmp
Size 1KB
SHA256 4c9186092eabc6788e704b074423e009cd3b80a8d5de0bb1ada6f7599f91bb9c
MD5 16464a005372e7a0092f1721f96a3fb0
SHA1 900e4a0b3744bd390f89592e236bc7e2358b16d1
SHA512 1f854ecd6dc27978a54b4ab507c662eea0c2ad4209306b0c568b4ee8a4b2c2d37d5304eb91f180eff43db9d1ba9e1310c72a76c41312fd15de0dd3fede20b67a
TLSH
T1E0218683B5705D2B5971FE17D4284544AED18EAC3F6400EAD1B6312E3679941C35B33D
MD5 SHA1 SHA512 TLSH

Submit Download

is-MM7WLQZTH1.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-MM7WLQZTH1.tmp
Size 14KB
SHA256 1cab68c7c8cf21d2f7a721eaf3e254899685deecbc2b11c2198183c2f19f3602
MD5 cf7bd7c269609cda194414a0b376a501
SHA1 3cab820a5abc18a8d40272e77e21ddf93269d79e
SHA512 75920d6788483e6377373e7f036185f274d1c37a83481d7ed4b5fcec23cd30b3582b010d7b966f5d362fcef87acd26771e1d866d64f028920a4f2cbd7a92783c
SSDEEP 384:OtdJX4A/e9dIj6dis1sEAX71Byim9FgPJ:OtdJX4A/mw6ke2tm7gPJ
TLSH
T1FF62CF20B743D694992F1AB7FF23D87001F680AD675B093A435323371ACF9188894B4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is-NDENGGU7HV.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-NDENGGU7HV.tmp
Size 645B
SHA256 2f16442c308ee0b60b3cfebc808446f90c72b263dfcfb20e35d30e59be6d8944
MD5 3e0fd32cd5ccebc3347209d828425a91
SHA1 85baa11f8b2e62f0bdc6a4f37beaf239fed6a354
SHA512 f3884acbcdbe4631a21d872928923586bc01ba2877de6fa8425c9adbe0698f1c6410a26b52b2aee406d2386837f85fb3175736b49b6bd106035b5a22ece58dfd
TLSH
T1C3F062C95330F81E07C9A32DEA5ED8A9EE32091911C1042890C8D1FF30EFD4C90AF6C6
MD5 SHA1 SHA512 TLSH

Submit Download

is-NJ6QD7TSIF.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-NJ6QD7TSIF.tmp
Size 375B
SHA256 b322d405e63b3f175706528bd45cb8a18aa949ce1ea9e726c62bf59f3f48437f
MD5 899364fa2fe93a6c5868e7cd975def9a
SHA1 977024de70fb9ea1bdb67e7f7b4f948876af5959
SHA512 8217c5bf65aa9ce67fa2a2828d94b9517925c0f78867e425d141e50301d630191c7df20bf2acd077602881858486b75973988d5e1eb5ec2fd5093ad3aede0210
TLSH
T134E0619921568D66D78110EFE73241ECC41E49D47C50CB08940D859BFF1E615C24A765
MD5 SHA1 SHA512 TLSH

Submit Download

is-NWOL87BFPI.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-NWOL87BFPI.tmp
Size 178B
SHA256 fa10cbbe117195afa058ae3807b83b4eddcec767176b31032aca213db862503a
MD5 4c6629329da6af461332962a283b05b1
SHA1 0e6b097673a480e00055457401c56d887b0f8869
SHA512 fbf9db93bf7c200e1c21767b1853b9cf9bc4e215a23cbe843f0cd41690004fdaccb3715ed55ccc590372b64e682b36fa2760ebf5a2296b2467ae6f04b2a81842
TLSH
T16AC080CE61521D254E651066450548D5F4590D055B4016534156F47C6778014D8EC393
MD5 SHA1 SHA512 TLSH

Submit Download

is-O7660YHRKE.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-O7660YHRKE.tmp
Size 211B
SHA256 104296debdcfc2c847b0aaecc9902e6d3046d8151bdf491248afb1d804036d64
MD5 d5d6e5244c5b024e91eac6fc1b93ab8f
SHA1 b0d405d7362deef6b5f1a90b06950c21840789f4
SHA512 e73b99bd2cb3e246728e7df6a41a0f4000dc43f1a3b3dcf2cb5f4e5f9c9d650a8376d54c9b987d0a70319748f2bfca979a91f113ab34b8ce81db9cdb525832b0
TLSH
T178D022E3D2902D2F8D8500E902948005C8224C1A6E2242A2B402F83C2B7288180D4382
MD5 SHA1 SHA512 TLSH

Submit Download

is-OP18X8BC5X.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-OP18X8BC5X.tmp
Size 340B
SHA256 ad869a95540d941ba6acf5329fb949d332bc07a24abbb1e644dcf8149735000f
MD5 805b4c527b2a5d811cc04f73d198d5e7
SHA1 c58d533258b479371e652a7cb21a0f3220784478
SHA512 d8e0c10f91b55929e8bd14fbb4fd7277cfeacbf96083e16b8478cbfac0ed0e10ca4a6ee9850db90817526c4f3e98b148ab9e1413767d96aa3410475c0e477588
TLSH
T1F8E07DDFD3104CCDC6F26DAF26D8549382B2446900560242A4EEC972AF53727B0F3F19
MD5 SHA1 SHA512 TLSH

Submit Download

is-ORQDR0XHYM.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-ORQDR0XHYM.tmp
Size 179B
SHA256 de44725384503c17a52d22b396d5a49157c32e7255f9ce77cf20c92ea8deb893
MD5 02c6ec48c19086dbd2cdeecec0e16670
SHA1 1939f5d0e029e7b48bdb6b892e87f0d5b97a99e0
SHA512 0b0475f51e12622a93d7727c179b243a6a3ab7b83b17da84a2d7a33ce4ecfae28489c7c93c7fbb04acf6b041dab48b74eb22b34fd29239d2cb4098a5652f7d0d
TLSH
T122C080CAF3591D70D55502AF511574857D311C3B2F4752036441B52C4B3598E50D0717
MD5 SHA1 SHA512 TLSH

Submit Download

is-OVFJX3RODR.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-OVFJX3RODR.tmp
Size 232B
SHA256 5485c7bd8be92e5a94e08bb94090fd6128e063114af8679482154398ea4b8c8c
MD5 dfb7de9e68877e7550736824d07a075f
SHA1 7dbee2244939bb679b3f8f9a7eed4a23c2e51e9a
SHA512 f800f36dc52eff962336939f8b506c22cb7049fa3414cf15f9df955c304759676477a6ab5ad06f0066d9bfea993db2d4f8f1d26196a3a13a3106a9126ca21bd9
TLSH
T169D02283B620BEB2A0104023963088F22A2BDDA83506020BC42079EC09381054AA06D6
MD5 SHA1 SHA512 TLSH

Submit Download

is-OXHQW2N1NF.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-OXHQW2N1NF.tmp
Size 118B
SHA256 33f189b55282b1a6d904fd2424cdc051fbd3af17b942899942fc6daf46280146
MD5 ed93c06f00fc6df9f9a60e049ee927df
SHA1 35443a7419b91d784a93e7e89b686a4d6577dffd
SHA512 d2b1cd6c0f6f416dd96ee9719357d088355bd9cfdb328ebc1b96d6273cfe4652ccc37e8f66d3b654f3be4b168e881b7b2f6fd8260ca2a115fb15090af2bd8723
TLSH
T16AB09BC5D15159FCCD41317B94491220D9356D2539594FD9551A553714D5045F14130D
MD5 SHA1 SHA512 TLSH

Submit Download

is-OZSNV11NXB.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-OZSNV11NXB.tmp
Size 125B
SHA256 0941ec5da06f1cafe91004c1b035997609ab1eef1f39a9ac5f0bb558dd8f93eb
MD5 a189060065cfef46d1bc5a7150b390e5
SHA1 73f7375aa440ceec13bb16ee7416f1033e6e4400
SHA512 393cf37bbb82c5b3b5e91f989ef84bab4ca65c907d5bf4b242f0e75a056677fb5cdd55695881f70730d950adac90712e9b6074ba3824f9a42d0aca0a00840c0e
TLSH
T1F4B02BD22230287DCF4D0333490B80008D73323D454101018D05886F251DB0500DCD32
MD5 SHA1 SHA512 TLSH

Submit Download

is-PJ6235WJH7.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-PJ6235WJH7.tmp
Size 169B
SHA256 f1437c4bd861b0e72dbc868f2beddabcbba7390dfa0ef615ffc65a6d1a058809
MD5 4bd9bc5ace6d6d14a388444be67ef00c
SHA1 55e35a2d3cf99d2f18cd19af4bcb4520b7672ba9
SHA512 d29e24d456b9eb0f97eed9329693ad085851a5f3f3f387d9714a21a9ce06e949784a0bbc0c8cd7ade81dfed6f6a426878a558eb1365466c725a51d2ed0dec313
TLSH
T145C08CE333192CF956986339E90C44E2EE22831815818648001E66186AA381658C4F4B
MD5 SHA1 SHA512 TLSH

Submit Download

is-Q6Q7IA1B98.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-Q6Q7IA1B98.tmp
Size 1KB
SHA256 5295fc8dca411d6e83b5049c62b130ecf927e640ed74ff5a57823cc0119259cd
MD5 905066f32485a8594db650784ad3e706
SHA1 bf0bbb10e6a87b91cc788a5fa11e59bb80fbc23c
SHA512 2f223b8581e0dc735292a65934d1d3964f4b25be705ba95927a3d81767ee846a46b9809f94ba96735ae199dcb7d598956fb978ab9600abb90ded24b8dc8055a8
TLSH
T18B21E9C2DB183E36E8B1AA2F57060C907F44DDF820623A0913A07DAA6F3031169CB29D
MD5 SHA1 SHA512 TLSH

Submit Download

is-QHW7TK9O9K.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-QHW7TK9O9K.tmp
Size 230B
SHA256 c59e399026af5fc888be26cd766638f6dddd5b79dcccb3c7805a1e38ff0fccf2
MD5 084ff8830e7e75b30518d14b9794ae61
SHA1 a4aee46d51877c1db78307a398f62a14ee6c6c56
SHA512 15d45d46eb2f2475313a406c5c44f2eb7caf057a3e7ea49029369ddd42d0fa49dc51191ba304c4bc592e5ed399be8903d78a27c5ca64913c651f3db95ca5ac6d
TLSH
T1EDD022E0E1408D31C9DB612F02FDA529986B0C1A6E31806A1F85F83D0B331864AED611
MD5 SHA1 SHA512 TLSH

Submit Download

is-QWTOGERYR1.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-QWTOGERYR1.tmp
Size 304B
SHA256 40b65d22a1cb95bd572c064bb1456daa4c471b28e2a2833922b13bc230e840e7
MD5 aff77aaedca1f85aea34ec1d026656ec
SHA1 9d46b29e6e3729eea96c37f43545d2c0fc6945fb
SHA512 4425c2e519402955620870806086f2bf7efb80311e1b5f7783efe11c5a7713e48791994aa211e66931dd53f42ed439f04928e7fa315eb214275944caf43e687a
TLSH
T1D2E0C2B363004EFECC7965A65829A0EB6E33D95D4011AAA5118548705B3367B7CC4989
MD5 SHA1 SHA512 TLSH

Submit Download

is-RPBFFXNDHY.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-RPBFFXNDHY.tmp
Size 154B
SHA256 7b63fbe111bc307f4d74f119c26a580171aa5638cb956b82d038e625feda0202
MD5 f918ad65c2a3514c8b1c62b32d613277
SHA1 01d4e4216bd6d204aed90f07c2541e49292e55fc
SHA512 bcef9fa0dbbc31df9a475e8af191c888c015f7abc91892ca790b07b8a456d7cbc63be67a0283c39f51585992e7b26293e2789350b401304fd7d50f7726cd686c
TLSH
T179C09BDAF7990E634E9D91FB4190955158554F0A1B2244074504F57C3E35196DD94913
MD5 SHA1 SHA512 TLSH

Submit Download

is-RX7U6SM1IM.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-RX7U6SM1IM.tmp
Size 343B
SHA256 5119e18dc701b43f79e06af81583665d8bc1311fbe56f8d5950cc9a17fe9a4bc
MD5 877535812e1d5f060111725fc16b4405
SHA1 0f99848869fe8d78a78488d41282a9c20aeb119b
SHA512 b2afd35125cd3fa28f4947f5280c84d09075106499ee8c4fe2a58c568d1361dde6546ada8cf6ff1dfc0eace77d28d8b5a1de551abce5a931b311872f441218e0
TLSH
T19AE097C267A00490C4A30033C4720301E8325C2B2AA22B06030DB8AE3EBA50AB3C06A3
MD5 SHA1 SHA512 TLSH

Submit Download

is-SEE60CMSN8.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-SEE60CMSN8.tmp
Size 164B
SHA256 57c6e4d603c24c9f8fe0a8745b62bc7b6a583599bf87a8a7825b4c5dd52b0e79
MD5 5b0491fa50f76c18dc91843db510be67
SHA1 ef5def8b74c4b2966e3afb181d6f2107ad810f10
SHA512 b59a0ca4498c8697b73fa1385231495735368e5875ac6e7665d282fcaf284eea8ea73c17877f8eea156adcc2a9579f13fc8c5fc42e253627663899be35573605
TLSH
T18AC08C9B93BE89E9CD0EA2A10120C493C8EEC41052568A058786FE7D60CA0149052756
MD5 SHA1 SHA512 TLSH

Submit Download

is-SGESSCJ3J2.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-SGESSCJ3J2.tmp
Size 305B
SHA256 2a9ce212f759efaee2773d7f22e13dd91c5da7dd0fddba2882b10e7d03bd4a5c
MD5 89fae1f8cdabedcdff70cbc2f53c8e55
SHA1 c21ab47a7f3598ed3f862e9d47206309838ae821
SHA512 796ff5d3180dec50ec1722320334bea313eee2245a594239f348ae66721b7a1ac60d1502407e586a5f654b12b70b15c613f8a18c2dae2061b32edc11eef1bf9c
TLSH
T1BDE02BD9EED1682DE316DE33C754207986950F5D18F615065743B3AE2834940C7F920E
MD5 SHA1 SHA512 TLSH

Submit Download

is-SHRRO9C0IT.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-SHRRO9C0IT.tmp
Size 211B
SHA256 d712f165711bf5e0f265607705a4e83452c8fcbc59e106238663664f791f28e5
MD5 26568e7446e134efd965b6b5aa29c8d9
SHA1 12eb2e9d03ea621dec674ba3c6bfbfc80656dbeb
SHA512 29d11aa4bdf62dd609b7753a91503d50d589ca6c12761ad4d033f55d746a0f27b582a0737c319f0f5cfc1e2a213084195f81776ca4e1c91546f1b73dfe1741e5
TLSH
T1B3D012F293403C1E89D906B5529C4545C86A4E1D9E3252626418B42C7A3698481F8762
MD5 SHA1 SHA512 TLSH

Submit Download

is-SI9LZZJKIJ.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-SI9LZZJKIJ.tmp
Size 493B
SHA256 4d5d16a9ef3db072309d531e11057076bfa7b03f4f47f6bd8a7d89d1fe0bd39b
MD5 9848e43810261e6570a4cf83c3752b4c
SHA1 6c228608e331b9fa2cf9a44e74c7507c19af7d63
SHA512 4fa4df1cb5e08f14d1e990280e834fface6270ed637ce1cdb1799f1e568e78be9aa7f440af1d2002c5f50e2f22a96199e1fea6d957d996d09cd05e0b2911801f
TLSH
T1BFF0A357321FEC47C904D6E888A84196EA2A7D97354A73B72A267CDC093EFD8C5C9143
MD5 SHA1 SHA512 TLSH

Submit Download

is-SP8LIU7WNQ.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-SP8LIU7WNQ.tmp
Size 129B
SHA256 8fb94be57391e3b4247b3ea1fa38be1a36adb36b3ae4d056f84c441afd801968
MD5 c173909fba11ae2e5b1a71e3dffacbeb
SHA1 172173d4565c02deea8a41ad6f9d0952aee3a121
SHA512 888c7f23100f719860308fe84ace1bf4b3789e2aba29b0aff9fa53a00a13e064a4c43d3418e15859d36b11607b965d3a5f918b0e9f8b2e144a5de85cada306da
TLSH
T1FAB02B8183414C39C3BD103280214037EC62331109F98FC4001AE0F74009940B390261
MD5 SHA1 SHA512 TLSH

Submit Download

is-TQ15MYF71J.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-TQ15MYF71J.tmp
Size 130B
SHA256 dc8861aaef091c7030bb95734be7ca69b41f64440368e823ee02df899cfb452d
MD5 b41939a29e460ede353a9a061f808b16
SHA1 b692d6b96254eeedea1d9cf1e0303ffa51e0a3ef
SHA512 fb26f4f7337373dd3b50f850fe31db9bffbc4bf4d5c4b55f9775d7437c327d2fc1928f55dfca5d97352d011a480dd58701050571f1efafb6cd16e1de96a024e4
TLSH
T1AEC02BC0AA84DA39C3CE0A2B42075834CC562398158A044D24167E1402402004284805
MD5 SHA1 SHA512 TLSH

Submit Download

is-TQORQG0J7F.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-TQORQG0J7F.tmp
Size 177B
SHA256 340dfb8f5d90ee5d986eb4b3570a2b3481ca50048a1a5eb38144e13a598d9bc9
MD5 7a6d8bc2b7b89f67d0071fd478f03c56
SHA1 debb609ccbf690c74690b13c424530b5fb6e1293
SHA512 08939949b87639243e0dff61be03fedb314b76429c93248face3d8d159c3ba925b39405bfb88a70edec038312d0773cf8b770f9aab410df7b169be8ed8d52378
TLSH
T176C08CA763A09E32DE45A8F7C34A184584395D10ABA2029F8068B46F1A34192DA8AA63
MD5 SHA1 SHA512 TLSH

