Polystat-1[.]0-Setup[.]exe

resource
Polystat-1.0-Setup.exe
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/UserInfo.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack001/Polystat.exe
unpack001/Uninstall Polystat.exe
unpack002/$PLUGINSDIR/System.dll
unpack002/$PLUGINSDIR/UserInfo.dll
unpack002/$PLUGINSDIR/nsDialogs.dll

Polystat-1.0-Setup.exe

IMPHASH 1f23f452093b5c1ff091a2f9fb4fa3e9
SHA256 671da61a2aa8db194172d8842d15094abfea4757b79ff7a039c1a2d191f8a9b1
MD5 f738667064d26b4ae15e6dbbee75290e
SHA1 3be088067c93aaa8f5e0ed04d54c66efddab3b21
SHA512 944a5fe6d6b2661e2345c07f21657f6c9ffac3818016fb56ba1ebcf0485c1dca6f30c540090cf81f55736f5660b267fba941dd732961d71304f0c74cd1b2b2ae
SSDEEP 98304:MO1oj139qnOoYKclLMIR8oxHVU4EikCOaGzGYcD75AuIL104RaGiVeT0/XoVRzUe:MP39InS5MIGp4mCOaGCx35HgueT0/Xo1
TLSH
T1BE56333CF580783AF3743434E4662B87194EB9610A7979C6E3C80A16EA5B7F245F4A4B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13477

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ExitProcess SetFileAttributesW Sleep GetTickCount CreateFileW GetFileSize GetModuleFileNameW GetCurrentProcess SetCurrentDirectoryW GetFileAttributesW SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW lstrcpynW CopyFileW GetShortPathNameW GlobalLock CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA GetTempFileNameW WriteFile lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject lstrcmpiW MoveFileW GetFullPathNameW SetFileTime SearchPathW CompareFileTime lstrcmpW CloseHandle ExpandEnvironmentStringsW GlobalFree GlobalUnlock GetDiskFreeSpaceW GlobalAlloc FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose lstrlenA MulDiv MultiByteToWideChar WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW EnableMenuItem IsWindowEnabled SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard ScreenToClient GetWindowRect GetDlgItem GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow GetDC SetTimer SetWindowTextW LoadImageW SetForegroundWindow ShowWindow IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu EndPaint CreateDialogParamW SendMessageTimeoutW wsprintfW PostQuitMessage

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation ShellExecuteExW SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW

advapi32

AdjustTokenPrivileges RegCreateKeyExW RegOpenKeyExW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW RegEnumValueW RegDeleteKeyW RegDeleteValueW RegCloseKey RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$DOCUMENTS/Polystat sample data/customer_loyalty_pls.csv

SHA256 c9ff6c65e0321798897976dc5a85cc24fa0b91cf3521f3805419d5c9fcad6340
MD5 3838ce8dc9fa36b93d660591dda51fc8
SHA1 ad43a20e0a0452156fcbb0190fc84cc152b8073e
SHA512 f3e58ef202827aa789ca50c020ec9f624aec9d2915f93f90f11a26e31a41b393d772a69e66255eb629df5574ef2951d4e1913222efb2de6678f53e612d3815c8
SSDEEP 192:xBFZ1auiVww/qTUDmmmw0ztSabJ4nuzdTOMLIoXFGSIwf7OxrIIFHi5bbFHnuNPD:xBFninamOpSNniSxKhGxDf3
TLSH
T1C062A6237162B1D38BCD00C034D5280C49B195D76DBF51E9DFF6B9AFBE388C889A4969
MD5 SHA1 SHA512 SSDEEP TLSH

$DOCUMENTS/Polystat sample data/firm_panel.csv

SHA256 02fb2a8b33256de6204ade1a637ce01035d9a1af8d22835613e41ecb9c63096b
MD5 17a37ba4548c7e54db29ecb8bd46a4f9
SHA1 eeaf590248b674b4abc9c8b5d2058923345c685e
SHA512 af86cfa02a9703ab8f42e3880a6ad393e7ea220f3f4370a1371ebc6832ca11050bc7f0804c35a26a9c6d02863d6829620eed64d311ac9cb503e882ca83a8b3ca
SSDEEP 192:hLF7JrMdJ/IQNR4s77OW55I+afEyyb9aQRG:37t6IQNRZZU/fYwkG
TLSH
T1C70269382FECCF9B714251E11D2511A72A7A5A613120B381ABF31DB1BB6DCB16F74A13
MD5 SHA1 SHA512 SSDEEP TLSH

$DOCUMENTS/Polystat sample data/macro_quarterly.csv

SHA256 315be16265fd514516f4a8082814fd80e166686d8f810d57a5174a29294bd4b5
MD5 af6a64d515f54f94f722ace31d9f243a
SHA1 41107e80403a3b0035679b2e167d81fb24d665f1
SHA512 f435c14e7759568caaaf8eddf1325bd5ca2e85547f0bcdd6035687fe7db845b470e2185b5dcb4de8e959645e5f6986fb422cc3d545bff5e14354d3ea3823bb98
SSDEEP 192:kKYkOWNvAvRnTjU3JPSjBOEVVSRNY8e6QZAfu9rb9WbcWuqBmsLQipX:VLOkWZiS1O++bQ+oWbc6UskiR
TLSH
T1E5F1534A137F43DDF6C46988542038092BB14D5AA8A4F5FCD793BEA57C929E8E4D0C36
MD5 SHA1 SHA512 SSDEEP TLSH

$DOCUMENTS/Polystat sample data/student_survey.csv

SHA256 4f7c6e353b171979f5b316d1e640ee9ddd9589ee6a1ab757efb488c050d52901
MD5 ae41f354c5417ebb969e6bd7391faa41
SHA1 c8a8530403a68190f0821563320229170b3480da
SHA512 4c56d37139284cb72b7180594d589eb0cacb6c445a6c970f9af12c3cbe0ff59bdcc35c2d0312cad62a357d6cecc38d94de6dd5c669733fca4b86ab27153a3ce8
SSDEEP 192:Q6Q5tXlbLbRumZX+dkw30tELG1nUD5dW9nwTW+8DAExe:PyThQVjK1y
TLSH
T11A321472456223979FDD04D4E652690D30D0CA773DBE4298FFB2A93EFD2C8C49438A25
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
MD5 0d7ad4f45dc6f5aa87f606d0331c6901
SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
TLSH
T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10643

