Analysis

  • max time kernel
    81s
  • max time network
    82s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/04/2024, 17:05

General

  • Target

    installvectoriangiotto.exe

  • Size

    8.2MB

  • MD5

    cac922715811ecd8ae5b0a673be94a7c

  • SHA1

    16cb69d612ea4e14b68e35c91fcb166fac7826a8

  • SHA256

    0ddb96c91f72829318397eea626677b8bf9f593334e12a29cee22e7f87cdc8a3

  • SHA512

    3f0578cebdf127bce7815987bc8efd45bbd174c1c3d9f08877343df38fa476c116c447bae63502c01b5fe1eeea3f507e7ce2da67a1b7830d6a81f400e1a0236a

  • SSDEEP

    196608:OuzAItsUZNgaTR6gTZnYXtQJyCmXimQim8BN8oEG8XqXwfy:pcwga6gTVYX68C8imQ8BkG8Xkwq

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 5 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 30 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs
  • Suspicious use of WriteProcessMemory 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\installvectoriangiotto.exe
    "C:\Users\Admin\AppData\Local\Temp\installvectoriangiotto.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1952
    • C:\Users\Admin\AppData\Local\Temp\is-7UJ6E.tmp\installvectoriangiotto.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-7UJ6E.tmp\installvectoriangiotto.tmp" /SL5="$50066,8294085,53760,C:\Users\Admin\AppData\Local\Temp\installvectoriangiotto.exe"
      2⤵
      • Executes dropped EXE
      • Drops file in Program Files directory
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:1440
      • C:\Program Files (x86)\Vectorian Inc\Giotto\vectoriangiotto.exe
        "C:\Program Files (x86)\Vectorian Inc\Giotto\vectoriangiotto.exe"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Modifies registry class
        • Suspicious use of SetWindowsHookEx
        PID:1076

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond.xml

    Filesize

    97KB

    MD5

    e2f9619cd61f25642ef36bc24a66402f

    SHA1

    09b98c69734a343a2730f4552653334b63963f82

    SHA256

    32939671b0eec9d1a56b6dcd7b9c8c51e8a279ceebf826ea10e8c896712ff295

    SHA512

    55509bdad49d7acf90a99e0c537a77a5382a9061d56149282cdb11b6ca07427052fa414a38cc995ad823fc979894433f6974789d352663bdb4bd2ec25c66f107

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\CheckAndRadio\Check\Disabled\Checked.png

    Filesize

    3KB

    MD5

    eaa0d3a8cba2cd65864bfa50211a540e

    SHA1

    6cac739b645b25fdf39365bb6a4152897ebbac27

    SHA256

    78e8e4c8e29ec127b33a374e17be37d31658da36e41d9e84eff0ca864f86b6e7

    SHA512

    b7a764bfaca5ca7355b4f8a159043bbc65d07b605df611e024367201054cd33bcc13ba2ec2f53db84f082ea9cab6b6108b9c19692bea0a9b4757cd9614c5a4ab

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\CheckAndRadio\Check\Disabled\Indeterminate.png

    Filesize

    2KB

    MD5

    a4590ab1b674d7343bd065bbf3f83565

    SHA1

    41ad424420ea4667bc4ff6a3978792e0eaf4cf7b

    SHA256

    3bc3e80282ce12317902baf0d5e572cb69919bcdd9e4514e1d5caeb2978573de

    SHA512

    b745baff8c79fca46b229589d6e05aa332008e443a67c3ae8e4621ca561f0e511755e4bdbfbdbcdaa54a1e1f851054ce0a08dda0fd64b70e1ab42fcd3948eb7b

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\CheckAndRadio\Check\Disabled\Unchecked.png

    Filesize

    2KB

    MD5

    1278b847c4c1954086b585c79abb70c7

    SHA1

    9d822ecb7bc30c9bb62b89d383f62b039ef8ed41

    SHA256

    e51984b90292234007005f18eb78c8ccfc87e94cacce8a79551138d31c34a108

    SHA512

    e5d8cf966a8923a1395c75be9ba8ef6f8244d1623fbe781171061370e595903460526f47fcf8426a326d39df29c1f21d0ce3b173936beb53d27b6026d2fa3c8e

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\CheckAndRadio\Check\Hover\Checked.png

    Filesize

    3KB

    MD5

    40f6f047f19c9f74f0b575761a67b4fc

    SHA1

    8d9cbbeb2b57055d8a64f265933d0d0ca9f31f1a

    SHA256

    c3d5d5696d98ca0253f50a40015560c9398f7888bc06d61fb6ab6b8f1a4589bf

    SHA512

    8bb7761452b381a4977f19b7d7adf7d0be2fae99a61bf5e8324b18124ab14201be2ef6b3d0598040a1ac32995e44a1962812096dfce8ff692023f0af00f4c365

