Analysis
-
max time kernel
81s -
max time network
82s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
09/04/2024, 17:05
Static task
static1
Behavioral task
behavioral1
Sample
installvectoriangiotto.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
installvectoriangiotto.exe
Resource
win10v2004-20240226-en
General
-
Target
installvectoriangiotto.exe
-
Size
8.2MB
-
MD5
cac922715811ecd8ae5b0a673be94a7c
-
SHA1
16cb69d612ea4e14b68e35c91fcb166fac7826a8
-
SHA256
0ddb96c91f72829318397eea626677b8bf9f593334e12a29cee22e7f87cdc8a3
-
SHA512
3f0578cebdf127bce7815987bc8efd45bbd174c1c3d9f08877343df38fa476c116c447bae63502c01b5fe1eeea3f507e7ce2da67a1b7830d6a81f400e1a0236a
-
SSDEEP
196608:OuzAItsUZNgaTR6gTZnYXtQJyCmXimQim8BN8oEG8XqXwfy:pcwga6gTVYX68C8imQ8BkG8Xkwq
Malware Config
Signatures
-
Executes dropped EXE 2 IoCs
pid Process 1440 installvectoriangiotto.tmp 1076 vectoriangiotto.exe -
Loads dropped DLL 5 IoCs
pid Process 1076 vectoriangiotto.exe 1076 vectoriangiotto.exe 1076 vectoriangiotto.exe 1076 vectoriangiotto.exe 1076 vectoriangiotto.exe -
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files (x86)\Vectorian Inc\Giotto\Templates\is-GCICR.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\MenuBarPushButton\is-RANDE.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\Spin\Horizontal\Left\Arrow\is-MGT3M.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\Classes\is-QH3PA.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Frame\ControlFrame\Active\is-HVEQ2.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\ToolBarDropDownButton\DropDownArrow\is-LU338.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Caption\is-84RRI.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\MenuItem\is-49MT2.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Tab\is-FSAHP.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\Templates\is-JOQHD.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\ControlSeparatedDropDownButton\DropDownButton\is-DSFAG.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\ComboBox\DropDownArrow\is-3L2BM.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\MenuItem\is-NH818.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\Classes\is-872NJ.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\Classes\flash\filters\is-CKH34.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\Classes\flash\geom\is-MQADL.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\Templates\is-8SC51.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\Classes\flash\filters\is-81DG9.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\Templates\is-1PFRO.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Background\is-ECEO5.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Tab\is-L65RR.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\Templates\is-32TDK.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\Templates\is-NGTOR.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Tab\Buttons\is-S1K3T.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\Classes\is-MO716.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\Templates\is-769AC.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\MenuItem\is-NRPB5.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Tab\is-CBAP2.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Tab\Buttons\is-K3TSP.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\Classes\TextField\is-O7CDN.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\Spin\Horizontal\Right\Button\is-OVR9B.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\ImageCollection\is-FK47J.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\Templates\is-M41A0.