{
  "fileFormatID": 807,
  "formatName": "Windows Setup File",
  "version": null,
  "formatDescription": "Windows Setup File or Installer Script.",
  "releaseDate": null,
  "binaryFileFormat": "Text",
  "formatNote": null,
  "lastUpdatedDate": "02 Feb 2007",
  "formatProvenance": null,
  "formatSourceDate": "02 Feb 2007",
  "formatDisclosure": null,
  "formatEnvironment": null,
  "formatRisk": null,
  "formatAliases": null,
  "formatTypes": "Text (Structured)",
  "formatFamilies": null,
  "identifiers": [
    {
      "identifierText": "application/inf",
      "identifierType": "MIME"
    },
    {
      "identifierText": "x-fmt/420",
      "identifierType": "PUID"
    }
  ],
  "internalSignatures": [
    {
      "signatureID": 441,
      "name": "Setup Information File 1",
      "note": "ASCII: [Version]..Signature=\"$CHICAGO$\". By convention, the Version section appears first in INF files, although this is not always the case in practice. Every Windows INF file must have this section. This version of the inf file can appear in all Windows operating systems",
      "byteSequences": [
        {
          "positionType": "Absolute from BOF",
          "offset": 0,
          "maxOffset": 1024,
          "byteSequence": "5B(56|76)657273696F6E5D0D0A(53|73)69676E6174757265{0-1}3D{0-2}24(4368696361676F|4348494341474F)24{0-1}0D0A",
          "endianness": null,
          "byteSequenceID": 556
        }
      ],
      "provenance": "Ongoing DROID research."
    },
    {
      "signatureID": 442,
      "name": "Setup Information File 2",
      "note": "ASCII: [Version]..Signature=\"$WINDOWS NT$\". By convention, the Version section appears first in INF files, although this is not always the case in practice. Every Windows INF file must have this section. This version of the inf file can appear in all Windows NT based operating systems",
      "byteSequences": [
        {
          "positionType": "Absolute from BOF",
          "offset": 0,
          "maxOffset": 1024,
          "byteSequence": "5B(56|76)657273696F6E5D0D0A(53|73)69676E6174757265{0-3}3D{0-1}2224(57494E444F5753|57696E646F7773)204E5424220D0A",
          "endianness": null,
          "byteSequenceID": 557
        }
      ],
      "provenance": "Ongoing DROID research"
    },
    {
      "signatureID": 443,
      "name": "Setup Information File 3",
      "note": "ASCII: [Version]..Signature=\"$Windows 95$\". By convention, the Version section appears first in INF files, although this is not always the case in practice. Every Windows INF file must have this section. This version of the inf file can appear in all Windows 9x/ME operating systems",
      "byteSequences": [
        {
          "positionType": "Absolute from BOF",
          "offset": 0,
          "maxOffset": 1024,
          "byteSequence": "5B(56|76)657273696F6E5D0D0A(53|73)69676E6174757265{0-3}3D{0-1}2224(57494E444F5753|57696E646F7773)20393524220D0A",
          "endianness": null,
          "byteSequenceID": 558
        }
      ],
      "provenance": "Ongoing DROID research"
    }
  ],
  "externalSignatures": [
    {
      "externalSignature": "inf",
      "signatureType": "File extension"
    }
  ],
  "relationships": [],
  "submittedBy": [
    1
  ]
}