3ad7a4b5ceaecec3ca4ed0baed81095f6694fcfc2a0fdeca268b0d157dee61b4

Analysis

user interaction
yes
max time kernel
509s
max time network
415s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
25/08/2026, 16:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
GadgetPackSetup.msi
Size 21.1MB
Sample260825-twvmwsste1
SHA256 3ad7a4b5ceaecec3ca4ed0baed81095f6694fcfc2a0fdeca268b0d157dee61b4
MD5 1c0408a2442c8dc5e6c934ba566c98fa
SHA1 6c023d5c489f80d7c4c2acc095592fac1de8efa7
SHA512 a5c19b424462241d8229ffb0d87417ca8bb71b24bb8d58c5577cdc82f570d7ce6c357cbfae2e5970c8ddd599503b25ba1b4361b73549be327848c05be8a64dec
SSDEEP 393216:WScExmJgH/0oKkQeD3kfzkIvCCzahWehhlofdTvnE5sud7HmZVgqfxf7Zjc2XhLq:WS9xGgHcotxi32oWlo1Tvard7tqfxf7a
TLSH
T1FF27339B7D079A37D7EF0235C23B8B74681A6D441191286DE608F9DD4C314A2EAFF3A1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

adware defense_evasion discovery persistence privilege_escalation ransomware spyware

Malware Config

Signatures

Event Triggered Execution: Image File Execution Options Injection 1 TTPs 1 IoCs

persistence

Image File Execution Options Injection

T1546.012

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options	8GadgetPack.exe

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-4045429996-2364296335-1634900306-1000\Control Panel\International\Geo\Nation	8GadgetPack.exe

Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
persistence privilege_escalation

Component Object Model Hijacking
T1546.015

Executes dropped EXE 9 IoCs

pid	Process
1992	8GadgetPack.exe
4728	7zr.exe
1100	8GadgetPack.exe
672	7zr.exe
3484	sidebar.exe
5424	8GadgetPack.exe
1388	8GadgetPack.exe
1436	sidebar.exe
4476	sidebar.exe

Loads dropped DLL 14 IoCs

pid	Process
5480	MsiExec.exe
3484	sidebar.exe
3404	Process not Found
2392	MsiExec.exe
3484	sidebar.exe
3484	sidebar.exe
3484	sidebar.exe
3484	sidebar.exe
3484	sidebar.exe
3484	sidebar.exe
3404	Process not Found
1436	sidebar.exe
3404	Process not Found
4476	sidebar.exe

Enumerates connected drives 3 TTPs 46 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\D:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\D:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe

Indicator Removal: Clear Persistence 1 TTPs 1 IoCs

remove IFEO.

defense_evasion

Clear Persistence

T1070.009

description	ioc	Process
Delete value	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regedit.exe	8GadgetPack.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\tile_drop_shadow.png	msiexec.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_box_divider_right.png	8GadgetPack.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\square_settings.png	8GadgetPack.exe
File created	C:\Program Files (x86)\Windows Sidebar\8GadgetPack\ContextMenuEntry_Disable.reg	msiexec.exe
File created	C:\Program Files (x86)\Windows Sidebar\8GadgetPack\UnawareGadgetScaling_Disable.reg	msiexec.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_double_orange.png	8GadgetPack.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\js\calendar.js	8GadgetPack.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_right_pressed.png	msiexec.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_box_divider_right.png	8GadgetPack.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\bPrev-disable.png	msiexec.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\modern.png	msiexec.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_box_top.png	msiexec.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\system.png	msiexec.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\trad2.png	msiexec.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\trad2_h.png	8GadgetPack.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\ru\gadget.xml	8GadgetPack.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\zh\gadget.xml	8GadgetPack.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\background.png	msiexec.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\bNext.png	8GadgetPack.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\monitor_dot.png	8GadgetPack.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\novelty.png	8GadgetPack.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\images\glass.png	8GadgetPack.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\picturePuzzle.js	8GadgetPack.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_double_orange_.png	msiexec.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\cronometer_m.png	msiexec.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\modern_m.png	msiexec.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\system_s.png	8GadgetPack.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\ja\gadget.xml	8GadgetPack.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\gadget.xml	8GadgetPack.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\ja\js\localizedStrings.js	msiexec.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_left_rest.png	8GadgetPack.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\hint_over.png	8GadgetPack.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\images\back_lrg.png	msiexec.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\logo.png	msiexec.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_divider_right.png	msiexec.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\system_settings.png	8GadgetPack.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\trad2_.png	8GadgetPack.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\shuffle_over.png	msiexec.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\square_dot.png	msiexec.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\icon.png	8GadgetPack.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\zh\gadget.xml	8GadgetPack.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\images\back_lrg.png	8GadgetPack.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\flower_s.png	msiexec.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\modern_settings.png	8GadgetPack.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_corner_bottom_left.png	8GadgetPack.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\logo.png	8GadgetPack.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\diner_settings.png	msiexec.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\reveal_rest.png	msiexec.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_right_disabled.png	msiexec.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_double_orange.png	msiexec.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\cronometer_settings.png	msiexec.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\de\gadget.xml	msiexec.exe
File created	C:\Program Files (x86)\Windows Sidebar\8GadgetPack\Logging_Enable.bat	msiexec.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\trad2_s.png	msiexec.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\css\slideShow.css	8GadgetPack.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\1.png	msiexec.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\5.png	msiexec.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\fr\js\localized.js	msiexec.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\zh\settings.html	msiexec.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\timer_over.png	8GadgetPack.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\ja\local.js	8GadgetPack.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\bNext.png	msiexec.exe
File created	C:\Program Files (x86)\Windows Sidebar\8GadgetPack\Install	msiexec.exe
File created	C:\Program Files (x86)\Windows Sidebar\8GadgetPack\InstallW10	msiexec.exe

Drops file in Windows directory 12 IoCs

description	ioc	Process
File opened for modification	C:\Windows\Installer\MSIC56F.tmp	msiexec.exe
File created	C:\Windows\Installer\{77BAFB52-832C-4BEE-AED4-55C07F7708D4}\ProductIcon	msiexec.exe
File opened for modification	C:\Windows\Installer\{77BAFB52-832C-4BEE-AED4-55C07F7708D4}\ProductIcon	msiexec.exe
File opened for modification	C:\Windows\Installer\MSIF2.tmp	msiexec.exe
File created	C:\Windows\Installer\e58c09c.msi	msiexec.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log	msiexec.exe
File opened for modification	C:\Windows\Installer\MSIC3F7.tmp	msiexec.exe
File created	C:\Windows\Installer\e58c09e.msi	msiexec.exe
File opened for modification	C:\Windows\Installer\e58c09c.msi	msiexec.exe
File opened for modification	C:\Windows\Installer\	msiexec.exe
File created	C:\Windows\Installer\inprogressinstallinfo.ipi	msiexec.exe
File created	C:\Windows\Installer\SourceHash{77BAFB52-832C-4BEE-AED4-55C07F7708D4}	msiexec.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Event Triggered Execution: Installer Packages 2 TTPs 1 IoCs

persistence privilege_escalation

Installer Packages

T1546.016

Msiexec

T1218.007

pid	Process
4548	msiexec.exe

System Location Discovery: System Language Discovery 1 TTPs 10 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	8GadgetPack.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsiExec.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	8GadgetPack.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsiExec.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regedit.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	8GadgetPack.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	8GadgetPack.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	7zr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regedit.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	7zr.exe

Checks SCSI registry key(s) 3 TTPs 5 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key created	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 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	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000	vssvc.exe

Modifies Internet Explorer settings 1 TTPs 8 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BD18A03F-31CC-4CC0-B52D-9E199122923D}\Policy = "3"	regedit.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BD18A03F-31CC-4CC0-B52D-9E199122923D}\CLSID = "{6B9228DA-9C15-419e-856C-19E768A13BDC}"	regedit.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BD18A03F-31CC-4CC0-B52D-9E199122923D}	regedit.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BD18A03F-31CC-4CC0-B52D-9E199122923D}\Policy = "3"	regedit.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BD18A03F-31CC-4CC0-B52D-9E199122923D}\CLSID = "{6B9228DA-9C15-419e-856C-19E768A13BDC}"	regedit.exe
Key created	\REGISTRY\USER\S-1-5-21-4045429996-2364296335-1634900306-1000\Software\Microsoft\Internet Explorer\GPU	sidebar.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4045429996-2364296335-1634900306-1000\SOFTWARE\Microsoft\Internet Explorer\GPU\AdapterInfo = "vendorId=\"0x1414\",deviceID=\"0x8c\",subSysID=\"0x0\",revision=\"0x0\",version=\"6.2.19041.4355\"hypervisor=\"No Hypervisor (Microsoft Hypervisor with SLAT support detected)\""	sidebar.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BD18A03F-31CC-4CC0-B52D-9E199122923D}	regedit.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\27\52C64B7E	msiexec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\28	msiexec.exe

Modifies registry class 64 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.gadget\shell\open\DropTarget	regedit.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Windows.gadget\ = "Windows Gadget"	regedit.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4045429996-2364296335-1634900306-1000_Classes\Clipboarder.ClipboarderGadget\ = "Clipboarder.ClipboarderGadget"	sidebar.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{37efd44d-ef8d-41b1-940d-96973a50e9e0}\InfoTip = "@%ProgramFiles%\\Windows Sidebar\\sidebar.exe,-11002#immutable1"	regedit.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{AAA49BB1-378C-4206-9CAD-53C3372E9550}\1.0\0\win32\ = "%ProgramFiles(x86)%\\Windows Sidebar\\sidebar.exe"	regedit.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{9AAFA006-1D06-4502-834C-CE1C3EB04BBD}\MiscStatus	regedit.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Windows.gadget	regedit.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9AAFA006-1D06-4502-834C-CE1C3EB04BBD}\ProgID	regedit.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{D42BBCF0-B80F-452D-ABE3-525DDF43CAFB}\1.0\FLAGS\ = "0"	regedit.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{37efd44d-ef8d-41b1-940d-96973a50e9e0}\InfoTip = "@%ProgramFiles%\\Windows Sidebar\\sidebar.exe,-11002#immutable1"	regedit.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6B9228DA-9C15-419e-856C-19E768A13BDC}\InprocServer32	regedit.exe
Key created	\REGISTRY\USER\S-1-5-21-4045429996-2364296335-1634900306-1000_Classes\TypeLib\{51D5FC6F-AC9C-4FCA-B6A4-2421BD4AC5A6}\1.0\0	sidebar.exe
Key created	\REGISTRY\USER\S-1-5-21-4045429996-2364296335-1634900306-1000_Classes\TypeLib\{51D5FC6F-AC9C-4FCA-B6A4-2421BD4AC5A6}\1.0\HELPDIR	sidebar.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4045429996-2364296335-1634900306-1000_Classes\TypeLib\{51D5FC6F-AC9C-4FCA-B6A4-2421BD4AC5A6}\1.0\HELPDIR\	sidebar.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4045429996-2364296335-1634900306-1000_Classes\CLSID\{0B7AD8D3-094A-44DE-A348-83C6C3FA347C}\TypeLib\ = "{8F082BEA-D609-4E3D-9BFD-F1F3A3328ACD}"	sidebar.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{37efd44d-ef8d-41b1-940d-96973a50e9e0}\LocalizedString = "@%ProgramFiles%\\Windows Sidebar\\sidebar.exe,-11003#immutable1"	regedit.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{6B9228DA-9C15-419e-856C-19E768A13BDC}	regedit.exe
Key created	\REGISTRY\USER\S-1-5-21-4045429996-2364296335-1634900306-1000_Classes\CLSID\{0B7AD8D3-094A-44DE-A348-83C6C3FA347C}	sidebar.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{9AAFA006-1D06-4502-834C-CE1C3EB04BBD}	regedit.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{9AAFA006-1D06-4502-834C-CE1C3EB04BBD}\Version\ = "1.0"	regedit.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9AAFA006-1D06-4502-834C-CE1C3EB04BBD}\MiscStatus	regedit.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{37efd44d-ef8d-41b1-940d-96973a50e9e0}	regedit.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{9AAFA006-1D06-4502-834C-CE1C3EB04BBD}\TypeLib	regedit.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{37efd44d-ef8d-41b1-940d-96973a50e9e0}\Shell\Open\Command\ = "%ProgramFiles%\\Windows Sidebar\\sidebar.exe /showGadgets"	regedit.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Windows.gadget\DefaultIcon	regedit.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9AAFA006-1D06-4502-834C-CE1C3EB04BBD}\Implemented Categories	regedit.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4045429996-2364296335-1634900306-1000_Classes\Clipboarder.ClipboarderGadget\CurVer\ = "Clipboarder.ClipboarderGadget.1"	sidebar.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{AAA49BB1-378C-4206-9CAD-53C3372E9550}\1.0\ = "Microsoft Sidebar API Type Library"	regedit.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{9AAFA006-1D06-4502-834C-CE1C3EB04BBD}\Implemented Categories\{0DE86A57-2BAA-11CF-A229-00AA003D7352}	regedit.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Windows.gadget\CurVer\ = "SidebarDroptarget.GadgetDropTarget.1"	regedit.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{37efd44d-ef8d-41b1-940d-96973a50e9e0}\Shell\Open	regedit.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{D42BBCF0-B80F-452D-ABE3-525DDF43CAFB}\1.0\HELPDIR	regedit.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{37efd44d-ef8d-41b1-940d-96973a50e9e0}\Shell\Open\Command	regedit.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\25BFAB77C238EEB4EA4D550CF777804D\ProductIcon = "C:\\Windows\\Installer\\{77BAFB52-832C-4BEE-AED4-55C07F7708D4}\\ProductIcon"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{D42BBCF0-B80F-452D-ABE3-525DDF43CAFB}\1.0\ = "VideoLAN VLC ActiveX Plugin (for GadgetPack)"	regedit.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Windows.gadget\shell\open\command	regedit.exe
Key created	\REGISTRY\USER\S-1-5-21-4045429996-2364296335-1634900306-1000_Classes\CLSID\{0E7BE950-4ACC-47CB-834B-41A8B96BBFF9}\TypeLib	sidebar.exe
Key created	\REGISTRY\USER\S-1-5-21-4045429996-2364296335-1634900306-1000_Classes\TypeLib\{51D5FC6F-AC9C-4FCA-B6A4-2421BD4AC5A6}\1.0\0\win32	sidebar.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\25BFAB77C238EEB4EA4D550CF777804D\Language = "1033"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{D42BBCF0-B80F-452D-ABE3-525DDF43CAFB}\1.0\HELPDIR\	regedit.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Windows.gadget\shell\open\DropTarget	regedit.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{AAA49BB1-378C-4206-9CAD-53C3372E9550}\1.0\0	regedit.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{AAA49BB1-378C-4206-9CAD-53C3372E9550}\1.0\FLAGS\ = "0"	regedit.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Windows.Gadget.1	regedit.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6B9228DA-9C15-419e-856C-19E768A13BDC}\ = "Windows Desktop Gadgets"	regedit.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{D42BBCF0-B80F-452D-ABE3-525DDF43CAFB}\1.0\HELPDIR	regedit.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\25BFAB77C238EEB4EA4D550CF777804D\SourceList\Media	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Windows.Gadget.1\CLSID	regedit.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{37efd44d-ef8d-41b1-940d-96973a50e9e0}\Shell	regedit.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9AAFA006-1D06-4502-834C-CE1C3EB04BBD}\Implemented Categories\{0DE86A58-2BAA-11CF-A229-00AA003D7352}	regedit.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9AAFA006-1D06-4502-834C-CE1C3EB04BBD}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}	regedit.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\25BFAB77C238EEB4EA4D550CF777804D\AuthorizedLUAApp = "0"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{9AAFA006-1D06-4502-834C-CE1C3EB04BBD}\Implemented Categories\{40FC6ED4-2438-11CF-A3DB-080036F12502}	regedit.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{9AAFA006-1D06-4502-834C-CE1C3EB04BBD}\InprocServer32\ = "%ProgramFiles(x86)%\\Windows Sidebar\\ActiveX\\VLC\\axvlc_gadgetpack.dll"	regedit.exe
Key created	\REGISTRY\USER\S-1-5-21-4045429996-2364296335-1634900306-1000_Classes\TypeLib\{8F082BEA-D609-4E3D-9BFD-F1F3A3328ACD}\1.0\HELPDIR	sidebar.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\25BFAB77C238EEB4EA4D550CF777804D\Assignment = "1"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{AAA49BB1-378C-4206-9CAD-53C3372E9550}\1.0\0\	regedit.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Windows.gadget\CurVer	regedit.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Directory\Background\shellex\ContextMenuHandlers\Gadgets	regedit.exe
Key created	\REGISTRY\USER\S-1-5-21-4045429996-2364296335-1634900306-1000_Classes\Sidebar7.Sidebar7Gadget\CurVer	sidebar.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\25BFAB77C238EEB4EA4D550CF777804D\SourceList	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\25BFAB77C238EEB4EA4D550CF777804D\SourceList\LastUsedSource = "n;1;C:\\Users\\Admin\\AppData\\Local\\Temp\\"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{AAA49BB1-378C-4206-9CAD-53C3372E9550}\	regedit.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.GadgetPack\CurVer\ = "VideoLAN.VLCPlugin.GadgetPack.2"	regedit.exe

