Analysis
- max time kernel
52s - max time network
44s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-es - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-eslocale:es-esos:windows11-ltsc_2024-x64systemwindows - submitted
24/07/2026, 03:31
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
cf25freeSetup.exe
Resource
win10v2004-20260513-es
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
cf25freeSetup.exe
Resource
win11ltsc2024-20260709-es
windows11-ltsc_2024-x64
6 signatures
150 seconds
General
- Target cf25freeSetup.exe
- Size 60.3MB
- Sample260724-d3c4esfp7w
- SHA256 cf1d0c2811786bd84006628a020a3f5d12702db5b9ff90e9f032929fa125d88c
- MD5 c7aa0d1c0b34b3c3ce4ed601641ed650
- SHA1 c3079ebac2acfaab6c8ef3da51a3761ebcf6b0a1
- SHA512 4db00e451e0080268bf4f11481938980a54304410ba6f70e785cae53a6e34c4e82a56656ac0776ace5dbf48d2b41e2cf99cab54ddf1e8dba2ad0faa6f947f3bd
- SSDEEP 1572864:4zAhAkxOC8wcJ8mytP8czhzvjTGf4xbUcJyL3yTNfrIln1UhttRYFHALe:6AikxOC8wS8meP8cljjI4xgc43gfslCw
- TLSH T1F1D733F4F0B49BBEEA95213CF45B7F92184E7C2055243DC39B2D7BA048F52E10EA2656
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
pid Process 4208 cf25freeSetup.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Languages\fr-fr\Modules\Box2DTreadmill.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Skins\Default\EE_Keyboard.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Skins\Default (Old)\STB_Foreground.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Languages\fr-fr\Modules\kcpict.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Samples\CLICK01.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Skins\Dark (Old)\EE_Filter.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Skins\Default\EE_GroupsSelected.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Tutorials\ChocoBreakHD\achievement-brick-breaker.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Languages\ja-jp\Html\limits\style.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Languages\fr-fr\Help\Ini.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Languages\ja-jp\Help\StaticText.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Skins\Pastel\EE_Timer.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Filters\Sounds\oggflt.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Languages\fr-fr\Help\Movements\control-extensions\InAndOut Controler.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Languages\ja-jp\Help\Movements\images\InAndOut.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Languages\ja-jp\Modules\kcpica.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Skins\Default\STB_FrameSize.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Languages\fr-fr\Help\Search.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Languages\fr-fr\Modules\kcWCtrl.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Skins\Default\EE_Objects.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Skins\Pastel\STB_Buttons.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Filters\Images\pngFlt.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Languages\en-us\Help\Ini.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Languages\ja-jp\Modules\kcAnim.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Skins\Dark\EE_System.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Examples\Create New Object\create.