Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
SetupRST.exe
Resource
win10v2004-20221111-en
Target
SetupRST.exe
Size
21.0MB
MD5
b8de660fa83b1e19401aed82c2369773
SHA1
1f53bd47bdc9d8c54ac7b9b1652c41cd1aa59f42
SHA256
f9cf96322a5bfff24c4ddd9c99d56bf9513c096ac24e0fc3d00976150e3fae30
SHA512
65695dcaf52d63432788e8e446ac534b8b201c75e8aaad138bd08512d95ec1e54893ee29b85f385a5d5a5db9209a9f3f16fa0f77f1bfebe56b042854946fcafd
SSDEEP
393216:ozd02s07Nkv7iQwEhvMRjfM6rCTCu5IBMjZ2hNSBZUabtl3hRhfmKUqhnuOD:ods05Q3wEKRjfMSCTCve6NaZvhjUenuc
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
CN=Intel Corporation,OU=Intel(R) Connectivity Innovation,O=Intel Corporation,L=Santa Clara,ST=California,C=US
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SetupGetStringFieldW
SetupGetLineTextW
SetupFindFirstLineW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiGetClassDevsA
SetupCloseInfFile
SetupOpenInfFileW
SetupDiDestroyDeviceInfoList
SetupDiRemoveDevice
SetupDiGetDeviceRegistryPropertyA
CM_Get_DevNode_Status
SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInfo
CM_Locate_DevNodeA
CM_Reenumerate_DevNode
SetupDiGetClassDevsW
CM_Get_Device_ID_ListW
CM_Get_Device_ID_List_SizeW
CM_Locate_DevNodeW
SetupFindNextLine
RpcStringFreeW
NdrClientCall2
RpcStringBindingComposeW
RpcBindingFromStringBindingW
CM_Get_DevNode_PropertyW
MultiByteToWideChar
CreateFileW
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
CloseHandle
LoadResource
LockResource
SizeofResource
GetTempFileNameW
MoveFileW
MoveFileExW
ExpandEnvironmentStringsW
GetFileSize
ReadFile
GetFileAttributesW
IsWow64Process
GetCurrentProcess
CreateProcessW
GetExitCodeProcess
GetCurrentDirectoryW
GetDriveTypeW
SetFilePointer
GetProcAddress
GetTickCount
Sleep
ExitProcess
GetNativeSystemInfo
LoadLibraryExW
EnumResourceLanguagesW
GetLocaleInfoW
GetUserDefaultUILanguage
OpenMutexW
ReleaseMutex
CreateMutexW
GlobalAlloc
GlobalLock
GlobalUnlock
GetLocalTime
GetTempPathW
CreateDirectoryW
WideCharToMultiByte
InitializeCriticalSection
DeleteCriticalSection
DecodePointer
FileTimeToSystemTime
EnterCriticalSection
LeaveCriticalSection
CreateFileA
DeviceIoControl
GetModuleFileNameA
LoadLibraryA
CreateMutexA
OpenMutexA
ResetEvent
lstrlenA
GetDiskFreeSpaceExA
SetEvent
CreateEventA
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
VerifyVersionInfoA
GetFinalPathNameByHandleW
WriteFile
GetModuleHandleExW
GetSystemTimeAsFileTime
CreateSemaphoreA
GetFirmwareEnvironmentVariableA
SetFirmwareEnvironmentVariableA
GetStdHandle
HeapReAlloc
HeapFree
HeapAlloc
GetACP
ExitThread
RtlUnwind
InterlockedPushEntrySList
FreeLibraryAndExitThread
GetThreadTimes
CreateThread