Runs regedit.exe 4 IoCs

pid	Process
2768	regedit.exe
3936	regedit.exe
5828	regedit.exe
2316	regedit.exe

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
3484	sidebar.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4648	msiexec.exe
4648	msiexec.exe
1992	8GadgetPack.exe
1992	8GadgetPack.exe
1100	8GadgetPack.exe
1100	8GadgetPack.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4548	msiexec.exe
Token: SeIncreaseQuotaPrivilege	4548	msiexec.exe
Token: SeSecurityPrivilege	4648	msiexec.exe
Token: SeCreateTokenPrivilege	4548	msiexec.exe
Token: SeAssignPrimaryTokenPrivilege	4548	msiexec.exe
Token: SeLockMemoryPrivilege	4548	msiexec.exe
Token: SeIncreaseQuotaPrivilege	4548	msiexec.exe
Token: SeMachineAccountPrivilege	4548	msiexec.exe
Token: SeTcbPrivilege	4548	msiexec.exe
Token: SeSecurityPrivilege	4548	msiexec.exe
Token: SeTakeOwnershipPrivilege	4548	msiexec.exe
Token: SeLoadDriverPrivilege	4548	msiexec.exe
Token: SeSystemProfilePrivilege	4548	msiexec.exe
Token: SeSystemtimePrivilege	4548	msiexec.exe
Token: SeProfSingleProcessPrivilege	4548	msiexec.exe
Token: SeIncBasePriorityPrivilege	4548	msiexec.exe
Token: SeCreatePagefilePrivilege	4548	msiexec.exe
Token: SeCreatePermanentPrivilege	4548	msiexec.exe
Token: SeBackupPrivilege	4548	msiexec.exe
Token: SeRestorePrivilege	4548	msiexec.exe
Token: SeShutdownPrivilege	4548	msiexec.exe
Token: SeDebugPrivilege	4548	msiexec.exe
Token: SeAuditPrivilege	4548	msiexec.exe
Token: SeSystemEnvironmentPrivilege	4548	msiexec.exe
Token: SeChangeNotifyPrivilege	4548	msiexec.exe
Token: SeRemoteShutdownPrivilege	4548	msiexec.exe
Token: SeUndockPrivilege	4548	msiexec.exe
Token: SeSyncAgentPrivilege	4548	msiexec.exe
Token: SeEnableDelegationPrivilege	4548	msiexec.exe
Token: SeManageVolumePrivilege	4548	msiexec.exe
Token: SeImpersonatePrivilege	4548	msiexec.exe
Token: SeCreateGlobalPrivilege	4548	msiexec.exe
Token: SeBackupPrivilege	4984	vssvc.exe
Token: SeRestorePrivilege	4984	vssvc.exe
Token: SeAuditPrivilege	4984	vssvc.exe
Token: SeBackupPrivilege	4648	msiexec.exe
Token: SeRestorePrivilege	4648	msiexec.exe
Token: SeRestorePrivilege	4648	msiexec.exe
Token: SeTakeOwnershipPrivilege	4648	msiexec.exe
Token: SeRestorePrivilege	4648	msiexec.exe
Token: SeTakeOwnershipPrivilege	4648	msiexec.exe
Token: SeRestorePrivilege	4648	msiexec.exe
Token: SeTakeOwnershipPrivilege	4648	msiexec.exe
Token: SeRestorePrivilege	4728	7zr.exe
Token: 35	4728	7zr.exe
Token: SeSecurityPrivilege	4728	7zr.exe
Token: SeSecurityPrivilege	4728	7zr.exe
Token: SeRestorePrivilege	672	7zr.exe
Token: 35	672	7zr.exe
Token: SeSecurityPrivilege	672	7zr.exe
Token: SeSecurityPrivilege	672	7zr.exe
Token: SeBackupPrivilege	5772	srtasks.exe
Token: SeRestorePrivilege	5772	srtasks.exe
Token: SeSecurityPrivilege	5772	srtasks.exe
Token: SeTakeOwnershipPrivilege	5772	srtasks.exe
Token: SeBackupPrivilege	5772	srtasks.exe
Token: SeRestorePrivilege	5772	srtasks.exe
Token: SeSecurityPrivilege	5772	srtasks.exe
Token: SeTakeOwnershipPrivilege	5772	srtasks.exe
Token: SeRestorePrivilege	4648	msiexec.exe
Token: SeTakeOwnershipPrivilege	4648	msiexec.exe
Token: SeRestorePrivilege	4648	msiexec.exe
Token: SeTakeOwnershipPrivilege	4648	msiexec.exe
Token: SeRestorePrivilege	4648	msiexec.exe

Suspicious use of FindShellTrayWindow 28 IoCs

pid	Process
4548	msiexec.exe
3484	sidebar.exe
3484	sidebar.exe
3484	sidebar.exe
3484	sidebar.exe
3484	sidebar.exe
3484	sidebar.exe
3484	sidebar.exe
3484	sidebar.exe
3484	sidebar.exe
3484	sidebar.exe
3484	sidebar.exe
3484	sidebar.exe
3484	sidebar.exe
3484	sidebar.exe
3484	sidebar.exe
3484	sidebar.exe
3484	sidebar.exe
3484	sidebar.exe
3484	sidebar.exe
4548	msiexec.exe
1436	sidebar.exe
4476	sidebar.exe
3484	sidebar.exe
3484	sidebar.exe
3484	sidebar.exe
3484	sidebar.exe
3484	sidebar.exe

Suspicious use of SendNotifyMessage 4 IoCs

pid	Process
3484	sidebar.exe
3484	sidebar.exe
3484	sidebar.exe
3484	sidebar.exe

Suspicious use of SetWindowsHookEx 11 IoCs

pid	Process
3484	sidebar.exe
3484	sidebar.exe
3484	sidebar.exe
3484	sidebar.exe
3484	sidebar.exe
3484	sidebar.exe
3484	sidebar.exe
1436	sidebar.exe
4476	sidebar.exe
3484	sidebar.exe
3484	sidebar.exe

Suspicious use of WriteProcessMemory 14 IoCs

description	pid	Process	procid_target
PID 4648 wrote to memory of 5772	4648	msiexec.exe	94
PID 4648 wrote to memory of 5480	4648	msiexec.exe	96
PID 4648 wrote to memory of 1992	4648	msiexec.exe	98
PID 1992 wrote to memory of 4728	1992	8GadgetPack.exe	99
PID 1992 wrote to memory of 2768	1992	8GadgetPack.exe	101
PID 1992 wrote to memory of 3936	1992	8GadgetPack.exe	102
PID 1992 wrote to memory of 5828	1992	8GadgetPack.exe	103
PID 1992 wrote to memory of 2316	1992	8GadgetPack.exe	104
PID 4648 wrote to memory of 1100	4648	msiexec.exe	105
PID 1100 wrote to memory of 672	1100	8GadgetPack.exe	106
PID 3484 wrote to memory of 5424	3484	sidebar.exe	111
PID 4648 wrote to memory of 2392	4648	msiexec.exe	112
PID 4548 wrote to memory of 1388	4548	msiexec.exe	114
PID 1388 wrote to memory of 1436	1388	8GadgetPack.exe	115

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Windows\system32\msiexec.exe
msiexec.exe /I C:\Users\Admin\AppData\Local\Temp\GadgetPackSetup.msi
1⤵
- Enumerates connected drives
- Event Triggered Execution: Installer Packages
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:4548
- C:\Program Files (x86)\Windows Sidebar\8GadgetPack.exe
  "C:\Program Files (x86)\Windows Sidebar\8GadgetPack.exe" -firstrun
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:1388
- - C:\Program Files\Windows Sidebar\sidebar.exe
    "C:\Program Files\Windows Sidebar\sidebar.exe"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of SetWindowsHookEx
    PID:1436

C:\Windows\system32\msiexec.exe
C:\Windows\system32\msiexec.exe /V
1⤵
- Enumerates connected drives
- Drops file in Program Files directory
- Drops file in Windows directory
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:4648
- C:\Windows\system32\srtasks.exe
  C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:5772
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding 755DC7091CBB0BF9728F9D5CF3D8A21B
  2⤵
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  PID:5480
- C:\Program Files (x86)\Windows Sidebar\8GadgetPack.exe
  "C:\Program Files (x86)\Windows Sidebar\8GadgetPack.exe" -install
  2⤵
  - Event Triggered Execution: Image File Execution Options Injection
  - Executes dropped EXE
  - Indicator Removal: Clear Persistence
  - Drops file in Program Files directory
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:1992
- - C:\Program Files (x86)\Windows Sidebar\8GadgetPack\7zr.exe
    "C:\Program Files (x86)\Windows Sidebar\8GadgetPack\7zr.exe" x "C:\Program Files (x86)\Windows Sidebar\8GadgetPack\Files64.7z" -o"C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\" -y -mmt4
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Suspicious use of AdjustPrivilegeToken
    PID:4728
- - C:\Windows\SysWOW64\regedit.exe
    C:\Windows\regedit.exe -s "C:\Program Files (x86)\Windows Sidebar\8GadgetPack\Install"
    3⤵
    - System Location Discovery: System Language Discovery
    - Modifies Internet Explorer settings
    - Modifies registry class
    - Runs regedit.exe
    PID:2768
- - C:\Windows\regedit.exe
    C:\Windows\regedit.exe -s "C:\Program Files (x86)\Windows Sidebar\8GadgetPack\Install"
    3⤵
    - Modifies Internet Explorer settings
    - Modifies registry class
    - Runs regedit.exe
    PID:3936
- - C:\Windows\SysWOW64\regedit.exe
    C:\Windows\regedit.exe -s "C:\Program Files (x86)\Windows Sidebar\8GadgetPack\InstallW10"
    3⤵
    - System Location Discovery: System Language Discovery
    - Runs regedit.exe
    PID:5828
- - C:\Windows\regedit.exe
    C:\Windows\regedit.exe -s "C:\Program Files (x86)\Windows Sidebar\8GadgetPack\InstallW10"
    3⤵
    - Runs regedit.exe
    PID:2316
- C:\Program Files (x86)\Windows Sidebar\8GadgetPack.exe
  "C:\Program Files (x86)\Windows Sidebar\8GadgetPack.exe" -scopygadgets
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:1100
- - C:\Program Files (x86)\Windows Sidebar\8GadgetPack\7zr.exe
    "C:\Program Files (x86)\Windows Sidebar\8GadgetPack\7zr.exe" x "C:\Program Files (x86)\Windows Sidebar\8GadgetPack\Gadgets.7z" -o"C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\" -y -mmt4
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Suspicious use of AdjustPrivilegeToken
    PID:672
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding F0F412D1CD4A3A9EDF0C93B98D7DC68B E Global\MSI0000
  2⤵
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  PID:2392

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Checks SCSI registry key(s)
- Suspicious use of AdjustPrivilegeToken
PID:4984

C:\Program Files\Windows Sidebar\sidebar.exe
"C:\Program Files\Windows Sidebar\sidebar.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies Internet Explorer settings
- Modifies registry class
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3484
- C:\Program Files (x86)\Windows Sidebar\8GadgetPack.exe
  "C:\Program Files (x86)\Windows Sidebar\8GadgetPack.exe" -copygadgets
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  PID:5424

C:\Program Files\Windows Sidebar\sidebar.exe
"C:\Program Files\Windows Sidebar\sidebar.exe" /showGadgets
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:4476

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Image File Execution Options Injection

T1546.012

Installer Packages

T1546.016

Privilege Escalation

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Image File Execution Options Injection

T1546.012

Installer Packages

T1546.016

Defense Evasion

Indicator Removal

T1070

Clear Persistence

T1070.009

Modify Registry

T1112

System Binary Proxy Execution

T1218

Msiexec

T1218.007

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

e58c09d.rbs

Path C:\Config.Msi\e58c09d.rbs
Size 323KB
SHA256 16c182d7676c6e0bc88d8897a8f8e4f5234e079e73f8c069315b5bf14f8ffc50
MD5 4967f0d8676735210efec63638a88354
SHA1 71ca122d525724d12a20098f688932069ff35854
SHA512 a082145dde2815313f7203af5ae1785070b3bb58b530489ecb230a8e25407a263f7d082e6ff50ab2ef256f9d9c8679815a21fa4542e3bfc51646f4045f1bba65
SSDEEP 3072:R7fn6K5hXiqyhTO8W0iEa8LW0bEC9hvZpC01v+eUKflQnZl+T+J7g6EsNr7wyy/A:R7v6sqhy8VKU3hvZUy+ppHEsuB/A
TLSH
T169644B094D1194E9F27A3C7263EDD9258B1EADF8A768C33D5B48C9079C90EC21B367E1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8GadgetPack.exe

Path C:\Program Files (x86)\Windows Sidebar\8GadgetPack.exe
Size 292KB
SHA256 bc9c8ff4f57bca1fc212008253dabd600076dcb02f07e09d91879c168926b53e
MD5 98db8e97d706962d9cac5c1170399ae5
SHA1 97677d87d06e1dacaad543c73d7548db51be9c83
SHA512 11f22e81c212a35e39d0c01eb77af4648cd2d797d4e818d5e2644748437b3172282e83b354fed63b26b5ba0e7c0b0c8611cc90bb53775b0456269d3e3b0af212
SSDEEP 6144:5j9iQa9Hcb4211wCStpCdAOD4q5sTDc8:55iQa9Ho1StsdJXUc8
TLSH
T160547C1176D1C1B6E9B719340DF882762A7DBC315E30CA6F63A4436E4D30681E662BFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dwmapi.dll

Path C:\Program Files (x86)\Windows Sidebar\8GadgetPack\Files32\dwmapi.dll
Size 658KB
SHA256 a5243bdf978df94e8980898a9b6369cf7d64a8006faad967aa4fed1abba8c7b7
MD5 3c122400ad19930fb53d9e6188ab9761
SHA1 95b25ecdbac604e2ab56e1ae6e67f96e9e6b7a99
SHA512 2c906803aa3e2208916488cec465d24c9bb8c6d0c087c25135a1d66a36891401e83ef502ab2383b650ac05302357790be4da143d2ac1b7189ca40b934b199dc9
SSDEEP 6144:Oas7NjDFWjezh96VPwrugumDCLYtzAOT1gNx0Pt2dQqVIrUKMtZtbmk:OaUN4e192PpudtzMASQKZtZtbm
TLSH
T1F4E4D4217491E634C8A110B4C85883FEE6CE9CA4CF6B94D331A63EA97975AC17F331D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sidebar.exe

Path C:\Program Files (x86)\Windows Sidebar\8GadgetPack\Files32\sidebar.exe
Size 1.1MB
SHA256 000caa928482cdec8c120d06c545c144a114d148145790614b58caa31f9bca9c
MD5 601c6766873111c4a416661644a4db59
SHA1 97a2fcbb74f261bde3a0530bdb53787cf9f29cb1
SHA512 7f103df32d1260ab2a1e60d98e93e2a1fbd16479bcaa48aa03c0697521e13b8b94ffbe458dddd653ecffa9c6551e3936ca53d74893b66cb0c1547429b9322845
SSDEEP 24576:/GF4A1mY5cvvVx8gpVm22jnH5bwgLn1iRkGMIcDAXAEyhhLh7hekLTODX:UlckgOjln1iXGwDwhLh7hnfS
TLSH
T11835AD2276A1D139CCF62131996E7371562EEEA04B0215CB22947FDFAD343D16F3829B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

calendar.html

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\calendar.html
Size 18KB
SHA256 0cf79d2b895418471db1d9b1dc827877cd5acc0eca6b0db921b19657c3f2e6b5
MD5 5b9184081ff3fd40e27a2f25e0e5e01a
SHA1 a8d8c562099c85200f1d98b807967c3415e22a5d
SHA512 8877aa2f9bfd01427a860e67893aca2a7c3baa2393a69238b6efc1f5646cd29e158c249c6c56f1dbb2a8e36e0d25859140d211ba2ef48dbfc1f531b01965ebe0
SSDEEP 192:1IlUuDsQej6MOe82DKmV0O4Co4p/pX+acgJyJg8TCEhqffB+zkDkPwXdXqvtukDQ:1IlUuY4ugCEhqffBFDkPIdXUtXDkWmwE
TLSH
T1F782501F17EA0109B9B21A0D997B44640E37BE4D587885EC15ACD80D9FE3F4299A2FF3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

calendar.css

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\css\calendar.css
Size 4KB
SHA256 a39a573d7008d3dfe02b313f4f87894ae3d2215f376a323876256b92702a22d3
MD5 9e00ec32e1203403185617cd2fd927f8
SHA1 2de6e969c38572bcea96e28f5e7c19a6eaf21ebb
SHA512 c749cd683faf263ebd2fd214e59474c1eb1db976a13dc32e46eef3f7c426dd8855f39b273621d5d0ea1c5b6c2185c8c7fef278982ef3f75fb1dc8b9ba793af1f
SSDEEP 96:iKlJDL3d9gV/GfKW2OszN0Tlb9YS3EnJ9QnJ9rJx:tlB3dJKSK4b9YdnJWnJBJx
TLSH
T15691CE570D633448F01FE624AF554B2DD329904FD957C90C3B0C93A88F869A6E47EFA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gadget.xml

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\de\gadget.xml
Size 848B
SHA256 70ad3ede7bb37cd473f7b9fa424ac5f56f2da6e8605823621a1c11ed40bfcd44
MD5 4f33a4462e75fce91048e546b4927538
SHA1 d00da5788cbefff7c465af52d50585b175aec92c
SHA512 ce0eed07659f3358375cfc811f10e5b013252d28d7c136e4cc83de8994e0c782fdb13a67c4ac1d3f57b4c4d5fc59da30b6454eb34ddb09eec1bb2e5380a6a036
TLSH
T1A7014814C9F8C929C31218C00E3455A19ABBFBFB0805EC58F44C5E519BCB2CF9963A98
MD5 SHA1 SHA512 TLSH

Submit Download

localized.js

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\de\js\localized.js
Size 138B
SHA256 68050d8710008243e2304a690e7f5e116d7071218144df787525f60b67f4704a
MD5 b69da5565cedc65a814fceba1705ccfc
SHA1 c9fc58aba369bca5956e37a42565b5f942aca14f
SHA512 9858344a6ff50e0901dc39739e081a36c7f6f09d39fa5e882a06ad43dfe0e94b892632da381d2170a3fa2d1a9cf2ed65b70bd7bd03e018526707aa91e02e1bb4
TLSH
T118C092015BD2302DB1AB6C564A3A8290233BB0EAA635C21D80843E8D2AB321401437A2
MD5 SHA1 SHA512 TLSH

Submit Download

drag.png

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\drag.png
Size 10KB
SHA256 b02a6fea78170d68e8c44131e3b66d67619059d42082ec0a66dbf9fadb83ec4c
MD5 924fd9b1d0562670d9fc254399f750df
SHA1 b6e3b003dd8f142684db869777d4bf2b06f713e4
SHA512 54b3c8e7057573ef30c7aa96b4260635d300f662a97621af271e2a02030628413367e42c0ae8b9e4dfe0f9664ead25b907968d7ad292658ac58604021588fed1
SSDEEP 192:6SozTOTqKubFQeb9sOI4HRvwjkkUjS0ixeCWm7ehzZlZDQ1xRV2oR:1o+GKQQwI4H6wkUe0EIlZDQ1xRB
TLSH
T11A22C0A6F160592525FE7F0BE63EC4A8412960BD9F793D1CC548C61A428FC1BE6CD49C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gadget.xml

