PESCAN.IO - Analysis Report
File Structure:
Analysis Image
Information:
Size: 1,40 MB
SHA-256 Hash: EB21802C78A240421227252BAD28AC3E0CB0E49D91DA2D27105C000FD0C26103
SHA-1 Hash: B3B2AD66DB04D4769870433F3FADF5E6174EA769
MD5 Hash: 22D4A967C90F1E2F7D5E76BB25868FCD
Imphash: D41D8CD98F00B204E9800998ECF8427E
MajorOSVersion: 4
CheckSum: 00000000
EntryPoint (rva): 0
SizeOfHeaders: 200
SizeOfImage: 16C000
ImageBase: 400000
Architecture: x86
ImportTable: 165664
Characteristics: 102
TimeDateStamp: 5AA5636D
Date: 11/03/2018 17:12:13
File Type: EXE
Number Of Sections: 0
ASLR: Enabled
Number Of Executable Sections: 0
Subsystem: Windows GUI
UAC Execution Level Manifest: asInvoker
Description:
InternalName: HRIS.exe
OriginalFilename: HRIS.exe
CompanyName: HEAVEN KILLERS RELEASE GROUP
LegalCopyright: Copyright HEAVEN KILLERS RELEASE GROUP 2016
ProductName: SAIS6.0
FileVersion: 1.0.0.0
Entry Point:
Information -> EntryPoint (calculated) - 3FF25D
Signatures:
Certificate - Digital Signature Not Found:
• The file is not signed
Duplicate Sections:
Section duplicate 2 times
Packer/Compiler:
Compiler: Microsoft Visual .NET - (You can use a decompiler for this...)
• AnyCPU: False
Compiler: Microsoft Visual Studio
Detect It Easy (die)
• PE: linker: Microsoft Linker(80.0)[EXE32]
• PE: archive: Resources(-)[-]
• Entropy: 6.69497
Suspicious Functions:
Library Function Description
KERNEL32.DLL LoadLibraryA Loads the specified module into the address space of the calling process.
KERNEL32.DLL GetProcAddress Retrieves the address of an exported function or variable from the specified dynamic-link library (DLL).
File Access:
HRIS.exe
mscoree.dll
user32.dll
avicap32.dll
Temp
File Access (UNICODE):
HRIS.exe
explorer.exe
calc.exe
\config.ini
Temp
SQL Queries:
Select ID, Active, u.EmployeeID, Name, Password, Username FROM Users u LEFT JOIN vw_Employees e ON u.EmployeeID = e.EmployeeID WHERE Username = 'ActivePasswordUsernameK
Select * FROM tblMst_Division WHERE DivisionCode=ShortName%Last Updated By : ModifiedByEncodedBy+Last Date Modified : !LastDateModifiedDateEncodedq
Select * FROM tblMst_Division WHERE Description LIKE '%1%' OR ShortName LIKE '%%'Unit ID'List of Unit / AreafrmUnitAreaUnit/Areaa
Select * FROM tblMst_Unit ORDER BY UnitCode ASC tblMst_UnitUnitCode/INSERT INTO tblMst_Unit(UnitCode, Remarks-UPDATE tblMst_Unit SET ,Remarks = '% WHERE UnitCode = S
Select * FROM tblMst_Unit WHERE UnitCode=i
Select * FROM tblMst_Unit WHERE Description LIKE '%-%' OR Remarks LIKE '%TahomaEmployee NoEmployee NameBirthDateJob TitleGenderCivil StatusPhone NoMobile NoSSS NumberPHIC HDMF p_FOOTERbtnRefreshPictureBox1cboFields)frmEmployeeFileQueryQuery View
Select ea.* FROM (
Select ea.* FROM (
Select * FROM tblMst_Particular WHERE IsIncome='Y' AND IsActive='Y' ORDER BY ParticularCode ASC ParticularCode
Select * FROM tblMst_Particular WHERE IsIncome='N' AND IsActive='Y' ORDER BY ParticularCode ASC
Select e.EmployeeCode, e.ParticularCode, p.Description, e.Unit, e.ParticularAmount FROM trn_Employee_DefaultIncomeDeduction e(nolock) LEFT OUTER JOIN tblMst_Particular p(nolock)ON e.ParticularCode = p.ParticularCode WHERE p.IsIncome = 'Y' AND e.EmployeeCode =C
