857840c5e88cf1e9edbe71191576826e3ff3bff123a00ead33c9e112f97abd34

Analysis

max time kernel
145s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20240910-en
resource tags

arch:x64arch:x86image:win10v2004-20240910-enlocale:en-usos:windows10-2004-x64system
submitted
03/10/2024, 09:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

2024-10-03_843239a0428b243975f8a2510fb1bf8e_magniber.exe
Size

144.9MB
MD5

843239a0428b243975f8a2510fb1bf8e
SHA1

ab2787931f9b1e9891eecd015ab5c4893958384f
SHA256

857840c5e88cf1e9edbe71191576826e3ff3bff123a00ead33c9e112f97abd34
SHA512

b6b946b0d7b9f50b05eddd739bc55d403356dd77e5eaee5ed68ba3c8a0ef8120c7dfa4ca0ba2e7ddf349eb9e6c053a661c641ab5a1df4f6588630271376a10f6
SSDEEP

3145728:4qxsnbfpMD1ZiJuqwshMlEzcIFhv88uDfpCtA/:UGfiCsNzcIbu5

Score

5^/10

discovery

Malware Config

Signatures

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-2629364133-3182087385-364449604-1000\Control Panel\International\Geo\Nation	2024-10-03_843239a0428b243975f8a2510fb1bf8e_magniber.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\0408.ui.forms	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\040b.ui.forms	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\uninstall_btn_enabled.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\0407.ui.strings	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\Green_btn_Enabled.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\NVIDIASans_Md.ttf	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\DynamicBillboardPresentations.cfg	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\0416.ui.forms	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\0404.ui.strings	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\0413.ui.strings	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\close_disabled.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\restartnow_btn_hover.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\splash.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\040c.ui.forms	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\0401.ui.strings	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\0410.ui.strings	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\gfe-migration_bg.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\Green_btn_Disabled.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\secondary_btn_focused.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\0415.ui.strings	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\0409.ui.strings	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\0419.ui.strings	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\CoreTemp.{01711BF7-461A-42BD-921C-025892F23FB4}\NVI2.dll	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\DynamicBillboardPresentations.htm	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\040b.ui.strings	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\Green_btn_Focus.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\Green_btn_Pressed.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\primary_btn_hover.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\NVIDIASans_BdIt.ttf	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\0406.ui.forms	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\0408.ui.strings	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\restartlater_btn_enabled.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\restartlater_btn_hover.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\0413.ui.forms	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\041d.ui.forms	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\0405.ui.strings	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\primary_btn_pressed.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\0422.ui.forms	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\close_pressed.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\uninstall_btn_pressed.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\close.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\NvApp\FunctionalConsent_en-US.txt	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\040a.ui.strings	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\040e.ui.strings	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\0424.ui.strings	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\0816.ui.strings	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\CoreTemp.{01711BF7-461A-42BD-921C-025892F23FB4}\NvInstallerUtil.dll	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\041f.ui.strings	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\0809.ui.strings	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\secondary_btn_enabled.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\secondary_btn_pressed.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\NVIDIASans_Bd.ttf	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\040a.ui.forms	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\0816.ui.forms	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\json2.js	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\NvApp\UpgradeConsent\NvApp_upgrade_text_0409.txt	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\0407.ui.forms	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\0414.ui.forms	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\041d.ui.strings	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\DynamicBillboardPresentations.dll	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\EULA_bg.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\restartlater_btn_focused.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\040e.ui.forms	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\0406.ui.strings	setup.exe

Executes dropped EXE 1 IoCs

pid	Process
4192	setup.exe

Loads dropped DLL 9 IoCs

pid	Process
4192	setup.exe
4192	setup.exe
4192	setup.exe
4192	setup.exe
4192	setup.exe
4192	setup.exe
4192	setup.exe
4192	setup.exe
3132	RunDll32.EXE

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2024-10-03_843239a0428b243975f8a2510fb1bf8e_magniber.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	setup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	RunDll32.EXE

Checks SCSI registry key(s) 3 TTPs 6 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000	setup.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\HardwareID	setup.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\CompatibleIDs	setup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	setup.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID	setup.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\CompatibleIDs	setup.exe

Modifies system certificate store 2 TTPs 10 IoCs

evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\503006091D97D4F5AE39F7CBE7927D7D652D3431\Blob = 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	setup.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\503006091D97D4F5AE39F7CBE7927D7D652D3431\Blob = 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	setup.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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	setup.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\503006091D97D4F5AE39F7CBE7927D7D652D3431\Blob = 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	setup.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\503006091D97D4F5AE39F7CBE7927D7D652D3431\Blob = 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	setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4	setup.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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	setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\503006091D97D4F5AE39F7CBE7927D7D652D3431	setup.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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	setup.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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	setup.exe

Suspicious use of AdjustPrivilegeToken 3 IoCs

description	pid	Process
Token: SeDebugPrivilege	4192	setup.exe
Token: SeDebugPrivilege	4192	setup.exe
Token: SeDebugPrivilege	3132	RunDll32.EXE

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 2472 wrote to memory of 4192	2472	2024-10-03_843239a0428b243975f8a2510fb1bf8e_magniber.exe	93
PID 2472 wrote to memory of 4192	2472	2024-10-03_843239a0428b243975f8a2510fb1bf8e_magniber.exe	93
PID 2472 wrote to memory of 4192	2472	2024-10-03_843239a0428b243975f8a2510fb1bf8e_magniber.exe	93
PID 4192 wrote to memory of 3132	4192	setup.exe	96
PID 4192 wrote to memory of 3132	4192	setup.exe	96
PID 4192 wrote to memory of 3132	4192	setup.exe	96

C:\Users\Admin\AppData\Local\Temp\2024-10-03_843239a0428b243975f8a2510fb1bf8e_magniber.exe
"C:\Users\Admin\AppData\Local\Temp\2024-10-03_843239a0428b243975f8a2510fb1bf8e_magniber.exe"
1⤵
- Checks computer location settings
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2472
- C:\NVIDIA\NVAPP2\setup.exe
  "C:\NVIDIA\NVAPP2\setup.exe" -log:"C:\ProgramData\\NVIDIA Corporation\\NVIDIA app\\Installer\\Logs" -loglevel:6
  2⤵
  - Drops file in Program Files directory
  - Executes dropped EXE
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - Checks SCSI registry key(s)
  - Modifies system certificate store
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of WriteProcessMemory
  PID:4192
- - C:\Windows\SysWOW64\RunDll32.EXE
    C:\Windows\SysWOW64\RunDll32.EXE C:\Users\Admin\AppData\Local\Temp\NVI2_29.DLL,DeferredDelete {68BA9BF4-6828-4F2D-9582-971C1B208757} 4192 C:\NVIDIA\NVAPP2\setup.exe
    3⤵
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - Suspicious use of AdjustPrivilegeToken
    PID:3132

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\NVIDIA\NVAPP2\NVI2\0000.ui.forms

Filesize
60KB

MD5
d2172ad4fe29dbf21ccb1d746bf2d047

SHA1
2b650295b2673138e1af32f2b8c2afcd584fbcb8

SHA256
1b7a7c7df20a5517885d6daaf35421a6cfea429a72eeb2ae4620ab02dacdbd6c

SHA512
607c2ef44ed118a8fc01c872011b14a428f201ac832956717c356de533c29ca095f58c9f0d30cdc5756f8eb7f52aac731f2e1c6a74c6c65a8d0938bf70d70bd8

Download Submit
C:\NVIDIA\NVAPP2\NVI2\0000.ui.strings

Filesize
2KB

MD5
8d7420be80a28f31331566a99bc9a322

SHA1
8ffbe26eb627d4fd69588e0e9e09f0a97dbbee2b

SHA256
c0404e4eff2a2d0d33e48e3dad9488da05f588ff19af34095e108afec89a4d07

SHA512
b21132c790956c0136aeabddda9f7032a7c53eb2ebfd6f98db1e439176244a521cda02a259b712ede5c87e035d64b5c7af005f1e7976271733278c5120ebb553

Download Submit
C:\NVIDIA\NVAPP2\NVI2\0401.ui.forms

Filesize
5KB

MD5
f91660af4ddbf33e65110b452ba7ca28

SHA1
40946793dbb1e4669e57bd1bd89d63a4f3a2deb4

SHA256
295e5891f684083da6f0694889a9da1c09c4976ff1cdf87a6aa9504dfb22e567

SHA512
e617e149c17c4b553a530c223b59b557682aee8f7b5b95c66aa7130d6a296f17c159e1358a53c8ec152efed52028f7955ffe35e3f325f8d7c8801b88cfeaf0ea