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/UserInfo.dll

IMPHASH e1c0bd3d5b9f3f5cec7ea773ff66ac6e
SHA256 9aa388c7de8e96885adcb4325af871b470ac50edb60d4b0d876ad43f5332ffd1
MD5 9eb662f3b5fbda28bffe020e0ab40519
SHA1 0bd28183a9d8dbb98afbcf100fb1f4f6c5fc6c41
SHA512 6c36f7b45efe792c21d8a87d03e63a4b641169fad6d014db1e7d15badd0e283144d746d888232d6123b551612173b2bb42bf05f16e3129b625f5ddba4134b5b8
TLSH
T1948171FB93E80DF2E05443BB41A318E36AB5CE705B1B001F49474A9A24D1A6BED7EF05
MD5 SHA1 SHA512 TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4714

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/modern-header.bmp

SHA256 a592317aa5b7f164f4a12a6db63040bcdc1dd27f1a12ea12deb9e832a432e863
MD5 872a125ef587b16931c7a2e227b7f794
SHA1 fe6af67ef56c58f6af7cc8d09169862615eb41fb
SHA512 7f36db3f244960df0b6ffc404d677abdba6f6b2d17cec388efb43dcf1c1474eee8814c757b3c88e2bc4660bcc95fd19f9ba0cd00e3877dab6ab8e2452a341e1e
SSDEEP 96:xooZGAcBThQStOw5u8OMEdVCBv28B98t88bjCCy5tzvgAxuGTfVmNYaMq/9k:tZDcD53OJVCsGytZ2CyHjY4MCaMq/C
TLSH
T1C4C2BDAD5100D4A00E9426744EA9ECECD5766EF65C8DAE1F3F0FFB0E7B7205BA019049
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/modern-wizard.bmp

SHA256 7dfdba82472e609a4252df2acb3b8cb2b11dc90c58e9631c8556f2d2d715ed27
MD5 d4d62f2ae6a4d7d8fb59dd263d377133
SHA1 823bb28f80cb76994fb21bab854baec856bc22ce
SHA512 6ab3f2688cfa3a0b506da05f987cc74bdf8365144e21849b6ed727c5ce85398fb2ca7ca2ff4d55a45d60d25de3f219c4fd35bdafcbf22786f39e83a53195e1c6
SSDEEP 1536:wsmZNT/m4AKpoVJlOz5z3aaQCCQ4axaKVl9:wsmjOKt
TLSH
T112E30B17F48E091A25AB779F8F618F8F1323E47A0525A253337DA9239F3AB7C8D55408
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/nsDialogs.dll

IMPHASH 6b5c4f7d679059f68f1269aad3a5cecd
SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
MD5 466179e1c8ee8a1ff5e4427dbb6c4a01
SHA1 eb607467009074278e4bd50c7eab400e95ae48f7
SHA512 7508a29c722d45297bfb090c8eb49bd1560ef7d4b35413f16a8aed62d3b1030a93d001a09de98c2b9fea9acf062dc99a7278786f4ece222e7436b261d14ca817
SSDEEP 192:olsHeylO012En8pqHtcE0PuAgkOyvIFc:oATI0d8pUP0WAgkBvIFc
TLSH
T1D0120892E6E450B3C5D6133F35AE2B2DCBBD5329B0922C0087738E4979795B66E38347
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

7527

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

LICENSE.txt

SHA256 5165eea59cd93b17ecfb36c2c43e23d61b5b98fe3e963ad3ccbba347a583835b
MD5 0269750fc8cffa837a51891fcca95f87
SHA1 c3bf56adeac43506f7a363613d23566ada05ea90
SHA512 fdb8074777f733bb5b0364890e4b0ae60250921b2f14acbe2253f322d367f106409ef17343b5bacbbda75ca745394470f74fe25fa20062660bcad0fac3d8e1ad
SSDEEP 96:d25xh8E1bcsvpaonnJbJMrF6oG/sUWuf4xiKhGQG3FRzj7w5FfEk1WS:MxzlNvpa4nJ9GF6oG/sUWuf4xiZRRCMq
TLSH
T13FA154AF730E13791BB72191264949FBF33AD06C236E64617C9B400D2365A74433AADB
MD5 SHA1 SHA512 SSDEEP TLSH

PRIVACY.txt

SHA256 e77aeb694bc2e7203de7aa357e7c995c79a9fcebb802afba2270af1816b45ee8
MD5 d77c0365eea9139f0fe9ad555ed4d5e0
SHA1 91ca98ff818c49d0c6996805b30ecc67747af808
SHA512 af9b6a5f3e064d8e1573b2a97c8ac18f321e7df39ca6f6e156ffddc02be6b6f497a6f495dc4940ea91b852c0de84a673fd11f278722c201eb1f121dc04acf3f2
SSDEEP 96:dsB3nQoHusY6aQu4egKPgctGXHsmM9h7Rj5nZgsm:CPgl4eIdpgR5W
TLSH
T1CC81646FF30D33B90BB226A1368A65E3F328E14C236D19111CAA415C13A57358A7F7DA
MD5 SHA1 SHA512 SSDEEP TLSH

Polystat.exe

IMPHASH 1f23f452093b5c1ff091a2f9fb4fa3e9
SHA256 1cc6fcc9b161cd251c50278d89cde2d7ea170aedff77d9d32560012407ac0b52
MD5 7054b53ad2bc2871cb2bd86346048c74
SHA1 4dd57b92901f2c6ebcaec738eadd81be0618b132
SHA512 6c5a1993396621665fe38a9aa23fa95a24a330e98a2fb9e5bcd592edda814b20871ace1b006a07696c402d947c464e681f780e7432405ea732311f157da6d6a1
SSDEEP 1536:ywh9C4jEqJUL+8gS+C5cY4juA6Qh5gsQKbdtDThNbNZ:ywWxff+FY4juA6Qz+Kb5NbT
TLSH
T1FE63C0007BB0D037EAF30F311E7A6A17AEFAE5151131570F53106B6C3A2A6969A0F792
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13477