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\FrameNcButton\Active\is-USPRA.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\MenuBarPushButton\is-33RN8.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\Classes\flash\filters\is-VAB35.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\Templates\is-KKDRI.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\ImageCollection\is-UC5PN.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Tab\Buttons\is-DFM67.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\ControlPushButton\is-A8N80.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\FrameNcButton\Inactive\is-IAE3V.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\MenuItem\is-C105M.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\Classes\is-8FQ66.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\ToolBarSeparatedDropDownButton\DropDownButton\is-47AQ7.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\ToolBarSeparatedDropDownButton\PushButton\is-TGK0T.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Tab\Buttons\is-NQRN5.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\Classes\System\is-PGH5A.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\Templates\is-S4FR8.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\Templates\is-D625R.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\Spin\Vertical\Up\Button\is-RT830.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\ToolBarDropDownButton\PushButton\is-1MCGM.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\FrameNcButton\Active\is-2MJ43.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\FrameNcButton\Active\is-R477G.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\MenuBarPushButton\is-UC19L.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Frame\is-8S22H.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Tab\is-VUR6R.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\Templates\is-5C5QC.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\ControlDropDownButton\DropDownArrow\is-8GGER.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\ToolBarSeparatedDropDownButton\DropDownArrow\is-340JQ.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Caption\is-T5D8L.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Tab\Buttons\is-QADBH.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\Classes\is-16MNS.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\Templates\is-9BH3C.tmp installvectoriangiotto.tmp File created C:\Program Files (x86)\Vectorian Inc\Giotto\Templates\is-5L54E.tmp installvectoriangiotto.tmp -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 30 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\VGD\shell\open\ddeexec\ = "[open(\"%1\")]" vectoriangiotto.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\AS\shell vectoriangiotto.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\AS\shell\open\command vectoriangiotto.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.as vectoriangiotto.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\VGD\shell vectoriangiotto.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.vgd vectoriangiotto.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\VGT\shell\open vectoriangiotto.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\VGD\shell\open\ddeexec vectoriangiotto.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.vgd\ = "VGD" vectoriangiotto.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\VGD\shell\open vectoriangiotto.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\VGD\shell\open\command vectoriangiotto.