Sample details: 0e67e9947df6b81b8e2fa89aadb05428 --

Hashes
MD5: 0e67e9947df6b81b8e2fa89aadb05428
SHA1: 8e6e24fc6e87d1bfff6efaec50a5ae604d242ddd
SHA256: 82ed3bae15ea9607c013b5b3d663a8484ee0faf126e5c24f132d8a1d41e60a03
SSDEEP: 1536:IGfiDWBjbZvKTzBRVPgypt5NsfmvFF9FGPFOWlUf09:VcWBjbeBRVPgifNsfmj9FGPFT
Details
File Type: MS-DOS
Yara Hits
YRP/IsConsole | YRP/domain | YRP/contentis_base64 |
Parent Files
04c2a436bfdfe4079470931d71fa01a2
Strings
		!This program requires Microsoft Windows.
BOOTSTRP
___EXPORTEDSTUB
KERNEL
LOADLIBRARYEX32W
FREELIBRARY32W
GETPROCADDRESS32W
GETVDMPOINTER32W
CALLPROC32W
KEYBOARD
LZEXPAND
MS-Setup Loader
BOOTWNDPROC
tX<"t$<\t
t^<"t'<\t
,+t$,7t>
t%Ht\Hu
t5Ft@;
B:~efh
F:G;>B:|
D0f@fPj
D0f@fPj
D0f@fP
b:G;>^:|
&[?2&Y?
Ht7HtP
?:uFRP
?\u0RP
h2Ij@j
~msstfqf.t
kernel32.dll
GetVersion
TmpDirName
TmpDirSize
FirstCabNum
LastCabNum
DrvWinClass
CmdLine
Require31
WndTitle
WndMess
CabinetFile
InsertCDMsg
InsertDiskMsg
Background
BkgWinClass
~MSSETUP.T
\tXXXXXX
\_MSSETUP._Q_
ATTRIB -R
MS Setup (ACME)\Bootstrapper\Exit Level
Running
rename
wininit.ini
_MSSETUP._Q_
Setup.ini
Ht9HtZ
sfXXXXXX
Ht;HtZ3
Params
Win3.x Params
Win3.x Files
Windows 95 Params
Windows 95 Files
NT Alpha Params
NT Alpha Files
NT Mips Params
NT Mips Files
NT PPC Params
NT PPC Files
NT Intel Params
NT Intel Files
NT3.51 Intel Params
NT3.51 Intel Files
PROCESSOR_ARCHITECTURE
STUFF-BOOT
Source Directory	
         (((((                  H
_C_FILE_INFO=
<<NMSG>>
- stack overflow
- integer divide by 0
- not enough space for environment
- unexpected heap error
- unexpected QuickWin error
- not enough space for arguments
- no main procedure
run-time error 
- floating-point support not loaded
wwwwwx
wwwwwwwx
wwwwww
 Windows
."'%s' 
 %1ldkb
 Windows
 %1ldkb
, Windows
: %s9%s 
 Windows 
 %s K 
.C'%s' 
VS_VERSION_INFO
StringFileInfo
041203B5
Comments
Windows 
CompanyName
Microsoft Corporation
FileDescription
MS-Setup Setup Exe
FileVersion
InternalName
bootstrp
LegalCopyright
Copyright (c) Microsoft Corp. 1991-1997
LegalTrademarks
Microsoft(R) is a registered trademark of Microsoft Corporation. Windows(TM) is a trademark of Microsoft Corporation.
OriginalFilename
SETUP.EXE
ProductName
Microsoft Windows
ProductVersion
VarFileInfo
Translation