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\fr\gadget.xml
Size 860B
SHA256 5b93aeb433b2dbba4b5eff847d05c14cd931c6a64bd18f73ad7cae986ff91f91
MD5 e3021de58cda1830683ca13cffacbdab
SHA1 96e55479be8fab44712320d20233e86aff31af03
SHA512 b6f79bbe115ca507692d005a2de04b84c8f47be81292039d3467d07775f89fb971081c78409523f83dfe441a6dd5f8af06fd2d94446f27f5d2dae1685f9fe71c
TLSH
T1C7114814C5F8C969D31118C00F7451A19BBBFBEF0816EC58F49C5E409BCB2CF98A3A98
MD5 SHA1 SHA512 TLSH

Submit Download

localized.js

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\fr\js\localized.js
Size 138B
SHA256 25d4e37923aa9fb6c44e8e1c003777140658868a5cc4662a7decd4e1e05516e4
MD5 a039313fd997b75a704e3428b7ca2657
SHA1 7a3e1318848739c37196532664c2c4ebb2da80aa
SHA512 855722715e315fdc764b7adb5533775d91ca99cbb072acff9b27b1d0336e791deec2e9b8901e412355b695d5d4edfb012475f707b7c03dce07787ce2f2c1937e
TLSH
T158C092022A82301D38676D038A2A91614333BCD6A636C71D84A43E4D1FA3AA008837A5
MD5 SHA1 SHA512 TLSH

Submit Download

gadget.xml

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\gadget.xml
Size 886B
SHA256 ed7b8e7001e90d2ef9dc7e3a4abd038a3019353972626c04de4b70c5cbab02e8
MD5 0c29885e1f4bb026371337cdeebf90ae
SHA1 85fd87b710bf12e2573183aa46fbe7dfd3dcd4b8
SHA512 5f957460f7972c8b3f1460810cbae3654583970021020c9c8d581e868b09f4a8fe6e5bb4045d89cea38826d02687d728ba0863ae4d12be513886864bccb2d291
TLSH
T17B115914C5F8CA2AD30118D00E3450A196B7FBEE0955EC58F48C6A509BCB2CF85A39DC
MD5 SHA1 SHA512 TLSH

Submit Download

icon.png

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\icon.png
Size 2KB
SHA256 2b37ca680b43545e38b72e961efda5653c611be3f95b48fdb15d9183c95e2a7e
MD5 d83f39daf8a0421aeda5b4338162f912
SHA1 dea7e0318f1a9aa4b318e51aa81c28cbf15699eb
SHA512 4ddad36482a9b2c06c833c4dc7df6b5bbccea94964ee15d359f8fdbd96b3868ab71dc8f63ec022d3e82bbedf13a98c0cb5e2601d3772bc2dc9c422f0bd6bf9b9
TLSH
T1A8515BC02F4DA87F6086E646BB44A3C85C37141157725BEACE3338C01C01DD14887BE3
MD5 SHA1 SHA512 TLSH

Submit Download

bNext-disable.png

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\bNext-disable.png
Size 248B
SHA256 4966b8fc2295f797d659ea9549edec819b63138138b7a63e19d462172b00544c
MD5 46cb34c9391c292cdfdef669282f1481
SHA1 b4e4d679eb7d1eab9e4ba139a98f97a8c878db96
SHA512 1ad9edd7d6e8d71a42838e1c58dbe592db77e2a1307d4e94cf12c40688a18d612b0144cf90f3c9f6da64072dab8fb574e55720f595c0bf668001c9954dc4d445
TLSH
T158D097CE3A8895BAD24A8BF7C4815D20C9D7CA584B8281A828623CA400A388020D4F50
MD5 SHA1 SHA512 TLSH

Submit Download

bNext-down.png

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\bNext-down.png
Size 266B
SHA256 49fc53b0879a518f340281bda71d7194c6f19c88a74af06fc90f982aedad895e
MD5 50060e5a62e410a83fb3715befb8a576
SHA1 577fcf22aca8ebe41ce0673be0db6046a18c603e
SHA512 9ae1b7a4246ed402e3a71b962a578010e52065988ce43ea2a8f7aedb3b78034393cbf2cb78c2d63f7bef208cb434fbfffaf4a145c4cfc0158f227efa3f4b4722
TLSH
T1B4D0EBC63BDC2C78E24205A931004014C0E7A64C032031FC22C64029111A6C4829CB30
MD5 SHA1 SHA512 TLSH

Submit Download

bNext-hot.png

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\bNext-hot.png
Size 320B
SHA256 22dee2cb416430faaaf55d53f9867222d6f2fa628cf3f939f5bbae4360fc551f
MD5 5f55f2e2f9ca38583febed78ad71ad9c
SHA1 5de475a5189fc9db0d4d39f0fa5f9a45dd2443ef
SHA512 6cfbc64b375208ba767efeae8799c796d67d144f7b82b04a20d372cd39855d5b3a16f789673d8257b68194f23fc97cbc75390cc1273bf81953dfd906dec434a3
TLSH
T171E02DC8730C1F32E80A0057C5D0860CF0A33DA80192BB8E08602433100A48045E8362
MD5 SHA1 SHA512 TLSH

Submit Download

bNext.png

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\bNext.png
Size 211B
SHA256 d0ab07f710f1b12e68f564d895ec8cad91c853c46bbfd87bd54c19999f2b54ff
MD5 09d7cd04a76b87fcc6f864b943dbd65f
SHA1 e1583f3d28f7284d51c347e2e3120201c3e85edc
SHA512 8830bf99a4724cb06ae52f92516b91986461b9b0c759ebf5241300af92e97064af6165ecc886941cff0130a9269cbb68777a429771081e31ee08b74a6e04bbb1
TLSH
T113D023DE779D2C7FD66441B21651D11049D357E41391156216D12B50305C4D067F431E
MD5 SHA1 SHA512 TLSH

Submit Download

bPrev-disable.png

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\bPrev-disable.png
Size 257B
SHA256 aaaa44b802a853399acc438c3380d54135070f17c57f8f9dba08f91cf6b8111a
MD5 707d45c72f1279a894ced9ca85769d49
SHA1 b4378c94140ea814feb322d9db666b370b9e339c
SHA512 a5dc2efd583199de2631372a54f96cc1bf094f07083563a70281043ff8664f8b5c670f594acda6563e405d20f4b636c6ac640d3303898d90ed4f19f14832b5cb
TLSH
T18CD095DC32EE463BC609C5B17550F010A6D74BFC1C495EF572C521F0057DC40C5B8250
MD5 SHA1 SHA512 TLSH

Submit Download

bPrev-down.png

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\bPrev-down.png
Size 258B
SHA256 a82b76c97f392dd68f02d502e4e979e7216abe9bc505b54d9359af04eca720ad
MD5 9968cbf235e278c05f74a06f6a4570d4
SHA1 b5e00b281a41e103ec2afd3cca19bd6d8a2ba8ce
SHA512 75728f6dd6f0a2f02146d5151f16102e6432499b959f86cefbd057244cc7257879a6f4e7e408bc95ab4837a8a556839ba7b19846c6cbc2c4ca66399197514d7b
TLSH
T1D5D097CE3AF6F93AC04804B12B722121E4F3CE9F05E23B362584783C0160DC19CA973A
MD5 SHA1 SHA512 TLSH

Submit Download

bPrev-hot.png

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\bPrev-hot.png
Size 316B
SHA256 7869fe446ec84d41e9345805dd5f8ff15ce2bfe5365c34291a26e73a34a7884d
MD5 c40dc1d1c420b50f145d05a1891bb701
SHA1 fdda4a06ba92233aafae7dfa71184b5d63fdacb7
SHA512 b8d20f7289a620cad8155f11b0db9fa0e2b12630b923097731c51a45af9b76c7cef12c57d7c86709067931f9cc61e91e5877b334cb4f403241b91171779aa9bc
TLSH
T152E0E7FE33551471E54F56F25145C215DAF31FCCE3272F505A53721B1015D92D9B8714
MD5 SHA1 SHA512 TLSH

Submit Download

bPrev.png

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\bPrev.png
Size 219B
SHA256 1b9ffe1c53554b94192adf668c5d0c239d297ef74c93b793bdc21a181643aa30
MD5 b18d70e25b7abbbac6d287cee5963976
SHA1 17ac3727f971bd2ca775368556874aabe238ad41
SHA512 0573180dc87b3ea880ef26ef5d1dbbeb9b13a37bb926188c79a58a114487b6b59669ab499005e00a70b14dbe334e32e600a95e00a0649d5d1d8b106db1d92926
TLSH
T1ADD023CE77A448B6EF04837202434C5040D7454412410634025300533530CC4C2AC331
MD5 SHA1 SHA512 TLSH

Submit Download

calendar_double.png

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_double.png
Size 5KB
SHA256 62c4ed09ca032a3152ee7f3757ef3bb17421756b40d26c28c8de65ce92280967
MD5 f17e8f72dabb75b6ba5ba2df7f0bbda6
SHA1 c21cd28cf846cd26bbaed23fe19d047209400d18
SHA512 27ff73100b141f1bbf5b27b7b46a772d453ef4a13ccb42ef7f4e452326cf66d776de7f5d71af86c055dafee90c303fb600f18c1e245f1f6a5b1435c36e55a969
SSDEEP 96:kS8HMYi+vRX7jhPrrQ4puwjC9C0fKQ35ASxOiXMsqR/o/d1IQthQVImNc9VtNuOP:kSQh7jRr0wZ0fKW56/oPIQth8N0VeOP
TLSH
T190C18EE0DF00568671AA92F47E68AFCCE12E8EB614861BDD8AC8C01450A78961323D25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

calendar_double_.png

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_double_.png
Size 1KB
SHA256 7d9a8ee24584d7bca14a82718230ae97745aab96bd5ecb74f24507a0631aa6ef
MD5 ed761858cca6e5ca83e7f00573f1716e
SHA1 a4bbc881b13abf0e4a9f5e2135da119520175b4e
SHA512 2bad4aea9398d2d8490e456d8613b87c153f045dc6f8bc41e94558b4231cf178dc2002a6badd6030f02be8a5c59dfe265e91bda0e4fe1c9693c176b25b7459b7
TLSH
T13C31E9E47971A43B045D4298234367F2046A3ECB3CA21F069670B92770B89140B8AFAD
MD5 SHA1 SHA512 TLSH

Submit Download

calendar_double_orange.png

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_double_orange.png
Size 16KB
SHA256 86d0e54e270406b634793f37e8f6411ca256c914c6c5691d29c19a09914fe953
MD5 43e239823371e81ee95c5e7a8759ab17
SHA1 97434a904a3730a738d6d9bdb6ca5da4e9c2bfa4
SHA512 6da28115052922056374dd743682e7db69612ab680bb386f7227885e510ae06f53b607ca6eed7450df5d15d2da533187aa5f46db0e65456e2c17a194c1cce225
SSDEEP 384:eUkBKDH/9zLucZUphZxWKkiQDQ82dmz+sU7JALmN2wcTo4gw:aMDJucZUphdYDRBzL6JALmN2Qfw
TLSH
T1BD72D0529E3821B19AEC3BB9176AE3F4C0B04D61FFA47A00159A7EB574C383E938506D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

calendar_double_orange_.png

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_double_orange_.png
Size 16KB
SHA256 c627358700d07ae6a51e2fbf0dcf39df3af184881ef8192377841da1d8f654ce
MD5 5869e04171742ad573607ddbdaca4b5f
SHA1 b04aedaf7ec5b0af5c8461a73509abefa705b8c4
SHA512 b361a6c3a7c33cc6e618675767a2c0b7b52660f437369ef7d7c559df5b38026183aaa1f3521e02f66df495868a615edc0cb8fe97164c71a2d216c71c8de8d06d
SSDEEP 384:jjOETsR5b5LQES1bBv4+TPuh5+3WCpqphYJbuwOi:fG5bt9S1lv1TmSWCp0GvX
TLSH
T13272C0D90FD8F6F8D05644CF996635F01276E8F678635BA1FE80A6938B00110E2D4FA5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

calendar_single.png

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_single.png
Size 1KB
SHA256 dcfd89e13fabb3aa9efc3a18826ec178cc48e422fbd155df402df763f07b5885
MD5 91e4dfe659a317c6cc9924abdb679742
SHA1 757ab2d58e7155bc9abcb39eb2b2efdc3221e452
SHA512 858d73819c1ff26f5c1b715c3b7477673eb4ad67588aa0aad6c69b7f97276ac0d9ad4beb0e7a0c431370193f1176ffc54f5dd4ae47d2c8280d42b8bdc465ae85
TLSH
T1B2412CCB0BA1323A115E18B0E40E2BFB627C4E211DA59319E0B44FCDDC41546FA11241
MD5 SHA1 SHA512 TLSH

Submit Download

calendar_single_.png

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_single_.png
Size 491B
SHA256 31ca2663daabc30ca8f92615d0a4145a574def54221a6cc057a2c7effe556bc5
MD5 db4e5de947124fafdde205ffcfd7cb4e
SHA1 629336e53459c2dd19a0eb0157f152beadf43c70
SHA512 7b4072812c10531fdde6570661ab34ab254ac54f526ec76af6ecc7ced1c0a88e3a9d02646eca805599fb1e3e5e5bfbd4ae1ae2a22c24b1e39f5de2f8c81bd8eb
TLSH
T15AF0EBC62E53FC7AC10B0F3231E73E9C94EF37B94042802C08B6C021A20C68056EE278
MD5 SHA1 SHA512 TLSH

Submit Download

calendar_single_orange.png

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_single_orange.png
Size 13KB
SHA256 77a20710ca713f20cf5624ab217d97a799e030e1a878bd78906ade3886ca879e
MD5 aefd4ba31298cf6420abd99e222900c0
SHA1 9cec651e3349fb72e9645cf616665993188f3249
SHA512 cac7fc509f8aa3394adbd0c14e000dadaaf17cddf87de24e004299ad481d9ad2c34b982bbdc30dc12ec4dae0cf87f5097f5efb8e3070d0830b9f884bc6859d9d
SSDEEP 384:1g4NnQ2uRcdoXcWqk/kbJjHgkLqfKuCqLm7PhyO+9UxgSv:5NHQcWqwk5A7COm7wOfnv
TLSH
T13952C02643FF50CC292980D8D903CA4802FF45FF8556E3415A45A6BBEB37B21A293AD1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

calendar_single_orange_.png

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_single_orange_.png
Size 14KB
SHA256 584913ae9b82ba5ad969e933cb19156a540442efa3004988f5cd59b2044908f3
MD5 39b226cbf867dd03168f1e07d365b3e3
SHA1 1ec01b9ea8558d8eaa7968a8276943cef9fb9014
SHA512 c0a6aac817e2eb2b4e5fa324119df41cd5a4748996bcaed46ff3939b91564e108ccc3f74ffdae0442970f69e1d5a03fb139947c49a1f788234b7899ef551b8fa
SSDEEP 384:2Hr31OaRVt7/DgSWUWfAFNOq6TU5RcLcsuSN/:iZCKmS7sl/
TLSH
T11162C0CEA665B3CC55CEEB4C4908654887E3F4CEC7680D550EE18F2BF7B2EC28661096
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

curl-hot.png

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\curl-hot.png
Size 286B
SHA256 88fb3a3c559afb220cfb225e3a662b05e6e37a8f1fc3d966847da20462de615c
MD5 4e76a111cd400e49fa0015773b100d88
SHA1 b4d8c1fa31f71c460b90c848ddb028e03c929daf
SHA512 882838c16d8b8147672d088aafa3f6e6945f9e3cecf1249094726fb6a7dc9a388706533405d0407ad91962ce6b668a3b836275c79f91122f3c2ebffa33e54563
TLSH
T180D0EBF3E3851C3DA208C86BA01708627A62C81F40A388073C8AAC07208ED60D6012A3
MD5 SHA1 SHA512 TLSH

Submit Download

curl.png

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\curl.png
Size 187B
SHA256 660ef0a8510f26e77e83e5fee05db634d0b7d0b12b2b695c12878db9bc6a39ae
MD5 3fde27414a6e6db90dbf59245b49ca72
SHA1 6487cbb5ad9f2745fc34ba214a37abebccc41268
SHA512 ca144ecb4cf4906953595143cf843d19c7ad2fcbf1e18b91b3210600727e94962ccd7ea3f5925cc5819d14f8edecc666193a32d8b38b6a24203e78f78ca7a130
TLSH
T1A7C022C396C0FC6B0B0D00A210490880A0BA092F00021A8CA72A7014272D4848606B53
MD5 SHA1 SHA512 TLSH

Submit Download

month.png

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\month.png
Size 150B
SHA256 7c778324f6e69b3fc0c132e0f22e02ca77eabad84f45584d0b780eb2a64d6c14
MD5 c3c17cf42a4f48205155e2a75cc9c9aa
SHA1 8cb2a3b9246cc8a47b2dfd3684e6001bd23e979d
SHA512 b59274e818900c5b4bcd166c6ee9153d86bc23fb3b50bc41b930c26c7a322a03402ae3395df534d13a3c9f72c98082f4bd6f7253ee338eea3345bba1b2b7c934
TLSH
T1CEC08CC17390CB68881F02E2608280B184520ED2162383563D469A3006B4709E0A8AAA
MD5 SHA1 SHA512 TLSH

Submit Download

gadget.xml

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\ja\gadget.xml
Size 876B
SHA256 219ef97f88a2b100d6974ab8a246fe7908f94f95425ce4054ce1893da1b8d4b2
MD5 57f405d4dd7e4100dc07de9c4eb2acbb
SHA1 b47d16326037d34b9bb4eae476d0cc63b7092ce7
SHA512 04ddc4688d3bd22d83a2589f0a723401ff394c5757b048ad45a863cfd037768dbad2a0aa4fe7743869e2883c77c6bf6238c02ebd1b6cfc6dddb1d905e5e77cd6
TLSH
T18E118858C5F4CD2AD31118C00E3455A19BBBFBBB0801ED58F44C9940ABDB2CFC8A3AA8
MD5 SHA1 SHA512 TLSH

Submit Download

localized.js

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\ja\js\localized.js
Size 114B
SHA256 4cba1d9e2cd07d69df833f8d0ff79b89b02a5fb045e23c69a563f9341166cdd3
MD5 b0ee4c4ab4d13d956ad1e03f015bb636
SHA1 83ddfa4c903b4ba31566b7e8efc1ca4f5c38e349
SHA512 b6526a2451d531abd63e190c12d58caa013ddbdec8ca7983e7d9a69bf6ff7f8602a34f8663a3de44324d5b66143537e84b56628353b559242927285fcf21ce8a
TLSH
T13CB092011E83301C30576C02891C81184323F0D69634C23DA484364D169315000137A1
MD5 SHA1 SHA512 TLSH

