| / Chip 2004 July
/ CHIP_CD_2004-07.iso / software / nncron_hit / files / nncron189.exe / nnguard.exe
| < prev | next > |
| MS-DOS/Windows or OS/2 Executable | 2002-05-16 | 1.5 KB |
view JSON data
|
view as text
|
open on a Mac
|
open on a PC| Confidence | Program | Detection | Match Type | Support |
|---|---|---|---|---|
| 100% | dexvert | MS-DOS/Windows or OS/2 Executable (executable/exe) | magic | Supported |
| 1% | dexvert | Ady's GLUE Packed (archive/adysGLUEPacked) | ext | Unsupported |
| 1% | dexvert | BlacK FiST Packed (archive/blackFiSTPacked) | ext | Unsupported |
| 1% | dexvert | CauseWay Compressor Packed (archive/causeWayCompressorPacked) | ext | Unsupported |
| 1% | dexvert | CExe Packed (archive/cExePacked) | ext | Unsupported |
| 1% | dexvert | cIPHATOR Protected (archive/ciphatorProtected) | ext | Unsupported |
| 1% | dexvert | CRYPACK Protected (archive/crypackProtected) | ext | Unsupported |
| 1% | dexvert | CRYPTEXE Protected (archive/cryptexeProtected) | ext | Unsupported |
| 1% | dexvert | Crypt Light Show Protected (archive/cryptLightShowProtected) | ext | Unsupported |
| 1% | dexvert | DaRKSToP Protected (archive/darkstopProtected) | ext | Unsupported |
| 1% | dexvert | DiskImager SFX Image (archive/diskImagerSFXImage) | ext | Unsupported |
| 1% | dexvert | Dismember EXE CRYPT Protected (archive/dismemberProtected) | ext | Unsupported |
| 1% | dexvert | DJP Packed (archive/djpPacked) | ext | Unsupported |
| 1% | dexvert | .NETZ Packed (archive/dotNETZPacked) | ext | Unsupported |
| 1% | dexvert | DSHIELD Protected (archive/dshieldProtected) | ext | Unsupported |
| 1% | dexvert | Exe32Pack Packed (archive/exe32PackPacked) | ext | Unsupported |
| 1% | dexvert | EXE Manager Protected (archive/exeManagerProtected) | ext | Unsupported |
| 1% | dexvert | EXETOOLS Protected (archive/exetoolsProtected) | ext | Unsupported |
| 1% | dexvert | EZip Packed (archive/ezipPacked) | ext | Unsupported |
| 1% | dexvert | FSG Packed (archive/fsgPacked) | ext | Unsupported |
| 1% | dexvert | HackStop Protected (archive/hackStopProtected) | ext | Unsupported |
| 1% | dexvert | JMCryptExe Protected (archive/jmCryptExeProtected) | ext | Unsupported |
| 1% | dexvert | kkrunchy Packed (archive/kkcrunchPacked) | ext | Unsupported |
| 1% | dexvert | mbp SHRINK Packed (archive/mbpSHRINKPacked) | ext | Unsupported |
| 1% | dexvert | MEGALITE Packed (archive/megalitePacked) | ext | Unsupported |
| 1% | dexvert | Mess Protected (archive/messProtected) | ext | Unsupported |
| 1% | dexvert | Mew Packed (archive/mewPacked) | ext | Unsupported |
| 1% | dexvert | MPRESS Packed (archive/mpressPacked) | ext | Unsupported |
| 1% | dexvert | NOS Packer Packed (archive/nosPackerPacked) | ext | Unsupported |
| 1% | dexvert | NTShell Protected (archive/ntShellProtected) | ext | Unsupported |
| 1% | dexvert | Pack Master Packed (archive/packMasterPacked) | ext | Unsupported |
| 1% | dexvert | PE Diminisher Packed (archive/peDiminisherPacked) | ext | Unsupported |
| 1% | dexvert | Petite Packed (archive/petitePacked) | ext | Unsupported |