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.vgt vectoriangiotto.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\VGD vectoriangiotto.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\VGD\ = "Vectorian Giotto Document" vectoriangiotto.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AS\shell\open\command\ = "C:\\PROGRA~2\\VECTOR~1\\Giotto\\VECTOR~1.EXE \"%1\"" vectoriangiotto.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\AS vectoriangiotto.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.as\ = "AS" vectoriangiotto.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\VGD\shell\open\command\ = "C:\\PROGRA~2\\VECTOR~1\\Giotto\\VECTOR~1.EXE \"%1\"" vectoriangiotto.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AS\ = "ActionScript file" vectoriangiotto.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\AS\shell\open vectoriangiotto.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AS\shell\open\ddeexec\ = "[open(\"%1\")]" vectoriangiotto.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\VGT vectoriangiotto.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\VGT\shell vectoriangiotto.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\VGT\shell\open\command vectoriangiotto.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\VGT\shell\open\command\ = "C:\\PROGRA~2\\VECTOR~1\\Giotto\\VECTOR~1.EXE \"%1\"" vectoriangiotto.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\AS\shell\open\ddeexec vectoriangiotto.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\VGT\ = "Vectorian Giotto Template" vectoriangiotto.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\VGT\shell\open\ddeexec vectoriangiotto.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\VGT\shell\open\ddeexec\ = "[open(\"%1\")]" vectoriangiotto.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.vgt\ = "VGT" vectoriangiotto.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1440 installvectoriangiotto.tmp -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1076 vectoriangiotto.exe 1076 vectoriangiotto.exe 1076 vectoriangiotto.exe -
Suspicious use of WriteProcessMemory 6 IoCs
description pid Process procid_target PID 1952 wrote to memory of 1440 1952 installvectoriangiotto.exe 84 PID 1952 wrote to memory of 1440 1952 installvectoriangiotto.exe 84 PID 1952 wrote to memory of 1440 1952 installvectoriangiotto.exe 84 PID 1440 wrote to memory of 1076 1440 installvectoriangiotto.tmp 99 PID 1440 wrote to memory of 1076 1440 installvectoriangiotto.tmp 99 PID 1440 wrote to memory of 1076 1440 installvectoriangiotto.tmp 99
Processes
-
C:\Users\Admin\AppData\Local\Temp\installvectoriangiotto.exe"C:\Users\Admin\AppData\Local\Temp\installvectoriangiotto.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:1952 -
C:\Users\Admin\AppData\Local\Temp\is-7UJ6E.tmp\installvectoriangiotto.tmp"C:\Users\Admin\AppData\Local\Temp\is-7UJ6E.tmp\installvectoriangiotto.tmp" /SL5="$50066,8294085,53760,C:\Users\Admin\AppData\Local\Temp\installvectoriangiotto.exe"2⤵
- Executes dropped EXE
- Drops file in Program Files directory
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:1440 -
C:\Program Files (x86)\Vectorian Inc\Giotto\vectoriangiotto.exe"C:\Program Files (x86)\Vectorian Inc\Giotto\vectoriangiotto.exe"3⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:1076
-
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
97KB
MD5e2f9619cd61f25642ef36bc24a66402f
SHA109b98c69734a343a2730f4552653334b63963f82
SHA25632939671b0eec9d1a56b6dcd7b9c8c51e8a279ceebf826ea10e8c896712ff295
SHA51255509bdad49d7acf90a99e0c537a77a5382a9061d56149282cdb11b6ca07427052fa414a38cc995ad823fc979894433f6974789d352663bdb4bd2ec25c66f107