Submit Download

calendar.js

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\js\calendar.js
Size 63KB
SHA256 d44f99323809b74ae64abcdfdcc6c7f2a3fac82aebb1fb187bf6c9fc6a7be3c3
MD5 55e5d7a0f69e31ca830597cf822b02ee
SHA1 a52ceed6e6428d171aa801f2497a05bb72bb7ba8
SHA512 ef0570ff295f490d519d54462a2a70fe2634fc8c3443945f27733cd36f6cb488956d59d617d31e57d001c6749c8fb8cb8a19bccbaa63d092138cd2cfe457c7d8
SSDEEP 1536:5uMgJiSvm3+36dKv4Z2K0CrTEm4eIrjRyAo5fEhG1OJHSa129fdQNd/CW4zVDG/n:5uMgJiSu3+36Av4Z2K0CrTEm4eIrjRyq
TLSH
T190537E4346E9450CB1F7BA5CAB7A40740776BB65AA3CCE7C01B4484E19E3A4478E7FA3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

localized.js

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\js\localized.js
Size 134B
SHA256 1fc996fd91015b0b5f4f63f7f3ab1c86151d5cc8dee5613b1ebde72411f38538
MD5 c1f65331c1c1a82f417da4b49fa41500
SHA1 02db28be35c700a27a7197ce8f7397c18d35070f
SHA512 1f0c8126b1675fae5825bf62aaaf0a056d701e55ae8a1193fe9c2939c07768873dc19818c7d5b169a9b84a996972ee46eb800538f113d7567b242e67a8284701
TLSH
T1EFC092022ED2302C30A7BC428A2A81284333B0D69A38C26D80D43E8E26E32500543BA3
MD5 SHA1 SHA512 TLSH

Submit Download

gadget.xml

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\ru\gadget.xml
Size 1003B
SHA256 e76e22f797edb592581a4b1837bdfac9b58d4cfe79f9f84c1a017826efc0586d
MD5 290537cf723ba08ec74d9b5394e8eda0
SHA1 5de21c4648a52fd5eb18ed479e429717efc93159
SHA512 6f86873c8750662bc3b4de2e6074d4f4225e14576453dc923177a8a0693709ba2eb9e46ceeddc4e9b1da689e9170bb79ec39cc686cbb8b7fe2050efbf6648566
TLSH
T13C115654C1F8C95AD30168C00E3091A1AABAFBFF0916E848F48C9D50AB872CF9463AD8
MD5 SHA1 SHA512 TLSH

Submit Download

localized.js

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\ru\js\localized.js
Size 126B
SHA256 e0628f66db2d1d3c370c772c6a19dddb8742b81a10ac7bf669213e9b170dbad1
MD5 b62e534a11e594222675d667efe823ed
SHA1 baeba769edbea51e996832b32540be64b7d6543c
SHA512 a8ca937facf10d3014017bc47f543ad1e41a6a9f099199555a6faddadbacaf6c4dd42a6e34d9920c32d80acfe4079a99c714629ae8529ea0ada2c4a7cf4062a4
TLSH
T1FFB0920599A2302C30177C128D988250033BB2DAAA38C119C084368E2AA31580003791
MD5 SHA1 SHA512 TLSH

Submit Download

gadget.xml

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\zh\gadget.xml
Size 849B
SHA256 9eaca8c42593756d96612bff49ad4dcfbe844ade24caa47a215e88db31eed92a
MD5 35ae65573aee7cf612d5c52fa625b5da
SHA1 ebafcffcac5924a57921cf7dbf7bc402e51c72ee
SHA512 3dbfbb4ae4b0155a1d08db4209c9af395c079ae95dd8ec3b3e459c4b1739ab7b20eb510153e80363242a86e8b789f826038ca40978fff315bb1c94ef8b995674
TLSH
T1D2014454C5F8C92EC31118C00E3491A19BBBFBEB0805A858F48C5E909BCB2CF89A3998
MD5 SHA1 SHA512 TLSH

Submit Download

localized.js

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\zh\js\localized.js
Size 118B
SHA256 8914381ad18e874c942bb19f9bf3947b2e031f89bd227c6ab45197a1294e4f35
MD5 2d9ac00ae6c64dff1d5c06e53c2aecf1
SHA1 d3fa23226124ce852e140c710baa96dd56eb5c6b
SHA512 31dd854603e3eb71174f32cbb8a01d6a07f74792b30db532387b40c5798a675d9eb74ea1bcb2d5546ea5b8fbb7aa78cb36af0edb06c077ccb89982a4944f6e12
TLSH
T1D7B092011992301C30177C06695D81150333B6D69638C6288484364E17DB1100407791
MD5 SHA1 SHA512 TLSH

Submit Download

clock.html

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\clock.html
Size 4KB
SHA256 4e3e1a17bc597c377ef7bb135eaed81ac56b1a780a80adea2e85b21d487a9cdc
MD5 b3a5c380d876925a981af1ebc3695e01
SHA1 fed847cd75d481e16f877e55ddf05b2ee1c195c7
SHA512 2870b055e94385775ef8d08c79e01bf81fe23a1a555881b2df946d8c45005a9c2d7ff71803481636a80067942dba2df1af873bf21e1d46c4ec45d4195b191696
SSDEEP 96:hga53aIpHHdUxSjDiCxUK8ZRQol8aCsnZVci6:2q3HDJ/6RPefsZVc3
TLSH
T1AF917B022FEE0108F1F66E1EAD3310615A3DBF155879D6BC00B84D4D98A2F8499E3FA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

clock.css

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\css\clock.css
Size 674B
SHA256 dca69ac4afb6fe543b7adbb2645bf3df57464383236fde6d82703106869a03f9
MD5 c3adf6a62f420d0926b817bc570bcac7
SHA1 5f2fdbe6e421079dadc1f3f15f61af894875fea9
SHA512 f34ed769bfd01eb2fbfc05386f7ef587b3d208b68943f5c2fc10ef4a705e64aff99954450013b3e2e05699f51f8335749b820742f43d5153aa586817be51317f
TLSH
T1BA018C026BAA061CF459B58E0FDAC038DB3AAA14413F8F1910F8910B66EF9004E0DFF3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.css

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\css\settings.css
Size 1KB
SHA256 3758f068241cbadba2ea96ba1de70de518758403651cf59ffb215eff9e649267
MD5 77cf5e1d11d58b727298d4770ce4ba5f
SHA1 c8e3d1c88e0f126e4b232ec5bdad3bf4217aec6a
SHA512 d91ef7bbfe6fa32a0ee8d557e8a4178f2ada5c52921c1d2a2b2647ff7fe982548d9211693ebca4759bbb76ab4eea328963ec9f7484ec6e1d55870d747ca4e9d0
TLSH
T1563151436AAB0518B4AA665A5B7B4034DB3BB915103E9E1D21ECE10E1BEFA040D05FF7
MD5 SHA1 SHA512 TLSH

Submit Download

gadget.xml

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\de\gadget.xml
Size 877B
SHA256 e21068dd0303e3351bda778ef45fcdad4e8157a8a9e1c357766e01fd94f7c7e8
MD5 740033e46c84b759e4c15e39a40b8522
SHA1 9f18d141e60bfb9fbc679b7a4e7f70c3503d9735
SHA512 fdada0a07ab3cf5ae94e38c7bda44509e34f84aca9ce8ce148e470ab8016ac2091831d7dfb8851135a2ef5761941ea94326971aef9d987e435000f918e5964f5
TLSH
T10D118C10C5E4C82A933158D06E3494A1D6BFF7EE4805DC08F48CA1139BAB2DFC463D98
MD5 SHA1 SHA512 TLSH

Submit Download

localized.js

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\de\js\localized.js
Size 528B
SHA256 7e3d253ae9c80a63c6c6ca5228205b42dfecd0f6636d25c96bfa6e8b0ffcbf86
MD5 33b0e9e0e02a1489c32faf356803ad2f
SHA1 a368997684d7510e4be0c4334f57252824fffc02
SHA512 d9c9c3f5411c9270820f5930e4d2bb11309819dbf247ff590cdaacb4a625b3f4dc6f8a8959e95d9e065d4f46ee2ccb5c7dc153732361a69c6aea72d3b806998b
TLSH
T1F4F0AC2212D5A02D79627AC5CF7ED1255363F9EAA53E460D808C3E4D26F245459833B3
MD5 SHA1 SHA512 TLSH

Submit Download

drag.png

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\drag.png
Size 19KB
SHA256 e476c58ff8490c2e2b7ac6c8f288d9b22d4dab7c9cc838690f29efc3536e1682
MD5 6fd99c8434a3caa67aa9a765e1823ad9
SHA1 37594f08535efca8c5da7d6c859c48a62802e063
SHA512 df02ca37df236ae46ffc9f555a51b7b16a49e300c6cdfc6944e9a384ebb2fea961148ac3d3cbc98f4b04b5c671bb768f50176e52ab7d101859e12665e9e1710b
SSDEEP 384:+CmCOVi72xnglLcyyfS9vl6LNbBTUwTU58XbjgOmvLypKOzsm9:aCOG2xgRcy7dQbBYwTUKLjgVypKOzsm9
TLSH
T1D992D0DEB11A837AE5D78F125BC863FF8A5310CA4405E782E54230C78A856C217DA5AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gadget.xml

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\fr\gadget.xml
Size 903B
SHA256 1c6b67b5c74019cf77fdc8907911b5008693e31ff99b71fb3c1b5669d3af234a
MD5 de3197ea4bfdda8749eb11e9741e0f44
SHA1 5346f1a612785632d69eca102ea802cd402eb93c
SHA512 6315ddef94d112c5a2cb41dd9bc2b79f1aabace7095c727a5774ce58b21610bc911fea1c994e979896ed79717e8bf676e171ac08c7415bb931ccfd907e09d616
TLSH
T1ED115C10C5D4CC1A833298D06E3495E1D67EF7EA4806DC48F49DA143ABEB1CFD5A3998
MD5 SHA1 SHA512 TLSH

Submit Download

localized.js

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\fr\js\localized.js
Size 556B
SHA256 0d957c7a75e2309afe5ac868fd68a47c4faaa9d441c655c478e0c8453b9025fa
MD5 5de36da5cbb13777bc9646777b9e2528
SHA1 49179dfe0e9f0784a0ea9b76512dae284cd5812a
SHA512 1861e073b10971cff5f9f1e42c03bcda66adc73278151926c81b9995654604d40d5f96e1f280597a8029e5034b76f543a93c0ee912a2fd3f9903d21d1bfe4ec1
TLSH
T183F0FE6213E56018767775858F3ED0250737B5D6A63D871C44993D0D2BE29109D87373
MD5 SHA1 SHA512 TLSH

Submit Download

gadget.xml

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\gadget.xml
Size 925B
SHA256 879c10f93237e26aa400935764596a51d3afa91cfeabe333dcebbf11b6706246
MD5 bf1d2b94276416417fdc8aa9fce1f438
SHA1 5c901315bf71c8271f0cb07c1b62bea36ee69d16
SHA512 9766183f8a8efb239d39c43b1ed120fb1d4b02ecc06bfd54bd9b3888afb2c00c945c3f7c62bf96fe7532d267fafa19c9e182d85187fe65753715399040871d5c
TLSH
T10D119015C5D8C916933158D11E3594A1E66BF7FB09019C48F48CA153ABBB2CF85A3988
MD5 SHA1 SHA512 TLSH

Submit Download

cronometer.png

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\cronometer.png
Size 12KB
SHA256 2e8e5a035efeab2e2bc05d907b848417ab902a64015b69ef6b61709c031c30d9
MD5 4d034bb202af63180bbcf94279c4d810
SHA1 fd676487fc48c70b1fd1bb56d0e329b6907967db
SHA512 99181b7568d1b732873e147463240ccf0f33fc059e4fefb655f2dc47f57018ce55aa28f041ca9372466ff03ba289d2b565428f411568c80b36910390c9c01e15
SSDEEP 384:kZVNK+Pd4/kC46H8t81jf0kCllx0yaHxLki7NWNrQnxh:UVNK+Pd48C4LaG7OyYxLDSrQb
TLSH
T1B152CFF3AB95E2F6D63BBC98783BC4A0986B9417135845493C819013612DFF09E49F7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cronometer_.png

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\cronometer_.png
Size 837B
SHA256 4be81739e0b2595ef70a2575f3902bee8502dc2b64919bc8fda9b399f8d979ad
MD5 bf8e16a669bec6a578f23e025c9bea1f
SHA1 3db1d0e434aa01a06d020774205751fe628575c1
SHA512 23228c708f3af57db2406d470c193995f697d75f3b0e015529ea9986299886fe377192856bb28769fc6f530bd775b89ebf2f0e75368572d9d6cbf6e470e0cba3
TLSH
T1530175C807935AAFC42A0D30544DB0075C1FDD2402892EF924AE197A1A63ECD7CE274E
MD5 SHA1 SHA512 TLSH

Submit Download

cronometer_dot.png

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\cronometer_dot.png
Size 569B
SHA256 d58dd71eec881ae101d2c764e847393abc8d2cc159ba787be7916a9459d311a0
MD5 a3b4cbddf6a5e944d69db0a0e07ad24f
SHA1 20f5d1587b044cf8897a0d819fa8f31db403b4e4
SHA512 3b2b3d64cc8c18bad9fb8b6376fd905f8d3c67c0001bb1d5689ab02b8a81616e101474da657756580e48dd406fc034b18731d70afba3428c28e278731eaebb21
TLSH
T1EDF0E1F766A795B698F41582B84637A0CA7245CBD62216292485FA08717448026745B1
MD5 SHA1 SHA512 TLSH

Submit Download

cronometer_h.png

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\cronometer_h.png
Size 471B
SHA256 59b02ff1f99144db2d1f390b26be26a78c3a4c03b43469ecaa458527966ac825
MD5 5f4ab8f2db35ddd4a81fc6e7ecea5347
SHA1 f240b64b2943f6ae09e5a3649c0bcf95afc81802
SHA512 4209f416855a4c6041f891f9db493d034da2c1d0c7b53b9e686a6571f8a35be5c9b67fd4d835fca39b5752ae66c33be00387606f42cdc6fba89a8fd4d5ab16da
TLSH
T139F00E76230037B8ED4F0A506C2E21A2DD03E5BA29A02309E02C6117ADC3F188459543
MD5 SHA1 SHA512 TLSH

Submit Download

cronometer_m.png

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\cronometer_m.png
Size 537B
SHA256 6a23ff42a0ac68e20b0b83f35323dd742e0c9da750cdae93b73fb3b87025b030
MD5 dfc738447a58e9bd6d4472e0c6f8e7e8
SHA1 7c34aff70493ca3b5d2cf20bf5dd8e8ba202ea8c
SHA512 2c6c98e6204e4be8fb0e450b388899bfdfb585f5dda4f90ebe659e5a434cc9641b9ab4fc0fc4d39307ad0ef85d786b78758d7bea59887ec84439deb6a1659932
TLSH
T1C2F026FA40B0495FD354546BE22E1A192C82B56F184170211680597111898755AED015
MD5 SHA1 SHA512 TLSH

Submit Download

cronometer_s.png

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\cronometer_s.png
Size 357B
SHA256 17512d8b62fede2a13df93ea3ffd0eb74e61cdb811ae175e37040974f1870060
MD5 e71895a1f7f121b7a2ee99903656f3d8
SHA1 45151142a304fbb90d92edca3aa5b21fb70ba958
SHA512 10447e905e078ddf7c58a035bf236f925509b8a2c1c2c330c67fc4453fd4a123baf6b3c6f898f1ab477c4c956bd93ea64dfa7a605e008c5df12a42659bce1986
TLSH
T1DEE060C6EF20C06EDD31082398D10122C8AF2842200F320CD0FEE252B323A904BC4A2E
MD5 SHA1 SHA512 TLSH

Submit Download

cronometer_settings.png

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\cronometer_settings.png
Size 14KB
SHA256 e2a63208e0548a68d69b121b07494115a46c18a4e824afbc5ba6e0f5afdcb1f6
MD5 21f90f1682420a1b2552590ce774c4ee
SHA1 8646c88be630a27f52a5845e5009bdb580dff891
SHA512 563f420e1610e0b6e4fafa6886ce0ade77dbd3f7bb457cad57a65b37f2f1622be67445c87778c416a239554588a260213f98799720275287973ee6d0e77e30e5
SSDEEP 384:4963WnJs6Cf+0N4AB1laoC44F8xwjRNGYgFE5bW:4o3WJhh3k1laDR2UrxXE
TLSH
T10452B0D27F14341428B6053267621F20E3BF95D7F03916E5C5F3EA9261D7D212325BD4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

diner.png

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\diner.png
Size 18KB
SHA256 f23d0974e14fb4387073b655356cff96e766265110d3f5f55378dfda2145b053
MD5 362ececadb76cfa12391950a2f928903
SHA1 d94569c468a249db73e5721bb7b85a2af619d18c
SHA512 4eb43ba7e5ffc50c18bfe9e2a3ea9a61bd1b97642d844be7efa3173f32654c918cda39bb45913f84dae55e0a885772043ced9b7ca5f80fb227365b5bb4fa0682
SSDEEP 384:k2JphQBKkrnedyBkol8Btmc5TlqNEygJlhZOFUQHNEIbqXQAxSNrYmsmPpa1:1JAXrsy6ol8BtmKEXShABNhbqXKyXl
TLSH
T18982D03B580A7FED36DB69C681E9DE21CD14B1493607B80C7CD605820EFB63246F1AB2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

diner_.png

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\diner_.png
Size 881B
SHA256 ad242349071c35435ef2d7d7f49392af07ecf0b784283ed1edebcfadcbb0257b
MD5 d1a8a092b0b7aae3f7e01a32ffcae3b6
SHA1 669b4dcfb7fc5f3f061f6978bc483d16fecbe691
SHA512 b95959a64991ac7f1c61f218a207fd5526a7fae8e890ef6d7b86071cadab996deab9c6990d9d6eee16824d4ca4371a3d7f2ab1bc0157d0a4a81bffb9e9b4e7a8
TLSH
T1A11170F3B172E8B0CAEC43B323481498C0A6C96CE883C68D166580F94C59E3B12C57AB
MD5 SHA1 SHA512 TLSH

Submit Download

diner_dot.png

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\diner_dot.png
Size 193B
SHA256 5fb2b0510b734f0c17140e391af97327b34e0ebcf237ce24e50771bbe87dc59a
MD5 1fd7362d7b0689dcf76e4f9be865881b
SHA1 565135379836dbb2c06422ddcfd489d9d3969dde
SHA512 6f16fc7edb2cefa536e97883522d00604b9dc63205027e55b4919f8ea6f28529169e1750a553227f8500de1d37207663af576684a15c10477c5ab09dfec4ed48
TLSH
T19EC022DE82A0A669539C0C8228180A32C03B9DBD0C03AD0001B72C2128ABAD131D8267
MD5 SHA1 SHA512 TLSH

