5ebb841857bfe3517c6aea32297254f0263370f85210ec4258add82fdd5f83b4

Analysis

max time kernel
150s
max time network
151s
platform
windows11-21h2_x64
resource
win11-20240508-en
resource tags

arch:x64arch:x86image:win11-20240508-enlocale:en-usos:windows11-21h2-x64system
submitted
03/06/2024, 14:51

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

download.html
Size

28KB
MD5

8290324bedd253c07e2538b4a3016cc4
SHA1

a98c48ced71987d269fbdbf15e0311830e0f3234
SHA256

5ebb841857bfe3517c6aea32297254f0263370f85210ec4258add82fdd5f83b4
SHA512

8acb31b4df6a633e904807b111151c572c4b805747ddb2823d70e5357b364b3b7eafd1649e343157cc243efdaf650c53e615ddafc839c6f4d5c4795622eb8881
SSDEEP

384:J22w/sI6oDF/jXCyGSCvt7ZP2agut3n7THIhKXBU1W:J22wsI6oB/jX2SCvt7ZP2kt370AXSo

Score

8^/10

discovery persistence spyware stealer

Malware Config

Signatures

Downloads MZ/PE file

Drops file in Drivers directory 3 IoCs

description	ioc	Process
File created	C:\Windows\system32\Drivers\SignalRgbDriver.sys	SignalRgb.exe
File opened for modification	C:\Windows\system32\Drivers\SignalRgbDriver.sys	SignalRgb.exe
File opened for modification	C:\Windows\system32\Drivers\SignalRgbDriver.sys	SignalRgb.exe

Executes dropped EXE 18 IoCs

pid	Process
5044	Install_SignalRgb.exe
3176	Update.exe
408	SignalRgbLauncher.exe
4908	Update.exe
2884	Update.exe
3460	SignalRgb.exe
3536	crashpad_handler.exe
3292	SignalRgbLauncher.exe
3160	SignalRgb.exe
1980	crashpad_handler.exe
4636	SignalRgbSplash.exe
3096	Update.exe
5976	QtWebEngineProcess.exe
5136	SignalRgbSplash.exe
5948	SignalRgb.exe
6068	crashpad_handler.exe
4504	Update.exe
1860	QtWebEngineProcess.exe

Loads dropped DLL 64 IoCs

pid	Process
408	SignalRgbLauncher.exe
408	SignalRgbLauncher.exe
408	SignalRgbLauncher.exe
408	SignalRgbLauncher.exe
408	SignalRgbLauncher.exe
408	SignalRgbLauncher.exe
408	SignalRgbLauncher.exe
408	SignalRgbLauncher.exe
408	SignalRgbLauncher.exe
408	SignalRgbLauncher.exe
408	SignalRgbLauncher.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3536	crashpad_handler.exe
3536	crashpad_handler.exe
3536	crashpad_handler.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Adds Run key to start application 2 TTPs 3 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-1672260578-815027929-964132517-1000\Software\Microsoft\Windows\CurrentVersion\Run\SignalRgb = "\"C:\\Users\\Admin\\AppData\\Local\\VortxEngine\\SignalRgbLauncher.exe\" --silent"	SignalRgbLauncher.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1672260578-815027929-964132517-1000\Software\Microsoft\Windows\CurrentVersion\Run\SignalRgb = "\"C:\\Users\\Admin\\AppData\\Local\\VortxEngine\\SignalRgbLauncher.exe\" --silent"	SignalRgb.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1672260578-815027929-964132517-1000\Software\Microsoft\Windows\CurrentVersion\Run\SignalRgb = "\"C:\\Users\\Admin\\AppData\\Local\\VortxEngine\\SignalRgbLauncher.exe\" --silent"	SignalRgb.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs

Web Service

T1102

flow	ioc
46	raw.githubusercontent.com
115	raw.githubusercontent.com
116	raw.githubusercontent.com

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 16 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1672260578-815027929-964132517-1000_Classes\signalrgb	SignalRgbLauncher.exe
Key created	\REGISTRY\USER\S-1-5-21-1672260578-815027929-964132517-1000_Classes\signalrgb\shell\open\command\	SignalRgbLauncher.exe
Key created	\REGISTRY\USER\S-1-5-21-1672260578-815027929-964132517-1000_Classes\signalrgb\shell	SignalRgbLauncher.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1672260578-815027929-964132517-1000_Classes\signalrgb\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\VortxEngine\\SignalRgbLauncher.exe\" \"--url=%1\""	SignalRgbLauncher.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1672260578-815027929-964132517-1000_Classes\signalrgb\URL Protocol	SignalRgbLauncher.exe
Key created	\REGISTRY\USER\S-1-5-21-1672260578-815027929-964132517-1000_Classes\signalrgb\DefaultIcon\	SignalRgbLauncher.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1672260578-815027929-964132517-1000_Classes\signalrgb\DefaultIcon\ = "\"C:\\Users\\Admin\\AppData\\Local\\VortxEngine\\SignalRgbLauncher.exe\",1"	SignalRgbLauncher.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1672260578-815027929-964132517-1000_Classes\signalrgb\UseOriginalUrlEncoding = "1"	SignalRgbLauncher.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1672260578-815027929-964132517-1000_Classes\signalrgb\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\VortxEngine\\SignalRgbLauncher.exe\" \"--url=%1\""	SignalRgbLauncher.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1672260578-815027929-964132517-1000_Classes\signalrgb\ = "URL:signalrgb"	SignalRgbLauncher.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1672260578-815027929-964132517-1000_Classes\signalrgb\URL Protocol	SignalRgbLauncher.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1672260578-815027929-964132517-1000_Classes\signalrgb\UseOriginalUrlEncoding = "1"	SignalRgbLauncher.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1672260578-815027929-964132517-1000_Classes\signalrgb\ = "URL:signalrgb"	SignalRgbLauncher.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1672260578-815027929-964132517-1000_Classes\signalrgb\DefaultIcon\ = "\"C:\\Users\\Admin\\AppData\\Local\\VortxEngine\\SignalRgbLauncher.exe\",1"	SignalRgbLauncher.exe
Key created	\REGISTRY\USER\S-1-5-21-1672260578-815027929-964132517-1000_Classes\signalrgb\shell\open	SignalRgbLauncher.exe
Key created	\REGISTRY\USER\S-1-5-21-1672260578-815027929-964132517-1000_Classes\signalrgb\shell\open\command	SignalRgbLauncher.exe

Modifies system certificate store 2 TTPs 6 IoCs

evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D69B561148F01C77C54578C10926DF5B856976AD\Blob = 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	SignalRgb.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13	SignalRgb.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13\Blob = 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	SignalRgb.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13\Blob = 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	SignalRgb.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D69B561148F01C77C54578C10926DF5B856976AD	SignalRgb.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D69B561148F01C77C54578C10926DF5B856976AD\Blob = 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	SignalRgb.exe

NTFS ADS 2 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\Unconfirmed 131.crdownload:SmartScreen	msedge.exe
File opened for modification	C:\Users\Admin\Downloads\Install_SignalRgb.exe:Zone.Identifier	msedge.exe

Suspicious behavior: AddClipboardFormatListener 7 IoCs

pid	Process
408	SignalRgbLauncher.exe
3460	SignalRgb.exe
3292	SignalRgbLauncher.exe
3160	SignalRgb.exe
4636	SignalRgbSplash.exe
5136	SignalRgbSplash.exe
5948	SignalRgb.exe

Suspicious behavior: EnumeratesProcesses 22 IoCs

pid	Process
4336	msedge.exe
4336	msedge.exe
1656	msedge.exe
1656	msedge.exe
2516	identity_helper.exe
2516	identity_helper.exe
3864	msedge.exe
3864	msedge.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3176	Update.exe
3176	Update.exe
3160	SignalRgb.exe
3160	SignalRgb.exe
5976	QtWebEngineProcess.exe
5948	SignalRgb.exe
5948	SignalRgb.exe
3176	msedge.exe
3176	msedge.exe
3176	msedge.exe
3176	msedge.exe
1860	QtWebEngineProcess.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3160	SignalRgb.exe

Suspicious behavior: LoadsDriver 5 IoCs

pid	Process
672	Process not Found
672	Process not Found
672	Process not Found
672	Process not Found
672	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	3176	Update.exe
Token: 33	4632	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	4632	AUDIODG.EXE
Token: SeDebugPrivilege	3096	Update.exe
Token: SeShutdownPrivilege	3160	SignalRgb.exe
Token: SeCreatePagefilePrivilege	3160	SignalRgb.exe
Token: SeShutdownPrivilege	3160	SignalRgb.exe
Token: SeCreatePagefilePrivilege	3160	SignalRgb.exe
Token: SeShutdownPrivilege	3160	SignalRgb.exe
Token: SeCreatePagefilePrivilege	3160	SignalRgb.exe
Token: SeShutdownPrivilege	3160	SignalRgb.exe
Token: SeCreatePagefilePrivilege	3160	SignalRgb.exe
Token: SeShutdownPrivilege	3160	SignalRgb.exe
Token: SeCreatePagefilePrivilege	3160	SignalRgb.exe
Token: SeShutdownPrivilege	3160	SignalRgb.exe
Token: SeCreatePagefilePrivilege	3160	SignalRgb.exe
Token: SeShutdownPrivilege	3160	SignalRgb.exe
Token: SeCreatePagefilePrivilege	3160	SignalRgb.exe
Token: SeShutdownPrivilege	3160	SignalRgb.exe
Token: SeCreatePagefilePrivilege	3160	SignalRgb.exe
Token: SeShutdownPrivilege	3160	SignalRgb.exe
Token: SeCreatePagefilePrivilege	3160	SignalRgb.exe
Token: SeShutdownPrivilege	3160	SignalRgb.exe
Token: SeCreatePagefilePrivilege	3160	SignalRgb.exe
Token: SeShutdownPrivilege	3160	SignalRgb.exe
Token: SeCreatePagefilePrivilege	3160	SignalRgb.exe
Token: SeShutdownPrivilege	3160	SignalRgb.exe
Token: SeCreatePagefilePrivilege	3160	SignalRgb.exe
Token: SeShutdownPrivilege	3160	SignalRgb.exe
Token: SeCreatePagefilePrivilege	3160	SignalRgb.exe
Token: SeShutdownPrivilege	3160	SignalRgb.exe
Token: SeCreatePagefilePrivilege	3160	SignalRgb.exe
Token: SeShutdownPrivilege	3160	SignalRgb.exe
Token: SeCreatePagefilePrivilege	3160	SignalRgb.exe
Token: SeShutdownPrivilege	3160	SignalRgb.exe
Token: SeCreatePagefilePrivilege	3160	SignalRgb.exe
Token: SeShutdownPrivilege	3160	SignalRgb.exe
Token: SeCreatePagefilePrivilege	3160	SignalRgb.exe
Token: SeShutdownPrivilege	3160	SignalRgb.exe
Token: SeCreatePagefilePrivilege	3160	SignalRgb.exe
Token: SeShutdownPrivilege	3160	SignalRgb.exe
Token: SeCreatePagefilePrivilege	3160	SignalRgb.exe
Token: SeShutdownPrivilege	3160	SignalRgb.exe
Token: SeCreatePagefilePrivilege	3160	SignalRgb.exe
Token: SeDebugPrivilege	4504	Update.exe
Token: SeShutdownPrivilege	5948	SignalRgb.exe
Token: SeCreatePagefilePrivilege	5948	SignalRgb.exe
Token: SeShutdownPrivilege	5948	SignalRgb.exe
Token: SeCreatePagefilePrivilege	5948	SignalRgb.exe
Token: SeShutdownPrivilege	5948	SignalRgb.exe
Token: SeCreatePagefilePrivilege	5948	SignalRgb.exe
Token: SeShutdownPrivilege	5948	SignalRgb.exe
Token: SeCreatePagefilePrivilege	5948	SignalRgb.exe
Token: SeShutdownPrivilege	5948	SignalRgb.exe
Token: SeCreatePagefilePrivilege	5948	SignalRgb.exe
Token: SeShutdownPrivilege	5948	SignalRgb.exe
Token: SeCreatePagefilePrivilege	5948	SignalRgb.exe
Token: SeShutdownPrivilege	5948	SignalRgb.exe
Token: SeCreatePagefilePrivilege	5948	SignalRgb.exe
Token: SeShutdownPrivilege	5948	SignalRgb.exe
Token: SeCreatePagefilePrivilege	5948	SignalRgb.exe
Token: SeShutdownPrivilege	5948	SignalRgb.exe
Token: SeCreatePagefilePrivilege	5948	SignalRgb.exe
Token: SeShutdownPrivilege	5948	SignalRgb.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
1656	msedge.exe
3160	SignalRgb.exe
3160	SignalRgb.exe
3160	SignalRgb.exe
3160	SignalRgb.exe
3160	SignalRgb.exe
3160	SignalRgb.exe
5948	SignalRgb.exe
5948	SignalRgb.exe
5948	SignalRgb.exe
5948	SignalRgb.exe
5948	SignalRgb.exe
5948	SignalRgb.exe