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Languages\en-us\Help\Movements\images\extension-clickteam-actions-spaceship.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Languages\fr-fr\Modules\mmfs2.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Skins\Dark (Old)\EE_Remark.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Skins\Dark\EL_Groups.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Skins\Dark\OBX_Background.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Skins\Girly\EL_EventButtonGroupsSelected.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Effects\FlipX.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Languages\en-us\Help\ActiveX.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Languages\ja-jp\Help\Sound.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Languages\ja-jp\Help\Download.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Skins\Dark\EE_EventButtonGroupsSelected.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Languages\en-us\Help\File.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Languages\en-us\Help\Movements\images\settings-drag-and-drop.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Languages\fr-fr\Help\Counter.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Languages\fr-fr\Help\Movements\images\extension-clickteam-actions-circular.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Languages\ja-jp\Help\Movements\control-extensions\InAndOut Controler.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Languages\ja-jp\Help\Movements\images\extension-clickteam-expressions-circular.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Skins\Default (Old)\EE_Foreground.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Skins\Girly\EE_Inactivated.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Languages\ja-jp\Help\Network.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Languages\fr-fr\Help\HTML5.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Languages\en-us\Help\PopupMenu.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Languages\fr-fr\Help\Movements\images\extension-clickteam-expressions-presentation.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Languages\fr-fr\Modules\edrt.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Skins\Default (Old)\STB_FadeOut.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Languages\en-us\Help\Movements\images\InAndOut.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Languages\ja-jp\Help\Quiz.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Skins\Dark (Old)\EE_ObjectsSelected.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Skins\Dark (Old)\EE_Storyboard.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Skins\Pastel\EE_Storyboard.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Languages\en-us\Help\Movements\images\settings-invaders.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Languages\en-us\Help\StaticText.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Samples\BALL6.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Samples\EXPLOD01.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Tutorials\ChocoBreakHD\hithurt001.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Languages\fr-fr\Modules\Box2DRopeAndChain.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Languages\ja-jp\Help\Button.$$A cf25freeSetup.exe File created C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Languages\ja-jp\Help\Ini.