Submit Download

diner_h.png

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\diner_h.png
Size 368B
SHA256 049379ef6f791a562fcd675d175d097f3b0b3f5a25fa47a6717f2037baead903
MD5 a991f6b4c7c4570d7ba5b8f97e43ddc7
SHA1 563c1fbd2990d701fbeeb6a18e4eec5de06782d9
SHA512 02623e3fcb68ecb1e0c519707b5243ef1dca88976e14003f8bc707d5fcec9d09fa68cc4d4816304a4173d665790bd220a86ae9d4c5918a61c4c0a865b10f4705
TLSH
T1CEE0C0C5F254B536C36404964ED20034A07604FC97679CA8B64C04BB9276F17E5A51DE
MD5 SHA1 SHA512 TLSH

Submit Download

settings_corner_top_left.png

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_corner_top_left.png
Size 131B
SHA256 c7b70dc88a2f60d40221d66a73d4c7704c0fdd14454283f7839c93fb34e6e5f1
MD5 ec5af4ee104bb5131758cc69351383ba
SHA1 84bdf8d97ea5c0d07327d0945bce1f272dc3c080
SHA512 606f63dbb7b5ac3acfe22aa86930fbcc5e8c6ea9cc4002bd7637a6b27289c67b975c051b45f9ccec65a5af2109d34d596eb1f05b1edc80b183fe3d488405b216
TLSH
T1E1C09BDF72584937D60D4671264F0510D4E78F5845110D65105567241D21A904554352
MD5 SHA1 SHA512 TLSH

Submit Download

logo.png

Path C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\logo.png
Size 213B
SHA256 e635a041cb74dee326b7c32384e9ae18eed3d23f865a0f1e50c15a59cf3af362
MD5 37227ac694311231d6b8e03489a89ab8
SHA1 21364960820fa5a34ea52161e2fc8e2ab55effaa
SHA512 7304ecc49f0d52ee6ab5e2cdc392ffb8fd0be94c16d13ba3214073a7eda9e520806b6ce9f276c55e84a995129434ae1519631725e75cb1588a3f791a20515420
TLSH
T124D022FF8260A83EC64A08BA3853386083230E88162A0488AA96E925694B1E120887D6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.ini

Path C:\Users\Admin\AppData\Local\Microsoft\Windows Sidebar\settings.ini
Size 4KB
SHA256 894be9ac54cdfb416d5cf2637a858216d65543096634a522c433a8ed67084cd8
MD5 b4322c7238ff784ebf393562d908292b
SHA1 8b3c2817606987bbe106c55761147c994123eede
SHA512 1aa89a5ec99c2ddf13af5c9e9de6d1f81f1ca52360dc321335c7dbb0ce06f5a05f0270b20e5ac254499354442ded0aa51f3adffe85fc895eadcb549960ca83b8
SSDEEP 96:rg/ClSKJCmVzDSbRS4gS6NSbRSDNySbRSz:uC4S1VfQS4gS6NQSDNyQSz
TLSH
T1BB816F6283F81208F4FB8B54D6BA28B25675FD7D3D18D45C24D68A0D19F0F4088A2BEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.ini

Path C:\Users\Admin\AppData\Local\Microsoft\Windows Sidebar\settings.ini
Size 4KB
SHA256 342742690e795b4ec2f7a8dc94ff92619ad72d63d443099b6f20460b657e3a37
MD5 6a9a18aec6059b26a3d60acb19a56cf5
SHA1 0035fb0225aa26d07ad2fb2e61899585620754e2
SHA512 c14ba924a4fcf87da58251e5fb2e283eba01bbeb53db8b117cd07cdfb41d5ca9dc9a1df5dacc76704b95d39aed97e9766e51e29bd3110f0d991d3d0be633179f
SSDEEP 96:rg/ClSKJCmVzDSbRS4gS6NSbRSD5ZMySbRSz:uC4S1VfQS4gS6NQSD5SyQSz
TLSH
T1C491516283F81108F4FB4B54D6B928B25675FD693D18D45C24D68E4D19F1F4088A2BEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.ini

Path C:\Users\Admin\AppData\Local\Microsoft\Windows Sidebar\settings.ini
Size 7KB
SHA256 0d4a636e1b40c2dee2dbf66f48f94e078c0438d2cb9e2d3b7a4e1de35b7f463f
MD5 3be1cd4262fad4c66b9036b592daf552
SHA1 bd8c8bf5d191772237ffbd6fb472557441ebe03d
SHA512 1ffb652df879c88f8a1db10927a50bb5c6703d87cf3c2aec1e777e7cae703fcb1ba0c1a15a68a8f0f37dd4ef537cbd8058c83d8e73156c2c38bc2fc47cc1e33c
SSDEEP 192:uC4S1VfQS4gS6NQSD5SBKzyQSOTfNyG2gk+jeMEfHgu+AfMPqUlUrE5NWJlCyHRN:rdfkWNP5jyiTfNyG2gk+jeMEfHgu+Afp
TLSH
T10EF18C6747F51104F4FB8A58D2F928761A71BDA63C08D41C1AD24E0E1AF2F41E866FEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.ini

Path C:\Users\Admin\AppData\Local\Microsoft\Windows Sidebar\settings.ini
Size 7KB
SHA256 00d4efb08d5e0f7809d47c3dcce6a5739335827b1220431276006752cd199881
MD5 77f9e77c0408efb5edeac3a6bc4b4eae
SHA1 60224347900ff8d5c8e68402a2db053a83c0b14d
SHA512 243c0d3b422424f5d768ad2624147303c20b498046bc2466101acd0072f79d096d5fbaf1751071c21f65fd00ea9b2ac7debac40c6c9c5ed31044a8c779da6876
SSDEEP 192:uC4S1VfQSYgS6NQSD5SBKUXyQSOTfNyG2gk+jeMEfHgu+AfMPqUlUrE5NWJlCyHL:rdfEWNP5EXyiTfNyG2gk+jeMEfHgu+Ax
TLSH
T1ACF19B6747F51104F4FB8A58D2F928761A71BDA63C08D41C1AD24E0E1AF2F41A866FEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.ini

Path C:\Users\Admin\AppData\Local\Microsoft\Windows Sidebar\settings.ini
Size 9KB
SHA256 2639c6cd951da2ad4e0d489f5d9f88cb04d7d715894718ae2fb7437daa9a8845
MD5 ca30308460354a2f4f24b3e9dc7c4711
SHA1 fceaef73ed9d9ddbaa3cc8a961ebf36ff510a72a
SHA512 53bd5c14c3ba8a5e532c71a72e26e9ca0f85bc78eb7828a32e593fdcba6d9345c4b77e84be70dc344c463895548ca35616cd5ac63abcaf8a30ed62e1ea878ab8
SSDEEP 192:MC4S1qtipbfQSYgS6NQSD5SBKUXyQSOTfNyG2gk+jeMEfHgu+AfMPqUlUrE5NWJl:pSQFfEWNP5EXyiTfNyG2gk+jeMEfHguD
TLSH
T1F212BD6747F51104F5FB8B58D2F928721A72BDAA3C08D41C19D24E0E19F2F41A862FEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.ini

Path C:\Users\Admin\AppData\Local\Microsoft\Windows Sidebar\settings.ini
Size 10KB
SHA256 bb2c33bfd0cd236b58e96d6e4de3d74bae43be0f2416ca0af7e501aee40ed1e5
MD5 09944bb2ffeebb72cdc1e5cb191b416b
SHA1 e65d4c42f09ea9a2b38f3e859b8b08fe1ba78566
SHA512 ae6647c50c5d3912783d9d87038bdea7f025a9e1168b1eba102f2c737ebbd14ec034787453b172feafb6616663b3605134d4923b1fdb139f4f992556f8e59424
SSDEEP 192:MC4S1qtipUkfQSYgS6NQSD5SBKUXyQSOTfNyG2gk+jeMEfHgu+AfMPqUlUrE5NWw:pSQxfEWNP5EXyiTfNyG2gk+jeMEfHguY
TLSH
T16822AE6747F51104F5FB8B58D6F92C722671BDAA3C08D41C19D24E0E1AF2B41A862FEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.ini

Path C:\Users\Admin\AppData\Local\Microsoft\Windows Sidebar\settings.ini
Size 10KB
SHA256 a512b9f7539f980ba9f3a1536fd0875da1718cf1582de1789e167dbf8ed0da8d
MD5 c83a97c16bf188189ae48f67fee1735d
SHA1 45b6589d4aaefc69c9d5e236e132b0c3ae60b491
SHA512 b827b903feff84b3df810413c070e802140159aea67d5ac6d7e18b91e5a991a9cb160d826fd485c6f18d0786fe1a64e372356a3a22e0bcfa74297a45acbdef00
SSDEEP 192:0C4S1qtipUkfQSYgS6NQSD5SBKUXyQSOTfNyG2gk+jeMEfHgu+AfMPqUlUrE5NWR:hSQxfEWNP5EXyiTfNyG2gk+jeMEfHgup
TLSH
T18622BE6747F91104F5FB8B58D2F92C726671BDAA3C08D41C19D24E0E1AF1B41A862FEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icon.jpg

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\Agenda.gadget\ru\icon.jpg
Size 4KB
SHA256 45a7b947fae59b7636ca42997cbed1efe70cce31458a0a7048b3e20515f15671
MD5 186aa106e3e4105223f745a941ae512d
SHA1 dc211f2a4394192d6efb3323c7a9073bc1e7d5ef
SHA512 4a5163e3f898e69b5fbd8b3409851b32288e95d1b14e9e7d08b52c51cfc46c58d6b511a938e9de55ec9a9aadde2b7b6d573c53232f789072322d8b39e0a000c8
SSDEEP 96:2dfgcWGi1cHJ7s4Z6QwsRfRBTGtQWME+6w6Gdr:2dfTi1kWs/y/TGdr
TLSH
T10E917D7F33D06800DA1BE5FD8DAC826A1B0146A9D0A9623F78DF013987410FA1E2DD8D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FavsOP.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\AppLauncher.gadget\images\FavsOP.png
Size 2KB
SHA256 703b032b90fcd47fa82bfdf5f35b0200f69e6b1c196bd44e0e4522380093ac77
MD5 4109d866824081ef608b58f206276daa
SHA1 20ca4328e117fef754b2d648807eee6185a62fa6
SHA512 bf0362470c00368386bc63359a4d4c370b328d8b986b3cd234caf25d414f66663bab0f52259311c86295515b28adf4365e495ab5f5afad0c0c79cd27cce61b73
TLSH
T141516E8DB3244728FD9C3905B4FA1C54872ABF22B3145FE45534F616ED42054D1A78F6
MD5 SHA1 SHA512 TLSH

Submit Download

Donate.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\Drives_Meter.gadget\Donate.png
Size 2KB
SHA256 68e5a79fe3458f0e162c25c66a9aa63d68d51fbc6fd6f0ddad3581b082a2af7f
MD5 0f7df5a70af52fca9164894f7ecf81de
SHA1 09a7fc93bb53f29ba95cf4b97fc6f47f7129927f
SHA512 25a50b185b99ef296a0f167ab7e754e323eb11a3d84129f90a061d1a16f993a1ed4a1e5ce429e0150e990850fc71efed9259385f6bab08be844e57ba82cf9a1d
TLSH
T19C41E963B66BCC4E8E2D3F5F0C57185569450D0A840CEAA239A370262DFD5F894D04A5
MD5 SHA1 SHA512 TLSH

Submit Download

Share.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\Drives_Meter.gadget\Share.png
Size 840B
SHA256 4c0907af19d058705a3737ddae54a4e5aaf0330de7b43753f65d0816cf086e2e
MD5 a41e92e3a0e037fe254acf8be25b2731
SHA1 096d7ff6f4b31935e75b2310d652136fbfe3ba4e
SHA512 7f78bc0693edb9f404b64e44ff60e32ccef33dba8d7348078b27134bd456a5d7a62db37572830bd6ddd6f4e932584be2ccf0e71cc7274652f17da8d0550fc1d4
TLSH
T1BF018AC133F3CE617311026D357D4445857676E365F568766C1CDC5625B6B50F970202
MD5 SHA1 SHA512 TLSH

Submit Download

arrow.gif

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\Drives_Meter.gadget\arrow.gif
Size 66B
SHA256 096eb936bc9301c1c6fa86715eb306bec1b168dc5beb69b53cd4a81b9cb6a1a3
MD5 5034704a76cd55c1cbcbc58ea6bf523f
SHA1 425fee7ea7bc578c8e3f6298ebd6c3619738f2eb
SHA512 b8298bc5fcd9a3cd3ed0ed16e7e8ee8045ca5b69c54fcbfcc36d20b2b88269510cae3a0eafb2cf8f53ab8ec903b94c924c4c66078352aec8a2fccba3e5dc0627
TLSH
T11AA0025DFC583517F47980B94D1858463135D4487A8B1544540D11793A0B1F620D1C41
MD5 SHA1 SHA512 TLSH

Submit Download

cross.gif

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\Drives_Meter.gadget\cross.gif
Size 83B
SHA256 027d9c6711c32d0ca02e8b5c2831715b66923f0f6a0c4546a015b305658b13d0
MD5 ba9a274b9323753cd95bc3b1eb2f4e5f
SHA1 563b3d5d8cb15f4b5f99e05206c5a6d238111210
SHA512 525dbddb32d4429082ce5c807a09829e9e34df356b88101dee788b402fbdaf55c12278551b7513d957aa45d4c71588072c43bc1b63d94f42ccb88e08380261b2
TLSH
T122A022AEFAC200C2C23038302C20A0B2230ACC0C0C8A302B32CB3C3C2F3F000C002830
MD5 SHA1 SHA512 TLSH

Submit Download

follow_me-a.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\Drives_Meter.gadget\follow_me-a.png
Size 3KB
SHA256 d7df7fe05ddc4df97f62cc04a7d5e5ba7396f97faa2046a0d43a019453175f26
MD5 03b3f383017639e0efb13ea32e8e732a
SHA1 d9d19aad3821cad4a993c8d6fd39a3f68d4290d1
SHA512 3dcf03ce621d3d9be89938e046085b5987b87390e8af839431e60bca07f11d49310ae2ba2e782006058ffc2f5b4fa2ed2c3dc192903bb7782b6e56477f9ce45d
TLSH
T1BB816D49D194A80175E4D8E208AE3A3B8D1944C068C0BC2A96EEB43C4CB246A85897DF
MD5 SHA1 SHA512 TLSH

Submit Download

hs.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\Drives_Meter.gadget\hs.png
Size 2KB
SHA256 6607368e285a2bd53ae1632cc28fecbf718406716823d2e69802b9e0a1d9d7e8
MD5 fefa1a03d92ebad25c88dca94a0b63db
SHA1 8a937187ca475f678753774b244deecbb06fbd82
SHA512 db9b2e7e2c6aafd21ffe9d8b90edcd8d734ca1b76ac618090aa4ef828c69474f7d461e669716610ad97f8f3bd3153a3a38fa7fbecaf163e909ae32070d6628c3
TLSH
T10E512B40D72695724ECF55D244A13828FBAEC62837A684E93673C0FADD9437E80588E9
MD5 SHA1 SHA512 TLSH

Submit Download

hv.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\Drives_Meter.gadget\hv.png
Size 2KB
SHA256 3883457013db9bfdecdbd7ae670c24bdfa171843a7fe94ab0484086adef4c8f2
MD5 990d71cada17da100653636cf8490884
SHA1 1781663d8c4c2937de23de0b7fdc2899ec7aec7a
SHA512 d7b125965c544d43a09c146179d71b2c3c95d3e68fff3d25c404ff9c8c4a1fe93224f4c05a457d5f7f5480c5e99079b477187faa480411c5ac676e4b896bef23
TLSH
T109515E263E1971E5F7B1D25C7556003EB0E0E4517EB84465DAB3507C7F073ADC6484B6
MD5 SHA1 SHA512 TLSH

Submit Download

blackwhite.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\Drives_Meter.gadget\images\blackwhite.png
Size 394B
SHA256 e3fc342f57b1d5ec788b3aa4a7bb8d102cc4820ee6a560685017caa588465a50
MD5 42f8d357f24a100d852c430090c45472
SHA1 7a3e4c6ec0c9d3aacbba37569998c81e8e04b686
SHA512 fb6dbb94c3034dd0e6cfb6494703f73141b193b99102c5feacfcd556bba0157f10ed3833d79aa8ba2ce13a325b7b4187bb4e4a0600fb4fa100d87339ddf86506
TLSH
T1A9E068ECA7908CA48E97D1415F5332E3D0A10BB2FD62C30E79DB840006E4A22C0B552D
MD5 SHA1 SHA512 TLSH

Submit Download

likebox.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\Drives_Meter.gadget\likebox.png
Size 5KB
SHA256 691933f8d2a666dcb8413709e8e89defdf4f415837bf688b653571b659103405
MD5 7d19ac53c1c0bf026d721c5fe23b205f
SHA1 e55c3f6a745e1a780e83fc22c9cc8f03e9676aa9
SHA512 17b69b5d2bb578e772e5414c49ebf632ec557c7faaa30715df11fd1c5fdaefbcca016ae807c41448d8f690483dfbb2640c42825e19029dad747ce9631d6e1732
SSDEEP 96:axyzQfg9tV6GPHGyQVi+fuYc5Mri5+b6vB+KUcXPRHbWEebCRt:Gyz/9tA2HGJVbfdc5Mri5s6JBRZ7WPy
TLSH
T14FC19DEAE70F7BFCD682D461F9C3B4D36B364BEE8471998B2213A763946529C4041941
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

barback.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\GPU_Meter.gadget\barback.png
Size 548B
SHA256 0a3c4d4d9a9ddd36fa927948860a370a2b05329dc7d4bb999db0c541d99eba02
MD5 f6f1488adbf8770a62324e37b10c2d1d
SHA1 7b0fe5a9ea64dc6c5a9f583f1574ba9e67e0304a
SHA512 d5a828510764d09ec8f39180129345760dea9ec27b0a23a417b7fb7f78054af24559c8772311cb503f17aaf9c9aa495bed8c08f7787ee9f49a805bdcb5001da7
TLSH
T1B9F026D8BF38556EDADB8C261663B7033923165B154327044C52552CC4C66D2356D7CB
MD5 SHA1 SHA512 TLSH