-
C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\CheckAndRadio\Check\Disabled\Checked.png
Filesize3KB
MD5eaa0d3a8cba2cd65864bfa50211a540e
SHA16cac739b645b25fdf39365bb6a4152897ebbac27
SHA25678e8e4c8e29ec127b33a374e17be37d31658da36e41d9e84eff0ca864f86b6e7
SHA512b7a764bfaca5ca7355b4f8a159043bbc65d07b605df611e024367201054cd33bcc13ba2ec2f53db84f082ea9cab6b6108b9c19692bea0a9b4757cd9614c5a4ab
-
C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\CheckAndRadio\Check\Disabled\Indeterminate.png
Filesize2KB
MD5a4590ab1b674d7343bd065bbf3f83565
SHA141ad424420ea4667bc4ff6a3978792e0eaf4cf7b
SHA2563bc3e80282ce12317902baf0d5e572cb69919bcdd9e4514e1d5caeb2978573de
SHA512b745baff8c79fca46b229589d6e05aa332008e443a67c3ae8e4621ca561f0e511755e4bdbfbdbcdaa54a1e1f851054ce0a08dda0fd64b70e1ab42fcd3948eb7b
-
C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\CheckAndRadio\Check\Disabled\Unchecked.png
Filesize2KB
MD51278b847c4c1954086b585c79abb70c7
SHA19d822ecb7bc30c9bb62b89d383f62b039ef8ed41
SHA256e51984b90292234007005f18eb78c8ccfc87e94cacce8a79551138d31c34a108
SHA512e5d8cf966a8923a1395c75be9ba8ef6f8244d1623fbe781171061370e595903460526f47fcf8426a326d39df29c1f21d0ce3b173936beb53d27b6026d2fa3c8e
-
C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\CheckAndRadio\Check\Hover\Checked.png
Filesize3KB
MD540f6f047f19c9f74f0b575761a67b4fc
SHA18d9cbbeb2b57055d8a64f265933d0d0ca9f31f1a
SHA256c3d5d5696d98ca0253f50a40015560c9398f7888bc06d61fb6ab6b8f1a4589bf
SHA5128bb7761452b381a4977f19b7d7adf7d0be2fae99a61bf5e8324b18124ab14201be2ef6b3d0598040a1ac32995e44a1962812096dfce8ff692023f0af00f4c365
-
C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\CheckAndRadio\Check\Hover\Unchecked.png
Filesize2KB
MD5839b08025c38ee4c7c50936f325a1d0c
SHA180a22bce500cb5ec8f3cfb4155d45d9b0695acc0
SHA2562577b38fa879fb275f0e796496e19d3e8e8188a65dc920ac253fd20a9678cc21
SHA5126378997e5dce08b46dd93179880aa2e9c2fbe44b817aa0fc376eb5260198e5fc280f5f74bd5f200cd69a381898fc4f3e4017f187e4f87187569e5dc69488cadd
-
C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\CheckAndRadio\Check\Normal\Checked.png
Filesize3KB
MD578efb85f0c981e53e4c8db4f8b60cf01
SHA1a16540250096e19da0bf1eb21bcd9f9eeb1266f1
SHA2564faaff3b4365ee67d2acd683460851fc1460ae040e739ee9bf2e27d3ab0b01c3
SHA512bae294db28bc414edf70aebdb259cd8881bf939a8107f85633855e69649a7cb56ecf52de2d941421f587a591cc96fb436721ab65110728fd39364a815b55c6b7
-
C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\CheckAndRadio\Check\Normal\Indeterminate.png
Filesize2KB
MD55dc26d882642dd140fc613b8391dc585
SHA1fc63c1793a32a0dcbb732ce64fd8c5c0d9561056
SHA256689979707f67656cfe0fd698f7fc871366f0471cfcf431ce5aaf34b0b2629877
SHA512b2b0f726cbf73efba6da364228f1e48d1b36e7d8532360c244899e3bfbebbdb782005cd597eb0592ee92c632aca6862ff8f6027435900f3bb4e2a19d39be4b73
-
C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\CheckAndRadio\Check\Normal\Unchecked.png
Filesize2KB
MD58c143c4a1486b0077bd25324117f2665
SHA162c344e2dcb4e2aef8f21f9f7f81a7100eda7247
SHA25642d283daf94f423e0d54178155185daf3bc2a97634ef7f5805fe5512194ee4aa
SHA5120776db7e2e52a0fe283f09ca0cac3a11815336c5b11abc6d5809ec356f74fb9a91cdaf15b354f650fce9c8f152cab183d3e0a71c45af0c3d3c854a8617b371e9
-
C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\CheckAndRadio\Check\Pressed\Checked.png
Filesize3KB
MD54ba778772bf52d848fbcfe360bc21cef
SHA1a2854afb5d0484bd8db8c7d6a981ea0e50ef1e21
SHA256a752cb8c04dd7a3f5e3f17efc4a63576de36e43b36b228d14d23f0663c6c1024
SHA51202c381b20243b378bc4ca45c112a0353c1e415cd61733309c25e4d0b02b1b0730962ac5cc90f2781f1b3bb81a3bae6938f0be6f4b7393a94b021b690d22f55d1
-