$$A cf25freeSetup.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language cf25freeSetup.exe - Modifies registry class 11 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MMF2.Document cf25freeSetup.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MMF2.Document\shell\open cf25freeSetup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MMF2.Document\shell\open\command\ = "\"C:\\Program Files (x86)\\Clickteam Fusion 2.5 Free Edition\\mmf2u.exe\" \"%1\"" cf25freeSetup.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MMF2.Document\Defaulticon cf25freeSetup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.mfw\ = "MMF2.Document" cf25freeSetup.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MMF2.Document\shell\open\command cf25freeSetup.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MMF2.Document\shell cf25freeSetup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MMF2.Document\Defaulticon\ = "\"C:\\Program Files (x86)\\Clickteam Fusion 2.5 Free Edition\\mmf2u.exe\",1" cf25freeSetup.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.mfa cf25freeSetup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.mfa\ = "MMF2.Document" cf25freeSetup.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.mfw cf25freeSetup.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Extensions\exts.ini
- Size 6KB
- SHA256 653d64335575a6f6320ba91caf024c780d10f1083102f1bfd7d82d9d4d8e58a1
- MD5 ef4a1ce4dac975074d500dae51d7be0f
- SHA1 6c28a5901fdba189ee9d65fd591ef194e26a3220
- SHA512 6e2c1219ace2b45a4e6b568d2fe4af5c68ea7c8aca546d768b34609cc2f55499eed96bcf9712eede05d9e89d80e89839c10ea8edda313ee4b3ae26e534095845
- SSDEEP 96:e84dIiFI+6jMxVevjhKQENHWYmUeCvumVmIGab:YCiFITWevjh1tqGmVDz
- TLSH T152D1759F554B53C826380128230B58D579A3BC8E7C76AA3A324DCC16AD8D8F7196F77C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Languages\ja-jp\Help\Movements\images\InAndOut.$$A
- Size 1KB
- SHA256 f0896b65175054d69cf0b86fa426b67b1197a4ad8e22ab7b38af7c3ed98821fa
- MD5 2f3c5f8ed019b7cae7fdfbf8d5a67148
- SHA1 8523dcd2a957f86c748d04e36efd3fdb7dc8a0d2
- SHA512 a8a81660e42b689b509e419213354a6b22a26955c8fb7423cdba74326c7b7af5bbc1cc3d1944243c965e5bc50f33d881e365475d4439f0ec0c07a477ec046610
- TLSH T12211A373A47CCDEEDECA153B6C1BD3201703DAE0A5030E1BB49515016DC768074B53D2
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Languages\ja-jp\Help\Movements\images\extension-clickteam-icon.$$A
- Size 1KB
- SHA256 490e3dc6b2497bab016a6155dafbf57dd07a33c2bf34b583a4134501eb45f61c
- MD5 e279bc4b2b50021aae0cf580bcf23d73
- SHA1 5606979106c7c55d7eb62f393735a663adcd83eb
- SHA512 2f46d012410cf5917ef3d0259cd7eff13c096cb51bac9ec55102090d505773f466eb654e515508da3323aecc141b520c4905b1430a19da2d157d4ad39612a4fd
- TLSH T1811161CF9790DC69D93F42B39597D59D79F21C0745277652FA95900906E4180F441317
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Languages\ja-jp\Help\Movements\style_default.$$A
- Size 1KB
- SHA256 374ebcdd21951428d8c3b515aadef464a4fe42775b39a98f92d71227ba55883c
- MD5 2539837a30ae66caba95d3fc8f6a30c5
- SHA1 befcbcdafefdecbc944822b708c0e4e91173484a
- SHA512 737ba7fbc1ffc7a926d57098d478c139f8838f17a8d7fa4417696d0e3933c8a036fd060d93ec9546dee7b7a734f3de733f0e792e7a1d67c57a1fce32e4801473
- TLSH T1C121264FD5C29E55BB8B2AC6BB136BD33D4E0C26E94295F035E571848A8CDBC524439C
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Languages\ja-jp\Html\limits\images\Thumbs.db