Submit Download

bartop.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\GPU_Meter.gadget\bartop.png
Size 417B
SHA256 570200d6fdc623d9e67af2cceb2798ef1dab61d883d307bf54c6b049a4ba817e
MD5 d220c0c3ff64ea5b1e4305410c4623df
SHA1 caa54c07b13cf410a191bdf9d80745af16316356
SHA512 1273f0104ae4f941f5ac13015270aba547c0f4c05e39a5a64296e5ad4752e85e195b837f253851f9de97a5bd16971215f0b5eb7d860c4b04900deaf21df7a7c8
TLSH
T14EE023C831850C24C61E1092D2A167CF300B0B2653032054CD4A540015258B96818AD6
MD5 SHA1 SHA512 TLSH

Submit Download

35.gif

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MSN Weather 2_0.gadget\images\35.gif
Size 893B
SHA256 9dc88ce5fc27285bbdc4fbcd7c531431b33adb88cf7c66bc4538c1bebe5e3664
MD5 708806f6c0a108c66ae3cc7c8f5e0185
SHA1 bf68a5bef5e4ae656be1fdac60aa915a0407a507
SHA512 f581e160c16b9af355de0ec6b36524bc70b48da76c2dd9b2e475ccee01ac588b420ccd6ef093f1763843bf9e8871cfcf911c6e81558c87d5e16f7eead5b6ea16
TLSH
T1941163B5F237507EEE15D622856B662036EB710CF1E34153E207D8047609919812BAB4
MD5 SHA1 SHA512 TLSH

Submit Download

36.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MSN Weather 2_0.gadget\images\36.png
Size 1KB
SHA256 21b386955d18520dcef8d421d2f187f2f700084395b2abc8d143d84e1e5d79ed
MD5 9670838cf21196abc8b59847540711dd
SHA1 43b4176e0d7e4ef5c78fea159224771ce9319105
SHA512 e02089e6d55d82c68c6231af37cb99efd95743a5b6f0c2afb7e3df1433d3bd2d542974708686da819e850a47d364bc4c7877292033e59f84f66347725e432d71
TLSH
T17821E6EFC5C0061BADB46D1C45CA42CDD862A09202391262351B89BE9F4AC76B45B1F8
MD5 SHA1 SHA512 TLSH

Submit Download

4.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MSN Weather 2_0.gadget\images\4.png
Size 5KB
SHA256 d4d74fa3f867e41db1e825ee61055a91940cfbfd3e731ab00121317d2dca6c6d
MD5 b0c889d581786f475a00888fe647bea8
SHA1 0648634f2fce77c380c4ec95e332a756c64d651f
SHA512 2eacf5d7965dd6b6d4a6b33bd08d604ead8b5642ffd303403bcd109414d4285f311886175fb21f3bc874ce6ba5e849a68a74518bb697ec0d9f2e60f556fa6a92
SSDEEP 96:vZ/I09Da01l+gmkyTt6Hk8nTizpIDq07+59twYLZkJhVnHD6HJYj:vS0tKg9E05Ti1ID77C9twYaznWWj
TLSH
T171B19FBE5A9030C9B94EB7810D4FCB42D7B8769DCB12397C1182D4EE4894E47F3586B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BLUEDOCKED-highlight-01.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MSN Weather 2_0.gadget\images\BLUEDOCKED-highlight-01.png
Size 130B
SHA256 670d180facd116a2a24d8dbd88098e4fbca129861fdd470351691b06472e34af
MD5 eebe2514702c3b5789ebff43beeb7709
SHA1 d2794c417aa2b06fa5596b249e0f0ab582cc6ede
SHA512 b4bdcff44b0b4d0f0e008e941fd79700e74314a77acb7755ec7076abf30c4fa93dcbce1c3c1e740d3391da4290aea437d2c2be96d3173aa34009d0f2c3618741
TLSH
T1B3C012C3C3428CBDD0C90473620F5054E6B3065C850335C92937EC367DD16444486E07
MD5 SHA1 SHA512 TLSH

Submit Download

GRAY-highlight-01.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MSN Weather 2_0.gadget\images\GRAY-highlight-01.png
Size 244B
SHA256 9d560a1c6a1f0abe9f973cda08f712297d16b3f4894af996476d9ef7eab58762
MD5 9303e9b4814945cab2ec00706099aceb
SHA1 47c2a61c30e9d7cad3e316cf9606e98de9b54400
SHA512 b704d4b83fb27917c8d3535fee3b8df7770587fc5e552a268cf7c2cece22a0f32df211234c21fc0cb3f9e403a94ed7b35c44fe08f4d4f324d847795536a74d7f
TLSH
T178D012C3E1758CE8E4CC11739D162660E8370FD43A3116CB000BE825AE61A585CAD752
MD5 SHA1 SHA512 TLSH

Submit Download

GRAY-highlight-02.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MSN Weather 2_0.gadget\images\GRAY-highlight-02.png
Size 3KB
SHA256 6cfbc94f41ce52ec3784ae0580b38d03b8ae74736a89025ac5e140ebaa8d11d5
MD5 b7f45f77fc304e87a081a2b835040b87
SHA1 fe5e8745ca9ca71d78cb186038b3c1a1c2171ba1
SHA512 44a78d581bfa4ce4db10c377f3d677a5ccd31249d7531e9169a4f942545adabf0e522ef0b63eb4735f4dec87732161f789dab65a14acb103235b0e51b01e9818
TLSH
T106511A6F647060AE2F9A7C3319CF8282A769213CAE2B332490C765CE5058C0BFA71517
MD5 SHA1 SHA512 TLSH

Submit Download

gadget.xml_

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\DE\gadget.xml_
Size 817B
SHA256 7e33d2e6e3ccfc865d494642c76db3af0a3a69a6eef0650a80cc97527c79bb06
MD5 435de849a57328d7d8d31577bae907b2
SHA1 b0430241ee0cbc37846b821f96d1273f6d37efda
SHA512 0f2d58a41e096a1404f08fcf24277d0576c5b6ef6686cd23ab9178a90146379fac5670bc6dbeb7e435261d41a6a16c07e282b2f36398056f2f9d9acfef260fda
TLSH
T1EE01CE44C2C8E95683728471BB3A622DDBD8F2EB49919C05B8CC12232BB70CA45F3F52
MD5 SHA1 SHA512 TLSH

Submit Download

bg-docked4_transparent.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\background\small\bg-docked4_transparent.png
Size 581B
SHA256 76181ea01acc9b11055cd5d30f63238de7a63e60eed25b1809f23725a27cc8ff
MD5 d46b2907eba16c452834cdf1844149a3
SHA1 84b9f89eafc003860cb119c0d22351e21321d132
SHA512 bea3cf2d07de211b5637cc349b023f53ade19b5ffc452a5beade63132692dda2ba7ffe6b7f32fb72f93cbdc16f4940c00fb0f9b4e282889c1742c5f165dcdefd
TLSH
T1F3F012C9FE6C972086B13171C34550ECC4633F9F010D95970C329FB8E360D95B590201
MD5 SHA1 SHA512 TLSH

Submit Download

11.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\m1\11.png
Size 4KB
SHA256 ba5cfa8caf49f468237473e02e41fa9cf1d87544aa67b5767a63ee1781e2de79
MD5 6f93433ba8ea5ec7f943cee95658fca8
SHA1 929503b10f05a4a46462500a9814761c109a642d
SHA512 dd62571e245549c832dee7b6fcbe2bf5b36e04ae79f37ed696603674943cd8ba2c22453cee926ed0f9de3d2e406cf7fb25065cee0ba6ac6d9d46bda7e85d559f
SSDEEP 96:vSDZ/I09Da01l+gmkyTt6Hk8nTqL4jUpnnG6FjkbBRiaw1fAdU2S:vSDS0tKg9E05TE4wdGBRBIAC
TLSH
T1B4B19F9FD680004FECEAB6420ACA15C397A411FD5B76351069E119EE918EDC71F84676
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

15.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\m1\15.png
Size 4KB
SHA256 e35fcd3f8a145f874d410144e424fb32659d483629337bb8d91dab6da287d95a
MD5 56de6a925f1c0c3b803f1fd726cda688
SHA1 0ddcb71628cb649a546b45d84283ba1179f29573
SHA512 21f5f3baf6b2a8a586d40fd76c762ed093be0a0a7e44bfb6a64b97a3450d9ad9b7d4f916a3bdac19b4db3d1fc18ce704abb792aae326adf27d3f2014dfae81b1
SSDEEP 96:vSDZ/I09Da01l+gmkyTt6Hk8nTSIp9kwzDI82Nrc14/Mgf1/HkcrQfuc:vSDS0tKg9E05TTZiNI14/MgtvLQfuc
TLSH
T162B18D2FBD607D6A748D71430D585A43A2A0355CEB013568F8D268EF1827F4B1B609AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

21.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\m1\21.png
Size 4KB
SHA256 31f609dc0902f7f274e478756d3ac6f3b8b8ab3dfc788c883ac7e25fabeec669
MD5 87b68362c5a41a744ae7bfb72b69909d
SHA1 52bf661c51467ff854bcbcb0663423e0cc0ec89b
SHA512 f3a4a6314124b6558b7d1c2e7444d21ad06f92aa5571825000ce6e51ea40f1c8206a873819f3835a70e18f3c20d7d39ed8adef74f9e015e82ac80747229411a5
SSDEEP 96:vSDZ/I09Da01l+gmkyTt6Hk8nTHG1EU5hXQX/NBOw:vSDS0tKg9E05THO5hA5
TLSH
T10C919F6E86B0A09DAECF75520EDB01156365316DCC27367C80C368CEA498E1B2B1A477
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\m1\3.png
Size 4KB
SHA256 526b38a0524f9a393612e8afe9597607900dafbd95c33d3aaa516513b585f9e8
MD5 2e251b65c70987aaf47ef145c4735c5e
SHA1 aa2c02134c33b93489af3d7b39f333867b702e26
SHA512 704ecebf2e7e33d69f6355b557456bd95db1b4df98c58ae2eae6680b61e5fd30fbca310f8ed8cfe5277ee7cac92ed4e25040da95a0e6b93527dae7ba0db9ecd0
SSDEEP 96:vSDZ/I09Da01l+gmkyTt6Hk8nTwvir584tQe5m/ukwzDb6HsiLlVqt1z3n9:vSDS0tKg9E05T/re4ie5gu/n6MihCB39
TLSH
T189A1AD8EE971D80FDD9E6D018C4D1384AB34422CC8A7AB7844A066EE243BD9BAB51875
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

39.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\m1\39.png
Size 4KB
SHA256 648ca2858aaabbf3c9667a853ece1952b92698977425f78480a0923e36ad8fcc
MD5 a35c9230d6745da4ef08dd45b5855a30
SHA1 411dbd7d8931c56c92fc6e611ec8d0d5fa7509ca
SHA512 121b2c08b2d376df353eeb48be990b9f0e54d421d29025fd03fb1ad001d0990f5bd357e750858cc252385fbfd224cc517bc6f18d9959984b56f9979cfed813ca
SSDEEP 96:vSDZ/I09Da01l+gmkyTt6Hk8nT/v1oijsT8KapUMVpaX6uw9XYqHkO5i+:vSDS0tKg9E05TXCmkqPaXwIqPR
TLSH
T110A1AEDF84C4DA6EE8CB71311D5C4601FF8525ACCB4B67384AD245EEA429C0E5B185AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\m1\7.png
Size 4KB
SHA256 9b94c9245a206aecd622fc2c3d610dc1693e0698a60da0c68bfb8ac910be3720
MD5 b5d7b99d7001e5ce5021236edd7c7dd5
SHA1 07274e5a81342e1e5666675cd6d003348a7f7931
SHA512 e40bd86716e938d5afa1096c0ee5db5ee91d7f3d86e2d5bab51b265a74c737d9613ad5b3bae6b95fed49053a880134e9bfcf2d1d39edac200f1945fdd9ca4cde
SSDEEP 96:vSDZ/I09Da01l+gmkyTt6Hk8nT5Mo7gYxC8tt9lXIO8a0zJCrFoibKRTQ:vSDS0tKg9E05Tl7gYBLIza0zJBy8Q
TLSH
T15EA18EEEDC7060AD7ECD73414CCDCD49EAE9251C91273724A0C081FFA489ECA672A162
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

11.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\m2\11.png
Size 4KB
SHA256 0ea71178c4c44fe7428ef8fb08db676094dfb41d0e42e65b109392559d8b627a
MD5 f04c0272a5c37868c168d227c5e6fea6
SHA1 83f4431d7e824034c87b5100281b28cb1f915086
SHA512 19261ebcb6ce98afc3712817976f525a39e8ec1bc554edda9c9ef285b6bfec9faba1cb0b2997ada9f022735a2a5a26992197afe4a5cd9da2ceb89ad07f3c3685
SSDEEP 96:vSDZ/I09Da01l+gmkyTt6Hk8nT3hXp1xkiGH+KgClIQoLlt4ya:vSDS0tKg9E05T3hX1kiGkCalyb
TLSH
T1C1A18DDE6560251D79CEF3300EED5244BF2CA37D688311BCC4D684DA205AD2B7366163
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

15.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\m2\15.png
Size 4KB
SHA256 90a8edda9c299650a1730c81c8a2baacec98d5ca4a55dbd41473d5a064259352
MD5 4134d279fe401fd7785e417738210026
SHA1 2807a09eb9c2af9c49b0b6e3eb523480acc9ce30
SHA512 db7e9f66a27a217843c74cb7d81066a1e108db5ff421476dd106f0743e911a590baf4046ac3339d6f3e03b3467ea6e6204abac1f827fbc691c8ee893933a0e89
SSDEEP 96:vSDZ/I09Da01l+gmkyTt6Hk8nTyvPJA4dvxOolkckRB:vSDS0tKg9E05TyvPJA4NTkRB
TLSH
T1D691AEBEDD70A1AF9E86369208DF0703E728364CD6A332BC61C318CD14985436B624B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

21.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\m2\21.png
Size 4KB
SHA256 40bf1053f48b4e69566cbc91a5adffa566d2d6b309d7a36985c80ba3465c6471
MD5 d20b9870398ed11f1c3aa680f3b74746
SHA1 6c750a75a27d6e432f629bef9ac441c5d93347bb
SHA512 f3eb822e7a9615c83fd870c17ac2f1952e4ee9ab0c08856a3794ee273ca04f2351347974faba7bfb03d402db0e0868bfc646d92e7949caaf4e57e374f71b9268
SSDEEP 96:vSDZ/I09Da01l+gmkyTt6Hk8nT/Gyi75vrtp62j9PKEX:vSDS0tKg9E05TeHBvBpCEX
TLSH
T190918EDB8474646FA9CA76504ED91241E7A3E28C8E6B76B838C158EF04608076B15073
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\m2\3.png
Size 4KB
SHA256 9aec6fc879ebf4e8914825b686491d8d43c5b2dc8e11351fc5eeaf7c45c28d93
MD5 7a688ab5cb8453fe8c9a2aea5a97789f
SHA1 531f2464dadec8e0339715263e360441fd6d9361
SHA512 921c86d2754f3f00b7a253164c97e91ea4ce539ab51e8268cea97cf2847f60a06699a901ad4a5f15dc1a36e95b198d65e36f327423127f8f534d7c1cc6519560
SSDEEP 96:vSDZ/I09Da01l+gmkyTt6Hk8nT3hwbpsSCcjoDZoqDk/:vSDS0tKg9E05T3hwbm2oDZop/
TLSH
T1EA918CBBFD74B0EA84BD35620DDE4397B325626C0E9B313846E4A7CC6166D071F920B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

39.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\m2\39.png
Size 4KB
SHA256 056e27ff0a586268200b435b74c3aad34c93be17cfe7c6ef39cd8565911dd688
MD5 ac85869887951897053c3921c7a83bfe
SHA1 7e91d0cd73b6675a2813abf5db9458a164b7c5b0
SHA512 86ba5cf26c6cb6d7d745590b1acc0f6bb2d2ebf9a33b672a8e5bf4c8acfbb0f666a7efec5c25083769551597449292f142c799f9ab6a1e8caa390d1654e0b6ab
SSDEEP 96:vSDZ/I09Da01l+gmkyTt6Hk8nTT2PhusIgXqQ4yWvxDP2tkuk:vSDS0tKg9E05TEXFXqQ5WV2tkB
TLSH
T1DA917DE7DA6058EA7E99B2A01DDD21157B5C13AC9992323440820DDE2082E276B2D1F5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

44.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\m2\44.png
Size 4KB
SHA256 b20be89f7fe3e3817a6d64d2801016705011e79900dbd731bfa971b35aad860d
MD5 72d7e0b444253ad61f2162bb21600ff1
SHA1 1a4e9256c5b7b0562b29e7d6dbbaebf9f701851f
SHA512 75daa930430b7ca830224c74d582a39470d635d83f79885c449ca87a6241b26ea02017bf151abe431fff43c2746ebe7c345f6dde671366b3320dfa87ecb04725
SSDEEP 96:vSDZ/I09Da01l+gmkyTt6Hk8nTPMYLHBLqdJIiNFYx:vSDS0tKg9E05TUYLHpi8x
TLSH
T174918F9E97B0E05A7CCC39620E8D1101A73C61B8CAA3162C69C16EDF8056F07779D5F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

11.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\m3\11.png
Size 3KB
SHA256 173983329bc16a9c35faf6bd1bddf24d75630f488cc68bdc16d835776535295b
MD5 96e8cb61cbf8a80c87b3a9b93a82fa4f
SHA1 f081832af6c2417cbb11f723fbfc9673664c4aa8
SHA512 3a23dfc2624e5c6412980ae5b2af994c77bbc628cd4b580b49c20fe13d5d089575e25e80afffd3b2de7d33b46635e2e37f6d517d18abed900ee4f52acf917041
TLSH
T166718EEEEF64509DA6AC39510FCC0141971A72AC965B3B3859C1E5ED20A1D47EF64072
MD5 SHA1 SHA512 TLSH