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\CheckAndRadio\Check\Hover\Unchecked.png

    Filesize

    2KB

    MD5

    839b08025c38ee4c7c50936f325a1d0c

    SHA1

    80a22bce500cb5ec8f3cfb4155d45d9b0695acc0

    SHA256

    2577b38fa879fb275f0e796496e19d3e8e8188a65dc920ac253fd20a9678cc21

    SHA512

    6378997e5dce08b46dd93179880aa2e9c2fbe44b817aa0fc376eb5260198e5fc280f5f74bd5f200cd69a381898fc4f3e4017f187e4f87187569e5dc69488cadd

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\CheckAndRadio\Check\Normal\Checked.png

    Filesize

    3KB

    MD5

    78efb85f0c981e53e4c8db4f8b60cf01

    SHA1

    a16540250096e19da0bf1eb21bcd9f9eeb1266f1

    SHA256

    4faaff3b4365ee67d2acd683460851fc1460ae040e739ee9bf2e27d3ab0b01c3

    SHA512

    bae294db28bc414edf70aebdb259cd8881bf939a8107f85633855e69649a7cb56ecf52de2d941421f587a591cc96fb436721ab65110728fd39364a815b55c6b7

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\CheckAndRadio\Check\Normal\Indeterminate.png

    Filesize

    2KB

    MD5

    5dc26d882642dd140fc613b8391dc585

    SHA1

    fc63c1793a32a0dcbb732ce64fd8c5c0d9561056

    SHA256

    689979707f67656cfe0fd698f7fc871366f0471cfcf431ce5aaf34b0b2629877

    SHA512

    b2b0f726cbf73efba6da364228f1e48d1b36e7d8532360c244899e3bfbebbdb782005cd597eb0592ee92c632aca6862ff8f6027435900f3bb4e2a19d39be4b73

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\CheckAndRadio\Check\Normal\Unchecked.png

    Filesize

    2KB

    MD5

    8c143c4a1486b0077bd25324117f2665

    SHA1

    62c344e2dcb4e2aef8f21f9f7f81a7100eda7247

    SHA256

    42d283daf94f423e0d54178155185daf3bc2a97634ef7f5805fe5512194ee4aa

    SHA512

    0776db7e2e52a0fe283f09ca0cac3a11815336c5b11abc6d5809ec356f74fb9a91cdaf15b354f650fce9c8f152cab183d3e0a71c45af0c3d3c854a8617b371e9

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\CheckAndRadio\Check\Pressed\Checked.png

    Filesize

    3KB

    MD5

    4ba778772bf52d848fbcfe360bc21cef

    SHA1

    a2854afb5d0484bd8db8c7d6a981ea0e50ef1e21

    SHA256

    a752cb8c04dd7a3f5e3f17efc4a63576de36e43b36b228d14d23f0663c6c1024

    SHA512

    02c381b20243b378bc4ca45c112a0353c1e415cd61733309c25e4d0b02b1b0730962ac5cc90f2781f1b3bb81a3bae6938f0be6f4b7393a94b021b690d22f55d1

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\CheckAndRadio\Check\Pressed\Unchecked.png

    Filesize

    3KB

    MD5

    8f800d8547547a780e39aa4541744593

    SHA1

    012c7a54064553826d69108125ce54bba8d6d44d

    SHA256

    7378397396239b306365e575b18192481a28dce67d90ce23723e04d2ea5c9c2b

    SHA512

    f2c7ed9f6f2d962ec55da9026a36fd795214989e71c4c3a274b1d1777a23432f57277ccb88dbbcaef4f921170e27a8cbdfde8a3591c6365bcc51209aa2851356

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\ControlPushButton\is-A8N80.tmp

    Filesize

    3KB

    MD5

    ea30915b56acca9d59135cafb630439d

    SHA1

    68fcebada4f93948f16d7ccdd4b5e519a46b9d2b

    SHA256

    807a7679dea184110f01cbbaa2ab067e602900ebcd8fef6000e34ac56782acbd

    SHA512

    515de86bbf5c9e5f5f45101dfe12138a49b8ef1aac624e19fb9761dc06a5f1559924d2732fb146840c470aff3aa54e72e70d48d6255b53b382db305950a0c513

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\MenuBarPushButton\is-GF9GQ.tmp

    Filesize

    3KB

    MD5

    c1c12b389502488003e1ce132f0996e6

    SHA1

    641c052e1efde8e4cbfd10cd8a28fee549627ba0

    SHA256

    481df1ef7569652828a96aff173740789ef77bf1dcb2f7d076408a18d1c4dcf8

    SHA512

    edede2e3a9fefe7588d0563c87fed879b2e12e857163aacbea7b77ca0172afb32e9267f65a39ca55915196ed89a256715b0eb66769029f713825d3080526fd90

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\MenuBarPushButton\is-UC19L.tmp

    Filesize

    2KB

    MD5

    c1caf082fb636d705f177be323a276af

    SHA1

    db08bc1c4fd545be8133cddeaefd0523d551cf2c

    SHA256

    a716fd76d4d6af760888d9027971ff74502e8ab59db2390ee883a597c7ff6aef

    SHA512

    68858f257b570b9138a8fb5b06d2fb66bc45ec4000fb12442f2555a85614776108e00657cfe915573aa5ee2f8e8303687e247c47dc68ddee05be8e01e3875c22

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\Spin\Horizontal\Left\Arrow\Disabled.png

    Filesize

    2KB

    MD5

    5e09cadf7c39d419891f9b8ce919cef4

    SHA1

    12cb55a60ea8dcf67a5ef1f57f07cb376bef8a95

    SHA256

    d52ceeb965d9baed0509a8b971bba65636db93ac976d98151ef9534eb9d9ea1d

    SHA512

    121007ef705116a0271371cb64bf4b7ca6ba5980d690ec0ceaf3435f2153d98fc8fb02b58fb052fef8656e0859cf74ce4062a3626b507263e084ab7fd1198c65

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\Spin\Horizontal\Left\Arrow\Hover.png

    Filesize

    2KB

    MD5

    aa7f58d84ba983aba916fefd27be7196

    SHA1

    fc6f179d4d4e89a9c744edaa90fcda7982839c6a

    SHA256

    7fdd0e2255694516207655ed0877619af7f847d4908e103dcc43d043b0d5a21a

    SHA512

    923870a18c23b81ed94042d5984a01273cd6534faf5cd8e66d57efc5329b516aeea6e8fff9c320401837a1af46318c97fd0bb75f36d824189b7e8640c8999d9c

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\Spin\Horizontal\Left\Arrow\Pressed.png

    Filesize

    2KB

    MD5

    538ba83bb74e444b81646f4eabb0eb06

    SHA1

    29e5aa969bd8d765a4c9cc606bd0519852afe603

    SHA256

    2d5405087d0e0dea55121f72ad059c37e5b9ae4bebbdf7b17fbaec5cd04fd11a

    SHA512

    d532fdab4a28c9af75c8f2721888048dbe619b39f85f027b98061c2f5af90455b48b5334efce0f9cc5eb3e7b6ab83d47882d5a8dcf0047d98431e4a6c19ac54b

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\Spin\Horizontal\Right\Arrow\Disabled.png

    Filesize

    2KB

    MD5

    90c58f1ef6fd9401eef308c14efa764c

    SHA1

    c13addf0b2c2bdbed55ddc691e2f938315f4626a

    SHA256

    f45b057c40797ead51156ebbd9552e229ebfd873c91f003ba24a6523ae7f5642

    SHA512

    90f53f5dd05b1613ad9443bc03fe808cd7a364793958694c6f9c8ce26f8c1d71d2da1827186851517833c8bc7edf904651d77a2f84496a4b76a8ec7bc1fa4f70

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\Spin\Horizontal\Right\Arrow\Hover.png

    Filesize

    2KB

    MD5

    e3952098515ecb3b865d64dea21578a8

    SHA1

    a1b5791051965d3e728d099dcd7f6b37d4f493c5

    SHA256

    feb7da4a1df11f9b9d62dbc919d5f62ed1d69863811b9fe0d683f8ef9d55c4fd

    SHA512

    41936bdba26e15d912fc597e0df78883fe68861fd0886e5fcabe03d03e648eb6afe471e91dc801cdb34036654525a32a3011eb71b6b1b78eebaa9545c450476f

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\Spin\Horizontal\Right\Arrow\Pressed.png

    Filesize

    2KB

    MD5

    61ae60fa59550e6407d89b31a245f419

    SHA1

    78516b3f2056927a7934aac91c1e45b03e47bd01

    SHA256

    8c95d49ad52ba6b25e5dd000efe2ad402bca5c45747fed298ba987af0d83ca52

    SHA512

    a9b9b542d30031a84683425fb8b32722333e52c62f16108fbb16a6dd278d4fee530e40bc7bec07b531d9fe10fff641a4d4516d3207da947d048b2b1fb8f12dfc