Select e.EmployeeCode, e.ParticularCode, p.Description, e.Unit, e.ParticularAmount, e.EmployerShare FROM trn_Employee_DefaultIncomeDeduction e(nolock) LEFT OUTER JOIN tblMst_Particular p(nolock)ON e.ParticularCode = p.ParticularCode WHERE p.IsIncome = 'N' AND e.EmployeeCode =c
Select * FROM tblMst_Employee WHERE EmployeeCode=No records found!EmployeeCodeUCaseLastName, FirstNamek
Select * FROM tblMst_Department WHERE DepartmentCode=DepartmentCodec
Select * FROM tblMst_JobTitle WHERE JobTitleCode=JobTitleCode
Select * FROM tblMst_PayrollDistribution WHERE PayrollDistributionCode=/PayrollDistributionCodeMonthlyRate!ParticularAmountEmployerShare_INSERT INTO trn_Employee_DefaultIncomeDeduction(EmployeeCode!, ParticularCode, Unit%, ParticularAmount, EmployerShare)GInvalid selection. Please check it!Addk
Select * FROM tblMst_Particular WHERE ParticularCode=uAre you sure you want to proceed employee's payroll setup?please wait...Gtrn_Employee_DefaultIncomeDeductionEmployee's default income and deduction list has been successfully set!ToolStripButton1Update&Refresh'ToolStripSeparator3/List of Employee LeavesApplication NoLeave TypeStart DateEnd DateNo. of DaysReasonlblRecordcountRecordcount : 0frmLeave-Leave Application Form
Select * FROM tblMst_LeaveType LeaveTypeCode+Modify Existing EntryError Number:
Description: a
Select * FROM tblMst_LeaveType ORDER BY LeaveTypeCode ASC !tblMst_LeaveType9INSERT INTO tblMst_LeaveType(LeaveTypeCode, ShortDesc7UPDATE tblMst_LeaveType SET ,ShortDesc = '/ WHERE LeaveTypeCode = g
Select * FROM tblMst_LeaveType WHERE LeaveTypeCode=s
Select * FROM tblMst_LeaveType WHERE Description LIKE '%1%' OR ShortDesc LIKE '%/Loan Application DetailLoan No. :dcParticularParticular :Interest :txtInterestTerms :txtTermsLoan Amount :txtLoanAmountReference No :txtRefNoLabel12'Monthly Deduction :'txtMonthlyDeductionLoaned Date :Label13dtLoanedDatefrmLoanAEe
Select * FROM tblMst_Particular WHERE IsIncome='N']
Select lp.LoanCode As [LoanCode], lp.LoanPaymentCode, lp.PeriodMonth, lp.PeriodYear, lp.Amount, lp.PaymentDate, lp.ORNo FROM trn_Loan_Payment lp(nolock) WHERE lp.LoanCode=
Select lp.* FROM trn_Loan_Payment lp(nolock) WHERE lp.LoanPaymentCode=LoanPaymentCodePeriodMonthPeriodYearPaymentDateORNo9INSERT INTO trn_Loan_Payment!(LoanPaymentCode, LoanCode, PeriodMonth, PeriodYear, Amount, ORNo, PaymentDate7UPDATE trn_Loan_Payment SET PeriodMonth = ,PeriodYear = ,Amount = ,ORNo = ' ,PaymentDate = '3 WHERE LoanPaymentCode = Are you sure you want to post payment for the selected loan details?1\Reports\Loan Ledger.rptS
Select p.ParticularCode As [Particular ID], p.ShortDesc AS [Short Desc], p.Description, p.IsIncome AS [Income], p.HasUnit As [Has Unit], p.HasERShare AS [Has ER Share], p.isGovtDeduction As [Mandatory], p.Multiplier, p.IsTaxable As [Taxable], p.IsActive AS [Active] FROM tblMst_Particular p(nolock) ORDER BY p.ParticularCode ASC
Select SUM(pd.ParticularAmount)As [ParticularAmount] FROM trn_Payroll_Details pd(nolock) INNER JOIN tblMst_Particular p(nolock)On pd.ParticularCode = p.ParticularCode WHERE p.IsIncome = 'Y' AND pd.PayrollID = pm.PayrollID AND pd.EmployeeCode = pm.EmployeeCode )AS [INCOME], (