- Size 144KB
- SHA256 cf28141067e2ddce59d255a6992b7166a94072802baf8d5337361355638fca54
- MD5 dd815945ffe57f9b09e062e05767f914
- SHA1 20fd46354b762e1993a940567deaccb456428da6
- SHA512 f374f27ef86cbdbccc786e873f7b58b2fc288d3da4a725bcc9c38f45f8b7052efb063810acc9e82993130c379298fd9f8ccdd0698640c9a5fed9328385df11a4
- SSDEEP 3072:49ykmGFvOOM3UhIcC5CVZeEsKvZm8aq//9QrV:4Mk5IOM3KpC5CVZvZja81q
- TLSH T173E31299FAB9D8D8E61B3C388E5F78882EE5AC335C8060C79B05FE2402763599047D33
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Languages\ja-jp\Html\limits\images\backlogo.$$A
- Size 74KB
- SHA256 81b976b268db69307d080f17352bdd28efd0a43378249769900a2058af5f0174
- MD5 88357a4773a9153af93e1b6a74a27143
- SHA1 e29a7a34a4bae04276441fdec5d9da91650d0970
- SHA512 088abd8512b116a5841586a7955aaed79ad6587f706381f2ac18118390cb7424b1f74287b95a79cdea083b3d37fb653a457371e4c4e045b17eaa5f4f0a2be858
- SSDEEP 1536:VLmvmgmrxLRmmf3aprdF8A2pqMgz0r04AOWbQ3k0:tmvmgmSm/aTf2vgz0r0bT0
- TLSH T1CA73E1199AF0B77F961823260A763500AD978757C5006C5CBECDDA4E2FC27869F9328B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Languages\ja-jp\Html\limits\style.$$A
- Size 2KB
- SHA256 8d4184f9ef5a998ff313cb3d34023948820060869800582b4d5d923e2c079127
- MD5 a81d29ef02bc8f8764fd6e30630166c3
- SHA1 1bbd3a0b8e5423d9c3f8cc2a8e116f9541e4ddec
- SHA512 4707898f89ca8c7a3335017d13f469ff0217ec423478c51589deeef945078658278cb47e90d012bfb33dd4d4a6991aab7c7ce77a446ffad484c96259bc35dfc4
- TLSH T102419918B292311EB217749277B02B1D15290009FA1B4B6DF2FDB677E34BDAC62322D9
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Skins\Dark\STB_Foreground.$$A
- Size 7KB
- SHA256 e4f94359829dfc5122165818508f56605208ef6f90b8e798fb0ef084719061c3
- MD5 219f015ce99a74d82d6902884bfd23b5
- SHA1 c101f6a8296ced602cea93affc6312c2c1e67567
- SHA512 7e3b6ca452a62e7203dcdbbb27a6ffd7950033cde40b92a863b938a26cefc9c6d2bb615a4085945907be8e7b2578d822c17ffb259fefc1cd178990447b1a9df8
- SSDEEP 192:eAqVcNF3MPqupmT40tsZnfmL0YsCwbPCLIHrIllbf:qVMQxUTAZfmYDCwbPjQ
- TLSH T199E19EFAECE26F1CA17D186D67C01DF0DAAA8B88C345B95108012B06D05E0C30B6276A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Skins\Default (Old)\EL_Foreground.$$A
- Size 1KB
- SHA256 5fcdd04b72cfd9179ed885726cff05b09c9927ff1ddb6275bf0a9b23f5b3a515
- MD5 3ef177ff1a29ef9f24702e128c4c0995
- SHA1 3e8f1c350c50258c52644356720053bd6eb870aa
- SHA512 6d040f0a48ae28b32c63a33d22cb5a4600a17574ef5c8943336ae3a98c71eb20a3b2139681c9279dd847a8f33cb71a50d89441708a654589f151ae44b3e40413
- TLSH T1CB4169D41320CD55C5932727626B2BB0CA7BAE350B0B0EE81F168318365521CA78B1A9
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Skins\Default\EE_ObjectsEventsSelected.$$A
- Size 168B
- SHA256 e311cfa119792ec359a4caac829c8362119dac35a70246760c36630c1b93cf28
- MD5 6cff9e401c6ea7160a30996870906470
- SHA1 7849816bbb0452993568a59d22e5304ccb3a8d8a
- SHA512 459280fe56a2ec69daa5b61618659e034e46b80f819d0f2a6439dcc3b1911a514b9c2a043e4d84bfccba713059acbdff0b8471e0e1dd7add31b41080ee2c4afa
- TLSH T1D5C080C252947562E59C4E3210D39D80AC213255875B589B708130343501706F0C560E
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Skins\Default\STB_Foreground.$$A
- Size 10KB
- SHA256 96a51c9e22dcd73bad615ab4c28c93c2a3ace714cf3eb1b6c761b15a82dada0b
- MD5 98d136d813983dc0e682f2ee3ec73ceb
- SHA1 bfd94cd35a1939cdfc3f8fee37b2913159b01f3b
- SHA512 a6b5ab82a2ebffd1ce2f09a95c1b65817a9d90977cf305d39064fa744eaaeb7e9e64bd5f54da5e6f51f28e16078dbb0587fd688f0843a87e3da191d9aac2d073