GetStartupInfoW
IsDebuggerPresent
GetCurrentProcessId
InitializeSListHead
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LCMapStringW
CompareStringW
GetCPInfo
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
CreateEventW
EncodePointer
QueryPerformanceCounter
FindClose
FindNextFileW
lstrcmpW
FindFirstFileW
GetSystemPowerStatus
GetEnvironmentVariableW
FindResourceW
GetCommandLineW
VerSetConditionMask
VerifyVersionInfoW
WaitForSingleObject
DeleteFileW
RemoveDirectoryW
CopyFileW
SetFileAttributesW
GetModuleFileNameW
LocalAlloc
FreeLibrary
LoadLibraryW
GetSystemDirectoryW
MulDiv
GetModuleHandleW
SetDefaultDllDirectories
GlobalDeleteAtom
SetLastError
GetLastError
GlobalAddAtomW
GlobalFindAtomW
LocalFree
FormatMessageW
GetFileType
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetTimeZoneInformation
IsValidCodePage
GetOEMCP
GetProcessHeap
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FindFirstFileExW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetStdHandle
ReadConsoleW
HeapSize
WriteConsoleW
OpenFileById
GetCurrentThread
WaitForSingleObjectEx
GetStringTypeW
LoadLibraryExA
VirtualQuery
VirtualProtect
GetSystemInfo
RaiseException
AdjustWindowRectEx
DrawTextW
GetWindowTextLengthW
SetRectEmpty
LoadStringW
MessageBoxIndirectW
FillRect
SetRect
GetWindowLongW
EnableWindow
SetDlgItemTextW
InvalidateRect
GetParent
GetSystemMetrics
SetWindowTextW
GetWindowTextW
GetWindow
GetDlgItem
GetClientRect
SetWindowPos
GetWindowRect
DestroyWindow
DispatchMessageW
TranslateMessage
IsDialogMessageW
GetMessageW
ShowWindow
SetWindowLongW
CreateDialogIndirectParamW
ExitWindowsEx
SendMessageW
MoveWindow
MonitorFromWindow
GetMonitorInfoW
CreateWindowExW
MessageBoxW
wsprintfW
ReleaseDC
GetDC
LoadImageW
CallWindowProcW
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
OffsetRect
SetFocus
MapDialogRect
UpdateWindow
LoadCursorW
SetCursor
SetClassLongW
InflateRect
GetClassNameW
MapWindowPoints
EndDialog
CopyRect
GetTextMetricsW
DeleteDC
StretchBlt
SelectObject
CreateCompatibleDC
SetBkMode
SetTextColor
GetObjectW
GetStockObject
CreateFontW
GetDeviceCaps
DeleteObject
BitBlt
RegDeleteTreeW
EnumDependentServicesW
StartServiceW
ChangeServiceConfigW
RegSetKeyValueW
RegDeleteValueA
RegCreateKeyExA
TraceMessage
RegQueryValueExA
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegOpenKeyExA
RegEnumKeyExA
RegDeleteKeyExA
RegSetValueExA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetEntriesInAclW
RegQueryValueExW
DeleteService
RegCloseKey
ControlService
OpenServiceW
CloseServiceHandle
OpenSCManagerW
QueryServiceStatusEx
RegDeleteKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
SHGetFolderLocation