Select SUM(pd.ParticularAmount)AS [ParticularAmount] FROM trn_Payroll_Details pd(nolock) INNER JOIN tblMst_Particular p(nolock)ON pd.ParticularCode = p.ParticularCode WHERE p.IsIncome = 'N' AND pd.PayrollID = pm.PayrollID AND pd.EmployeeCode = pm.EmployeeCode )AS [DEDUCTION], (
Select SUM(pd.ParticularAmount)AS [ParticularAmount] FROM trn_Payroll_Details pd(nolock) INNER JOIN tblMst_Particular p(nolock)ON pd.ParticularCode = p.ParticularCode WHERE p.IsIncome = 'Y' And pd.PayrollID = pm.PayrollID AND pd.EmployeeCode = pm.EmployeeCode )-(
Select SUM(pd.ParticularAmount)AS [ParticularAmount] FROM trn_Payroll_Details pd(nolock) INNER JOIN tblMst_Particular p(nolock)ON pd.ParticularCode = p.ParticularCode WHERE p.IsIncome = 'N' And pd.PayrollID = pm.PayrollID AND pd.EmployeeCode = pm.EmployeeCode )AS [NET_INCOME] FROM (
Select * FROM trn_Payroll_Header WHERE PayrollID=PeriodCodei
Select * FROM tblMst_PayrollPeriod WHERE PeriodCode=IsPostedYPOSTEDPENDING&New BatchView BatchPayroll NoPayroll Period)Payroll Distribution'Number of EmployeesTotal_IncomeTotal_DeductionNet_Income-Manage Payroll Entries+Filter Date Between :-frmPayrollBatchManager+Payroll Batch Manager
Select * FROM (
Select ph.PayrollID AS [Payroll No], pp.MonthText AS [Payroll Period], pp.StartDate, pp.EndDate, pd.Description AS [Payroll Distribution], vm.No_Of_Employees, vm.Total_Income, vm.Total_Deduction, vm.Net_Income, ph.IsPosted FROM trn_Payroll_Header ph(nolock) LEFT OUTER JOIN tblMst_PayrollPeriod pp(nolock)ON ph.PeriodCode = pp.PeriodCode LEFT OUTER JOIN tblMst_PayrollDistribution pd(nolock)ON ph.PayrollDistributionCode = pd.PayrollDistributionCode LEFT OUTER JOIN(
Select pd.PayrollID, pd.No_Of_Employees, pd.Income AS Total_Income, pd.Deductions AS Total_Deduction, pd.Income - pd.Deductions AS Net_Income FROM (
Select SUM(ParticularAmount) FROM trn_Payroll_Details WHERE PayrollID = a.PayrollID AND ParticularCode IN(
Select ParticularCode FROM tblMst_Particular WHERE IsIncome = 'Y' ) )AS Income, (
Select SUM(ParticularAmount) FROM trn_Payroll_Details WHERE PayrollID = a.PayrollID AND ParticularCode IN(
Select ParticularCode FROM tblMst_Particular WHERE IsIncome = 'N' ) )AS Deductions FROM trn_Payroll_Details AS a WHERE PayrollID IN(
Select PayrollID FROM trn_Payroll_Header ) GROUP BY a.PayrollID )pd INNER JOIN trn_Payroll_Header ph ON pd.PayrollID = ph.PayrollID )vm ON ph.PayrollID = vm.[PayrollID] )sp No_Of_Employees9List of Payroll DistributionDistribution ID%No. of Days WorkedFrequencytxtFrequencyFrequency :Working Days :-frmPayrollDistribution
Select * FROM tblMst_PayrollDistribution ORDER BY PayrollDistributionCode ASC 5tblMst_PayrollDistributionMINSERT INTO tblMst_PayrollDistribution1(PayrollDistributionCode, WorkingDays%, PayrollFrequencyKUPDATE tblMst_PayrollDistribution SET! ,WorkingDays = + ,PayrollFrequency = C WHERE PayrollDistributionCode = WorkingDays!PayrollFrequency
Select * FROM tblMst_PayrollDistribution WHERE Description LIKE '%5%' OR WorkingDays LIKE '%btnInitiate!Initiate Payroll-Payroll Batch Creation7
Select * FROM tblMst_PayrollPeriod ORDER BY PeriodCode ASC )tblMst_PayrollPeriodAINSERT INTO tblMst_PayrollPeriod(PeriodCode, MonthText, YearText, IsPosted, 'N'?UPDATE tblMst_PayrollPeriod SET MonthText = ' ,YearText = ') WHERE PeriodCode = MonthTextYearTextw