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ExitProcess SetFileAttributesW Sleep GetTickCount CreateFileW GetFileSize GetModuleFileNameW GetCurrentProcess SetCurrentDirectoryW GetFileAttributesW SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW lstrcpynW CopyFileW GetShortPathNameW GlobalLock CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA GetTempFileNameW WriteFile lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject lstrcmpiW MoveFileW GetFullPathNameW SetFileTime SearchPathW CompareFileTime lstrcmpW CloseHandle ExpandEnvironmentStringsW GlobalFree GlobalUnlock GetDiskFreeSpaceW GlobalAlloc FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose lstrlenA MulDiv MultiByteToWideChar WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW EnableMenuItem IsWindowEnabled SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard ScreenToClient GetWindowRect GetDlgItem GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow GetDC SetTimer SetWindowTextW LoadImageW SetForegroundWindow ShowWindow IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu EndPaint CreateDialogParamW SendMessageTimeoutW wsprintfW PostQuitMessage

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation ShellExecuteExW SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW

advapi32

AdjustTokenPrivileges RegCreateKeyExW RegOpenKeyExW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW RegEnumValueW RegDeleteKeyW RegDeleteValueW RegCloseKey RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

THIRD-PARTY-NOTICES.txt

SHA256 f56a5210523e8f884d768bd8c585036000170ad9a626220c869c952efaa12e09
MD5 761a338da55178467062d7ad705f7197
SHA1 da83cec513587eaebdc3f460bf81afe7e60c58e3
SHA512 8a463ac273e84decaf3a1870654c606f1da19f1f5169b900d29a2709c6ed52f545131807bcd214b9ded5807a93ccde4e0fe853345beddcbba4afde4b9f8f2708
TLSH
T14831B732770903720B9722957D0E38A7F724C18C91454B057CBE444C178197C6B7BF1B
MD5 SHA1 SHA512 TLSH

Uninstall Polystat.exe

IMPHASH 1f23f452093b5c1ff091a2f9fb4fa3e9
SHA256 b4e554bdc0db392943cd93b44a5ec6603eccfbf93c6a3f8db87a1fc0a2c867f8
MD5 2ec29d53e31a58001eaff1257f8bf45b
SHA1 ae14da7428242f4b9f79ccd92ccfd108df268511
SHA512 224d8b333f27f8410734aa0194bd6c1724eb0bfa07aa172a3bd66a825a33ba6496ab129086321e4f7edfdd544c914b5a5c0129688c33956274ff34c411570967
SSDEEP 1536:Uwh9C4jEqJUL+8gS+C5cY4juOH6Qh5gsQKbdtDThwwAmOaianbr4OmHI:UwWxff+FY4juY6Qz+Kb5PtOQn4Omo
TLSH
T169A3E1007BB0E027E9F20A711D7AE627AEF9B7791035571F6740AB1C7E66582CD0E382
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13477

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ExitProcess SetFileAttributesW Sleep GetTickCount CreateFileW GetFileSize GetModuleFileNameW GetCurrentProcess SetCurrentDirectoryW GetFileAttributesW SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW lstrcpynW CopyFileW GetShortPathNameW GlobalLock CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA GetTempFileNameW WriteFile lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject lstrcmpiW MoveFileW GetFullPathNameW SetFileTime SearchPathW CompareFileTime lstrcmpW CloseHandle ExpandEnvironmentStringsW GlobalFree GlobalUnlock GetDiskFreeSpaceW GlobalAlloc FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose lstrlenA MulDiv MultiByteToWideChar WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW EnableMenuItem IsWindowEnabled SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard ScreenToClient GetWindowRect GetDlgItem GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow GetDC SetTimer SetWindowTextW LoadImageW SetForegroundWindow ShowWindow IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu EndPaint CreateDialogParamW SendMessageTimeoutW wsprintfW PostQuitMessage

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation ShellExecuteExW SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW

advapi32

AdjustTokenPrivileges RegCreateKeyExW RegOpenKeyExW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW RegEnumValueW RegDeleteKeyW RegDeleteValueW RegCloseKey RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
MD5 0d7ad4f45dc6f5aa87f606d0331c6901
SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
TLSH
T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10643

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/UserInfo.dll

IMPHASH e1c0bd3d5b9f3f5cec7ea773ff66ac6e
SHA256 9aa388c7de8e96885adcb4325af871b470ac50edb60d4b0d876ad43f5332ffd1
MD5 9eb662f3b5fbda28bffe020e0ab40519
SHA1 0bd28183a9d8dbb98afbcf100fb1f4f6c5fc6c41
SHA512 6c36f7b45efe792c21d8a87d03e63a4b641169fad6d014db1e7d15badd0e283144d746d888232d6123b551612173b2bb42bf05f16e3129b625f5ddba4134b5b8
TLSH
T1948171FB93E80DF2E05443BB41A318E36AB5CE705B1B001F49474A9A24D1A6BED7EF05
MD5 SHA1 SHA512 TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4714

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/modern-header.bmp

SHA256 a592317aa5b7f164f4a12a6db63040bcdc1dd27f1a12ea12deb9e832a432e863
MD5 872a125ef587b16931c7a2e227b7f794
SHA1 fe6af67ef56c58f6af7cc8d09169862615eb41fb
SHA512 7f36db3f244960df0b6ffc404d677abdba6f6b2d17cec388efb43dcf1c1474eee8814c757b3c88e2bc4660bcc95fd19f9ba0cd00e3877dab6ab8e2452a341e1e
SSDEEP 96:xooZGAcBThQStOw5u8OMEdVCBv28B98t88bjCCy5tzvgAxuGTfVmNYaMq/9k:tZDcD53OJVCsGytZ2CyHjY4MCaMq/C
TLSH
T1C4C2BDAD5100D4A00E9426744EA9ECECD5766EF65C8DAE1F3F0FFB0E7B7205BA019049
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/modern-wizard.bmp