Download Submit
C:\NVIDIA\NVAPP2\NVI2\0401.ui.strings

Filesize
12KB

MD5
48155e69842c605475fc8a20ca836267

SHA1
5deef36a279edd093379d1bbbe70089135d7d9b3

SHA256
0efe28a0f0507248c32592e44ebd22a1f2bfd399f149a11cc29d9a7fb8deb3c6

SHA512
e14549e4014312df05e68dc8c5dbbc197024e863faf1d62ea9dada2977a567d150b50c52876a236b3c019f3e8c9dfde07ade7b452ed1a4ee18c57984f5aed885

Download Submit
C:\NVIDIA\NVAPP2\NVI2\0404.ui.forms

Filesize
6KB

MD5
fe55dacaa28ae3f61b32d683d94fd808

SHA1
54a4c2d16ea946d8a8a8a1aed4850d18a6558577

SHA256
7bbb642ed96b774bf81d6ab909ce2d68581110ce6b27d6cb941d7478784ede22

SHA512
6b1d6c4f1eaf11d6c01660b70caf99b0b458b851ca242b021889eab1729b7449a3e29a724b95d042171e210b2a602ceacc1340a17a0218963f00dcbd338b3d3d

Download Submit
C:\NVIDIA\NVAPP2\NVI2\0404.ui.strings

Filesize
10KB

MD5
742728bd1d30e6d2f8f4c899afe887a1

SHA1
9b0a4408930a8188bde9f668a2b274fcdc1391c0

SHA256
135f44b41fc0ac2917f40c84deb7581b51ae4bb9f496fb3366adcc52d8eeb9ae

SHA512
286304f6933ef4fbda8a5fa889097847a56dc5d4e0d4b892fb00979add4a78b2282d63660efd94deb8060ab5b3b68e13c43e7da5037cc1b6eb29f7e61ae9d392

Download Submit
C:\NVIDIA\NVAPP2\NVI2\0405.ui.forms

Filesize
5KB

MD5
593d59ccb49edd3b1cad69c560a8ac65

SHA1
bbfbf0a5aff4465fb37b15c9a6056c5a8bf8c162

SHA256
3f1d4d41c3c486ac58b17ae2641dc46f322847c0797b28f77a217cca9742f389

SHA512
1f668c716373dc8cb09b658cadabfc21be95a5e1b50a94d25efb3c2cd00b2fcb5f817e52f20bb76a4ba370cbf5ae435d53d3429902fd3e344b0789cfb332528e

Download Submit
C:\NVIDIA\NVAPP2\NVI2\0405.ui.strings

Filesize
11KB

MD5
fd6ca3cda0a316524e22d7a634c000b9

SHA1
87746ab0fe77c27907fd7a777fa82d9c14ec5225

SHA256
dcf872bdd9dab14114f126542b4dde4512b986277d770e0d9335bc80c3155929

SHA512
389bac67abde429a7890a8fc5a9b0c3d14a78c90129ac0166af10faf7c0a8440db3895c3b08760a876d2dba57190f7907a731073a95e3c2bb3738888653755b4

Download Submit
C:\NVIDIA\NVAPP2\NVI2\0406.ui.forms

Filesize
5KB

MD5
150d499a867742f3186dd71fdadd443d

SHA1
60edffbc43dd9ba4647a91528c28c41e5b60befe

SHA256
e57909fb0269f96256aaf695c0681ccd13571cc6d960268635538eff8eac87da

SHA512
41d79aa1ea26ba14b46f806671f4675caab379fe0b95a836213eaed8b8b7be95a00f78e45e1b3eae90020eb737e6069f277fa5109b3f5235720eb7dec26d7140

Download Submit
C:\NVIDIA\NVAPP2\NVI2\0406.ui.strings

Filesize
11KB

MD5
1d4e21df72f873ef29d1f4d27287163a

SHA1
f8e3dacf4832a91a3c9badb7aec462a556c69bdc

SHA256
05e4630a4dbc876c70e8e0cd166243cc346a8be54d48f8469559c6839c978e35

SHA512
23a1ef2d80a9d60c9cd0dcef9427348bf855532e89537ae3910500746d0c57fe1a2505a1423b6965a249da1397c30ddf7acfb122650b7fd1c91a68f2ed3af122

Download Submit
C:\NVIDIA\NVAPP2\NVI2\0407.ui.forms

Filesize
6KB

MD5
5861b793c3deedf51c28d8161bed4ef7

SHA1
441359577c163c531d9927f205006af07468af1c

SHA256
0157e8e2a58463c0bc84b961e268c1cd6fccda2b79b3fe49b0aaa82a2945b361

SHA512
a853672380e45e209674224dd0ae9d47d7fa2703076019f204d088ab17b080a65768d02d32b19abcde12679e2c45992af09911d40b031b332181f09530bca614

Download Submit
C:\NVIDIA\NVAPP2\NVI2\0407.ui.strings

Filesize
12KB

MD5
7282e62d694113a9b784e154bca0b68e

SHA1
d5f9e32f877cedccffb528c24e20196006d3c6cd

SHA256
98d4cfdbfc0a7840da7fe266b57da61d4b0ec99fb81eb7adaf65050d8e3834aa

SHA512
73cb626b7e09bd827224533da91f69d5fa5b290797c7d15be0eaf20f5b5d48c681bed5dcc2ddafd973d54a7fa71bbe019eb5bf8ae8bd7ea5d19c92246dc56995

Download Submit
C:\NVIDIA\NVAPP2\NVI2\0408.ui.forms

Filesize
6KB

MD5
df26795dfc3906c79f16ffec25d8da76

SHA1
fa5a7cf05b2bbc3b26abedf8107bd0277324701f

SHA256
8b2f67857667fd22587641594915b44d9d24cadcde09f8da89b46097b40071f1

SHA512
cf50ea8a02f598fcf01d3b7dfc0dbe2dc209eaa317293b8df7890a14ba29d8011cb77feb6bb6277d60469401fda7969265767bdf1238c0342cb12a974005c32f

Download Submit
C:\NVIDIA\NVAPP2\NVI2\0408.ui.strings

Filesize
15KB

MD5
1c087f397aee191eb2b25d2e8912c1d6

SHA1
b222a3e2c68ab71b38f30ce618099b85d361b7da

SHA256
8cb5d3b15b5977c4cd812db80aa2495cd299fa0e7eb7b4b446e4c85289256b75

SHA512
7ec78f80c42964adad9b37e3ccb6cee88eb9b0c4343fbdbc8f4ac933b92217a28b9eeb4af374698ad8b427170d9fdd994ddb4e8bc9e3bb4fc1fa3b1fee9e5241

Download Submit
C:\NVIDIA\NVAPP2\NVI2\0409.ui.forms

Filesize
5KB

MD5
e1a197cf66152197040325f2ee5eab49

SHA1
7bfcfb544f085b199cc7d7c0679e1534e6930107

SHA256
101bb625e9ee927bd4213dbff5ef02987ff2503fce632ecc137fca9bd20482ea

SHA512
4b7cc2d32ace215d5d4a245bc81d3287e9f3c2968a292e13a023706e59ee0683cddc41ec9b2704932f00532a4c01900d69718dc3755a12126cffb9e532c41bab

Download Submit
C:\NVIDIA\NVAPP2\NVI2\0409.ui.strings

Filesize
11KB

MD5
1bff98cf85d881e0520c5c8a129332e6

SHA1
88a1f6e6cb8c14aef7921f9dab9adeb676da387a

SHA256
baceb7205eeaaa72b32e7b18560f1e264331bf0851d4aa94cfe9ad5cd2d7971e

SHA512
33c2f3e64f8f314b6388f7a6868275a3fd296a45b51bd95ae6c2601a446ed80243ee20f79618af4d2b52f77d6c4daa638187c3eed9adae857048a509427f855e

Download Submit
C:\NVIDIA\NVAPP2\NVI2\040a.ui.forms

Filesize
5KB

MD5
0be6f0c6e1623442d223af624ef018ab

SHA1
d1359c892a568a0228d2ae59a91e008947b50330

SHA256
f0cab7e541544faa9fed8ec2d9b73a5e3abaf2b189e91a78e2fa2b70faf46cb5

SHA512
7d850832c4fd3d14e93bb84e6ab56f04c2487c54d06f5be2e26c8ba97eb059fe8ee12157dfcfdd7f3329a65794c0e86e869a939fe14a751a8a887304c9dd64a4

Download Submit
C:\NVIDIA\NVAPP2\NVI2\040a.ui.strings

Filesize
11KB

MD5
dc26ccd62f1787108113bc339ba42180

SHA1
2c2efb5bb812e219f65f4dca93cc6e5410a2db1d

SHA256
1e2a24422ebbfdba7b152c4d6b949ad0d30adb546d78a65a831035d5002aaf87

SHA512
14f7e040b05d67931c440e4f5820dc231467492a321389ddeb59ace2e182f3f3781f951579fefe43be5f2e79b1516fd7897fb6f6e1ecea0a2390aa9ff79355de