| 1% | dexvert | PeX Packed (archive/pexPacked) | ext | Unsupported |
| 1% | dexvert | PKLITE32 Packed (archive/pklite32Packed) | ext | Unsupported |
| 1% | dexvert | PowerBatch Packed (archive/powerBatchPacked) | ext | Unsupported |
| 1% | dexvert | protector Protected (archive/protectorProtected) | ext | Unsupported |
| 1% | dexvert | py2exe Packed (archive/py2exePacked) | ext | Unsupported |
| 1% | dexvert | PyInstaller Packed (archive/pyInstallerPacked) | ext | Unsupported |
| 1% | dexvert | Scramb Packed (archive/scrambPacked) | ext | Unsupported |
| 1% | dexvert | SECURE Protected (archive/secureProtected) | ext | Unsupported |
| 1% | dexvert | Shrinker Packed (Windows) (archive/shrinkerWindowsPacked) | ext | Unsupported |
| 1% | dexvert | Spoon Studio Packed (archive/spoonStudioPacked) | ext | Unsupported |
| 1% | dexvert | tElock Packed (archive/telockPacked) | ext | Unsupported |
| 1% | dexvert | The Builder Packed (archive/theBuilderPacked) | ext | Unsupported |
| 1% | dexvert | The Patcher Packed (archive/thePatcherPacked) | ext | Unsupported |
| 1% | dexvert | 32Lite Packed (archive/thirtyTwoLitePacked) | ext | Unsupported |
| 1% | dexvert | TinyProt Protected (archive/tinyProtProtected) | ext | Unsupported |
| 1% | dexvert | (Win)Upack Packed (archive/winUpackPacked) | ext | Unsupported |
| 1% | dexvert | Yoda's Crypte Protected (archive/yodasCrypterProtected) | ext | Unsupported |
| 1% | dexvert | MS-DOS PMODE extender executable (executable/msdosPMODEExtenderExecutable) | ext | Unsupported |
| 1% | dexvert | Sony Playstation Executable (executable/sonyPlaystationExe) | ext | Unsupported |
| 1% | dexvert | Novell Netware Virtual Loadable Module (other/novellNetwareVirtualLoadableModule) | ext | Unsupported |
| 100% | file | PE32 executable for MS Windows 4.00 (GUI), Intel i386, 3 sections | default | |
| 99% | file | data | default | |
| 27% | TrID | Win32 Dynamic Link Library (generic) | default | |
| 20% | TrID | Win16 NE executable (generic) | default | |
| 18% | TrID | Win32 Executable (generic) | default | |
| 8% | TrID | Windows Icons Library (generic) | default (weak) | |
| 8% | TrID | OS/2 Executable (generic) | default | |
| 100% | gt2 | Ist eine ausf�hrbare Win32 Datei | default | |
| 100% | binwalkID | Microsoft executable, portable (PE) | default | |
| 100% | xdgMime | application/vnd.microsoft.portable-executable | default (weak) |
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 4d 5a 90 00 03 00 00 00 | 04 00 00 00 ff ff 00 00 |MZ......|........|
|00000010| b8 00 00 00 00 00 00 00 | 40 00 00 00 00 00 00 00 |........|@.......|
|00000020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 80 00 00 00 |........|........|
|00000040| 0e 1f ba 0e 00 b4 09 cd | 21 b8 01 4c cd 21 54 68 |........|!..L.!Th|
|00000050| 69 73 20 70 72 6f 67 72 | 61 6d 20 63 61 6e 6e 6f |is progr|am canno|
|00000060| 74 20 62 65 20 72 75 6e | 20 69 6e 20 44 4f 53 20 |t be run| in DOS |
|00000070| 6d 6f 64 65 2e 0d 0d 0a | 24 00 00 00 00 00 00 00 |mode....|$.......|