SHA256 7dfdba82472e609a4252df2acb3b8cb2b11dc90c58e9631c8556f2d2d715ed27
MD5 d4d62f2ae6a4d7d8fb59dd263d377133
SHA1 823bb28f80cb76994fb21bab854baec856bc22ce
SHA512 6ab3f2688cfa3a0b506da05f987cc74bdf8365144e21849b6ed727c5ce85398fb2ca7ca2ff4d55a45d60d25de3f219c4fd35bdafcbf22786f39e83a53195e1c6
SSDEEP 1536:wsmZNT/m4AKpoVJlOz5z3aaQCCQ4axaKVl9:wsmjOKt
TLSH
T112E30B17F48E091A25AB779F8F618F8F1323E47A0525A253337DA9239F3AB7C8D55408
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/nsDialogs.dll

IMPHASH 6b5c4f7d679059f68f1269aad3a5cecd
SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
MD5 466179e1c8ee8a1ff5e4427dbb6c4a01
SHA1 eb607467009074278e4bd50c7eab400e95ae48f7
SHA512 7508a29c722d45297bfb090c8eb49bd1560ef7d4b35413f16a8aed62d3b1030a93d001a09de98c2b9fea9acf062dc99a7278786f4ece222e7436b261d14ca817
SSDEEP 192:olsHeylO012En8pqHtcE0PuAgkOyvIFc:oATI0d8pUP0WAgkBvIFc
TLSH
T1D0120892E6E450B3C5D6133F35AE2B2DCBBD5329B0922C0087738E4979795B66E38347
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

7527

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

app/Polystat User Manual.pdf

SHA256 85aadddc9940027cfff13d504354d64ae8ae7ee80e3114e592a75d391103c1a4
MD5 b1dd53b7522b672332aee5c2e6e8d5a8
SHA1 a466cce84ee9af301be668c9540021c584a84b50
SHA512 7065c074b86e0ae0c6974972d7d9d9060918c7e243a46bb4dc2a29a8a64abd8c0e182ec1da28b2cb295d18aa609ccadf18e4255ca008d5723fdd3ba8f4c3eb27
SSDEEP 49152:6aPDobKhMDFvwVYqeZ/GXTVjShkGQVwveWKVrRCB6VNTkR/VbtxASqZcW4Hxn1gN:6aPDHh+ve0oYnWWKpRWMknnHtHxn1XWn
TLSH
T1DE16CD63AD52C42BF01FA1304A55392D678A61A2278322712C2C6FFFF26C59FDDDB845
MD5 SHA1 SHA512 SSDEEP TLSH

app/Polystat.html

SHA256 ca5deaf200c3df7308c1c49ab464bea98af779f5133ca8ad60ca52c6727a4164
MD5 1676475ac668c72022f1b6c27d3d6d94
SHA1 9dfbd29afec4ca706f9a4f49320deebc1da7b6a7
SHA512 5068922c5d132b8b44dadf2b155fa8c7008d545bf0c85cf64f435671196a5ce38a732db6b681bc15b3f065315afd5d6e28499782bda8e5d470b78abf613d57f7
SSDEEP 6144:9PCqNkT1I/a3WQ/g8oEBDnBLvBbLqd5J7x4mkfrwEPP59w0B8lv0vjJKodSuyul9:9PjNkT1a7EBDnBGZGv1F8lvIn9D3z
TLSH
T1A3C48E61B3A912368AF350D0295F0295F6388417B545C8C4FDAE85D20F8BD7291BFFAE
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

app/manual/img/01_license.jpg

SHA256 ccde4d738cb11c73cb71ff83acad8d06ff97b0ebf85a612726c2e2156f5a7e41
MD5 059b24cba19c0f66203b230c5156ccd1
SHA1 9fc1d98e228f85e41ae28fac218c43531a3db380
SHA512 0568550b6524cc49e9345f400b0182d42a76d7a4f0ff430c25a981cdc3c53c9ba062bf25963d1c3235d51baa4b9613ba59b5e72c85cf1d7670ff651c3f249f1b
SSDEEP 3072:zmrdFuNgNI+xOfnntPq7N2ZDpLoTvkoRRM7o8TBbDB:SrdFZLO/t9Z1LToRCTr
TLSH
T1E7D3CE131C46C973B89EE1710F613089649A5A2687DB93252D7D3ABFBBBC94F1D8ED00
MD5 SHA1 SHA512 SSDEEP TLSH

app/manual/img/02_welcome.jpg

SHA256 4e06b27366f4077b2a3e6829829fedb17f174c93406a553ba1f0da7565b41387
MD5 ec961e34e0b3e3c8c4be50116de846db
SHA1 9246c16e2fbb98d28e17b39f91147600ff7dae53
SHA512 d2b5f53283aae28b133e9f2866424c176298905c704c47089cd3907dccb27d7b874f89951ad2d9d21b2c8d4ebfa346e52d572f59e54218f1ebc5b3010c704c19
SSDEEP 1536:aOL7kMU+1IKhwSRYBuW4/CshXirNwpeOIlPgJRHDCL:aOfbbp6SaYW4ast9hIlIJUL
TLSH
T1E6A39C0B4852E863324AD1769F98350A3217112516DB87186ABD7B7FFB7E04F9C9FC22
MD5 SHA1 SHA512 SSDEEP TLSH

app/manual/img/03_data.jpg

SHA256 dba57789fa4a950f2fbd1fb07eb6496132d64d1884a04ea8ee3d2deddf28e8f9
MD5 efe104ac039ded8c7e6b70ee28a675cf
SHA1 93095ee59d017f6b978f73bfdb560107c4bcf818
SHA512 9f20b617accd43ea3bedf8890cee218d901f43586e5d1598f49175ab088c7ab99bc1b6811fff6c4eb8dcbe5fdaf06fc7ac4fce00eceb3d54173fa605a8cfc5df
SSDEEP 3072:xLksZaT1dc6qVBMPDPWX9gQitp/QqPxRY4B:8PqVBKDqeIoRYQ
TLSH
T126E3E1075DA73577A40B9371C4132409AA912B8983D363AB6C296DBF7BFD4AB0DCB814
MD5 SHA1 SHA512 SSDEEP TLSH