- SSDEEP 192:LnhW4ePz4nHpbQqhZwfhJsOacZLTdfOOcdQ82EPp9F4fe47L:FPQ0JbQqhZeRaETdmOcC87x9+fe47L
- TLSH T13222B0CE9F1911ED4022E0777AA4576D1E932762C0A1744656C363BEB87FC7CB782054
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Skins\Girly\EE_Inactivated.$$A
- Size 14KB
- SHA256 bf0b9d42124275182053469fb65dc4ed95f5b65371be1c4c134ecb0d3a5c8173
- MD5 284e421cb3f85b1c7f297c88484ad159
- SHA1 3bf3b2c8d3a7746e521e01dbe15afb00457d7708
- SHA512 a6b2948f98bb3c6c1628c768ac5561faf154436b33a77b282f12369ce289f7b0183494844fcbe20a7100d26387fa35c3ce52077b60a924b9e5dbbebe27a911f6
- SSDEEP 48:S/614S8+k29W8sEvPoxN+Y9rNGrGfrBC4UzLZ2sc5pntb7bo8n:SS+S5kEWRXxNXrNGrGPsc5pt3b/n
- TLSH T125620E24FCF171A0A54DEA7E28D4264A4D730BC3CA80DC46BADD4D1A6F81BDD8D5F282
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Skins\Girly\EE_Remark.$$A
- Size 14KB
- SHA256 db218e37c7cfc95fc6d8f126ee7676b2780494cf6561c28701e751d8ed0c852e
- MD5 d054eb4fbc666a64c038c5173110dcd5
- SHA1 d42c1a27f499f51ec0d0ec9c7b61345c04b13bba
- SHA512 1480e17ba7b416d5790c833927847e7bd163d51131532e3c14eab437c8000bf515848fdb7bcfc1b888c168c2c4086c5118f679d802ff07371001ea9000bf06f4
- SSDEEP 48:S/694S8+k29W8sEvCXBXKxN+Y9YLBBCIrhsc5pntb70lfIAg:SSmS5kEWROxNXWsc5pt3IfIT
- TLSH T148624058ADF17460958EDA326DD1240ADC63C64BAAC1DC01BBCD4D1AAF00BDB5CAF286
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Skins\Girly\STB_FadeIn.$$A
- Size 14KB
- SHA256 760ac176652caed784ceec483549d2c3e4b653f38d4ed57e079cf6163492b2b1
- MD5 eb41ab19e5438fbaab207cca9fc80d9b
- SHA1 6014fe672022510723458136bebe6a8d179bd3db
- SHA512 211485a08fc00e1b2775aa077c62b8f3da8fbf82991f4cb5f7ae85c775f69b94e61f38cb49f8a99f1e1efb34e1454884480ac871773632c3b5e4facb291356a3
- SSDEEP 48:x/694S8+k29W8sEvPKxN+Y925oBClUrsc5vH7At:xSmS5kEWRtxNX2esc5jAt
- TLSH T1876242687DB230A2E999D6311CD5258A9C730983DAC0AC45BBDD8D16BF10BDD4C1F287
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Skins\Girly\STB_FadeInSelected.$$A
- Size 15KB
- SHA256 f56a199fdf81113bb91d2f126c462995ec22253bfb64722b3e8751382ece6bed
- MD5 4ecf2dd1bc28f6f634b31b816daf49db
- SHA1 9b71f52d35aa79c3228cc2573501c01559990569
- SHA512 999ddee36822fb192b29c7f496fff1a848d86a2fc8ab5c878b2be539f8491835041bbc19e563be6b46c56fade903a1f828bcec6e8622620cb116828abf42bbf5
- SSDEEP 48:x/6Vw4S8+k29W8sEvPmxN+Y97wv/22BCclUNLbyBNLLwXqsc5vH7smC8x9:xS3S5kEWRBxNX0v+IB46sc5jdV
- TLSH T16E623478FDF075A8A559E63B29D525065C330A83CA809C89BBCDCD166F01BAE8C5B247
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Skins\Girly\STB_FadeOut.$$A
- Size 14KB
- SHA256 9c42d34357986fd2d12ffbd80aa6c3843ae3d0970b6cce7b852cdbae3957a0a5
- MD5 4cbbc24b756c09f91d2a8670779f24f9
- SHA1 3375192fd3dd86adec74508f65e824c3df23ec82
- SHA512 a3a48f1d679aa32b3c3169ac4489e555def89156c489c159bacf09cad5febfa8169d98eeb3ba5225f8b34372b2cb2e3ce2de8c1d28d68f879c2fa8b8e8891e4b
- SSDEEP 48:x/6b4S8+k29W8sEvPqxN+Y9ryl/22BCclUNLbyBrsc5vH7VvsfZEO:xSES5kEWR1xNX2l+IB1sc5jVWZEO
- TLSH T1E6624138FCF175A49599E63618D624469C334A43D980DC89FBDDDD166F00BED4C4F286
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Skins\Girly\STB_FadeOutSelected.$$A
- Size 15KB
- SHA256 ed4c71d46e1af9b8de7b8f6710869b520acd2a35cc77cfc3bc50eddd53419677
- MD5 47ca972b198463f852e8871a6c48105d
- SHA1 3d6850febcda9ef008f84c3b05a105bbe1070efb
- SHA512 09b177b53ef4a85c566630968e515ce1ecd7f3946ab85695ad6daa6d577a8aefcb840c47bea07c1877890b4d7bb36abdf3e7a59a7218b7b379a6607d03ae0491