Suspicious use of SetWindowsHookEx 64 IoCs

pid	Process
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3460	SignalRgb.exe
3160	SignalRgb.exe
3160	SignalRgb.exe
3160	SignalRgb.exe
3160	SignalRgb.exe
3160	SignalRgb.exe
3160	SignalRgb.exe
3160	SignalRgb.exe
3160	SignalRgb.exe
3160	SignalRgb.exe
3160	SignalRgb.exe
3160	SignalRgb.exe
3160	SignalRgb.exe
3160	SignalRgb.exe
3160	SignalRgb.exe
3160	SignalRgb.exe
3160	SignalRgb.exe
3160	SignalRgb.exe
3160	SignalRgb.exe
3160	SignalRgb.exe
3160	SignalRgb.exe
3160	SignalRgb.exe
3160	SignalRgb.exe
3160	SignalRgb.exe
3160	SignalRgb.exe
3160	SignalRgb.exe
3160	SignalRgb.exe
3160	SignalRgb.exe
3160	SignalRgb.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1656 wrote to memory of 3064	1656	msedge.exe	79
PID 1656 wrote to memory of 3064	1656	msedge.exe	79
PID 1656 wrote to memory of 1924	1656	msedge.exe	80
PID 1656 wrote to memory of 1924	1656	msedge.exe	80
PID 1656 wrote to memory of 1924	1656	msedge.exe	80
PID 1656 wrote to memory of 1924	1656	msedge.exe	80
PID 1656 wrote to memory of 1924	1656	msedge.exe	80
PID 1656 wrote to memory of 1924	1656	msedge.exe	80
PID 1656 wrote to memory of 1924	1656	msedge.exe	80
PID 1656 wrote to memory of 1924	1656	msedge.exe	80
PID 1656 wrote to memory of 1924	1656	msedge.exe	80
PID 1656 wrote to memory of 1924	1656	msedge.exe	80
PID 1656 wrote to memory of 1924	1656	msedge.exe	80
PID 1656 wrote to memory of 1924	1656	msedge.exe	80
PID 1656 wrote to memory of 1924	1656	msedge.exe	80
PID 1656 wrote to memory of 1924	1656	msedge.exe	80
PID 1656 wrote to memory of 1924	1656	msedge.exe	80
PID 1656 wrote to memory of 1924	1656	msedge.exe	80
PID 1656 wrote to memory of 1924	1656	msedge.exe	80
PID 1656 wrote to memory of 1924	1656	msedge.exe	80
PID 1656 wrote to memory of 1924	1656	msedge.exe	80
PID 1656 wrote to memory of 1924	1656	msedge.exe	80
PID 1656 wrote to memory of 1924	1656	msedge.exe	80
PID 1656 wrote to memory of 1924	1656	msedge.exe	80
PID 1656 wrote to memory of 1924	1656	msedge.exe	80
PID 1656 wrote to memory of 1924	1656	msedge.exe	80
PID 1656 wrote to memory of 1924	1656	msedge.exe	80
PID 1656 wrote to memory of 1924	1656	msedge.exe	80
PID 1656 wrote to memory of 1924	1656	msedge.exe	80
PID 1656 wrote to memory of 1924	1656	msedge.exe	80
PID 1656 wrote to memory of 1924	1656	msedge.exe	80
PID 1656 wrote to memory of 1924	1656	msedge.exe	80
PID 1656 wrote to memory of 1924	1656	msedge.exe	80
PID 1656 wrote to memory of 1924	1656	msedge.exe	80
PID 1656 wrote to memory of 1924	1656	msedge.exe	80
PID 1656 wrote to memory of 1924	1656	msedge.exe	80
PID 1656 wrote to memory of 1924	1656	msedge.exe	80
PID 1656 wrote to memory of 1924	1656	msedge.exe	80
PID 1656 wrote to memory of 1924	1656	msedge.exe	80
PID 1656 wrote to memory of 1924	1656	msedge.exe	80
PID 1656 wrote to memory of 1924	1656	msedge.exe	80
PID 1656 wrote to memory of 1924	1656	msedge.exe	80
PID 1656 wrote to memory of 4336	1656	msedge.exe	81
PID 1656 wrote to memory of 4336	1656	msedge.exe	81
PID 1656 wrote to memory of 3180	1656	msedge.exe	82
PID 1656 wrote to memory of 3180	1656	msedge.exe	82
PID 1656 wrote to memory of 3180	1656	msedge.exe	82
PID 1656 wrote to memory of 3180	1656	msedge.exe	82
PID 1656 wrote to memory of 3180	1656	msedge.exe	82
PID 1656 wrote to memory of 3180	1656	msedge.exe	82
PID 1656 wrote to memory of 3180	1656	msedge.exe	82
PID 1656 wrote to memory of 3180	1656	msedge.exe	82
PID 1656 wrote to memory of 3180	1656	msedge.exe	82
PID 1656 wrote to memory of 3180	1656	msedge.exe	82
PID 1656 wrote to memory of 3180	1656	msedge.exe	82
PID 1656 wrote to memory of 3180	1656	msedge.exe	82
PID 1656 wrote to memory of 3180	1656	msedge.exe	82
PID 1656 wrote to memory of 3180	1656	msedge.exe	82
PID 1656 wrote to memory of 3180	1656	msedge.exe	82
PID 1656 wrote to memory of 3180	1656	msedge.exe	82
PID 1656 wrote to memory of 3180	1656	msedge.exe	82
PID 1656 wrote to memory of 3180	1656	msedge.exe	82
PID 1656 wrote to memory of 3180	1656	msedge.exe	82
PID 1656 wrote to memory of 3180	1656	msedge.exe	82

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\download.html
1⤵
- Enumerates system info in registry
- NTFS ADS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xe4,0x10c,0x7ffa331f3cb8,0x7ffa331f3cc8,0x7ffa331f3cd8
  2⤵
  PID:3064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1904,18387533057093888194,6954875138075127505,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1956 /prefetch:2
  2⤵
  PID:1924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1904,18387533057093888194,6954875138075127505,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2336 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1904,18387533057093888194,6954875138075127505,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2788 /prefetch:8
  2⤵
  PID:3180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,18387533057093888194,6954875138075127505,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1832 /prefetch:1
  2⤵
  PID:8
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,18387533057093888194,6954875138075127505,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,18387533057093888194,6954875138075127505,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4164 /prefetch:1
  2⤵
  PID:4844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,18387533057093888194,6954875138075127505,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4936 /prefetch:1
  2⤵
  PID:3040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,18387533057093888194,6954875138075127505,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5832 /prefetch:1
  2⤵
  PID:4888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1904,18387533057093888194,6954875138075127505,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6172 /prefetch:8
  2⤵
  PID:3736
- C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1904,18387533057093888194,6954875138075127505,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1904,18387533057093888194,6954875138075127505,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6264 /prefetch:8
  2⤵
  PID:2600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,18387533057093888194,6954875138075127505,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5588 /prefetch:1
  2⤵
  PID:1488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,18387533057093888194,6954875138075127505,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5408 /prefetch:1
  2⤵
  PID:4944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,18387533057093888194,6954875138075127505,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2616 /prefetch:1
  2⤵
  PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,18387533057093888194,6954875138075127505,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1736 /prefetch:1
  2⤵
  PID:3608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1904,18387533057093888194,6954875138075127505,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3068 /prefetch:8
  2⤵
  - NTFS ADS
  - Suspicious behavior: EnumeratesProcesses
  PID:3864
- C:\Users\Admin\Downloads\Install_SignalRgb.exe
  "C:\Users\Admin\Downloads\Install_SignalRgb.exe"
  2⤵
  - Executes dropped EXE
  PID:5044
- - C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
    "C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe" --install .
    3⤵
    - Executes dropped EXE
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:3176
  - - C:\Users\Admin\AppData\Local\VortxEngine\app-2.3.87\SignalRgbLauncher.exe
      "C:\Users\Admin\AppData\Local\VortxEngine\app-2.3.87\SignalRgbLauncher.exe" --squirrel-install 2.3.87
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      Adds Run key to start application
      Modifies registry class
      Suspicious behavior: AddClipboardFormatListener
      PID:408
    - - C:\Users\Admin\AppData\Local\VortxEngine\Update.exe
        
        C:\Users\Admin\AppData\Local\VortxEngine\Update.exe --createShortcut SignalRgbLauncher.exe --shortcut-locations Desktop
        5⤵
        Executes dropped EXE
        
        PID:4908
    - - C:\Users\Admin\AppData\Local\VortxEngine\Update.exe
        
        C:\Users\Admin\AppData\Local\VortxEngine\Update.exe --createShortcut SignalRgbLauncher.exe --shortcut-locations StartMenu
        5⤵
        Executes dropped EXE
        
        PID:2884
    - - C:\Users\Admin\AppData\Local\VortxEngine\app-2.3.87\Signal-x64\SignalRgb.exe
        
        C:\Users\Admin\AppData\Local\VortxEngine\app-2.3.87\Signal-x64\SignalRgb.exe --squirrel-install 2.3.87 --firstrun
        5⤵
        Drops file in Drivers directory
        Executes dropped EXE
        Loads dropped DLL
        Suspicious behavior: AddClipboardFormatListener
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of SetWindowsHookEx
        
        PID:3460
      - C:\Users\Admin\AppData\Local\VortxEngine\app-2.3.87\Signal-x64\crashpad_handler.exe
        
        C:\Users\Admin\AppData\Local\VortxEngine\app-2.3.87\Signal-x64\crashpad_handler.exe --no-rate-limit --database=C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\.sentry-native --metrics-dir=C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\.sentry-native --url=https://o4505636443652096.ingest.sentry.io:443/api/4505636446011392/minidump/?sentry_client=sentry.native/0.6.7&sentry_key=3539d0800c68ab1637a1ced868889572 --attachment=C:/Users/Admin/AppData/Local/WhirlwindFX/SignalRgb/Logs/SignalRGB_20240603_145318.log --attachment=C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\.sentry-native\f9ab189f-1d33-4a4a-9b66-62a9eef94824.run\__sentry-event --attachment=C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\.sentry-native\f9ab189f-1d33-4a4a-9b66-62a9eef94824.run\__sentry-breadcrumb1 --attachment=C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\.sentry-native\f9ab189f-1d33-4a4a-9b66-62a9eef94824.run\__sentry-breadcrumb2 --initial-client-data=0x578,0x57c,0x580,0x554,0x584,0x7ff781a003f8,0x7ff781a00418,0x7ff781a00430
        6⤵
        Executes dropped EXE
        Loads dropped DLL
        
        PID:3536
  - - C:\Users\Admin\AppData\Local\VortxEngine\app-2.3.87\SignalRgbLauncher.exe
      "C:\Users\Admin\AppData\Local\VortxEngine\app-2.3.87\SignalRgbLauncher.exe" --squirrel-firstrun
      4⤵
      Executes dropped EXE
      Modifies registry class
      Suspicious behavior: AddClipboardFormatListener
      PID:3292
    - - C:\Users\Admin\AppData\Local\VortxEngine\app-2.3.87\Signal-x64\SignalRgb.exe
        
        "C:\Users\Admin\AppData\Local\VortxEngine\app-2.3.87\Signal-x64\SignalRgb.exe" --firstrun --squirrel-firstrun --launchCount 0
        5⤵
        Drops file in Drivers directory
        Executes dropped EXE
        Adds Run key to start application
        Modifies system certificate store
        Suspicious behavior: AddClipboardFormatListener
        Suspicious behavior: EnumeratesProcesses
        Suspicious behavior: GetForegroundWindowSpam
        Suspicious use of AdjustPrivilegeToken
        Suspicious use of SendNotifyMessage
        Suspicious use of SetWindowsHookEx
        
        PID:3160
      - C:\Users\Admin\AppData\Local\VortxEngine\app-2.3.87\Signal-x64\crashpad_handler.exe
        
        C:\Users\Admin\AppData\Local\VortxEngine\app-2.3.87\Signal-x64\crashpad_handler.exe --no-rate-limit --database=C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\.sentry-native --metrics-dir=C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\.sentry-native --url=https://o4505636443652096.ingest.sentry.io:443/api/4505636446011392/minidump/?sentry_client=sentry.native/0.6.7&sentry_key=3539d0800c68ab1637a1ced868889572 --attachment=C:/Users/Admin/AppData/Local/WhirlwindFX/SignalRgb/Logs/SignalRGB_20240603_145326.log --attachment=C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\.sentry-native\351089ba-e685-4fa4-eb6c-f1d2bc3917d5.run\__sentry-event --attachment=C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\.sentry-native\351089ba-e685-4fa4-eb6c-f1d2bc3917d5.run\__sentry-breadcrumb1 --attachment=C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\.sentry-native\351089ba-e685-4fa4-eb6c-f1d2bc3917d5.run\__sentry-breadcrumb2 --initial-client-data=0x578,0x57c,0x580,0x554,0x584,0x7ff781a003f8,0x7ff781a00418,0x7ff781a00430
        6⤵
        Executes dropped EXE
        