Submit Download

15.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\m3\15.png
Size 4KB
SHA256 adb36546c0c5d460e75ba5feb2e24fde994ddf7a43fca3fb2c59e0c6abbf7ace
MD5 14aa7312c93928b9c40b5c3feb530704
SHA1 bd495fd67ae174cab529a1847ef4788d8c42e3d2
SHA512 1bc4f47b8fbea69f72ff5f7bf9a32e939b8afce47ef69f08d29e1195924a252e9933ea60bea088717193e9c5b925ef45a9f667cfc42f97f9efa4bad8793e8ab8
SSDEEP 96:vSDZ/I09Da01l+gmkyTt6Hk8nTqk22Y0u/Ej7KfHgkbdzA:vSDS0tKg9E05TqH2vPwA6dzA
TLSH
T128818EDE4A2050BE7D4878634E9CD601A76D22ACD626336464D351DF2424D4B277A03A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\m3\3.png
Size 3KB
SHA256 020e0bd12c6a304d78d41e727a60a2d647afcb1b1b5470b10cf7518f4d32ed3a
MD5 cb9fb317adb6925a6b0cc0e8e1e71a89
SHA1 4cdd224fa4184fbd77a5adf4a58a59a49b67ed3d
SHA512 bc01b1fc567e525ab3e98da599b193ae8e54438b37780378eb1120c338bfc16498c9b73625659be10c229a22b3aee1b1dd735a2669e6403985c4ef10e52588bc
TLSH
T103818D7F0D7050CF68EB39810DDC4985D37D2BA8A96B363CD0D511DE0415E835B921B5
MD5 SHA1 SHA512 TLSH

Submit Download

11.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\m4\11.png
Size 1KB
SHA256 d3bbab3965a683863a8db4f5ecd8aceba531914e104ac387cd05250631de75c4
MD5 eccabab36f96d54ccb8a5a14d6c1e98f
SHA1 335ae2207a603f4fb4bd3707d4970e2cc5ab7f2e
SHA512 53772f61422d81fefea01fe6cf75bc65bd3613da54f1310baaf7af0e33f7a95e6f8ad68d8ec572b6b9bcd9ee3db47de583471c544c245bd106db068e26754271
TLSH
T14531F9CB1A044E4C4765240B6BB9C151D203AFDC2A334A55F8DF7496B437A23AAC8018
MD5 SHA1 SHA512 TLSH

Submit Download

16.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\m4\16.png
Size 1KB
SHA256 be73c8f31f5f58b9a9df4afc7ee6fda92432ab1e5f660ce8406423c8ac06a0bb
MD5 01580e0767220a5c8df6de26b07f9ea8
SHA1 d715ac650b351b0414ce296c9042f43f1fa067d5
SHA512 5fafaae60c1f5a6cb6f9709e5c30db4cd3455c201ce51b0dfd52cd7ba8b6cf17e50b37e539c15066184c2a29da5a207a1fa4296cd7ad10140ca18ffa9ba3494e
TLSH
T12021D8EE0C19615BE34F3BFC8AA11086E8621EBD0F0390980DDD8C69F543131A6921A5
MD5 SHA1 SHA512 TLSH

Submit Download

21.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\m4\21.png
Size 2KB
SHA256 82e6d92d7854b8c8bbde5885650847ddd901aa43475ccd3523b9e993dd629db8
MD5 75af4b3c73d1b721018ac56a0eedee81
SHA1 b90a4b6c31b4965b4d6a4d927986c3f9409d1bf8
SHA512 525ee80457c86e12791309b3e6d6eca35b824461b395573394b89b1fe7f36a4ea209adc0c7ababc6ed2c563b3ae9da3305ec5ad27e3dbf591aad07ebb36e0b5f
TLSH
T18D412CA26F63073E93BE8A37041B1A0DD3B7DC220CFB4B726C9C5805A4978141639850
MD5 SHA1 SHA512 TLSH

Submit Download

3.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\m4\3.png
Size 1KB
SHA256 8ec361c81a3f51058651380beb08ad2576b21c1632b263ae0e36931d9e79cfa6
MD5 cb3973a30af2c54a3363e61a813ce6c6
SHA1 ca5af3d7489ae56424185a0a621603cd9dea2d06
SHA512 190ea94b5114d6c35f4db369cfedf104da4436d9a0024919923198e072e658b47224256fdc9cb8b0e2cb51f01de849cddc6800d4ec5ca1915bc1c07725a0e9fc
TLSH
T1E231D8CC7BE51CAB8AA701DB8312B0D1976327D4500C1C287A49502B9FD7BA8D7EE114
MD5 SHA1 SHA512 TLSH

Submit Download

33.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\m4\33.png
Size 1KB
SHA256 552987f03e391d9c44f22c1bddc1ae55f557528e8cb5445a4b414187baad2973
MD5 d3992bb3f9aa210adeca3ec43885735c
SHA1 2423c75c7263b81f042b4a50de30da9986d3be03
SHA512 7147fc3bfcca99c10416dac9d7b2050a6fe386248cfcb7f6cb4c14deb46645d0398f4d5e5bc19872c4680795a96106bffea26772bc6c9cf4fb62f677836d671c
TLSH
T19721E7D30E020A3ECA25731AC0C603A5D6AB549B2DF66A4F2DFE02A48E1172C6C58533
MD5 SHA1 SHA512 TLSH

Submit Download

34.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\m4\34.png
Size 1KB
SHA256 590a8c56cc95bb76c906b34af4cdded96ba180772406073e05069315e59f0fe7
MD5 88406c8e4451f36cb18c3b2fce859a37
SHA1 7aa13e1ddd004476c6fbdebb08f4392409e898c0
SHA512 9cd0f7e43ab6fa332ea60e4f5f968bea22c38d26013e6cb97d2f3d5574cb1a30de8060feaff54efb028ac3eddefe0ec47d8b25ee560f8d959be684d7134e15c3
TLSH
T1D221D88513199C2BC767A2BE08FA4541FD72301435971062C90A55CABCCE197BF49362
MD5 SHA1 SHA512 TLSH

Submit Download

39.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\m4\39.png
Size 1KB
SHA256 e72e648a3d83592519f1053c7336df5ee40dd96116c60ef547d798d21639e52d
MD5 5aa891b4cefee0ff3a61fd43fdce6d82
SHA1 95c41e75c0df4233467c60e420dc53d3fde5287e
SHA512 64972aa6e40ba4e6502384293a7584e43610c1b7606f2ec403b7f635425315862599caffe7a8b42573d4eda5b37be9d46dc086a7ec4e8b18a8f52ef9cc0e3b13
TLSH
T175210B863F6C285FCB75A669471BA4617D3B1BC769440342114EB47FEFC244F250688F
MD5 SHA1 SHA512 TLSH

Submit Download

12.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\w1\12.png
Size 7KB
SHA256 dc61c8851eff42531940f2621b5afef40e99c004fee09663325289e52266399a
MD5 d326d72bc31940b5fa8655cb63bf8624
SHA1 5b36c582dff1d52f08f79f15723e01d5454411b2
SHA512 35fb4034f08f2342fbf7174f72cf171454bf3f4b829d0d3217a41d2b97f990f7ffab7574aa5d5d2c1b8ac13c64d9209b79fb035146f838e8cfbdf9bc1867e005
SSDEEP 192:Jh1s5pkvqD4OiKfJW8NERmpMEiZYRegsAe5Q7bT:JOphD4uPyYMYegxp7bT
TLSH
T1A7F1BED1377D6C9F7397923DD2AF014EE0252B59500F4560F9CED05A8FF9811A2B48A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

15.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\w1\15.png
Size 7KB
SHA256 04039dcee42ebb09e037f3f4b1385defe771b17dfefb042942fb2cd8e814b2f4
MD5 feefe40c81ebb3dc18998370e4af5bff
SHA1 e4f9dbab06942973a7a83e6365eb04aaa09fa6ec
SHA512 9947d0e73ef4943091066ad1b52fc7309a43e950826bc404361d21f5ff843b618f144949be3cf605d881445120b8da2d0b24a6d07172125b226edda222c8515d
SSDEEP 192:IpsQrvA8fHk3MzTrzThk3jjtEVaFwPotWl/JaNvE0:QrvrE3mT1CeVaGPyM/JaNvE0
TLSH
T1D1F1BEB6D47DE9C8E407A2A8BF8C2902F1CEE592C958FE4919D7477535C68F15013B07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

22.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\w1\22.png
Size 5KB
SHA256 52fcf25718487a5ec55b1f10de8fe106f987d98b552dbeb95a0d01c308ea936e
MD5 3e549916c094d74fb7ce278f6f2b52e3
SHA1 a613eff7b5cdbf601429d9d5cce38150559a9b3b
SHA512 3e6e8e08b182750602db08f758dd25d6141e230cf0bceb92c6ca45ef9be1ba516dfebb66ee8887f7af2620da5434b6a66e5cbe6702697258397f9fbbc177c78c
SSDEEP 96:OZz0DwV3mxnTYRXZkxDOPGx85CdpK2YVKkgZKMvBH46V4KlwcxSaDd:4z0Dw8TmXZMaexiCTC4ZKMvBHdV3+Fa5
TLSH
T111B18DD4F56857BEE1C82289151F9047A88F7AFAFBCD242EE73F75B2411AA0801465C0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\w1\3.png
Size 6KB
SHA256 b4e4a0df18c5c5982027fa936018b4e1bac37e760957e97b5bc5c220943056ca
MD5 8d423a1e1dc67078c78d15885775552d
SHA1 82e2a8de7f03d89a807124b0c6944bfc866e2604
SHA512 d437562ce0f65506f8b5474e96c400dcdca93c4bf7078f3d701df1afb4a10ae4578e1ac21e8a0a3c4819cc3b751d3cb2af09e11c43092ff99ebf1478e81b9c18
SSDEEP 192:Q5A6QB7nKoR51jyhsujZG2KQDsqbLWNhdZL:l5KoDdyhT1Txc9
TLSH
T1B2E19ECCD6D598BC9654353C48C9D5A82B47F9AEB032A68478D1889C00BECEAE2E54D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

39.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\w1\39.png
Size 7KB
SHA256 6ab98af03313417f638a066cfccc2067e9cad1b0dd992eff2072e2e6c664693b
MD5 be9c20d3ced461649936535f6475b861
SHA1 06cc1a4f2e9eb8f7a441dffe9ca3411f091ea11a
SHA512 0d22bc0918b71b8b2790439258d1262087e8173b753e630a2ac5bd6d9bd137a0796403f8dc99401b4e0bd7538fa5b8dcf54817a482de86e0ccdd260382348ee0
SSDEEP 192:gnaH7NHV1nR+kozZbKOmgipPyjEH76e7f7Qd:OablVmrZeOS7n77Qd
TLSH
T146F19DAA25CA9055B06A247F79AFB888D727080281D3396E3F6B0CD8C728527A31519D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

44.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\w1\44.png
Size 7KB
SHA256 924eaf3a99b28eed6150feab0f4784db7480b691b0eb3a1206e1f68158574f85
MD5 af259f93739624cda70deff99612d104
SHA1 0bc08a02418e7e8b032b782eb293deae0bd8e4c3
SHA512 79dabb90a0d2f8d0d538a66af2c5c2670de964aa629f05daad2cbfb5a248dcc55e84b0d2d8ffa1c246011eb14e524ecadc34e9af120062aa42ac6d1bf047dffc
SSDEEP 192:+lyF9B4dRQJe8OmW9P+ewCfzWG2hP9Lgh3qZXt:++U6YR4ewCfz6lkh3U
TLSH
T105E1A0EA3D45E09AC97EC4B69DA8D91598B3B46D0706C3C54621CD962EFCE0581F211F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

45.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\w1\45.png
Size 7KB
SHA256 f07d42edcca488e1b9de8da959dbbd0ab3e04de6ff867796d0a070957f845a7e
MD5 d4a800cc95f39db27c095aaac4f61f84
SHA1 588fdc2ba5a43b30168f26d26fa6deb33f3fc5f2
SHA512 1f4ab0dbf036f2de63a1bf07d3e28b5f9421fc4ce4fa9e192258940cfc431a79f602cc098a60b395553abc5011c5b26efe8aacfd3a36d84aea35c57d8dab4bea
SSDEEP 192:ezkoc6vZmCuzG4MIjCbEQhvEBpssF9KZXv5TD7vY19cVitQA8jc1:ezPc6vQCuK4MIjCbEGvQpss6XpnOq0Tn
TLSH
T1A2F1AF346F92D5082E8C188E4E737C927D3F802685A97AAF6FC71285A22C95EE146770
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

11.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\w2\11.png
Size 8KB
SHA256 6f5aa15f39f1dc81d894416d409aac7bb3b32da9c55ebf8d6b78e509fed90970
MD5 180c6b6ac3c5dc3de82579235571fdef
SHA1 f7d1f0c32d3772407cae5eca975ea2f534ce8a89
SHA512 a340721fb2c82c5ca4e3d45eb0c2e5710dd4c53001e21a14c5455b79a2701152fe5089c8e10f34008b4dff153f87e22066912ac8fda7a267e531d17a32302a25
SSDEEP 192:bSDS0tKg9E05TIJi3hU9GC8t0Kx46ncQv0gZJuyK4K:OJXE05sJEh13tTx46cQvb2yrK
TLSH
T14302CE7CA521749D88CA68843CDA4152E3BD3A6CA2CB1DF8709271CF5554E2B8F3A0F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

15.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\w2\15.png
Size 8KB
SHA256 9fa372eb7d630380a2a4cceb94cf20bc26b54abeb5565ab9704c39a48f6e12ce
MD5 5f22b8bc74e3a9008323b63f46187636
SHA1 d291fd6d0255e22240889473b0b0729ed6255b09
SHA512 7c9cec6bd78453bdfbc3ec4fb9a60a1f0386284beeacb60ef51f3bcf90f77ee76548ba8b9ff2f8f1bc78582b2af5bd475375598eaa5bbaf3a879b11e67f4ff32
SSDEEP 192:bSDS0tKg9E05TxPbLTvKXQg7huYj8qZhzsAXDoogZ:OJXE05tDL7KF7hT9ZmBZ
TLSH
T100029FA76E70285D7FBCF0864E5A850B936DD25C874B3734248298EAA0AD44F3F66C60
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

21.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\w2\21.png
Size 8KB
SHA256 7cfd3cb4bdd4854d90f0ce0811014af0a59ce33f574760af66dc63ab62628f8a
MD5 7d9443f251b2f4621b84416faa5b6e9d
SHA1 958d64175056cef4fd8bc66c7ce49d35d4f1aed2
SHA512 6f0a14035a0c9522edf345c2e512b144c87bdc955497fc72861c32e84e71555055989a028d3eea5735c89c7d39a9d54fc22240ba1933e41d09ae0bbf3288017c
SSDEEP 192:bSDS0tKg9E05TTCUE36fvELXtGl4HIBrlpHCFw:OJXE05K700AlFBW+
TLSH
T11602AF378DA8E54E7EE43C3098AD1D827530169B9AD2373C09E452DE4520CA5CFE65BB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\w2\3.png
Size 8KB
SHA256 d6e018243f0b171d038a01ccd61838eef749feae2994ae210c3af2d067a433f4
MD5 fd70d4124b4896410fb89725bdc39a93
SHA1 4d44a1887b765db1e04fdf9035199d5ba6220b71
SHA512 6b6a26667d5841badc8f30ea65a0b642304bf4b73c11da06d2398063b54281e8d994e80ce9b7a75676882673f151b8b8da16b43033e132c9aebfb1faee4b0b42
SSDEEP 192:bSDS0tKg9E05Tk5atIwpsAvPnlwsuBmaZrRL4CdR+Hs:OJXE05oDWrlwsufREUR+Hs
TLSH
T14002AEAD7EC1D40D686EF0018BCE65E66258316F5927353818C1ACDE52654AE7BDC035
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

39.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\w2\39.png
Size 8KB
SHA256 327598f78264c68cf912f65f3e16b66533e978d3397cd9d9e3e565c4c277e84f
MD5 3df476af5419a3512a38e247da1c3201
SHA1 e58e040c16ea8ddff32396371450c77816aace58
SHA512 c90ee1e993fa291bad45fa80ed309f94cbd9f783f0231ec7d487be0f58eed7e8821b5d8ce7995f26e5c7924814fdb01bf2ccf7f6dd2422d60f7a6aa782cc0999
SSDEEP 192:bSDS0tKg9E05T9DSSjer3OGgOPvOsU2BSc6cAMtUuT2dqve:OJXE05Zca8GsHSc6cL+uaqm
TLSH
T12002B03EDDA0619F7A6034428A63858AE379665CB6CFA5788DD7DCCC305DB0723EB064
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

44.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\w2\44.png
Size 7KB
SHA256 70035fce0bdc181cba8a01c5279a522d946b9fe32cdc22b7aa57ddc32e982887
MD5 35169440f87bc6623aca60f55cbe6daf
SHA1 1f01d43902949bf9f5411855302c7f23849c5933
SHA512 bc2279760239324f0972fb1c14e614f9cb1ea493f5350b822c65c8bfedbfcd2d8fb594a22902c717758dba83971627ae2855e8d8fbe96e0555282c6166f36328
SSDEEP 192:bSDS0tKg9E05Tsiw7kd7a+BfEx/YOmoJW32:OJXE05ZS4aq0/YJ+s2
TLSH
T19FE19E3396B208AF3CA9BE00DCC6A0039A6CA57CE4BBC1ADCAD565DF4850547FB25561
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

11.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\w3\11.png
Size 4KB
SHA256 220b2ae959ab3f0aa6f23a1836b12f41ae218d09a0dc655bce776f7ad821bf8f
MD5 03ca7e07316604b85f8a205592afbf2e
SHA1 89142f048e31324f5b86997d05654c7162fc6346
SHA512 77eb0fd763f950adda688c334743fe08ea8669a97369d7d451cc933bdcef793a4fa2c1fbc5641f82ea12f3d56058b51fa9d4e8383990bfc002b9984452bb428b
SSDEEP 96:bSDZ/I09Da01l+gmkyTt6Hk8nTVCAQJN6NNX+hJdx2Wm:bSDS0tKg9E05TirzDBm
TLSH
T141917CDE2520986E78EDB95008CE4100F3A6606C5E433BFC68E1A1CE50DED07A7629B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