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\Spin\Horizontal\Right\Button\Disabled.png

    Filesize

    2KB

    MD5

    dad1a6d5125952bcdb324a7d6b66f9fb

    SHA1

    77a625067bbd8a65fee82b509ed4a7ccd63d848d

    SHA256

    42c8d4e1fae291771435773c2b773426e370637e084179756edb53a8f74fbbda

    SHA512

    538a1def531c85aa0f2af269bd0507a3ce90dac03441ec487d6cf7cb78f53bcba4a016b3fd146579d814ed2d89d5a1e02a47405507e946380d24e19068788e15

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\Spin\Vertical\Down\Arrow\Disabled.png

    Filesize

    2KB

    MD5

    04612e4c86486a65e188233052f9a921

    SHA1

    ca2a53ab70726a9c7351ec90f91960bbd55e59a5

    SHA256

    47649f716e43c9410a534708e5a3949a96f931f33586c548367312f36fb343c9

    SHA512

    7edcd742a23ddf2e71e835d790a1bb8e0e68deb142388dd21893b851127c3b981154ae05832fbccca53146531987ec7ba5ea066f0e7cbd486ea81782d9fd2b3f

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\Spin\Vertical\Down\Arrow\Hover.png

    Filesize

    2KB

    MD5

    1179e238407e428217ed27add2de304a

    SHA1

    e96a32de72ee6e218ae8197a338702f9185b1132

    SHA256

    d30766accc30b036fe8b5d8786764c8e30c936062659cc4fe2480abbfc5c2572

    SHA512

    0a98c766f574f8074b3570d08dc1c4fd4b0c7d27a70d156510f20c9fbeccf294affaf288b32b803583cc96d80858b40da209464447d639871b584ef27c045ed8

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\Spin\Vertical\Down\Arrow\Pressed.png

    Filesize

    2KB

    MD5

    6cd8351062436bbac4af647f9edaaf37

    SHA1

    050bb2ce8fe7a3eec4c47daf91dde638704c81fa

    SHA256

    9c72691a6358a28fde392dfa474ed23db0a9b5ff3c1c39dfc48cd78766c518f1

    SHA512

    8ff8ab5f4ba5b612f14ea5e3589bcdb753f49916af5b47cc0f059963509e1a1fe0358b1134ee38e0d8cc2fc9a59de5e64c9a7526565ba2417af35c23c8a9b540

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\Spin\Vertical\Down\Button\Hover.png

    Filesize

    2KB

    MD5

    e09067b396c51183a48776a411d73f3d

    SHA1

    8c737815bad644a6ae98f63ab7149085a68fe741

    SHA256

    4a30fbb676bbcc264bd038d83c1c0314e9cd2c88d709820d94cfc73a619f70f4

    SHA512

    7db3f4b83c3125d17a2fa418bab053be594e6c3674dfca2a8adb2f5a10428b671c8ddef94868ea76263b8061009a58cc7a7060b35ecd0a6a24cfe028efd53a0e

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\Spin\Vertical\Down\Button\Normal.png

    Filesize

    2KB

    MD5

    b0e24d44f14bee51dba679370c0f0793

    SHA1

    966b3859b49a5efc2b935e229bfcd5fa76211fc3

    SHA256

    8249d2bb9d3df09e38ab6ba6fe59c5d7505ea4e4b11d34b739bc72f9ce217490

    SHA512

    54176b8b89d0004047c16b976a174f77fe1e7e55f02c2d5cbe3ad6c571746c6e653dba892e9b9b604d59c5a4deb9a04aeb4e11cf74939b7e87ddc88f2eca5574

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\Spin\Vertical\Down\Button\Pressed.png

    Filesize

    2KB

    MD5

    a4829291267be89cfede1f668835a809

    SHA1

    90a8dba20fb3552200b847e29dbc4cace1e77eff

    SHA256

    93b8ce9561374f4a27e335579b15b7c7e1976ba1d85b68a030164b382f8f215f

    SHA512

    f4b382b4bcc8110a49b861c42911057285d66a3fdc7e1deaecffe10d8342ab7e9c8927a196ea68baeaa271f355dd6f4afda6ce5e6c4bd924a6a31756440d7463

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\Spin\Vertical\Up\Arrow\Disabled.png

    Filesize

    2KB

    MD5

    a30644f95791bc5748c016f0fca5fee8

    SHA1

    0f86fac6b14abc98b0e61862d6da00514de69609

    SHA256

    0799a2fa1acb06fe3b31a4a88baa79c8496f9bd70f5ed9624dcfe536c63d45a9

    SHA512

    919290990ff5e4e5753b8ce4f8c13174e83a1d8c087778739e8228ac84c9052fa46d59aa4943504bb6350bc0cca5e6038c2d83657680510a38e7b2c56c2a1543

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\Spin\Vertical\Up\Arrow\Hover.png

    Filesize

    2KB

    MD5

    87c1aa88548d509c92dd2c3a47ed6082

    SHA1

    cecdaa366633c8be3621f9f7ba9579eddaec77a8

    SHA256

    5f1b40cc3ed09c7531d9f4be076a0a4eb34ff613589f24c3958c000a94914f9f

    SHA512

    0125aa6502b2f7797f0f5cdbfd2cfa7236f1dd0a50b9fba176d4154a4553135894c199dccc1cdc16fa00359d86a9991bb338bfe546c18244392091959df6c957

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\Spin\Vertical\Up\Arrow\Pressed.png

    Filesize

    2KB

    MD5

    5469f414eee60238c0e456d6e0a99d9f

    SHA1

    33756fbd4904cb2453611ead2777ce5a597ecf4f

    SHA256

    06a37d3afa5ba59db9a8e04621a070ddb61db20c5c5646860d65821002f1b597

    SHA512

    a869e0016c89d7e591d1ffb997f12153e110a9eddfe7cca4a68947a52a69bfa031b712eb9e2a37502f5facdb15495d45c931f5c0acbd443f0d7f926fe060c97d

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\Spin\Vertical\Up\Button\Disabled.png

    Filesize

    2KB

    MD5

    06fee131a9b8b7c6f4da7d771a185eef

    SHA1

    825deffa551bc776a5c24645e8733487bfd50ef5

    SHA256

    e3e6bfa11770246ff77e5cc437683ce2add84ff58062d579b8a2cb6c5eba01c6

    SHA512

    47226f05458d0ca869e22a2cdd4e1daf9ed09647b2bc4bec8c6c98e7c278017e54388a6ffd9ce1b66fd5f80d7afb89e42dc8a157837c2ff6188273cbc782114a

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\Spin\Vertical\Up\Button\Hover.png

    Filesize

    2KB

    MD5

    d5901f65adff767bc27f100714ca51c0

    SHA1

    55dc4bb03ca2a85f5243f003080d45f5163bd1ba

    SHA256

    0097f2ce0952061d3d189b6b9bf14062286a0202fbae86eda47a05f7ce3eae4c

    SHA512

    ca5e8ced14e11d3ee5eee7b015887ebb6962709a4184fa49502379d0581e96f329b5059eb8aa9bbb4c1259d565bd758afec334e33ca8a2879f862a25d8ef50be

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\Spin\Vertical\Up\Button\Normal.png

    Filesize

    2KB

    MD5

    d0844a878d1c1c54c8cc1691119b1430

    SHA1

    3c3cbf02465c6550fcc148b141a4ed4b7566da43

    SHA256

    b6e29c89afd1f0e5aa16603ef5fa00b6693b53e8213eb2ad1a7fed17c26d93f8

    SHA512

    31aac97099e0db8f40c17230176b2abba8be06ff7635a0456baa8fd952fb336c1e5c011c28e92d26ed1446a0dc30321b2e29fbef8ba935511798145353c95245

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Button\Spin\Vertical\Up\Button\Pressed.png

    Filesize

    2KB

    MD5

    876c96e91757dfd57b02cea1bc9c9b5d

    SHA1

    30b8c8ee283360d9fc26e617d8b76cf17c58e82c

    SHA256

    d07be670ea33f81cb46f86c5b7ee92cc789c60b4a1df0c9dc2d3fcc624baeead

    SHA512

    b114be4305750b696518d087d5d67e363178845157ad2595dcaba7365566484ff7a553af32988d18875385e1513074faa64663951ef2de2a8b9ee2af73771e52

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\ComboBox\DropDownArrow\Disabled.png

    Filesize

    2KB

    MD5

    96b7efc8433bf4569b5b6dccb34b78de

    SHA1

    3f1599ecd84a4ab3b70597818a668abc3bcf50e4

    SHA256

    5a6952700281ed4ead0d9f402e4ba0a488b77321d8f5a81fd14907713b277493

    SHA512

    23b738a5654af55a733fd5a4c2c13facfa76f2ad31c6bd902d2faf2aab9089dca1f829052489223a93da4c3be66d33267d307a9cb70c41ea696d91d33ab35711

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\ComboBox\DropDownArrow\Normal.png

    Filesize

    2KB

    MD5

    c58b8facf10e84fbee14d6d9bfdff0fe

    SHA1

    071a0de5b9ba973235ca79141a2e88ddc04089be

    SHA256

    e48a8ac373fc40d658b7a8d1a81ff29f8edb7b2f14e511cf9f90c47b8eab46a0

    SHA512

    0b95e92e1771bea67b4f4c75bdb824e4f4a4edef754c98647fa47561809c6dcab5e59d8c1fc69c9d25ca364b0e2ca1e05e689532eca14cd26b7010394ba0db52

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\ComboBox\DropDownButton\Disabled.png

    Filesize

    2KB

    MD5

    c7cc31395a42db5849fe857a9d5baaa6

    SHA1

    38430e61fdbaa26bad852c6c33cdd6712141c787

    SHA256

    81b9a2ef5e130cd37bc6e3cccd8748676c71e47a3499ea3b564bdeda76010739

    SHA512

    da3aa8f0da4d2c6252ed7e5668bde8e71fb3fe3e3accfd81cd632d0c623170cc3ce3da5ab4a82a86f1f8b464c5e65ed51d246296607eaa623f4f2fa739227eba

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\ComboBox\DropDownButton\Hover.png

    Filesize

    2KB

    MD5

    7cb9b18e572ef6e79f68bc92891d10b5

    SHA1

    12d3a0b1c6641132105d80e19336deb23ef42b93

    SHA256

    13c24c080a6bce0e46a34989940f5eb61f4738f178f83e8ba2a9243ecc9c06fb

    SHA512

    0b056641b0424bf8deab91c23b6254f565d3b988f0f38f192aee92ca6333ea64fbb0faaa8b2f7fd380afc9f43fc8e219a52ae13ef71d531e311791033455a979

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\ComboBox\DropDownButton\Normal.png

    Filesize

    2KB

    MD5

    d4ec174749ce689743e32b4ffce0903f

    SHA1

    62bf9d050d3aeb42634e57c473745645cc799b83

    SHA256

    85caa90fd0af8e0167ac0cb6c178459d1a5d9028ba2e3f97612492694c194fa9

    SHA512

    8d779efdbb5449da4336cb6a22bb2dbe5ef84db63ad9194cb99648ef6bd8b23e44a1033550231d5c1f744a44e339c242aff82fdd70bb9be1cb66837cd2204903

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\ComboBox\DropDownButton\Pressed.png

    Filesize

    2KB

    MD5

    1768e0d59437b898e315edd988fbac86

    SHA1

    8f40ceff3ecd1e54cd237f69579f152653d1232e

    SHA256

    0110c91efe06013e437a2ea9d163a266e638e9383510841da53811fe9710a26c

    SHA512

    f20356ada8fe22ef3ba5d1b38c3c2c1a88fee7004cc90b22015eee46197e8d92ffadcff31f8c6c73dac635e67b5370b93abf1242e79894644f8c17a005693a2c

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\ComboBox\Frame\Frame.png

    Filesize

    2KB

    MD5

    a1894c59a527e8048a8864b8ab48885d

    SHA1

    1ecfa594ae41ace1acbca3e8e594cf2fa302e6fa

    SHA256

    9270c4336f308f89671e41828dd7f304f484253c6cd3a5b091903bda07abb205

    SHA512

    d83aad7e1b801fb044f1bf749c2873eb7383a898d8ec4a2c7af55c9007eb69331bb7b115bfe9916fe73473b15ce138415756fa189db480dc9cb9a96acdde0f3b

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Frame\ControlFrame\Inactive\is-B7AT2.tmp

    Filesize

    2KB

    MD5

    3ffa47ef6c972c0f638791adf62fe958

    SHA1

    8c70fa32d88355a7fd5e08ea1c3d199d04e73d88

    SHA256

    1997cf41e81fa4a61ec7c70596b97339bd8bfd0f7abd09cc110cea3bb2e7bac9

    SHA512

    63250be6ca36cf511e613a79ffddbf368fed293031f12d1448ebca13a5e16aace515e3c121f96fa306e97def38cd9868d25b1008b84aed0695a994a0d1fe32c7

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\ImageCollection\GroupBoxFrame.png

    Filesize

    2KB

    MD5

    1518363aaea75e9ee09f81d843836553

    SHA1

    fccc4ada9b947b6188f4a0055a4b263413d1407c

    SHA256

    17f51b74bad056f647868a79e6696d840a5091d8df8c5cb78362408633f1e788

    SHA512

    541d4be11f15db2d706f594fd1fe74d215752ae38ab3598ef79d32d832006cf52367f9759c843d740aa609a4fcf9d725832ec4609c843b10a24df4798cc10910

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Tab\is-7UCGB.tmp

    Filesize

    2KB

    MD5

    221322f18f717f3fd3bf33789a93fbfa

    SHA1

    2c371c1341e6c5f0f3a50fa2b001fb300a1d9106

    SHA256

    223cb7fb3bbfcae7f77478600c7232e86a5d88120901877a22d9611d1ee96ec5

    SHA512

    d7339b7bb50b9b364af7f07f05f0b5dff1f90cc71918024ba6c5ee87242c66ab5cae3e3abd682f34740efe9249e3e09de5e6c39343eb0a5008daa0f5aa237ef4

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Tab\is-83117.tmp

    Filesize

    2KB

    MD5

    d4ecd74707beb7b39dd62a2e99e1a136

    SHA1

    6aaa54c337cc983563caad1df5d3d20ff1490704

    SHA256

    d595414e1eb0d97dc92466753719f2cfb585e3dcb0838ba5d063b8c08a4e181a

    SHA512

    e6b36e6a5cd6a6baf6f7e57fc458821dc4d422da6156aa6237bf3cd4cc1e7fd9dd00577acdcb2621d053d716887c159f2b5a1dff67776e6d127dd2abed8947fa

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Tab\is-L65RR.tmp

    Filesize

    2KB

    MD5

    5e8ed62a7a14ae9829a19b201f11b01c

    SHA1

    03444481d4afaf2ce8b0c8c89b5fa1566b846c6f

    SHA256

    ae51257c7b3913995c8945a92b3fe9e33a91f015d253dc37ecb8d1167ff68ed5

    SHA512

    acecf003003939b313ee9c388d9a36754c999661e1b3362972ae5eb46de9c39971679b12d37b1a115cd9859430e211b3355d775debc0ab82bf86c0bf972a5b43

  • C:\Program Files (x86)\Vectorian Inc\Giotto\BlackDiamond\Tab\is-VUR6R.tmp

    Filesize

    2KB

    MD5

    06fda4afd539bbbc555c65895fdbddfd

    SHA1

    081a7cab8f5641aa8a3f65d480521e0a67e32f18

    SHA256

    4a5fdeccea9d48381bbf6187f29d359cb0b96cddf810ee8470205d200e0a39e9

    SHA512

    e8f190362eb8490aa37883c2f1f1619e0d602ca33493f116f6b6f66096f892ba81cc76e301fc715a6410d1103b50aa25a43b45cfba119aa25c8481e0e95851fc

  • C:\Program Files (x86)\Vectorian Inc\Giotto\CrashRpt.dll

    Filesize

    781KB

    MD5

    934c709bd060908c32cfada1a8cffad8

    SHA1

    a4f0064f96294e3ce8fba38f7c38f7dd8a47f26f

    SHA256

    1fb11df2cd57cf4baa297922286707e9c6fbf1aec83e28159562dd205ff1f845

    SHA512

    2c8e1e5257bc488e822cfc2f488f826fe2682930d264a9f3f7ff59ab192d0b9e3c84d2420fb452996c664955cc7d18e2dd5f1c34bfb1c6803e569f712fde5122

  • C:\Program Files (x86)\Vectorian Inc\Giotto\SciLexer.dll

    Filesize

    381KB

    MD5

    430df7f67c9c3d11c6e9519e46ec8aea

    SHA1

    decb7ee3d64d5542f17f7e27b8d1e99f3f7858ed

    SHA256

    171da1a300b7d11814059371c90577d063bda81c1f2c089cf2baf3e2ba70c1cb

    SHA512

    1bc9dabf28aab781a18c7aa4f2798cfa8cf2ebae1b87eeb817132c0567c9d9e117817f2d57b9f204483fec664d762f4964ef2f3563a6e02a1c719c78b4dfade1

  • C:\Program Files (x86)\Vectorian Inc\Giotto\dbghelp.dll

    Filesize

    994KB

    MD5

    f5dd097058c147cde4c5aa476b2f3f2c

    SHA1

    7d5495abccc8666d96b95d07ce4a6bb2f324b358

    SHA256

    f278eeea9243fe647c01ee1cd9c6bd0f685b09ecfbfb43f0ac959bc6191c7042

    SHA512

    a3b646ee1c18306e97443353b19ff8e87786ec3128879dea5797dacbde1c31e7d2b15e98c5898cd46f934307602ac0c32a54c372b14025a9ffe3fd2f1b3ccf8e

  • C:\Program Files (x86)\Vectorian Inc\Giotto\vectoriangiotto.exe

    Filesize

    12.8MB

    MD5

    e161d933096852a3b7c39d80d4e04360

    SHA1

    61f20072dbe5d09938e08ac5132fce116205b39a

    SHA256

    b2d7e13217290910a0b2a5961654f4204deb2652dc36cff8a501d938b40943be

    SHA512

    3a93332cac5c36c6222402b2300cd5f96d4da10fd4211cee5a9c51f823404b7ece6517d2ad8928ebe490a2eb45b9329c65d2a05a97182ceb1031629021a8c34f

  • C:\Program Files (x86)\Vectorian Inc\Giotto\vectoriangiotto.ini

    Filesize

    1KB

    MD5

    029d4fb0024beb2b24e9c1bd1c86ad61

    SHA1

    3e90108cd19b2d43e0e658f48950af9ffa713a15

    SHA256

    f2ad4cb6f1650db31c8cbcbfa2a96052141d080b59b7a0414eedfddc25bea0d6

    SHA512

    a9e8090813a09297caffee35ae31d3afee8b6a1deae1926835ed258b55464a1f7ab36eb74d387c27421e4737c6b6ceee9fd244c06e818b0abb6a5bdf8c85712e

  • C:\Program Files (x86)\Vectorian Inc\Giotto\zlib.dll

    Filesize

    52KB

    MD5

    87eddceb9d22c129e386e652c5cda521

    SHA1

    0447ff30dfe7a5234624ea21a6947e88f6e80054

    SHA256

    792d768258eddaec86d9263e51ff64ee6f0bed2f28205f535ee150e94f8d6a2b

    SHA512

    83ae55dde165165b8001463cb3c4b3713ddc5108a68af5289055bdb10b2c10f1338e2eb6337703edc299e375f9c9f04e757d92eee535994ab61c841e2dff78ec

  • C:\Users\Admin\AppData\Local\Temp\is-7UJ6E.tmp\installvectoriangiotto.tmp

    Filesize

    683KB

    MD5

    90ddae50e8927220895d082857c48ffe

    SHA1

    6accf41364819e9eccb06249d9b54fce8a95dfa2

    SHA256

    60ecee7888c040c289e791e7a1c25a6de5c9ae18f17238faaacda94f2aca3d23

    SHA512

    0d1c1a0662c76a53eed8afefa0a85a90a3282b885a4881e8dabb112482306ff020dcf6bc4c50701d04fdaebb1837deac9dfc3920ac6a638819e9105edee3a3aa

  • memory/1076-1027-0x0000000020000000-0x0000000020112000-memory.dmp

    Filesize

    1.1MB

  • memory/1076-1026-0x0000000001420000-0x0000000001447000-memory.dmp

    Filesize

    156KB

  • memory/1076-1032-0x00000000022A0000-0x0000000002304000-memory.dmp

    Filesize

    400KB

  • memory/1076-1143-0x0000000020000000-0x0000000020112000-memory.dmp

    Filesize

    1.1MB

  • memory/1076-1086-0x0000000020000000-0x0000000020112000-memory.dmp

    Filesize

    1.1MB

  • memory/1440-1013-0x0000000000400000-0x00000000004BA000-memory.dmp

    Filesize

    744KB

  • memory/1440-17-0x0000000000590000-0x0000000000591000-memory.dmp

    Filesize

    4KB

  • memory/1440-7-0x0000000000590000-0x0000000000591000-memory.dmp

    Filesize

    4KB

  • memory/1440-14-0x0000000000400000-0x00000000004BA000-memory.dmp

    Filesize

    744KB

  • memory/1440-1028-0x0000000000400000-0x00000000004BA000-memory.dmp

    Filesize

    744KB

  • memory/1440-16-0x0000000000400000-0x00000000004BA000-memory.dmp

    Filesize

    744KB

  • memory/1952-0-0x0000000000400000-0x0000000000414000-memory.dmp

    Filesize

    80KB

  • memory/1952-2-0x0000000000400000-0x0000000000414000-memory.dmp

    Filesize

    80KB

  • memory/1952-1034-0x0000000000400000-0x0000000000414000-memory.dmp

    Filesize

    80KB

  • memory/1952-13-0x0000000000400000-0x0000000000414000-memory.dmp

    Filesize

    80KB