SHCreateDirectoryExW
ShellExecuteW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFolderPathW
SHFileOperationW
CommandLineToArgvW
CoInitialize
StringFromGUID2
CoInitializeEx
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoReleaseMarshalData
CoUninitialize
CoTaskMemFree
OleRun
CoCreateInstance
GetErrorInfo
VariantClear
VariantCopy
VariantInit
SysStringLen
SysFreeString
SysAllocString
PathRemoveFileSpecA
PathFileExistsW
PathFindExtensionW
PathRemoveExtensionW
PathFindFileNameW
PathQuoteSpacesW
PathRemoveFileSpecW
PathGetArgsW
PathRemoveArgsW
StrStrIW
PathIsRelativeW
PathCombineW
PathAppendA
PathIsUNCW
PathStripToRootW
PathSkipRootW
PathGetCharTypeW
PathMatchSpecW
PathAppendW
??0CConsolidatedError@@QAE@ABV0@@Z
??0CConsolidatedError@@QAE@W4ISDI2_ERRORS@CConsolidatedErrorGenerated@@@Z
??0CConsolidatedError@@QAE@XZ
??0GlobalLogger@@AAE@XZ
??0ISIAccelerateAction@@QAE@XZ
??1CConsolidatedError@@QAE@XZ
??1GlobalLogger@@QAE@XZ
??1ISIAccelerateAction@@QAE@XZ
??4CConsolidatedError@@QAEAAV0@ABV0@@Z
??4CConsolidatedErrorGenerated@@QAEAAV0@$$QAV0@@Z
??4CConsolidatedErrorGenerated@@QAEAAV0@ABV0@@Z
??4GlobalLogger@@AAEAAV0@$$QAV0@@Z
??BCConsolidatedError@@QBE?AU_ISI_Error@@XZ
?AddDebugInformation@CConsolidatedError@@QAAXPBDZZ
?AddDebugInformation@CConsolidatedError@@QAAXPB_WZZ
?AddErrorMessage@CConsolidatedError@@QAAXPBDZZ
?AddErrorMessage@CConsolidatedError@@QAAXPB_WZZ
?CleanupIsiError@@YAXI@Z
?CleanupIsiError@@YAXPAU_ISI_Error@@@Z
?ClearError@CConsolidatedError@@QAEXXZ
?FreeStringResources@CConsolidatedError@@AAEXXZ
?GetDebugInformation@CConsolidatedError@@QBEKPADH@Z
?GetDebugInformation@CConsolidatedError@@QBEKPA_WH@Z
?GetDebugInformation@CConsolidatedError@@QBEPBDXZ
?GetErrorCodeString@CConsolidatedError@@QBEKPADH@Z
?GetErrorCodeString@CConsolidatedError@@QBEKPA_WH@Z
?GetErrorCodeString@CConsolidatedError@@QBEPBDXZ
?GetErrorMessage@CConsolidatedError@@QBEKPADH@Z
?GetErrorMessage@CConsolidatedError@@QBEKPA_WH@Z
?GetErrorMessage@CConsolidatedError@@QBEPBDXZ
?GetSrtEolError@CConsolidatedError@@SA?AV1@XZ
?InternalAddDebugInformation@CConsolidatedError@@AAEXPBDPAD@Z
?InternalAddErrorMessage@CConsolidatedError@@AAEXPBDPAD@Z
?IsBusy@CConsolidatedError@@QBE_NXZ
?IsError@CConsolidatedError@@QBE_NXZ
?IsPending@CConsolidatedError@@QBE_NXZ
?IsSuccessful@CConsolidatedError@@QBE_NXZ
?MAX_ERROR_STRING_SIZE@CConsolidatedError@@2HB
?MapIsiStatus@CConsolidatedError@@ABE?AW4ISDI2_ERRORS@CConsolidatedErrorGenerated@@W4_ISI_Status@@@Z
?NO_ID@GlobalLogger@@2IB
?SMALL_STRING_SIZE@CConsolidatedError@@2HB
?SetError@CConsolidatedError@@QAEXV1@@Z
?SetError@CConsolidatedError@@QAEXW4ISDI2_ERRORS@CConsolidatedErrorGenerated@@PBD1@Z
?SetError@CConsolidatedError@@QAEXW4ISDI2_ERRORS@CConsolidatedErrorGenerated@@PBD@Z
?SetError@CConsolidatedError@@QAEXW4ISDI2_ERRORS@CConsolidatedErrorGenerated@@PB_W1@Z
?SetError@CConsolidatedError@@QAEXW4ISDI2_ERRORS@CConsolidatedErrorGenerated@@PB_W@Z
?SetError@CConsolidatedError@@QAEXW4ISDI2_ERROR_TYPE@1@KPBD@Z
?SetError@CConsolidatedError@@QAEXW4ISDI2_ERROR_TYPE@1@KPB_W@Z
?SetError@CConsolidatedError@@QAEXW4_ISI_Status@@PBD1@Z
?SetError@CConsolidatedError@@QAEXW4_ISI_Status@@PB_W1@Z
?SetErrorCodeString@CConsolidatedError@@AAEXXZ
?SetLoggingOff@GlobalLogger@@SAXXZ
?SetLoggingOn@GlobalLogger@@SAXXZ
?__autoclassinit2@CConsolidatedError@@QAEXI@Z
?__autoclassinit2@GlobalLogger@@QAEXI@Z
?_disableLogging@GlobalLogger@@0_NA
?checkIfDiskPairValid@ISIAccelerateAction@@UAE?AU_ISI_Error@@IIAAW4_ISI_NgsaDiskPairStatus@@@Z
?checkIfDiskValid@ISIAccelerateAction@@UAE?AU_ISI_Error@@IW4_ISI_NgsaDiskConcatenationMember@@AAW4_ISI_NgsaDiskValidForConcatenationStatus@@@Z
?clean@GlobalLogger@@QAEXI@Z
?configDiskAcceleration@ISIAccelerateAction@@UAE?AU_ISI_Error@@IW4_ISI_NvcMode@@@Z
?configVolumeAcceleration@ISIAccelerateAction@@UAE?AU_ISI_Error@@IW4_ISI_NvcMode@@@Z
?doClearBlockCache@ISIAccelerateAction@@UAE?AU_ISI_Error@@XZ
?doCreateCacheVolumeTask@ISIAccelerateAction@@UAE?AU_ISI_Error@@I@Z
?doDisassociate@ISIAccelerateAction@@UAE?AU_ISI_Error@@ABU_ISI_VolumeInfo@@@Z
?doNgsaAutomation@ISIAccelerateAction@@UAE?AU_ISI_Error@@AAI@Z
?doNgsaDisableOneStep@ISIAccelerateAction@@UAE?AU_ISI_Error@@XZ
?doNgsaEnableOneStep@ISIAccelerateAction@@UAE?AU_ISI_Error@@XZ
?doNgsaStartTools@ISIAccelerateAction@@UAE?AU_ISI_Error@@XZ
?doResetVolportPerformanceCounters@ISIAccelerateAction@@UAE?AU_ISI_Error@@XZ
?doSeparateConcatenation@ISIAccelerateAction@@UAE?AU_ISI_Error@@I@Z
?doSeparateConcatenationNoSync@ISIAccelerateAction@@QAE?AU_ISI_Error@@XZ
?get@GlobalLogger@@SAAAV1@XZ
?getConcatenationMigrationStatus@ISIAccelerateAction@@UAE?AU_ISI_Error@@AAH00AAW4_ISI_NgsaMigrationType@@@Z
?getError@GlobalLogger@@QAE?AVCConsolidatedError@@I_N@Z
?getLastError@GlobalLogger@@QAE?AVCConsolidatedError@@_N@Z
?getLastId@GlobalLogger@@QAEIXZ
?getMaxCacheSize@ISIAccelerateAction@@SA_K_N@Z
?getMinCacheSize@ISIAccelerateAction@@SA_K_N@Z
?getNgsaDiskPairStatuses@ISIAccelerateAction@@UAE?AU_ISI_Error@@IW4_ISI_NgsaDiskPairScope@@QAU_ISI_NgsaDiskPair@@AAI@Z
?getNgsaDiskPairStatuses@ISIAccelerateAction@@UAE?AU_ISI_Error@@W4_ISI_NgsaDiskPairScope@@QAU_ISI_NgsaDiskPair@@AAI@Z
?getNgsaInfo@ISIAccelerateAction@@QAE?AU_ISI_NgsaInfo@@XZ
?resetCacheToAvailable@ISIAccelerateAction@@UAE?AU_ISI_Error@@I@Z
?setCacheVolSize@ISIAccelerateAction@@UAEX_K@Z