C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\CheckAndRadio\Check\Pressed\Unchecked.png
Filesize3KB
MD58f800d8547547a780e39aa4541744593
SHA1012c7a54064553826d69108125ce54bba8d6d44d
SHA2567378397396239b306365e575b18192481a28dce67d90ce23723e04d2ea5c9c2b
SHA512f2c7ed9f6f2d962ec55da9026a36fd795214989e71c4c3a274b1d1777a23432f57277ccb88dbbcaef4f921170e27a8cbdfde8a3591c6365bcc51209aa2851356
-
Filesize
3KB
MD5ea30915b56acca9d59135cafb630439d
SHA168fcebada4f93948f16d7ccdd4b5e519a46b9d2b
SHA256807a7679dea184110f01cbbaa2ab067e602900ebcd8fef6000e34ac56782acbd
SHA512515de86bbf5c9e5f5f45101dfe12138a49b8ef1aac624e19fb9761dc06a5f1559924d2732fb146840c470aff3aa54e72e70d48d6255b53b382db305950a0c513
-
Filesize
3KB
MD5c1c12b389502488003e1ce132f0996e6
SHA1641c052e1efde8e4cbfd10cd8a28fee549627ba0
SHA256481df1ef7569652828a96aff173740789ef77bf1dcb2f7d076408a18d1c4dcf8
SHA512edede2e3a9fefe7588d0563c87fed879b2e12e857163aacbea7b77ca0172afb32e9267f65a39ca55915196ed89a256715b0eb66769029f713825d3080526fd90
-
Filesize
2KB
MD5c1caf082fb636d705f177be323a276af
SHA1db08bc1c4fd545be8133cddeaefd0523d551cf2c
SHA256a716fd76d4d6af760888d9027971ff74502e8ab59db2390ee883a597c7ff6aef
SHA51268858f257b570b9138a8fb5b06d2fb66bc45ec4000fb12442f2555a85614776108e00657cfe915573aa5ee2f8e8303687e247c47dc68ddee05be8e01e3875c22
-
C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\Spin\Horizontal\Left\Arrow\Disabled.png
Filesize2KB
MD55e09cadf7c39d419891f9b8ce919cef4
SHA112cb55a60ea8dcf67a5ef1f57f07cb376bef8a95
SHA256d52ceeb965d9baed0509a8b971bba65636db93ac976d98151ef9534eb9d9ea1d
SHA512121007ef705116a0271371cb64bf4b7ca6ba5980d690ec0ceaf3435f2153d98fc8fb02b58fb052fef8656e0859cf74ce4062a3626b507263e084ab7fd1198c65
-
C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\Spin\Horizontal\Left\Arrow\Hover.png
Filesize2KB
MD5aa7f58d84ba983aba916fefd27be7196
SHA1fc6f179d4d4e89a9c744edaa90fcda7982839c6a
SHA2567fdd0e2255694516207655ed0877619af7f847d4908e103dcc43d043b0d5a21a
SHA512923870a18c23b81ed94042d5984a01273cd6534faf5cd8e66d57efc5329b516aeea6e8fff9c320401837a1af46318c97fd0bb75f36d824189b7e8640c8999d9c
-
C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\Spin\Horizontal\Left\Arrow\Pressed.png
Filesize2KB
MD5538ba83bb74e444b81646f4eabb0eb06
SHA129e5aa969bd8d765a4c9cc606bd0519852afe603
SHA2562d5405087d0e0dea55121f72ad059c37e5b9ae4bebbdf7b17fbaec5cd04fd11a
SHA512d532fdab4a28c9af75c8f2721888048dbe619b39f85f027b98061c2f5af90455b48b5334efce0f9cc5eb3e7b6ab83d47882d5a8dcf0047d98431e4a6c19ac54b
-
C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\Spin\Horizontal\Right\Arrow\Disabled.png
Filesize2KB
MD590c58f1ef6fd9401eef308c14efa764c
SHA1c13addf0b2c2bdbed55ddc691e2f938315f4626a
SHA256f45b057c40797ead51156ebbd9552e229ebfd873c91f003ba24a6523ae7f5642
SHA51290f53f5dd05b1613ad9443bc03fe808cd7a364793958694c6f9c8ce26f8c1d71d2da1827186851517833c8bc7edf904651d77a2f84496a4b76a8ec7bc1fa4f70
-
C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\Spin\Horizontal\Right\Arrow\Hover.png
Filesize2KB
MD5e3952098515ecb3b865d64dea21578a8
SHA1a1b5791051965d3e728d099dcd7f6b37d4f493c5
SHA256feb7da4a1df11f9b9d62dbc919d5f62ed1d69863811b9fe0d683f8ef9d55c4fd
SHA51241936bdba26e15d912fc597e0df78883fe68861fd0886e5fcabe03d03e648eb6afe471e91dc801cdb34036654525a32a3011eb71b6b1b78eebaa9545c450476f
-
C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\Spin\Horizontal\Right\Arrow\Pressed.png
Filesize2KB
MD561ae60fa59550e6407d89b31a245f419
SHA178516b3f2056927a7934aac91c1e45b03e47bd01
SHA2568c95d49ad52ba6b25e5dd000efe2ad402bca5c45747fed298ba987af0d83ca52
SHA512a9b9b542d30031a84683425fb8b32722333e52c62f16108fbb16a6dd278d4fee530e40bc7bec07b531d9fe10fff641a4d4516d3207da947d048b2b1fb8f12dfc