|00000080| 50 45 00 00 4c 01 03 00 | 50 1c e4 3c 00 00 00 00 |PE..L...|P..<....|
|00000090| 00 00 00 00 e0 00 0f 01 | 0b 01 05 00 00 02 00 00 |........|........|
|000000a0| 00 04 00 00 00 00 00 00 | 9c 10 00 00 00 10 00 00 |........|........|
|000000b0| 00 20 00 00 00 00 40 00 | 00 10 00 00 00 02 00 00 |. ....@.|........|
|000000c0| 04 00 00 00 00 00 00 00 | 04 00 00 00 00 00 00 00 |........|........|
|000000d0| 00 40 00 00 00 02 00 00 | 00 00 00 00 02 00 00 00 |.@......|........|
|000000e0| 00 00 10 00 00 10 00 00 | 00 00 10 00 00 10 00 00 |........|........|
|000000f0| 00 00 00 00 10 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000100| 00 30 00 00 28 00 00 00 | 00 00 00 00 00 00 00 00 |.0..(...|........|
|00000110| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000120| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000130| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000140| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000150| 00 00 00 00 00 00 00 00 | 5c 30 00 00 34 00 00 00 |........|\0..4...|
|00000160| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000170| 00 00 00 00 00 00 00 00 | 2e 74 65 78 74 00 00 00 |........|.text...|
|00000180| c2 01 00 00 00 10 00 00 | 00 02 00 00 00 02 00 00 |........|........|
|00000190| 00 00 00 00 00 00 00 00 | 00 00 00 00 20 00 00 60 |........|.... ..`|
|000001a0| 2e 64 61 74 61 00 00 00 | 04 00 00 00 00 20 00 00 |.data...|..... ..|
|000001b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001c0| 00 00 00 00 40 00 00 c0 | 2e 69 64 61 74 61 00 00 |....@...|.idata..|
|000001d0| 60 01 00 00 00 30 00 00 | 00 02 00 00 00 04 00 00 |`....0..|........|
|000001e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 00 c0 |........|....@...|
|000001f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000200| 8a 4c 24 04 a1 00 20 40 | 00 38 08 75 08 40 a3 00 |.L$... @|.8.u.@..|
|00000210| 20 40 00 eb f4 c3 56 ff | 74 24 08 e8 e0 ff ff ff | @....V.|t$......|
|00000220| 59 8b 0d 00 20 40 00 8b | f1 8a 11 84 d2 74 0f 3a |Y... @..|.....t.:|
|00000230| 54 24 08 74 09 41 89 0d | 00 20 40 00 eb eb 80 39 |T$.t.A..|. @....9|
|00000240| 00 74 09 80 21 00 ff 05 | 00 20 40 00 8b c6 5e c3 |.t..!...|. @...^.|
|00000250| a1 00 20 40 00 80 38 22 | 75 04 6a 22 eb 02 6a 20 |.. @..8"|u.j"..j |
|00000260| e8 b1 ff ff ff 59 c3 8b | 4c 24 04 53 56 33 d2 80 |.....Y..|L$.SV3..|
|00000270| 39 2d 6a 01 58 75 04 83 | c8 ff 41 8a 19 84 db 74 |9-j.Xu..|..A....t|
|00000280| 15 0f be f3 83 ee 30 78 | 0d 83 fe 09 7f 08 8d 14 |......0x|........|
|00000290| 92 8d 14 56 eb e4 5e 0f | af c2 5b c3 51 51 53 55 |...V..^.|..[.QQSU|
|000002a0| 56 57 ff 15 88 30 40 00 | 8b f0 56 ff 15 84 30 40 |VW...0@.|..V...0@|
|000002b0| 00 8b 1d 80 30 40 00 40 | 50 6a 40 ff d3 56 50 a3 |....0@.@|Pj@..VP.|
|000002c0| 00 20 40 00 ff 15 7c 30 | 40 00 e8 81 ff ff ff e8 |. @...|0|@.......|
|000002d0| 7c ff ff ff 50 e8 8d ff | ff ff 8b f0 33 ff 3b f7 ||...P...|....3.;.|
|000002e0| 59 75 07 6a 01 e9 ce 00 | 00 00 6a 20 e8 0f ff ff |Yu.j....|..j ....|
|000002f0| ff a1 00 20 40 00 59 56 | 57 68 00 00 10 00 89 44 |... @.YV|Wh.....D|