Download Submit
C:\NVIDIA\NVAPP2\NVI2\040b.ui.forms

Filesize
5KB

MD5
c50941c08f71899d0ae064c0a98f2573

SHA1
a3f5228dd1ad7cb485e3272943db4fcd1b2f2fc1

SHA256
e7a0116df7de34b4b7899c1f50e3260ffbaf7ed96ef446a38a78e3ac18f3cfb7

SHA512
d7581cbd96304c08d55655c1b4363e2a9d3fc7c19f14e7a3bd3f111376363da8a040267e94ccb3a5281bbb1223db5a416a49c7c8a249d24412dae47dd52a81ad

Download Submit
C:\NVIDIA\NVAPP2\NVI2\040b.ui.strings

Filesize
11KB

MD5
9234d677f1ca21075fe14c63f18ef958

SHA1
7e191135aa49ae85f9dbbdbaf48117a533f0ea46

SHA256
36376b3881c6f83051aea85d152fe1833b594d9bbf6a4563771e2792c6ddcf3b

SHA512
ba78398a01661c52b28ec565c7296999cc0cb73eeb248291022698c5801a0dd2543b3f0077dc488fe32c6bcf3b8d327b50fd23fd6ed9d8e6c92c2a15d75f2aaf

Download Submit
C:\NVIDIA\NVAPP2\NVI2\040c.ui.forms

Filesize
5KB

MD5
423efd4c7ad25552e18537e3fb83cda8

SHA1
4fc3f7f0d9d12759542c976f4047301974d65e50

SHA256
6c47dda221a46b83faf61f4bca02ca745d08fe0a94b9a06d4e9d5246e7af0ce2

SHA512
a3b4540814f53dea2fd89c2caf8e785110c972d132b07eba62494d78457bd2d8e97c5be0da293bbe7ee6156da79dd84d4a26e098b2405ece9e1765133f6eacbe

Download Submit
C:\NVIDIA\NVAPP2\NVI2\040c.ui.strings

Filesize
11KB

MD5
d2df33ca5260b15f3479afdcae4952ec

SHA1
6bcd3b0493acdf3a944b80e55b9050b59b4e7d51

SHA256
68870d5950b9cb83b9c858ed5336b9532394794d22240f2c26a58e98b8489a14

SHA512
43903f8b01b1bf8865315d9750b7715a05647315d3f4f665626cbafbafd35f6147fe48b3d2af0b237b2378710ebb4c128ed33e9fb34f828134539c4a242932bf

Download Submit
C:\NVIDIA\NVAPP2\NVI2\040d.ui.forms

Filesize
5KB

MD5
2f8fd63c6f0288240fe2dd6d4d2e3b97

SHA1
87026b75a2ca709f43761f143f65bd3e2734f7af

SHA256
6d2ba12358e3ffd75a334863147650025eca97b2d2726c2c313eda3b6620a3ca

SHA512
9510a1f1daf82d535adc4d2f0351a5059b3cf4e94e1fc5d93d98807f1b756191667ea0503c99b3ac9f4ca89d01258b706e2ab568d3326a8a33be2bb196114baf

Download Submit
C:\NVIDIA\NVAPP2\NVI2\040d.ui.strings

Filesize
13KB

MD5
c6738b4f7ffc797585ee17a1e1fcc6e1

SHA1
694c781f97074ec4480de057b27f0ad7fbb3fb15

SHA256
c9a369cf8774e1cab927bfe9821c1e83de53a7f1dac6842de3ac632144367ffd

SHA512
1b31d34bee9977bcffb4230ef902c566892e8ca75c7dbff2a97688a34317f3f733f7e27ccfce161f5e9299a800195ffa36215909196504f5f8baec0c725d06df

Download Submit
C:\NVIDIA\NVAPP2\NVI2\040e.ui.forms

Filesize
6KB

MD5
986a96129f9308d7d24db5ba57e75c37

SHA1
0788bc2ee389b751afd38954b6f8c4d85d9b80d7

SHA256
9ddc0b698176711e252691dd58a179ee0e169a99dd9a4bd63b93bc27c49b9a75

SHA512
b7aae2d9a76c329ed736e5b1cc903e29cb4cf8861b8309c628f99a94be7094332f05ba955ee8194f93801e2bf4345ac88ad12a2bef9529abce8ab4483697b06a

Download Submit
C:\NVIDIA\NVAPP2\NVI2\040e.ui.strings

Filesize
11KB

MD5
e3065462b9ebfd492eecb3440fde417e

SHA1
6a022abe09b3dae4448defb54d793606fa581294

SHA256
73c07883a963fc8966c00a69a54f54f050952c288e4d5f7ccbbacd8ffbbbecf0

SHA512
ce496907a6fbd234b27750ea7620b7a53594d7df69b61a6947097a9c7a3cfe963208ce9ba1ec755a82e037999d2d370c7c52d1bfffd406d4c9cb9b2c150a7d05

Download Submit
C:\NVIDIA\NVAPP2\NVI2\0410.ui.forms

Filesize
6KB

MD5
ffb307b68ffe46d4609f8d0c567007e6

SHA1
9d2c6cbd595a76557cf0bfb2b2a0f9e1836704af

SHA256
cabe9a8e9cc0421a1b86ab74dd81aa1f4843dd28cfde7be6ddfc8d26b755de40

SHA512
3e0f389006e47074460de31e1a2d8458adc546644dd41012941cd0e54b493d42fb81fda863d6360731e5143a55be60d1062f98d496329902c14f35162386a166

Download Submit
C:\NVIDIA\NVAPP2\NVI2\0410.ui.strings

Filesize
11KB

MD5
3f7f5a3e561345056289c4b55dcdc14d

SHA1
5b665e39c0462997dc5b5bce6af6dfaefbc1558a

SHA256
5bed09b078b60e353c9c273f85ff3fb66c100d6879e2dab49eb6e2f7aa0d293b

SHA512
2a87a5ee9999121f0c0264d8e63e925948c1f6ea32ae73101be42040c4a2e776f21874b6b5808da124210a37818678742227d4772963e69416dc0401e9c8328e

Download Submit
C:\NVIDIA\NVAPP2\NVI2\0411.ui.forms

Filesize
5KB

MD5
f0c5538da3a2a9bc2fb97b47e54316cb

SHA1
675e79ef336447d05e7bd38ea4f7b29950e0cdc3

SHA256
034fe40e0a4b46f60426509cb2ff972150e77da2dcffe8b8fa22d24a2eaf4eba

SHA512
48501510fa5a7450acea4d64abe509d8fdf1a72a1bca60559025a024ae2e3db9934f596b2aae5fbc1e2e4a7b6d04a8b5194d885851cf44af03725a6a664adae5

Download Submit
C:\NVIDIA\NVAPP2\NVI2\0411.ui.strings

Filesize
12KB

MD5
72c530ecd4be49f5d684ea6a84eeaeb6

SHA1
b8f347794f3fbb76de40a3d2b4140a7cee5111bc

SHA256
81efc1d3f3d64fa4408697fd39cddefb8b258f7cbf95818063b3417e42b560b4

SHA512
2df32e863fc79c052b20e0653c76d0c09f331e55e60f1762cd1679c49d8690ed9b0b87e42a6c4607d95e363abf0d498eda2c3109ea7150c846abbb8c12fd9a92

Download Submit
C:\NVIDIA\NVAPP2\NVI2\0412.ui.forms

Filesize
5KB

MD5
f99bbfd876a35a5f90355b16b7e2476c

SHA1
bb7cba96124505df7f80c09a68afd661d6a5f5af

SHA256
5a7d4b84da04b98a3e49f2f8069a30e6d39a0c6592aba2e2c7484e57653a5153

SHA512
96a2c7663ecb867c937b18cd66557d1d4af8664ba7140d3f7328154cbedc722a10bd7eef38f3621b60c95191a772d8981bf13f81c3c5ad2779f0c9f81d21415a

Download Submit
C:\NVIDIA\NVAPP2\NVI2\0412.ui.strings

Filesize
11KB

MD5
f525a58285097cf6dda6d6aa5cc0eecb

SHA1
2a251c493a5cc52163fec3e65048ecd496610760

SHA256
5e69e86d1ebec054a7318cc39ed68184d2c8796da8cd49c41d354d191fc1786f

SHA512
2eb449cc9ed05641ace0760da31e3a6afb090711c6e09372e5abaaf808f0d2ce2ddabeefc0555a7d4bb4529198ca34987beed1868335556c866442c2a8828ea6