Select * FROM tblMst_PayrollPeriod WHERE MonthText LIKE '%/%' OR YearText LIKE '%Table ReferencePhilHealthCodeMinimum SalaryMaximum SalarySalary BaseEREEMonthly PremiumPanel4+PHIC / Medicare SharetxtTotalMonthly Premium :txtEE!Employee Share :txtER!Employer Share :txtSalaryBasetxtMaxSalary!Maximum Salary :txtMinSalarySalary Base :!Minimum Salary :frmPHICTable+PHIC / Medicara Table
Select s.* FROM tblMst_PhilHealth s ORDER BY s.PhilHealthCode ASC tblMst_PhilHealth;INSERT INTO tblMst_PhilHealth(PhilHealthCode!, SalaryMinValue!, SalaryMaxValue, SalaryBaseValue, EmployeeShare!, MonthlyPremium9UPDATE tblMst_PhilHealth SET% SalaryMinValue = ' ,SalaryMaxValue = ) ,SalaryBaseValue = % ,EmployerShare = % ,EmployeeShare = ' ,MonthlyPremium = 1 WHERE PhilHealthCode = k
Select * FROM tblMst_PhilHealth WHERE PhilHealthCode=SalaryMinValueSalaryMaxValueSalaryBaseValueEmployeeShareMonthlyPremium
Select * FROM tblMst_Company ORDER BY CompanyCode ASC
Select ea.* FROM (
Select * FROM tblMst_Company WHERE CompanyName Like '%g
Select * FROM tblMst_Unit WHERE Description Like '%{
Select * FROM tblMst_EmploymentType WHERE Description Like '%txtEmployeettxEmployeeBy Employee :!By Date Filled :5frmRptEmployeeLeaveFilling-Employee Leave Filling
Select ea.* FROM (
Select lf.* FROM (
Select * FROM tblMst_Division WHERE Description Like '%) ea.DivisionCode IN(7
Select ea.* FROM (
Select * FROM (
Select ph.PayrollID AS [Payroll No], pp.MonthText AS [Payroll Period], pp.StartDate, pp.EndDate, pd.Description AS [Payroll Distribution], vm.No_Of_Employees, vm.Total_Income, vm.Total_Deduction, vm.Net_Income, ph.IsPosted FROM trn_Payroll_Header ph(nolock) LEFT OUTER JOIN tblMst_PayrollPeriod pp(nolock)ON ph.PeriodCode = pp.PeriodCode LEFT OUTER JOIN tblMst_PayrollDistribution pd(nolock)ON ph.PayrollDistributionCode = pd.PayrollDistributionCode LEFT OUTER JOIN(
Select pd.PayrollID, pd.No_Of_Employees, pd.Income AS Total_Income, pd.Deductions AS Total_Deduction, pd.Income - pd.Deductions AS Net_Income FROM (
Select SUM(ParticularAmount) FROM trn_Payroll_Details WHERE PayrollID = a.PayrollID AND ParticularCode IN(
Select ParticularCode FROM tblMst_Particular WHERE IsIncome = 'Y' ) )AS Income, (
Select SUM(ParticularAmount) FROM trn_Payroll_Details WHERE PayrollID = a.PayrollID AND ParticularCode IN(
Select ParticularCode FROM tblMst_Particular WHERE IsIncome = 'N' ) )AS Deductions FROM trn_Payroll_Details AS a WHERE PayrollID IN(
Select PayrollID FROM trn_Payroll_Header ) GROUP BY a.PayrollID )pd INNER JOIN trn_Payroll_Header ph ON pd.PayrollID = ph.PayrollID )vm ON ph.PayrollID = vm.[PayrollID] )sp WHERE K\Reports\Payroll Register Summary.rptMiddleNameEmployee IDfrmSelectEmployee
Select s.* FROM tblMst_SSSTable s ORDER BY s.SSSCode ASC tblMst_SSSTableSSSCode7INSERT INTO tblMst_SSSTable(SSSCode+, TotalMonthlyPremium-, ExtendedContribution7, TotalEmployerContribution7, TotalEmployeeContribution/, TotalEEECContribution, SEOFW5UPDATE tblMst_SSSTable SET1 ,TotalMonthlyPremium = 3 ,ExtendedContribution = = ,TotalEmployerContribution = = ,TotalEmployeeContribution = 5 ,TotalEEECContribution = ,SEOFW = WHERE SSSCode = Y