-
C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\Spin\Horizontal\Right\Button\Disabled.png
Filesize2KB
MD5dad1a6d5125952bcdb324a7d6b66f9fb
SHA177a625067bbd8a65fee82b509ed4a7ccd63d848d
SHA25642c8d4e1fae291771435773c2b773426e370637e084179756edb53a8f74fbbda
SHA512538a1def531c85aa0f2af269bd0507a3ce90dac03441ec487d6cf7cb78f53bcba4a016b3fd146579d814ed2d89d5a1e02a47405507e946380d24e19068788e15
-
C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\Spin\Vertical\Down\Arrow\Disabled.png
Filesize2KB
MD504612e4c86486a65e188233052f9a921
SHA1ca2a53ab70726a9c7351ec90f91960bbd55e59a5
SHA25647649f716e43c9410a534708e5a3949a96f931f33586c548367312f36fb343c9
SHA5127edcd742a23ddf2e71e835d790a1bb8e0e68deb142388dd21893b851127c3b981154ae05832fbccca53146531987ec7ba5ea066f0e7cbd486ea81782d9fd2b3f
-
Filesize
2KB
MD51179e238407e428217ed27add2de304a
SHA1e96a32de72ee6e218ae8197a338702f9185b1132
SHA256d30766accc30b036fe8b5d8786764c8e30c936062659cc4fe2480abbfc5c2572
SHA5120a98c766f574f8074b3570d08dc1c4fd4b0c7d27a70d156510f20c9fbeccf294affaf288b32b803583cc96d80858b40da209464447d639871b584ef27c045ed8
-
C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\Spin\Vertical\Down\Arrow\Pressed.png
Filesize2KB
MD56cd8351062436bbac4af647f9edaaf37
SHA1050bb2ce8fe7a3eec4c47daf91dde638704c81fa
SHA2569c72691a6358a28fde392dfa474ed23db0a9b5ff3c1c39dfc48cd78766c518f1
SHA5128ff8ab5f4ba5b612f14ea5e3589bcdb753f49916af5b47cc0f059963509e1a1fe0358b1134ee38e0d8cc2fc9a59de5e64c9a7526565ba2417af35c23c8a9b540
-
Filesize
2KB
MD5e09067b396c51183a48776a411d73f3d
SHA18c737815bad644a6ae98f63ab7149085a68fe741
SHA2564a30fbb676bbcc264bd038d83c1c0314e9cd2c88d709820d94cfc73a619f70f4
SHA5127db3f4b83c3125d17a2fa418bab053be594e6c3674dfca2a8adb2f5a10428b671c8ddef94868ea76263b8061009a58cc7a7060b35ecd0a6a24cfe028efd53a0e
-
C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\Spin\Vertical\Down\Button\Normal.png
Filesize2KB
MD5b0e24d44f14bee51dba679370c0f0793
SHA1966b3859b49a5efc2b935e229bfcd5fa76211fc3
SHA2568249d2bb9d3df09e38ab6ba6fe59c5d7505ea4e4b11d34b739bc72f9ce217490
SHA51254176b8b89d0004047c16b976a174f77fe1e7e55f02c2d5cbe3ad6c571746c6e653dba892e9b9b604d59c5a4deb9a04aeb4e11cf74939b7e87ddc88f2eca5574
-
C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\Spin\Vertical\Down\Button\Pressed.png
Filesize2KB
MD5a4829291267be89cfede1f668835a809
SHA190a8dba20fb3552200b847e29dbc4cace1e77eff
SHA25693b8ce9561374f4a27e335579b15b7c7e1976ba1d85b68a030164b382f8f215f
SHA512f4b382b4bcc8110a49b861c42911057285d66a3fdc7e1deaecffe10d8342ab7e9c8927a196ea68baeaa271f355dd6f4afda6ce5e6c4bd924a6a31756440d7463
-
Filesize
2KB
MD5a30644f95791bc5748c016f0fca5fee8
SHA10f86fac6b14abc98b0e61862d6da00514de69609
SHA2560799a2fa1acb06fe3b31a4a88baa79c8496f9bd70f5ed9624dcfe536c63d45a9
SHA512919290990ff5e4e5753b8ce4f8c13174e83a1d8c087778739e8228ac84c9052fa46d59aa4943504bb6350bc0cca5e6038c2d83657680510a38e7b2c56c2a1543
-
Filesize
2KB
MD587c1aa88548d509c92dd2c3a47ed6082
SHA1cecdaa366633c8be3621f9f7ba9579eddaec77a8
SHA2565f1b40cc3ed09c7531d9f4be076a0a4eb34ff613589f24c3958c000a94914f9f
SHA5120125aa6502b2f7797f0f5cdbfd2cfa7236f1dd0a50b9fba176d4154a4553135894c199dccc1cdc16fa00359d86a9991bb338bfe546c18244392091959df6c957
-
Filesize
2KB
MD55469f414eee60238c0e456d6e0a99d9f
SHA133756fbd4904cb2453611ead2777ce5a597ecf4f
SHA25606a37d3afa5ba59db9a8e04621a070ddb61db20c5c5646860d65821002f1b597
SHA512a869e0016c89d7e591d1ffb997f12153e110a9eddfe7cca4a68947a52a69bfa031b712eb9e2a37502f5facdb15495d45c931f5c0acbd443f0d7f926fe060c97d
-
C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\Spin\Vertical\Up\Button\Disabled.png
Filesize2KB