Download Submit
C:\NVIDIA\NVAPP2\NVI2\0413.ui.forms

Filesize
6KB

MD5
30848b7992a6ed825d543112bb130568

SHA1
93569d3e5037d23cd03e6f7efabf55a0582e0fa6

SHA256
2c60c2bec06cbfbaa4704749b84291dda81e517246579ce653100aa2e7ae0793

SHA512
48a24f20d2ad03ec44fab1d3666652d0158c035a6c7540e4151e47bb9193dbc6a64e1c69f1d5958c4c4cb0767172c3f57f2f61188168da4e01b3285b2a28ae39

Download Submit
C:\NVIDIA\NVAPP2\NVI2\0413.ui.strings

Filesize
11KB

MD5
0bc164c16d1fc9151e24b08a314e59a3

SHA1
e61745f150408c8a57f94ad0dc7bd75d7f57a4c9

SHA256
717942cbc2ca27445b1e1666c4c0aee38d8071c3c4f715464934ff96193d3f67

SHA512
3137845d19b03a490dfc3626928add5832e6de98d9ce0d46b32032c43196da18b571e4a16df5f43087a50d2112b4117449b203d07cff5f65909bd2bd803411c7

Download Submit
C:\NVIDIA\NVAPP2\NVI2\0414.ui.forms

Filesize
5KB

MD5
fc70a6608f8895984e2e354cd013bf08

SHA1
f1adb4be3014b309c8ba788dcc6cc4cd635133f0

SHA256
909f24f2aaf78275d29b66902a0bfbe0b08a9006c0f4c64630d994ed7ba2ed15

SHA512
7f7d2f76680581d783d3281e8262dc9f2245a29418d51f2870528b1f102a0d4f177c0cda13b6e0879e71f1808c237b6f999a6bd4f90da950628b22f25f73f127

Download Submit
C:\NVIDIA\NVAPP2\NVI2\0414.ui.strings

Filesize
11KB

MD5
92fd18d2ba03028b2be3bec4a34c66d3

SHA1
e8c7837cc5e27e831fc20948045ca6641fb4734f

SHA256
6de7167f1a6aaa65505a2720a007eb78bc11e8433952e5dd44e3630d26b7f3ad

SHA512
b5e5d0fbdf06278b9cbc51f3ec2adcbe8fc1104a0790ac602c5f5a256e1e0b2e7123db2ae5ff2e2909545e1be39776e4fdda592f43e6580d64906d3841df85f4

Download Submit
C:\NVIDIA\NVAPP2\NVI2\0415.ui.forms

Filesize
6KB

MD5
bbf5c1ccf7fd81c086f77b09bcc414f6

SHA1
18010b2de547bf914e007cdb7a1dc5315d118438

SHA256
7d64dbef083119bf0a5a8db3d4c1050789dc67a98f4b6f8d1a68cdce1324e272

SHA512
7673bfb6cff023505a2e569288297f30bd156797d2e6f8af10544d4479a5e29244c002136e0c832689de732a566c78880a16e664a184923a7513c9a37c924355

Download Submit
C:\NVIDIA\NVAPP2\NVI2\0415.ui.strings

Filesize
11KB

MD5
d230102bf8f810c9f7b3c877a8dde28d

SHA1
1c6711fd6166c3575bb87dce946c959e8cd59ca1

SHA256
6849ae067f14b37b37a23e9e7b0f6deecc5611234309f420bbcf03df298f2c86

SHA512
812a2160e8840510f2dea14ff5dd356bc1514f83ed89fd14ec94adb2e452991ba952e887d1a6d8bc04733a23b1ad7fc3f585a37e8b80ef88534893def5f557b5

Download Submit
C:\NVIDIA\NVAPP2\NVI2\0416.ui.forms

Filesize
5KB

MD5
7e794407a2b9c03e72c6b932afe3d0a9

SHA1
c6e2b06b198c93d484165f7c2e6298c1e8ad595c

SHA256
869354049867d4ede0a8019dcbd240c5b8606c60366bc878b0837b543822a2f0

SHA512
ad6b56c64ecffbe7248efe420f8c85d0dc26ce04fd76826e44b3b5e931d1476f3559da7abf5515000523ac292e4bcbb79c87e2910a2e6df9df45c7885778ab26

Download Submit
C:\NVIDIA\NVAPP2\NVI2\0416.ui.strings

Filesize
11KB

MD5
2a6167d83ea97b5d040877c9e7853fb1

SHA1
01e4374250276054e1ff107bc14e900494e0df72

SHA256
ababb41c1218edad698d769a27defb8c0209ff991a85905bed7caa5e44b804db

SHA512
f5bb7060186193a827782f44934bcf7fedd5aba1e911a8d9654fbcc9b2a654bdabf27413f04ea19b5e93d898fccd0aae8606566002bc7bee4b58ed2ef33a2ffc

Download Submit
C:\NVIDIA\NVAPP2\NVI2\0419.ui.forms

Filesize
6KB

MD5
bdfb57db28423c601a9f4769ec168428

SHA1
18156c233fd833cfd7b8e40445845b4b9e574a7b

SHA256
e32183eaa66635fd328773235003ed2073d55274939f572e6c9f7b8f4a57a06d

SHA512
b2aea45f2ad6ef78dd3ae758e51542a266113ca105f79f57bce993889006c2e397c99f17f4cd0fb3eb84f98cb4ccb508434e98ca43d0f7d51ee92f754f64d520

Download Submit
C:\NVIDIA\NVAPP2\NVI2\041b.ui.forms

Filesize
5KB

MD5
9e78b7785146f071f2c058618b88492f

SHA1
38c66398d9858402882d3a1bb8412c01f08047b5

SHA256
504387546bf04619502504c17a01199180c3c063b2d789a3e29925c4040ee41e

SHA512
1b9346731b929826b31a528fa74f4564df00a92bba543e245f96cdc2db0e9bd9b0b7795a909d61754a7623bbb363015d9f40cc7d4ac02ab54d49825a94527af2

Download Submit
C:\NVIDIA\NVAPP2\NVI2\041d.ui.forms

Filesize
5KB

MD5
4db179034bc160e4cea63a27a6201184

SHA1
f7612d1204f6f14820cdf504b63d593ef6bc32a5

SHA256
aa1481faadf8da2dd90995bbcbc1e08e57d1638af4b048a625d31db3c2bde1fd

SHA512
53c70d4881ecbfa34164d8610081b661de0e35b4b9ded9ff8cd42ddf1d913441e242cc7752cb084813870e3d1edf0984d8760ff30d90b4c9a0cf52e4b5cbbbdc

Download Submit
C:\NVIDIA\NVAPP2\NVI2\041e.ui.forms

Filesize
5KB

MD5
e7e2da8916a186ce14dd11fc64b9db33

SHA1
05d335a9f342459bf998882c941e56babc48e7b2

SHA256
2ee54ef58814e52ae0a986d6826ce93f94c82c831a4db2b07cf3a9e31fb12eb7

SHA512
a145b015561466dc560dad29faf434a33bb043cdc00787ed0f8bf0899cae6bc1c4473304ae64626f5b964e3e69c096a772d35e3a4452cc60d99e2a7fc9febbc8

Download Submit
C:\NVIDIA\NVAPP2\NVI2\041f.ui.forms

Filesize
5KB

MD5
ea3a91e7af7d8645383b309097f3145a

SHA1
db2a49b7fa709039c803670bc0ae1b5bf367b9dd

SHA256
c226fb75cf60ca698c3b5e2f75671e5b3a2f0f5361ed3aa7c4f785890cdba448

SHA512
3deda6ea826890bf48abe846f066c4c54644cea20dad26836e931ee574dfd8f919664e0a6588b6616adf5191a7480b93bca7614183fa72c862e032968f9d3691

Download Submit
C:\NVIDIA\NVAPP2\NVI2\0422.ui.forms

Filesize
6KB

MD5
ce28fb3aed6e165342bb3bb975dcf9e0

SHA1
e6165fb113bea10ea973ce2291a1c729e85f9aae

SHA256
39b3529676395ceb9f68802ca27278cdfcb5610bb7a7286dd298a054c2a897c0

SHA512
647a04b8530f0794d0e7f90388b4271d17a8f3d8f242cc8719072a132e45f2341413eeee3593bfed65cf887c96a59a8b9d67bec95d92ffaf9eb6d42f5578ff77