Select * FROM tblMst_SSSTable WHERE SSSCode='TotalMonthlyPremium)ExtendedContribution3TotalEmployerContribution3TotalEmployeeContribution+TotalEEECContributionSEOFW
Select s.* FROM tblMst_SSSTable s WHERE s.SalaryMinValue Like '%Remarks :%List of DepartmentfrmDepartmentDepartment Mastery
Select * FROM tblMst_Department ORDER BY DepartmentCode ASC tblMst_Department;INSERT INTO tblMst_Department(DepartmentCode9UPDATE tblMst_Department SET1 WHERE DepartmentCode = u
Select * FROM tblMst_EmploymentStatus )EmploymentStatusCodeC
Select * FROM tblMst_CivilStatus CivilStatusCivilStatusCodeC
Select * FROM tblMst_Nationality NationalityNationalityCode=
Select * FROM tblMst_Province ProvinceDescProvinceCode5
Select * FROM tblMst_City CityDescCityCode9
Select * FROM tblMst_Gender GenderCodeI
Select * FROM tblMst_EmploymentType ;
Select * FROM tblMst_Company A
Select * FROM tblMst_Department =
Select * FROM tblMst_Division 5
Select * FROM tblMst_Unit =
Select * FROM tblMst_JobLevel JobLevelCode=
Select * FROM tblMst_JobTitle ;
Select * FROM tblMst_TaxCode TaxCodeS
Select * FROM tblMst_PayrollDistribution 5
Select * FROM tblMst_Bank BankCodeE
Select * FROM tblMst_Relationship !RelationshipCode9
Select * FROM tblMst_Degree DegreeCode9
Select * FROM tblMst_Course CourseCode)\Profiles\Employees\.jpg;\Profiles\Employees\NoPic.jpg
Select e.LastName + ', ' + e.FirstName + ' ' + SUBSTRING(e.MiddleName, 1, 1)+ '.' AS [Employee Name] FROM tblMst_Employee e WHERE e.EmployeeCode=DateHiredHouseNoPresentAddressEmailAddressReligionFaxNoS
Select * FROM tblMst_City WHERE CityCode=ZipcodeMobileNoBirthPlace-EmergencyContactPersonAddress1EmailAddress1PhoneNo1MobileNo1GuardianNameGuardianAddressGuardianPhoneNo!GuardianMobileNoSSSIDTINIDPhilHealthHDMFBankAccountNoDailyRateRatePerHourPinCode'Last Updated By :
Select f.RelationshipCode, r.Description AS [Relationship], f.LastName, f.FirstName, f.MiddleName, f.ContactNo, f.BirthDate, f.Address, f.IsNextofKin, f.IsBeneficiary, f.IsDependent FROM tblMst_Employee_Family f(nolock) LEFT OUTER JOIN tblMst_Relationship r(nolock)ON f.RelationshipCode = r.RelationshipCode WHERE f.EmployeeCode=
Select e.DegreeCode, d.Description AS [Degree], e.CourseCode, c.Description AS [Course], e.School, e.DateGraduated, e.YearFrom, e.YearTo FROM tblMst_Employee_Education e(nolock) LEFT OUTER JOIN tblMst_Degree d(nolock)On e.DegreeCode = d.DegreeCode LEFT OUTER JOIN tblMst_Course c(nolock)On e.CourseCode = c.CourseCode WHERE e.EmployeeCode=q
Select e.Designation, e.Employer AS [Employer], e.Salary, e.StartDate, e.EndDate, e.LeavingReason, e.Remarks FROM tblMst_Employee_Employment e(nolock) WHERE e.EmployeeCode=
Select et.ChangeNo, et.EmploymentTypeCode1, t1.Description As [EmploymentType1], et.EmploymentTypeCode2, t2.Description As [EmploymentType2], et.EffectivityDate, et.Remarks FROM tblMst_Employee_EmploymentType et(nolock) LEFT OUTER JOIN tblMst_EmploymentType t1(nolock)On et.EmploymentTypeCode1 = t1.EmploymentTypeCode LEFT OUTER JOIN tblMst_EmploymentType t2(nolock)On et.EmploymentTypeCode2 = t2.EmploymentTypeCode WHERE et.EmployeeCode=!
Select p.PromotionCode, p.JobTitleCode1, j.Description As [JobTitle1], p.JobTitleCode2, t.Description As [JobTitle2], p.Salary1, p.Salary2, p.EffectivityDate, p.Remarks FROM tblMst_Employee_Promotion p(nolock) LEFT OUTER JOIN tblMst_JobTitle j(nolock)ON p.JobTitleCode1 = j.JobTitleCode LEFT OUTER JOIN tblMst_JobTitle t(nolock)ON p.JobTitleCode2 = t.JobTitleCode WHERE p.EmployeeCode=
Select ec.ChangeCode, c.ShortName AS [CostCenter1], c2.ShortName As [CostCenter2], ec.EffectivityDate, ec.Remarks FROM tblMst_Employee_Division ec(nolock) LEFT OUTER JOIN tblMst_Division c(nolock)ON ec.DivisionCode1 = c.DivisionCode LEFT OUTER JOIN tblMst_Division c2(nolock)ON ec.DivisionCode2 = c2.DivisionCode WHERE ec.EmployeeCode=M
Select * FROM tblMst_EmploymentStatus C
Select * FROM tblMst_CivilStatus C
Select * FROM tblMst_Nationality =
Select * FROM tblMst_Province 5
Select * FROM tblMst_City 9
Select * FROM tblMst_Gender I
Select * FROM tblMst_EmploymentType ;
Select * FROM tblMst_Company A
Select * FROM tblMst_Department =
Select * FROM tblMst_JobLevel =
Select * FROM tblMst_JobTitle ;
Select * FROM tblMst_TaxCode S
Select * FROM tblMst_PayrollDistribution 5
Select * FROM tblMst_Bank E
Select * FROM tblMst_Relationship 9
Select * FROM tblMst_Degree 9
Select * FROM tblMst_Relationship WHERE RelationshipCode=-tblMst_Employee_FamilyEINSERT INTO tblMst_Employee_Family%, RelationshipCode, Address, IsNextofKin, IsBeneficiary, IsDependent, ' IsNextofKinIsBeneficiaryIsDependentDateGraduatedYearFromYearTo3tblMst_Employee_EducationKINSERT INTO tblMst_Employee_Education, DegreeCode, CourseCode, School, DateGraduated, YearFrom, YearTo, , '[
Select * FROM tblMst_Degree WHERE DegreeCode=[
Select MAX() FROM MThe field is required.Please check it!gThe field required a numeric input.Please check it!,0.00NTrueFalse
Select FROM = = '!