MD506fee131a9b8b7c6f4da7d771a185eef
SHA1825deffa551bc776a5c24645e8733487bfd50ef5
SHA256e3e6bfa11770246ff77e5cc437683ce2add84ff58062d579b8a2cb6c5eba01c6
SHA51247226f05458d0ca869e22a2cdd4e1daf9ed09647b2bc4bec8c6c98e7c278017e54388a6ffd9ce1b66fd5f80d7afb89e42dc8a157837c2ff6188273cbc782114a
-
Filesize
2KB
MD5d5901f65adff767bc27f100714ca51c0
SHA155dc4bb03ca2a85f5243f003080d45f5163bd1ba
SHA2560097f2ce0952061d3d189b6b9bf14062286a0202fbae86eda47a05f7ce3eae4c
SHA512ca5e8ced14e11d3ee5eee7b015887ebb6962709a4184fa49502379d0581e96f329b5059eb8aa9bbb4c1259d565bd758afec334e33ca8a2879f862a25d8ef50be
-
Filesize
2KB
MD5d0844a878d1c1c54c8cc1691119b1430
SHA13c3cbf02465c6550fcc148b141a4ed4b7566da43
SHA256b6e29c89afd1f0e5aa16603ef5fa00b6693b53e8213eb2ad1a7fed17c26d93f8
SHA51231aac97099e0db8f40c17230176b2abba8be06ff7635a0456baa8fd952fb336c1e5c011c28e92d26ed1446a0dc30321b2e29fbef8ba935511798145353c95245
-
Filesize
2KB
MD5876c96e91757dfd57b02cea1bc9c9b5d
SHA130b8c8ee283360d9fc26e617d8b76cf17c58e82c
SHA256d07be670ea33f81cb46f86c5b7ee92cc789c60b4a1df0c9dc2d3fcc624baeead
SHA512b114be4305750b696518d087d5d67e363178845157ad2595dcaba7365566484ff7a553af32988d18875385e1513074faa64663951ef2de2a8b9ee2af73771e52
-
Filesize
2KB
MD596b7efc8433bf4569b5b6dccb34b78de
SHA13f1599ecd84a4ab3b70597818a668abc3bcf50e4
SHA2565a6952700281ed4ead0d9f402e4ba0a488b77321d8f5a81fd14907713b277493
SHA51223b738a5654af55a733fd5a4c2c13facfa76f2ad31c6bd902d2faf2aab9089dca1f829052489223a93da4c3be66d33267d307a9cb70c41ea696d91d33ab35711
-
Filesize
2KB
MD5c58b8facf10e84fbee14d6d9bfdff0fe
SHA1071a0de5b9ba973235ca79141a2e88ddc04089be
SHA256e48a8ac373fc40d658b7a8d1a81ff29f8edb7b2f14e511cf9f90c47b8eab46a0
SHA5120b95e92e1771bea67b4f4c75bdb824e4f4a4edef754c98647fa47561809c6dcab5e59d8c1fc69c9d25ca364b0e2ca1e05e689532eca14cd26b7010394ba0db52
-
Filesize
2KB
MD5c7cc31395a42db5849fe857a9d5baaa6
SHA138430e61fdbaa26bad852c6c33cdd6712141c787
SHA25681b9a2ef5e130cd37bc6e3cccd8748676c71e47a3499ea3b564bdeda76010739
SHA512da3aa8f0da4d2c6252ed7e5668bde8e71fb3fe3e3accfd81cd632d0c623170cc3ce3da5ab4a82a86f1f8b464c5e65ed51d246296607eaa623f4f2fa739227eba
-
Filesize
2KB
MD57cb9b18e572ef6e79f68bc92891d10b5
SHA112d3a0b1c6641132105d80e19336deb23ef42b93
SHA25613c24c080a6bce0e46a34989940f5eb61f4738f178f83e8ba2a9243ecc9c06fb
SHA5120b056641b0424bf8deab91c23b6254f565d3b988f0f38f192aee92ca6333ea64fbb0faaa8b2f7fd380afc9f43fc8e219a52ae13ef71d531e311791033455a979
-
Filesize
2KB
MD5d4ec174749ce689743e32b4ffce0903f
SHA162bf9d050d3aeb42634e57c473745645cc799b83
SHA25685caa90fd0af8e0167ac0cb6c178459d1a5d9028ba2e3f97612492694c194fa9
SHA5128d779efdbb5449da4336cb6a22bb2dbe5ef84db63ad9194cb99648ef6bd8b23e44a1033550231d5c1f744a44e339c242aff82fdd70bb9be1cb66837cd2204903
-
Filesize
2KB
MD51768e0d59437b898e315edd988fbac86
SHA18f40ceff3ecd1e54cd237f69579f152653d1232e
SHA2560110c91efe06013e437a2ea9d163a266e638e9383510841da53811fe9710a26c
SHA512f20356ada8fe22ef3ba5d1b38c3c2c1a88fee7004cc90b22015eee46197e8d92ffadcff31f8c6c73dac635e67b5370b93abf1242e79894644f8c17a005693a2c
-
Filesize
2KB
MD5a1894c59a527e8048a8864b8ab48885d
SHA11ecfa594ae41ace1acbca3e8e594cf2fa302e6fa
SHA2569270c4336f308f89671e41828dd7f304f484253c6cd3a5b091903bda07abb205
SHA512d83aad7e1b801fb044f1bf749c2873eb7383a898d8ec4a2c7af55c9007eb69331bb7b115bfe9916fe73473b15ce138415756fa189db480dc9cb9a96acdde0f3b
-
Filesize
2KB
MD53ffa47ef6c972c0f638791adf62fe958
SHA18c70fa32d88355a7fd5e08ea1c3d199d04e73d88
SHA2561997cf41e81fa4a61ec7c70596b97339bd8bfd0f7abd09cc110cea3bb2e7bac9
SHA51263250be6ca36cf511e613a79ffddbf368fed293031f12d1448ebca13a5e16aace515e3c121f96fa306e97def38cd9868d25b1008b84aed0695a994a0d1fe32c7
-
Filesize