Download Submit
C:\NVIDIA\NVAPP2\NVI2\0424.ui.forms

Filesize
5KB

MD5
311de108c806d619e4ce71f8053d6ca2

SHA1
93e097709436cff846534855a7c10283557f371e

SHA256
3f806d0dfcaadd66765d78e1ff1ec7048eb9025785dca6405e50332a1a9edc54

SHA512
a6137a2a72697d1142ca0dfa235a987a5bd36e7ee3d308028efd910a5d16f8c62171fb388e70b06bdd85ddc0636997e7401a8ba6345667094d660e234f6becfb

Download Submit
C:\NVIDIA\NVAPP2\NVI2\0804.ui.forms

Filesize
5KB

MD5
9bbd54529874f09fe64196f27a165ce7

SHA1
9eebaa0ae473aea9e4044216a21e3aacb1c66fde

SHA256
1c6054f64907fb4c553c509b905aa6752672df0d8fa549650ed703e73704db7d

SHA512
8dfb06d6ae6e0a89373e9b930203cfb8f848127f38541fe2cc6f13878674fa34e4bc6142d568ecf6fa3f715efba46f071dfbcb976b10ee7340c25def9435c7bf

Download Submit
C:\NVIDIA\NVAPP2\NVI2\080a.ui.forms

Filesize
5KB

MD5
f9ac7f82b503400dbd409987b7194aa5

SHA1
6b6ff39507713db6b8b27433fe68bdc49f5961aa

SHA256
87aa0e0735f4e8676ea19a5c49199555004ecbcef53f7017e77d8bd8db6b61b3

SHA512
f7f0267ad93a76c7b0a0f67e461af4af61d733cf34d3c5e15b680ae02e688b7419e85b767fc29c070c87cd6cf510d050f6df7b2e6bb8fca102cca7a67b285fca

Download Submit
C:\NVIDIA\NVAPP2\NVI2\0816.ui.forms

Filesize
5KB

MD5
3833b6fa5b7a849a3df81a94ffb09870

SHA1
97813a46791bd68eda29fb0e8bff46a11a7abffe

SHA256
da1cb94d85ff537b4da1bde35a70f20a073329b5fddd593ee3e160d9c1d2811f

SHA512
0dd75de051573d429d91d46283b760b8e7c701a92b0aa6c42c903c98eb4b9cac42a7170a0cce9d7ebbf72a765e697d3f72d228714d35a2c29e3649aaf463b9d9

Download Submit
C:\NVIDIA\NVAPP2\NVI2\DynamicBillboardPresentations.cfg

Filesize
1KB

MD5
afb01b092306d419dc1fb0affee49319

SHA1
29339afc46baec22001c58a71d3793e74d91b39c

SHA256
ef8f85fa5f18105cb3d5b20bb6f72fda912a74340f4e6dc3302b600a1fb9b3e5

SHA512
1d8f5c604b86be8a1f92e247c05685cac5637d9a9223a23e0b8c1a5a7f8bf1d7adda4cf48cbadde7b77ff1cc856d993cb1fbc047866c0d7fc45b83be093e0028

Download Submit
C:\NVIDIA\NVAPP2\NVI2\DynamicBillboardPresentations.dll

Filesize
1.0MB

MD5
269463fa3e7dd2dd98a104f0ecfc104d

SHA1
e33cd2dab7217a1d48eadc7b2f9101b8278fcc56

SHA256
36966c23a14f84e150241725957e3a974054d3d4fda99976d17b9f9291ab9f13

SHA512
c951c8b5a2556409c54565895a4359404607c278491e6730f3294033bd4a385a2bba241ef2df8faff6f122083d5e8563ba8c9199997a424b81c68283c43908bf

Download Submit
C:\NVIDIA\NVAPP2\NVI2\DynamicBillboardPresentations.htm

Filesize
10KB

MD5
5ca3f9dea84fa4ad9360ab943605d7b9

SHA1
3990d86e8930f8db0fdc4c16d43face59393bf61

SHA256
0af72677221bad8f8b562908c16466ee2344e60bdda10e99402e5c15f6aab75c

SHA512
b298737cc7d5677d6aa73b7348edfc3f821499c30407218399f5c6131f1b05b20a253b1432d38d97f66819d8f8f894ea507d81752fdba07ee0964c8417b3b738

Download Submit
C:\NVIDIA\NVAPP2\NVI2\NVI2.DLL

Filesize
6.5MB

MD5
db2e1ea56fc92f5cc150d69931fcc977

SHA1
bf8a1d32571cc93fee7bf944d5ceb832328ca45e

SHA256
36b97e7a8951de7f4cee48431fce4c0a6b35bf52ed62cee8c17db99afa168745

SHA512
e2e8626632c5c9242291430ceaef63a840810404757f468f0b11518dd3a65f7eabf35a9f919285d6f1df47d6814ebe793e0f3049b7459e7778173e1977d4f3c0

Download Submit
C:\NVIDIA\NVAPP2\NVI2\json2.js

Filesize
18KB

MD5
b9894150338bed779444832aa42952fe

SHA1
03d32ed753d0b5c93c2e5c41616e57941a88bbbf

SHA256
f31e9f571b47b21946f49f4465dea0c1460d43e6aeddfbb42a787d4a260217cc

SHA512
f753589d6469ba90df67e3869ba05c7ce2779e5b0b80cbed7cad6f16f22c6a4db984a9d5a1341f31b00fd7aa2263dc05a10c0b54ecfa837140a209422609c34e

Download Submit
C:\NVIDIA\NVAPP2\NVI2\theme.cfg

Filesize
10KB

MD5
cab70eb2eabdaad88f1fff44725322e8

SHA1
112c76086315414db148a76f5940f6b82f5246be

SHA256
c30f677e75fae1d946718c4b3c828f3e3d38d078ea614b5133ca90c6c49dc35d

SHA512
894153a9ea4ab6231b068cd06e9625ad8cd241a0dc9ee0e276e427fe2f59474e035cf01fc1dcf58c9e5252b9de80b449a4f2a1eda94a2d86385b0199ecbb6ad3

Download Submit
C:\NVIDIA\NVAPP2\NvApp\CEF\config\NvAccount.json

Filesize
87B

MD5
8d488b694933b802eb2e100f11714ac5

SHA1
0744fc44fd796a734dadc7ee385115afd4959f16

SHA256
b5b12e4b06e3f99b9cd8b1b64fca5b6faf2e35293885198785ec5e22ff7871ac

SHA512
413b3467dc84d069094bfcf11fae7df9617025b3c508dd49901ab01851be4e90182949dd3f73ca35b5b8bcfb4a45226044b6c18726b678e0888edbf7c54d5075

Download Submit
C:\NVIDIA\NVAPP2\NvApp\EULA.txt

Filesize
22KB

MD5
28c25b75ea1f4e348ec10e1473a5ab1c

SHA1
3e3ab857b6c3fa33e65bba07fe6c700fe673f542

SHA256
d73b07947feb00c113737d318843357502e0d9663bacbf613e478ae4886bec9c

SHA512
1cda2f44b492d3658093acde3893366170950e8986b3e8450a72fb55554df0dc8065450dc48f6badee6519ab731de656f4ec3469b1b84af3bf2de82e0fb75902

Download Submit
C:\NVIDIA\NVAPP2\NvApp\FunctionalConsent_en-US.txt

Filesize
696B

MD5
ade434bbf1ac0f4f15c0d2d35381edfa

SHA1
8ee9b44699d241d5980351d0214c017f76f16437

SHA256
2c69e1beb82321bce1856a0b30cde640dbf78902f09c82a95174ef6384617b3b

SHA512
c7cdbe12f6f9b0598e1bfb8e9ddd65f1496614a27a93028aedba1fb5300c3169b0f7280840cdd02cefb976d186c681ca93fc6f62cc841b4dd970004a3ba51b0c

Download Submit
C:\NVIDIA\NVAPP2\NvApp\PrivacyPolicy\PrivacyPolicy_en-US.htm

Filesize
164KB

MD5
c5828bae57eceb2b67d4e02baad1b553

SHA1
baf245981722964d2cd560e9e95b5b56e636f490

SHA256
707aa636d174b7d4056baabc134b073d0b792ac1bec447559e3c323afdc68429

SHA512
22ce68b01a7287b0d77ce329c3727c4ec46b8fa3d0805c3e785b5034bdeff2af3c4efeaf1afc3725ff7c952d39fc5c633e4552942003636f6ea47c6dc1d693e8

Download Submit
C:\NVIDIA\NVAPP2\NvApp\PrivacyPolicy\PrivacyPolicy_pt-BR.htm

Filesize
164KB

MD5
3e7b3e08433904539b279bb4dabb155a

SHA1
ac85c924dc03881895a7874f5f374705c9c15495

SHA256
b1b5e429046a19988fcd84296ef6cb92bcb8f1d1e09193a51a9a2bfa133c8e6b

SHA512
cca771c8a2957ee802a2c7d6b8a93b9a28a0e7aceff2e34e50a9287e1f8f0a79d24f79bb48a458e6f6772c6132645eedc08582191fa5855df0480c9fe6d0ee8f