        PID:1980
      - C:\Users\Admin\AppData\Local\VortxEngine\app-2.3.87\Signal-x64\SignalRgbSplash.exe
        
        C:\Users\Admin\AppData\Local\VortxEngine\app-2.3.87\Signal-x64\SignalRgbSplash.exe
        6⤵
        Executes dropped EXE
        Suspicious behavior: AddClipboardFormatListener
        
        PID:4636
      - C:\Users\Admin\AppData\Local\VortxEngine\Update.exe
        
        C:\Users\Admin\AppData\Local\VortxEngine\Update.exe --checkForUpdate https://release.signalrgb.com
        6⤵
        Executes dropped EXE
        Suspicious use of AdjustPrivilegeToken
        
        PID:3096
      - C:\Users\Admin\AppData\Local\VortxEngine\app-2.3.87\Signal-x64\QtWebEngineProcess.exe
        
        "C:\Users\Admin\AppData\Local\VortxEngine\app-2.3.87\Signal-x64\QtWebEngineProcess.exe" --type=renderer --webengine-schemes=qrc:sV --first-renderer-process --disable-speech-api --enable-threaded-compositing --disable-gpu-compositing --lang=en --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=3 --mojo-platform-channel-handle=20964 --enable-features=NetworkServiceInProcess2,TracingServiceInProcess --disable-features=BackgroundFetch,ConsolidatedMovementXY,InstalledApp,PictureInPicture,WebOTP,WebPayments,WebUSB /prefetch:1
        6⤵
        Executes dropped EXE
        Suspicious behavior: EnumeratesProcesses
        
        PID:5976
      - C:\Users\Admin\AppData\Local\VortxEngine\app-2.3.87\Signal-x64\SignalRgbSplash.exe
        
        C:\Users\Admin\AppData\Local\VortxEngine\app-2.3.87\Signal-x64\SignalRgbSplash.exe
        6⤵
        Executes dropped EXE
        Suspicious behavior: AddClipboardFormatListener
        
        PID:5136
    - - C:\Users\Admin\AppData\Local\VortxEngine\app-2.3.87\Signal-x64\SignalRgb.exe
        
        "C:\Users\Admin\AppData\Local\VortxEngine\app-2.3.87\Signal-x64\SignalRgb.exe" --silent --launchCount 1
        5⤵
        Drops file in Drivers directory
        Executes dropped EXE
        Adds Run key to start application
        Suspicious behavior: AddClipboardFormatListener
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of AdjustPrivilegeToken
        Suspicious use of SendNotifyMessage
        
        PID:5948
      - C:\Users\Admin\AppData\Local\VortxEngine\app-2.3.87\Signal-x64\crashpad_handler.exe
        
        C:\Users\Admin\AppData\Local\VortxEngine\app-2.3.87\Signal-x64\crashpad_handler.exe --no-rate-limit --database=C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\.sentry-native --metrics-dir=C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\.sentry-native --url=https://o4505636443652096.ingest.sentry.io:443/api/4505636446011392/minidump/?sentry_client=sentry.native/0.6.7&sentry_key=3539d0800c68ab1637a1ced868889572 --attachment=C:/Users/Admin/AppData/Local/WhirlwindFX/SignalRgb/Logs/SignalRGB_20240603_145402.log --attachment=C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\.sentry-native\b170f218-9a58-4743-0b1d-93c0eeb8568e.run\__sentry-event --attachment=C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\.sentry-native\b170f218-9a58-4743-0b1d-93c0eeb8568e.run\__sentry-breadcrumb1 --attachment=C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\.sentry-native\b170f218-9a58-4743-0b1d-93c0eeb8568e.run\__sentry-breadcrumb2 --initial-client-data=0x580,0x584,0x588,0x55c,0x58c,0x7ff781a003f8,0x7ff781a00418,0x7ff781a00430
        6⤵
        Executes dropped EXE
        
        PID:6068
      - C:\Users\Admin\AppData\Local\VortxEngine\Update.exe
        
        C:\Users\Admin\AppData\Local\VortxEngine\Update.exe --checkForUpdate https://release.signalrgb.com
        6⤵
        Executes dropped EXE
        Suspicious use of AdjustPrivilegeToken
        
        PID:4504
      - C:\Users\Admin\AppData\Local\VortxEngine\app-2.3.87\Signal-x64\QtWebEngineProcess.exe
        
        "C:\Users\Admin\AppData\Local\VortxEngine\app-2.3.87\Signal-x64\QtWebEngineProcess.exe" --type=renderer --webengine-schemes=qrc:sV --first-renderer-process --disable-speech-api --enable-threaded-compositing --disable-gpu-compositing --lang=en --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=3 --mojo-platform-channel-handle=22232 --enable-features=NetworkServiceInProcess2,TracingServiceInProcess --disable-features=BackgroundFetch,ConsolidatedMovementXY,InstalledApp,PictureInPicture,WebOTP,WebPayments,WebUSB /prefetch:1
        6⤵
        Executes dropped EXE
        Suspicious behavior: EnumeratesProcesses
        
        PID:1860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1904,18387533057093888194,6954875138075127505,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=4656 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3176

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5044

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2444

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3476

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004D8 0x00000000000004C8
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4632

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 436 -p 3160 -ip 3160
1⤵
PID:3096

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\Update.exe.log

Filesize
1KB

MD5
4ada7084cc38c692f12f230177e66c30

SHA1
45da6d7b2b61c3f670945bc6b73aa35c975c44f3

SHA256
7b4e3cb73d709049bf3dfcdc19c408e1c647c0f55634635097d8cee75cd63103

SHA512
4cfd2e3bdee8956e4d7103f574b00304967ee38ffeb5c8a1449910593d7b21fe7b1a838e37bb6ba003874ad54f0b276566663b437ef32cf3db953bba2eff0cf6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
d56e8f308a28ac4183257a7950ab5c89

SHA1
044969c58cef041a073c2d132fa66ccc1ee553fe

SHA256
0bc24451c65457abc1e4e340be2f8faceae6b6ec7768a21d44bcd14636543bae

SHA512
fd5798559f4025ec3408f5550b8671d394b1ec83b85fdac8c005b0cc3e183272bdd07db15a156a572c9c5e5798badf235dc10aae62a052efa8dd9dfdbdca8189

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
8f2eb94e31cadfb6eb07e6bbe61ef7ae

SHA1
3f42b0d5a90408689e7f7941f8db72a67d5a2eab

SHA256
d222c8e3b19cda2657629a486faf32962e016fc66561ce0d17010afdb283c9de

SHA512
9f7f84149885b851e0bf7173c540e466a2b2eb9907d8b608f60360933328cc75d9d1b63640ea4ecc1e64ecc5dd7ee74d82903f96a8b4418ca56296641a8c0703

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
216B

MD5
330763932399cd0dcb5e249d0918839f

SHA1
b034044b047c5a25c88ed26f836997d90d84dfef

SHA256
b9bb4c4b7fe467191c3d3b8cfe3aeee4886e64854e8158e57adb7c3396996b48

SHA512
12f8928d4ae8cc7c8a5a35e720f10000e53c2701f477a610f32789765a89cd42a2ccaa7eef3deaa901e7b5739f9b5ddf0f36bfa8b40beb0c7e9235cc59cdeb81

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
8f2689f799b8ea41a3c73b8a50326087

SHA1
dbfd8de8448c53ba474ebcd690d17763b281bdc6

SHA256
d0fdc96723b70f8ecaf226f323b814f35813862c36856074821e3b507da572ce

SHA512
48996e05e1900fab60fe090cccd60274a062363662cb9b8fe59a6a154c05bc6b5dbe5c7bd17fc4ded864460b2d496c88febaf82e92410fadc9adaefe6a25e216

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
94436a927b6df4b41e410c99bdd3c1f1

SHA1
0fce918a36f4f3ee675c928f9585340f7604553c

SHA256
8ef8b478a51ba328039167c6b8bde967905a19b0baf9cd4e1d1cba3ed06f4bdd

SHA512
28d1ce0f8c337cccc2d919c93d66dd2474ee0d32023d4b64d1f8d8aa271fb912dc4e2b5b2034e0e7f9af3a3982170328171c8bf3e722a82050fadef2597cf3cc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
7c2610d3871ed12862ee92f367bc70dc

SHA1
0a0740761396d90e961ba95f4f187e68320bb0c9

SHA256
297f58e0c234c281113c647fd727d491ec334238b16a3801b377383ff7723ffa

SHA512
6e27b40a2d9a56c03afd502b13007d109ad73e7127366aa7b3b341d9366c162eeca6898ea4ce4403fc028f037b8478d01c36abdc18b609ba6a049564f10640c6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
6dc11fd593a46f39814460b6be66f58c

SHA1
cbee3b812b72c75f63ebfb201ee78f976441fa98

SHA256
274f08abe01f0bbc800b9342777231af01b00e2429436aad8a181b981e482051

SHA512
d82e4acde24319ea0400d8ff78316bd8bcd7a7aa170165227d9431233c90ceedc5fbcccda1680b320c56d8f3c23da7f987caadb1a6d54d02958575785bd5797b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
b55f794cab2e37c0f630a84f78f5185d

SHA1
902709e1e3f2f0bc1cd7e2d01d87c132c853c431

SHA256
6f18953a61645275524452ab16587b75eb588627d49dddad6826ff08d8fe71e7

SHA512
e511e0179834b5b2d68a6f3f1f22b43d566fab0a0050aa1ffb2134e24820c84fbbbd68257035dc82ad41b70ed0d6396a532de7ccf749c2f076eb02a0e262b777

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
394c0735e1e77198e08f2f50db3338c2

SHA1
4add0ebef88d02b0db9e40b5231b12cd35e2dd42

SHA256
f342e4f1f21440cb7151ab9bc45dde4bde8905fd93096e7c75c134ad62273bb2

SHA512
36a7f9d913ce948a1a76faeb949201d09ff30cec18145577ba0803a41dc019ae098dc10241518245aeb824b8f5d1981464a58530aa5a9380af8e14e37dc6e9e6

Download Submit
C:\Users\Admin\AppData\Local\SquirrelTemp\RELEASES

Filesize
83B

MD5
7d76ec486cbba2709c462d16a812aac8

SHA1
29ca67851e4c3d2e8c466de8b7402d5ecdfb089b

SHA256
04f6ce789fc21b7f15f68d316829a20ea2599f8bb1ec90331a139d947c32752a

SHA512
52e9d9f67b9a2c59f6f42bac57a8d3e9061392ae2350160bc4494f0a4c5ab537a41def3c8bfe92069a85b5fada09e19ace4d3cd9545f7dc4752d448657bf2195

Download Submit
C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe

Filesize
1.7MB

MD5
7aca3842bbd02509409ce72e7a6ea0c6

SHA1
a5ab5bb9bdebf756d4de518c7b560250005a34b4

SHA256
b7e4aa23bceb22e6082ced31198dc9884cfb62f6accbda92186d6c178a40eb04

SHA512
f3ee4320d123906723ffc2046d91959ea0032de37baf68d9ff2912deaa68d6e5c1dd0da5b1966e0ab1bed448f3ee38f25ac800420143a094fbbe0b466fb0724e

Download Submit
C:\Users\Admin\AppData\Local\SquirrelTemp\background.gif

Filesize
846KB

MD5
842bb9e2cdd7066ba57f8e66a43392df

SHA1
b34e62183d871aa6b98c95103930f6de9c02c315

SHA256
f641e38736c2c1c6158c2261512ec8d9b3193f21a1cd7420eb08dd099e6dbc92

SHA512
8ccfa121a7b1cf84bd5418a27f2d6a5ac69cef69c2aaea514c8d47cca9d68895cbfaf255088c4b98f42356061c6f75802df9cd38f8e443ab319aa5b059518506

Download Submit
C:\Users\Admin\AppData\Local\VortxEngine\SignalRgbLauncher.exe

Filesize
487KB

MD5
a99bafd1b4a268b9461a9f50d70150db

SHA1
0682ea0c43571b6c9fbb684204695cfb2e3d8bb7

SHA256
98d871cfac2c0779d0888b43cdabc631173df10e85b56dc2b5de1539b45c8da5

SHA512
19e02cec762e99b607513cb0890b08c403b90d289b990e2a502b314b8b0f192f7b516c5f48d58e7211b60d5dd714e4d027e1818bf39859cf47bdc6e9d655ef1f