?setError@GlobalLogger@@QAEIABVCConsolidatedError@@@Z
?setError@GlobalLogger@@QAEIABVCConsolidatedError@@AAU_ISI_Error@@@Z
?setFastDisk@ISIAccelerateAction@@UAEXI@Z
?setFileCacheSize@ISIAccelerateAction@@UAEXI@Z
?setMigrationStart@ISIAccelerateAction@@UAEX_K@Z
?setPreservePinningData@ISIAccelerateAction@@UAEX_N@Z
?setSeparationSafe@ISIAccelerateAction@@UAEX_N@Z
?setSlowDisk@ISIAccelerateAction@@UAEXI@Z
?turnOffVolumeOrDiskAcceleration@ISIAccelerateAction@@UAE?AU_ISI_Error@@I@Z
?waitForNvcMode@ISIAccelerateAction@@UAE?AU_ISI_Error@@IW4_ISI_NvcMode@@@Z
GetLPCId
ISI_NgsaDiskPairStatusToDescription
ISI_NgsaDiskValidForConcatenationStatusToDescription
ISI_NgsaOperationStatusToDescription
IsiAddDisksToArray
IsiArraySetWriteCacheState
IsiCacheVolumeCreateFromArray
IsiCacheVolumeCreateFromDisks
IsiDiskAssignStoragePool
IsiDiskClaim
IsiDiskClearMetadata
IsiDiskDestroyCache
IsiDiskGetPartitionTableInfos
IsiDiskMarkAsFailed
IsiDiskMarkAsNormal
IsiDiskMarkAsSpare
IsiDiskMarkOffline
IsiDiskMarkOnline
IsiDiskResetSmartEvent
IsiDiskSetCacheBufferFlushSetting
IsiDiskSetCacheMode
IsiDiskSetCacheSpindownPolicy
IsiDiskSetSmartEvent
IsiDiskSetWriteCachingPolicySetting
IsiDiskUnlock
IsiDiskUnmarkAsSpare
IsiExpandVolume
IsiFinalize
IsiGetArrayHandles
IsiGetArrayHandlesByControllerHandle
IsiGetArrayInfo
IsiGetControllerHandles
IsiGetControllerInfo
IsiGetDiskIdentifyData
IsiGetEndDeviceHandles
IsiGetEndDeviceInfo
IsiGetErrorDebugMessage
IsiGetErrorMessage
IsiGetIsmArrays
IsiGetIsmEndDevices
IsiGetIsmVolumes
IsiGetLastErrorDebugMessage
IsiGetLastErrorMessage
IsiGetMiddlewareVersionInfo
IsiGetNgsaDiskPairHandles
IsiGetNgsaDiskPairInfo
IsiGetNgsaHandles
IsiGetNgsaInfo
IsiGetNgsaInfoEx
IsiGetNvCachePolicyStatInfo
IsiGetNvCacheStat2Info
IsiGetNvCacheStatInfo
IsiGetNvCacheUnifiedStats
IsiGetNvcInfo
IsiGetOptaneOptimizationInfo
IsiGetRaidInfo
IsiGetRaidInfoHandles
IsiGetRaidLevelInfo
IsiGetRdpDictEndDevices
IsiGetSystemInfo
IsiGetVolportPerformanceCounters
IsiGetVolumeHandles
IsiGetVolumeInfo
IsiGetVolumeMigrationRange
IsiGetZpoddInfo
IsiInitialize
IsiNvcDisassociate
IsiRaidLevelModify
IsiRefreshPartitionInfo
IsiRescan
IsiSessionClose
IsiSessionOpen
IsiSetLpmStatus
IsiSetReadPatrolUnit
IsiToggleCoalescerPolicy
IsiVdsHandlerMakeSpaceForMetadataOnSystemDisk
IsiVolumeCancelVerify
IsiVolumeCreate
IsiVolumeCreateFromDisks
IsiVolumeDelete
IsiVolumeDestroyCache
IsiVolumeInitialize
IsiVolumeMarkAsNormal
IsiVolumeRebuild
IsiVolumeRename
IsiVolumeSetBufferFlush
IsiVolumeSetCacheMode
IsiVolumeSetCachePolicy
IsiVolumeSetCacheSpindownPolicy
IsiVolumeSetExportPolicy
IsiVolumeVerify
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