- SSDEEP 48:x/6Vw4S8+k29W8sEvPyxN+Y9cR/22BCclUNLbyBNLMl/sc5vH7D5oJTUP8sh:xS3S5kEWRFxNXcR+IBwdsc5jWTe8sh
- TLSH T15D625278FCF176A8A44DEB3629D921464C330683D981AC89FBDD8D166F107ED4C4F246
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Skins\Girly\STB_Foreground.$$A
- Size 59KB
- SHA256 90db706421adc3c6306aff6803ea39ca9198b7e8d4f240c8a7e40922c833b56b
- MD5 884df62203582d40271e57397f7c3ec5
- SHA1 fc42746bc97d8ef2905a0eb9329f7fc9bcd5940f
- SHA512 c8b3d647375330ca4a2c6c84a3a99996fc5a218067f225b3245d9b641915a9124c7b438f3b2ed1928cd019e1ffde243442d3ba691041ec2272e0a3b0c1ebebe8
- SSDEEP 768:435Ft/QaRhVL2mjZUdj5EMSmFewo+LE3rHaMV0iN7Ihj7NYqvOB0jEal:+1VRhVydFEfRwa3eMeiNMhHN7vG0jEi
- TLSH T18053F135A6F0B0B4A5A973706CE9165904FF516FF486AC80BAEC8D891F0DB58CF4F909
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Skins\Pastel\EE_ActionInfo.$$A
- Size 15KB
- SHA256 fb1dc31cf4a4eac016174519d30930ac3710a54f66df026a674ef0a3f33521d3
- MD5 c35da9d29fae1e4846fbc2a46722cc1f
- SHA1 25aacaba158eb504bbc3f897d34d326a7e00206d
- SHA512 530d926576ec41657219be91073f3716b3a859b92ccbba35b9346f3b0fe4acb3c06293d39c2c24a62570073a806d315985e097ef72204d28ac58648b44c835cc
- SSDEEP 96:SSES5kEWRzyxNXaHDpNcosc5pt3OC4IW3uJkrDHK:SS75ktso0it+jG0HK
- TLSH T10B72A528FDF07175D25CEA331CE5104B5C720A47DA80AD88B6DE8C192F12BEE4C0F25A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Skins\Pastel\EE_Folder.$$A
- Size 17KB
- SHA256 b32351674684c286b755c0449281c5ef7e53d653651d63edacac605bf9d5f038
- MD5 3e47814cda0ee0541b49cace51cde2bd
- SHA1 6903b0f5eff03d811ff6e1838c64d652559ece7f
- SHA512 cd2fee563cba01a72606358497dc61db295c4ac623aa5bc11e1c34005bf42e68b5f7afbef6cfc5a4280bc692ada60c729ba80748b7f9c04dc21a2b561ceae5f5
- SSDEEP 96:SSeS5kY9Wm0yBY0hpxqNX7sc5pt3ufOHEYqgGTF:SSN5kU0SYX/tKOkYeTF
- TLSH T148829524FEF3726C9948B6732EC619415C3307C3D6819D48B6CE8D2A2F11B9D8C5FA5A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Skins\Pastel\EE_FolderPrevious.$$A
- Size 17KB
- SHA256 4e2410b865c5af54985743c214f165b59a51cd4ca45bc5e48146128cefba6afb
- MD5 482f6ede510e5bb86ebdf4031f08d59c
- SHA1 08c6b9b63516d4941ceaa2d49ecf08095c27b29d
- SHA512 6078f63ff570efa4c55e5980096c25fe1e93ba9deb8d82506bbcd625b2fec4bfe26b0e3098ef506f4d89530c8d875ab706a1342f87b1497ffb0313189b44c881
- SSDEEP 96:SSeS5kY9Wm06VYoOp9NX7sc5pt3TMU3bGp6avJNFf291jEXck0:SSN5kU0SYoq/tIU3bGtbV46F0
- TLSH T17D82B928FDF2B26C454992762ED629424C330BC3D581AC4476CF8C2A6F50BDD9C5BA5B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Skins\Pastel\EE_Hidden.$$A
- Size 18KB
- SHA256 cba42d05f15e762ed14b2fe547317f24ee7c82c3eb700190cbae70dc3eb8ea77
- MD5 7073a06be554148e855489c830082e3d
- SHA1 8ced2b4b72e5e8c4ef362726e7ca1f6672cc468c
- SHA512 8a9685bebad9b6b2a4807879ff0be904d465390a26ca34e9ac865033b66363d90cf15360ffebc9240d11501444032412160424cc7ae76c67df3d4cc297d68d33
- SSDEEP 96:SSeS5kY9Wm0Jkw2zpbdNX7sc5pt3QkeFWE5y3VkKjKrPt86ytx:SSN5kU02w+/tAkm35yFyt8rr
- TLSH T16182E828FEF2B26D894991373EC515419D334783E6816C44BACE4D096F10BEECC9B68B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Skins\Pastel\EE_Import.$$A
- Size 17KB
- SHA256 718c3da1e4f3a3c119ba2408c31db0fe28ed1ac6f04f4ea33e8e5b427a6fbb7b
- MD5 36f16d3118b8afa97f5984468eb92d12
- SHA1 f09fca50f3971a8fe949b3a2f5eb68eee9e46e3f
- SHA512 9abaa97b754fda49edcda838ec260a6612f33a14a5619d0193ca29cd99a1efe2e9b9c8ca647e7002cd0fb5964f67cc9103f9830144ef87ada8e96df4390eac98