app/manual/img/04_vars.jpg

SHA256 ed031f7f73644befbe855d15dcff24ff6e3f7f8ea5417c465a436ea871e70a8d
MD5 d83dc48366b7bb8c5499d821606d5f17
SHA1 b75bbd5bc6e2671d02311a911c667e214ae4bb4d
SHA512 6122f77d932a787ef888fb4c0edfd82f2eda7a8ea3f17669d0a4998373b81bb13d354ad816e373a0ea33256c76c16cd2050b0c799cfc300cd72a67030a99153e
SSDEEP 3072:BbTcCw1tfyPCBhu8Speaoo/Tdg4teC8Z/oW:B9w7fNBh6OyTdDT8ZwW
TLSH
T1EFD3CFD315C38D13375AD031226A716CA01B695812D7073A69BE7EFF73AC31F08AAD69
MD5 SHA1 SHA512 SSDEEP TLSH

app/manual/img/05_vlabels.jpg

SHA256 b1e3eb0a2044b808da0523c26612bcefe9e85e126c26f4db1671a833a330ce78
MD5 8bc0b0b18bf9d6206daa594f9c397e88
SHA1 fcdb40542f280451d6a943908c533f5e91947891
SHA512 ab53215f4bca623563e8398ebf351b12e04dd3303c8ec3195c6aa4e8e82d21f16c361594da2313a774168b6c9df4c2a87de2bb56019ef16babfa874ce2389577
SSDEEP 1536:EgH0XiGi2nniPlpqiqDXS0mTV76perfp6SXaSuhPM81DGjILRxrsFrFF:E6F2nnireDXfqbh62upftxrsFhF
TLSH
T126B3CF534C53C123B51ECA392E99368D34175A800B8B3A6069785FFFEA7E46F4DCEA44
MD5 SHA1 SHA512 SSDEEP TLSH

app/manual/img/06_recode.jpg

SHA256 5936dec5a52c1d16abf261ac731dd18ed0481136787444cb68362cd17ab18b74
MD5 cec5188000a5e5f7354adac2678b71bf
SHA1 a7f25a4a00ab6ede7bc64b02f5e397164aa8fdc8
SHA512 5c1aaa470faa29982d3d939b95b7ad064b15a3b3079d76d1fac65d9d7ef1276a5637b0699dc5465e1268bf7de4651c2f2558af3d4a7b6e888e8fdd5068d99032
SSDEEP 3072:cqZ2kFbMqF5o7i9/C6v9Yd7bFSLoyYmqo:jFbZo78/kxRSsho
TLSH
T1EAC3D0435C9B88A3391ED0F859107219251B125903838675A8793BBFFBEE18FADAFC45
MD5 SHA1 SHA512 SSDEEP TLSH

app/manual/img/07_menu.jpg

SHA256 81da6061c5ac889a4d89b3529f770fa780a80340acadf7cdb7d08eb330556d91
MD5 cb7d230cad2f0099d4c07bd60140cbe7
SHA1 635fdaea54dbf19feee81072bfbe69c535aa3b3e
SHA512 c4354e4bbe3a29e48e6f799cbb37fc6db3d5b21a4cb9dd6a3c504bc2cedd5f28f5f8d48d33f4b554d1115428d108380467027cbc3638214faad99c091633a4fe
SSDEEP 3072:NBLKl9VyzKvhyjxiyJrjNNHC21X10Jjw8Y2FrtW2rS6GNnINo9:3LY9SkI9DC21XSJjwyrUh7INo9
TLSH
T1F4D3DE476E12DB67684FD6748A51785E210346150AD38329684EBFBFB27E06E2CEFE40
MD5 SHA1 SHA512 SSDEEP TLSH

app/manual/img/08_dialog.jpg

SHA256 4c2593b6cd0c52c339e73ddab39480b4f88b5fa12cb32fa5fdc290dd714c6bef
MD5 83628cc2e11370e6f6c800f01e89af08
SHA1 e7a6609407dbc7c9645585d23ff9da6dc8b5d1ab
SHA512 d7c638fa646b9f09e1b5ce5c768490fd0f1699203a15fc18f142cf1ab1f8fbf824b3580f09dbfed1fccf2a68293b67f2986404b9d4b1f9bba6fb3104f43206b1
SSDEEP 1536:J+UIFE8vZTBDNMRf7pSoTW+mdsYqelt60sLAXSNkWje7e5PYVypEtvhUv0tshajc:4rZNmpSoTWZFt6CXa9a+O1c0z5u
TLSH
T149C3E09B2D9AC023764FD2A48E80B19C341702460193677D7C156EBFEBEC8AD6DDED06
MD5 SHA1 SHA512 SSDEEP TLSH

app/manual/img/09_output.jpg

SHA256 4924fd04e9e5de24e79fe0b8b7440516ca8b571e5ffde1c8d3514ff67e1aa9d2
MD5 4aa50e30e8e9b3cca6cca8cd34e88aba
SHA1 317b62129a657b3c8bce1ad511722b743f3b8712
SHA512 18ed9b50421366b94b67cc3a12f1a8e89b6d2820cf55c3f311c4387cb449236691d212687d7c0e484b9868f1884d8c79a7b2399b47d20f65cda3501128a8c2c7
SSDEEP 1536:umUfFDtlsMmD/gfBnFZzQL58JI9qNm+yVWv61glZ84XKCN:umyFDHsrgfBFCuIINmkMgTTXlN
TLSH
T1F3A38B536C03D437260EE5B61F19718E24128A59538386392D7C2AFFE63C84F6DEBD62
MD5 SHA1 SHA512 SSDEEP TLSH

