home

windowsnt_4.0_server_disk1.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.allbootdisks.com.
MD5:
ab6b085ea71c0268a1de1f094ed81c96

SHA-1:
ccb605dfda4a0ef1d22b0d47ac163a1fd8335e37

SHA-256:
c61408b5655076f862c9c553ea410c0820f2da33b89484861d00058975806626

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 4:22:36 AM UTC  (today)

File size:
388 KB (397,269 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\windowsnt_4.0_server_disk1.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
12288:FLMUvvwadz49hihNXr8Yl/NAXxXevjtogprlbf:Fxvhza0b86/MxONrxf

Entry point:
50, 4B, 03, 04, 0A, 00, 02, 00, 08, 00, BD, 80, 26, 34, F2, 28, FA, 8E, 43, 0F, 06, 00, 00, 80, 16, 00, 0C, 00, 0C, 00, 4D, 53, 44, 4F, 53, 37, 31, 42, 2E, 49, 4D, 41, 57, 49, 08, 00, 01, 00, 00, 00, 00, 80, 16, 00, EC, BD, 79, 5C, 14, 47, FA, 30, 5E, DD, 3D, D3, 3D, 1C, 33, DC, 87, D7, CC, 80, D8, 1E, 48, 8B, A0, 78, 80, DC, 87, A8, C0, 00, CA, A9, E0, 39, 49, CC, 65, 86, 6E, C9, A1, 71, 70, D4, 30, 33, 6A, 92, CD, 77, 37, D9, 77, 93, EF, 72, E8, 1E, 39, 36, 24, 21, 0A, BA, C1, 81, 41, D0, 18, E2, B5, D9...
 
[+]

Entropy:
7.9980  (probably packed)

The file windowsnt_4.0_server_disk1.exe has been seen being distributed by the following URL.

http://www.allbootdisks.com/downloads/Disks/Windows_NT_Boot_Disk_Download51/WindowsNT_4.0_Server/.../WindowsNT_4.0_Server_Disk1.exe

Scan windowsnt_4.0_server_disk1.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.