- SSDEEP 96:SSXSeWvkYr00xnWNXrNjNkFNnnkm067p5dsc5pt3eeDGrHX2bGIUIER:SSCpks00g5Bi90qtueardpIER
- TLSH T1BD829678FDF2B969846996723E961A058C370BC3D7806C05B5DF4C2E6F00B9D8C1B557
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Skins\Pastel\EE_Negation.$$A
- Size 922B
- SHA256 7b09a1c63559066d2f99028b68142226f127a0b67b5adc9c6408257b4c2751b8
- MD5 304ff1467cfb8488276c168fc4366902
- SHA1 4c57e8516c535fc08fdb3a7d630e442864bcda37
- SHA512 d554a291a25e17f423280e10507c2078a7c8f5ad82710075e9d7c7800c16503a0186d82185d3194676565186344f5c9fe44e441ed14efaeb8ce416c971f961a0
- TLSH T19C11FB846580FD6DD30754C3A6763E9694C3847C08150B040718E170FE647D4D2FD349
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Skins\Pastel\EE_ObjectEvents.$$A
- Size 14KB
- SHA256 ceac7d5a27577af63a8fc26e655a892fb0df5c88461925d59db58b160041488c
- MD5 92e5d06a2bbce3b313aea881fd4cd87a
- SHA1 aacea92685854e200ccc245f51db9ecbc688436e
- SHA512 eb15eed3ee63ceae67bbaa4900a5f4eb653382615cb478ec2d17c0378674dd70f8f1455ade90b7abd50aa8c670e6e587bc281ea150a4dc171d19aa87998000da
- SSDEEP 48:z/694S8+k29W8sEvP0xN+Y9mfBCAUxsc5pntb7R1f:zSmS5kEWRjxNXJsc5pt3T
- TLSH T11D624218ADB17165A599D9321CC1294A9C730647CAC1DC81FBCD8C2B6F10FFA4C1F187
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Skins\Pastel\EL_EventButtons.$$A
- Size 169B
- SHA256 566164047a34cbd82cab3c7060396ea5c999cb89d270bb00d61c4a48bc2d9bf0
- MD5 ea471882d5efd58c9cab511f4444f06d
- SHA1 3b6c903f7f3baeb0201d1aad9e997b46eda23a20
- SHA512 f75893487e23735ed611ca1bc93f58dfe79039034df2335fba254f20121c1aa732505514c481500705125351e72ab3c96944f9113d389ff13c116a28c9f924de
- TLSH T1CDC08C86530009EAD120C172E238081EECAE6E7B28900B488202F1302F73904D2F31CE
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Skins\Pastel\EL_EventButtonsSelected.$$A
- Size 169B
- SHA256 0996d8bd238dc0965c362d3649b45da04ae4b3eaf19eb110eb42dbef49faeb05
- MD5 aa1aaf02db41a3a26dff874f53e816b0
- SHA1 cd1b3d497b2893c25794b8d1cc3a26d61f48625c
- SHA512 82c89ddfe8620183ec87103ef24003ac1a09a2ebbaaa6f42fd47231bead5e385d5c7fec03f6b5e6db48b9db9cbd9e599b0863df6b2c9d3cc9169f70c2f3d60ba
- TLSH T19CC08C8703004EAAC561C172F170089FACAE6D332DA00B448202F5242E33544D2F31CA
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Skins\Pastel\STB_Foreground.$$A
- Size 61KB
- SHA256 4becef3126ac35bd594379215cdb88c80c1aacaea4f1bf936d8c889e9600a474
- MD5 4a471a7cbe80a639a7a679c55bf41e33
- SHA1 91b4a67b14d760d5e319677ae3246ef308b5dbbc
- SHA512 2415b9ea1fdd62a91b3d8cf1f2261e3b48c0616e8b2b7ca308e9161a6b768ec219a962c796177c4af1b536d273477bfbbe454458d80c28ced040ae2f92fefc51
- SSDEEP 1536:Xoe6PcCnxjPOB543v/yfOFfum3i2WGBX+3OtQB:V6PHNq5QfupiBX+3OyB
- TLSH T1A953E165ACB3F533915D4B3659C0B2099953C7C3EA046CA63E9D9C4A3F90BCB8C0B749
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Skins\Pastel\STB_FrameSize.$$A
- Size 15KB
- SHA256 5e463bdf9ae5b5dd7a4fd06fce8506744a206067826e98db365fcc2a9ee1ffe4
- MD5 d10c11ed8c028851a954bc29c0c474a6
- SHA1 f02ec5caecf3f9333f83afad908ecea61021ae20
- SHA512 9c2003875d378575add062dd9390304a379a70e743aa9687425fedb84607b18f010cefecdd9b0132f775519b1c5d9bcd533ea97b1bf4ab637b869d9830b74a3a
- SSDEEP 48:x/6Vw4S8+k29W8sEvP2QxN+Y90dHvJPdHvwBC5dHv7U2jLxFLXssc5vH74omlXD9:xS3S5kEWRZQxNXewsc5j4o+XD3t
- TLSH T18E627468BDF17668A54DA7322DD9254A5C730783CA41DC467ADECC266F007ED8C4F287
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Tutorials\ChocoBreakHD\explosion001.$$A