app/manual/img/10_consent.jpg

SHA256 780a7517385dd47bf29dbcc8a3e3dcf9cf0c180837a5df97f5e2294943650536
MD5 36207d141b7c8e7042e2e1a5b710e5f0
SHA1 5dac589965c4cf1f24d5c6b6fcf48cd2ce051e7c
SHA512 d05a3dfd0b1060d963b03c56cab8257b8a33fa99a0d0a2aae36fbb999d75eb88f3cf2d9a095923824df59f124c58ab7e036e7242c613f3ff4151adfa8bd4f914
SSDEEP 3072:YWX00000000000/GbbyYYYYYfJWTxHsh/TZZr1RyWFK78mVx+q:Yc00000000000/EfUxHU/T31RyIK78S
TLSH
T1CDA3BE135D63E533202FD1B06F41349C64036D560387632D392A6BBFB67D92A4EEBDA4
MD5 SHA1 SHA512 SSDEEP TLSH

app/manual/img/11_ai.jpg

SHA256 abb4c7fcd90427dde2a19cba42b33cca3d1ab147ad91bb673d8cdfd638564a1b
MD5 94f51f4ab48a82ff49918b7cc8d3f288
SHA1 7e6ddd8ff32d36301c0f2ee8fdb02c29bb33e250
SHA512 43d99f673d5a5ec4499ab6e8f36911b729c6be449b14fec88d26764d06c13ca9ee341f68fadd219d9fe0c71544b0879319b918a7073ec73dd960f77ca6e6d279
SSDEEP 3072:ICiiiiiiKw9fAaPPx/o2CQyA33RFCbXBf4:t9fA4Px/VyA33REbX+
TLSH
T10FC3AD571C83E063B49AC17A4B6636487287566182C34362BD3C7BBFF37D12B9D8D948
MD5 SHA1 SHA512 SSDEEP TLSH

app/manual/img/12_rightclick.jpg

SHA256 b4fa257d0a447d65d8a9672fdc92350db521ea1420ec834125f67fbc97ab531d
MD5 3ddf3ff19822ab38a46f1dad61f8b9f4
SHA1 f30e8e10f86cb96bbd3924b85aac29bec2f95287
SHA512 505a515a2ffe434b48dc302517d55a4c13d8e76562794b39400b26393de13cb0232f84f0776ff0f2fbe8d852428974634ec32ec799078b51d5dad4465676378c
SSDEEP 1536:uZ3CJWW4pbcuL9IvkpLa3nJvAw8rDVQyqtpRzDx24ha0Jy6v96ZG7L:uZ3QvuL9IgLwJY9/0/z80Jy61JL
TLSH
T16283E1AA6F0C01ECC76C8B324F6B053C8A5E2E65D9DA14990FDEC935D22797BD500B1E
MD5 SHA1 SHA512 SSDEEP TLSH

app/manual/img/13_export.jpg

SHA256 f642055cd337bf243021fdcd60246f2096a6e76ae6806a7697bf52a4b1b7b688
MD5 e5b1855613664c9d684411933dd70fbd
SHA1 6f727e8fa13d68497e30df6947fa00cac7801afd
SHA512 769daf6087073b5c4ee85c30901dd4959e7e4bd79fc916e820fbc93343aa7fbc269b2f2e09ca8d2aa0c8b656f5e92b8e46dece2011feceb08f09632d90cfb1cd
SSDEEP 3072:UM5CclDRrKmxY5qne3uQauZFkysIk8l/u:UCDRPyV3KokQF1u
TLSH
T134A3AD8B2D0BD663341FC9211A66B04D254229154AC70B79BC3DBEFFA33C52F1E9B859
MD5 SHA1 SHA512 SSDEEP TLSH

app/manual/img/14_pls.jpg

SHA256 6e5e6b4af4b6a6de3f02d483de1f19b607e6b824e3ae52d1e0b3b73cef5b7259
MD5 d85334e6b3d89866d01155bb239fe815
SHA1 203b82fc90146ebc3e16b5a03a7995f875cf31d5
SHA512 e75170a22d860e569753882cdd3a0705a822e707864539bb5de09731ebb3d7c580aea0b1b408feaa46291a769b86833fee8826d28eacece7be45f194b42d7b61
SSDEEP 3072:hiUht8nBbl1Ra8SRHFahlWvzlB6Kecw8fOd9SzgUCi1d:hliyHF3w7d9IrB7
TLSH
T109B3AF830D878073190FD1BA5E9535497292191147E39B6A3A2CAFFFE77C60E5ECB809
MD5 SHA1 SHA512 SSDEEP TLSH

app/manual/img/15_pls_edit.jpg

SHA256 3f364a4d121903e9e9eab1dd8a6ceec5ca5d408feec65abb49ee3fe191450b91
MD5 b4fc71212937ab2f2e9cc9cae4356437
SHA1 1a35a57ad110db3e83af79884075fbc94f3ab59e
SHA512 55f50cd61ca61c77ca12f0b25aee5b8874fed1a26e524ac1b1a4687b9f12701c276004a01bc1c0f554d6cf05d98f581669bd6dd232460ebde062605cffd51047
SSDEEP 1536:DFX7Un9Km99dXSVaUHnRGSd6NA6yGXt/VwcUUEOR5NaB7UHH2ycsFP:D69xXXSVaeRGSGA6pPw0EOR5KbyHP
TLSH
T1EFB3BF939E43D86B654ED0624E08744965074A19ABC782296A3D7FFFF33C20F5C9BE81
MD5 SHA1 SHA512 SSDEEP TLSH

app/manual/img/16_pls_boot.jpg

SHA256 230daa1d3e2ba5d251c4c045489cf9c1f0d9065d7652f1d520059b134ea4e703
MD5 6526ac089321c0a73911f7212392e189
SHA1 b133a71c242d0d5c695e0698adc7a9e30744f1b9
SHA512 e564b052651b6d04f13708458e4fa9512e27274515970d05c91cdf57c910f27110dcab597b10b13e805f93a4e5cd5f5c0097f50e334a110e626c8a7853a907f9
SSDEEP 3072:Te7HODeAZdqtA5/Z8PJlGHd3gzqEVwhII:i7Hi58i/WPJl8d3gfyr
TLSH
T1D8D3CF135C87A027AA5AD9716E94350A74430066D7C74278A93C6EBFF3BE62F1CCF861
MD5 SHA1 SHA512 SSDEEP TLSH