2KB
MD51518363aaea75e9ee09f81d843836553
SHA1fccc4ada9b947b6188f4a0055a4b263413d1407c
SHA25617f51b74bad056f647868a79e6696d840a5091d8df8c5cb78362408633f1e788
SHA512541d4be11f15db2d706f594fd1fe74d215752ae38ab3598ef79d32d832006cf52367f9759c843d740aa609a4fcf9d725832ec4609c843b10a24df4798cc10910
-
Filesize
2KB
MD5221322f18f717f3fd3bf33789a93fbfa
SHA12c371c1341e6c5f0f3a50fa2b001fb300a1d9106
SHA256223cb7fb3bbfcae7f77478600c7232e86a5d88120901877a22d9611d1ee96ec5
SHA512d7339b7bb50b9b364af7f07f05f0b5dff1f90cc71918024ba6c5ee87242c66ab5cae3e3abd682f34740efe9249e3e09de5e6c39343eb0a5008daa0f5aa237ef4
-
Filesize
2KB
MD5d4ecd74707beb7b39dd62a2e99e1a136
SHA16aaa54c337cc983563caad1df5d3d20ff1490704
SHA256d595414e1eb0d97dc92466753719f2cfb585e3dcb0838ba5d063b8c08a4e181a
SHA512e6b36e6a5cd6a6baf6f7e57fc458821dc4d422da6156aa6237bf3cd4cc1e7fd9dd00577acdcb2621d053d716887c159f2b5a1dff67776e6d127dd2abed8947fa
-
Filesize
2KB
MD55e8ed62a7a14ae9829a19b201f11b01c
SHA103444481d4afaf2ce8b0c8c89b5fa1566b846c6f
SHA256ae51257c7b3913995c8945a92b3fe9e33a91f015d253dc37ecb8d1167ff68ed5
SHA512acecf003003939b313ee9c388d9a36754c999661e1b3362972ae5eb46de9c39971679b12d37b1a115cd9859430e211b3355d775debc0ab82bf86c0bf972a5b43
-
Filesize
2KB
MD506fda4afd539bbbc555c65895fdbddfd
SHA1081a7cab8f5641aa8a3f65d480521e0a67e32f18
SHA2564a5fdeccea9d48381bbf6187f29d359cb0b96cddf810ee8470205d200e0a39e9
SHA512e8f190362eb8490aa37883c2f1f1619e0d602ca33493f116f6b6f66096f892ba81cc76e301fc715a6410d1103b50aa25a43b45cfba119aa25c8481e0e95851fc
-
Filesize
781KB
MD5934c709bd060908c32cfada1a8cffad8
SHA1a4f0064f96294e3ce8fba38f7c38f7dd8a47f26f
SHA2561fb11df2cd57cf4baa297922286707e9c6fbf1aec83e28159562dd205ff1f845
SHA5122c8e1e5257bc488e822cfc2f488f826fe2682930d264a9f3f7ff59ab192d0b9e3c84d2420fb452996c664955cc7d18e2dd5f1c34bfb1c6803e569f712fde5122
-
Filesize
381KB
MD5430df7f67c9c3d11c6e9519e46ec8aea
SHA1decb7ee3d64d5542f17f7e27b8d1e99f3f7858ed
SHA256171da1a300b7d11814059371c90577d063bda81c1f2c089cf2baf3e2ba70c1cb
SHA5121bc9dabf28aab781a18c7aa4f2798cfa8cf2ebae1b87eeb817132c0567c9d9e117817f2d57b9f204483fec664d762f4964ef2f3563a6e02a1c719c78b4dfade1
-
Filesize
994KB
MD5f5dd097058c147cde4c5aa476b2f3f2c
SHA17d5495abccc8666d96b95d07ce4a6bb2f324b358
SHA256f278eeea9243fe647c01ee1cd9c6bd0f685b09ecfbfb43f0ac959bc6191c7042
SHA512a3b646ee1c18306e97443353b19ff8e87786ec3128879dea5797dacbde1c31e7d2b15e98c5898cd46f934307602ac0c32a54c372b14025a9ffe3fd2f1b3ccf8e
-
Filesize
12.8MB
MD5e161d933096852a3b7c39d80d4e04360
SHA161f20072dbe5d09938e08ac5132fce116205b39a
SHA256b2d7e13217290910a0b2a5961654f4204deb2652dc36cff8a501d938b40943be
SHA5123a93332cac5c36c6222402b2300cd5f96d4da10fd4211cee5a9c51f823404b7ece6517d2ad8928ebe490a2eb45b9329c65d2a05a97182ceb1031629021a8c34f
-
Filesize
1KB
MD5029d4fb0024beb2b24e9c1bd1c86ad61
SHA13e90108cd19b2d43e0e658f48950af9ffa713a15
SHA256f2ad4cb6f1650db31c8cbcbfa2a96052141d080b59b7a0414eedfddc25bea0d6
SHA512a9e8090813a09297caffee35ae31d3afee8b6a1deae1926835ed258b55464a1f7ab36eb74d387c27421e4737c6b6ceee9fd244c06e818b0abb6a5bdf8c85712e
-
Filesize
52KB
MD587eddceb9d22c129e386e652c5cda521
SHA10447ff30dfe7a5234624ea21a6947e88f6e80054
SHA256792d768258eddaec86d9263e51ff64ee6f0bed2f28205f535ee150e94f8d6a2b
SHA51283ae55dde165165b8001463cb3c4b3713ddc5108a68af5289055bdb10b2c10f1338e2eb6337703edc299e375f9c9f04e757d92eee535994ab61c841e2dff78ec
-
Filesize
683KB
MD590ddae50e8927220895d082857c48ffe
SHA16accf41364819e9eccb06249d9b54fce8a95dfa2
SHA25660ecee7888c040c289e791e7a1c25a6de5c9ae18f17238faaacda94f2aca3d23
SHA5120d1c1a0662c76a53eed8afefa0a85a90a3282b885a4881e8dabb112482306ff020dcf6bc4c50701d04fdaebb1837deac9dfc3920ac6a638819e9105edee3a3aa