|00000300| 24 20 ff 15 78 30 40 00 | 8b f0 3b f7 89 74 24 10 |$ ..x0@.|..;..t$.|
|00000310| 75 07 6a 02 e9 9f 00 00 | 00 ff 15 74 30 40 00 a9 |u.j.....|...t0@..|
|00000320| 00 00 00 80 75 11 6a ff | 6a ff ff 15 70 30 40 00 |....u.j.|j...p0@.|
|00000330| 50 ff 15 6c 30 40 00 6a | ff 56 ff 15 68 30 40 00 |P..l0@.j|.V..h0@.|
|00000340| 85 c0 75 72 8b 35 64 30 | 40 00 bd e8 03 00 00 55 |..ur.5d0|@......U|
|00000350| ff d6 ff 74 24 10 ff 15 | 60 30 40 00 55 ff d6 6a |...t$...|`0@.U..j|
|00000360| 44 5d 55 6a 40 ff d3 6a | 10 6a 40 8b f0 ff d3 8b |D]Uj@..j|.j@.....|
|00000370| d8 89 2e 53 56 57 57 57 | 57 57 57 ff 74 24 34 89 |...SVWWW|WWW.t$4.|
|00000380| 7e 08 89 7e 0c c7 46 2c | 01 00 00 00 57 66 89 7e |~..~..F,|....Wf.~|
|00000390| 30 ff 15 5c 30 40 00 8b | 03 3b c7 74 07 50 ff 15 |0..\0@..|.;.t.P..|
|000003a0| 60 30 40 00 8b 5b 04 3b | df 74 07 53 ff 15 60 30 |`0@..[.;|.t.S..`0|
|000003b0| 40 00 33 c0 eb 03 6a 03 | 58 5f 5e 5d 5b 59 59 c2 |@.3...j.|X_^][YY.|
|000003c0| 10 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000400| 28 30 00 00 00 00 00 00 | 00 00 00 00 52 31 00 00 |(0......|....R1..|
|00000410| 5c 30 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |\0......|........|
|00000420| 00 00 00 00 00 00 00 00 | 90 30 00 00 a2 30 00 00 |........|.0...0..|
|00000430| b0 30 00 00 b8 30 00 00 | ce 30 00 00 ea 30 00 00 |.0...0..|.0...0..|
|00000440| fe 30 00 00 0c 31 00 00 | 1a 31 00 00 26 31 00 00 |.0...1..|.1..&1..|
|00000450| 34 31 00 00 40 31 00 00 | 00 00 00 00 90 30 00 00 |41..@1..|.....0..|
|00000460| a2 30 00 00 b0 30 00 00 | b8 30 00 00 ce 30 00 00 |.0...0..|.0...0..|
|00000470| ea 30 00 00 fe 30 00 00 | 0c 31 00 00 1a 31 00 00 |.0...0..|.1...1..|
|00000480| 26 31 00 00 34 31 00 00 | 40 31 00 00 00 00 00 00 |&1..41..|@1......|
|00000490| 3d 00 43 72 65 61 74 65 | 50 72 6f 63 65 73 73 41 |=.Create|ProcessA|
|000004a0| 00 00 18 00 43 6c 6f 73 | 65 48 61 6e 64 6c 65 00 |....Clos|eHandle.|
|000004b0| 3f 02 53 6c 65 65 70 00 | 6a 02 57 61 69 74 46 6f |?.Sleep.|j.WaitFo|
|000004c0| 72 53 69 6e 67 6c 65 4f | 62 6a 65 63 74 00 28 02 |rSingleO|bject.(.|
|000004d0| 53 65 74 50 72 6f 63 65 | 73 73 57 6f 72 6b 69 6e |SetProce|ssWorkin|
|000004e0| 67 53 65 74 53 69 7a 65 | 00 00 d3 00 47 65 74 43 |gSetSize|....GetC|
|000004f0| 75 72 72 65 6e 74 50 72 | 6f 63 65 73 73 00 4c 01 |urrentPr|ocess.L.|
|00000500| 47 65 74 56 65 72 73 69 | 6f 6e 00 00 b4 01 4f 70 |GetVersi|on....Op|
|00000510| 65 6e 50 72 6f 63 65 73 | 73 00 9b 02 6c 73 74 72 |enProces|s...lstr|
|00000520| 63 70 79 41 00 00 55 01 | 47 6c 6f 62 61 6c 41 6c |cpyA..U.|GlobalAl|
|00000530| 6c 6f 63 00 a1 02 6c 73 | 74 72 6c 65 6e 41 00 00 |loc...ls|trlenA..|
|00000540| aa 00 47 65 74 43 6f 6d | 6d 61 6e 64 4c 69 6e 65 |..GetCom|mandLine|
|00000550| 41 00 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 00 00 |A.KERNEL|32.dll..|
|00000560| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000570| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000580| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000590| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+