Submit Download

is-U1JKD1NO60.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-U1JKD1NO60.tmp
Size 210B
SHA256 5f9c939df7ad5611b026d2e189a32540ce738d1a75a1f690299efe4303e2d841
MD5 6efe9a1f08b4bebd747b3a244ff9ab67
SHA1 9e9f2db869dd396d4e7f9244e4da8f44c5c45538
SHA512 2f446b0da9a2d4e381e75b224d32e85260400a840b9be3c5364c18f3c542b6e91413c03dfe991b314ea72ae04eec04536e563181fa15e0964c172651bff62f64
TLSH
T161D012F5E209DEAF858B0667466C850DCC014D2C16074156A506722D853140E9192689
MD5 SHA1 SHA512 TLSH

Submit Download

is-UFPQ2YD55A.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-UFPQ2YD55A.tmp
Size 118B
SHA256 7109a067ad00c3cdd31365c76ea8e24264910fe9b1350a292fc00dd7d2b97e5b
MD5 199bb6520ab013968e74e85504c8544c
SHA1 b1ebd8627cd955e44261b6f457f0229e17ab4579
SHA512 543501c68c73ffb92379cf0eaf29e3c9cc9c950bf158a23afd49546df25ba55aa0a85abc4b6b822923bf69558badeb2ac822541530c40829faf7064f29e4eb3d
TLSH
T1F0B09BC16165793DCB16517E9605201485755B6821851768510BF4751417055D094745
MD5 SHA1 SHA512 TLSH

Submit Download

is-UXD2SRUX30.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-UXD2SRUX30.tmp
Size 358B
SHA256 dd116ebe0561a5be10b5270747d45ba4533fc552eec27a86bd3d039bfec73e89
MD5 b64f45f96a0e5f61f65a98b689f13435
SHA1 5e1a5322d9e3244930c6d202570c34ad3ba466ae
SHA512 acca2341913105909ddd8d09b56372230c0ddd45916adad89ca8c77ac50afd292476ed911ea4e92f4733ed4eb44120628694b5939f565d4ab55c279ffbb87b6b
TLSH
T1F4E0C057EA480CC9C4202A732930849587F3D0146D6C9609A2C98754C3E7723CAC4F25
MD5 SHA1 SHA512 TLSH

Submit Download

is-V9RRH2BBDO.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-V9RRH2BBDO.tmp
Size 207B
SHA256 f0174a4122228520b92636fdff14d898ebbcb84db1b5426b5a547bb62aa86e1e
MD5 d7a1c2898fbc3897c5811aca5e06ef8a
SHA1 81e378b6733cc91deec6eb05a812ae2f7733c945
SHA512 af4100838b6589d7debb5799cc5c5b3e640510ea1bd202aeb7f554176069e6c1fd6b6477438ddbfd4223050568f131f394b80e16e9634a6259de9986786ffa48
TLSH
T1A6D0C0EDF7251C378D2450738222540CDC200C0E1673407F2120F42CC632D06E0C10A5
MD5 SHA1 SHA512 TLSH

Submit Download

is-VWO82LZ9NH.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-VWO82LZ9NH.tmp
Size 231B
SHA256 ef0d766bdcffd4ba13bbe77dd451ce94e79d38c6b11e6db761aaa352ceae7d36
MD5 47897a077caf764501503095e02e3cac
SHA1 702d7b375d9e858d1b3921991411e45d6f24c722
SHA512 50b6d2b54afe85fc31188e557fb33229593fa62949b0a73f79176b2212de0c0cc87acc497be2ccdfeb7171bcfb40c07060ee7c7fb3d7663f1a1a1a752ffc6df0
TLSH
T1B0D0C0C331420DAA501D003FD1F38440F73E0C5234B1B00347403C380A712040210E83
MD5 SHA1 SHA512 TLSH

Submit Download

is-W40ZMVZHPH.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-W40ZMVZHPH.tmp
Size 150B
SHA256 50e45c5bc1f41a265ccdb7106571d751b4a875577d19c5409009fcdd0e82cfc1
MD5 48ca0e19d6ae84a966cf0a8dd4c1ff47
SHA1 97cfdbdd03481d1b6ae8283a7bdbbdd70d2347f6
SHA512 b60068add983d8a3e259feb0734a0d3060bace984d5693da01d3340c64949b7662956605cee90841cb0438e22bbadb9ee9aa5539d76314946e036fff22eb95c0
TLSH
T1A7C08CE26A8BB4A4A88A022660F64320D066842482D18089A954F1F841877495847A03
MD5 SHA1 SHA512 TLSH

Submit Download

is-W97NXM7DPE.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-W97NXM7DPE.tmp
Size 120B
SHA256 dda8d0d5444670f0a82f7b7aabf1f771d94d0c418f15be75b120137758932c7a
MD5 a9d763e92351af2d6d6fb16b17e36490
SHA1 c45d83865e7c09c8ad6f790fdcb9640eca207a5e
SHA512 563f33bafd2fa7263eba83b6285b84d47255d9e23fd3c41ec9684b64bf820723631ac8f162765ba36e6f393c00aaeb73f3c38406693a19d7ae13630c42cd53ad
TLSH
T193B02B92E0912824C7084133120CD550A8115448448900302700D431221E10C0050F33
MD5 SHA1 SHA512 TLSH

Submit Download

is-W9RJZQG3KR.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-W9RJZQG3KR.tmp
Size 417B
SHA256 239bf3f261e5ee675b27e546fc9dfba9ced5e2e521dc112df22389c1227b8c1a
MD5 552ed8b39261909e31100b27e407f9f7
SHA1 5bd5d63ee401740b4e7074eb3194659d83a3e2b7
SHA512 287aa0ccd3c1769c2ce95dc4ba1ca409a9539748d8f2b918a7c1b2cb8fe39dc06bda9af9501551352bbeb1c217dd892cb0994520dffb1579342e42a7677914bc
TLSH
T13EE0CADF64594C34D445E777B3547D005D54CD1F1453550EE5E57C524B717D8D0C9107
MD5 SHA1 SHA512 TLSH

Submit Download

is-XC2NAVSNQI.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-XC2NAVSNQI.tmp
Size 698B
SHA256 caf54e636473e19db45d86b01fb79142bf28e916030ec3b60272a14643313460
MD5 bac5eff99d83f1b5c73fde4cd05c9db9
SHA1 4824a9748cce1bf329558dc887bac4a509d197b5
SHA512 8c46a4bd86b8f5e8cc4634b6af3d4f81a5dfe7f9462fcaf6aabc818fb085cb3724508d926c84a0243c69af585c1bf9ad95e02c2ed25df38ba2107815467a18d6
TLSH
T1D90123D7505614D907412E6E436C54204DB80E1C7179B2176288F3FC497591C3CEC0AA
MD5 SHA1 SHA512 TLSH

Submit Download

is-XIV7YFO6NK.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-XIV7YFO6NK.tmp
Size 185B
SHA256 30544b5f1ecbc6ff7dca896b1493ee57864d121cce3cf63e274ca0a1ae075c53
MD5 262dd4544982d18fa0c6f2af52faf016
SHA1 fb040e038c4d925aee6d31aa224fe308a34bd0f0
SHA512 d6a0b2b764f02747deb906c385c6807055b1a43c6c055e947791399619064b5c7d8ff7c1b5c698aca7df621407eeded42bd7ecf6a5f3809a2ff65b09d45b9e5d
TLSH
T10DC08CE7B7940C2AD66E0A3787A64481462E7E3608C514BAC08DB0BC563068202822D6
MD5 SHA1 SHA512 TLSH

Submit Download

is-Y4MGY735IJ.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-Y4MGY735IJ.tmp
Size 192B
SHA256 061273a070d1556f8fed37db950b0158f41b7ab66b2fd8f9f2328a9ee84ac9fc
MD5 60fc8ed74f0756392e8a63b6ccee7cd2
SHA1 a5c20be5deebbe5c99894e893edf51faf909182e
SHA512 646b87413132ef7b8187599f4b5b6f676d735b9a40899379d1495e714134c9e01db4788cf6be9b2850d9a9f6174c14c3fae034e9f1b4553311d0d0b63ec24dd2
TLSH
T13BC0C0D3781C3CF28D6B313B83308C4A9C3A0B3D2602000815894CB434C311399D5F4B
MD5 SHA1 SHA512 TLSH

Submit Download

is-Y7XO56XV5F.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-Y7XO56XV5F.tmp
Size 309B
SHA256 56c1447e1b45dc50192644fbc564c99ee8f35cd137211e19f2bd1a9b7b3bc3f3
MD5 bce039b6a93c06526b73dbf04a4d90fc
SHA1 9182dabd4f1738d6461d077ad094756edc810a44
SHA512 ba5a89abc26f5c56f7581ff0d1fbd537d45463f172b19067dfd3c4cd83127e11f765e024f69dcfcef8512c32acc09f5112b843da9c42997efe93e1da011e81a2
TLSH
T1C6E0EBCBF34C9893C80000374C0106A0DEC2AC2C3C6010222321B0AB82B1C51C9861C2
MD5 SHA1 SHA512 TLSH

Submit Download

is-YWM8ODGKE5.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-YWM8ODGKE5.tmp
Size 1KB
SHA256 f38227a12d179e016f9b2696d3dc8ec4c6c96c275cfccbe839dd5ba0c51d9b26
MD5 5eb1ce92eb912af9509c4277272943b5
SHA1 77d4586a33e99ab715a628af2ba6adac2aa7e39d
SHA512 b1865a0eb9fa04138ec132cefc0008f70f5f181c39e4125b694079f23feaee70c92bdc58f9f5d243cba9298785a3bd2eed35638ae4c322b2e1e0303b36b47b7d
TLSH
T1B9210AC634AE983370B15B9EA0CEC196FE862CF3092405A483DD78EA577BF8604681C7
MD5 SHA1 SHA512 TLSH

Submit Download

is-Z4X3X8FWN9.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-Z4X3X8FWN9.tmp
Size 317B
SHA256 237ff3516492b63b2ed41562ea6e3b983f277a2375f12d427a0a7769cec15043
MD5 d0b3581b97087f79fa2e265737f44eb1
SHA1 34add1ba94fc3b95c7335ebd9a821487bfd6ca00
SHA512 68125745776591cc7c9869f938c42c2b19021027aa0c1c08069e4b9cb9c4425389e88134b39558832051ad64762966642c9c07c8d71ff0979b3b5e34f2e8cf64
TLSH
T104E02BF68AD0192FC6CE8FF706680716D9212CEAB813B0145111F4191C30B0EE0DAA05
MD5 SHA1 SHA512 TLSH

Submit Download

is-Z8U80T83IH.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-Z8U80T83IH.tmp
Size 339B
SHA256 0c099fa7d7897518b2beea4fed29a22a888065d9034b04e5b27e370d553559f4
MD5 6ffcf68079f5ef2056a3ebaa38215522
SHA1 ea894e607d31f3ac10960af84c736891f1e7177b
SHA512 a58b8b57bda5f98afdfd0d7682292a02b9ad9c839b98de439b202784cef3bd3aff7050baaf23076c1ce37d24cca9730a719e8e7448bae1974328dc60771909ef
TLSH
T1E0E026E220A03BF680A2350692022C01DA351F2DC492EA02838878295D330CA034AB51
MD5 SHA1 SHA512 TLSH

Submit Download

is-ZPMTI3VE6K.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-ZPMTI3VE6K.tmp
Size 677B
SHA256 73bcd2164bdbf69c818d1fbe374398dc5404b2f7ea43279676faaca1d11b4a67
MD5 b3bccaa868f34bd66c3cf7256177df05
SHA1 11ba1782e3f7bddb38dd1e1e3def1b52239249c2
SHA512 e1dd04e399a4f00b018af63703f2982389de06f9585a907ce8c17652f034c353a5f229421746b31433889669501f35bda7f8508f61ce665583eddd2a422ca598
TLSH
T1B101623BB30C4C3BDC8AE9698D233026A9B3CD0B0A5036AF81873CDC2930B40A24408C
MD5 SHA1 SHA512 TLSH

Submit Download

is-1ECUQ20SC9.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-1ECUQ20SC9.tmp
Size 234B
SHA256 f823805fa4d01e7e4584cd2630a9099eb9720419fcead1be34888d32baf94bab
MD5 9a86d0e20fc4ba54613f0a7731413a6b
SHA1 58de0cb0e60297ca2975dd3b85eb63c8fa3fdd7d
SHA512 51269586974e2d53ba61e130b97c58a4149c15858bce98bcf875146b108830fe3936f66b3b1c66519b6aa9ba67f3fcce90d3fa3d58bc7a743da9c30f8e9b6b4d
TLSH
T157D022C381210E1AC08906BB80806A889D2D816C62C1A80AAC90DA2024E228AE6D0ECB
MD5 SHA1 SHA512 TLSH

Submit Download

is-1G7ZGVEWNQ.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-1G7ZGVEWNQ.tmp
Size 3KB
SHA256 9bbfc57d26160aa9fdf885358fc89aaae9258419be1fa0a60544d23e4c52a3d8
MD5 6c2259fc601e670e0bb77a8869103433
SHA1 7717dcc6665fa7e90f0744b5efc92233117501cd
SHA512 1ad6b9eb80e2e25464e10dfac05280d0386780a55bc471187e3ccaf284228ce5288f70c5bef439500762bf3913736f32cf293d6cf99852cc0de533673a6f5b7d
TLSH
T169818D997C6FA550CC735134A62F61B12262A58C1B6E2EEDEB13BD911C8624E042B34E
MD5 SHA1 SHA512 TLSH

Submit Download

is-245I28UWJW.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-245I28UWJW.tmp
Size 438B
SHA256 b690ff71125077a35907ee9df97bb986fbebb2ee82b1f443d86e25fd15738204
MD5 59b236bbfcf80799730a41eb5db6e0d9
SHA1 db0c6bac65a9cc0f8717447e06e16c92ca0408c6
SHA512 14b8f4d94c53a23850d5f8414617e9cc6cab23a03f82d0d3f1f17c6e99c5f3a826cc3a4a4f3e448d7cc92a148dbde4eb659efe63d8121049f7d2f16b01938068
TLSH
T115F0FADCC450ACBCF15C743148D444782D760A9FC97941196107AC3C5C3530E0EDBD42
MD5 SHA1 SHA512 TLSH

Submit Download

is-34GBQE6J3R.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-34GBQE6J3R.tmp
Size 281B
SHA256 0537d3ed85192a87eda61f3a3232200881d11b11d5b566420bf9efd924442b5d
MD5 6aa9757a3790d2cab16bb7ae0e03b476
SHA1 f332da79bd01cb752fda6bb3ccfe70e00383ce32
SHA512 428a4c7e68007f3cc6ac586efc950a243b9b146d5bd942b7fb49e4e43fb766a95272a55ae7764fad211effa600f49b97d615970db2318fc31b3c17c96ab21370
TLSH
T1C2D097E7D454BD9DC32A053E0C00804CEFA0542B10280A71EE03A6BCB990340EAF17E6
MD5 SHA1 SHA512 TLSH

Submit Download

is-3XQTBT8BEH.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-3XQTBT8BEH.tmp
Size 203B
SHA256 6e37ec0527dd3c6ec8b2646a5bd6e5fdee1b6077524af40ec8abba28c1ae33fa
MD5 8b2f0616091921a52714ebcc951d5ad7
SHA1 1040a8ddbb028483a1785769275506eb26256b21
SHA512 3c3cc12a922cf5c6de3b26160e6d096450e549b5eacbac9fb914308b76bacc5bb45385fd8d25a8c4fa71d0469a6a8677ff50d90ff15ac80ce46c70ea4b8e8b7d
TLSH
T15ED022F60240F8E8ED87D2F35A09006EB83920B6231F398081E0B02A2F2B587E214762
MD5 SHA1 SHA512 TLSH

Submit Download

is-4BZGGDE2SA.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-4BZGGDE2SA.tmp
Size 242B
SHA256 3368b5b45ec0411fa6f7a389875cb0ffe801fa203a28b0d9662f86456e97d862
MD5 192004275947e37a9511338d61b990ba
SHA1 c5845d776e053a0280436491ebb22141b8d3fa17
SHA512 af203a7446bb6815b9cc7bd109bbb4fe40cf6b9e7aeb46eeb88270bfc2e57af09eee421db9ea53a92d1b9ebdf9549841b3098da02afa295867d7c06963dd841b
TLSH
T1ABD02345E1C3DF15C9411276110D4717DFF443145010550388F0E415B45250C41A94D6
MD5 SHA1 SHA512 TLSH

Submit Download

is-4VK9B8XSQU.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-4VK9B8XSQU.tmp
Size 180B
SHA256 6fd283b8c8f1c96a7b0084a475dc0915cc7db16c938858b6c2fc42a2c286107a
MD5 4cb9524e2fd47071b240da4bd839dbf0
SHA1 6a2e10e02b4d5544159ad40a714c6b66508b7ffc
SHA512 c093ed39741b06489928c7a3b60c812325403d6d5daf6aeba5dbb739e52d02607679293b41c8911bebb56c8949572373fb5862c8ce36a01b933af23d5d93467c
TLSH
T1D8C0C0F893C3F8F8C9C84531754B900CFF2E1150E300301560C4903C3ED1709214D382
MD5 SHA1 SHA512 TLSH

Submit Download

is-53LO299USW.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-53LO299USW.tmp
Size 1017B
SHA256 b3f74f76d035b8ef763f490c9bbbb40467db90335bf3e9579afecd0e727464cc
MD5 fb82d65d19784d17507e3e20a2917687
SHA1 12f126e95210b301777b7ff8e538f66c5cbc45ef
SHA512 f3a45f35104fda1ec61baab2f321f1f829ae290204617d2eb60bffdf868c300b104653795bf61d1767a108d071ca97492cc22d9333e2ca273ec49d64cbc58921
TLSH
T15611659CEF1A4CACD8D97A76631438F1CDA0143665804100270BABF1C97969D4C1467E
MD5 SHA1 SHA512 TLSH

Submit Download

is-5PSK8G02TJ.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-5PSK8G02TJ.tmp
Size 184B
SHA256 be419c1e3d88bd452fd4fd561f8a40a6dbaa8fdcaea4176bab96ba734ec1b846
MD5 0fd2e395e6eac6edcd4bc68199402a49
SHA1 35b5f57643e95998686c69f00e22367dbf140310
SHA512 04897434e3bd92caeea5edee237dd72bd93d3bee863fc2fe34830a311fa6b0a4b5ec6d73ceb76591abe99b8df09c6bf065b01de1577dfb972828fed22cee822c
TLSH
T103C022C7A22F8E738248813AE8086068C837C80C2F20B00C421080A93842E0080C4303
MD5 SHA1 SHA512 TLSH

Submit Download

is-6RXY5J1S5V.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-6RXY5J1S5V.tmp
Size 294B
SHA256 94978b1e2d418252b94fc4054b5044c17df9c1ae24bb6e6cb475feb05c54fede
MD5 d0c330676b2a3472c66638673a8d9b52
SHA1 14fda065f7044c81140f7046fe4b3923ba64fd1f
SHA512 5b1bccde1f01327327a72c2ea9b9daac12efd75b17d6eaee498d6c3bd04ce6859d4b9333e5de88bb15d186c97840b5448b7d9fa1ebbe0784f2ee73947e74bc7c
TLSH
T128E0C286B3460E29842992BF9B6980198A298A61AF424055A82459296FA3B0D7DEC496
MD5 SHA1 SHA512 TLSH

Submit Download

is-6ZPS6BJ2SI.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-6ZPS6BJ2SI.tmp
Size 1KB
SHA256 e2af8372551f3af475ab36589ee502bbd520425f5a8ac6a55762ab1a9f4650ee
MD5 912425a63a37a399475b413d2d00b815
SHA1 6f4b9a72f0dc1c23639d2ca109ee4f6cfe920ca4
SHA512 74de852e53bd56476a28e041d906be3264055378b74be38eb324b25aed053f05f64f5dbede31a1fafe2f78dd5052b8e143f98c83c1a281430a74c2d24fe34ae5
TLSH
T14D31A6F9AA99C860F89F84B092DB90EBDA2191BC3AC61149570A34B6E5A221961C2C55
MD5 SHA1 SHA512 TLSH

Submit Download

is-7588VDLXPF.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-7588VDLXPF.tmp
Size 432B
SHA256 c9d9c2e4bbef0dba6204b6bbd715237e4869a78b8d13c9549cd01299f3012288
MD5 9cfeec7069e3680f764421ba1e433ce2
SHA1 6a2b015e18d874010b2f35951602c449d9e68d1b
SHA512 228f3b2cda469f1f8984e40ccdf3baf23ebb47a7f31fd412dec1637d12d20900d65f188a830793427e871bf16198ef5b708cd88aea280ea2019394f9092604d3
TLSH
T1F4E060F6CD80CC3CF1BD0FB9AEBACC02E8A082640339A4103069C830862E208BEC8700
MD5 SHA1 SHA512 TLSH

Submit Download

is-8LCDAYIGHL.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-8LCDAYIGHL.tmp
Size 244B
SHA256 fe96c7fddd6a33588dc4bdd2881ac3e972d6c019be15d595f5668e059ded738f
MD5 c69f0fa2910112f11378566fed8e46f6
SHA1 65ea9b5ce5763076ac15e20af65fb4df5651f537
SHA512 a67e62e6181a72db746849845bb3701eb7880ae9026f0599a4b06fc614525e7871bf9570c4c73ea04a79bd944b4ebab4eef03d86ab02a7538ad89c63b2bc8b58
TLSH
T1F1D023BFA2F08E56C412543547192004D23399857C65D041569790F03970604CAC1556
MD5 SHA1 SHA512 TLSH

Submit Download

is-8NUXNAHAA4.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-8NUXNAHAA4.tmp
Size 187B
SHA256 f231c4773ac7584d3608e848ce03b75868a6f165f5a2a273e8517c413c1e8685
MD5 6225d778849edbfd4504ce94fe83cde7
SHA1 ea58770a026428964236f4957b18a3c6d7c6960c
SHA512 7a226aa6a75d221cf6f46e58d62bdc0c64e9a448040fab3a4c54d0dea5a961d6ebb4eda08672ef7117046fddb7e6e01c082dcc15920bbed013c53d262b500331
TLSH
T1F5C08CEAA2486C39CA1A2033124C8083D88A0258240984A2922AC82C36C058681B6396
MD5 SHA1 SHA512 TLSH

Submit Download

is-9O7X3GW9S6.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-9O7X3GW9S6.tmp
Size 183B
SHA256 5929a4185e7cf44247569672f04367356cb69d84dc2a9606a107bd74dc2eaea1
MD5 e703a4c9fdf660ec7c2627dc2d51edf3
SHA1 74ce4f951c518c11a9b0fa082d24bf7427619564
SHA512 c21a3ac3f29106fd5c542cf9856e35682e1bdcdb92221a689db4edbbee68ceb74971aefffcc8976f74d9064057e934ea71ad85e3bd084ddf177a3ad27753999d
TLSH
T16EC012E7D3064E3AD589537A927C007288A5451A2F5514150745CC287632641404174F
MD5 SHA1 SHA512 TLSH

Submit Download

is-AB1STM4G9F.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-AB1STM4G9F.tmp
Size 932B
SHA256 32297750f17ff2595f94c94ffe379f1d400c80c0bcb145bda6565e0165727a37
MD5 df29bcfd4c6f893bac270d0acd0edd51
SHA1 009f38dde4efd705ed8fdee7016d2ff600b2713f
SHA512 9dfc275ba83e44b82ed568390cd70527acabf7f5fc538ee91ccc7657e469853c275a1f357808bba78538e99b052ed6c61bfade7e26d6a28d3c3dda21188b3302
TLSH
T10811B77DF70F58B4E99613784B5752B88F32043CBF020206C540E2F8FE9201DC18A539
MD5 SHA1 SHA512 TLSH

Submit Download

is-ADL5RGH4QN.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-ADL5RGH4QN.tmp
Size 222B
SHA256 9ad904d8e8eb37344bcdde47be90a9271e908e4568c6dde2f7d396ca9e1a1a64
MD5 bf90f7b8f257c9acb10403b83780dbca
SHA1 77833e2bb490a379f82e0f9e031dba8b287e6289
SHA512 a4d702a8d67d0d0570f6500af0824e51b6598df87ff0e566ace91125768e84b52426d20169048520748cd130a8fb49c4a088ae187550548030ed270747f1e97d
TLSH
T1C1D022FE32E88EA6C924483A751B00046F7B09AA34E2A8835902002C0802A18DF88226
MD5 SHA1 SHA512 TLSH

Submit Download

is-BC9FOX4HYP.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-BC9FOX4HYP.tmp
Size 154B
SHA256 9913afd178d83599d0b6de0da4859d8f57a24337f8bf730e0479a4b77714ffab
MD5 41f432594446627398d214da01fd5b1d
SHA1 d65f25fe94de920052ddc4ccaff3f6ce8adad1fc
SHA512 33337915b6c8214bbef236351b4947d7592abe82f6683d7bf5d1f331ba6183b88af84e64870dcfae44c8c83d77552906e40782be92cf162b087439d0c66ce3d4
TLSH
T15CC02BD3B2400E30C1C4863F41206400D821021D127144C7800545281C030746AC4B13
MD5 SHA1 SHA512 TLSH

Submit Download

is-BFZ4GEG691.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-BFZ4GEG691.tmp
Size 450B
SHA256 ff909958af7cef5fa56e5b70f4fcfdc939646eb97df3ddb71dcecae692c75abf
MD5 f4a1fc1bceeaf503578a7ad236c1781b
SHA1 117f4a37b6c3ccd68101f879a708baf823c1d43e
SHA512 3ffec4339e9ca045e669dd0568eb1cfff55208aee7943553a5a64490ab662b178dbf3b715e4df32a8590a82a8d54adca8f6a7ae65d085d483324464b7a02ed86
TLSH
T18EF0AB8FA026E934C069263826FAC12C7C7280C1C2160000D26F49F8FC2624E0786789
MD5 SHA1 SHA512 TLSH

Submit Download

is-C1DTK8OKH2.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-C1DTK8OKH2.tmp
Size 211B
SHA256 7d86a78aef40bf3e4d5dccb9c365c69609e2f969b65861b94ab887b6d9adb9fe
MD5 6ec92c17d3dbe14efbb15735c8bc0ee9
SHA1 2f05503b885f2858974fbd2ff6072bcfd22c6d4c
SHA512 52b0a85f75149b6e75ee291c705c92ea3d11c0b338dccdf8894415018d42717cc5ae3ad174b60a8708ffd83ca35c524832f950af22b636af2243d05b485c739c
TLSH
T146D012E2C2912D2EC98911F555948015D96A411D7B225291B412ED356622D9582D4392
MD5 SHA1 SHA512 TLSH

Submit Download

is-CFW3P6KVK8.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-CFW3P6KVK8.tmp
Size 308B
SHA256 dacb595490c4746d89d746ca5ed3692dc7635bfbd6cfb9f1a09bd77eec6de784
MD5 d098bff1675cf35bcea0ed956bfd5a41
SHA1 72ac14e2461478aa03052bc5505cd06242ed9b41
SHA512 b9a895d26186ddf99456bc40697bae849432e8f15599901f9826f756e722180fd4b140c7ee84805a15867c9bcfb48c3b86eb89528764fe9857508465b46b397b
TLSH
T123E07DDF124C5FFF4290E173C2B7008ADCD397488D465246A365C9682514D01C3E4103
MD5 SHA1 SHA512 TLSH

Submit Download

is-CIMZ3LGJH9.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-CIMZ3LGJH9.tmp
Size 178B
SHA256 d6ef1d0ed4bc3f59cbf6084d7913578c3f61a5dcc7dcd5a6a6e7a311369069d0
MD5 8580088febae66c6eb7fcc2ebfd83fde
SHA1 50a091c77288e1034c003ecfaa656bc0b260270a
SHA512 ae861742aec992ab1f67b4fece811228de4d5d054457d79ac2b524eac26adb08509e29f1d7766362545957d5d1944df7dcb9ce4f906e3576ed3d2ef053bdba3b
TLSH
T11CC0129B95598D2A412A5372C468545AB528424D3E1D0A088609956836478450551952
MD5 SHA1 SHA512 TLSH

Submit Download

is-DDZVTYMFT4.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-DDZVTYMFT4.tmp
Size 176B
SHA256 ffa7ff4e1328851e3f65e0f07c5d07e6a0b6b3c564a22493a0e53e733a4339c9
MD5 78157cf6d22e82ae69d00c5f5d3c3e3c
SHA1 9e3ebbaec8910197927638707d1b53209d5e6527
SHA512 987143892368c079fe4adcb63080d470e1752ed15d15adccfc8e5eaabf4f4f639819e937e1cbea95df64e295774d3222bacd9476501a02883660a9c59e7211a8
TLSH
T1B9C02BEB1BA04E20CBC607350314030CCE77034E3122E51A24C88C734C056C0C3D47CB
MD5 SHA1 SHA512 TLSH

Submit Download

is-E2KKBQ3JCD.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-E2KKBQ3JCD.tmp
Size 134B
SHA256 b10ddcae3fdd82f4c5ac06ac42ec87ece31bbe6e3b02d2625d89222eaad17f52
MD5 5a1c6ecb8df36720de989489e1e24c4c
SHA1 10818b2011a80d8ee065c35006fff23f303e112a
SHA512 5a89a76278a3b4ff03d2e424a8a1210666dccba2d40663d68e46ac6bbfde6a2d818b480bcfa5c96682a57c0dd0e2d1a7faf9bb95404b69ae54b3f53ddc1ba6cc
TLSH
T1EBC02BC293507E71DE01606BC2C00372C9BF111C31944E490408CC371902E8973CE703
MD5 SHA1 SHA512 TLSH

Submit Download

is-EUQRO20102.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-EUQRO20102.tmp
Size 131B
SHA256 95bc4afbc55494f30ec3553ae051c73b535e9aad45426eb373cb788f25f88caa
MD5 3340595b829e7ceebc4997ce038e90e9
SHA1 921e0225ba2ed03be7257fa2b0ae0f958a4a1d5e
SHA512 ef0b38ebe3b48a3e2808477c5947d44aceed6bfd238dc3cd72814c9ad664113e0b78bce8163bfa517eaaab631696b3c2844abadbb075af4aa1dad259a9e83d21
TLSH
T18DC02B83002CAC38CF4850B74342024CE6701AF011A8412F0013D0310B115ED8048709
MD5 SHA1 SHA512 TLSH

Submit Download

is-F04UIEPRXJ.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-F04UIEPRXJ.tmp
Size 165B
SHA256 19d7d5549de518ea1ff075f9d5d35e5b4698014d9e8e186f8071a0ecd2bbac42
MD5 9786d3893246ccbffabf9b6600db9ea3
SHA1 977f7307f5fb0e054b62ed8fcaed36b92bc1d311
SHA512 7e592de540c2944cade2cc8ad1d6e95d41667153315668ecf50f96ae18ba19945a9a4437e29b1e25d91e58eb70dce0051af2b21916f5ad44d171a3740bcefc41
TLSH
T1FBC02BDA79030C78D2AA02F713F784605C7A032E3E2651058E1D803C24347C386CA04B
MD5 SHA1 SHA512 TLSH

Submit Download

is-FQC0HYPCA8.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-FQC0HYPCA8.tmp
Size 339B
SHA256 29b25d330488e7d608f80e7a8ef863660f370f0611521692228f4d9aab3418a2
MD5 aab3fd285fac6b503b221345aa45fa88
SHA1 59cc779c48e5f898be7cc90aa9c8c6f5056c9a0a
SHA512 ad321f2672689659def8c5c7c76623119eeee8ae4ed3d42c985317ec13fc9cd38251b83e858bcd1b74768c8b7cfbb6e641743919d7e72b7cc5ab8dff8ececb10
TLSH
T1A2E020DF530D4E75CC4C4966E2F1F08684A14D7A2DA8230274978272BE97D66504D101
MD5 SHA1 SHA512 TLSH

Submit Download

is-G68YFSBWTU.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-G68YFSBWTU.tmp
Size 327B
SHA256 5f81a72696418ba2acca392d8aa5ddc94a2b873275d8ab17fb64ef3b6d6f981a
MD5 05a27160f60d0fecd7027de9bdf676e2
SHA1 1373ffc0338a52ad958e7d2fbe06adefc624275e
SHA512 211a5b6dce40604f91bb03edd48485fbfe3f4c756e54b9b6abb3856e599627252b547895aa15c1d91880ff93d610a37d3613ee9c07ae0298ad9b53e796fb5958
TLSH
T1A5E07DFDF0744910F0CDA53D15331F0C8150011570CA045DD20389B36A0E233E04BAB3
MD5 SHA1 SHA512 TLSH

Submit Download

is-H1ERRENQFF.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-H1ERRENQFF.tmp
Size 341B
SHA256 a22c1482a23c23c1bcd0c6a359ad8d287523abbbe9c7cc6099b33d763ee96a20
MD5 4cd50accc8f30d7efa7649b6024e176c
SHA1 8d682992c030366841ca782bb6e826eda4350e85
SHA512 c0a04f88125eb8bcf07e402730fa899e72162d73b9df9da9a40ddbddc4f54d01106bd2a033f9cce82871aff49fc7ed787ea743671dedfd044f9952235566a0d7
TLSH
T11DE028531B187FDC490D3FF3C37D015504F741083D2212412644449D7CE2B0C944464C
MD5 SHA1 SHA512 TLSH

Submit Download

is-H3L5S2A8YW.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-H3L5S2A8YW.tmp
Size 616B
SHA256 b7668daa0d62ce56a50400dd0f8973d1b39bb1fe99b1acf8c85e8e119df76231
MD5 c64fba2e2266f9270d6638bd142c8d83
SHA1 790836ce57e814f542fb6635d7810d60ac66043a
SHA512 13b194c3e4284c5c6956f4a5f8f071e31c845b95f6f1c566b59a0e04546e1d4a15b1bfd173529deccb7aec8b6b31ca581ee52f0cae4f8414596cced787c7bb08
TLSH
T156F0023AB326C814F81E06FD7E3C63F4556680D8831FA17B647209C3BA3B1440EA6442
MD5 SHA1 SHA512 TLSH

Submit Download

is-H7TTLU66FO.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-H7TTLU66FO.tmp
Size 184B
SHA256 d1e3c898ed074bb3614c3bc4bd2b2c0c21cde677f95d10d6705e9eca170abbda
MD5 075ea993ed20954dd0549ca4f2333c60
SHA1 6c886bf3385fc0b75618cbe36889c3f9454650e3
SHA512 9529377e630d4a229618af4d25d504827deed95b68a4508eb2956ed038db63851a6f51b5bf7025e54d3301480cd9c80ff29a39fc904a908bc40319634947dc79
TLSH
T142C022C44A0A48B8F2C88A3A865228E08630839142C2238AD164BA9C722214500C03EB
MD5 SHA1 SHA512 TLSH

Submit Download

is-HS1D9I7VDY.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-HS1D9I7VDY.tmp
Size 178B
SHA256 d7585c904a07b57038f7937cd19b518b2ca465eefc3aa176f0e23ff0679ea942
MD5 d8d7761f2a1b00efc21b1879d139c573
SHA1 599f46029b1ffd954256829a51324989fe3fb159
SHA512 16977ddf3d7329b082fbb08c08ccc8d2e511e3ab2a551b1b8bbee6427a2d6649bc39e346eee220f2154bcc57fd189704136b5953aa308a1d03fdeddba39a648e
TLSH
T142C08CE2A6609E36CB55047B2A1464C6EEB1113F2D9A4182B000C8BE0A7210588C068B
MD5 SHA1 SHA512 TLSH

Submit Download

is-IF34ANIKI2.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-IF34ANIKI2.tmp
Size 170B
SHA256 76dc51eaada310473359b6553b891ccfe694c7b3a52833c0893f025642ed950c
MD5 8aa8ec9a9258ada96e176dbcce0dfc9d
SHA1 ce29d3008a4601b3baec542740601ea8a66c2a38
SHA512 5b040dfbdc82e95c69e520813bc4db06bcfd05ec0b487709c4a6e34e9aab4d4d8e745208f5d6c5c4d714f486572beaa4e2e016fa2990115ee1ba1c9f3462aaf7
TLSH
T148C02BF33AA59CB4FEC00331C24C48C0C837131D1101841DE105B41D361280981C4E0F
MD5 SHA1 SHA512 TLSH

Submit Download

is-INXSPQ555B.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-INXSPQ555B.tmp
Size 215B
SHA256 bfdd4f412de35ced17a26b6090b41befbf11e97578a244798a475c35f1b81685
MD5 f5c20c701ba0afaef155867a3259978f
SHA1 bd78c42b1fbf4f7ca6ec8415e20358b09b5913d1
SHA512 a7f553839456af8dcb8dd17ee63011548c0c015756c186c6feba293588ebe7523b8a60a043ae08feb17547b84dd69e5d014c67b79de2b9afcd1a2336eb9fb183
TLSH
T150D080DBFFD47D28D50301F7C15841EDCCE2473D29076A52D1106C395D15A0E8BC2781
MD5 SHA1 SHA512 TLSH

Submit Download

is-IU5Y1PJPCW.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-IU5Y1PJPCW.tmp
Size 1KB
SHA256 34a47dc79f253f27a7757d747f3402559294fe080d1409890ffaeaad1a3d7b1e
MD5 e9d1a856239067967890d74edd779f93
SHA1 de390dcf922397ffdb8c1a0afb7ee915266fd404
SHA512 f2ba5e6558516c3dcde9ae20c954b2ef46cc118934ddb07153924b9f0bf2fbb71aa2508ef300653806d35eb2a6a4a9179de8ca52808558466238f8fe1ca35a6d
TLSH
T1AE31C99982C89C62CC7D4DF30AE814EA1F73154ABD742D65499218D2093B2B95B94A44
MD5 SHA1 SHA512 TLSH

Submit Download

is-J2WK0JQ94W.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-J2WK0JQ94W.tmp
Size 343B
SHA256 d0f2f23ce73f6559fa3a61f4e7c068875e321dc6aca3a0eb6a423ae94054b92a
MD5 c193c11c9827a76d682c215d8fc81a2e
SHA1 9f0b8a87122e7ff62cc3f62a713df9de12778cc5
SHA512 ec4562cef1a338ed11a6cb9a214698515ff4c02d3ff7b0d7381c7480c63e52ddb50b21059b81fcf982134e210f4ce156306180506594648c5a7dc96726cd90fd
TLSH
T16CE07DB392463C1AC660AD7680185A60D329035A4CA5240F0231A99639F226B90D4D67
MD5 SHA1 SHA512 TLSH

Submit Download

is-JDSEXEMCNT.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-JDSEXEMCNT.tmp
Size 206B
SHA256 9bef876bbd6193e05e5e0ad50706ee454d1ea71da782a6f9e9bf8e5e71bb920d
MD5 10dafc29a0983b6524f168083824daf8
SHA1 2f5197f1e9f10ba3c9a1b4c7a1c0aec5e905bb96
SHA512 5142031c3627f6fb4e99ec899f66e918e55b714dbeb0e4ba46be4926b0161541ce1b29153b26e98cc170875b34cb238d461b82158d50586b14e8d4eac2ca5097
TLSH
T1CED0C0C21314EF91D151443BB07E010A82203C18D44BCE0424A0A40F48F9D80EDC4692
MD5 SHA1 SHA512 TLSH

Submit Download

is-JT8WV7M7SE.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-JT8WV7M7SE.tmp
Size 528B
SHA256 2d54781387c4398487a62b8395d6dfbaf4b37df0b023d4346d1983b28175596d
MD5 2b0a94371100e887d2d1f59b85c7028b
SHA1 a24a9fc7605c738ab13cc3bf397d6c26d25c3b85
SHA512 ca2cf068aebed4d6eb72655c991eed0528e057ab1c648423debebd244eb19fea677fdc8a8b3b185a2daad6272e31088b8a88173e3d970b2fb355c3a160e0be72
TLSH
T1D9F0C9A25094CD28F5850B79052A6838E61B5461EAE4CFA4AE90B22D5A1370B5BAC743
MD5 SHA1 SHA512 TLSH

Submit Download

is-JZ9XTEE2XJ.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-JZ9XTEE2XJ.tmp
Size 356B
SHA256 12435f4bc5d7adfa24c605bbbfbcc92b5e37f160e060e15821ed1c8f69bdce46
MD5 aac8dafc5db057c80e92de8924e0da11
SHA1 adc78368593b8fba0ceb004f595ed25d0524836a
SHA512 35fead14b0757f2944e80d334645f6f2bab52ad475a575e70fde595913dc25404a32648f98d2829ee4cc4f481a136bffc743695ce532e07ca78aac3e65d0604b
TLSH
T116E0C092889AD876E703137AB27D483DB83AC9952A23448981B2ACB5FA41118084205D
MD5 SHA1 SHA512 TLSH

Submit Download

is-KWPS77FCUD.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-KWPS77FCUD.tmp
Size 138B
SHA256 6291f9c78c77f1fb89dd0b43c51daa98c2ab6c98ca737c2ef1f61f1f201b4514
MD5 432942b96cec036996b48617c5b38d4a
SHA1 c783d444d450193cbba5de874ae323fc7395a29f
SHA512 76d935f697e31f4521c0bfd281931bd9da0b7b1aae75806a3a5fb7c8f920bb80381fdfc988aebe2564c6cfbf07fb25a055ba69975003f79a0e72fe2999cfb9ff
TLSH
T118C02BC033D85DB48E02C37B535FB6815C2C71CC10AC204492087F726D71410E4C43C5
MD5 SHA1 SHA512 TLSH

Submit Download

is-KYFG5W7K5J.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-KYFG5W7K5J.tmp
Size 301B
SHA256 77e002c978d85086f4aba5f73d4916430638bd470986dc92da89402c7d266207
MD5 e4f650a2808032e7433058cb6980fb0a
SHA1 49f6725c44ee514d27a201d76cfc1cc50a34c70a
SHA512 52bbcc5b2bbd7b4a935e43c3d6ee5fda8cd74deeef6d1cd69971cfddcbddc07303e7f677f2641f8d043c79cee55b2f1a9f1fb42c953a6ad95a9f56c99635615a
TLSH
T104E02BE512D26FB5E4173832D2180C11D4383F18F417DB0AD65D89713D720D001CC712
MD5 SHA1 SHA512 TLSH

Submit Download

is-L5X2GJO3K7.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-L5X2GJO3K7.tmp
Size 7KB
SHA256 68bb0080f05b810c785098bddb9ce7b9949e322a374c65b4c7ad99ac107a10be
MD5 bf093bf2e26efd4f9568dc3c15441cda
SHA1 84642fe4fbce91a98def02bd0ff9d76b0c4120c7
SHA512 6328666476991bd209285fc198e0317ba98ef5567400b64a23dff9843b47439c60d90478dc0c342815c3a388efe3e288af6be8c55ebc21968db032dcd903aff4
SSDEEP 192:ir6+5PPB5scDqs9K8NraSvNJrgHWAHyeStKm3:irjBnDqs93lJ82A3Sb
TLSH
T13DF19EDAF10FD697A4964AB64CE01ABD72B11BF138316D41B151E07A0FA573DC9A4305
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is-M4CZL2325T.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-M4CZL2325T.tmp
Size 1KB
SHA256 d4a8c508e022525049f8a331e1b3f99ffabe486798781c9c2a06f18fc16cb395
MD5 542965ce2bf5256ee1cd2dc6fed91859
SHA1 d7e88077e3593158dc64fad99df27197ce7adc14
SHA512 973ab696eca53946fbfbf2b54eb32c3f88a4482d4bfbf1e8896a719b83b8f35e7d9697dc858bfe5573c34a9e5598c55a94554f6293348473e10eaced9436ab5e
TLSH
T12F21E743B806C2AFFDE1B23CB9FF82608750403D1316510FDB72018D2AFC18F8014A6A
MD5 SHA1 SHA512 TLSH

Submit Download

is-MEGOO1SAIN.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-MEGOO1SAIN.tmp
Size 1KB
SHA256 c6c0b17108bd2274c63ec648e8e333dff9789479469d35070434868adb2d1046
MD5 c1f328529906174de4b29ef414907ec9
SHA1 bc278e0cdbee3350e9651b1fdc19817afcf536a3
SHA512 edc7fe8502c3c612b0107f5d79308609528d9381742a2935c60086830d34bf2d477632a6110288c92c8be438b0c90e23ecb2a3a65c9f6224b99e5db9563f00e4
TLSH
T12F31CAE65458CC38D81480F5829D90F5606224EC3C46B966C54E8CA6A5C32543ECB817
MD5 SHA1 SHA512 TLSH

Submit Download

is-MOI4J1W3EL.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-MOI4J1W3EL.tmp
Size 132B
SHA256 4b558aa986e2596aa6ea0a1405668172a6c489aace2353873f061552bf84a300
MD5 a27cd04006692a52492a3f8771827851
SHA1 12aeb941d6cae7d37554ea8a433aa751486b12c2
SHA512 5416fe8c4f4508121e9c5315769f9aad24832ba3d71be51d545a1187ffb73e2c9aabf807e1387aaf7c3db268dc734e2388955aa39682c0ab3fd9e1528cb3ec4f
TLSH
T110C02BC243558C36EF25536780194200FA383B292000815A9189C634AE12400D149343
MD5 SHA1 SHA512 TLSH

Submit Download

is-NYB0JW3LT0.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-NYB0JW3LT0.tmp
Size 128B
SHA256 3235f1b7e4fa0d316b1aa5c3b92ea6586daee896e43222f648670e8fa6d71368
MD5 f6e52fcb0892d963740b7a12caa26598
SHA1 604c163c4c43e041cf76359edc06c5cf292f5f13
SHA512 8cd23a96209a3bbad60a28e07db3859a31e75cf36ff591742aa5ed51bee91517b503bd7787263d05334ecafdfd0aef5039f05b59df0bc840e49e133a82f6d22e
TLSH
T1A8B02BD280556DAC836C003304330470E9F6D11540020E900451356910304C141C4AEB
MD5 SHA1 SHA512 TLSH

Submit Download

is-OYU4OMVT96.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-OYU4OMVT96.tmp
Size 129B
SHA256 233a82176ffcd3c6d906b605bd08e413347ee9df6b09ad746f84469116a54811
MD5 9aeabf6179f515af5dbc8ae1cc3be487
SHA1 ca18321238054aefc25cbe34443d7f0b6f351fda
SHA512 d41ee919818a19d57c8541f31a0ab20cf6a7b39c276b7a5733bfdb3b5ed15e3931103a1b4ce0229fb2598acc4e2bd23e6a17707c2ad9c99ac45d949e8a9701f6
TLSH
T196B09BD20965FCF8C88DF4B641271D30EC666415075115CDB293567665511C41584377
MD5 SHA1 SHA512 TLSH

Submit Download

is-P0HIXOM4MM.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-P0HIXOM4MM.tmp
Size 1KB
SHA256 8f31e9f6dbe509a60f161d49580499f27e953693b7a8705b02a0bbc9d256ac4e
MD5 398831ef1e2577b3c8c9fc777a0e7c70
SHA1 edeac48013401a8e4cd30226d01bcecbd9d969f1
SHA512 4d95094777e32686ceefbf6a861a1b5a3cb9315a5a7ed5625aff90cec8d43ea0ee839c2aa4a69d92e74b374f772e6c7b3c2cce0d48ede1b46a0987d814e4c02f
TLSH
T120310B8BA41E757CCAC6557791DD8C781515932F0D371E0B3D4E90765C47619374341D
MD5 SHA1 SHA512 TLSH

Submit Download

is-P5MOQIDBJW.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-P5MOQIDBJW.tmp
Size 513B
SHA256 3bd1cba7b0517257de59ea097e188ebaa706b7bbfca338a29ddbec2d944c5567
MD5 320ec974cd5352b0e0ece1548d6f658e
SHA1 b19afe19067e1f976c34848ed9d760f68e16afbb
SHA512 40dece1f2ec1640307a315eb6b761f2b01cd2b208c0c1a87c096778bf8d142e826d51f2cbe4351a0048603c875e364332254ef100cbe5b7b106db5a643f0b6ad
TLSH
T102F0758442C4ECB4CF87C5DD508C6924D83E5BDC8D8021A4CE504C126BC72F153E8CB3
MD5 SHA1 SHA512 TLSH

Submit Download

is-PGL59N2970.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-PGL59N2970.tmp
Size 1KB
SHA256 ac3911723fbc5dbd7831c4049036f4f9d5b290a52164143d9e4846fc3fa5ceb0
MD5 9b74f84a472f3c247473daa320dc7e1a
SHA1 e9a327d1850b175610700f50bcdba9eaf59d13e8
SHA512 81b33dadb7213e8a3fb75e69b20e44b36432567aa6915cc4066b12b2ef4e9b094b50f994c48131534b1d416e1a04c9d040c23fac9f4aaab2a5692d98da920484
TLSH
T16731F6EA40215EEAE05F35F960DD08F8A851C03C93517012871FB8786D9A26C299315C
MD5 SHA1 SHA512 TLSH

Submit Download

is-PK533ZOFMT.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-PK533ZOFMT.tmp
Size 231B
SHA256 9a91628cce9d93e0943532402060b64790218c391bbd3ea7367c29c0e266adb5
MD5 3f3a56604345b1e8e35a213cd9e17bb8
SHA1 b2438731b9db73e3f6649656396d49d8d07e1a56
SHA512 dd0779b15dc6c8fa02a870af35de388814e4a8b31b53a9109e4b4b1e45709fd1fdc73518d72d9ac20dc0e58677d8abfae85a6842d217bafdc5da09883ccc7ebb
TLSH
T1E6D080DB54541E37C5FA4D7BC3D6DC5499300D185350549B15ECE83A7F1101167C2D93
MD5 SHA1 SHA512 TLSH

Submit Download

is-PQH4L2WKRC.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-PQH4L2WKRC.tmp
Size 1004B
SHA256 9f94e7c42c285b0607e3e41c8a523f11e00a3b675bd2a9d93c7c12e476a91587
MD5 acf5169cc67eed5d6ff7a4cb06abd875
SHA1 137496a7f481aa40a3fba7c23ba3a7b471f5add8
SHA512 10d20a20a67a102835c07439524d66a7da0bb23ae7ef69baf4c7faa7e70a62c9d00547b4b6802f8d83e39096a4461c211cc1db5c71270646903e1b0a45d58bfc
TLSH
T14F1198EE2199ACFDECBF17B784B953B501B1201D49984D05B7722179AAA208D1CB587C
MD5 SHA1 SHA512 TLSH

Submit Download

is-QME9T977RL.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-QME9T977RL.tmp
Size 227B
SHA256 18c78813da1e920da9c34722944c231ae43c12648cf2ffa25505dc60ab291745
MD5 257be388ad3c5b1693adf27112dddc4a
SHA1 6006873fa066425583e9b24ae9c1451aeb1a3537
SHA512 2daed689e61ccd9dd16ff0f16b4eef977b7f2d084548feb861d3ea95537b1b4804ac2392d76c301c0dede75c65a38c95880d7929c39ab5717260564e7bdd60d8
TLSH
T164D022FAA2B63823C31203B2025C10909A7A870EB322422768279C27091000142FC17B
MD5 SHA1 SHA512 TLSH

Submit Download

is-QNLA29JQKY.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-QNLA29JQKY.tmp
Size 180B
SHA256 5ad959df793d952cc1b275096ee13eeb553dc0357caa2efcf2a4350363a6d363
MD5 bd7b508bb867332ca1ed81b8c44cf676
SHA1 210124c182c7b3e0581ccdbaa3eac73d54719bf6
SHA512 14fbab7b3639d6336a17e2529a7040a742f58bad395b800966ccd22f5fd0a3b62ea893881758bea46ca7b679fdb7f04fc4a3e6dc596bf2031898665037207e90
TLSH
T11FC08CC7AF468F24C3AA423E82259240AF1D20062222004A8082682448D1088A7C42A2
MD5 SHA1 SHA512 TLSH

Submit Download

is-QW2CFQWS6S.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-QW2CFQWS6S.tmp
Size 15KB
SHA256 c0f2676c1b75d123bb19cc6fbfcd067d823a7693cf89fecf73c32a3cb934e9a0
MD5 3cfb6ac2d4c5b50e624b93015a2a210e
SHA1 4c3799b8f70dd82f59720f83dc63d489f50bdf80
SHA512 4ab839551608dea1d14b29b6d0c4b80457f31468c27f306dacaf4acda504cbdf61f9f1017cb413d2ce38a39cbdb5e9a8519a837b895843c3942fa1d869fffa1b
SSDEEP 384:QGxoPD2AukL00dPo1Mv38oYlwxPu1FnvS6E3UYG1r:Qp72tkLPdgK0oYmtufTx
TLSH
T13462D1887D09D8B2AC7CC579719745FA2EB5C4D8842248435D438FAABF9B0CD1B32B5A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is-R3V2QD0V5L.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-R3V2QD0V5L.tmp
Size 417B
SHA256 827bd8deb24f977506b8acf20c482e1f448e8504e8de29ab784a3f2933f0dc69
MD5 20fd99675fe97e0cfdc2533fb542ab44
SHA1 104476571aad09a6230ce5fb388ab415c6a08143
SHA512 d32f5b79bdfa385325ba6e7a470d71a6c28c1da539a5fb44cbfe47a39160a55cd18a97bcde89abad3ce780ecd26e6fe3806ca53080919d53828a98b2ae1e1767
TLSH
T1C3E07DC9DB0A0EA8D38267771204C653467587278531564133B7C8393C71648EED0511
MD5 SHA1 SHA512 TLSH

Submit Download

is-R9YHHCN1W9.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-R9YHHCN1W9.tmp
Size 164B
SHA256 d5a68925a3626dabc5a773663cd0134ae03c908c0c8adb4381578078c3fc056e
MD5 42fd9607554573669c87044ee3472156
SHA1 ef6a403c0581dbc7ce08eda9f1f69152242433cc
SHA512 4f974de0e694ed5761e318fe52f2b3112cc33b86562dd374c607047e47f31b9cccd1ed1cc743492c3042289cdb948ea0865c027cd8c77056f6232942931288df
TLSH
T176C02BEE329C7C34C314153311C59110C531A6DC6082C70B044980321DE204FC1C23D2
MD5 SHA1 SHA512 TLSH

Submit Download

is-S2VKHKFQ36.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-S2VKHKFQ36.tmp
Size 628B
SHA256 7437b32e1edf24ab5701933db00909c7d7db4b6870290bbc7e4735a4fc7981b8
MD5 7d9198a1b38aad82797e04e0722e7b10
SHA1 0c93efd179958c19854f0500fef41a67798d95d2
SHA512 05a212eb473145c57fba8e28ebe2f85accc4d8b929132b7c53434b9cc1cf909f392f84ab4332cff39777580a0aa6f27d7d10238f9ca3d33d7a815c5806eaf461
TLSH
T1C2F08BF3A53140E2F68018B296D79265BEE7D23D921175338F504B3E18B125512E5814
MD5 SHA1 SHA512 TLSH

Submit Download

is-SEAWLUFHCM.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-SEAWLUFHCM.tmp
Size 258B
SHA256 0a2e37ac4f5f09b4a2334cac01b1ba220f6fd08ccfdca6ed0a1df5a7e3403b3c
MD5 f4ed30de074ab711147e39eef8e1a3df
SHA1 aedb5a6c7ebfdde3cce49374123b018f5fc2182e
SHA512 bdaeb630e237ce74492a5c8c40019ebd79cb7a3c0676c6fcf864ef7863fa575b228551324ef4162319b289911a557759f875cff58f1847d48ddb6440deb7690c
TLSH
T1B2D02EEAA048AF3B92A0006AD3A3B618CC5C90504D231808442D907E2633A81A29818A
MD5 SHA1 SHA512 TLSH

Submit Download

is-SJRCLMXYUT.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-SJRCLMXYUT.tmp
Size 891B
SHA256 d07df628d6ed8388d926a55ca2edd9ec639b26edcbcccdf6b0210b498f8346e6
MD5 3d6cbf0fc6480b0856b0b18a54e3df26
SHA1 fb4d4c5588e2507e8c6127da593d361be94edeae
SHA512 9da8a39d6627a85c756ccafe3cf9c96f1ac40d2ff1c90757963d7342d3b05c4f5183ad1ad0e159724cb50b8a059fb32f9f780df7fc78f4d2bfb53f0b2a196dc6
TLSH
T10511124D754AAF2DE8060358CBB1EA154E2C11FD1D2E024E68A56C98AC67F1852BD7AC
MD5 SHA1 SHA512 TLSH

Submit Download

is-SRAUMKJ1YD.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-SRAUMKJ1YD.tmp
Size 780B
SHA256 7afea33b4b6109fccad617fc05ba2ffc422bc60b02e805303e129ca9954953a1
MD5 f0522340c01a7fe94c2774d6664674ad
SHA1 95fc0e863573a37749d5c8c32461386d2f0e2b6b
SHA512 d9bd3fe11d905090ea0088517b80f84cb78c608aff7366606dac0a7820d2a0945de1a219d2e94c1b959ea6131539e26096883e5f41579027dd033cd07cca7631
TLSH
T16E01E911C165A4B9CC7C007A5BD43C9075B33048D83BC129931A037431D32D28F411B6
MD5 SHA1 SHA512 TLSH

Submit Download

is-T7B9CEBKMX.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-T7B9CEBKMX.tmp
Size 1KB
SHA256 caf1dc9e14b96d649fbc00a5210fbd0e209fee56c724ba746ea7a22edf73d5ac
MD5 c47a860f4d6d50af02b754ecb49956ba
SHA1 091ff88d16d313ccdec4546372153ce9e4533cae
SHA512 a69618d04414314b026d81b6d957991df794a1e1257ab54e5fae5ab872933df77163ae148e70baf15abc847d8dd91fe3803d1242b8ba7391d93d9fd13ea616d4
TLSH
T18711252F853B3DB5C1E2057B598E56449C3746ACFA610E51054FE96A9D353A110C3A94
MD5 SHA1 SHA512 TLSH

Submit Download

is-U69WX4ZHCW.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-U69WX4ZHCW.tmp
Size 254B
SHA256 eb1772357ec25d02f8467e18e76b6585d36ac1adecf192c9b37e3299b512282b
MD5 597f97ee931cc4e15b639f220ce7098a
SHA1 b027a7553d107a624a413658751e82ea5b263ad0
SHA512 cb1d90e9b1bb858a791f8f356d0cec0df5aac405891177011e0200662ec1377d466687404db62165a429a859d03b8a02fd027c08a80ea7a0b71ed9da4c71fd70
TLSH
T1A1D02341B6504CECCB55537386547C0DB5A71B5E0180974135C1E5B42FE7791C8D5157
MD5 SHA1 SHA512 TLSH

Submit Download

is-VVQP70D3IA.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-VVQP70D3IA.tmp
Size 226B
SHA256 5ce6134336919f7288d5f5312772890ac680e324d47e6552f523cc71c25a5336
MD5 f6481b30ccb5d2bb6ebad51c91cbe362
SHA1 291405383f6b50a823162e252f5652718a7c627e
SHA512 d2709e33152523e2a90b6b1af826e708d6b4ae03281802d81d5cfdb5b631b6670b977bf706398a8e6a85ad7e64f51a972b91b0e8b1c0c6f44f1b5ce3b2a4ba9a
TLSH
T1C7D023E1F3504C36F5414F3AE3576D54F933240DC151251153544D260D4A50782DCD41
MD5 SHA1 SHA512 TLSH

Submit Download

is-W6HOD3XZXC.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-W6HOD3XZXC.tmp
Size 164B
SHA256 5adcfe34790c09a270c2e33dc3c73f6e4d4e83b489c232b29757e4e2e5763a91
MD5 5341874871986385594c231bb4866938
SHA1 7ae20bbc3d2685857ebc66be92df1e0e0327b239
SHA512 b55fbdd4b13b11ce6cb5b8518b88511c6ae8cae4a51d8c6d6f6c7ffa50f6f5d9479b241267c2bce559b0228bd947a5d98e682e10f777eb7d4897ea8d90034fc5
TLSH
T1DEC02BDDA2ACBD34C358303355C882A3C434C65C74C3F14B488981354DD1046C1C13C6
MD5 SHA1 SHA512 TLSH

Submit Download

is-WKHAX6RAPF.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-WKHAX6RAPF.tmp
Size 590B
SHA256 5d2c7b18155db2f3583896fde0addccc481a816a9b36531b201bc5e31bbb35ab
MD5 698ffb59b04034eb202468c06c4f0f2b
SHA1 c4869724b5182e9df7da9712731d0cf83d2655fc
SHA512 056e014b701556c9af02e53fb268b53a5a2867bbb27d02072ebdfc1424d3bda4df28432d35e9137245d79037788fbfd63eca76ccfa5723adf41fe2a07b12bfb7
TLSH
T144F0C0368B61EA28CE0904B15F148DA18E10945DDA09C23D0DA6EBC99906EBEC58217A
MD5 SHA1 SHA512 TLSH

Submit Download

is-WNPGGTICMD.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-WNPGGTICMD.tmp
Size 1KB
SHA256 31014ee2cc775bb62207d6057640cd89497435529c0b147736b8fa10059de132
MD5 bde287ef3c47b682575f6d0d3d8c086c
SHA1 797caa1155580585b1718240739665cef4beb0be
SHA512 68f88a480e2f71c4e37e36e95d034c3770f4e87efe45abd2692f9c7709d34bb0148e6af84608c92d7806e3b324697e8673de61dce350b17127fbcb854c561dda
TLSH
T19B410851AE4BB895E9450975C5AAE528503E0F2FB7233A5B82B5327B23833619820A98
MD5 SHA1 SHA512 TLSH

Submit Download

is-X0QS53M0BY.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-X0QS53M0BY.tmp
Size 992B
SHA256 9b1916e06dd0605a1cb61052de50cda49723e08f280dfce484b8b06d54cb1a17
MD5 1d1c5a016cfd3ea6e3a2057599da0380
SHA1 80023655baecfc69242efd3dc53c680b681f14a9
SHA512 7d7165b0ab589e51fac7828300a9731688d0b50e69fe9aa366f364a5e98c14d89e62418cb8a4e9be63271f95debcb09ff4b7e2781c7c8dc5bc7d90eb54f13957
TLSH
T11D1165BF74F974AFDDA49771109818711B66D609255E4C0B930908BCC0F10885554C6B
MD5 SHA1 SHA512 TLSH

Submit Download

is-XEJBHXHT0P.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-XEJBHXHT0P.tmp
Size 389B
SHA256 2bc47bd96c56063f0708b773931de60869bcc74858e348188813262d6ffb1b02
MD5 908f9742327d27ae755c852a5de7de6e
SHA1 502244e1f81d6581b6d9c162404a4456c3b46a34
SHA512 a10d3eec6622f7fee952949cfa02ed135d140933232f6881821823f2fe068d7fffb2e59dd551fd714235b6d1c8d33456024d774e79a496af00db85f79759b6f0
TLSH
T139E0C099785C483CF8844D7E91CE55C2DD1D060AE1714926F59239BAAF015C325825D8
MD5 SHA1 SHA512 TLSH

Submit Download

is-XQT76ZBAH7.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-XQT76ZBAH7.tmp
Size 263B
SHA256 c590eefd01a9805e88a37649b9e42027c8f3a5f59952f4af3a4848575b3ce733
MD5 94df49edfbd54f3e1cf20b682f3638c1
SHA1 d9c98a8318aebdf91c2c4d9244e20313804e0e3c
SHA512 355c7ac4fec5f046bbc0565fad25137ca317747d7345d711296c9a6d947fa045d200d2342520654e35c8d58b7988263756cc01d560ea771e23ff0ce7437446a1
TLSH
T18ED095C6A3F8DF37E18C0433511870EF4D8709052F14110552D4507B6E57D2D8CC4347
MD5 SHA1 SHA512 TLSH

Submit Download

is-Z5681TTO2K.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-Z5681TTO2K.tmp
Size 298B
SHA256 3b66652c32568f0525409ac577bf5f8b10942eb2bc3803572d66e1c8d408777e
MD5 86ab0cac6145ee9ee213738b8830d589
SHA1 12453d7ba3e84b9aad695523bb907037550ffd2f
SHA512 c0a31767fd64612dbf0ba4803dfc69b2a17660ff2d31530e234d13d7dd173f421dd6bcc8d09417b35cee770a524c62a9d4343b0fcb4f903788806ab85b6d906f
TLSH
T148E02B7A26D38F32C780027F8630C96864E1628C050688935404C1186C8506B4AE0556
MD5 SHA1 SHA512 TLSH

Submit Download

is-ZHDQ63TSCX.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\FluentWinUI3\light\images\is-ZHDQ63TSCX.tmp
Size 166B
SHA256 e75ed5a1b1f028cfa665127e88e1a7078fc91f91775bf890365a8500d9869db7
MD5 48424d38058e666f8bf164714ae4ff72
SHA1 89c3b469060272dc861f3e3950f81078a3ff412e
SHA512 9c52a5ade19e59a69f6177e82177edc0dd0e678676e712bb0286361136e23efa82d2c5f87949e39cec9e0b3d6e176e90dec3333ca879dbb4c3cff6948245be4c
TLSH
T13CC08CF6A9501B36D0C0023711A310829D218235046A4203A105887A1C15A04C8D0243
MD5 SHA1 SHA512 TLSH

Submit Download

is-BOMSNUXEDE.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\Fusion\impl\is-BOMSNUXEDE.tmp
Size 289B
SHA256 2d891e192ce77beaf98e65eac56567f9cabbe169391b896921b64896f5056293
MD5 a1b9611c9ee710a8ebd2f7089c73a4df
SHA1 7fc39a974445270f8eeaf83a5e0ce7409deaeab4
SHA512 5ac8129f03bec6646b17db842726e95d64a9e788b10ad4162b14f377ea4b45061498124459abc75c0589b35340ca1449aabcee64d56d87ff5652c0934b5e82b4
TLSH
T1B3D02B7A326EE3559265A7B3AEC28CCDE70077412B197007B641F9A24AB518853F822E
MD5 SHA1 SHA512 TLSH

Submit Download

is-DE2L3UJEZ4.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\Fusion\impl\is-DE2L3UJEZ4.tmp
Size 238B
SHA256 4cfe6d916150980aa6ef7ad78b80584d8feef6680750449bf285f262059575b6
MD5 1f0fdf44af0a28a12b8fb1dca54f3f47
SHA1 3f6f30a03eeafc0064b03bf9a5fd99e6b5133179
SHA512 1aba2f9f5187331d50a7620b115c0f5474690045823c4e15ff46e33b2da34cd403a0435385c1ed433d4f003b2f10c331b3913c0cf4bcc20fe2cabad7efa9013e
TLSH
T153D0A7393A79E6065275A773AEC28CD9EA4477913B196006B101FD6349B61C413F822E
MD5 SHA1 SHA512 TLSH

Submit Download

is-EGJZK1FS3S.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\Fusion\impl\is-EGJZK1FS3S.tmp
Size 287B
SHA256 4b699df0ddc30f40eee5e8b7524b9bddd5ab6fcb564c89ef1640bfbaea3bcf20
MD5 d9a496d3aa7987f4be8fbc71fb5aff96
SHA1 92fde28fe7d28281137b874281cddab22b95114c
SHA512 5bccb56372bfec041ab3293ffceca728bb6993db921a00e67b0dd4100222f7a244d030ec27c2c9596bb49791d58529b5fedfde5a5e79ea2744267218aee98f90
TLSH
T1B0D02B39326AE3159265A7B2AEC2CCCDE70077412B197407B241F9624A7518853F826E
MD5 SHA1 SHA512 TLSH

Submit Download

is-EOXYC6F75U.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\Fusion\impl\is-EOXYC6F75U.tmp
Size 238B
SHA256 d75df93ad2045d962f424f8fd34d1f6b78867bb3eba785dbfdde3ae44ef23966
MD5 2b7f308b2794714b2ad9b08ab18a1215
SHA1 12618f7775010413973fdd8e7557c926a01302cf
SHA512 f0ac2b57a433ea114c820181c03487b30d1f7dcd22b9536a22515279271ecc78220bee0b117ee0d91a604cf0791b3647c039e1d78c06a87c181a2fa817771117
TLSH
T1A3D0973A3A39E2051231A733AEC28CC8E60077813B2C6006B100F9A309B908413F812E
MD5 SHA1 SHA512 TLSH

Submit Download

is-JOJ4D28YOG.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\Fusion\impl\is-JOJ4D28YOG.tmp
Size 292B
SHA256 0011724117b9d18fb43cf7b2531b4c42f211162ed949c4eda3131b2b6d926449
MD5 289b72c39de8bfa01515cab26f1bb05f
SHA1 fd6c0bd674847ef12289e6a249cbdfc8185dc086
SHA512 5417c504d3c9debdeb4fddd7dff9457a3e1cbe8cd1a469fb549df44a64ca1248637733dcce80aa432e5de21308f3eb47c668e124a41d08ed6565d657c0a5c2f7
TLSH
T1E9E027353169D315527597736DD14CCCD74077452B157007F641F576477518453F411E
MD5 SHA1 SHA512 TLSH

Submit Download

is-TX5DY0TDT1.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\Fusion\impl\is-TX5DY0TDT1.tmp
Size 286B
SHA256 d3adf1064f3de6eea1b87932a87127c65aea8361af560e114e84fee16c8742a1
MD5 c59c5a89a2db94438a66fa0a03d2a191
SHA1 85a1cc174dfdad841cd21d57ee5c9a613b320e6f
SHA512 1b5a2a7502e91c5028b643bce9299f5dc9692dfef7b6ac1f983eb49d25be865992d42cd900d2413e2838174498479bfb652a96f51e25066332ca211f2cf774ed
TLSH
T1B7D02B3A366AE3159279A7B2AEC28CCCE70077412B197007B241F9624A7518857F822E
MD5 SHA1 SHA512 TLSH

Submit Download

is-Z05XQ5W32C.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\Fusion\impl\is-Z05XQ5W32C.tmp
Size 288B
SHA256 5c02a16c043e94495e7c120b67c0864c90b7258bfcbcdd1621a20a1bd8a187e0
MD5 ca38a34019580bc5ef2d7e561790c2f1
SHA1 5ed15b4860ee64e2043494dce2696ff64c2c4673
SHA512 07465e1359d3385c7739f9495f4a99f3844240408677e4c7fa44688bcbd347be4e5558bf63d69970c7c6e348fecc46cf016d8b90a752234a1de151a1199ed9d1
TLSH
T110D02B79327AE3159266A7F2AEC28CCCE700B7412B597007B241F9664A752C853F823E
MD5 SHA1 SHA512 TLSH

Submit Download

is-8730HIW68U.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\Fusion\is-8730HIW68U.tmp
Size 1KB
SHA256 0f992cbe87abccc925caa140371d981e83eb1fdcdd1c1fcf2f766da344f74e11
MD5 a64fd687dd9c6c43114e7df72b90c54e
SHA1 46894b55cc43c271051ef3112aa785aa245811e0
SHA512 1a121874bbfc2d8525d331405af2963c3fabebe9915d2bbe8f354674128bb6a89a15cccdf0581f3598e611669eabaa92c7b31ae92982d7cd17f128ffd453054b
TLSH
T1EF210F1440760334623AE3B5ED13C89CF736A567A542525A3B1CA2980FF48A0D366B66
MD5 SHA1 SHA512 TLSH

Submit Download

is-XAWWAU793Y.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\Fusion\is-XAWWAU793Y.tmp
Size 851B
SHA256 529300dab184b8b597775933d749e973a37377c9e15fe295ea232204a0865e3b
MD5 bfee040c4153eb44d30c1001208e6933
SHA1 5c150318b0a3a7e0b779cd29d1da39b8f1911736
SHA512 0e6c55479a9816e15f836ac2254480f88052f4238bc3a32db41aaf203f2791bcf38671858b556edc177eff2617f85c3932485c261def1a996d7d161a1adafd37
TLSH
T180010034536612744FB0A7339F0729ADE750D503A7E170223604A26E2BF044293FD7C1
MD5 SHA1 SHA512 TLSH

Submit Download

is-Z219K54UV2.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\Fusion\is-Z219K54UV2.tmp
Size 841B
SHA256 bfb44b28be8636cf5fedd504b41ded92dde35350a9e437f61f327e413cb18f07
MD5 f8017d77eb191f25de7225bafec62544
SHA1 9fac8f3bb3a492a91594adbfbda1e3eeb41cb46f
SHA512 e65674b3297a663f22ae4f5859b5f5a6b08a3598308c721c56f69afa5dde6dc0e6f63bcdd3e4afc4a9dfda2b1bd0bc647da897166f04702fc91aa0720bd30bdc
TLSH
T1E501E33461A652740EB18732DF0369DCE741DA1793E25012760892696BF094B57FC3D1
MD5 SHA1 SHA512 TLSH

Submit Download

is-UVT34C0CIP.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\Imagine\is-UVT34C0CIP.tmp
Size 1008B
SHA256 e70429dfea431c39cde001e05fad76eecdf8979c9085b03c1e31ab567caf3d81
MD5 8283e28a86dd409173d3cba02c6f9fbc
SHA1 f966004cbf2b30232ef1eae736cb690ab498226d
SHA512 09048bc400e019db0818c625298b8c134286b6917f3073344a7a981832da07b8b84bb43dbfe7ec5fd968e1336d98e77fe26ac697e70ba28d424d5b4b14e7e910
TLSH
T109110430847713A04239D763DD4288ECE7019253E5CAD1AB3B1CD6981FF48E2D3617A9
MD5 SHA1 SHA512 TLSH

Submit Download

is-61KPXEFEJP.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\Material\is-61KPXEFEJP.tmp
Size 1KB
SHA256 981ab6db297e985d37b6d83f26801075ec35abeaff38c28adb2e7255ceae1a31
MD5 3fe1d42f1260a2d70c66895b4d94cc4f
SHA1 40e7abd7dff0113ff44a9e91236cff3638a3b576
SHA512 ad9c36ccc4d98f63657591ae780650b52dd94c58c6c86467159dac1248126f67b4f932f9c7dae4fe835963165662abca0b674ae30dd48151187037dcee4c3ed1
TLSH
T166216AA580B12334427DE76AFE42C4E8D305D193AB05C0DB391CBEA41BF45D0E253717
MD5 SHA1 SHA512 TLSH

Submit Download

is-HSRKVLLWQC.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\Material\is-HSRKVLLWQC.tmp
Size 1KB
SHA256 e0e4088a60473491f649372a1852afc80334163e04426a2644e0acdde09b374c
MD5 a739b224e1d9f4abe9da99269be0dd27
SHA1 d298fdca6538bfefb3622f25a33e7d35c2a15786
SHA512 43072df53f7caf6f3ec8cc95e82113d50a059d6b396d6531948abe7a8ac9e23968e6f1cf215c330aae7f33e329e00a0c2fd93b0daef6462b5bcb1289e2d7ea18
TLSH
T14D210264407613701235DA66DD4398EDE701E203A586919B3B5CA6E80FF0CA1D3BF76A
MD5 SHA1 SHA512 TLSH

Submit Download

is-2RBLZZJ8I1.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\Windows\images\is-2RBLZZJ8I1.tmp
Size 321B
SHA256 d8d024453ec3ba9a000acd9bd1158cbf11cfa3f44f5b836c4d625edd014039b5
MD5 9e481efebd69ba7108298dc11a95afa0
SHA1 552de57ba6dee07dedb59d613c36e247f390ea64
SHA512 34fc249f83ed5eca074436e402b178321b1a06c43ce3b0fab1bfb0a1069d52610c5f0da6173b296c23fd0e4e6e9014a7660582047f54efc1f7eca50637ebdb5a
TLSH
T1DEE07DC0FB171C25D86D427B869652409368664918042C1EF520139CD59D9C84EE1FE1
MD5 SHA1 SHA512 TLSH

Submit Download

is-5VB9GLBLSJ.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\Windows\images\is-5VB9GLBLSJ.tmp
Size 252B
SHA256 31d03a9ab468d6ede3c730bee83099c207202d3e5715735fec452fc5a4bf336a
MD5 ed06a2778cb65d727235c2892d9973ce
SHA1 c9d2599d11afaecddc01d580de4c7957066080a6
SHA512 e0c3c21890f49d7e562364bf984277991d4969bf518c9a252dea2c1ea0800452fa7e4a79313ea8d267003d3b368a8d44aa1b9366fcf85ee8fe3fadeb17129b90
TLSH
T1F3D095C36F154D0D9615507755762052F537394F11107558DB10557D1424F4E517C546
MD5 SHA1 SHA512 TLSH

Submit Download

is-F0EUA299LM.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\Windows\images\is-F0EUA299LM.tmp
Size 205B
SHA256 25ebf2be72c30407f571c0f261114b63427f9573750453d8bdc9427538fd46f3
MD5 070358e9cbc47089e66fbadbd7a440b7
SHA1 b9899cb9237a000cdbc13903742f4eeaaaa8e1d1
SHA512 6b3066b1512aa228fb7582c26eb8d0f0398c2ffd0e08701044756435703280444aa621cd21e3b085e2642ad81f7088f174c808c787c19ea6a568e055c425f6f7
TLSH
T11FD023D1CB0CA4744159021F4D5BC451D53D343D7D2EBC1E480760111517F140266F02
MD5 SHA1 SHA512 TLSH

Submit Download

is-SUL1RO52Z5.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\Windows\images\is-SUL1RO52Z5.tmp
Size 165B
SHA256 68c6ee2c698caaa9ef1e35cefc862148fc3fe69938b5a04917fd91ae6dff1b09
MD5 61ce86b2ac636857f18cd16d667be3da
SHA1 ab028dddb3cffd6da585a053c2f4ee470dcf9d80
SHA512 5b9e4332b40a6e3da03144bc0b87d0d43ba237c57067f673a4588154df6bd37cf09cefbcd0c041aeae17898399948355225a9b2b47e9fa4951a6ed5f2c627b28
TLSH
T1E1C024C77FC54C7F570F347D01571554557F45DD41037405DD54D4101055FC00505751
MD5 SHA1 SHA512 TLSH

Submit Download

is-U16COXUNJ5.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\Windows\images\is-U16COXUNJ5.tmp
Size 200B
SHA256 e5e41ac0591e82110a68f162118267e9a2ca218c1ecfe5c86e8a1ee3bdf4d98b
MD5 6fcf3a3e7107d6bf9326540d47161e1f
SHA1 a1372e07ade535307e85b4f10d8888fd8630ba09
SHA512 bc641485e5c4a47c9fb18082428dc96f780b8a39c57640e5ea9c2ddfebb08c0bef97ed5bb768a1d59fa5accacf77d32f0121f2c2cbe2f2b28a7976b7642ead54
TLSH
T1D0D022CAA2D7A87BE92E092B02FA5500F46F2D98438129048CD094049027580AD947A3
MD5 SHA1 SHA512 TLSH

Submit Download

is-WS83ROHFT3.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\Windows\images\is-WS83ROHFT3.tmp
Size 185B
SHA256 35aa2b3e9967c09aa9b94992cf90d0d3fe0a4523845fede44a74095256d3004c
MD5 e1a932cfa47b4ae48d3a6138b00144a2
SHA1 61f49a8ef7631a25cb9793cfdf983327fd145ef2
SHA512 fb1dfaa0194506a9123cbf8d351e44e672dc7e2209b7ec7558ed4da1fb13284ac1e94388e85c66fb021e09ce401a35bfbe8575c97b17f5822c2066ef668473e5
TLSH
T123C022C193881898A9B810BE401A4984B9292C2A48914A416E0160692C1EC86C48ABC3
MD5 SHA1 SHA512 TLSH

Submit Download

is-KWSJETQ4BF.tmp

Path C:\Program Files\FlyFrogLLC\Happ\qml\QtQuick\Controls\is-KWSJETQ4BF.tmp
Size 215B
SHA256 a96c7bf5832767bdc9d91e2290a3920aec3abfbf2e3814bce38b49483f16f84a
MD5 2006d4b7d0da455aa4c7414653c0018a
SHA1 6685b8360b97799aa4d6b18789bf84a343e9e891
SHA512 703804e6fab0cf44317b7292c547a1348e2e7395e4b71367c32c3b097bcfb3344d3296179bf4ba33a4c752ae58a3873af57d8cdef35a34564205356bb4e6fd84
TLSH
T18ED02352CEECF6A313451C16C44C47E72E53D1544731AD10F05401ED714771C36ABBC5
MD5 SHA1 SHA512 TLSH

Submit Download

is-NUJDGGYRE1.tmp

Path C:\Program Files\FlyFrogLLC\Happ\tun2\is-NUJDGGYRE1.tmp
Size 417KB
SHA256 e5da8447dc2c320edc0fc52fa01885c103de8c118481f683643cacc3220dafce
MD5 e861eb5789c50997d9476a6172d1c269
SHA1 647eb6588b149efe2477fd192c8cab74d018d8ef
SHA512 d8b49a6834c1ea5d73fee6979c59def18900c86d598ea900ab741ce71eefdaaadb4862afefa14e6cc093007eae5d4325857633549f1ade555baa0344b18e6112
SSDEEP 6144:uNsLgQtz9nDZL4tFDjiaOE1DfsnyDQhWmnPIt:iggQh9nD2tFviW4/Qt
TLSH
T1E2947D8273E81C96E9F3CB3889638901EB3779544770CADF1261826DDE6B7D09E34B61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vccorlib140.dll

Path C:\Program Files\FlyFrogLLC\Happ\vccorlib140.dll
Size 344KB
SHA256 19839407c3fdbc824e5bce189bf68ddf8097f12ec28b757797ffa0415c144ddd
MD5 0b4d02b22ffe3957db27d9cc6cff6edf
SHA1 bec5a8eed4434222956d9f0f0482f8562d992317
SHA512 9588f6e2c96b2793598cd6335bf10cdd53acd77886a5f703118c77af676da1ec3f393d55a1b1dc28dd33bf69c4c5bc70c615f8d41e1829e473ff9bbc1163ea3c
SSDEEP 6144:PpVeNd1C++IAU1qsxEW5QcT2Xgs4hiWi/GDhmVejWXaV+GpfOqmIzt/mtBGgVa0J:Pp0+Xgs4hiWi/GDhmVejWXabO/IzgtK+
TLSH
T16C74E4277B9C4CC3C931A0794E978309E372694207A1E3CB0691970E5F7B7E8AD3B665
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140.dll

Path C:\Program Files\FlyFrogLLC\Happ\vcruntime140.dll
Size 121KB
SHA256 d5e4d9a3e835fa679450145d6a7d94e36573a509317111904d9b3712c30d9066
MD5 6ca4edb2b52ec46c7fca3fd372ca6c00
SHA1 3d2998a27d164dd7cc3bc7d3eca08acf89a0ee42
SHA512 bda93ff2c306c82f1942ebd538f5c77ba593e3e20792159b2a2f5ebd086c524f6c6bd3de5ad722c71ff7d832d0149608289929e9b23f7858ebb960dbb3422f5f
SSDEEP 3072:ltkenID0f6aifkHWBXjG/Iuecbfmg4DCUil:YWSIHWBXjGlecbfYmN
TLSH
T1E4C36C42B2B401FBD16ED174C2A6AE23FB76B84547209BDF07A58A640F53BE06D3D345
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140_1.dll

Path C:\Program Files\FlyFrogLLC\Happ\vcruntime140_1.dll
Size 48KB
SHA256 1f2d41c4aa5db0bc33ebf7b66d72943a817d7ce6cbe880502a9403823633093f
MD5 cd1b08f4930b276ad78853580b76b5c6
SHA1 a0330279d3d0d47f19ed984726e25260b547a228
SHA512 6bcdd6b16d815d72dc7efd6a2352319ece102f3b7d85c648286e4b3b594b7670d61b7e05c580fc416421e1a1622b38737b1e90080171384e7e2cd5e37ac71225
SSDEEP 768:g3oZYctpzcx0pdESASv83Tw4DYEOMg9z7NONRds9zb:kc6wk3TgEqz7N6Rdkzb
TLSH
T140236BE4977C4082D8ABA870C1E6EE17BD38F7A61B10968B07A5D14C1E537D1AB3D31A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140_threads.dll

Path C:\Program Files\FlyFrogLLC\Happ\vcruntime140_threads.dll
Size 37KB
SHA256 219915cf20822f34d5e7c1fdd4e21ae7f3396881096c51036225fb8f84b47afa
MD5 e57bb2cda101fda5c72f3af09b035bd6
SHA1 77363f6b41d022dbd34e182a93087fc63a5b08cb
SHA512 cab172e140cc2da4444a0c37a42187c4bd29997aa5522f5cf076d8d40cb0116a9e905162349204415213c75ff34cca98cdcc5a7ee9535a8d28945af726545441
SSDEEP 768:CjJ+AiHEFeLUIHmJ9crFciw4DY0zxOW9zeLCbpiFds9z9:+uHEwLUIHscrFcig0zUizGEpiFdkz9
TLSH
T126037C86D7684487E9EA9870C2B9DA47BD3EBBD20B5041DF4381FA480D633C2EA3571D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

state.rsm

Path C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\state.rsm
Size 1006B
SHA256 003e559088e66700ccda8d3b257eebc0a793f87ea113bc9774b6925e5c10d28f
MD5 c8c35d81cf035e636aae40dccca19c6c
SHA1 711ab14ba9ff51aebd4c529724453000454c912b
SHA512 1756de3cb99982356eb49ce19709f90076c6a08945635435514bc761511492076ba01ad77a5aefe2674e20008713e953f2db983f1164e4ee62250735e8e84219
TLSH
T1EE11F4616FF6511AF3FBEE3028F912141ABFB8114D31A12D0081218A8F32A50ED34B1A
MD5 SHA1 SHA512 TLSH

Submit Download

state.rsm

Path C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\state.rsm
Size 986B
SHA256 049fa4111b769b8885c35d5a3a70375331714cdfa8be58c7bdaacc1ea6f781c2
MD5 2e2254dd8641d06751dfa77fee5118ce
SHA1 6dd1ffd41c9f539a212205823401209482003f95
SHA512 edb28a38a3c4d6459aaee2db38454e8ffddcb8ea52a096ec61bfee95810d633c869593319984e2c9738d45356bed2660d5ce0473e1f9c0792c16206b33a84088
TLSH
T11811F4616FF6511AF3FBEE3028F912141ABFB8114D31A12D0081218A8F32A50ED34B1A
MD5 SHA1 SHA512 TLSH

Submit Download

073cc29c-c49a-432b-ae22-e54cb606a2de.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\073cc29c-c49a-432b-ae22-e54cb606a2de.tmp
Size 132KB
SHA256 627141a6185841eef9d189dce8bbc3e1afeb86fa5d12aa901bce3650fbc930f9
MD5 d7acb6d32ae1dc842310b6450acc9ff5
SHA1 6543b3a9e3c6bd7bf620b127aa53a5e221008067
SHA512 29517a1399fbbeca781a89eb9993a2ac9ecd733b1b991503770d46e23404fd7d25b7ec9e25c34743df2c23d5d613ec5b865b4944334a1248ea37f1d376a767c0
SSDEEP 3072:mhIvyBkjartaCS+uW8lH5W+f1K49XLWb9TBAPi4NXbHKji+ZLzB:mNPtbmf1K49XLWbEPi4NTKlLzB
TLSH
T16FD302217D51BCB4A9EEDB21B1502A16AAB8D94E993D3BE51CDE3F8805E36D9C304C13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

217eadb3-3a69-4a02-ad1f-b4cda6373560.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\217eadb3-3a69-4a02-ad1f-b4cda6373560.tmp
Size 131KB
SHA256 83776e962a46c80cba536a3a645cb2e7db96d89fea863f52f22b4f15a4216a79
MD5 e0debab676cf0b546e2088fe3bda8f40
SHA1 448ec4aaa16188d720375cd1a9dd349109721ada
SHA512 c0d353e61ddbf4a38994f47eaddecbfe3f35121c72600b8d1931d8bac3bb07a56cecace2439c68676d4b541b208f458ff2917ceeffc07b163a22c5ed0ad8a970
SSDEEP 3072:oIvyBkjartaCS+uW8lH5W+f1K49XLWb9TBAPi4NXbHKji+ZLzB:EPtbmf1K49XLWbEPi4NTKlLzB
TLSH
T159D312213E41BCB4A9EEDB21B1902A15EAB8D94B953D3BE61CDE3F4805E36D9C304C13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

34cc951b-e6ed-4bb3-b9e3-b141665606b7.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\34cc951b-e6ed-4bb3-b9e3-b141665606b7.tmp
Size 132KB
SHA256 cd4853f2413db62c5b8012c8eaacfdb56b17f8d9860531f040e04abc785f8748
MD5 e35152f97947f428dc06415586e6b928
SHA1 392be662362d93cba423e4e92d544cbf84035196
SHA512 c0ff0eac435730c483b06f68d6e9eda9c5f5686daa6282871f561baf537f2edd7f43431b1701629b2fb795a78af476bbec17a44f07b9f48400ea2b3f9314180c
SSDEEP 3072:8RIvyBkjartaCS+uW8lH5W+f1K49XLWb9TBAPi4NXbHKji+ZLzB:89Ptbmf1K49XLWbEPi4NTKlLzB
TLSH
T1BBD302217D51BCB4A9EEDB21A1502A16AAB8D94F993D3BE51CDE3F8805D36D9C304C13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Size 40B
SHA256 815cdb68bcd8d05ebe6ef92b9edc202dd952ce11452877735c62a4fe87a2297c
MD5 3e3f056184711d849315f1a7d5dcbf8c
SHA1 51f75e4451b56fe04bef5fab64f7bdd88c545f7d
SHA512 dff6b24439443de78407074a54d6419f5dcc96efeafed4e80edd7190f395e4a0203857cef17f2b22aee9cc10c0adf00f55c74dc0993a66067951a9fa0b0573c8
MD5 SHA1 SHA512

Submit Download

6ee52572-aa0e-4c8c-81de-1821faa550a3.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\6ee52572-aa0e-4c8c-81de-1821faa550a3.tmp
Size 11KB
SHA256 80771ca56ddce23f92552d1b35a1aab8d08862e401f4a8cd24a64b041217650e
MD5 9b6f30d2eaf991218e9f27cb7cc79878
SHA1 94e30f36462caad95cc96914f2d756b1ad57e262
SHA512 033b479135118696b89c4d274eb4a2b1d8eaf18d96f53f883de45c41ecae15cef77c38b0b20a14013e6510fec778289430e4c5881daf3cdba825e7ed24cc5670
SSDEEP 192:esH4K6Cc7KxkXqK4I40pUZNCgVLHrKHfFKslE/E+XzKD/BE+ErUkKN9v5Y43HK6H:lHjJc7KxkXqKf/pUZNCgVLH2Hfgsl1+8
TLSH
T1E932EA27A88D6E3F0FE8D50DC8166F8FADF5025672640D2852FF9D0803A97CA115A5FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

78abab25-2422-4f61-ab85-8cf066e3c12c.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\78abab25-2422-4f61-ab85-8cf066e3c12c.tmp
Size 12KB
SHA256 b3701ae67b13e4223785781c531f3b900abae3310aae0e92afbc30a6e1d643ea
MD5 5aeb291652ee0335423e04a2796bfb32
SHA1 a42c64e4993bec4b25e05a97062a0d5b7bea331b
SHA512 dcc622555b6d0753b6bf4e7c3090cb7d376cd7abe3c09ab97dfb251392c2f2b95a861c615f41f67ec9d4980ef8c255a951b29c3e8d3925c29f63d16ff273f449
SSDEEP 192:wRiP977v7aqpAPRp20959LHsb+WNnP92Ub2xTVybKRG0VyIsnAUge:wRiPNDrUXn5wF12fydwe
TLSH
T19742E52DAD543A7B9CDBC22AFA667B47D3F5102174952E84E7FC882C24E75CC2227817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 1KB
SHA256 7118abda25dacecb6f13590ddbc4b7aba87fb35a87290291e7c0cbba1c6ec145
MD5 6ca05f37817dd5985dfb2fa7fd6b6ea3
SHA1 3163205eca0093af0d770bf7577fa5c2c4bef561
SHA512 4e1f394586219ae53bae2359b78bbe41dd98cbfb8c8c5105bcd2d07c80f27b73dced41d542528b2afd487950ad8911c7f98360062411098f95d8e315db530d93
TLSH
T1CB311B0E298C1093EBC9C1B019DDFCD87B3894300CB7AF337D16A1B49696FAC24B95A0
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 6b8f09972378bb0bd83736d8897cddcd7c0de7c20872be294128d0a8eb556bfc
MD5 3632c1d4fcd34216a7f075a10ffe3a09
SHA1 5a52f399ffd35edae42cc3533f0bb706a34eed9e
SHA512 776ff46b2cec31712b8390816589a7559ea5286b19b6d36b7eefc7bcf3fe8c2ac8b76fea3fe3ef9e2a2dab82f903d3241d67365a1e1d0b96e714d1e526a282c5
SSDEEP 3:MsEllllkEthXllkl2zEklagYqll/:/M/xT02znagYet
TLSH
T1544404047FCC0405C51050304035C3D05374D45005555743345144177CCDD440C40100
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_github.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

7f63f887-3de4-49b6-aa41-b4af838cdc8a.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\7f63f887-3de4-49b6-aa41-b4af838cdc8a.tmp
Size 3KB
SHA256 fc26440743d5c572708c9eeab678cbece3008926721def2dc4e93084c7f29714
MD5 a8b6116da9ae90f9e4719d114738498a
SHA1 c1222629a5fc7f2ddfd7e95a15c937461ed9f296
SHA512 b1189382721743ad5140e2d12d10582a1689c140272b43a1357047eef4aa6a6a440b9d30314ee32118e52e74ff05c17847fb404fd945c22d490108a4d377b1f9
TLSH
T14E61A9F783F1956D9A1196F0EA14AE1FCE290524431C387688E47E1BD3E3972E14179F
MD5 SHA1 SHA512 TLSH

Submit Download

c99d1d92-5a7e-4d31-9081-b844c5ebd52b.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\c99d1d92-5a7e-4d31-9081-b844c5ebd52b.tmp
Size 1KB
SHA256 2e98a7ed8c6b0b26718559793e7c856289bd2e41a19b90e35df72d87c13c525e
MD5 0ef7220f62b1458c698207ec8f0c9212
SHA1 455b1de8de6761ed3b9d9285e9a0458a4a3e2f2d
SHA512 407c96bd131042678627cc4cf910b4dabda351e13f89aaba4521a739bba457c696c6ea0330167b6a27fded6dbb048ba5b0629db27ca73a042c8089c98bd7f7a3
TLSH
T1C9419BF3C3D88A7D8941A6F5A7152F1ACD290A14121C3C96C8D4EE5F57E28F2D20014E
MD5 SHA1 SHA512 TLSH

Submit Download

e2571122-6371-491a-94bc-8685350b5123.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\e2571122-6371-491a-94bc-8685350b5123.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

f3a5b213-5f8c-4061-87c8-9113f85c30c8.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\f3a5b213-5f8c-4061-87c8-9113f85c30c8.tmp
Size 1KB
SHA256 3a2a83835b201f31a928c1a654d20ae008f574edf620f80d9ebd414e80c5daff
MD5 4ca83ee9a51c1d48b8be2d9dd3621550
SHA1 6a5b3065712fd247f798090ca4641d7fe165b8f9
SHA512 0d5dff4e5fb96d36a0d49407656a3082750a9198f7c90a537afa5487cc3d40473c51b1d27cd1c0aa5b3d48b1bf605ffeb9f22cf813bb1692824ec454eedc7ba1
TLSH
T1D5218AB7C5FE786B287E48A70D0478056CBFA837111398F5EAA6862DF0C64F74B12456
MD5 SHA1 SHA512 TLSH

Submit Download

b9ab6b84-1a6f-4d64-b14f-d94bcf798a9b.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\b9ab6b84-1a6f-4d64-b14f-d94bcf798a9b.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

bbfe34a0-715b-4360-80cd-29ef3054711a.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\bbfe34a0-715b-4360-80cd-29ef3054711a.tmp
Size 414B
SHA256 27cfcd991a256c158efba71cab3a62c2d75bac90d61ac6246d420145c1b1a07c
MD5 314b0235c080b3f418c9da0028eff883
SHA1 ac203900c1dcce644a0f55bb02a225bd1934f4a2
SHA512 b4ae3ff4fef856f58d491d0b607bff507deb7baa81f88f1fa51d618ddc408f51ca739083a752c0cdbfdc1edb72d0f9cfffced21b9085b9a77a84a1d229e878d4
TLSH
T16AE0ABADCC30AD330DFC031C50545B46E30413872B414F8F363D810C8FB62364A4A85C
MD5 SHA1 SHA512 TLSH

Submit Download

be84b08b-6787-4f45-bdef-d09cb4ed0245.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\be84b08b-6787-4f45-bdef-d09cb4ed0245.tmp
Size 12KB
SHA256 6f692f275bb63d560f1030d5cb7bae4f0a2b573c106d0d10fff245b86a255e65
MD5 e16ae4488cbd1151660ac169c4833e31
SHA1 f552658f575e517dcfab2f78a5ff922400ae1cc3
SHA512 923ce9ca6ef17a2f0b7cad7a11cd9546bb953af26a01b94f4fc51cddc0334f491afdcfbf273387c27c57cd06709874e8812e2a098f498f5e201f0fb575553661
SSDEEP 192:wRi/977v7aqpAPRp20959LHsb+WNnP92jAexqVybKRG0VyIsnAUge:wRi/NDrUXn5wFpe4ydwe
TLSH
T13B42F62DAD543A7B9CDBC22AFA627B47D7F5102174951E84E7FC882C24E75CC2227817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

geoip.dat

Path C:\Users\Admin\AppData\Local\Happ\routing\0\1.update\geoip.dat
Size 15.7MB
SHA256 304ac8a1cbcc8166e4f5a4f32955e4d0fb77a1bd713583e371b30ee27f3659d8
MD5 8992ff6c5505794afa9990e86ebee2ff
SHA1 2a2cc9230c5f1c69c9a7fc30df128ca638173643
SHA512 c808ccc2b759bdd3e8aa34ec8c1e758610e91a5fc1a0518693f3e8551fe086f4d44ee6051918d79ce0db6ba9465e89534aecafbe683b24fd738b086e8b90c1f8
SSDEEP 98304:e3N+ls4WchLogWVZuBDncOkeYfF8UyeSxFzMJIrn5/tr4Me6VdhI:bUeP+WI
TLSH
T179F6BE37D63150F6EE9BE57CC35D29226F0FA4A498E4C0B1A2C51448FEA8A90F536F4D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

geosite.dat

Path C:\Users\Admin\AppData\Local\Happ\routing\0\1.update\geosite.dat
Size 10.9MB
SHA256 f5bf5d977840be4b9e73856b20f8d6dc7ef72285330c5f270d1d64cc2bf7982f
MD5 2d966c4f0fdeb21c6b08474cef5140d0
SHA1 0f2614adcef039609a78357b8940bfebfd409ed9
SHA512 5da906916515bbf9ab4867d77dfcd6b3f2bad6d67ca6da03c4662fa7a56b3f7b89c31a470709fdcf6ae6b7376ae146bddebeb74c2b86f799e69a02b6649b3825
SSDEEP 49152:r0BpZOW3G/t51dIdtuQTl3lGleiYzyF8vgOiDMN3KKMN4kA/d2/fQJ17xclZ6BMd:YzyFO0
TLSH
T173B6D7FB4C14469132646A25E20D24C8340CA3B596DCEFD28B285BA7F7E59B933C49FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Setup Log 2026-11-13 #001.txt

Path C:\Users\Admin\AppData\Local\Temp\Setup Log 2026-11-13 #001.txt
Size 615KB
SHA256 56573f2eebefd1d699d03ec411ba2ccded1bda235d4db2b09310c2652693035c
MD5 748afda4c45d3cf07d3ee04339b2f385
SHA1 211debd26bb64fdd2ac357a10b920ed28ad88a96
SHA512 c0bd9b3e1a9a56f656a9bb8b5fa1df7924e287f8e917d3430c263aea9c2c100757b40e25ed5e8f5a652da55cdda80500439548976c4dd80987b846fc7e4aec3c
SSDEEP 1536:sHhf164mgCfmTTlyx+RVjvgG3xJtq6pVHlbTRS3OiAINrE+PNre+PNrm+PNr7+P5:gdxj
TLSH
T1ECD447860EA9027162D299C1773F6D5C720E343FB10F27BC7BEAC51E21465239ED29AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dd_vcredist_amd64_20261113114213_000_vcRuntimeMinimum_x64.log

Path C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20261113114213_000_vcRuntimeMinimum_x64.log
Size 2KB
SHA256 7ecb04f5b1ed2d8a17e91809b6be80ad0fce8bf2e4e5e07b8eb58f038099e255
MD5 78dde32173c0204bd823314ba3e701f4
SHA1 95b865289b4ca6a8728dfa8dd2cd3d6e14f376ba
SHA512 61dd80f22af50c045906d937235cd414b7e9f8a57ef7417393f324d35765585e84dee328b0e04606e56f8a70a5c7964223523fae196b221a75ecd62ad4ea2812
TLSH
T10A41DB562BED0D06B2B797479DF3C0629A33FDD264348B0C2285422A467BC01BC6C7BE
MD5 SHA1 SHA512 TLSH

Submit Download

dd_vcredist_amd64_20261113114213_001_vcRuntimeAdditional_x64.log

Path C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20261113114213_001_vcRuntimeAdditional_x64.log
Size 2KB
SHA256 7fc080f652e38717eecfeb5f0dee487c93f58f3e4740b2be0081829c65e0657c
MD5 144fc4f5d672f4981bb0e73ce37771d7
SHA1 5ae0a2770b947119a1b381644b0ac5d1c1a6f83a
SHA512 56cc9fe75236bbdb98a52c2733808979856a135656eb29a559214e0e943343ee696e27aa660db6aeda3474d0fd0091ff20b4c465997516109045b17cd5eaecb6
TLSH
T1BE41DA661AF50905B1BBD74BEDF3C0224B33FDD1A534CB0D2384861906ABD02786877E
MD5 SHA1 SHA512 TLSH

Submit Download

vcredist2022_x64.exe

Path C:\Users\Admin\AppData\Local\Temp\is-UZZ0WB7MLS.tmp\vcredist2022_x64.exe
Size 24.4MB
SHA256 cc0ff0eb1dc3f5188ae6300faef32bf5beeba4bdd6e8e445a9184072096b713b
MD5 486f81facf798678c3244c7cf35a557f
SHA1 21ce0ee54bff57f69fafa741025bf2f15b356405
SHA512 e131b93acde5ffc76c19eb0784183a1e94dfa9fe06111a7830eae3ad8583895575dd4dca66aa70efddb243c95735a0105efcd3042b4b5ca445d3d8e8c39d957e
SSDEEP 786432:mjjpx5hYBug51eEdO41UnAyijgtUHFt9q4YYOQdV:kpx56Bu61eGv1pjg6pb
TLSH
T10A473332E0448026EBE61037A168F5206F7CF624A3649ABBD6CCED0D37B649717FB615
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

setup-Happ.x64.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-VCUGH936QI.tmp\setup-Happ.x64.tmp
Size 4.2MB
SHA256 d219493d57a963791cb45fe09578e190a1c902302b0cfab40de40e502a874ba2
MD5 e753b07a6685f3d33641bd0f39950fde
SHA1 898513a9d1c7db289e477ffbc6ccca27eb79eaec
SHA512 3058bb8f0b43f1db941567425f4f1061a9c24275530fe24cf91d7ab90541bbc7e478a0184d6bdb9a4435b0240a640a81fe5a2ce5b4c7e22bf023f7a2edeb69b0
SSDEEP 98304:B3U5HY/KwjoYY1j48UWm2eTMFdC+Jb333PC:24/1jorPmEhC
TLSH
T11F268F03F388753EE4571A3A483FA680983F7A213A15CD4B6BFC295C8F396416D2A757
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f397247b-608e-4468-b5a8-3f14b045dc58.tmp

Path C:\Users\Admin\Downloads\f397247b-608e-4468-b5a8-3f14b045dc58.tmp
Size 15KB
SHA256 d0b28fdd8efc571a12308148ec9abad2c094406201073a6574d50d53d851ef7b
MD5 bcfed4bf9af899a45e3a00cd5682612a
SHA1 5504e03537a79271e55250d55c8ad1dc932ebd37
SHA512 2a3418da274d93214b65cf8c447304c848691c71c6d65a2500fd1b21c3abe91243f600284c86590d43fe7ab8f1d1b1d4e3d9c470598877acd2bad7489cb0a979
SSDEEP 192:n8JeAQOLYBHhSBGAyPBJUAgwUmwsx99PtuiAfwyYl26Ozl1STKaLMM5j:xIkOBGzP/Rg4wsx99PtLUnt1SWaLX5j
TLSH
T106620A03A24AA5B7C92D833111FAD62AB577157035174E72DEE8D0794F88091AD3BBCE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

logo.png

Path C:\Windows\Temp\{3F5CAF06-6E39-417B-8493-CC274216402D}\.ba\logo.png
Size 1KB
SHA256 335a256d4779ec5dcf283d007fb56fd8211bbcaf47dcd70fe60ded6a112744ef
MD5 d6bd210f227442b3362493d046cea233
SHA1 ff286ac8370fc655aea0ef35e9cf0bfcb6d698de
SHA512 464aaab9e08de610ad34b97d4076e92dc04c2cdc6669f60bfc50f0f9ce5d71c31b8943bd84cee1a04fb9ab5bbed3442bd41d9cb21a0dd170ea97c463e1ce2b5b
TLSH
T1CF312CF34748B7A7D30581351471819AD242FFD8F9CE291E35CD5307664018115C75CF
MD5 SHA1 SHA512 TLSH

Submit Download

wixstdba.dll

Path C:\Windows\Temp\{3F5CAF06-6E39-417B-8493-CC274216402D}\.ba\wixstdba.dll
Size 215KB
SHA256 e921f69b9fb4b5ad4691809d06896c5f1d655ab75e0ce94a372319c243c56d4e
MD5 f68f43f809840328f4e993a54b0d5e62
SHA1 01da48ce6c81df4835b4c2eca7e1d447be893d39
SHA512 a7a799ecf1784fb5e8cd7191bf78b510ff5b07db07363388d7b32ed21f4fddc09e34d1160113395f728c0f4e57d13768a0350dbdb207d9224337d2153dc791e1
SSDEEP 6144:K6EZdi6e93SuDeTKZxQfsRy26BqbUHYJe:K62i6eNSYeuZ2sRDK
TLSH
T15E24AF12B5D0907AEBFB19305939E5216DBDBA210FA0C9CE5348AD2B2E705C1DB36737
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cab2C04DDC374BD96EB5C8EB8208F2C7C92

Path C:\Windows\Temp\{3F5CAF06-6E39-417B-8493-CC274216402D}\cab2C04DDC374BD96EB5C8EB8208F2C7C92
Size 5.4MB
SHA256 7dee5b77719fb6a6627145357c5a93bf8af2a9de54d34c79ffc1ae71d52c79f5
MD5 ea81447ef1038bd5726b36063896b39a
SHA1 8f484a24bfe42276580d120c200a99bf604eea70
SHA512 31fe32db60d9a0579374ce3a51b586ef0fa7b891aebcd33613a818264bb9eeccba4f2b5ac4b95feca144d4be6146e99d9f5dfa7bfa5e11cfae46e06b41da251f
SSDEEP 98304:JnfKe/OhMAf7WUHioDNe/rdRlRFQdU8o2VDF/ZXZsHOtnF9r:hPAzWxZgU85VDbXZs+z
TLSH
T17D4633018111941B63BB250753FCF1518FF2F087A4B672BA3BD2934E4AE78CF59EA51A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cab5046A8AB272BF37297BB7928664C9503

Path C:\Windows\Temp\{3F5CAF06-6E39-417B-8493-CC274216402D}\cab5046A8AB272BF37297BB7928664C9503
Size 964KB
SHA256 640aa6c516c72444523b8fbe034db46ff4e118ed02705340e3ccb62d426ff040
MD5 efc41c00aadf8b2050ecf9e38e9036f1
SHA1 bc4afc5cb90411f0e4e874372f1fbabab0cfd33d
SHA512 bc9cc1e83acc8dbe53501ca4554dec6d31cb0ccd3609d0e760c7fdbf73fbc4c46baf14c397667eaeced284506d0a9a0bdf7777736f05ae277e9e2f3349371136
SSDEEP 24576:+e9fUQD6DozFBvW8lRBAaKycdSCTbiVTPf1eg++4:+exUQX/e8lzAjdZTbiVTnw
TLSH
T15625338685244AC1694EEC06B346F9BF74D331FD59B5B8032A262EC8E3D33857593937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcRuntimeAdditional_x64

Path C:\Windows\Temp\{3F5CAF06-6E39-417B-8493-CC274216402D}\vcRuntimeAdditional_x64
Size 208KB
SHA256 7df26ee2169ef6c61c17675e1a2edbaf01bca2ed1a0bdc0f8396d029a336c1f7
MD5 f375f3d81a661e188146d701d8ed3ba9
SHA1 0851e6da56fa65981ae27d9eb7e396afe1ea0c73
SHA512 d67709e2f25ad12532ed33d26c0ae365b7a4eb0e6711b2ee7dda489480b9976b4bbfd0b902cbb847cb602922a1653a2981741718fdec4091ae25f07fe5b8bf2a
SSDEEP 3072:F9laht5Xel69YGnfxC2WB/bEPcefrKROjibDPxriT6qF:/laZeKFxCnBheIdlu2q
TLSH
T19E24AE12B5808033DAFE1A311178DB615F3D7E608F544A9B6364B6AD1E717C08F3AAB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcRuntimeMinimum_x64

Path C:\Windows\Temp\{3F5CAF06-6E39-417B-8493-CC274216402D}\vcRuntimeMinimum_x64
Size 208KB
SHA256 fe5af8f2efc9bbdd2c23f22f2d3daf480a4047acf3b1edc6ecda81147c1ec14f
MD5 23626831f9a05572c6ebd133e5ffc4b0
SHA1 ad044cdf938a5532aa270c6bc687db95d803fe10
SHA512 1b45ea55e7278ec61f0689b70794f371d56eb2787c22106ebec38d17f1670441a853849460249d08380053bc8b2fae0285845b47ad62670029639d5de5ace10c
SSDEEP 3072:o9laht5Xel69YGnfxC2WB/bEPcefrKROjibDPxriTA:+laZeKFxCnBheIdlu
TLSH
T1A3249E12B5808033DAFE1A311578DB615F3D7E608F54899B6364B6AC1E717C08F3AAB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BootstrapperApplicationData.xml

Path C:\Windows\Temp\{63BFA209-0F2A-423C-8085-66F478E2D170}\.ba\BootstrapperApplicationData.xml
Size 14KB
SHA256 8c81100f594e3d0bc51e5571e0046f016086207c1c382d45708c30e1d732b648
MD5 7f35d3c6ef5189d916dce7f974f2e5b8
SHA1 37f9ed9a2ed80fdafd187ce9a38ce5b0c952f3a2
SHA512 ccaafb8ef675e2625561a244f80a4d5e05c590211055e76afe4a317b2220bab2e9baf8fe968a46b226e3ad4e2d064f1551d88e47da798d24ed365331840d4c03
SSDEEP 192:X0sveDnH5zHqQHG0Hd8Hz7HE06HA0rH3pJp+tHxLUrnDzLG0LY1ftHJr5e0II0B4:X0s6dLbmnoNwtR03J+ftcItVEp+Eo
TLSH
T1DD62D5142AFD0159F1F34F88EAB945566B76FC963E38C81D01611E0E4873E819972FBB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcredist2022_x64.exe

Path C:\Windows\Temp\{6614CEE7-6B22-488A-A280-9907AB751B04}\.cr\vcredist2022_x64.exe
Size 670KB
SHA256 568c9ba533624084ea18f7a562b4aa2249ed4e41281524a061a0d0b1008cf6bd
MD5 bc9c8a6a42e8d3ea18f8da78d5031820
SHA1 07812a4b945364d04627363e46ab38de188281b3
SHA512 b583f41b8f9cbb2b04e4c7403b54241bf4c51caefdb0bbe9184202dc615f599b496d65f6d36984b75f9b9003289c0c13066dc1e6eb294f9139248595114b4f73
SSDEEP 12288:n3mgqnIZuYfCYqFet4CovkM7x61nE4rfDDIcbMZ3Mya:n3WnIZuMCxezot7MhbfDBMZ8ya
TLSH
T10DE49E32A5604033F7F10573B928A6303E7CE3282B51C9A9D7D4AD1D7EB4892A7F7256
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

license.rtf

Path C:\Windows\Temp\{7F206A09-DDF8-42F0-BF08-0108D8FD935E}\.ba\license.rtf
Size 9KB
SHA256 8099dc3cf9502c335da829e5c755948a12e3e6de490eb492a99deb673d883d8b
MD5 04b33f0a9081c10e85d0e495a1294f83
SHA1 1efe2fb2d014a731b752672745f9ffecdd716412
SHA512 d1dbed00df921169dd61501e2a3e95e6d7807348b188be9dd8fc63423501e4d848ece19ac466c3cacfccc6084e0eb2f457dc957990f6f511df10fd426e432685
SSDEEP 192:H8kZ1UVDWkiWZTIsp/4hghFF1Qf4lCfnEtHixEGx736wHqItfSpOtJ32:cM1RWZMi/zzlOnjt5HLoa2
TLSH
T13F12A7A8234783D103D213D7055294C1B71F0BF6AE7AF95C34E4D53826E2E6CB6B91E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

thm.wxl

Path C:\Windows\Temp\{7F206A09-DDF8-42F0-BF08-0108D8FD935E}\.ba\thm.wxl
Size 2KB
SHA256 70400f181d00e1769774ff36bcd8b1ab5fbc431418067d31b876d18cc04ef4ce
MD5 fbfcbc4dacc566a3c426f43ce10907b6
SHA1 63c45f9a771161740e100faf710f30eed017d723
SHA512 063fb6685ee8d2fa57863a74d66a83c819fe848ba3072b6e7d1b4fe397a9b24a1037183bb2fda776033c0936be83888a6456aae947e240521e2ab75d984ee35e
TLSH
T11F519B6778CF639028335125EAD2966A6920C5DC923F2DF1FC4A914B838D522A373F57
MD5 SHA1 SHA512 TLSH

Submit Download

thm.xml

Path C:\Windows\Temp\{7F206A09-DDF8-42F0-BF08-0108D8FD935E}\.ba\thm.xml
Size 8KB
SHA256 f13bae0ec08c91b4a315bb2d86ee48fade597e7a5440dce6f751f98a3a4d6916
MD5 f62729c6d2540015e072514226c121c7
SHA1 c1e189d693f41ac2eafcc363f7890fc0fea6979c
SHA512 cbbfbfa7e013a2b85b78d71d32fdf65323534816978e7544ca6cea5286a0f6e8e7e5ffc4c538200211f11b94373d5658732d5d8aa1d01f9ccfdbf20f154f1471
SSDEEP 96:8L2HdQG+3VzHfz96zYFGaPSWXdhRAmImlqFQKFBiUxn7Ke5A82rkO/pWk3nswP:ZHAzZ/3
TLSH
T1D30259B546DDB801D232FB1166E231D27F126971C0C46E59F90C2AFB5FE1140A8B72BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wixstdba.dll

Path C:\Windows\Temp\{7F206A09-DDF8-42F0-BF08-0108D8FD935E}\.ba\wixstdba.dll
Size 191KB
SHA256 a4efbdb2ce55788ffe92a244cb775efd475526ef5b61ad78de2bcdfaddac7041
MD5 eab9caf4277829abdf6223ec1efa0edd
SHA1 74862ecf349a9bedd32699f2a7a4e00b4727543d
SHA512 45b15ade68e0a90ea7300aeb6dca9bc9e347a63dba5ce72a635957564d1bdf0b1584a5e34191916498850fc7b3b7ecfbcbfcb246b39dbf59d47f66bc825c6fd2
SSDEEP 3072:OXoiFK6b0k77I+QfaIl191rSJHvlalB+8BHkY6v53EfcUzN0m6I+WxBlnKzeZuqt:OXoQNb++gDrSJdr8BHkPh3wIgnK/IU1a
TLSH
T103149E11B5D0907AE7FB1A385938B5216D7FBA201B60C99E17589D6F2DF02C0AF35B23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1228-328-0x0000000000F70000-0x0000000001059000-memory.dmp

Download

memory/1228-317-0x000000000102F000-0x0000000001030000-memory.dmp

Download

memory/1228-318-0x0000000000F70000-0x0000000001059000-memory.dmp

Download

memory/1228-5651-0x0000000000F70000-0x0000000001059000-memory.dmp

Download

memory/2532-613-0x0000000000A60000-0x0000000000AD7000-memory.dmp

Download

memory/2868-5693-0x000001F0A1C70000-0x000001F0A1C71000-memory.dmp

Download

memory/2868-5680-0x000001F0A1C60000-0x000001F0A1C61000-memory.dmp

Download

memory/2868-5658-0x000001F0A1C30000-0x000001F0A1C31000-memory.dmp

Download

memory/2868-5659-0x000001F0A1C30000-0x000001F0A1C31000-memory.dmp

Download

memory/2868-5660-0x000001F0A1C30000-0x000001F0A1C31000-memory.dmp

Download

memory/2868-5661-0x000001F0A1C30000-0x000001F0A1C31000-memory.dmp

Download

memory/2868-5643-0x00007FFD64540000-0x00007FFD64B74000-memory.dmp

Download

memory/2868-5647-0x00007FFD69830000-0x00007FFD69E78000-memory.dmp

Download

memory/2868-5646-0x00007FFD69830000-0x00007FFD69E78000-memory.dmp

Download

memory/2868-5648-0x00007FF6F39E0000-0x00007FF6F4E56000-memory.dmp

Download

memory/2868-5662-0x000001F0A1C30000-0x000001F0A1C31000-memory.dmp

Download

memory/2868-5645-0x00007FF6F39E0000-0x00007FF6F4E56000-memory.dmp

Download

memory/2868-5663-0x000001F0A1C30000-0x000001F0A1C31000-memory.dmp

Download

memory/2868-5652-0x000001F0878A0000-0x000001F087CE2000-memory.dmp

Download

memory/2868-5655-0x000001F087CF0000-0x000001F087EF2000-memory.dmp

Download

memory/2868-5706-0x000001F0A1C80000-0x000001F0A1C81000-memory.dmp

Download

memory/2868-5705-0x000001F0A1C80000-0x000001F0A1C81000-memory.dmp

Download

memory/2868-5704-0x000001F0A1C80000-0x000001F0A1C81000-memory.dmp

Download

memory/2868-5703-0x000001F0A1C80000-0x000001F0A1C81000-memory.dmp

Download

memory/2868-5702-0x000001F0A1C80000-0x000001F0A1C81000-memory.dmp

Download

memory/2868-5701-0x000001F0A1C80000-0x000001F0A1C81000-memory.dmp

Download

memory/2868-5700-0x000001F0A1C80000-0x000001F0A1C81000-memory.dmp

Download

memory/2868-5707-0x000001F0A1C70000-0x000001F0A1C71000-memory.dmp

Download

memory/2868-5699-0x000001F0A1C80000-0x000001F0A1C81000-memory.dmp

Download

memory/2868-5697-0x000001F0A1C70000-0x000001F0A1C71000-memory.dmp

Download

memory/2868-5696-0x000001F0A1C70000-0x000001F0A1C71000-memory.dmp

Download

memory/2868-5695-0x000001F0A1C70000-0x000001F0A1C71000-memory.dmp

Download

memory/2868-5694-0x000001F0A1C70000-0x000001F0A1C71000-memory.dmp

Download

memory/2868-5665-0x000001F0A1C40000-0x000001F0A1C41000-memory.dmp

Download

memory/2868-5692-0x000001F0A1C70000-0x000001F0A1C71000-memory.dmp

Download

memory/2868-5666-0x000001F0A1C40000-0x000001F0A1C41000-memory.dmp

Download

memory/2868-5688-0x000001F0A1C70000-0x000001F0A1C71000-memory.dmp

Download

memory/2868-5691-0x000001F0A1C70000-0x000001F0A1C71000-memory.dmp

Download

memory/2868-5690-0x000001F0A1C70000-0x000001F0A1C71000-memory.dmp

Download

memory/2868-5687-0x000001F0A1C70000-0x000001F0A1C71000-memory.dmp

Download

memory/2868-5686-0x000001F0A1C70000-0x000001F0A1C71000-memory.dmp

Download

memory/2868-5685-0x000001F0A1C60000-0x000001F0A1C61000-memory.dmp

Download

memory/2868-5684-0x000001F0A1C70000-0x000001F0A1C71000-memory.dmp

Download

memory/2868-5682-0x000001F0A1C60000-0x000001F0A1C61000-memory.dmp

Download

memory/2868-5681-0x000001F0A1C60000-0x000001F0A1C61000-memory.dmp

Download

memory/2868-5689-0x000001F0A1C70000-0x000001F0A1C71000-memory.dmp

Download

memory/2868-5679-0x000001F0A1C60000-0x000001F0A1C61000-memory.dmp

Download

memory/2868-5678-0x000001F0A1C60000-0x000001F0A1C61000-memory.dmp

Download

memory/2868-5677-0x000001F0A1C60000-0x000001F0A1C61000-memory.dmp

Download

memory/2868-5676-0x000001F0A1C60000-0x000001F0A1C61000-memory.dmp

Download

memory/2868-5675-0x000001F0A1C60000-0x000001F0A1C61000-memory.dmp

Download

memory/2868-5673-0x000001F0A1C40000-0x000001F0A1C41000-memory.dmp

Download

memory/2868-5672-0x000001F0A1C40000-0x000001F0A1C41000-memory.dmp

Download

memory/2868-5671-0x000001F0A1C40000-0x000001F0A1C41000-memory.dmp

Download

memory/2868-5670-0x000001F0A1C40000-0x000001F0A1C41000-memory.dmp

Download

memory/2868-5669-0x000001F0A1C40000-0x000001F0A1C41000-memory.dmp

Download

memory/2868-5668-0x000001F0A1C40000-0x000001F0A1C41000-memory.dmp

Download

memory/2868-5667-0x000001F0A1C40000-0x000001F0A1C41000-memory.dmp

Download

memory/3980-610-0x0000000000A60000-0x0000000000AD7000-memory.dmp

Download

memory/4168-329-0x0000000000B00000-0x0000000000F4B000-memory.dmp

Download

memory/4168-5584-0x0000000000B00000-0x0000000000F4B000-memory.dmp

Download

memory/4168-342-0x0000000000B00000-0x0000000000F4B000-memory.dmp

Download

memory/4168-5650-0x0000000000B00000-0x0000000000F4B000-memory.dmp

Download

memory/4168-324-0x0000000000EC4000-0x0000000000EC6000-memory.dmp

Download

memory/4168-5630-0x0000000000B00000-0x0000000000F4B000-memory.dmp

Download

memory/4168-325-0x0000000000B00000-0x0000000000F4B000-memory.dmp

Download

memory/4168-330-0x0000000000B00000-0x0000000000F4B000-memory.dmp

Download

memory/4168-846-0x0000000000B00000-0x0000000000F4B000-memory.dmp

Download

memory/4448-612-0x0000000000A60000-0x0000000000AD7000-memory.dmp

Download