Insert into tblMst_Employee_Family%, RelationshipCode, Address, IsNextofKin, IsBeneficiary, IsDependent, ' IsNextofKinIsBeneficiaryIsDependentDateGraduatedYearFromYearTo3tblMst_Employee_EducationK
Insert into tblMst_Employee_Education, DegreeCode, CourseCode, School, DateGraduated, YearFrom, YearTo, , '[SELECT * FROM tblMst_Degree WHERE DegreeCode=[SELECT * FROM tblMst_Course WHERE CourseCode=LeavingReason5tblMst_Employee_EmploymentM
Insert into tblMst_Employee_Employment, Designation, Employer, Salary, LeavingReasonAre you sure you want to add changes on the employee's employment type?iEmployment Type changes has been successfully saved!U
Insert into tblMst_Employee_EmploymentType(ChangeNo+, EmploymentTypeCode1+, EmploymentTypeCode2, EffectivityDate=tblMst_Employee_EmploymentTypeChangeNoEmploymentType1EmploymentType2yAre you sure you want to delete selected employment changes?]Selected record has been successfully deleted!K
Insert into tblMst_Employee_Promotion(PromotionCode, JobTitleCode1, JobTitleCode2, Salary1, Salary23tblMst_Employee_PromotionPromotionCodeJobTitle1JobTitle2Salary1Salary2Are you sure you want to add changes on the employee's promotion?]Promotion changes has been successfully saved!gAre you sure you want to delete selected promotion?I
Interest's Words:
JFIF
Encrypt
Decrypt
PassWord
exec
attrib
start
shutdown
ping
replace
Interest's Words (UNICODE):
Encrypt
Decrypt
Encryption
PassWord
start
Anti-VM/Sandbox/Debug Tricks:
LabTools - petools
Anti-VM/Sandbox/Debug Tricks (UNICODE):
LabTools - petools
IP Addresses:
11.0.0.0
14.0.0.0
Strings/Hex Code Found With The File Rules:
• Rule Text (Ascii): WinAPI Sockets (send)
• Rule Text (Ascii): Encryption (CreateDecryptor)
• Rule Text (Ascii): Encryption (CryptoStream)
• Rule Text (Ascii): Encryption (CryptoStreamMode)
• Rule Text (Ascii): Encryption (DESCryptoServiceProvider)
• Rule Text (Ascii): Encryption (FromBase64String)
• Rule Text (Ascii): Encryption (ICryptoTransform)
• Rule Text (Ascii): Encryption (ToBase64String)
• Rule Text (Ascii): Execution (CreateProcessW)
• Rule Text (Ascii): Keyboard Key (Scroll)
• Rule Text (Ascii): Related to a particular nation or its government (National)
• Rule Text (Unicode): Related to a particular nation or its government (National)
• Rule Text (Unicode): Organization through which a state exercises authority (Government)
• Rule Text (Ascii): Related to the rights and duties of citizens (Civil)
• Rule Text (Unicode): Related to the rights and duties of citizens (Civil)
Intelligent String:
• 1.0.0.0
• HRIS.exe
• txtLoginName
• btnLogin
• login
• login_form
• login_user
• -\Reports\SSS Table.rpt
• 1\Reports\Loan Ledger.rpt
• ?\Reports\Employee Alphalist.rpt
• G\Reports\Employee Leave Filling.rpt
• O\Reports\Employee Length of Service.rpt
• K\Reports\Payroll Register Summary.rpt
• .jpg
• ;\Profiles\Employees\NoPic.jpg
• 'PNG Files(*.png)|*.png|JPEG Files(*.jpeg)|*.jpg|GIF Files(*.gif)|*.gif|Bitmap Files(*.bmp)|*.bmp|All Supported Files|*.jpeg;*.jpg;*.gif;*.bmp;*.img
• &Login
• frmLogin
• Login
• !MAIN_i16x161.ico
• folder closed.ico
• ARROW.gif
• update.png
• nxt.png
• add.bmp
• add.png
• less.bmp
• file_new.bmp
• clear.gif
• Form.gif
• employee.png
• %payroll_period.png
• cost_center.png
• print_rpt.png
• sss32x32.ico
• 'philhealth32x32.ico
• particular.png
• department.png
• leave_type.png
• accounts.png
• !charge_group.png
• 1payroll_distribution.png
• )invoice_printing.png
• -loadsheet_delivery.png
• !trans_status.png
• rpt.ico
• %order_delivery.png
• item_brand.png
• item_group.png
• approval.png
• )overtime filling.png
• div.png
• 'payroll_posting.png
• area.png
• userconfig.png
• 'goa-account-msn.png
• emblem-system.png
• PeriodLarge.png
• calc.exe
• explorer.exe
• \config.ini
• , LoginName
• loginXlogin_formollogin_userh$master_fileA5openO>payroll_periodBpayroll_setupM
• Ojjj...CBB
• C:\Users\TitanNote\Desktop\APP4\obj\Debug\HRIS.pdb
• _CorExeMainmscoree.dll
Extra 4n4lysis:
Metric Value Percentage
Ascii Code 813234 55,3817%
Null Byte Code 310001 21,1113%
© 2025 All rights reserved.