Download Submit
C:\NVIDIA\NVAPP2\NvApp\UpgradeConsent\NvApp_upgrade_text_0409.txt

Filesize
424B

MD5
f07e8b5f4338bfb9002355e3ff90b247

SHA1
7fdf50d016a6f13a6be0dccef5eb449113513c6c

SHA256
d4f66456a3ce96d157b0af454211bd24378916de14d0579b3aad1e912f3eeb92

SHA512
aa4492c3b63a7df6128fcd482795b924887e9b79b56e2e608c56d897e5be59accc85c3cd55978905695dd1a0d9d784726681ee31be24041c768407c631e300b3

Download Submit
C:\NVIDIA\NVAPP2\NvApp\osc\DefaultGameArt-TVBanner.c0134135205b12b0.jpg

Filesize
39KB

MD5
b51faff767cea403ca47a8a31b060f0c

SHA1
a2bcf5d0c8dcbc007d007fc1e9e97a05785318d7

SHA256
2f9b0f5a735a712d2cccf644b5f5fea620d4f00c36701415b175ab40368e09de

SHA512
2fcc13249fa45c43246f8e399a6b9b7d6acb11782bae54de767a950dd327fbf06da759ea74647fc7610fa14da12c76c082d4a6c4a68669db0e1ea3787eca069b

Download Submit
C:\NVIDIA\NVAPP2\NvApp\osc\MaterialIcons-Regular.196fa4a92dd6fa73.ttf

Filesize
125KB

MD5
a37b0c01c0baf1888ca812cc0508f6e2

SHA1
fc05de31234e0090f7ddc28ce1b23af4026cb1da

SHA256
b7f4a3ab562048f28dd1fa691601bc43363a61d0f876d16d8316c52e4f32d696

SHA512
cd8784a162ed428ca5a76e5e877349d50620773e3a3d202d5199fefb5d69a9b87b92c5de9455dc3c373fefb065f06a18f17199a5601887fc1f880d14bd223769

Download Submit
C:\NVIDIA\NVAPP2\NvApp\osc\MaterialIcons-Regular.1e50f5c2ffa6aba4.eot

Filesize
139KB

MD5
e79bfd88537def476913f3ed52f4f4b3

SHA1
26fb8cecb5512223277b4d290a24492a0f09ede1

SHA256
8c998b4a9c0acbb9fe5dd572c206a5a33fdd5ca2b58db87fc3b893beac85068d

SHA512
5022976817b89349a71e0438b573f53dc5b743acc865163102d6d657cc3fbeffdefb91be057116eb67f82215efde2ed5c31ebccc6a9061a713e104a64e0f192e

Download Submit
C:\NVIDIA\NVAPP2\NvApp\osc\MaterialIcons-Regular.7ea2023eeca07427.woff2

Filesize
43KB

MD5
570eb83859dc23dd0eec423a49e147fe

SHA1
09963592e8c953cc7e14e3fb0a5b05d5042e8435

SHA256
a87d66c91b2e7dc5530aef76c03bd6a3d25ea5826110bf4803b561b811cc8726

SHA512
baa17185bedd1f04b138a1de3741b7a6052a02c1d4848d5359ae3ecc80061c54df63374684571bb50b1392af4458f1df7a5df634716fd5fb269ec7f63f3f65d1

Download Submit
C:\NVIDIA\NVAPP2\NvApp\osc\MaterialIcons-Regular.db852539204b1a34.woff

Filesize
56KB

MD5
012cf6a10129e2275d79d6adac7f3b02

SHA1
c6c953c2ccb2ca9abb21db8dbf473b5a435f0082

SHA256
c4a1baec300d09e03a8380b85918267ee80faae8e00c6c56b48e2e74b1d9b38d

SHA512
0ab5e18ee3972fcd599ead183d81cd38d8c559a5e87ca86eebcb6a2cfae2078a27495e3b5824aac6ebddc08f57d594b2cf692813134a1e002b28505eb7c34172

Download Submit
C:\NVIDIA\NVAPP2\NvApp\osc\NVIDIASans_W_Bd.5aafff8b08f9a971.woff2

Filesize
27KB

MD5
3f0bf27b7cb915fa24715ee2bf5f136e

SHA1
94196847705e2be71afc1ffe704cb8e3a5da78ca

SHA256
831ddf9c812c746dcf875070744c55435df2089d75a8e236ad96d161c70b1aba

SHA512
534e9db348361f4573470038aa48e82a5da99749c305ef4debd52dfe8a05b03c45059b44af27f59b5a16d6fcc9f09ebe8c966de2c9346d5531fca1f5c5b4ad1a

Download Submit
C:\NVIDIA\NVAPP2\NvApp\osc\NVIDIASans_W_Md.14ea224b997bf6e0.woff2

Filesize
28KB

MD5
7076cf63098b62ea9cb5589caf581107

SHA1
fd99ab8983d0f61402dd123217bf841b07d0b8cb

SHA256
a90918b3889b1fb0016b598c88fc5fa12766f7b6f36e30fb17376cf7ed654690

SHA512
614b18db85fe53709219bd6f99131ca4ee8b2bc37d84ed11b209e6e7f2811e3ebea45c5d1b929d52b8180938aa9c0bd38e0ee792787f013f65ac7b78ad050ab6

Download Submit
C:\NVIDIA\NVAPP2\NvApp\osc\NVIDIASans_W_Rg.33fb51adcc625f4e.woff2

Filesize
28KB

MD5
6ada063defe18142a62c974db9bffa40

SHA1
b2e13178d7b164aab959547bda65300867d02a5e

SHA256
0aef4914785160f74a122c6168793f8726da725cc6f80947418bacd064f33b98

SHA512
32539925ea58a8a8db226d0a78a599927c764556e984e13c7798afbfb8ad239abb7d0e7788f5a37dec82d8b9c06acbb114efa228c6fafb9d127cba5b4225a94c

Download Submit
C:\NVIDIA\NVAPP2\NvApp\osc\assets\.gitignore

Filesize
6B

MD5
40841a89aaca85ffda7515ce7062f5a8

SHA1
21175415dc6abcd6fb29dd8dcd8a415239c0d6a4

SHA256
52b5648d0a67d77fc9e8b8e6a8be29f09627bcc0b60630d5a237bcffca78da2f

SHA512
5f27175bb617b71d407719781c9e9bffa75d3b8e9a0d4d843f17ae6f241e435f5f78e820c985aabcdecbe8eeb0bcb29a0bab8927b6721b64a9dfc24facce02cf

Download Submit
C:\NVIDIA\NVAPP2\NvApp\www\assets\hashed\ootb-grd-driver-experience.ae47d97afbef711e.jpg

Filesize
271KB

MD5
12ae4e2b15bf63bdd0bee0e566406d4e

SHA1
3984b061c0aed82143e77c9762bb34de83fc46d4

SHA256
8cd8ddc3809ed790f1b472864158dbdaea5dffa7fe401c7867ed74dce7f78111

SHA512
4deaacf986ac69d2f19679c409e9094acb731097fc1a47bf8d0ebdf230a262c2ea2f67460964d26bed09def73a023d834c2d33f1af8f87002834e743ceb8037b

Download Submit
C:\NVIDIA\NVAPP2\NvApp\www\assets\hashed\ootb-grd-ops-experience.98c0923bd68cfd11.jpg

Filesize
208KB

MD5
7e3f662f6749edc71b6da17467a435de

SHA1
40e7745cc9fe8739fd40b3181ebc17d2ba60336d

SHA256
b752cb3f8923920a8ea76e3094792a56d4e60bc2fe26a96c06ab07835ce44b64

SHA512
5102e82c85015cf02f6d9622b972daf2a1ba0ccfe57d1db0c6d66549f78199c2e102585e737d0794d02b905d0488c8769c598da0fc5d30c15d7f66aec7903c21

Download Submit
C:\NVIDIA\NVAPP2\NvApp\www\assets\hashed\ootb-grd-overlay-experience.bdeebc393d8fb41d.png

Filesize
1.2MB

MD5
eea661fd718c0a25424d67d0aa8f2891

SHA1
3dacf79cbba0823f64592d4a9a13c45e31c9c4f2

SHA256
a8230370b3a1b63ee5d03adcee563b58e77884684ae4ccdff0cba130e5a98159

SHA512
2eabba91993e0c8559170c9d462361545a4037833f15c6721c2a0396f23e89d250918a45c775c9ecd4d06553683915fb20cc236beea74d283dc127417a020ac3