15.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\w3\15.png
Size 5KB
SHA256 79e6e2cd9d1d531e4da2f56cc7494891f5f282b2244c06df3597ebff0e9da5da
MD5 a455c24062caec9acd3d1b80d6e1be21
SHA1 f840b9d6b1b8dae6b3bd91537468f36ecd900250
SHA512 14d99b497685bd4de22fc116d63d72a2efb52166e6f97fbfa1a5fbc62ab6f91ef43d8f5fbae2268901c708eed3ae1f484faee5bbe8b787bd7dfac837b219c4f1
SSDEEP 96:bSDZ/I09Da01l+gmkyTt6Hk8nTbKcEyzsCWUkrEP40yYLKPlKiXy:bSDS0tKg9E05ThEKVnkrEg0yYeNKr
TLSH
T199C1AFCEFDF02DFE59DE28424BD4568C6B1694AC58A7373920905DCE4940E09076B2B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\w3\3.png
Size 5KB
SHA256 b9c63c03cbbce34bbeedfe73750a2ef9abbc04546ff75eb40db54d98c46db56e
MD5 3b9501e2ff155b3e42f3e6b112b795ab
SHA1 deab07247c47f9fe849560c9fba7b742f66b233c
SHA512 fba31a9ce1cdd86e421e1320e4859a94138fa042bcb5403521b9d807e3ea3b77927432bc2ec84eaf2b3e1b90419428b7185bb21b76254cfd181c8ffb8887c87c
SSDEEP 96:bSDZ/I09Da01l+gmkyTt6Hk8nTT4zme2mB5swqx+i87xqmh4ZNDda+:bSDS0tKg9E05TEzH2Rwk+H7xqyP+
TLSH
T1B1B1AF9B9AA0515EB5DD31412C5B0287C3AF961C1A0F377CBCD111EF2426D877F42559
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

11.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\w4\11.png
Size 2KB
SHA256 b4ebba43305b2eeba97c11f059e493c1fdeb7494c0ef8bfaa7971624c6960fbf
MD5 872786eb1d02665a10f835f7810c1651
SHA1 8a7f75ca188c40018b78993907cd500f82490493
SHA512 353ca2c0edc2a2a6e20a9892b13685bd0ef076527c96e3cd9d501463b1f54818f98ee77f37a85c16af9ef07067d9e23305fbe67c9d259597b03d48a89f09c7eb
TLSH
T18B515CFF17AF196C158AD0BA0920416DF91BAF6230B90C773C018C12F0399BE0DCD854
MD5 SHA1 SHA512 TLSH

Submit Download

15.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\w4\15.png
Size 2KB
SHA256 60aa36a9025919ed32a8168512a80a6edfa03e2c31b1d61f7ca6c8a9cc10d96e
MD5 3f6879770757843a04437b57859bd915
SHA1 9005012623179a82e4c4bf79891389fc88c7f0c3
SHA512 b09dec56e9913aac54a3cf056e317f01ec4f9640fc12e8e7a7ed9d7ff12314e01fba2eb04284e927b695864b8c0044f4997391e45858fdbc62623343c1444fa6
TLSH
T172413D0471D5B8AB9497D4FC12C505B94956635F0203FA98FF0F4063BA20D2B91F853E
MD5 SHA1 SHA512 TLSH

Submit Download

21.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\w4\21.png
Size 7KB
SHA256 977ed7548c359b44558628e699ba07490efe767c83c7dc459fd06d8c4006f0f0
MD5 4772c700e24e4ec72b7f7a12c19eb099
SHA1 994e0ac4fea88af172b4948a17e5d99dc430a93d
SHA512 22a5424ea1445824be48b23975107862f75d002ab7e872faf6941bf74e05286a4894c8e9814780389976c04f0be96ee0ff046f8bc02c9d374e6e30bb1b74bb82
SSDEEP 192:nigzw0LBOI4S8Ql7YYUEK1BJ3tXSctWMf23T7G8GB:nigksOI4V87/21BJdicPf2vJM
TLSH
T151E19002F14DF8104E8D79A61ADF5402F65601B251E0EC67DCE8C0FE47918F7A5D9A82
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\w4\3.png
Size 3KB
SHA256 c1ed06fd4671615b244eb51f52aab3941e2cce5d46c4eb7ed7905909624c9bcf
MD5 2562540accbdb2f00cb085873eedc68a
SHA1 23334c971fe2adf03f4c08d90fe6e9274a64bff9
SHA512 0fac7e61e2b2f464f0a2ff47ed35b22b8f5265b9eb746d14d9a377964a676e94c6540a8f5b5171ff25ec030565a04696096e3bff5a3c9228323508d9ffef9709
TLSH
T180513CCE73D8E4F02CBC521976E2A04654BDEA0C2AFB5F0E189AF2D6D05171A8199736
MD5 SHA1 SHA512 TLSH

Submit Download

33.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\w4\33.png
Size 1KB
SHA256 3a528bf0e249785e946fe0b8bc7bf13bff2f855a72e6f62c17e1913bd967d181
MD5 54b022805a4bee4dd2c27c0ffedf9c3a
SHA1 c33afe690a8b77c9350da8fb5c8e2bab6ee2cf4d
SHA512 96b85dfda079ff164ce6bfbf4d6f9b91cfebb4b315978e557b36dc18a1578dda2bc0e13111cd596ba0b15a3d361360a62d4afaf76f5e31ea685aac3614dde97c
TLSH
T1A8412AAF79663C7AC12C17736A128E84F57ED13809A85469B8B4F5A0AF36319508CB11
MD5 SHA1 SHA512 TLSH

Submit Download

34.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\w4\34.png
Size 3KB
SHA256 7bb0dfe74f2bb500547f786d13991c582383ccd5194e8ec4150845a3239d9ed1
MD5 63f75806ccef2a408a7a39b281fc29d5
SHA1 4b19a014bf96a63c2a81f5e29e899a84307b490a
SHA512 14f969f508f846266f3f9f12f3b44464c5bbde6f6912d3dbafd67b0e81cfac33981407f4ce9e6b34aad287e65d9d2958387bf2c889c17df749af2a4885a4bbf1
TLSH
T1C6612AD9C681602F85BF4D4170D2F71BBAFB6BC71A8F42019C5E2553C4C0B892CA9364
MD5 SHA1 SHA512 TLSH

Submit Download

39.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\MyWeather.gadget\img\icons\w4\39.png
Size 3KB
SHA256 36a67b5eba6db53db449d9725ef99960ee8dc66ab50fc5fe225fb5dbbe20b90c
MD5 ecd92b828a70844ffc1006d42c6dff85
SHA1 3c966b18fd3a0acfebb5b483c7cbaf178840e107
SHA512 67d7b622e82c54e5d5196b1f1d96d631f921610c9af10d9f42cc12698c14a66150e647d194b4228513d3f1060022415c9938bf987d821325562339771ea81c17
TLSH
T199715DCEF960489CDB053E857C8B8F7445FE0CB14B365484C137D48D5FC3B940946461
MD5 SHA1 SHA512 TLSH

Submit Download

sj.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\NetworkMonitorII.gadget\images\flags\sj.png
Size 499B
SHA256 0429e8d742628e2e5574f0e1d197304aeda2893599bf4afda2a96b5e7302d51a
MD5 8876fd36d30905805080e6f73ed333b9
SHA1 88791a6d42bd88441b3d01b90e775abb928178ce
SHA512 e82f01783dd40b514e3766130c69445511540fdcf2ee282f8ddc6440c499315f02fcefb5700465365d85ad1a28e7611f6573ed5c4c982ceee8dd415d87147c55
TLSH
T14DF00E86A319A93AE806469A64716F58F976D15C75406281088F42BA7A54A0E16A802A
MD5 SHA1 SHA512 TLSH

Submit Download

wf.png

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\NetworkMonitorII.gadget\images\flags\wf.png
Size 424B
SHA256 73b9162678a082c7e0cef2ce94a919ad2412afd969c95e3671b5cb16e7dd100c
MD5 3aace6da30f8cde2267cf03e8a51b0ee
SHA1 9737daa5d04455bce3be0f32c2d69aab172e1844
SHA512 94f0c426ee5eb3b367959fec191df2a43f4a9d602acdda8f1ba244bc385ddb5faf26d363e841d7a01034e7df0900e7a73085eb659a4ae7a418f7dfe94a383034
TLSH
T113E02372EBD2FD3A0CB8C809553911320C33E26C5856219630A588E7468835490942C3
MD5 SHA1 SHA512 TLSH

Submit Download

alarm1.mp3

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\Network_Meter_V8.4.gadget\alarm1.mp3
Size 13KB
SHA256 5ab70524c915eff51361ffbc03d2d1e4e228dc6d5ede5b007237564d2f122004
MD5 15e5cedf789b6065d2c18715e1f16786
SHA1 8cbe6974f793d55d4ad303120eac888f1773240c
SHA512 276ccfe236862685dd90d4dc68a66bc4aca7b44e97b1776d1f554383c9976b565b596334b3256271a39ab06621d8d60e921691445b9b7bc7f3aa164869145418
SSDEEP 384:vlEiYQiD3BwfePfBgX6GlndgQxpW7AK+2gBx9xxJSat:9ElD3Bwf2B46WdTpM+HBx9xxAM
TLSH
T13E52C0D46EE1D22ED29D21B4E43736A1F02A5A046CBC0DFA1D4E887664AD745717F323
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

alarm2.mp3

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\Network_Meter_V8.4.gadget\alarm2.mp3
Size 13KB
SHA256 49abf3b0553f0a9f19e9d98a8a29515c435b415001d7c7e9d21e5d655b80d43a
MD5 8c655a2fd319ea8b55d2e1161d23b2ea
SHA1 5647a81721ae7a085ed4e44663080598f89aa711
SHA512 aa9dbd6557a2ea27ca80bf888a8a7b732bb2efb2933978d1a0ec5df0fedc4b31ef68d41167dd50b0caf68f4af28b7ad8257f6f272e0b9e6ab7524b1baa91f24f
SSDEEP 192:vokvFLzpk1poVp7yasbr4kjqCYtohuoRlAD5MYetEknmn2:vzvdzpIpov74r4k2CYtohuWAlMIMmn2
TLSH
T17B524A12E521D4C6F46D6CB60CC0912B3A561F1759EFFC06798F3C0AAFB23A56E25A09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

alarm3.mp3

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\Network_Meter_V8.4.gadget\alarm3.mp3
Size 20KB
SHA256 b504f0f802e7e5b146436447786d0f86dc83a78a86ac620ff8a82ba8e4c15e6f
MD5 d213f52ceb0b54f33ef209020ac2b490
SHA1 8c6046f866e54ca103acd19909fb2f5b9f9cb421
SHA512 a3fd1412f5140f25466ab78f9791689bd812eea789491b9c7ec073bbab5f014ab2f12d2cb610154412f8a9460edad90cd10864ae9eaf4154711d3af6e9c5c8ae
SSDEEP 384:Fidsp1DpoLI6OubCrwpI+G46imigKljECA2:FCeT8B2rGd6Q1If2
TLSH
T1CB929E18E030B88BD08DC7B76294264E48725ED3ED105C107ACE7C488F78677BA5E43A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

alarm4.mp3

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\Network_Meter_V8.4.gadget\alarm4.mp3
Size 11KB
SHA256 c9fb082f949eb5f5fce47a5acc84825c3aab20cfe62c28c8a4a793e2049d2ed3
MD5 9959b56539de395083d1b495d94e3199
SHA1 e27a2e91a60dd501eafd2cead51ce59232c7feb4
SHA512 fbc2aaf90c77a871227743bde816825259e3a52186404daf703112ad9b8646d06748f0a4f4e8eac128655e08f5f0f26ec722927174e93d162e27becaa0de9179
SSDEEP 192:uokbjRp+pCrz6t5cIajb9HDiIGWDcLfP2TV:uzbjRp+pCy5cDjBHDWWYLf
TLSH
T101327D04F6647580F0BE6C3564D0A22E6F132D875AE15C4634CDF941DF7037579094EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

alarm5.mp3

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\Network_Meter_V8.4.gadget\alarm5.mp3
Size 18KB
SHA256 b59165656434c8a49cca88c279a84730b5abc5cb92e758e2e31a9d38951af0ae
MD5 8858f0f5425225d41cfd5ada29f19f57
SHA1 2c8d8151f31f03a6d1503b523116e10f02ad398a
SHA512 9b6d5b774f85e411f835c15c8bc223dca3f791dbcf2ec51a9539a670bca2d337c557841a85cbeb8f7bd33196ea1ad07cc972a9bc24af83cb529175c8251386a6
SSDEEP 384:RiQp7p5pxpBZwh2EG/vAPP5e/CSctcSDOLoZk7x:RjV7zBZwAEG3+P5e/CSmgVd
TLSH
T1F5828D1D6470D8D2F079A132A488834791BA2D92DECF7F6578CD2C019FF21F6AC5E561
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.css

Path C:\Users\Admin\AppData\Local\Temp\8GadgetPackGadgetsTemp\Gadgets\Network_Meter_V8.4.gadget\settings.css
Size 1KB
SHA256 8e8b2dd133d7690c11b476a34684e5f2facaa68c122e65862c82e17d7f14ca5f
MD5 d7db8f6f23fb89d0acb574a1c309d6f6
SHA1 02dcbd3ab51f55535858628867240fee0121ee7d
SHA512 4459c8541a2b60260557e8208dcd7ccba47088ab5af34e9631d31311cd2a9cee3ceabd9436f0e5297f1f1e3cde9c0d35c224155abac8402d935bc1adbc458b49
TLSH
T1F231F0B8930752DA2312E3796776F3507AC962F98D8533ACFDE020E0810E62CE52DDA5
MD5 SHA1 SHA512 TLSH

Submit Download

MSIC56F.tmp

Path C:\Windows\Installer\MSIC56F.tmp
Size 234KB
SHA256 78860e15e474cc2af7ad6e499a8971b6b8197afb8e49a1b9eaaa392e4378f3a5
MD5 8edc1557e9fc7f25f89ad384d01bcec4
SHA1 98e64d7f92b8254fe3f258e3238b9e0f033b5a9c
SHA512 d26c9dce3c3d17583ffb5dbcd3989f93b096a7f64a37a2701a474c1bf4b8c8b1e922c352d33f24e411f1c793e1b4af11a3aec1de489087d481b1b636df2050cd
SSDEEP 3072:5XiqyhTO8W0iEa8LW0bEC9hvZpC01v+eUKflQnZl+T+J7g6EsNr7wyy/IP3:5qhy8VKU3hvZUy+ppHEsuB/
TLSH
T159348D217494547EEBFF0832953AD671AE3DF2380B90C96EC384581E6D618C1A7B7B27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e58c09c.msi

Path C:\Windows\Installer\e58c09c.msi
Size 21.1MB
SHA256 3ad7a4b5ceaecec3ca4ed0baed81095f6694fcfc2a0fdeca268b0d157dee61b4
MD5 1c0408a2442c8dc5e6c934ba566c98fa
SHA1 6c023d5c489f80d7c4c2acc095592fac1de8efa7
SHA512 a5c19b424462241d8229ffb0d87417ca8bb71b24bb8d58c5577cdc82f570d7ce6c357cbfae2e5970c8ddd599503b25ba1b4361b73549be327848c05be8a64dec
SSDEEP 393216:WScExmJgH/0oKkQeD3kfzkIvCCzahWehhlofdTvnE5sud7HmZVgqfxf7Zjc2XhLq:WS9xGgHcotxi32oWlo1Tvard7tqfxf7a
TLSH
T1FF27339B7D079A37D7EF0235C23B8B74681A6D441191286DE608F9DD4C314A2EAFF3A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1436-6787-0x0000022769B60000-0x000002276B1D6000-memory.dmp

Download

memory/3484-7022-0x0000025409860000-0x000002540AED6000-memory.dmp

Download

memory/3484-7230-0x0000025409860000-0x000002540AED6000-memory.dmp

Download

memory/3484-6790-0x0000025409860000-0x000002540AED6000-memory.dmp

Download

memory/3484-6867-0x0000025409860000-0x000002540AED6000-memory.dmp

Download

memory/3484-6896-0x0000025409860000-0x000002540AED6000-memory.dmp

Download

memory/3484-6917-0x0000025409860000-0x000002540AED6000-memory.dmp

Download

memory/3484-6789-0x0000025409860000-0x000002540AED6000-memory.dmp

Download

memory/3484-7583-0x0000025409860000-0x000002540AED6000-memory.dmp

Download

memory/3484-6998-0x0000025409860000-0x000002540AED6000-memory.dmp

Download

memory/3484-6786-0x0000025409860000-0x000002540AED6000-memory.dmp

Download

memory/3484-7043-0x0000025409860000-0x000002540AED6000-memory.dmp

Download

memory/3484-7064-0x0000025409860000-0x000002540AED6000-memory.dmp

Download

memory/3484-7083-0x0000025409860000-0x000002540AED6000-memory.dmp

Download

memory/3484-7104-0x0000025409860000-0x000002540AED6000-memory.dmp

Download

memory/3484-7125-0x0000025409860000-0x000002540AED6000-memory.dmp

Download

memory/3484-7146-0x0000025409860000-0x000002540AED6000-memory.dmp

Download

memory/3484-7167-0x0000025409860000-0x000002540AED6000-memory.dmp

Download

memory/3484-7188-0x0000025409860000-0x000002540AED6000-memory.dmp

Download

memory/3484-7209-0x0000025409860000-0x000002540AED6000-memory.dmp

Download

memory/3484-6805-0x0000025409860000-0x000002540AED6000-memory.dmp

Download

memory/3484-7251-0x0000025409860000-0x000002540AED6000-memory.dmp

Download

memory/3484-7272-0x0000025409860000-0x000002540AED6000-memory.dmp

Download

memory/3484-7293-0x0000025409860000-0x000002540AED6000-memory.dmp

Download

memory/3484-7314-0x0000025409860000-0x000002540AED6000-memory.dmp

Download

memory/3484-7333-0x0000025409860000-0x000002540AED6000-memory.dmp

Download

memory/3484-7354-0x0000025409860000-0x000002540AED6000-memory.dmp

Download

memory/3484-7375-0x0000025409860000-0x000002540AED6000-memory.dmp

Download

memory/3484-7396-0x0000025409860000-0x000002540AED6000-memory.dmp

Download

memory/3484-7417-0x0000025409860000-0x000002540AED6000-memory.dmp

Download

memory/3484-7438-0x0000025409860000-0x000002540AED6000-memory.dmp

Download

memory/3484-7459-0x0000025409860000-0x000002540AED6000-memory.dmp

Download

memory/3484-7480-0x0000025409860000-0x000002540AED6000-memory.dmp

Download

memory/3484-7501-0x0000025409860000-0x000002540AED6000-memory.dmp

Download

memory/3484-7522-0x0000025409860000-0x000002540AED6000-memory.dmp

Download

memory/3484-7543-0x0000025409860000-0x000002540AED6000-memory.dmp

Download

memory/3484-7562-0x0000025409860000-0x000002540AED6000-memory.dmp

Download

memory/4476-6788-0x00000206DA1A0000-0x00000206DB816000-memory.dmp

Download