app/manual/img/17_ts.jpg

SHA256 2af0bf8a0e1bdff091382b87f60085ee1408475fa10ed56e4c24b9b15d70c283
MD5 be91b45ce2b5fe9dd20445a3b4487f6e
SHA1 6c6c29a292ab99bd7f1292643fd8f29f9908288c
SHA512 020c6d00b6c1f3a7ba31fab4ccc0b63d1a6101aadf6334323ac486081ddfec0e008a07e61296a1a7ee102bc4a87aafa6d9998ee80113b0ebcd6cc20e6565530a
SSDEEP 3072:phFNvVmcI2UIOKgr5Vf3tffffffffUkoHSfRPHmzkJ:5WcPKN8cJ
TLSH
T123B3BE071E07E873724EE6756A04B11C38A34549528763612E7C7BFFF2BE65A1D8FA08
MD5 SHA1 SHA512 SSDEEP TLSH

app/manual/img/18_ts_out.jpg

SHA256 579797b964ae28e4363f8f6690dc701c9faee3d22e13e984d03bb6a923f4fab1
MD5 7da2403d933c99c4d9f0a257d3ee1196
SHA1 bc5eca3be9d1152c1e51adee6287cfc079abfb67
SHA512 8bc23a96585eb8bebb520a31367287f473dfb9bbbbd6ddd440be89b7edf12e3d124dc7374f8a6df63457da625dc6704934305eb2585abb044de3aad1c91e47c8
SSDEEP 1536:gyXojP063w8dYVx0em/CX5VfTgeyHcMa6LZM1m0Y3y8R+ro3mJqFKlAv44A1YBX5:gyEPH3F0Tg1HmCP0g+UaqFj4oXeI
TLSH
T1DAB39C8B2D22C033624EE4726B04B66CB21715145BD397B2662C76BFF37E10B8C9EC95
MD5 SHA1 SHA512 SSDEEP TLSH

app/manual/img/19_history.jpg

SHA256 0c2ff255db7a7f82302bf7e307f0a20701064d18425372f50b6c08f116204eb7
MD5 70050fa5ea2ba8f5448366868fc08022
SHA1 9159083687ea620b2f1805b8b54bb0ebc479aee6
SHA512 9efa62412536158831b25eca8fecffdc43a7b798e48f2a3e57d5ef229d8aaab243272b5c7613599dbc3753d6c3fc3974ec3acc53a71802d4a7552a64aafef044
SSDEEP 1536:jn/TQZb58Xd2X8cTw77VJRX1aseTbFvwAZrQZM9H:j0Zb68mlaN1vlZrX
TLSH
T1ECA37C9B0A53C87B2A9EE1705B2575093067164412A3437A687C3FBFE3AD18F5DEF920
MD5 SHA1 SHA512 SSDEEP TLSH

app/manual/img/20_about.jpg

SHA256 c38e10c095abd87fc79d0e4e9908973211070b610da3d38b374d445d765bf0d7
MD5 a6d69fdac14926b268ab9d79a9dd1a03
SHA1 6c69afabb6989fc777e2d97d453109a457a0b89f
SHA512 41e80ad270a1477a60418aa081237d5969c3d17107c57a26979b379175c8acc64037b29683f140af405a732e921dd29327878da4503fa9bfb0f589314c20d13c
SSDEEP 3072:XQg85DZSMsUhUfIBNt+Bmr6UG1J9f6SRK9P7O:XQzDLXBNt+WG1J1K9jO
TLSH
T173E3E0671C01C537780F91706FA2B44DB4469954169747B82D38AEFFE3AC31A2ECEE64
MD5 SHA1 SHA512 SSDEEP TLSH

app/manual/img/21_post.jpg

SHA256 f9a11b2846d0653c9454fc04257db54092747911453f4857f46baa95e3a01033
MD5 0f2e0746c8a76ad741c16929d62eb596
SHA1 34fa6ca3ddfd3502c8e383774bcd05b5e3bdcb9e
SHA512 df33ef9b759f8f151101a0cef34dc9a12be584817a24a0b63f47e480530e81af885332157f616fa885e37407bb06f86823c04b1e4c00880e953ec9f4d5c8164c
SSDEEP 3072:W+EYUC4BBBBJQhjgKBd/mbpDHrf8tnQh2/u/q1:W+EYU5QdVz/EpDHiQhMu/Q
TLSH
T192A39E836C4B9533285F86200E68754D711A0A1217EB0271BC6D3EFFEAAD25E6DCFD64
MD5 SHA1 SHA512 SSDEEP TLSH

app/manual/img/22_posttest.jpg

SHA256 c770079c79bc03c95e94dadb5c61c5fbfbd33e9d60e3fe944d45df49bfd78cf3
MD5 68ac018664fd9552d871921813adc749
SHA1 e38621684d381a4f43cc8fe5b9ea8883640daab3
SHA512 53920b7aeabd06dbc1d3be9d763cf4cb61ae9c7f1acbb92ac1d85f148ba48d288c3d04debc3f552f52fc660d1b99bbb27f004dfa1d2b1299960ba6d85e7da824
SSDEEP 3072:jJJ6JMWS0xf07RDnWr6JvRzZXkOaOnLqzODWOU4Z4jr9tz:EJxgnOORzZUpJzODHLZWrXz
TLSH
T182C3CF079A126567384FC87A4F18B89C6D961181A3970278AA2D2FFFF37E04F1C1BD54
MD5 SHA1 SHA512 SSDEEP TLSH

app/manual/img/23_panel.jpg

SHA256 6d414ff043036351f16f8ec9e503085df9d7e65dbeeb9fad7cf539968444e6a8
MD5 6c705b40a733240c0f6b1a3462f37c53
SHA1 7b9d5b29a73e8fbaeb855a1d0cff019953321d87
SHA512 59c418c6e8e2c6e6e65e1f89abd6bb02fef4a314e4afe69eb2ba365d3095129668268ed2f942f4a7805d2633ed91c124fa82e682251ea1e00f17f49354eef186
SSDEEP 3072:WZdU8V1FrgXU3PyQMzpX3ZGM1111111111111111111111111111111111uhKC+:WLhrKMPytrGM1111111111111111111R
TLSH
T189B39C836D0A9427759EC570AF20716D25D7226A034327353DBA3EBFA3BC44E9D9ED08
MD5 SHA1 SHA512 SSDEEP TLSH

app/manual/img/24_command.jpg

SHA256 f7aa26bea5243309ff53a104b3e1833fdc337c8f860b5e6bc5d41ead2700a70e
MD5 902cad956b82269e91a87729ec032c26
SHA1 e9378807e57c66406aee220d39a02b76d5fd8d2f
SHA512 01bec8c9fd06ce1b80148ebafb91806450032f2b70b4a3f52d50c89a07fda9cf3d628cdc61072d3f54a3459e7301116b8c7ac64a0e8ab72cd2f9a102dabe7d9a
SSDEEP 3072:dwL9gFlMkfxcrgnD/sZPAiWor617xrhJr9EXaidbE:GLuFl1QINoroZ+KiC
TLSH
T1AEC3BD479C87D463796ED4395E64B09C3A4B046922931235AC2D2BFFFB6D08B8DCEE44
MD5 SHA1 SHA512 SSDEEP TLSH

app/polystat.ico

SHA256 9537faee9037ba8d83338bc15a40dd9f3a3571def4e60fd415ab382dcce10cfb
MD5 7701e9d553d4692760e2bd146f375cb9
SHA1 641de91173c5d60ae5fb2213b2e63f55817ac54c
SHA512 14de8f74fa4c92dcf4ebe027699366c874310464714a8bcdd75abc2c0e7c8dbbebf2362f0987fe59777dec95b564e7ce0500a8b126d48998a092869901197d3f
SSDEEP 768:BIX7ApZbDlha8Gd3CYZhkQ2Ix6YvoQSdQJq59:BIQtDubrsQD6Qh5Y
TLSH
T1B1D2E0007F7436A6D1F92D32547661026CAAE91303221B7F513F3579371E8EF88DAB9A
MD5 SHA1 SHA512 SSDEEP TLSH

app/sample-data/customer_loyalty_pls.csv

SHA256 c9ff6c65e0321798897976dc5a85cc24fa0b91cf3521f3805419d5c9fcad6340
MD5 3838ce8dc9fa36b93d660591dda51fc8
SHA1 ad43a20e0a0452156fcbb0190fc84cc152b8073e
SHA512 f3e58ef202827aa789ca50c020ec9f624aec9d2915f93f90f11a26e31a41b393d772a69e66255eb629df5574ef2951d4e1913222efb2de6678f53e612d3815c8
SSDEEP 192:xBFZ1auiVww/qTUDmmmw0ztSabJ4nuzdTOMLIoXFGSIwf7OxrIIFHi5bbFHnuNPD:xBFninamOpSNniSxKhGxDf3
TLSH
T1C062A6237162B1D38BCD00C034D5280C49B195D76DBF51E9DFF6B9AFBE388C889A4969
MD5 SHA1 SHA512 SSDEEP TLSH

app/sample-data/firm_panel.csv

SHA256 02fb2a8b33256de6204ade1a637ce01035d9a1af8d22835613e41ecb9c63096b
MD5 17a37ba4548c7e54db29ecb8bd46a4f9
SHA1 eeaf590248b674b4abc9c8b5d2058923345c685e
SHA512 af86cfa02a9703ab8f42e3880a6ad393e7ea220f3f4370a1371ebc6832ca11050bc7f0804c35a26a9c6d02863d6829620eed64d311ac9cb503e882ca83a8b3ca
SSDEEP 192:hLF7JrMdJ/IQNR4s77OW55I+afEyyb9aQRG:37t6IQNRZZU/fYwkG
TLSH
T1C70269382FECCF9B714251E11D2511A72A7A5A613120B381ABF31DB1BB6DCB16F74A13
MD5 SHA1 SHA512 SSDEEP TLSH

app/sample-data/macro_quarterly.csv

SHA256 315be16265fd514516f4a8082814fd80e166686d8f810d57a5174a29294bd4b5
MD5 af6a64d515f54f94f722ace31d9f243a
SHA1 41107e80403a3b0035679b2e167d81fb24d665f1
SHA512 f435c14e7759568caaaf8eddf1325bd5ca2e85547f0bcdd6035687fe7db845b470e2185b5dcb4de8e959645e5f6986fb422cc3d545bff5e14354d3ea3823bb98
SSDEEP 192:kKYkOWNvAvRnTjU3JPSjBOEVVSRNY8e6QZAfu9rb9WbcWuqBmsLQipX:VLOkWZiS1O++bQ+oWbc6UskiR
TLSH
T1E5F1534A137F43DDF6C46988542038092BB14D5AA8A4F5FCD793BEA57C929E8E4D0C36
MD5 SHA1 SHA512 SSDEEP TLSH

app/sample-data/student_survey.csv

SHA256 4f7c6e353b171979f5b316d1e640ee9ddd9589ee6a1ab757efb488c050d52901
MD5 ae41f354c5417ebb969e6bd7391faa41
SHA1 c8a8530403a68190f0821563320229170b3480da
SHA512 4c56d37139284cb72b7180594d589eb0cacb6c445a6c970f9af12c3cbe0ff59bdcc35c2d0312cad62a357d6cecc38d94de6dd5c669733fca4b86ab27153a3ce8
SSDEEP 192:Q6Q5tXlbLbRumZX+dkw30tELG1nUD5dW9nwTW+8DAExe:PyThQVjK1y
TLSH
T11A321472456223979FDD04D4E652690D30D0CA773DBE4298FFB2A93EFD2C8C49438A25
MD5 SHA1 SHA512 SSDEEP TLSH

Sharing

General

Malware Config

Signatures

File Explorer