- Size 8KB
- SHA256 a609b4f5888f3e2b4c6765f3d960f3bcd7c952eac5edcbdc87d05700306b792d
- MD5 701ad3463fb42baf39dcea8131bf8d6b
- SHA1 67f7b68efa6af731a39bbafb7c962a6950c319b5
- SHA512 0a1772604b44f19151bb6994efa8d10c65f0b79877b3e64fb773028cd3fa241d40634fe472229c70fc4054dc2d2a5963120c9b92c9e8c09fa0c75cbedf989ce0
- SSDEEP 96:x/Cbo/fhVHyXw/KnQ1ZK6oI/9TJm8oTuvgu4AslB7elBmOg/GRGrk4OlsMX1+7U:x/F9Knkx96TWgu4AsL7umOgGGyjX1
- TLSH T1DC02AE1BECD26542F4DADCBA1CC28982270D798911EA687D3F9DAFDC75318813039BD8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Tutorials\ChocoBreakHD\explosion002.$$A
- Size 47KB
- SHA256 42c3224a921ef7bd1735a9e807d1dbe4c2b1a104e0603c779a16084b67107ead
- MD5 cc4b80067b3527f70432376740d34c4b
- SHA1 de97c74d8713a7d97b5a0d9075d5819ee8f3fefc
- SHA512 ee769e12c9e3dbea3512e9d985987d32d1a8ca7cf15c4efd61ec58ed21a16c97e2a1a11fce241679c35e57fc6aa12c9cfcb9274bc6e9f79e3cdae52efa868b75
- SSDEEP 768:dNZEqHsRDxFXDooY7aR4YL6cSmo6mS8HBcxDNjjb/KY3r7ZYTa:OdRDx1DooL4YLqmo9LcxDBjx3rr
- TLSH T1F823CF27F4D3DD40F7EBC73EE7B613920974A518D9AC7A2D90EEDE81900621071ACA57
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Tutorials\ChocoBreakHD\hithat001.$$A
- Size 11KB
- SHA256 3d6b9ff714b41d7e0d1a740b311f33760e8a708d2d9f51b6ccf4ca6f5e513cd7
- MD5 3469b869a9340a3ba5cb98846ae65b23
- SHA1 cca8dca94c3e101c94b73b3a24859f83cd6bd8e6
- SHA512 62e65cac8f837e234dd9f4e8f5df324c6c93d9b555b4691231410ca69543abb93634058abf55af6354f7c387695ecbf184195b86c1aee3bca93219f77c5aa051
- SSDEEP 192:YYi0HwpoUNJvx5Dk3rMJe29hlFCY3BpFdQt64zajS52Jf8iR199+kWoJlt9igXGw:YYinpoUNh3DCcP9/FCY3BWae8fT99rRn
- TLSH T1D832C0A3D161F58036712E92BCB96652128EBA087F324E6B3D5287DAF33316347DE408
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\Tutorials\ChocoBreakHD\jump001.$$A
- Size 17KB
- SHA256 825f1ca7757be2ec26167539c9e6bd77eedfa5d0a4f92c42a9f93ceee54bb15b
- MD5 2d64b91d3575a8b9c5caf9fbabc2c105
- SHA1 cc1d2540e0c840854fc428dd0856fbf427ca6a38
- SHA512 a310ae145262a74e1dbcaa51499d124e75c14177930a8eb2b2af1dbadfdce854805d6186ac759e9ac7949a4b711328597209e7b518e46ec2d77fb6659e8d4567
- SSDEEP 384:/3mXA+UjKVjxTUf7tN2MYBH/Hsyyw9HTgHT66ffxok:+QjGofj27BH/HkyHTgHT7ffGk
- TLSH T104829FB5D4C14ED5D5524733AE613D400CF6B58ADEBDA83F080CCD26A113784ABBA7AE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Clickteam Fusion 2.5 Free Edition\mmf2u.exe
- Size 15.7MB
- SHA256 bdb0486a4d1485434af4aacfb439cf1ad4c03de57d455354abc74524e2af43be
- MD5 ba3c74cb26087f5eff86e3a2bfdb3868
- SHA1 be7369bedcaf34a2a24e385c2aca02bfcba84a4b
- SHA512 cc78de7d5fb05604acbf374b7ba83e35c2f2998ba46a5fc09b7ab8933a98e07bf4e1bc06a2a98b7b442cc32a5b7394d906325ae2d539b7d47925aa53b04b1240
- SSDEEP 196608:cLa7nUFq+sLzGqfFibMqp17AS9+ly/kmTpCRF57XPKJa7mA4kLidss57:ya7iuLzGHbMe17AS9+0/j47mAct
- TLSH T10DF68DE13960802ED5AD4130BD6CA67A607CBEF00B7641C797D43D1A2BB56C31B36B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\tmp1.tmp
- Size 44KB
- SHA256 0effd00b8c3dcadbfe8abe5beaecc8212671f221f4f0ac7730439e58271ecfd5
- MD5 3db5481439b8bb3bb2d72b99944cb268
- SHA1 e6ca248faddfaa5b16269962df417d3fe7f5fb10
- SHA512 084420eab536443cef3bf94ab3e10fd92d2808d71f85c646febc22a18616d1a0fab4333f2aa65cf932f904c7529e38f1cb6b21e09100f623bf5ee6ba858c03a0
- SSDEEP 768:ZsEkBPOVPMIQegxbi1M9yeMzwta6yE0Iux3ulWH8:ex5OVPL7gddyFz7E0Iux+la
- TLSH T18C134A1278994673C69F527098B45B2B9F7E5E301AF408824FA12BCB6E715F0E23B747
- MD5 SHA1 SHA512 SSDEEP TLSH