Download Submit
C:\NVIDIA\NVAPP2\NvApp\www\assets\hashed\ootb-grd-rewards-experience.1008af5a8d2a562b.png

Filesize
756KB

MD5
112a36c757091e550f5db9732e70ab3b

SHA1
dbc3a3b15a0d8fd29006c6235083f0ef061947a1

SHA256
ef9f206e9316f47d000ac868cce5326fc72da47f665b80e1deb2920eef59196b

SHA512
63715bf062a93f0b32e34a8a81a5340642a2fdf48ac0c505b1646f029944979d05716be24a088887f7d4413ac072f102b538860b5590ff301e8814a6584e30be

Download Submit
C:\NVIDIA\NVAPP2\NvApp\www\assets\hashed\ootb-nsd-driver-experience.35924f6290b36e3b.png

Filesize
861KB

MD5
95b843acd0a530eee3158cbeea2b4f4e

SHA1
80c78e7592ac44dbf298e11c49f7bc2ad062c2ae

SHA256
d6adfc4adbd55e2f788aaa1d5ffb0448d503ad1207bf145c1e45fdec6514556d

SHA512
5d92ea13cfb532645926be25a2b4ce08cf49918a8b03b7d16538a376b2a7fbca70255bf395bd56b2eb7aeebe2d26f7b18a0e746190768ac223d33dce71661c3c

Download Submit
C:\NVIDIA\NVAPP2\NvApp\www\assets\hashed\ootb-nsd-ops-experience.7954f3c97e07a320.jpg

Filesize
187KB

MD5
0ae5aebe3b07774cda1a327116389696

SHA1
f33b797e7143954496f93b5573e3c094d615ccc9

SHA256
0c417c9201263e09c335f5c37f425aea8ae6aad7140c8977546bbaccb195682d

SHA512
22410c2b72320808fa6d0c9f44c8e2d7ce34a61533b15c17a66484cf391d689504162dfc0753046cb15e904528dde4ba2d8cbd7dd122a969ac8c666abfe933cc

Download Submit
C:\NVIDIA\NVAPP2\NvApp\www\assets\hashed\ootb-nsd-overlay-experience.213243bf6d078281.png

Filesize
985KB

MD5
397fb562ba251b6563827630d9c66cd7

SHA1
6fc11b731b88319ffb777488ae337a680c7f9999

SHA256
f8a38190d780b2f3b5587d32fc1f53558a561e47ad477a60d1cbce80c54fdf69

SHA512
ae9577bc3c448c61e9ea846629bdc970fba8151bf23541e15e570054425a62ce035f2d13bb2daa1c3010ec8794692271522200aeee9a04e012a1278ff68e8a6c

Download Submit
C:\NVIDIA\NVAPP2\NvApp\www\assets\hashed\ootb-nsd-rewards-experience.7d5784c7ae5bef31.png

Filesize
843KB

MD5
02d18fba8a6e5c40c048efd25ddb01e3

SHA1
d8bdaab7a3ea82578af1f1cc82d0f96129f4c169

SHA256
2afce6175a2b7acec82df6ba2dd3103e5ba7679592332c4dcd0ab5a1dd135533

SHA512
355c905a49bb995c353568fb6def130a01cca2ae56a593c457da99fc56e755ae9e8ac083674b4a070ef5ec61f97570b613241719f3df347883cb35091105ed24

Download Submit
C:\NVIDIA\NVAPP2\NvApp\www\assets\hashed\ootb-nwd-driver-experience.69e0cbe2fa83bcdc.png

Filesize
663KB

MD5
05cde177963453e0d2634c271e1b6cd3

SHA1
64dc32e6be33f38f9ded4a8cf84fa76a57528b6f

SHA256
59d93fd1b9460313157a9785e1f1c681a599368ecaebdce4aeacb51821f5824e

SHA512
fb78a0e64ca2a91389b88a8813b166158588fd79b686609e10a37211981c5b7a500b69fb706a7b99b5ccf378d6662750d6a82c6d738d0bb65f716a5b70e4730c

Download Submit
C:\NVIDIA\NVAPP2\NvApp\www\assets\hashed\ootb-nwd-ops-experience.bebbe17ec587266f.png

Filesize
533KB

MD5
ed84d52e2ccfe62c12e96faf82fb9a58

SHA1
47c7f2175b54fd29678f7cd112b67eadde3e552e

SHA256
d22dd5af9b77116b244cb612914cf648fd8be155aabf71587cf13aeb118e85b6

SHA512
58b009617a3824a5da698c7594dc512e0ec7f0ab2d22ec020b6d34386fa7d5a501f04f8a84a5e9e8c4f8c4520c89425e1333c255d647b6c80ac1cf6cf5bd1a51

Download Submit
C:\NVIDIA\NVAPP2\NvApp\www\assets\hashed\ootb-nwd-overlay-experience.8524e30d36744c46.png

Filesize
787KB

MD5
43f98aadcabdc786414e9dc96fe3dd6b

SHA1
6c1464e3da7453a92b49ba4ac564a61d9e680540

SHA256
7e9cf9eef0c511bfedd2415424d7c2bb34856eb541ab7c9693fb5a6b7756acb8

SHA512
30210c8318bdcf21bc4c3a712fef762dee4400d253408da449a89d2df098b8ca49483a0d06e1fbfae26f026f511fb00205490d4afbc9f8d6b5aed04a734984fa

Download Submit
C:\NVIDIA\NVAPP2\NvApp\www\assets\img\Marquee_Hero_Image_Gradient.svg

Filesize
68KB

MD5
3f03b5fa3d228e924ff4ac0a034c0669

SHA1
ecc1f84198f79323e2d91fd4fe1842468074eefb

SHA256
ccf2b77b27e7f5a297f14e2643131686a1f48bc52c1127baa447f3527408466c

SHA512
c34c0db11b355e1bb82f4c766a074f0fd010849817c440a2194292c764a0f21648c288f1c89b25c9ad6230259f4d071c09c27d1bf98de0dd0a6b2f92866b310c

Download Submit
C:\NVIDIA\NVAPP2\NvApp\www\assets\img\Marquee_Hero_Image_Gradient_RTL.svg

Filesize
68KB

MD5
27da811419713779cc4465014484bdb5

SHA1
019f8834f8ac75cd0b8c161c18c1bc6ba671e5d9

SHA256
2c83cfbe96ec803325d6a0ebd62f23ecf44cedf6ecf70e405ecf4152a3f6d1cb

SHA512
cb9b4cd6d19c39ff178a2044d00fdad9989218cf13ae7624a83ad082900dfeafd7d45e4e9ea79dd0e39c42afac4b1c8a738a131f4b3f7d6c6922b023abb53121

Download Submit
C:\NVIDIA\NVAPP2\NvApp\www\assets\img\mobile_marquee_hero_mask_ltr.png

Filesize
70KB

MD5
32293fa83573bac9362b4c92790ad35b

SHA1
0e48cfa5b54818bda3a76f6a5a3f2eb0a324cec7

SHA256
0af38caec81832b677718453336e8722d8b302bb15bbb65a0e70a9c50d7a315f

SHA512
abc2284f92ae8b08b2d442261daad52e61a78a627827f9dfc6609e0d66358cf8394ef16da9dc15e84a439e7847318cb573dae5c8af83884cc03f84c581f98c84

Download Submit
C:\NVIDIA\NVAPP2\NvApp\www\assets\img\mobile_marquee_hero_mask_rtl.png

Filesize
71KB

MD5
cfa26c70afc361b8940bdd48076a5189

SHA1
99a10c4d0556ff7e8406920d938d1e9f59a37384

SHA256
777f462c46219202cee11751b046aaf95cefe37f26c7aa8f8ed838f09fa10715

SHA512
936d062d817cfe1bffbc1fb74e01eae84ece74c85b935d8d6cb05655e6f66ed87949c0f0675c51cb58efd158fb10e10047b9c2c8db10be63604fe0a2fc6ab536

Download Submit
C:\NVIDIA\NVAPP2\setup.CFG

Filesize
49KB

MD5
c5a4d1bdc9af828ae04f2a590a5183fa

SHA1
d5a362fef73a92f214645deec4ef553cf866d55a

SHA256
219511a81f323784207836a1acdec42bfc2101390e69f993e537474011b5eeaf

SHA512
ff1f91ca9be45a1e854c20ba4ba5836a8d8ab8a797b71de2ac15455a1cc15c1e37e1442de26a929fe68a33ea20cc314612f65db0749674fb5afd98e471f18e59