Download Submit
C:\Users\Admin\AppData\Local\VortxEngine\SquirrelSetup.log

Filesize
994B

MD5
44467fa7abab47c1ae943b252c307ba9

SHA1
38ae31b23fe0b10a5bf1cbce4bd15b6ddd14de2c

SHA256
b9c7f3ac808da69448795fd379d2aaf6dc81234f654441cab27e60ee0d5871c8

SHA512
5a289f60718002a0bda1d6f9e8ab1bccd53a2d9b9b9d0a7abf836bc62828a03f836b243af6f1a2a873be061717ae1794b1d918961dbff5fe5fe076b41814e4e6

Download Submit
C:\Users\Admin\AppData\Local\VortxEngine\app-2.3.87\Qt6Core.dll

Filesize
5.5MB

MD5
a42d8142092885a83fc779f660466a0c

SHA1
106232efdb591364a78638f27fc2067717a65868

SHA256
abf826a5763c4b3517258f07060a7a93f4d47ae14f79253304dc2a4dbe0d98a2

SHA512
8ffbb942f996bb89b871b73494c0a9b913316e6440e263b3416604ac294cf987039db979f55aa61c34869a101cbc6a9db0323aee71a847840ace4e652639f98c

Download Submit
C:\Users\Admin\AppData\Local\VortxEngine\app-2.3.87\Qt6Gui.dll

Filesize
7.4MB

MD5
b8f3c8eeaa963fd96c12fa36c5af6593

SHA1
64513814ebc555121a83102e27649f710c9fc37f

SHA256
d2da55714d56e0af7c033fd0a84dd1dcd669e976abc07861e70b054c7d08c01e

SHA512
b8d8cfe1f58bc77b8e90fb80996223b7df075113c113a2016b15840a04eb36a5cc687639ab267af5bec6185f5ca4d5b847e9ec3c2cc9ff38f9144852c2e94a42

Download Submit
C:\Users\Admin\AppData\Local\VortxEngine\app-2.3.87\Qt6Widgets.dll

Filesize
5.8MB

MD5
c34ca583731d7fd60a9575aadfc0fbe2

SHA1
96e86d5eb5f7755dff0c71a52057d53d5af8a760

SHA256
37f8afad175e298e9cb2f4aaa33a0c1817f39cc0435afae7e160d0ea16d808da

SHA512
0c3137f0a3fa52a442e92cdfb9579f0be24a637c17ea6648701646c21c2a60ea156d4530f83cc532204ec6dd359e29d8d70ebd1fd6453dffbd3a225a86c18a97

Download Submit
C:\Users\Admin\AppData\Local\VortxEngine\app-2.3.87\Signal-x64\AppCore.dll

Filesize
221KB

MD5
4debff76054810137cc28ef9951922b3

SHA1
857618c15169df13962d7c3543bd7d3b73bacb8f

SHA256
d4b1d0145eeeca14ddfda5fbfdeed300cb739359ef219cef024c3e728fc4194a

SHA512
f009cf61a87e974cbba4af7ff7da9d438503cfe524f4a71bf11c1effdddfe471923681d32cabce87421492ff01cb963cfa180fa7258752bf501272def05cbaed

Download Submit
C:\Users\Admin\AppData\Local\VortxEngine\app-2.3.87\Signal-x64\Ultralight.dll

Filesize
319KB

MD5
65a8db2d2eb9594308321da1b1b13147

SHA1
7ddf6cb23706c69164a18c89435e6b24b90cb6c1

SHA256
aa4f269c8ec29ed25aebcbc233106cffeec605cd6db90e37fd3b999f3dbd949d

SHA512
555b2024a07a8718c7267a274b040c81087291e9bf1a1076c5b28bc6ac5c026d83100bf378b0c5fe1ef59303bd39ccc8e6a69c691074a8f3be8958bcf12977d6

Download Submit
C:\Users\Admin\AppData\Local\VortxEngine\app-2.3.87\Signal-x64\UltralightCore.dll

Filesize
1.3MB

MD5
a4f8807254877e690ee7f837ce2e328a

SHA1
5f427d68df2fc743ec5519e40dc066c4f09cb9aa

SHA256
e0a07cfa00aad7f7b97ea9ea9b4c6b3050244f88628a2cee89d3ba8881e0803f

SHA512
5fb91622afc39bd3c93de9166396c088a519840d08fe7fa15eacda0cfa7d208eb405b3bb4096d3f4e94403d6f8ab01cca3c9be30b9a612c0a2204c354f5e6a92

Download Submit
C:\Users\Admin\AppData\Local\VortxEngine\app-2.3.87\Signal-x64\WebCore.dll

Filesize
41.8MB

MD5
096d2671e08b98abbb5141bb12b5985e

SHA1
977bdebcfc126dbbf03b7a7cf1b23aa4769d2f79

SHA256
dd6ea79baf3de7525311b0bab11d096234e9232e06e7118bf04c5dbb8e085248

SHA512
82bed77b698fab0dd7603bd823878978ad45bb7cc4e4e8ec7e75d5ed59fe2458ebb7286a2c6e062fdb13099d00d62428fa05c9ccfb37da5841a02ecc967fa1ff

Download Submit
C:\Users\Admin\AppData\Local\VortxEngine\app-2.3.87\Signal-x64\git2.dll

Filesize
1.7MB

MD5
fce437faaefca7e6804a99528391abd6

SHA1
6af379ad85605aa88a5d0107e2b2cd826a45f101

SHA256
8ec16dac1bd26040802b005e19f2cad4e80f5ffd8bbc8feeb2d2feebc95d1e6c

SHA512
fa1327032beb46b0db7d2e643330b2b6141273467c2dab76826893dc698addcdf97233c808ddaf855ee85d1a4b5f268ee986c270b7d162cef19ad362f0df869b

Download Submit
C:\Users\Admin\AppData\Local\VortxEngine\app-2.3.87\Signal-x64\qml\QtQuick\Window\quickwindow.qmltypes

Filesize
215B

MD5
2006d4b7d0da455aa4c7414653c0018a

SHA1
6685b8360b97799aa4d6b18789bf84a343e9e891

SHA256
a96c7bf5832767bdc9d91e2290a3920aec3abfbf2e3814bce38b49483f16f84a

SHA512
703804e6fab0cf44317b7292c547a1348e2e7395e4b71367c32c3b097bcfb3344d3296179bf4ba33a4c752ae58a3873af57d8cdef35a34564205356bb4e6fd84

Download Submit
C:\Users\Admin\AppData\Local\VortxEngine\app-2.3.87\Signal-x64\qt_temp.egQBhR

Filesize
479KB

MD5
25481b121f583161ff4a5a2daca59f24

SHA1
50ca8b5b552e748028e724472c3e025908ba4e84

SHA256
dc20fbd14d3c1471665671ae91d34385166e2c6ed8d5f0efe2c524b8b15373b2

SHA512
d33105f0af9bf8ecc8705ecfe94d748c28ebe366edcb1653298197c6ce48dfd2b040b7606a6a7edb146aa6a51b9d7c73c8ab0b54cf10057e0c30e31910c2e9fd

Download Submit
C:\Users\Admin\AppData\Local\VortxEngine\app-2.3.87\Signal-x64\tesseract41.dll

Filesize
3.7MB

MD5
5884842360f4c3db8ec1308f9b570478

SHA1
d04c055825c78840adc461a1c5056079fc92eab4

SHA256
17924a33e8d117e3cee74f23c0788867bae934665976c151954e72e15d1de1cb

SHA512
a0eb568d7eaa2d7ce5db3f5777065180d0b03959e2bbdbce28e48329df18eb2a6aca0e8502b24eedf84522cf171f83b18f89a64ceea44a165fb57bb31e3d19cf

Download Submit
C:\Users\Admin\AppData\Local\VortxEngine\app-2.3.87\SignalRgbLauncher.exe

Filesize
549KB

MD5
d1fb0ffce6a884772789446c8e62501b

SHA1
5f8ba7c99a17661d58c0becd8ab8e8d88a59182e

SHA256
28fe384d6b78e7ebc7495902ce77305dabf6eeea83c3c47e89e2e22f69bf9131

SHA512
3721a4e31bb7302164834b20d2810ef5b28c7841c89dd5f3bbfd1043eaee1b7b541cfa3168df42145482d3b7b05dc2d813a9be63daf044610168fc2436e2b4fd

Download Submit
C:\Users\Admin\AppData\Local\VortxEngine\app-2.3.87\msvcp140.dll

Filesize
566KB

MD5
0929e46b1020b372956f204f85e48ed6

SHA1
9dc01cf3892406727c8dc7d12ad8855871c9ef09

SHA256
cb3c74d6fcc091f4eb7c67ee5eb5f76c1c973dea8b1c6b851fcca62c2a9d8aa8

SHA512
dd28fca139d316e2cc4d13a6adffb7af6f1a9dc1fc7297976a4d5103fae44de555a951b99f7601590b331f6dbb9bfc592d31980135e3858e265064117012c8d5

Download Submit
C:\Users\Admin\AppData\Local\VortxEngine\app-2.3.87\msvcp140_1.dll

Filesize
34KB

MD5
c385ebc3a83d842489021e48e23bc925

SHA1
0a992abb2e424da981196edb280e7821f2033d9f

SHA256
8e49a6d937ee6ac20d949629b54e28caf01aef312bc7184063280346b35899e3

SHA512
85cc4c9fbeacddc934d46d907354c1fe93dc62b1bad7a6ccdb7c9101e820d01717e863fab39dd6bc062f38a100f03d49ebe2b3905146bcedfc6c014703d8c3b3

Download Submit
C:\Users\Admin\AppData\Local\VortxEngine\app-2.3.87\msvcp140_2.dll

Filesize
192KB

MD5
4b27f209925c247252babeff90d6cd2a

SHA1
709dc2e8a03a9f261c64adf3f1c0839de62ddf52

SHA256
25305353c51ac72f4646bd549493becdbd6c997605f70c937e72cad3f962182d

SHA512
30e8ef20ec13abe50a13319159eb2ba1ebb117e1e4c438e24de48331acab34d8af3531e051cd93597eb5bede0af81ae223a06daa072ff226d79240ffff68b7a6

Download Submit
C:\Users\Admin\AppData\Local\VortxEngine\app-2.3.87\platforms\qwindows.dll

Filesize
821KB

MD5
0404eeccb09fa3f382ce5252f71832b7

SHA1
1ef9226cbd6e39244b8bc326bd297fcdf89aa6e5

SHA256
2b4457c2bff34ef5897c899209a16a5a45bb6094bd6a0b604a0cea4df272fb77

SHA512
b418b006f85e14086793774b43cb9067dff391f5d29156b6b2e1246bcce4700e73ea89402b33c7fb96103ae6c05939260c32eb05f5e23574749d4d44b5cf0023

Download Submit
C:\Users\Admin\AppData\Local\VortxEngine\app-2.3.87\styles\qwindowsvistastyle.dll

Filesize
138KB

MD5
d0b55c8de245f7cbab74845e79363764

SHA1
8a7bbac5eef0c1dc34bf506bcc6e80fe985a67af

SHA256
0af61f91b0b6f7ab8fa07efa6b8302ac4c968abe3fce3c09cebc28244c3149e6

SHA512
c9b61dfe2c1ee0a134426f7e5581af52c5af212faa4f1b1899bd2f108e2d529dfa7625975b9c520e16a06b7ac4ee0652e5fdb0060cdd1c49fade9b53028c8a53

Download Submit
C:\Users\Admin\AppData\Local\VortxEngine\app-2.3.87\vcruntime140.dll

Filesize
106KB

MD5
870fea4e961e2fbd00110d3783e529be

SHA1
a948e65c6f73d7da4ffde4e8533c098a00cc7311

SHA256
76fdb83fde238226b5bebaf3392ee562e2cb7ca8d3ef75983bf5f9d6c7119644

SHA512
0b636a3cdefa343eb4cb228b391bb657b5b4c20df62889cd1be44c7bee94ffad6ec82dc4db79949edef576bff57867e0d084e0a597bf7bf5c8e4ed1268477e88

Download Submit
C:\Users\Admin\AppData\Local\VortxEngine\app-2.3.87\vcruntime140_1.dll

Filesize
48KB

MD5
bba9680bc310d8d25e97b12463196c92

SHA1
9a480c0cf9d377a4caedd4ea60e90fa79001f03a

SHA256
e0b66601cc28ecb171c3d4b7ac690c667f47da6b6183bff80604c84c00d265ab

SHA512
1575c786ac3324b17057255488da5f0bc13ad943ac9383656baf98db64d4ec6e453230de4cd26b535ce7e8b7d41a9f2d3f569a0eff5a84aeb1c2f9d6e3429739

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\.sentry-native\351089ba-e685-4fa4-eb6c-f1d2bc3917d5.run\__sentry-breadcrumb1

Filesize
1KB

MD5
476666253f1a2a266fd0674aa73be460

SHA1
f9f0733828c03134a1880773c963f714e80b0044

SHA256
aa30c917e9ed422cb680db2721463a6d9a451558cabc064af12a73092861d70c

SHA512
384344cb52f8a0d79d9741f068938a2f4f1011d882214b675855837c24c8d6bbe137045c08332e1e9feeb39f64fdc4673a247e77f383ddbb14b80e7c2d26f205

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\.sentry-native\351089ba-e685-4fa4-eb6c-f1d2bc3917d5.run\__sentry-breadcrumb1

Filesize
11KB

MD5
bf525d62a87834bab5b6d53602a35315

SHA1
abffa415de29bcfbc5147dd362aacfbac99c15ee

SHA256
4c5055f5d4eedd275aa0519067c41927766d8b965cc059f9fcea2e80a8b3f7cf

SHA512
95d68ba7113a972925e961d3966d1012788ccecd0047f0c87a2dae4a6205aeb63415c21d545ea8f18db05e9beb64e1afa1af42b9e0bd17ce8ca9443d8f475506

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\.sentry-native\351089ba-e685-4fa4-eb6c-f1d2bc3917d5.run\__sentry-event

Filesize
463B

MD5
e97722aba331d1824578976320d22d5e

SHA1
6bce8bbc78d1265b0978af3dd2850c323474b46c

SHA256
d33157ea56c1faa610509c0cb89a4d76d36393746935393f47eea4ce11cd28e8

SHA512
00618ca7d8942545ad0e74e9d7dcef6f40118cf2e37ca8f4f57ef948c2475e4632e1f4463bb2af1b41c2265abbf03f2c296ee36d161e0d6c20b31e0aeab37a1d

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\.sentry-native\b170f218-9a58-4743-0b1d-93c0eeb8568e.run\__sentry-breadcrumb1

Filesize
1KB

MD5
9d8173d826226c1062bbefa9459f83d3

SHA1
5c2dbc7e6d1b466a895f766d9491216fb2b7a8f6

SHA256
92194fede0bc240823acb4eccf0dc55ad1ce6b447aaf2b10b8eca23f318c9ef5

SHA512
dababfd1c0c741a138f3d496eaa26a7c92c58b714184dcdd97c7b03126b76d5740418163dcdf3c362fafcaf9fa6d96fe774011eb19e64e21205599e01361bb8d

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\.sentry-native\b170f218-9a58-4743-0b1d-93c0eeb8568e.run\__sentry-breadcrumb1

Filesize
6KB

MD5
a6723e80b3840000c3187e17d68027a6

SHA1
d843087c38f1ab87f8cfc97d55b1ce4435007a69

SHA256
08592a3a17dfeac22c451d7359523bf75b4ba00fa38605464524d05f151c7248

SHA512
9bf48394382ed71b1016b0d189a33ae1b549a9b635e3d6f7c65c86de548a2fa2e4359b5a6a497507d07cfc40cd80aa51cdbe43cfbcb9d15ae30d2870eee2b0e0

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\.sentry-native\f9ab189f-1d33-4a4a-9b66-62a9eef94824.run\__sentry-breadcrumb1

Filesize
3KB

MD5
86391fcb37d23a6aab9e0fd022deff33

SHA1
77c89995b7e7cdfe87989254148c1eb9701d5af1

SHA256
8e7469407d1feccc1ce10618d0fd9103191492e217275fe158f0787d34da852f

SHA512
f02c2d825e72094a116612472c539bbbbd552681c8fe40e90bbc1feee7ae0bc9acce17cf2346bf575ff244128020abfd21de3e8efc535c3537a6241af8d33346

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\.sentry-native\settings.dat

Filesize
40B

MD5
043bf8acc6fd2d2cbabc6d2c40ff2f40

SHA1
260284b6c53018cb972711316be81bd83bba50cf

SHA256
9401f40f7b762f7b820b1365858eb5dca478319cb86a8cfa997da38eec561552

SHA512
9de835fababb4449efe9539b8dbacd3f587b7fddf864be9b4bc905e0588821343074f42bb1af5fb40711fe7f7ddb195f7a8bf1acb8eb5f1fcf77d0d02b5bfb61

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\0937b9fc3db4bacabc4791798230c6a7\.git\config

Filesize
238B

MD5
da973309e0da037ea9a071d4426eda6a

SHA1
51df9b1c2c1122d6b8c91531d239372333205e7c

SHA256
1464dc7abe6ca5ae26b5b9f2573cef975c4dd117fecef638336edb00385093ec

SHA512
83966d5bc5f318b14d697f2e53f4df2bdf9556af88ae2de8bc7b03dbff0ebf60522a610a32d9501b3154f0a67644b80c12e27be43f36fe7a8fdb22e52d7ad0dd

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\0937b9fc3db4bacabc4791798230c6a7\.git\config.lock

Filesize
271B

MD5
b05878fad1674391e7927079aa7a532c

SHA1
d3c4ddf1a2443e393f8cd999c064a8a2a5b571c5

SHA256
c847f3cd7a4e3cc10b423e9c35322cbded45a086b35aab2b3035c729bf592109

SHA512
40df9b15ccc378290823e85df646a342bcb0019f9c462b733ff39dca6b350cd4f1e5f670ef9ac3877440ec435c1ae65f17d2434910cfcf6c15f8037c49942ad4

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\0937b9fc3db4bacabc4791798230c6a7\.git\config.lock

Filesize
296B

MD5
cb42bbde245f2b82d236653b515ec0ef

SHA1
3d293a95ed843d7c034cdb4a192daaea7490e49c

SHA256
de724cf023e4b11a335f4a2f48f9ea9309b30f201af4dddd4e78c058fd3d227f

SHA512
d1fd1a57878b3d0c6b9bbdce3dcb9e744cd47e5149ee50092820e5f7a723ba1828d6552abf4db47b0836a89884c9b95a624c98aecdf18b500a10abefd188d03f

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\0937b9fc3db4bacabc4791798230c6a7\.git\index.lock

Filesize
248B

MD5
a581a6af030f46ac6d3fbbd3eb61e046

SHA1
fb110a467669a2abb1f6262e9b03787c5a182c79

SHA256
2df3aa27ce1f37432677906f93c45abf82a1c3a32c34db0223e9dbd61a8ad9ad

SHA512
bceb2dba47717574c85f022bf4124c6ac8f430be090ca3ac5b80725796d9d5722177282e8e2417def7ed25bf0b7db8e09b87019d9d9477e2bd3022a203f1516c

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\0937b9fc3db4bacabc4791798230c6a7\.git\refs\heads\main

Filesize
41B

MD5
738947a316f272f3b58840f1f599e49a

SHA1
0ad29657824ba4ee569a62f6f387ba1c46f715d3

SHA256
d40e7f42dac0c804ab9084687621c069b2e2504b1d5989d9def3ec53a5ebff2c

SHA512
2645a0fce2fbf42e1dcbdcaa68f39ec20d492c0e0375c14a5d80957caff0776290b3e0209cf7e42c11382c6afa85570f644b1ed0f1d230c8300107cee2893c34

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\0937b9fc3db4bacabc4791798230c6a7\.git\refs\remotes\origin\HEAD

Filesize
30B

MD5
98b16e0b650190870f1b40bc8f4aec4e

SHA1
5ae7c22895c35af5f56ba1891a4dd62b4dc1f955

SHA256
2bb6a24aa0fc6c484100f5d51a29bbad841cd2c755f5d93faa204e5dbb4eb2b4

SHA512
9389d028754e6147cf04520f96de6d66cfa63e165eb8dd3069a900d9b6f4fde76e144e76afdf8a9af2e0f0988c0c674fe58a8d0662d63c0c634a284bbcc6d3c2

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\0a9a1d8987644605907963196ccf391b\.git\config

Filesize
240B

MD5
171260e72f35bab7a1bea15c1c329708

SHA1
c389928404f06246a887846f10efaa99a03490a2

SHA256
cb955885d466010c1a7c65a21648383270dfab74a717970d97324cca2e0f640f

SHA512
0f12a6716a6fc94c2ab6993fdaf2935a9326b18c1565f80946f82a48e4600552f63d0dab8ab15391467a5a67c785696869874fe2420c1ad972a025d4d71a0f48

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\0a9a1d8987644605907963196ccf391b\.git\config.lock

Filesize
273B

MD5
2297da5285a37693e9f285762d479eb9

SHA1
1fb23e844178f128cfaa4a8451e4cce070857fba

SHA256
911b1e0ea95bc91606ee630cc19d360732b28f4b34ff29cb2cd595ddf381103c

SHA512
66d0b08cc6dafc3f05551c7aee0f0b51a4a295fe9a83ab0de864814e82c9af0ac51d9b55463e89499a2ca53544d4da144c1e3d4bc15d83ba47a0b33cddf5d56a

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\0a9a1d8987644605907963196ccf391b\.git\config.lock

Filesize
298B

MD5
0dd491f7f1008faa566ed37427751d6b

SHA1
0cfb8337f3dd0dcf958361b59dfd0cffee6ab745

SHA256
3d9f8521fd69e5e4cf86a765515245422ced0f33b2f92fcafa330b93327d4583

SHA512
3d3c885262fef9b01d16b48705fecb56d00b475760967e05cf2e141eff7bb6c395e56bff22887134d74a3d0cf4530f3461932658637ddd16b498cfd5e23d4514

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\0a9a1d8987644605907963196ccf391b\.git\index.lock

Filesize
264B

MD5
f76803e347a45a8299f0e4ce01b87014

SHA1
46643c42c3329a11f1e8f85ec7108befbecfb3ec

SHA256
abd7c3204d1c9a809b4b8fd5063b70317b030b50ea0d933a2c8ad390e567c550

SHA512
e924d78806c5569cb245e5b3406a68e2fd7cbf42301a2596e366d5aa1b51eeb556f6d48585671a693ce8a93d6b16a4062aff7322c2afc3f907df9738fbdfc04b

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\0a9a1d8987644605907963196ccf391b\.git\refs\heads\main

Filesize
41B

MD5
4ca60724b26a48f287c724bf54b13cb6

SHA1
8ceee1a98e41db91fe128834c3a8f1ecd807b6ce

SHA256
04279df0b511cb80930a1d3b1f9335e05b12eed9cd1f72307f94377eb08bc141

SHA512
7137ebf37257d8326fa70e74a22d570a0bc8e3b47825b96836a75793f83b0e581d13d6be8dc6ef452a14b436f11dfcbcf23e7190259713012b926ef57fca37a4

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\1d83f2674a3469b24acbab324250715a\.git\HEAD

Filesize
21B

MD5
cf7dd3ce51958c5f13fece957cc417fb

SHA1
9f1df7eea4156be8a871c292b549b3325e425aa2

SHA256
28d25bf82af4c0e2b72f50959b2beb859e3e60b9630a5e8c603dad4ddb2b6e80

SHA512
8bc9f17f0628c3ce935ddac3d15cd482a756797f19287a4a5b96e0e3cf37cf90c421949b2e82d65714b274c8b455ac522d88123be83ee2efd85eac5fba94ca80

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\1d83f2674a3469b24acbab324250715a\.git\config

Filesize
269B

MD5
8f578099971ec87674278cca48a39cf4

SHA1
4c7a56e5c5792502a33416e26ee91a6407b9b317

SHA256
139eec1acb419060882535ca96951ab251b44a112a3251790a0d7c722f8bd4d4

SHA512
485e76be088b0f529e47aad2c33364cda1770b8aaece18d15e4b9f2452fcb37c3fdd53d35a218852b983ef01e031f29a903722725c7fd8fd9d89187b48683c91

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\1d83f2674a3469b24acbab324250715a\.git\config

Filesize
236B

MD5
bc495d21adea446079d696e7ce04b072

SHA1
8668782757ad320a2f3d209c4955a57157bb5b9f

SHA256
2c0299c7d26f4310968323924dec07bf8c743204991c6b3e4adff786d26fa1c3

SHA512
60b76451f82ddf9ccf835c6720d73b42e3574eb05e84b91d7dfdbbec34d84242dd1b403e039459ea8931a852aa5b51d3be7ac8dfa2945b2da3ca355bca1f383b

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\1d83f2674a3469b24acbab324250715a\.git\config

Filesize
294B

MD5
b7778886b148ed3056b2bb6acbe2f507

SHA1
9c2447d4c7cf819db6b86b221d01e3b7a7a1ad0e

SHA256
90ed4a5e6aa29b87bb47b85bdeecd6d405a05a7d37921603375ee7b515cac2de

SHA512
28e9f810692e17fb727098d7806762a249138458992da90d63dc643534effd79523e22fb1938ff7d2cb7477ee2190a13ea17487bca92cd11302c849a0b762ea8

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\1d83f2674a3469b24acbab324250715a\.git\description

Filesize
73B

MD5
a0a7c3fff21f2aea3cfa1d0316dd816c

SHA1
9635f1b7e12c045212819dd934d809ef07efa2f4

SHA256
85ab6c163d43a17ea9cf7788308bca1466f1b0a8d1cc92e26e9bf63da4062aee

SHA512
f7e152f75b124c3e1c5d12f00427729d9eec4e2c1bf70d7606440a6600d003367eb178331e75ab976a61496e79c2c822020849d28ffd170946397b934611b471

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\1d83f2674a3469b24acbab324250715a\.git\hooks\README.sample

Filesize
177B

MD5
d82bea07313becc69a9abcb4556a924f

SHA1
9f2aa636543e528d2a59ed0468332a63b479479c

SHA256
7319d7f1803fda2b3416143e426b9ec4c3c3c817c75188b2b82cb3e68ff293ab

SHA512
c41c0c3da9c4b03922690ec294901f1748ffd094789c7f2566738a1fd03e9b0623adbcb873a3318c3c4b586b8d8525c5e6785d94d62423bd66f6ca414388a7d8

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\1d83f2674a3469b24acbab324250715a\.git\index.lock

Filesize
912B

MD5
9f82fab528589051abf09eed148cfc99

SHA1
109cc28e71d9fa4b914b569a134072a25de1d523

SHA256
752c7719aa39a76c975591b0a2ebe70f64c5e35f961ce26273087332f88031b1

SHA512
28887e2f06989f78d8fd9aba76041a42a32e17ff243632006ba59da705e772ffe8061efd7920af0f012ae5c2adf4dc871fef754239d17da55c0e5485d5829d56

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\1d83f2674a3469b24acbab324250715a\.git\index.lock

Filesize
1KB

MD5
a25b1f62775bb85cea2faf7cb984f68e

SHA1
3d5411ce2e6358d7bfaaab6046030b61be086f30

SHA256
d5bd410455249d07a92441d4353d4cc2dbc6c0f2b71c9535641d76e54dff4ad3

SHA512
cabb371c19fe68e70af939a008b4c17c1d846ceb80ddfffdcefe5049e7d97dd6ee8b058ac2aa8069ed07d423b6b9be3003375fb8d816980d74d96454acb99bd9

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\1d83f2674a3469b24acbab324250715a\.git\info\exclude

Filesize
113B

MD5
d718c267464b76000574e4fb4d9cbafd

SHA1
dd24b7ecc7abe42c13b544f8d4c67a703ed525b4

SHA256
fdb7dc7be17051c3c5067cdf2b8fdf2ca3a8daf2b5e91f34c6ce1ff3a94c5f6a

SHA512
745dfcc65abfe31b588111975057c0d593939183790ef24e3f6071a5f9e47ec35f884fa77a816e8930545bdadc00095663070c035c73eab54314e09084f9f95b

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\1d83f2674a3469b24acbab324250715a\.git\refs\heads\main

Filesize
41B

MD5
b9de5a54a9a65d00f57c90f74032da05

SHA1
b6b8349e03f9d194b832d4bb492a0b52a814c4f4

SHA256
fd51253693eb896d49ed73735368a824542b2e7addd2d556c191863c5c4f621e

SHA512
031aed7b663b0b04362f1acea2dfbbc935698aa438f9d50313e76517d471f996fb6573c201523189f36677b6865de8bf4f6f4e3e974f1c3031b4c323cf2e3812

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\1d83f2674a3469b24acbab324250715a\usb\SRGBmods_LC_v2.js

Filesize
361KB

MD5
c315fb3f245711174a50ef6f27bb3a51

SHA1
f8e6511412603d41518a064a53e2307fca8614e5

SHA256
93306cd9d0f92d9158dbf5b4f717f7a6b70f2c281cc34c808208b8382bbd2b9a

SHA512
919f3d07838f758fddafb940ad55a77b09be029581d8c6e299b02ebeedb7f2a8b12461e1def9528dcaabafc967cdf96085e4396128c50e382dbfeab050d13d1b

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\258b5aabbad432268c2c7b4e0db985cb\.git\config

Filesize
130B

MD5
c48804555c5f940edf3453758d17bd15

SHA1
9b53e09ee6ba134b0600f5c7b576cc442afa7ca6

SHA256
c877f343674ad9b00866835132bc23c020e6ec1fabfa4194962982e9d543d7c9

SHA512
4c5c64de8867d642e9757e2ae8f9e412c31b2d44de61cb271a71b44a9ef71aa5685ee0449027152efc44e0574b6b34613d1abc13d0805f6f8c8704c04b8a309a

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\258b5aabbad432268c2c7b4e0db985cb\.git\config

Filesize
238B

MD5
4a4548d9ed45faa08a1607594b26d9a9

SHA1
0dd144ecf800745bd8746bce2de227d1b4940cb0

SHA256
c18a3b7d14d29e89e36f79e2106bb03511bd20afe8ed82cf9e6b8bc3352a6bbe

SHA512
541812849ad2285b79214912658e48d370047d62e38d9c2a4643595d589c6486d4f58732f0bd3df7c5e1b5789f12288e7b74ec859894912db6eb5768529783dc

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\258b5aabbad432268c2c7b4e0db985cb\.git\config.lock

Filesize
271B

MD5
a4a8ed8a88f4c16a113fe787ef5c01f6

SHA1
af6c944b39258e1147c6aeef773e920994e7d103

SHA256
a59948419a97c5402b64035db1b7769078388553220ab74460326e3f785fc7e8

SHA512
2afa91fe9e8b07d5be8057099397870dd3490261700e8f5e6e0677e876a02c161d00df294737f8432ab003b218e2cf87cee90ccf192b76c7bc9cefe36743184e

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\258b5aabbad432268c2c7b4e0db985cb\.git\config.lock

Filesize
296B

MD5
0e9d57140eaa77cb26790677d92ab3cf

SHA1
1d778d2041e204b4430d8a49579cd723c7cadab8

SHA256
47ee609be57ba5d49878e38177ea27f5949f0547519440d43a54208b8c022d28

SHA512
f27bc27798731ef55052501801f5d4f4d5b578a0a9d348e9985f1f533c8a4ffdb80828aa64ca4786c9556c690f61764a8d42da9dffcfcd7de58348cf70ff70c2

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\258b5aabbad432268c2c7b4e0db985cb\.git\index.lock

Filesize
264B

MD5
c33e13792d3e4dfb08267c6c4e74b407

SHA1
9a60cb5466f652a019624fedbc7b58781e0a76dd

SHA256
78dd56e6dee0ee5750f5aad1f787dcc63aa185a6d637e5afbe5b76910408c9db

SHA512
a4b184351204311d9cd6f5fb372533aa93c83f446bb5e7eae2b08fa092423d25a9dec33c083255f3bcd38a393cea112d3ba91afd8cc7edad1ed6da6d6a993958

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\258b5aabbad432268c2c7b4e0db985cb\.git\refs\heads\main

Filesize
41B

MD5
edbb0866cb982d522a47a2c58a6efa6b

SHA1
888dff4fbea535f99a9fdb94ab911abd3218c9eb

SHA256
1cd8e5459ddbf953ed7a8f5dffb405681d806349fa2d92a89033ad14ebe0e78d

SHA512
4179d9302a66070cf2ad053f74d4af19a1c8d4449df75c9f05d6102c7bc61f7f6662ac598843d40a8a9749cfd28522de7682bece607ea35ddaec5aee58e185bf

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\2e841e8769dc21903231c8550b29bcca\.git\config

Filesize
237B

MD5
78068975f9dd3d9a8168c638750007ac

SHA1
825c273a09ca36f303cf63ffaffc540ca03e0fea

SHA256
5003225cce495534686234f0e192a2ce1ab89609cbf55fa61362a90f3efe9b97

SHA512
0c48236c2c2cb431c7469b64569aed16e35392dd5a76bcabf6e6f896f6be97acb26a62a9257e0a0bc2bdc3555e268a2b233dcd0e07ed6ed1198da2753fd9196a

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\2e841e8769dc21903231c8550b29bcca\.git\config.lock

Filesize
270B

MD5
c1b1b88c9be44b929700698fcf2e22ce

SHA1
b295c593c39685a4b43c81ad166c9cf3266cb521

SHA256
28648662915bf2d5fd73db448f577ce1c83d99c7df4f939e50e24a4762aa7e11

SHA512
c19ca723c92e0f000a9cee53b18e88fd1049698e36f94dc1f8b256951015e4f241d711db4a32c88c79204b21f8c6dc7b1f6509da8adf462d0de4b8e298c6665c

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\2e841e8769dc21903231c8550b29bcca\.git\config.lock

Filesize
86B

MD5
01dcb4b315e0cea3b37ab29427f00c6d

SHA1
d5e4c797c93e4260c487f4d3452c7d2b837bb101

SHA256
a379d3a1a9706642368ad6eb621dd6115801abf9c2a08a22480c11830fa65d34

SHA512
951c3ee0181862c969c17c65716c4c0204c170786dbb34e7c21bfe8f376b61dcc180f30d2b731152469137711d7ae4a09c3a848086cfedf36573dc10f7f171d3

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\2e841e8769dc21903231c8550b29bcca\.git\config.lock

Filesize
105B

MD5
32a8524ac3dc9ef687535f6540336f05

SHA1
419d9c606cc02d1a8f143da4bda8874844859ceb

SHA256
cbcdc21b9e542a035518a0283cb41a2238acc9972c1415906a4db5fedb642110

SHA512
867b10ad3c4a0919d6898b5b2014d5023fc28fe6917d04d0bc93489f8ac29eb034a8efe41ce2c8337a79cf4e804087e4f1fa3e21d3d14c71a3f76a3fc93c9b48

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\2e841e8769dc21903231c8550b29bcca\.git\config.lock

Filesize
295B

MD5
af0fe90392c75223e7e3b6d04439562a

SHA1
fa514e2d5aa916cd382652fb40a2917f9f0cf524

SHA256
26c4dd1fca6951d83a426357572c480052f17e40e351d2a5b0de431a31ff6b92

SHA512
e6ff3e4c04a18fbed9fbfb46126a942b2ae31f94a092340e971a564920b872a733cff6eda8f9ad8e8514e40dc1e368f148ea54a16079fb6433aa1a49baf96f95

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\2e841e8769dc21903231c8550b29bcca\.git\index.lock

Filesize
264B

MD5
973299263dd7ba3ec3d12c26fbe9f9f5

SHA1
9225fe05bbd366302ae5fd93b952cd030aa4d766

SHA256
24a5ea98b82a156486b291102400f6caec4a833b92f73ea265bbce961da0a714

SHA512
f15f3313d43ae4675dcadd9151c6c28b542dc0ff5b7a7b93706cac6e188c01a68fbbf53353f019029642b5901ac21a8b205feea8904089d510b52ec9c647b277

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\2e841e8769dc21903231c8550b29bcca\.git\refs\heads\main.lock

Filesize
41B

MD5
af6a5b55ae283ae74a698c928f07894d

SHA1
039f38f593b55518bbb322ab4814ab33eba70cdb

SHA256
3154292d5180fefd0d424e6b94f8958c15d475a1b9ea7fd67bd61d49ae2312b1

SHA512
3e6e9214a6dfa21788b9e7618947639a623d25c4e3894a95af56e5384f9218e619de81b233e24a75d28b5bbcf3ff247eac80b358e8aafbf07015efdfeb234d44

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\3e3612c48d8c2ca84e86270858a40d21\.git\HEAD.lock

Filesize
23B

MD5
4cf2d64e44205fe628ddd534e1151b58

SHA1
acbaef275e46a7f14c1ef456fff2c8bbe8c84724

SHA256
f6f2b945f6c411b02ba3da9c7ace88dcf71b6af65ba2e0d89aa82900042b5a10

SHA512
76b199f1bffdc6d21547895431b0f85f3857df400225cbd1ae55e7ded09786a8a44e1cb21f1feff4951cf57c893043a0be696dcb0e4f5758a4d6081a833eb6cf

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\3e3612c48d8c2ca84e86270858a40d21\.git\config

Filesize
193B

MD5
84e19ff71c81bad563e29fe2a1c8ee40

SHA1
d1a8745c46cc3d39dc55bef2978b90360625cf8b

SHA256
6a218d507f8bdbe5e712708df75ba7023c81bc425b60a809180619865c2edbbc

SHA512
48149482f1d5866950599ce5f34214a0fc96a17d6d39b69d276f5c22464065d292c5c5ec0c03c873aad3f6b1fef9f054f81accf58ab347d4e29f5cd9756b98ad

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\3e3612c48d8c2ca84e86270858a40d21\.git\config

Filesize
238B

MD5
78bb0acdfaf58a930fa7d3242fba94a7

SHA1
1b2797d06783a550c0bea0b63a9ae1de144ce3a3

SHA256
0e24b4be87068fdc806f6397b516792c49ef8e968f6b348ef9b81201bf015d23

SHA512
33777a8f54ebfb9afd7a68c0b0a96b9f7c3bc333662a10bb79cc9bdfb5d720cd08f7ebc1e43eed27918f5c6a90987642bddbe5cedecebb80991460710c3bf240

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\3e3612c48d8c2ca84e86270858a40d21\.git\config.lock

Filesize
271B

MD5
77cd3586c2060292fd35b2f3d0259b24

SHA1
f62ff6fc4c71392ac53c6ecfe85afc145ec16208

SHA256
4f1bd76de923d2fe6f70fd8775d590510e0d9ae37fa505f58b892525bf51ce77

SHA512
e6a655afcfb0c5e906ad1893e66816dbc015372f99d52e11dcd366c32ea4ffe69005a5a56985dfd1b46673a866a959bb788206814afc302ef34511bb1151ce3e

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\3e3612c48d8c2ca84e86270858a40d21\.git\config.lock

Filesize
296B

MD5
e841a27b64d07b908232842c9057436c

SHA1
a79e93ee817c5ff40eade0aa262798f05dfba163

SHA256
d78054eee6342ea651156b1cc160a4e403b78db54c617e58fb3864666f255424

SHA512
9ab0fda5c49e4483cccdce346e4119f2f22741803b1aa4949c0ae9d2988d0e3222427bf58bb74d08fd25c03333352dd6171f220fa3ad186f9cac8ea2be9a3908

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\3e3612c48d8c2ca84e86270858a40d21\.git\index.lock

Filesize
680B

MD5
e740590f6b3ae2f09d8c19c00b05fde4

SHA1
03b9f7cc0c10c48d1357cbffde61af67b42e5eb2

SHA256
d27dbcf4fa584be35e32fbdf7e867e48eea0c5b6c392a28989d87606a982915d

SHA512
4bab8a250a30fa58566a28dfa7ed7e8ca2193fc2bcfb401a7512b2f1585691b71830159b4a5212aead0baa241418a7ac4248bd3c8d7662bbdda7f8c2a17687dd

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\3e3612c48d8c2ca84e86270858a40d21\.git\refs\heads\main

Filesize
41B

MD5
49f6b6b5a92dce89d0a8ca4bafdfaa50

SHA1
cd8c75f56fc8167e3b89f2d2c6f7900710807500

SHA256
abf6c09121343a9128079ab1553842171aec7a0a021bad705fed40c894e703d8

SHA512
20a94fde6ae57e99bd94a9e09bf07e3a1b8a3d1b6e1ecb61cbc591f5c9e35c31cd942c36ee585626ad2e260ef75bf9e2490836e7ec8f07a25b9f354c1efcad99

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\3e3612c48d8c2ca84e86270858a40d21\Yeelight.js

Filesize
23KB

MD5
5f5e0507d026b7a77be6e96eb0072efd

SHA1
3e53350238aebc053bbeab5f7ff1fa2d7bd9b9fd

SHA256
412376f292ba38dc01507f6f794e2e104a291b2c978bca29d125db60812cf1c9

SHA512
698e3424b55afcdff43a6a7cb63c3bbc599bdf7426fdab26f243dec3a0674d9c830a5d17f2cd6f67a07ff8457390d44f6cc33d227b83c808999b81ac9540aa5f

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\3f441d22556644440d48b3bcbe8fa036\.git\config

Filesize
191B

MD5
ec6dcb5f97563e08b654312a7883201b

SHA1
b39bce8b3746571b713b6fd5a24e99af46314b3f

SHA256
a20c82fc9e3f15bc0f4c1575cffc680f08c4acdc47fc263065e67570f23c5580

SHA512
17c044180b65ff74337ad93bb1d304a86436f639122f61e6b901e7778a7f9e4842f80a491563d2d8b34717f043f5c4054cde6e8eb7d469131af2e2b98b0477f0

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\3f441d22556644440d48b3bcbe8fa036\.git\config

Filesize
236B

MD5
e364d1c8f25e7cb99a91c3f02f06ee42

SHA1
5142035669b2bf4c4d8bcef4448e3e36b7a3de9a

SHA256
252eec2250885c9ffa7a1756f05fe984cdb6f1afa331118eb91f9de618eef05c

SHA512
d0dfce30150b25f6c27b80f11bf4f13df4c57f57f97073909e6e254412a99982b4d76fc5dc1603efd253210126eb033a9ac19bf5fda29128af1ee9e668cf305d

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\3f441d22556644440d48b3bcbe8fa036\.git\config.lock

Filesize
269B

MD5
0663e1e077654590cabe3b21fd2f677c

SHA1
09522837ca144850687313a36876ed7ad9cdd79c

SHA256
f829183ba3e7658d0aee86e91b61668269dd0dde1dab93c094c884f42d5fbec0

SHA512
89846859ca5134e6c299829f39b87a9cc8522bb17dad5b1483bdacc7538dde23ca6fde90fca83931fbb7279c04eb5480ed3126f01535866913b0fcdc0ae80c82

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\3f441d22556644440d48b3bcbe8fa036\.git\config.lock

Filesize
294B

MD5
1846c2feb98d80f8fb525d50de40ede2

SHA1
19dd47c23235cc0128c6127538f78749ac0a60e8

SHA256
84284f73b36cfa97a6854e6917f5be8bbc649c8d5daee9eab1bfcd52196cfc7c

SHA512
053cef10645f7c26d914f7ad6f94525245d50b4fcd1193b298dacba0cf5089b771d4369636d44a5e66555c170440ecca1484ae8ce83acb01cd7f679b79b5c4bb

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\3f441d22556644440d48b3bcbe8fa036\.git\index.lock

Filesize
296B

MD5
6fd2a6b940f451c9095a03764d1f09c5

SHA1
004f2e9118648f11ad09b6a4c5138af5880b2f8a

SHA256
cbcbb3ea15fa11e0e4229874eeb9fb5103a85645c63e8eb5d54f36d6802d5bda

SHA512
e35ae5e30d037d32f37b1f01887d06db42a41fb7dbf3854609adf97fe8d3179be18b9823be6850f916197099e146b24e1f7dd611857811c144e817d861613196

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\3f441d22556644440d48b3bcbe8fa036\.git\refs\heads\main

Filesize
41B

MD5
7c1255f36cab2191d9ce933a3331a2cd

SHA1
2266102d1c82e80b47542c63b445b41d9d500361

SHA256
4a697445beaf07730c516279a38807f8d32aa3d8dccd753ad169709601fb74fa

SHA512
dd1e990a6c62b4536814a683ff5bf70f71188dcac90e76d808d9ebe7d99f322478f043a4e3a6efbf3d32fcdf48cb665e1b2a4f54992560c40c65c116e8e399ee

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\3f441d22556644440d48b3bcbe8fa036\Razer\Razer_Mousepad_Controller.js

Filesize
23KB

MD5
f8d8ea6c97e57db7f07115c2c2e8493d

SHA1
8874bd49b512fe2fa1d0dec8346ab3fb4445317e

SHA256
bad23b41aaabaef1db6d6190157fb72f33e8151cd61e362dc9390b6846acaa69

SHA512
fa10f08220a8d23daa9131107ab109d7995947a3b1692735305f25cb09da62cc90f442ef68e4c8c218256fe83d1c89c14023ed857699d58c2fea043d927f8721

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\460de8393ca8ccef9b3a183899cd80a9\.git\config

Filesize
21B

MD5
0b9ea4a26e9d021ad26251cca01e2b1f

SHA1
f3df3e4af2d3d6bb2cd6410f4e375e8617d37feb

SHA256
bc6c44e1ecf71142efc0eb0bf69268dfbeb9e018b34b00b510d50f9bf57bff90

SHA512
41cc63ca47deec80784a71688f98de3a71b0af4bb059ade7904ebadf59357e78ac6ba611a26c4ab9ec719ff9dbb1d0472feb711ebc361f922fb7375db64783dd

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\460de8393ca8ccef9b3a183899cd80a9\.git\config

Filesize
239B

MD5
99545703b83bca98a7c261c3a48ce2c2

SHA1
013e50f26b63845d1a19792bb804449a4d1f6b05

SHA256
a7caf78da769f6c83d7e9e88733f70093f7168017166b931e07ab40cc1ca6414

SHA512
0479dc15c3e7c9bddc31c484591b0faee37f4f34bf3218feeb912e54d14d64a95202b36c22ccac5929a1f7c5049ef619d5d6ff890aa844846b919e98d19ba320

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\460de8393ca8ccef9b3a183899cd80a9\.git\config.lock

Filesize
50B

MD5
d98b908d5894be36ae472bb8119a1f1c

SHA1
629fbc2934695078ec18466173383ff604759275

SHA256
c0bc14f31424882483b92be3180cfd0570caae1c37c098cd5ddaf3ccc3544039

SHA512
f66fc7a49ea3e8ca6dced8a3b78ab00bfaf6668b57a553ea47f5905ee2daa879957086722a67590660f3f72c7d1be1c86faa54bc8a53042b18d88fee15485752

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\460de8393ca8ccef9b3a183899cd80a9\.git\config.lock

Filesize
272B

MD5
191e08445617530132dc5092da09863e

SHA1
f047b9d1dc5f418fc1994b32e2b20a2acdd75c11

SHA256
55cac1cdb67bfb85f034b7b43c433fb86d05c9675d74b0b60c8c31d07b33a067

SHA512
d1dd6b852e7e2472725264dcd72db660d0dae2dd51ad2a00fbc88c9d2f3565fd6b01659511a2f9a860b4789d2c09eef17b076d0b52601624fd33a2f69f33ea42

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\460de8393ca8ccef9b3a183899cd80a9\.git\config.lock

Filesize
297B

MD5
55439adec76187743543ade5c6100196

SHA1
0aca195c988126b1f9fbd4eb49a11a506c8e108c

SHA256
b6fdb822be1d79c4b56899bbf011abb8322e8ec806871130c16248622d1fe2d6

SHA512
7440bf68133b3f3b3e6dfb1ba6c7f82baf69d5f923cc6a0cde677c0295cbe22a3a42748327ddf53ad4d70ae04a3ad1ccb25c24b6d030875f1a874ca6fbd7870a

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\460de8393ca8ccef9b3a183899cd80a9\.git\index.lock

Filesize
264B

MD5
b077ebed8b06b3318a391922524a7dfa

SHA1
e41a82bd857cc6a7c6192cbdc83993fa1b8e0652

SHA256
897d898cdb5fc39ba9fa4ebc2282c4e58e7cc1873b2b3ad63749990132f74ae8

SHA512
1b4bfc9a037037f19320e00cd22bdeedeba9ca6a22a33968de3e299314f34bce1528a1a8f7d714c73bdc4cabc18d421c4a1da529ea3dc3fe6fd6213581c78cf5

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\460de8393ca8ccef9b3a183899cd80a9\.git\refs\heads\main

Filesize
41B

MD5
e3c2420aa174219b9c3d9bf8b8234ada

SHA1
cd225cce02ec406bf4a828612ad1d8126341d159

SHA256
0308686b3b750297c33818af664137595f7e15282fc98e1a51adb62742fcb11c

SHA512
e7a55d2cc103be6483b06e6e5640f849f1f63d89f4cc03e99c0646ef14775ea5cb90f5ff7800f1528a9c5b0956b16861ac23d96cd4b9b0e70e34eb3bb5fca8ae

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\8d5fcd947b3893aafda11395839514da\.git\config

Filesize
235B

MD5
108b8472cc249400a2ce024934f4701e

SHA1
44de3974410d0939369f32dd4ccf0959a28cdd4f

SHA256
2941ef73d979a04218f30e476b6b5489bbd6d7848411807927a06dd99f360b05

SHA512
77bdf34bfa03e77897fe87cd0d595eb6756fc09b2a0432e9b5b8dd6d8eb77f4591011661ea149fde4ec972ac674ddc72441eb50301f53e5ed73d9312dff27f58

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\8d5fcd947b3893aafda11395839514da\.git\config.lock

Filesize
268B

MD5
21d03bf5d8ceb599bd0dbd7d0f6f0d00

SHA1
e950a2b9159d9f85825e2d39fcc9768e076d2e77

SHA256
e06394f8cdce13cceac6dc20cf817870996d1cae06be98800f99ae980bb59951

SHA512
8dbbfcb48d8b3f7ece697b6ecf7e04f72cc2e9ff589e608c87836ec25c564138c878dd54539af76a261cb7bc0252f625ca6fde7a6784ff4792737d7af6a72145

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\8d5fcd947b3893aafda11395839514da\.git\config.lock

Filesize
68B

MD5
e3b8c83b902bb7d92a095641c5bfe4bc

SHA1
6a8f6ce2040ea0e88d2ea8642960ce331807e963

SHA256
5a2e0ac2c1a20a0925ece65f14f6cef17ed212792999602833c02094a6190ba5

SHA512
ae54068b15d828a4dde9fe3dce681ff43e19a50b04d27e88f81c5e8a8723780e6b33e38c531b1331ca92f252548c0966a6cb9410cc7ced2b1a32112683c3835e

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\8d5fcd947b3893aafda11395839514da\.git\config.lock

Filesize
293B

MD5
d476766199b893690c1455898f3c3f9f

SHA1
8fdaf6ff8f7d1d5f8f9f0f6e80167a8b8d3727a4

SHA256
aae5e398def3cfc9226f0982e9e9189432d4bf382c0436f23471a51234854f7c

SHA512
08a661ec6ea8ce77cc4fabf55b179fc6349789d1c55a40a07aa90e6ded5f337b3234433d8f79cb2aa6c2323843d75f7952118ecdb52a5c1a2e6e7e2f1b4e39d5

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\8d5fcd947b3893aafda11395839514da\.git\index

Filesize
281B

MD5
42bc639b933920cbe253728d50dbedbe

SHA1
6df311b876a0846bdcd842f9b32d510625f2ba35

SHA256
95995fcd1604c724348933a4459c42b42e086a6b690b0c8c88b6d8f93f3589a4

SHA512
08ca0b1fa13f30b1df05465d4a11cd04f73a5d5bcf8ed06d04897dadf8ad37d923bd2ee75ff56d93b690f14c7b98f3dc95f8889c31dda1c65f8d2777176b0686

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\8d5fcd947b3893aafda11395839514da\.git\index.lock

Filesize
248B

MD5
b4a7167ac525b57703a3d634f083e552

SHA1
734a1f5f6eed0710e18c8f6961fdb8f77d02fc20

SHA256
a7fe781d218b9ad0a206501fd43307190afdd2a0e12c23fa90a1f907cd4fb2df

SHA512
ff031c31922415976e88bb58f30cc92278a45108c2b99012f8e3fc344d0b87ea0e11bbf1d0ec2cf42558e00e747f5d869000153bdee031de3ad66e9ba9f848b5

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\8d5fcd947b3893aafda11395839514da\.git\refs\heads\main

Filesize
41B

MD5
6f5fca83c886236cdada4f4b170de091

SHA1
1ed4c7fba44ebf19675669b1c53f810de3608e34

SHA256
69dc7b2b73f62ece0fbdafa31fa4358d6bc80648bb2cdf745a58500c4d93546a

SHA512
a5d97018126e3fa7e48cea2306a95a9ea31779e416b788986e271ed313a42e306417459aca3d1a314d2f890b75d14e08ab1638bd141dc48d57f3be342143c1ef

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\db96a7d88f5b77cb2217d656c1356d4e\.git\config

Filesize
273B

MD5
1ee07b4e04f30e4097561162b3afbb02

SHA1
17d29f900e4bc443aab3d540c8f8e88711a4cbce

SHA256
4f968d0c395f681c8b38fd5e39c0408b6d7107f7b5d82975e17bf3e75ce40aa1

SHA512
5a38ac110cf0843fb28cdf818b06161b608d1da75b4521320c1a3a1cbbd4c055f79d697c99aacb3a6a11badfc3c23bca5440bee8c317c0b74665802eb5699c62

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\db96a7d88f5b77cb2217d656c1356d4e\.git\config

Filesize
240B

MD5
9122ce8ec639c44ca36a34ce24f710b6

SHA1
a4fc0e004bf06f75d8a5cb9d3b0421155c442558

SHA256
14b475cd6b8dbd0b66384fce29af2b20561e5372f9be63c502ecfbc28eef50f3

SHA512
d8997cf9121979f11c7c31408c0a548923a3acab1b3e41a6e07a3256cbc6d775eb076987eba62f09a6d94e1e67b86dc661d071cac7b2f8c07b3e911b613d73c8

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\db96a7d88f5b77cb2217d656c1356d4e\.git\config

Filesize
298B

MD5
a9724f48d02d18dc25225c4537ec4cfe

SHA1
171af53a58dab9b9f92317deb641730156cbfb8d

SHA256
3a90cf4bb3e6dee3949c255387c5861e9fe7cd23e64e7abfe2a6e075fe1188b7

SHA512
e65ebe3591c798e85ddfd4bbf78b9261cee1c713438dc564abce7c3805677ffa4dc033f58197e29042172594482a67cd381679e97b619a97232414b2680d050e

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\db96a7d88f5b77cb2217d656c1356d4e\.git\index.lock

Filesize
12KB

MD5
9b3b307c7d7fb9d091ea1ac09c0701f0

SHA1
1f6c726128f46ff635141279f1ad7f4c4ea9a8bf

SHA256
3abc131794e43a4a7224b5ef7fcbbf437f79e1b3c6cffdac312db7a3480d72b6

SHA512
981f1a717f0f93a992070ddd72c405bc82edcc73c4a75af419da50f85e015d433e1151512450eda1dc720246b9a95e816043b6023c615e3797208a5ac7b26995

Download Submit
C:\Users\Admin\AppData\Local\WhirlwindFX\SignalRgb\cache\addons\db96a7d88f5b77cb2217d656c1356d4e\.git\refs\heads\main

Filesize
41B

MD5
cc565af89078a7badae7a1af9f432218

SHA1
6bcb605df5128839d037515685e8ac0fd68fec57

SHA256
eb134e39edbc8993e0a4c1fb04df0dd0e390133fdf01b5f5ee9e762bae1eee63

SHA512
817727f20b84f23909165621dbfff61a5f30d7ee22431a89e54903ca4eee5bb28eabe9b0ca2f70cb4da92e74b1432cb5d132aa468f1965915fa5f3f22cdcbada

Download Submit
C:\Users\Admin\AppData\Roaming\WhirlwindFX\SignalRgb\QtWebEngine\srgb\Session Storage\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\Downloads\Install_SignalRgb.exe:Zone.Identifier

Filesize
26B

MD5
fbccf14d504b7b2dbcb5a5bda75bd93b

SHA1
d59fc84cdd5217c6cf74785703655f78da6b582b

SHA256
eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913

SHA512
aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98

Download Submit
memory/408-1649-0x00007FFA1F2D0000-0x00007FFA1F895000-memory.dmp

Filesize
5.8MB

Download
memory/3096-1784-0x0000000005FB0000-0x00000000064DC000-memory.dmp

Filesize
5.2MB

Download
memory/3160-1878-0x000001C7E6150000-0x000001C7E6151000-memory.dmp

Filesize
4KB

Download
memory/3160-1714-0x00007FFA18730000-0x00007FFA18CF5000-memory.dmp

Filesize
5.8MB

Download
memory/3160-1871-0x000001C7E6150000-0x000001C7E6151000-memory.dmp

Filesize
4KB

Download
memory/3160-1872-0x000001C7E6150000-0x000001C7E6151000-memory.dmp

Filesize
4KB

Download
memory/3160-1873-0x000001C7E6150000-0x000001C7E6151000-memory.dmp

Filesize
4KB

Download
memory/3160-1874-0x000001C7E6150000-0x000001C7E6151000-memory.dmp

Filesize
4KB

Download
memory/3160-1875-0x000001C7E6150000-0x000001C7E6151000-memory.dmp

Filesize
4KB

Download
memory/3160-1876-0x000001C7E6150000-0x000001C7E6151000-memory.dmp

Filesize
4KB

Download
memory/3160-1877-0x000001C7E6150000-0x000001C7E6151000-memory.dmp

Filesize
4KB

Download
memory/3160-1879-0x000001C7E6150000-0x000001C7E6151000-memory.dmp

Filesize
4KB

Download
memory/3160-1880-0x000001C7E6150000-0x000001C7E6151000-memory.dmp

Filesize
4KB

Download
memory/3160-1881-0x000001C7E6150000-0x000001C7E6151000-memory.dmp

Filesize
4KB

Download
memory/3160-1882-0x000001C7E6150000-0x000001C7E6151000-memory.dmp

Filesize
4KB

Download
memory/3160-1883-0x000001C7E6150000-0x000001C7E6151000-memory.dmp

Filesize
4KB

Download
memory/3160-1885-0x000001C7E6170000-0x000001C7E6171000-memory.dmp

Filesize
4KB

Download
memory/3160-1886-0x000001C7E6170000-0x000001C7E6171000-memory.dmp

Filesize
4KB

Download
memory/3160-1887-0x000001C7E6170000-0x000001C7E6171000-memory.dmp

Filesize
4KB

Download
memory/3160-1888-0x000001C7E6170000-0x000001C7E6171000-memory.dmp

Filesize
4KB

Download
memory/3160-1889-0x000001C7E6170000-0x000001C7E6171000-memory.dmp

Filesize
4KB

Download
memory/3160-1890-0x000001C7E6170000-0x000001C7E6171000-memory.dmp

Filesize
4KB

Download
memory/3160-1892-0x000001C7E61C0000-0x000001C7E61CB000-memory.dmp

Filesize
44KB

Download
memory/3160-1893-0x000001C7E61C0000-0x000001C7E61CB000-memory.dmp

Filesize
44KB

Download
memory/3160-1891-0x000001C7E6170000-0x000001C7E6171000-memory.dmp

Filesize
4KB

Download
memory/3160-1717-0x00007FFA18D00000-0x00007FFA191F5000-memory.dmp

Filesize
5.0MB

Download
memory/3160-1870-0x000001C7E6150000-0x000001C7E6151000-memory.dmp

Filesize
4KB

Download
memory/3160-1713-0x00007FFA18D00000-0x00007FFA191F5000-memory.dmp

Filesize
5.0MB

Download
memory/3160-1715-0x00007FF9FD570000-0x00007FF9FE570000-memory.dmp

Filesize
16.0MB

Download
memory/3160-1719-0x00007FF77D3B0000-0x00007FF781AFC000-memory.dmp

Filesize
71.3MB

Download
memory/3160-1716-0x00007FF77D3B0000-0x00007FF781AFC000-memory.dmp

Filesize
71.3MB

Download
memory/3176-1721-0x0000000019660000-0x00000000196F2000-memory.dmp

Filesize
584KB

Download
memory/3176-188-0x00000000006E0000-0x00000000008A4000-memory.dmp

Filesize
1.8MB

Download
memory/3176-1447-0x0000000009D60000-0x0000000009D98000-memory.dmp

Filesize
224KB

Download
memory/3176-1448-0x0000000009D40000-0x0000000009D4E000-memory.dmp

Filesize
56KB

Download
memory/3292-1712-0x00007FFA1F2D0000-0x00007FFA1F895000-memory.dmp

Filesize
5.8MB

Download
memory/3460-1683-0x00007FFA18730000-0x00007FFA18CF5000-memory.dmp

Filesize
5.8MB

Download
memory/3460-1684-0x00007FF77D3B0000-0x00007FF781AFC000-memory.dmp

Filesize
71.3MB

Download
memory/3460-1685-0x00007FFA18D00000-0x00007FFA191F5000-memory.dmp

Filesize
5.0MB

Download
memory/3460-1686-0x00007FF77D3B0000-0x00007FF781AFC000-memory.dmp

Filesize
71.3MB

Download
memory/3460-1682-0x00007FFA18D00000-0x00007FFA191F5000-memory.dmp

Filesize
5.0MB

Download
memory/4636-1740-0x000001E1B8700000-0x000001E1B8902000-memory.dmp

Filesize
2.0MB

Download
memory/4636-1773-0x000001E1BD760000-0x000001E1BD761000-memory.dmp

Filesize
4KB

Download
memory/4636-1779-0x000001E1BD7B0000-0x000001E1BD7B1000-memory.dmp

Filesize
4KB

Download
memory/4636-1778-0x000001E1BD7B0000-0x000001E1BD7B1000-memory.dmp

Filesize
4KB

Download
memory/4636-1775-0x000001E1BD770000-0x000001E1BD771000-memory.dmp

Filesize
4KB

Download
memory/4636-1772-0x000001E1BD760000-0x000001E1BD761000-memory.dmp

Filesize
4KB

Download
memory/4636-1776-0x000001E1BD760000-0x000001E1BD761000-memory.dmp

Filesize
4KB

Download
memory/4636-1737-0x00007FFA18730000-0x00007FFA18CF5000-memory.dmp

Filesize
5.8MB

Download
memory/4636-1738-0x000001E1B82B0000-0x000001E1B86F2000-memory.dmp

Filesize
4.3MB

Download
memory/4908-1660-0x0000000004C80000-0x0000000004CA0000-memory.dmp

Filesize
128KB

Download