Download Submit
C:\NVIDIA\NVAPP2\setup.exe

Filesize
637KB

MD5
b4fdaeb44e0cc519af7b30bf514b5a52

SHA1
ad7cc23dcbff417a8dba374b9c9feca489f01173

SHA256
9a409cd8148e3430e91fbf69f5116b7a681b726016d001a4149a6fe101efb7b4

SHA512
50f3f01305f2f950efa967de285799b23c5afc6108141ff02929c086d6af1f410a17b9704307b6158528b9a8964206c7a31a81268699b9fb5b0079d35c73219c

Download Submit
C:\Program Files\NVIDIA Corporation\Installer2\CoreTemp.{01711BF7-461A-42BD-921C-025892F23FB4}\NVI2UI.dll

Filesize
1.9MB

MD5
3d727e1d7f05d58f13057616cc812809

SHA1
9b925bf1f16ff135a90e9c8b489126b5e8d1d2fb

SHA256
8b0b447a6a5cde3012c7f94ebb71cc6e1bf7c51f761b1527017d862272f8d693

SHA512
0c8163cffb12242e9487adf9c8dea4ebd504c2fd048d70c07ae10958eeab0c550e4ab96bf4f0fc3caba785ac84b84d4d4f9f2a38a18cc0535dbd10e7c480d391

Download Submit
C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\Main_BG.png

Filesize
2KB

MD5
fa63623d1d4507164451c6794fa3a531

SHA1
8228efe8af9de8ffb1be2adfd0ca6b81bc701245

SHA256
b513415b0b1cf0bf3139c22ee1cb698a532398e9b63d46c0855ceb92ceefc124

SHA512
d0eeb6daf4fba48bf06b4899bd84cf0bb0ebf01908a18aecf2f3c0fcc75de24d68f9376659cb70dc09c3ff4934287c0f0bc9cc3739888bc3e73ebbfa62a89a6b

Download Submit
C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\NVIDIASans_Bd.ttf

Filesize
165KB

MD5
4a092d736f7d86ff0cb626096c9d3cf5

SHA1
a80f9b549dbf80a835d803e949c695e6faa1bc7a

SHA256
aa73cde03bcedf69ec9a9e4f1fbabd75abcc00f94f01a8e6f3d74334c66b5358

SHA512
0bc226a8bb8718bb7f37c3fcbba93440b21bb871b70f0adb9c901afc25c8a539c535d60c2168c709db6c09606e425eacea8704111b40efedaf64d73589062013

Download Submit
C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\NVIDIASans_BdIt.ttf

Filesize
169KB

MD5
8fde6ae5491bb05bd0418428e6727398

SHA1
40aaa52f08d0732c2f5a2cc8a96cb5e684f29dee

SHA256
2e5c50e0c304ff97e0b218758276386080c6e6de9c224bb66c4d44efee6e062e

SHA512
6db24c7d362544991052e5f252e8d1f54a1ebb9ee2d2ee917ff890d1bb71661f8568a129199f9ec1fdf29905acbf4cb547f72879a41fb6b8cc2f631011dca378

Download Submit
C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\NVIDIASans_It.ttf

Filesize
169KB

MD5
4a1873c0b8fdba8dbc7d89b1ab453e80

SHA1
55cb2e627c664c034c54d2690da919acab26a920

SHA256
324ff52b843df060c6cc827bd486a2821aeaf72dec33768b46aef97464e39268

SHA512
b07b02a0d6b89ab1f882669c345e960135b7b99ea6874d703bc29f0b686db8c51193b42938bafb946635eb41bf6628da17cc025de59a3e03ed4f934b3224fada

Download Submit
C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\NVIDIASans_Lt.ttf

Filesize
166KB

MD5
7985674f44dc0dc1c9f1ba3afacb7cc9

SHA1
c730191971ad10fbd3b07f7ed75d9d4a98f7e360

SHA256
4ee22a0ec7297c2362f66226cb907b34191253f4d0ffcfcfd526c9bc3170480f

SHA512
6deaaa78a0da7d875c7ebb11b447b8533a5af88d9b88ff1ca3363b46c59857d871697bdf925cab09ce66c4787ec3b82564758c9b4ef210baa81940443a738dc1

Download Submit
C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\NVIDIASans_LtIt.ttf

Filesize
169KB

MD5
4e765e732d6382fd2e3d931037fca1ff

SHA1
70898b6191446ec2702c2280543602c16d1ed519

SHA256
dfa79aa95fc2579be986d3c53ea2fd55139b07b3d7ed13962324d52807388d70

SHA512
715fbb63d80ee649dee370e9d44da601ff5f25fb17bff656d51f0ec1ac492fb85e743d30b4c2e17690f002837e7db003182eff881a2cc17de6dcb3894b72e798

Download Submit
C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\NVIDIASans_Md.ttf

Filesize
168KB

MD5
6730ba2cea733205419b62be8d737b1d

SHA1
59c427926e5c52f41e8ad91eca34d6345f82a1cd

SHA256
0f57f33a2add61528fc11cba0415360d5f20c84e7148b6d713e6b76ec1a663ba

SHA512
c0c23d74cb9b617ad3408a421c5f62649f445fcf8797344835c16ffca0d4005c7b0d086f2ad68ba02bfa64dd02d37e35ad8006a1447c92c9035fbd6cb0635409

Download Submit
C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\NVIDIASans_MdIt.ttf

Filesize
171KB

MD5
3b8488dd6ef02d66c1546b9cb5667048

SHA1
2df6596eec8031821589b8528d3345c2c04b6be6

SHA256
a4ef292c477cdb634f6367a8effca948349d43ad1976ad748e116ddf5b91344a

SHA512
3cdf17c21aaa6f6d810379bba2ce5f96e52eafeadd9883c33acd6d59da672adb335055ab4146519251631801080b76b129592bb78071a9ff0340b2edd91aa996

Download Submit
C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\NVIDIASans_Rg.ttf

Filesize
166KB

MD5
3004f5361b27bfa12cf00c69a1debc11

SHA1
c274dcdf9e9bd84b87d8056e2c6dea574674e788

SHA256
c2e260ec3962c9d486e01c9c2e59b736fa3b78efb6e6db5764ddfa3c4e15464e

SHA512
cc2b074ec0588c5e39f39ea11624fb5ede547217ad06a4b74280c02d7f35a75bb802e8cdf28bdb4eaaaaba7453ef741134f7262aacb8551a23a8c19ace238cc9

Download Submit
C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\frame_divider_bar.png

Filesize
1KB

MD5
8a3ee5f53873a819e072281525de3e2a

SHA1
27da33ffbb408599d1808ce19175b7dfb50a7453

SHA256
147195f51a9eb2a662aacf7adcaa19850a6f7f69d7ffce20968ff2c59934742c

SHA512
095ac319c4bce7bd2a5967c571e7e89df33d2bc3bc5e627b7929c52b439ccc71cebdf3bb0e343476bfb71f585a3a10b376b7eb6a74f2da668a7c203d542cf06a

Download Submit
C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\pre_install_bkg.png

Filesize
2.8MB

MD5
d7286c52733c03729a836f70a29a6e4d

SHA1
cebb0cc54b29b8a766205eaaf96e2e0b40abdcc8

SHA256
9c63c77f442e3dd2dd11568e6e898ae63017a1f68bf9a898eabd2229e7ad8117

SHA512
be234179e6dc064f8ac7a6fab5597b02f88c9fd5e49f7411c4c5beb1fd454da1abcb7bb48f687ec2b2734fa8f4b322d0914c0653b98ecb879849da3fcf296d5a

Download Submit
C:\Program Files\NVIDIA Corporation\Installer2\installer.{5233400E-6520-403C-BF4F-A0D0D5BD2B07}\secondary_btn_enabled.png

Filesize
208B

MD5
a59b02f635df361797293855edec2837

SHA1
1d2005c1a92651d66d61a99cc195a4bab675b89c

SHA256
c0e67a68e8ba4af452211edccace31e1d2f1c8f21c5d69459ce65ffcedf03358

SHA512
0b3689c5d10e0c54ceb2f97e0478b121b31fca178f96cf7e0ab5606a3d7dc146da456fbe86699845513432c4e29c82ffd7707a974fa97870d09db75a14ea0b66

Download Submit
C:\ProgramData\NVIDIA Corporation\NVIDIA app\Installer\Logs\LOG.setup.exe.log

Filesize
238KB

MD5
6bc8d3ab0c848ebf03d07728a5c03beb

SHA1
ffcd91bc8b42626511696c441dd9c2de8a7adb76

SHA256
cbee3d9d77a9f29d762962561e5392f57e860cae44199c584f52e46d3e107ea4

SHA512
53386c94b691a956e1eabeb2dd68a06b08beac3cad7ace35b5ee64f4d1538dd12a3d178b08bb0f7d4a6e6026f0bfd30c6eb71238cd96f2830af89d121f878685

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads