hxxps://www[.]nvidia[.]com/en-us/software/nvidia-app/

Analysis

user interaction
yes
max time kernel
900s
max time network
899s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 17:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.nvidia.com/en-us/software/nvidia-app/
Sample260730-vmvrzacf55

Score

8^/10

adware discovery persistence ransomware spyware

Malware Config

Signatures

Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

persistence

Active Setup

T1547.014

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe

Downloads MZ/PE file 1 IoCs

flow	pid	Process
32	2640	chrome.exe

Executes dropped EXE 2 IoCs

pid	Process
4192	NVIDIA_app_v11.0.8.299.exe
3320	setup.exe

Loads dropped DLL 9 IoCs

pid	Process
3320	setup.exe
3320	setup.exe
3320	setup.exe
3320	setup.exe
3320	setup.exe
3320	setup.exe
3320	setup.exe
3320	setup.exe
5844	RunDll32.EXE

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Enumerates connected drives 3 TTPs 2 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\E:	explorer.exe
File opened (read-only)	\??\F:	explorer.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\close_focus_light.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\Installer_ELA_Splash_bg2a.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\min_light.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\min_pressed_light.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\uninstall_btn_pressed_light.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\primary_btn_focused.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\restartlater_btn_pressed_light.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\0407.ui.forms	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\0406.ui.strings	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\040e.ui.strings	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\0414.ui.strings	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\041f.ui.strings	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\0424.ui.strings	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\close_pressed_light.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\Green_btn_Focus.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\0816.ui.forms	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\min_focus_light.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\uninstall_btn_enabled.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\NVIDIASans_Bd.ttf	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\0408.ui.forms	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\041b.ui.forms	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\close.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\Green_btn_Pressed.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\restartlater_btn_pressed.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\NvApp\EULA\EULA_en-US.html	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\040c.ui.forms	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\0413.ui.forms	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\close_light.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\uninstall_btn_hover_light.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\CoreTemp.{0E3CA249-B5DF-4DEA-8017-308B9CC378F2}\setup.exe	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\secondary_btn_enabled.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\NVIDIASans_Rg.ttf	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\CoreTemp.{0E3CA249-B5DF-4DEA-8017-308B9CC378F2}\NVI2.dll	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\CoreTemp.{0E3CA249-B5DF-4DEA-8017-308B9CC378F2}\NVI2UI.dll	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\0411.ui.strings	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\0419.ui.strings	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\0816.ui.strings	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\secondary_btn_hover.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\NvApp\FunctionalConsent_en-US.txt	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\restartnow_btn_hover.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\0804.ui.forms	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\close_focus.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\Main_BG.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\pre_install_bkg_light.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\primary_btn_enabled_light.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\restartnow_btn_pressed.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\secondary_btn_pressed_light.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\NVIDIASans_MdIt.ttf	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\0409.ui.forms	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\041f.ui.forms	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\0409.ui.strings	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\uninstall_btn_pressed.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\NVIDIASans_Lt.ttf	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\0405.ui.forms	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\0424.ui.forms	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\041e.ui.strings	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\uninstall_btn_enabled_light.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\uninstall_btn_hover.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\NvApp\EULA.txt	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\0000.ui.strings	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\primary_btn_hover.png	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\theme.cfg	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\040b.ui.forms	setup.exe
File created	C:\Program Files\NVIDIA Corporation\Installer2\installer.{9CE1647E-BD37-419E-807C-0AB11016A16E}\close_pressed.png	setup.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	NVIDIA_app_v11.0.8.299.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	setup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	RunDll32.EXE

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2640	chrome.exe

Checks SCSI registry key(s) 3 TTPs 64 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\0064	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0002	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\CompatibleIDs	setup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\UpperFilters	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{afd97640-86a3-4210-b67c-289c41aabe55}\0003	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{afd97640-86a3-4210-b67c-289c41aabe55}\0003	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID	setup.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Capabilities	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{a45c254e-df1c-4efd-8020-67d146a850e0}\0011	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	setup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\UpperFilters	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\HardwareID	setup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\HardwareID	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\0064	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Capabilities	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\CompatibleIDs	setup.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\FriendlyName	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\HardwareID	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\HardwareID	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\0064	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{afd97640-86a3-4210-b67c-289c41aabe55}\0002	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0002	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{afd97640-86a3-4210-b67c-289c41aabe55}\0002	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Capabilities	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{a45c254e-df1c-4efd-8020-67d146a850e0}\0011	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	setup.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\FriendlyName	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\FriendlyName	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\0064	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006	explorer.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000\Software\Microsoft\Internet Explorer\Main	explorer.exe

Modifies data under HKEY_USERS 9 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134299048909429630"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography	svchost.exe

Modifies registry class 44 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Settings\Cache\Content\CachePrefix	SearchHost.exe
Key created	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\client.cbs	SearchHost.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\Total\ = "23"	SearchHost.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\microsoftwindows.client.cbs\ = "23"	SearchHost.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.startmenuexperiencehost_cw5n1h2txyewy\Internet Settings\Cache\History\CachePrefix = "Visited:"	StartMenuExperienceHost.exe
Key created	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	explorer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	explorer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A0953C92-50DC-43bf-BE83-3742FED03C9C}\Instance\	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.startmenuexperiencehost_cw5n1h2txyewy\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:"	StartMenuExperienceHost.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000_Classes\Local Settings	explorer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000_Classes\Local Settings\MuiCache	StartMenuExperienceHost.exe
Key created	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\EdpDomStorage	SearchHost.exe
Key created	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\microsoftwindows.client.cbs	SearchHost.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\client.cbs\Total = "23"	SearchHost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{088e3905-0323-4b02-9826-5d99428e115f}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\EdpDomStorage\microsoftwindows.client.cbs	SearchHost.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\Total\ = "56"	SearchHost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{374DE290-123F-4565-9164-39C4925E467B}\Instance\	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000_Classes\Local Settings\MuiCache	SearchHost.exe
Key created	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\TrayNotify	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage	SearchHost.exe
Key created	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\EdpDomStorage\client.cbs	SearchHost.exe
Key created	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\EdpDomStorage\Total	SearchHost.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-189034102-168398478-1159367937-1000\{43D125B9-9821-4F1B-8DA9-152037648F16}	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	explorer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1CF1260C-4DD0-4ebb-811F-33C572699FDE}\Instance\	explorer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3ADD1653-EB32-4cb0-BBD7-DFA0ABB5ACCA}\Instance\	explorer.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-189034102-168398478-1159367937-1000\{F732E2F4-A3AB-4632-BCA4-31E73C8E0728}	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DomStorageState	SearchHost.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\microsoftwindows.client.cbs\ = "56"	SearchHost.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\client.cbs\Total = "56"	SearchHost.exe
Key created	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:"	SearchHost.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Settings\Cache\History\CachePrefix = "Visited:"	SearchHost.exe
Key created	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\Total	SearchHost.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.startmenuexperiencehost_cw5n1h2txyewy\Internet Settings\Cache\Content\CachePrefix	StartMenuExperienceHost.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff	explorer.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
3180	chrome.exe
3180	chrome.exe
5712	explorer.exe
5712	explorer.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
2432	sihost.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe

Suspicious use of SendNotifyMessage 58 IoCs

pid	Process
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe
5712	explorer.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
3000	StartMenuExperienceHost.exe
4296	SearchHost.exe
5712	explorer.exe

Suspicious use of WriteProcessMemory 42 IoCs

description	pid	Process	procid_target
PID 4348 wrote to memory of 3376	4348	chrome.exe	89
PID 4348 wrote to memory of 2628	4348	chrome.exe	90
PID 4348 wrote to memory of 2640	4348	chrome.exe	91
PID 4348 wrote to memory of 2628	4348	chrome.exe	90
PID 4348 wrote to memory of 1324	4348	chrome.exe	92
PID 4348 wrote to memory of 1324	4348	chrome.exe	92
PID 4348 wrote to memory of 4364	4348	chrome.exe	94
PID 4348 wrote to memory of 5960	4348	chrome.exe	95
PID 4348 wrote to memory of 4364	4348	chrome.exe	94
PID 4348 wrote to memory of 5960	4348	chrome.exe	95
PID 4348 wrote to memory of 2900	4348	chrome.exe	96
PID 4348 wrote to memory of 5116	4348	chrome.exe	98
PID 4348 wrote to memory of 5116	4348	chrome.exe	98
PID 4348 wrote to memory of 2428	4348	chrome.exe	99
PID 4348 wrote to memory of 2428	4348	chrome.exe	99
PID 4348 wrote to memory of 2392	4348	chrome.exe	102
PID 4348 wrote to memory of 2392	4348	chrome.exe	102
PID 4348 wrote to memory of 3580	4348	chrome.exe	103
PID 4348 wrote to memory of 3580	4348	chrome.exe	103
PID 4348 wrote to memory of 1836	4348	chrome.exe	104
PID 4348 wrote to memory of 1836	4348	chrome.exe	104
PID 4348 wrote to memory of 3672	4348	chrome.exe	105
PID 4348 wrote to memory of 5748	4348	chrome.exe	106
PID 4348 wrote to memory of 3672	4348	chrome.exe	105
PID 4348 wrote to memory of 5748	4348	chrome.exe	106
PID 4348 wrote to memory of 5096	4348	chrome.exe	108
PID 4348 wrote to memory of 5096	4348	chrome.exe	108
PID 4348 wrote to memory of 936	4348	chrome.exe	109
PID 4348 wrote to memory of 3424	4348	chrome.exe	110
PID 4348 wrote to memory of 1700	4348	chrome.exe	111
PID 4348 wrote to memory of 3052	4348	chrome.exe	112
PID 4348 wrote to memory of 3052	4348	chrome.exe	112
PID 4348 wrote to memory of 4912	4348	chrome.exe	113
PID 4348 wrote to memory of 4912	4348	chrome.exe	113
PID 4348 wrote to memory of 908	4348	chrome.exe	114
PID 4348 wrote to memory of 4192	4348	chrome.exe	115
PID 4192 wrote to memory of 3320	4192	NVIDIA_app_v11.0.8.299.exe	116
PID 3320 wrote to memory of 5844	3320	setup.exe	117
PID 4348 wrote to memory of 3180	4348	chrome.exe	118
PID 4348 wrote to memory of 4592	4348	chrome.exe	119
PID 4348 wrote to memory of 4592	4348	chrome.exe	119
PID 2432 wrote to memory of 5712	2432	sihost.exe	132

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012
Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.nvidia.com/en-us/software/nvidia-app/
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x128,0x12c,0x130,0x104,0x134,0x7ffe8c79c728,0x7ffe8c79c734,0x7ffe8c79c740
  2⤵
  PID:3376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1608,i,16641607158079888043,11117354774313732401,262144 --field-trial-handle=1912,i,2494299341765438375,11945299798139056555,262144 --variations-seed-version --mojo-platform-channel-handle=1908 /prefetch:2
  2⤵
  PID:2628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1480,i,12863061633756986388,10532207582237394319,524288 --field-trial-handle=1912,i,2494299341765438375,11945299798139056555,262144 --variations-seed-version --mojo-platform-channel-handle=2068 /prefetch:11
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:2640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2344,i,10174325365946128080,12388928452666399474,524288 --field-trial-handle=1912,i,2494299341765438375,11945299798139056555,262144 --variations-seed-version --mojo-platform-channel-handle=2432 /prefetch:13
  2⤵
  PID:1324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3176,i,12952675929672841304,717847813035466183,2097152 --field-trial-handle=1912,i,2494299341765438375,11945299798139056555,262144 --variations-seed-version --mojo-platform-channel-handle=2856 /prefetch:1
  2⤵
  PID:4364
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3180,i,14400676843467947846,17969405890494817578,2097152 --field-trial-handle=1912,i,2494299341765438375,11945299798139056555,262144 --variations-seed-version --mojo-platform-channel-handle=3196 /prefetch:1
  2⤵
  PID:5960
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5468,i,16841478599447960444,15002441231714881804,524288 --field-trial-handle=1912,i,2494299341765438375,11945299798139056555,262144 --variations-seed-version --mojo-platform-channel-handle=5488 /prefetch:14
  2⤵
  PID:2900
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=5596,i,12293066132734910538,9378577811858607002,2097152 --field-trial-handle=1912,i,2494299341765438375,11945299798139056555,262144 --variations-seed-version --mojo-platform-channel-handle=5600 /prefetch:1
  2⤵
  PID:5116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5628,i,9563813378385344720,6483721400079950725,2097152 --field-trial-handle=1912,i,2494299341765438375,11945299798139056555,262144 --variations-seed-version --mojo-platform-channel-handle=5648 /prefetch:1
  2⤵
  PID:2428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5920,i,5002007646489256214,5537666591891803332,2097152 --field-trial-handle=1912,i,2494299341765438375,11945299798139056555,262144 --variations-seed-version --mojo-platform-channel-handle=4748 /prefetch:1
  2⤵
  PID:2392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4928,i,8803666076638108510,1170139735277870722,2097152 --field-trial-handle=1912,i,2494299341765438375,11945299798139056555,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:1
  2⤵
  PID:3580
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5740,i,8823559990412550535,12335185444510864802,2097152 --field-trial-handle=1912,i,2494299341765438375,11945299798139056555,262144 --variations-seed-version --mojo-platform-channel-handle=5656 /prefetch:1
  2⤵
  PID:1836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5660,i,6035804357228781052,14797099351187784524,2097152 --field-trial-handle=1912,i,2494299341765438375,11945299798139056555,262144 --variations-seed-version --mojo-platform-channel-handle=5740 /prefetch:1
  2⤵
  PID:3672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=6008,i,10417856966033215298,5226787730943818552,2097152 --field-trial-handle=1912,i,2494299341765438375,11945299798139056555,262144 --variations-seed-version --mojo-platform-channel-handle=6016 /prefetch:1
  2⤵
  PID:5748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4748,i,5693664976377243471,15571198574003361998,2097152 --field-trial-handle=1912,i,2494299341765438375,11945299798139056555,262144 --variations-seed-version --mojo-platform-channel-handle=4760 /prefetch:1
  2⤵
  PID:5096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3444,i,15208632663469277627,9234096867178555992,524288 --field-trial-handle=1912,i,2494299341765438375,11945299798139056555,262144 --variations-seed-version --mojo-platform-channel-handle=5972 /prefetch:14
  2⤵
  PID:936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4904,i,10446025769064378029,10857411228321459333,524288 --field-trial-handle=1912,i,2494299341765438375,11945299798139056555,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:14
  2⤵
  PID:3424
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5616,i,11264345658736987746,4332477331482708283,524288 --field-trial-handle=1912,i,2494299341765438375,11945299798139056555,262144 --variations-seed-version --mojo-platform-channel-handle=3144 /prefetch:14
  2⤵
  PID:1700
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=3256,i,1602638305517858952,244330743533613068,2097152 --field-trial-handle=1912,i,2494299341765438375,11945299798139056555,262144 --variations-seed-version --mojo-platform-channel-handle=3328 /prefetch:1
  2⤵
  PID:3052
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5732,i,15444506690228258787,10829248583072585110,2097152 --field-trial-handle=1912,i,2494299341765438375,11945299798139056555,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:1
  2⤵
  PID:4912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6148,i,8085013488996160977,13871966094970543056,524288 --field-trial-handle=1912,i,2494299341765438375,11945299798139056555,262144 --variations-seed-version --mojo-platform-channel-handle=792 /prefetch:14
  2⤵
  PID:908
- C:\Users\Admin\Downloads\NVIDIA_app_v11.0.8.299.exe
  "C:\Users\Admin\Downloads\NVIDIA_app_v11.0.8.299.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:4192
- - C:\NVIDIA\NVAPP2\setup.exe
    "C:\NVIDIA\NVAPP2\setup.exe" -log:"C:\ProgramData\\NVIDIA Corporation\\NVIDIA App\\Installer\\Logs" -loglevel:6
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Drops file in Program Files directory
    - System Location Discovery: System Language Discovery
    - Checks SCSI registry key(s)
    - Suspicious use of WriteProcessMemory
    PID:3320
  - - C:\Windows\SysWOW64\RunDll32.EXE
      C:\Windows\SysWOW64\RunDll32.EXE C:\Users\Admin\AppData\Local\Temp\NVI2_29.DLL,DeferredDelete {D49E4769-A3FF-47C0-9FB5-0949AAA22A16} 3320 C:\NVIDIA\NVAPP2\setup.exe
      4⤵
      Loads dropped DLL
      System Location Discovery: System Language Discovery
      PID:5844
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6272,i,5927769387424363227,10033152942071950183,262144 --field-trial-handle=1912,i,2494299341765438375,11945299798139056555,262144 --variations-seed-version --mojo-platform-channel-handle=1060 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=6552,i,16803516920050099192,5742869723148662607,524288 --field-trial-handle=1912,i,2494299341765438375,11945299798139056555,262144 --variations-seed-version --mojo-platform-channel-handle=6548 /prefetch:14
  2⤵
  PID:4592

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3956

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1736

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
1⤵
- Modifies data under HKEY_USERS
PID:5100

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:4044

C:\Windows\system32\sihost.exe
sihost.exe
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:2432
- C:\Windows\explorer.exe
  explorer.exe /LOADSAVEDWINDOWS
  2⤵
  - Boot or Logon Autostart Execution: Active Setup
  - Enumerates connected drives
  - Checks SCSI registry key(s)
  - Modifies Internet Explorer settings
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of SetWindowsHookEx
  PID:5712

C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4296

C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3000

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:3076

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0000.ui.forms

Path C:\NVIDIA\NVAPP2\NVI2\0000.ui.forms
Size 72KB
SHA256 c69a31733610c6ef02c052dcf483ec8591fb9dc7b23ef1dd0ee66b8809fcb41b
MD5 ada55d3610188737c28c7f2481678d2b
SHA1 a8fe58e35df0597056ed5207e25b0d8f545553ea
SHA512 02ca28f42448af649b4c951140f9fa07ea055d0232604bcb6b1e4e0f6aedb3006bb53e4301a2254bae5fed670ecbe14c5cea2d8066a40dcc63156fdabe0de3d2
SSDEEP 384:E65bKxkL07G3t3ZK2xYhuL3vid1BPxOSnQixaWIG74toCLBwtOZFLlK+IAwukkfP:EuKuaJ/LbG+QPmC
TLSH
T152734200F03ABF3566258A2BBAF19549951FFC36D24C29A771DE36736BE28312473247
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0401.ui.forms

Path C:\NVIDIA\NVAPP2\NVI2\0401.ui.forms
Size 5KB
SHA256 295e5891f684083da6f0694889a9da1c09c4976ff1cdf87a6aa9504dfb22e567
MD5 f91660af4ddbf33e65110b452ba7ca28
SHA1 40946793dbb1e4669e57bd1bd89d63a4f3a2deb4
SHA512 e617e149c17c4b553a530c223b59b557682aee8f7b5b95c66aa7130d6a296f17c159e1358a53c8ec152efed52028f7955ffe35e3f325f8d7c8801b88cfeaf0ea
SSDEEP 96:2FeCH9oL30/zn0sChqNg62TYaOABMKRCjZKEq8VUFeDK/d6/vPoRNFhxkd:2FeCH9oL3mzn0sChKg62TYaOABMKRCj1
TLSH
T10AB1F30681824E623AB147947CB78E05D37888A7170E199A35EF135B3BBB22F91D365F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0404.ui.forms

Path C:\NVIDIA\NVAPP2\NVI2\0404.ui.forms
Size 6KB
SHA256 7bbb642ed96b774bf81d6ab909ce2d68581110ce6b27d6cb941d7478784ede22
MD5 fe55dacaa28ae3f61b32d683d94fd808
SHA1 54a4c2d16ea946d8a8a8a1aed4850d18a6558577
SHA512 6b1d6c4f1eaf11d6c01660b70caf99b0b458b851ca242b021889eab1729b7449a3e29a724b95d042171e210b2a602ceacc1340a17a0218963f00dcbd338b3d3d
SSDEEP 192:IGVUFeXH0zMoZf60sXhRgH2AYvOdBBKRBmykHE1H8VdFeUHFX/nP6yymGk0:IGdX0zt9bsxRgWN2L8WdkKoUlPP6yymK
TLSH
T1C5D1574641824E723A7207A47CB78E05D3788C67160E199A35EF1B8A3F7B12F91E365F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0405.ui.forms

Path C:\NVIDIA\NVAPP2\NVI2\0405.ui.forms
Size 5KB
SHA256 3f1d4d41c3c486ac58b17ae2641dc46f322847c0797b28f77a217cca9742f389
MD5 593d59ccb49edd3b1cad69c560a8ac65
SHA1 bbfbf0a5aff4465fb37b15c9a6056c5a8bf8c162
SHA512 1f668c716373dc8cb09b658cadabfc21be95a5e1b50a94d25efb3c2cd00b2fcb5f817e52f20bb76a4ba370cbf5ae435d53d3429902fd3e344b0789cfb332528e
SSDEEP 96:1qFeGHZoAUcV/zn9D0sGhWNgu2XYuOUBIKR4mbkJHEvH8VAFePu/de/cHHPFh5tW:QFeGHZoALZz9D0sGhWgu2XYuOUBIKR4T
TLSH
T16CC1760641824E723A7147A47CF78E16D3788873160E199A35EF67463B7B12F91E368F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0406.ui.forms

Path C:\NVIDIA\NVAPP2\NVI2\0406.ui.forms
Size 5KB
SHA256 e57909fb0269f96256aaf695c0681ccd13571cc6d960268635538eff8eac87da
MD5 150d499a867742f3186dd71fdadd443d
SHA1 60edffbc43dd9ba4647a91528c28c41e5b60befe
SHA512 41d79aa1ea26ba14b46f806671f4675caab379fe0b95a836213eaed8b8b7be95a00f78e45e1b3eae90020eb737e6069f277fa5109b3f5235720eb7dec26d7140
SSDEEP 96:D4qFelHCogUc//zo9o0slhBNgV2KYFOnBLKRTmAkCHEbH8VrFeal/dV/HuPwI0Ia:bFelHCogLXz6o0slhXgV2KYFOnBLKRTf
TLSH
T194C1540681824E723A7107A47CB78A05D3788867160E199A35EF374A3BBB12F91E375F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0407.ui.forms

Path C:\NVIDIA\NVAPP2\NVI2\0407.ui.forms
Size 6KB
SHA256 0157e8e2a58463c0bc84b961e268c1cd6fccda2b79b3fe49b0aaa82a2945b361
MD5 5861b793c3deedf51c28d8161bed4ef7
SHA1 441359577c163c531d9927f205006af07468af1c
SHA512 a853672380e45e209674224dd0ae9d47d7fa2703076019f204d088ab17b080a65768d02d32b19abcde12679e2c45992af09911d40b031b332181f09530bca614
SSDEEP 192:XFeEHroOe9zPx0sEh8gM25Y8OGBRbWKRKmJkoENH8V+FeNcFE/+xHP7HKBXfkD:I+0nzPmsq8g5yTMRBCpSLNiWE7HkXfO
TLSH
T154D19A0681424E323A7207A47DB78E15D3B488A3164E199A35EF27473FB712F55E364F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0408.ui.forms

Path C:\NVIDIA\NVAPP2\NVI2\0408.ui.forms
Size 6KB
SHA256 8b2f67857667fd22587641594915b44d9d24cadcde09f8da89b46097b40071f1
MD5 df26795dfc3906c79f16ffec25d8da76
SHA1 fa5a7cf05b2bbc3b26abedf8107bd0277324701f
SHA512 cf50ea8a02f598fcf01d3b7dfc0dbe2dc209eaa317293b8df7890a14ba29d8011cb77feb6bb6277d60469401fda7969265767bdf1238c0342cb12a974005c32f
SSDEEP 192:JeFe7H8oEQnzE20s7hFg720YDORBNKRdm+k8HEDoH8VBFeoLF7/ZdHP2GFkSyk4:XTdNzEXstFgaZSPIS5J18opjH2GySyt
TLSH
T12AD18A0641428E723A7107A87DB78E05D3798C67160E1A9A35EF27463FB712F91E364F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0409.ui.forms

Path C:\NVIDIA\NVAPP2\NVI2\0409.ui.forms
Size 5KB
SHA256 101bb625e9ee927bd4213dbff5ef02987ff2503fce632ecc137fca9bd20482ea
MD5 e1a197cf66152197040325f2ee5eab49
SHA1 7bfcfb544f085b199cc7d7c0679e1534e6930107
SHA512 4b7cc2d32ace215d5d4a245bc81d3287e9f3c2968a292e13a023706e59ee0683cddc41ec9b2704932f00532a4c01900d69718dc3755a12126cffb9e532c41bab
SSDEEP 96:1Fe6HFoD/s/zH0s6hyNgi2LYCOYBkKRa7ZiEC8V8Feri/dS/nPwR1NZJkV:1Fe6HFoD/ezH0s6higi2LYCOYBkKRa7N
TLSH
T1A4B1582681824E72BA710794BCB74E04D7788867160E199A35EF134A3F7B11FA1D369F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

040a.ui.forms

Path C:\NVIDIA\NVAPP2\NVI2\040a.ui.forms
Size 5KB
SHA256 5a2afb404213bb542118340bc55dda108894763f83c1c48ea3e15a922a90bb45
MD5 f51a6bd692b41f65a9d2c0a96b2bbc2b
SHA1 ea24f23ff560d3f046a63e4993664f8cec231893
SHA512 3e84af5ce486729707bf04bc2c1b1b1f6e527679f2c57803be84caf70c0cfd4cdebff0065580e6513e2f10bfcf7c9493f5489e6dfda42da099468061fc24aa98
SSDEEP 96:xFeSHto5XgHUGE/zD9H0sSh6Ngq2jYKOQBMKRMm/kNHEWH8VkFeD6/dS/wcPpd1Q:xFeSHto5wHUG2zRH0sShagq2jYKOQBM9
TLSH
T1E3C1771681824E727AB107A87CB78B05D37888A3160E1A9A35EF23463F7752F91D365F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

040b.ui.forms

Path C:\NVIDIA\NVAPP2\NVI2\040b.ui.forms
Size 5KB
SHA256 e7a0116df7de34b4b7899c1f50e3260ffbaf7ed96ef446a38a78e3ac18f3cfb7
MD5 c50941c08f71899d0ae064c0a98f2573
SHA1 a3f5228dd1ad7cb485e3272943db4fcd1b2f2fc1
SHA512 d7581cbd96304c08d55655c1b4363e2a9d3fc7c19f14e7a3bd3f111376363da8a040267e94ccb3a5281bbb1223db5a416a49c7c8a249d24412dae47dd52a81ad
SSDEEP 96:zFexHWo6V8kv5/zE9c0sxhlNgB22YxOjB/KR3m0kxEbAH8VnFeOx/dx/b/qHPE02:zFexHWoq8kvlzec0sxhrgB22YxOjB/Kf
TLSH
T167C1560681824E727B7107A4BCB79A05E37888A3160E199A35EF23463F7B12F91D365F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

040c.ui.forms

Path C:\NVIDIA\NVAPP2\NVI2\040c.ui.forms
Size 5KB
SHA256 6c47dda221a46b83faf61f4bca02ca745d08fe0a94b9a06d4e9d5246e7af0ce2
MD5 423efd4c7ad25552e18537e3fb83cda8
SHA1 4fc3f7f0d9d12759542c976f4047301974d65e50
SHA512 a3b4540814f53dea2fd89c2caf8e785110c972d132b07eba62494d78457bd2d8e97c5be0da293bbe7ee6156da79dd84d4a26e098b2405ece9e1765133f6eacbe
SSDEEP 96:dFeQHAHoIGFl4S/zt9l0sQhQNgo21Y4OiBeKRemNkoErH8VyFexo/d4/yLHP/j/q:dFeQHAHoIGFl4wzTl0sQhggo21Y4OiBF
TLSH
T1D0C1880681824E723A7107A47CB78B05D3B888A3064E199A36EF27473F7752F91E365F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

040d.ui.forms

Path C:\NVIDIA\NVAPP2\NVI2\040d.ui.forms
Size 5KB
SHA256 6d2ba12358e3ffd75a334863147650025eca97b2d2726c2c313eda3b6620a3ca
MD5 2f8fd63c6f0288240fe2dd6d4d2e3b97
SHA1 87026b75a2ca709f43761f143f65bd3e2734f7af
SHA512 9510a1f1daf82d535adc4d2f0351a5059b3cf4e94e1fc5d93d98807f1b756191667ea0503c99b3ac9f4ca89d01258b706e2ab568d3326a8a33be2bb196114baf
SSDEEP 96:nPFenHAosgP/zr0snhTNg32QYfOtB5KR/AZ3EX8V9FeS3/dH/ePX5CiWWkE:PFenHAosgnzr0snhZg32QYfOtB5KR/AO
TLSH
T13CB1260681824E723B7147947CB78E05D37888A7160E199A35EF234A3F7B22F95D3A5F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

040e.ui.forms

Path C:\NVIDIA\NVAPP2\NVI2\040e.ui.forms
Size 6KB
SHA256 9ddc0b698176711e252691dd58a179ee0e169a99dd9a4bd63b93bc27c49b9a75
MD5 986a96129f9308d7d24db5ba57e75c37
SHA1 0788bc2ee389b751afd38954b6f8c4d85d9b80d7
SHA512 b7aae2d9a76c329ed736e5b1cc903e29cb4cf8861b8309c628f99a94be7094332f05ba955ee8194f93801e2bf4345ac88ad12a2bef9529abce8ab4483697b06a
SSDEEP 192:DFeWHJoYZ7LCDzNT0sWhmge2nYeOkB4KRlHmrkeERH8VwFe/eFW/seP1x4BdddkR:MQKkLCDzNAsUmgrY1ut2YbGx/A411xqM
TLSH
T14ED1580681824E723A7107A47DB78B15D3788CA3160E199A35EF27463FBB12F91E365F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0410.ui.forms

Path C:\NVIDIA\NVAPP2\NVI2\0410.ui.forms
Size 6KB
SHA256 cabe9a8e9cc0421a1b86ab74dd81aa1f4843dd28cfde7be6ddfc8d26b755de40
MD5 ffb307b68ffe46d4609f8d0c567007e6
SHA1 9d2c6cbd595a76557cf0bfb2b2a0f9e1836704af
SHA512 3e0f389006e47074460de31e1a2d8458adc546644dd41012941cd0e54b493d42fb81fda863d6360731e5143a55be60d1062f98d496329902c14f35162386a166
SSDEEP 192:gFeYHvojvhpEXlzQfB0swhsgk2pY4O2BeKRCmZklHEgH8VOFeFoFw/IP/f/LXkP:36AtpE1zw2sesgxi38j1yy5/F+yq/f/i
TLSH
T1ADD1881681828E723A7107A47DB78F05D3B888A3164E299A35EF23463F7752F91D364F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0411.ui.forms

Path C:\NVIDIA\NVAPP2\NVI2\0411.ui.forms
Size 5KB
SHA256 034fe40e0a4b46f60426509cb2ff972150e77da2dcffe8b8fa22d24a2eaf4eba
MD5 f0c5538da3a2a9bc2fb97b47e54316cb
SHA1 675e79ef336447d05e7bd38ea4f7b29950e0cdc3
SHA512 48501510fa5a7450acea4d64abe509d8fdf1a72a1bca60559025a024ae2e3db9934f596b2aae5fbc1e2e4a7b6d04a8b5194d885851cf44af03725a6a664adae5
SSDEEP 96:JqFeRH2orZb23d/zE940sRhxNgN26YxOXB/KRrmQkxE2H8VzFeSx/dR/VDaHPEAe:UFeRH2orZb23hze40sRhHgN26YxOXB/k
TLSH
T1AEC1781681828E723A7147946DB78B05D37888A3170E1A9A35EF27473FB722F91D364F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0412.ui.forms

Path C:\NVIDIA\NVAPP2\NVI2\0412.ui.forms
Size 5KB
SHA256 5a7d4b84da04b98a3e49f2f8069a30e6d39a0c6592aba2e2c7484e57653a5153
MD5 f99bbfd876a35a5f90355b16b7e2476c
SHA1 bb7cba96124505df7f80c09a68afd661d6a5f5af
SHA512 96a2c7663ecb867c937b18cd66557d1d4af8664ba7140d3f7328154cbedc722a10bd7eef38f3621b60c95191a772d8981bf13f81c3c5ad2779f0c9f81d21415a
SSDEEP 96:rnqFeyHNo5J/rLCI/zD9T0syhUNgG2HYQO+BsKRQmrk6EM3H8VAFen6/dy/aPp5O:rqFeyHNo5J/rLCSzRT0syh0gG2HYQO+s
TLSH
T1A5C1AA1681828E723A7107A46EB78F05D37898A3070E199A35EF17463F7721FA2D364F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0413.ui.forms

Path C:\NVIDIA\NVAPP2\NVI2\0413.ui.forms
Size 6KB
SHA256 2c60c2bec06cbfbaa4704749b84291dda81e517246579ce653100aa2e7ae0793
MD5 30848b7992a6ed825d543112bb130568
SHA1 93569d3e5037d23cd03e6f7efabf55a0582e0fa6
SHA512 48a24f20d2ad03ec44fab1d3666652d0158c035a6c7540e4151e47bb9193dbc6a64e1c69f1d5958c4c4cb0767172c3f57f2f61188168da4e01b3285b2a28ae39
SSDEEP 192:riFezHEoJiGCo1vzcK0szh5gf2wYnO9BtKRZmCkDELH8VlFeUDFz/Z9HPOKuKekQ:rJL10Po1vzcrs15gu9OroqNgAEUhr3OZ
TLSH
T10EC1371681828E722A710B947DB78B09D378C8A7160E199B35EF27463F7712F91D364F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0414.ui.forms

Path C:\NVIDIA\NVAPP2\NVI2\0414.ui.forms
Size 5KB
SHA256 909f24f2aaf78275d29b66902a0bfbe0b08a9006c0f4c64630d994ed7ba2ed15
MD5 fc70a6608f8895984e2e354cd013bf08
SHA1 f1adb4be3014b309c8ba788dcc6cc4cd635133f0
SHA512 7f7d2f76680581d783d3281e8262dc9f2245a29418d51f2870528b1f102a0d4f177c0cda13b6e0879e71f1808c237b6f999a6bd4f90da950628b22f25f73f127
SSDEEP 96:WFe0H7or7tl4a/zR9LNgp0s0hp2VYsOCBqKRmm9kMEnH8VCFeJM/d0/u+aHPrLDm:WFe0H7or7tl4Yzfhgp0s0hp2VYsOCBqU
TLSH
T155C1591681828E723A7107946DB78F05D3788CA7160E199A35EF2B463FB712F91D364F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0415.ui.forms

Path C:\NVIDIA\NVAPP2\NVI2\0415.ui.forms
Size 6KB
SHA256 7d64dbef083119bf0a5a8db3d4c1050789dc67a98f4b6f8d1a68cdce1324e272
MD5 bbf5c1ccf7fd81c086f77b09bcc414f6
SHA1 18010b2de547bf914e007cdb7a1dc5315d118438
SHA512 7673bfb6cff023505a2e569288297f30bd156797d2e6f8af10544d4479a5e29244c002136e0c832689de732a566c78880a16e664a184923a7513c9a37c924355
SSDEEP 192:TFeFHSokLEybtzKc0sVhfgJ2WY1ODBTKRfm0kVELH8VfFeeVFV/1eHPgcjwm40k2:8VbjybtzKVsnfgYz0NGgT+ACePFOgcbf
TLSH
T195D1691681828EB23A7147546DB78F0AD3B888B3160E199A35EF27463F7711F91D368F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0416.ui.forms

Path C:\NVIDIA\NVAPP2\NVI2\0416.ui.forms
Size 5KB
SHA256 869354049867d4ede0a8019dcbd240c5b8606c60366bc878b0837b543822a2f0
MD5 7e794407a2b9c03e72c6b932afe3d0a9
SHA1 c6e2b06b198c93d484165f7c2e6298c1e8ad595c
SHA512 ad6b56c64ecffbe7248efe420f8c85d0dc26ce04fd76826e44b3b5e931d1476f3559da7abf5515000523ac292e4bcbb79c87e2910a2e6df9df45c7885778ab26
SSDEEP 96:QHFe2HpofUgPnGM/zX9H0s2haNgy2DYeOwBIKR0mfkeE0H8VkFere/d2/19aHP18:QHFe2HpofPPnG+zNH0s2h6gy2DYeOwBc
TLSH
T13AC1681681828E723A7107A46DB78B09D37888A7160E299A35EF27463F7712F91D374F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0419.ui.forms

Path C:\NVIDIA\NVAPP2\NVI2\0419.ui.forms
Size 6KB
SHA256 e32183eaa66635fd328773235003ed2073d55274939f572e6c9f7b8f4a57a06d
MD5 bdfb57db28423c601a9f4769ec168428
SHA1 18156c233fd833cfd7b8e40445845b4b9e574a7b
SHA512 b2aea45f2ad6ef78dd3ae758e51542a266113ca105f79f57bce993889006c2e397c99f17f4cd0fb3eb84f98cb4ccb508434e98ca43d0f7d51ee92f754f64d520
SSDEEP 192:6FeJHeoxKAe/3JRNzMJRZw0sJhfgl2yYZOvBvKRHkHmYkxkHERXoH8VrFe6pFJ/0:hB/Te/hzOZsDfg0ngpifH7TG6j5ZcY8N
TLSH
T1A0D17B2681924E723A710754BDB78B05D3B488A3160E199A39DF27473FB711FA1E368F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

041b.ui.forms

Path C:\NVIDIA\NVAPP2\NVI2\041b.ui.forms
Size 5KB
SHA256 504387546bf04619502504c17a01199180c3c063b2d789a3e29925c4040ee41e
MD5 9e78b7785146f071f2c058618b88492f
SHA1 38c66398d9858402882d3a1bb8412c01f08047b5
SHA512 1b9346731b929826b31a528fa74f4564df00a92bba543e245f96cdc2db0e9bd9b0b7795a909d61754a7623bbb363015d9f40cc7d4ac02ab54d49825a94527af2
SSDEEP 96:QFeiHdoJ5LV+S7SY/zT9D0sih2NgW23YAOOBcKRAmbkKE80H8VYFe3K/di/8X+aW:QFeiHdojLkS7SizBD0sih2gW23YAOOBj
TLSH
T1F5C1681681828E723B710794ADB79B09D37888A3160E199A35EF27463F7712F91E374F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

041d.ui.forms

Path C:\NVIDIA\NVAPP2\NVI2\041d.ui.forms
Size 5KB
SHA256 978cab71275bafbad634ff867c08bc2eaeaac094e0a11f24b55a372e0afbc54b
MD5 d5f54c0a0e8ae2a8817de5cca23583b0
SHA1 2c83cc87bf83ea97f3494ddd240786d0836d13c6
SHA512 f59d87a73a45d06b6bef1ace91dc7a5c4c804628426d4baa1f126b0ea73124c9ca0457e05062c96b410d0bfc28b45a9fef4a8a5163699880d64ce09c541b50a1
SSDEEP 96:3FekHLoKUcdVIq/zh9V0skhgNgg2FYmOIB6KRWmtkcEAH8Vcc/dk/+3HP77TX7kj:3FekHLoKLdVIozPV0skhwgg2FYmOIB6+
TLSH
T12FC1791681828E723A7107A47DB78F09D37888A7160E199A35EF23463F7712F95D364F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

041e.ui.forms

Path C:\NVIDIA\NVAPP2\NVI2\041e.ui.forms
Size 5KB
SHA256 2ee54ef58814e52ae0a986d6826ce93f94c82c831a4db2b07cf3a9e31fb12eb7
MD5 e7e2da8916a186ce14dd11fc64b9db33
SHA1 05d335a9f342459bf998882c941e56babc48e7b2
SHA512 a145b015561466dc560dad29faf434a33bb043cdc00787ed0f8bf0899cae6bc1c4473304ae64626f5b964e3e69c096a772d35e3a4452cc60d99e2a7fc9febbc8
SSDEEP 96:7FeFHioXbiirR/zo9M0sFhpNgZ2GYlOzBLKRPmkklE2QH8VvFeGl/dF/FPwM0IEn:7FeFHioXbiir9z6M0sFhvgZ2GYlOzBLA
TLSH
T1F7C17A2681828E723A7107A46DB78F05D37888A7160E199A35EF174A3F7B11F91D364F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

041f.ui.forms

Path C:\NVIDIA\NVAPP2\NVI2\041f.ui.forms
Size 5KB
SHA256 c226fb75cf60ca698c3b5e2f75671e5b3a2f0f5361ed3aa7c4f785890cdba448
MD5 ea3a91e7af7d8645383b309097f3145a
SHA1 db2a49b7fa709039c803670bc0ae1b5bf367b9dd
SHA512 3deda6ea826890bf48abe846f066c4c54644cea20dad26836e931ee574dfd8f919664e0a6588b6616adf5191a7480b93bca7614183fa72c862e032968f9d3691
SSDEEP 96:uFemH5obMX5c/zn930smhKNgC2zYcOSBYKRkmvkuEYH8VUFebu/dm/OPF15t5kh:uFemH5obMX5Oz930smhqgC2zYcOSBYKA
TLSH
T14AC1581681828E733A7107A46DB78F09D37888A7160E199A35EF274A3F7712F91D364F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0422.ui.forms

Path C:\NVIDIA\NVAPP2\NVI2\0422.ui.forms
Size 6KB
SHA256 39b3529676395ceb9f68802ca27278cdfcb5610bb7a7286dd298a054c2a897c0
MD5 ce28fb3aed6e165342bb3bb975dcf9e0
SHA1 e6165fb113bea10ea973ce2291a1c729e85f9aae
SHA512 647a04b8530f0794d0e7f90388b4271d17a8f3d8f242cc8719072a132e45f2341413eeee3593bfed65cf887c96a59a8b9d67bec95d92ffaf9eb6d42f5578ff77
SSDEEP 192:7Fe3HcoMkEqMN3zUW0s3hRgb2EYPO1BVKRhmukZ6HE5EH8VtFeQnF3/5/MHPaSFW:k39fMN3zU3sRRg6pWDg2JdDoQFvIaSg9
TLSH
T13ED18B0691924E723A7107946EBB8B09D3B498A3060E199A36EF23473F7711FA1D364F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0424.ui.forms

Path C:\NVIDIA\NVAPP2\NVI2\0424.ui.forms
Size 5KB
SHA256 3f806d0dfcaadd66765d78e1ff1ec7048eb9025785dca6405e50332a1a9edc54
MD5 311de108c806d619e4ce71f8053d6ca2
SHA1 93e097709436cff846534855a7c10283557f371e
SHA512 a6137a2a72697d1142ca0dfa235a987a5bd36e7ee3d308028efd910a5d16f8c62171fb388e70b06bdd85ddc0636997e7401a8ba6345667094d660e234f6becfb
SSDEEP 96:+FeBHKoxUAMuTJ/zw9A0sBhNNgd2SYhOLB7KRnm4kOHE9H8V3FeKh/dB/BP0EI8O:+FeBHKoxPMuT1ziA0sBhjgd2SYhOLB7x
TLSH
T135C1890681924E723A7207946DBB8E04D3798CA3160E199A36EF274A3F7711FA1D374F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0804.ui.forms

Path C:\NVIDIA\NVAPP2\NVI2\0804.ui.forms
Size 5KB
SHA256 1c6054f64907fb4c553c509b905aa6752672df0d8fa549650ed703e73704db7d
MD5 9bbd54529874f09fe64196f27a165ce7
SHA1 9eebaa0ae473aea9e4044216a21e3aacb1c66fde
SHA512 8dfb06d6ae6e0a89373e9b930203cfb8f848127f38541fe2cc6f13878674fa34e4bc6142d568ecf6fa3f715efba46f071dfbcb976b10ee7340c25def9435c7bf
SSDEEP 96:6Fe7HsoY07/zT0s7hvNgL2EYjOxBFKRbuZLEr8VxFe2L/d7/qPTBmGSSko:6Fe7HsoY0bzT0s7hlgL2EYjOxBFKRbuy
TLSH
T1AFB1250685424E723BB247947CB74E05D37888A7160E1A9A35EF138A3B7722FD1D365F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

080a.ui.forms

Path C:\NVIDIA\NVAPP2\NVI2\080a.ui.forms
Size 5KB
SHA256 87aa0e0735f4e8676ea19a5c49199555004ecbcef53f7017e77d8bd8db6b61b3
MD5 f9ac7f82b503400dbd409987b7194aa5
SHA1 6b6ff39507713db6b8b27433fe68bdc49f5961aa
SHA512 f7f0267ad93a76c7b0a0f67e461af4af61d733cf34d3c5e15b680ae02e688b7419e85b767fc29c070c87cd6cf510d050f6df7b2e6bb8fca102cca7a67b285fca
SSDEEP 96:6FeOHho/je30sOhONgW2PYGO8BQKRmDZ2EH8VwFev2/dG/zPs5ZxV1k5:6FeOHho/je30sOh+gW2PYGO8BQKRmDZ4
TLSH
T195B1541681424E72BB7507A83CB78E04D3B888A3061E199A35EF134A3F7762F91D365F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DynamicBillboardPresentations.cfg

Path C:\NVIDIA\NVAPP2\NVI2\DynamicBillboardPresentations.cfg
Size 1KB
SHA256 ef8f85fa5f18105cb3d5b20bb6f72fda912a74340f4e6dc3302b600a1fb9b3e5
MD5 afb01b092306d419dc1fb0affee49319
SHA1 29339afc46baec22001c58a71d3793e74d91b39c
SHA512 1d8f5c604b86be8a1f92e247c05685cac5637d9a9223a23e0b8c1a5a7f8bf1d7adda4cf48cbadde7b77ff1cc856d993cb1fbc047866c0d7fc45b83be093e0028
TLSH
T10F214CA05CC44FB14E3ACE73A830142CB629E9A2491E14D7B9FF300B97615072E7B5D2
MD5 SHA1 SHA512 TLSH

Submit Download

DynamicBillboardPresentations.dll

Path C:\NVIDIA\NVAPP2\NVI2\DynamicBillboardPresentations.dll
Size 1.0MB
SHA256 987e9ed8b35dba254a8dc00a753fd3fa16e003291f8cee12ca59c776d115a110
MD5 cb6c5b480929ba844ad0ab59d13003e4
SHA1 643528cad1613be8518d7454295a551e7673d6fa
SHA512 2f9590e006bcc3a9a8285ff5b795b497cce404c8ee5c241ff368c25cd8aba218e13ebc07297a08c1ef68c2a467026def522991377ce0d1a0a449c6cff9df8eff
SSDEEP 24576:Bk7arAJxjH53JgkHMVWbseMpvcOzU4iwi512:Bk7/PHcjYkjzU4iwi512
TLSH
T19F357C21358DC537EB7E12706D3CA66F20AD7A650F7080C76398AF6E6E748D21732A53
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DynamicBillboardPresentations.htm

Path C:\NVIDIA\NVAPP2\NVI2\DynamicBillboardPresentations.htm
Size 10KB
SHA256 0af72677221bad8f8b562908c16466ee2344e60bdda10e99402e5c15f6aab75c
MD5 5ca3f9dea84fa4ad9360ab943605d7b9
SHA1 3990d86e8930f8db0fdc4c16d43face59393bf61
SHA512 b298737cc7d5677d6aa73b7348edfc3f821499c30407218399f5c6131f1b05b20a253b1432d38d97f66819d8f8f894ea507d81752fdba07ee0964c8417b3b738
SSDEEP 192:kPGT2UYKu22KeQW+9obtH4wv7Ekx21/crun+:mG3obtYwv7VA1/cy+
TLSH
T12E32239FBCA85028D533B374AB2F9528F372512329138B457DEC5248BFB290552A2FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NVI2.DLL

Path C:\NVIDIA\NVAPP2\NVI2\NVI2.DLL
Size 6.6MB
SHA256 1e9b750e50ab83fae2059dc95d3c0f068f4b1ee9398f82af02ef9af5dc575765
MD5 54718c5bba79e60e68f71a9e993d2d12
SHA1 e7534f9e55d84ade4dd1fa58e6a1f49cc7055aab
SHA512 25064046534f21ead0a12d3da2cbfd9b1992ebfaa3aedb141133e1c5d07633dd1b0c4cb18cdfe25ca80ee3360366f36565cc43a7af867c044c02ddf1e61e3049
SSDEEP 196608:zwxjW2NXGMB9jMSB8qPLTjz/EVzXusNSpsbE:ziDZGMB9jMSB8qPLz/WNng
TLSH
T1D4666C31275CCA2BD56F46F1BD7CAA9A505CBD710F2080D3A3949D6E34B60C31A3AE67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

json2.js

Path C:\NVIDIA\NVAPP2\NVI2\json2.js
Size 35KB
SHA256 74b00e155f94a22614e41286810080636f047f1aab88d0c87b3fb609ce6d7f69
MD5 2aa0ef312f543ce598cf9407384cef54
SHA1 989ff1a3a58e98cf8d6bd7e1326229223d118ae3
SHA512 3bb6c890e3d189718898d6d9de2f4bdebe26c89ca0ba5549308644cc59ce010951894621874cbdb2ef0efb3a8330ee2a7d6edff255eba0af2385112cebcce658
SSDEEP 768:Xjq3SEFR9qW9+gJ4ryox192kydOUXFOJ6N4kyWBE:XESERVq/2kyHCkxE
TLSH
T128F2E6066D43DEF3052673508DD95039EF28416B97A86094B88FF3B80B21B295E76EDF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

theme.cfg

Path C:\NVIDIA\NVAPP2\NVI2\theme.cfg
Size 13KB
SHA256 1145bf9e21b232dd046d1b27916ecb4fec12e4a24cc005d78dd2ee7543f31458
MD5 e2dfa5de3b39c6bad59888968f1764a0
SHA1 c52cb5501999b7fc85641742718183d7cc4c916c
SHA512 3016b07dc265b8e4334f6c1cea131f9ad0e197d1f4cb0c102b848d0ef3ed7d3d49f12a3f746dac76457b9922bca8274549169ecf8f5e32d05417088304bba598
SSDEEP 384:6lzIzorfZrYO4gm3cJrrLZr97pJrpb1r5R3ZjJHRdnZpHR7p:6lzI2Rjf
TLSH
T1E8523951249ADF616EE14673AEF73414980CA0F3D67869DAF8CD3396CB7361802B3617
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DriverUpdateRecommendation.json

Path C:\NVIDIA\NVAPP2\NvApp\CEF\config\DriverUpdateRecommendation.json
Size 87B
SHA256 b5b12e4b06e3f99b9cd8b1b64fca5b6faf2e35293885198785ec5e22ff7871ac
MD5 8d488b694933b802eb2e100f11714ac5
SHA1 0744fc44fd796a734dadc7ee385115afd4959f16
SHA512 413b3467dc84d069094bfcf11fae7df9617025b3c508dd49901ab01851be4e90182949dd3f73ca35b5b8bcfb4a45226044b6c18726b678e0888edbf7c54d5075
TLSH
T1CFB00194A8B258CA78DC1ADA406D2A8F6DC64417ABA419A4202B1997463EB690226D62
MD5 SHA1 SHA512 TLSH

Submit Download

EULA.txt

Path C:\NVIDIA\NVAPP2\NvApp\EULA.txt
Size 22KB
SHA256 073e4e717ece44b61e22456d724d33dbd2552640dde8c6902835e3d2f03fef08
MD5 46fd11b1a836d091869da4f1d2aac86f
SHA1 cb6c91a9fcf261ccd3e1f5c98067933cff9b2dfe
SHA512 10c53abb829f2084c89a7dfe772fe80346ea363d68397ebe30f467be8f90a02abcda9eee0337ea1a55c1cdf0893e7355d8201fbdebeec29416fe4d22260d3348
SSDEEP 384:E5KZ3MxHkQk8cw2Vhjf+6u4sucUcAHs/dXBlMXe/orFlU/:E5a0Hk0crVhr+O/cAk3MAorK
TLSH
T1CBA2A5BBA34923360AC601E13B4A99D2F73FC03D36AF545064A9815D2726E79433BBD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FunctionalConsent_en-US.txt

Path C:\NVIDIA\NVAPP2\NvApp\FunctionalConsent_en-US.txt
Size 696B
SHA256 ce130056f99a0ae7c572c83197ede96a688b0bfa4f04531db12a023caeb6d8cb
MD5 1d61fb490dc284eda3135b966a9cd046
SHA1 72c8973a11c5a7835716b4449e06f246e765e7a1
SHA512 0647f30c692d69bd951200bb2556e312f1bf898ebca26213d7e48127f49734776bb1e4f51df16d4e3a0c0d95ba44f321ea61346f7208f1f40773a5db937b5bcc
TLSH
T1E301F49FB70904CA169311BAEAD559D17963DA4C227E1C782875400C13803A5E36F7C4
MD5 SHA1 SHA512 TLSH

Submit Download

PrivacyPolicy_en-US.htm

Path C:\NVIDIA\NVAPP2\NvApp\PrivacyPolicy\PrivacyPolicy_en-US.htm
Size 164KB
SHA256 707aa636d174b7d4056baabc134b073d0b792ac1bec447559e3c323afdc68429
MD5 c5828bae57eceb2b67d4e02baad1b553
SHA1 baf245981722964d2cd560e9e95b5b56e636f490
SHA512 22ce68b01a7287b0d77ce329c3727c4ec46b8fa3d0805c3e785b5034bdeff2af3c4efeaf1afc3725ff7c952d39fc5c633e4552942003636f6ea47c6dc1d693e8
SSDEEP 3072:i4J+03jL5TCOauTwDhFdnCVQNLa98HrtfL:I0zEOQR+iLa98Hrx
TLSH
T1B1F32CE5F2C13112527720F8A2BB9A07F6B9D05BB20D48A0B59C85D63F74E59A233F5C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PrivacyPolicy_pt-BR.htm

Path C:\NVIDIA\NVAPP2\NvApp\PrivacyPolicy\PrivacyPolicy_pt-BR.htm
Size 164KB
SHA256 b1b5e429046a19988fcd84296ef6cb92bcb8f1d1e09193a51a9a2bfa133c8e6b
MD5 3e7b3e08433904539b279bb4dabb155a
SHA1 ac85c924dc03881895a7874f5f374705c9c15495
SHA512 cca771c8a2957ee802a2c7d6b8a93b9a28a0e7aceff2e34e50a9287e1f8f0a79d24f79bb48a458e6f6772c6132645eedc08582191fa5855df0480c9fe6d0ee8f
SSDEEP 3072:C4J+03jL5TCOauTwDhFdnCVQNLa98Hr44HjzkfO:o0zEOQR+iLa98Hr4kjH
TLSH
T1C0F34BE4B5C23522523721E8A3AB9607F5B9D05BF20D89A0F6AD49E23FB4D449173F1C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NvApp_upgrade_text_0409.txt

Path C:\NVIDIA\NVAPP2\NvApp\UpgradeConsent\NvApp_upgrade_text_0409.txt
Size 424B
SHA256 7a41d85d870b325cf04ca63e3130db123e96f0eea7c3bb7cb169b9723527a4e3
MD5 a53876b1b76145c056e8db140b16e1c9
SHA1 2e2f3e74f7773ad24776cc15ec7109973766c42e
SHA512 c75806502c58eef4ee95e18fa3e92ad83edc00f1629d35845d11a5112c6320c48c011f895682cf6045e16cd0719cbf167eac544fa30eb950c16b747f5f406ccb
TLSH
T19FE023075E2902A976A003497783DE8CC146C54423CF060C31A509F433DA63C23BF2D8
MD5 SHA1 SHA512 TLSH

Submit Download

3rdpartylicenses.txt

Path C:\NVIDIA\NVAPP2\NvApp\osc\3rdpartylicenses.txt
Size 214KB
SHA256 48f41d81f67365a3de64df4c2ac70c8efba1f1bce82af5b3cadfd7df7697d43f
MD5 92c045ba99aaf5a4b241fa39cb305f31
SHA1 c9fd6c9f52cd57b4b301dc8bc390d26f5f7440cd
SHA512 e636473a284f8efa3e1173b9fdebc9886c25ffb3c2dfa7146d21d30523599b8dda1e97a48a7c45eefd9faef761a27f7b05c11e1ad84e07eef8553d400f77f768
SSDEEP 6144:4lBRgRWRbRSR9R8RyR3R8RkRkWWcEygykRl9cW297k:4lBRgRWRbRSR9R8RyR3R8RkRkWLsRc7q
TLSH
T12B24A62FB74803770AC20262BB9764CBF21E903F3B562654345CD1681F6B97983FB699
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Deselect_All_24.9c60743cf04d1b72.svg

Path C:\NVIDIA\NVAPP2\NvApp\osc\Deselect_All_24.9c60743cf04d1b72.svg
Size 919B
SHA256 467b6663f2ea2efc0b6f74a5814adbf1018ef141d0a16bd76ad260b15d63fc9e
MD5 36b83542342fc9f93475c6c1c80e9145
SHA1 e1fb872dc57a121ce830dc391458849d0e0c7c3c
SHA512 b15bf44cbe2959e423ef088a421787e4b2f64dfb812065b2f395e5013a25e44ba36911b098f179caa41f08e95134ed58bb3ca76c0d53395017adadce7bd0a36d
TLSH
T1011199A8920CB6C05D44E3B8E73E6BA8B23712F92F6C4E1D23512614380C99A0EDE5D8
MD5 SHA1 SHA512 TLSH

Submit Download

MaterialIcons-Regular.196fa4a92dd6fa73.ttf

Path C:\NVIDIA\NVAPP2\NvApp\osc\MaterialIcons-Regular.196fa4a92dd6fa73.ttf
Size 125KB
SHA256 b7f4a3ab562048f28dd1fa691601bc43363a61d0f876d16d8316c52e4f32d696
MD5 a37b0c01c0baf1888ca812cc0508f6e2
SHA1 fc05de31234e0090f7ddc28ce1b23af4026cb1da
SHA512 cd8784a162ed428ca5a76e5e877349d50620773e3a3d202d5199fefb5d69a9b87b92c5de9455dc3c373fefb065f06a18f17199a5601887fc1f880d14bd223769
SSDEEP 3072:ac3JgwiEle0epMYEZpzha3lEa4rS+hd/R7:ac3Q0zwVEPhD
TLSH
T1B6C3D853B3AE49B6C6829F3D5433D277C04D14037BB3224B854EF5AA99DA48ECD74A1C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MaterialIcons-Regular.1e50f5c2ffa6aba4.eot

Path C:\NVIDIA\NVAPP2\NvApp\osc\MaterialIcons-Regular.1e50f5c2ffa6aba4.eot
Size 139KB
SHA256 8c998b4a9c0acbb9fe5dd572c206a5a33fdd5ca2b58db87fc3b893beac85068d
MD5 e79bfd88537def476913f3ed52f4f4b3
SHA1 26fb8cecb5512223277b4d290a24492a0f09ede1
SHA512 5022976817b89349a71e0438b573f53dc5b743acc865163102d6d657cc3fbeffdefb91be057116eb67f82215efde2ed5c31ebccc6a9061a713e104a64e0f192e
SSDEEP 3072:8artJlFMmo1vCa2MNgv0dANZcZU1OZXd/Rm:8ahJlcNU2Zu
TLSH
T154E30957B3AF4976C5C39B7E583382B7C15D04037BB3324B894DB49A56DA4CECAA4A0C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MaterialIcons-Regular.7ea2023eeca07427.woff2

Path C:\NVIDIA\NVAPP2\NvApp\osc\MaterialIcons-Regular.7ea2023eeca07427.woff2
Size 43KB
SHA256 a87d66c91b2e7dc5530aef76c03bd6a3d25ea5826110bf4803b561b811cc8726
MD5 570eb83859dc23dd0eec423a49e147fe
SHA1 09963592e8c953cc7e14e3fb0a5b05d5042e8435
SHA512 baa17185bedd1f04b138a1de3741b7a6052a02c1d4848d5359ae3ecc80061c54df63374684571bb50b1392af4458f1df7a5df634716fd5fb269ec7f63f3f65d1
SSDEEP 768:O89JwtxcrQZ3QokCTF/wNDItCKrXnQRSC88gWR29D32ashbOfe5rFZwvhy8k03Xm:O8nQRHkGF/w6trX5ZWRQXcVFZwo8kkm
TLSH
T13513F1259C805118E855BFDE827FF162F2A3FB8705C16D120BBB4D696A4822B58376D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MaterialIcons-Regular.db852539204b1a34.woff

Path C:\NVIDIA\NVAPP2\NvApp\osc\MaterialIcons-Regular.db852539204b1a34.woff
Size 56KB
SHA256 c4a1baec300d09e03a8380b85918267ee80faae8e00c6c56b48e2e74b1d9b38d
MD5 012cf6a10129e2275d79d6adac7f3b02
SHA1 c6c953c2ccb2ca9abb21db8dbf473b5a435f0082
SHA512 0ab5e18ee3972fcd599ead183d81cd38d8c559a5e87ca86eebcb6a2cfae2078a27495e3b5824aac6ebddc08f57d594b2cf692813134a1e002b28505eb7c34172
SSDEEP 1536:P9yja4UYomqS8baDYbAa21lgFehL6aP7onO2Vu:lyHBUbaza21l9hhPcXE
TLSH
T1194301422D6906A1DEBDE933E3C01B8A7A7BFC5B43E148C7B93E1E4149A41651CCC3A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NVIDIASans_W_Bd.5aafff8b08f9a971.woff2

Path C:\NVIDIA\NVAPP2\NvApp\osc\NVIDIASans_W_Bd.5aafff8b08f9a971.woff2
Size 27KB
SHA256 831ddf9c812c746dcf875070744c55435df2089d75a8e236ad96d161c70b1aba
MD5 3f0bf27b7cb915fa24715ee2bf5f136e
SHA1 94196847705e2be71afc1ffe704cb8e3a5da78ca
SHA512 534e9db348361f4573470038aa48e82a5da99749c305ef4debd52dfe8a05b03c45059b44af27f59b5a16d6fcc9f09ebe8c966de2c9346d5531fca1f5c5b4ad1a
SSDEEP 768:on+IXPXfQm8TD5fXyShtAZdzxqw4iy+dFSx:S/o5D5zrUqwny+dFO
TLSH
T108D2E163E0F57FEACFA6097A3BA36B401281EB0F925BDD175F97A9A341425B40131C72
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NVIDIASans_W_Md.14ea224b997bf6e0.woff2

Path C:\NVIDIA\NVAPP2\NvApp\osc\NVIDIASans_W_Md.14ea224b997bf6e0.woff2
Size 28KB
SHA256 a90918b3889b1fb0016b598c88fc5fa12766f7b6f36e30fb17376cf7ed654690
MD5 7076cf63098b62ea9cb5589caf581107
SHA1 fd99ab8983d0f61402dd123217bf841b07d0b8cb
SHA512 614b18db85fe53709219bd6f99131ca4ee8b2bc37d84ed11b209e6e7f2811e3ebea45c5d1b929d52b8180938aa9c0bd38e0ee792787f013f65ac7b78ad050ab6
SSDEEP 768:x0clZeQgGp8fUmkRSo/neOC/8Cw/E4TOoj:x0cl1+fEStO1Cw/E4T1
TLSH
T1CFD2E11E4A63882694F7C6B4156C12B4494DE2F6F845A6EE2835FC795BB773F80E0B03
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NVIDIASans_W_Rg.33fb51adcc625f4e.woff2

Path C:\NVIDIA\NVAPP2\NvApp\osc\NVIDIASans_W_Rg.33fb51adcc625f4e.woff2
Size 28KB
SHA256 0aef4914785160f74a122c6168793f8726da725cc6f80947418bacd064f33b98
MD5 6ada063defe18142a62c974db9bffa40
SHA1 b2e13178d7b164aab959547bda65300867d02a5e
SHA512 32539925ea58a8a8db226d0a78a599927c764556e984e13c7798afbfb8ad239abb7d0e7788f5a37dec82d8b9c06acbb114efa228c6fafb9d127cba5b4225a94c
SSDEEP 384:/XC8KZU4tKh+YGdak5dTFMLyODn8WbAt0tNJb2PY9HWVBA0uYfff10paes1rGWh6:/XC/Za+YPTg+3KAK/uwD1r3eJX
TLSH
T118D2F1A2399BCEC9DC618A90CCED62B54C2B58192872145F51072F0425DCFEDA07E9CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Select_All_24.5528d1942c3b1881.svg

Path C:\NVIDIA\NVAPP2\NvApp\osc\Select_All_24.5528d1942c3b1881.svg
Size 878B
SHA256 eef05d0e2478631201cdee5f7f10dd92f302db7d004381e95ba2cb6a02bf6a4a
MD5 9e226f86a9bcb12bb5ca0acd6f37dcc1
SHA1 47428372bc2a17f064f7c8472ea172f1aafbaf25
SHA512 793082d25e5265a5dfc79bada4d6b7f163e4cc454dc4b4ae7a86370bf4a7212f4ce3d8daa86743b7d2557c242f03261137a7df2f96e42ed19324acf2eecc8bbc
TLSH
T1CD1159A8860DB7C08A04C775A73D6AE9B32606E55FBC0D5D236126153C089591D6E2D8
MD5 SHA1 SHA512 TLSH

Submit Download

ootb-grd-driver-experience.ae47d97afbef711e.jpg

Path C:\NVIDIA\NVAPP2\NvApp\www\assets\hashed\ootb-grd-driver-experience.ae47d97afbef711e.jpg
Size 271KB
SHA256 8cd8ddc3809ed790f1b472864158dbdaea5dffa7fe401c7867ed74dce7f78111
MD5 12ae4e2b15bf63bdd0bee0e566406d4e
SHA1 3984b061c0aed82143e77c9762bb34de83fc46d4
SHA512 4deaacf986ac69d2f19679c409e9094acb731097fc1a47bf8d0ebdf230a262c2ea2f67460964d26bed09def73a023d834c2d33f1af8f87002834e743ceb8037b
SSDEEP 6144:w3a4eyVdiNAM1RSzC7BS2eGCH6u9nqe2OPLja2EwSQivKFV3yu/b6H:s3elNVRZ7P3QqeNjwwSQi89q
TLSH
T1E64413D3F3B6C6447421B32C5C1D085C2A791EF71079E5067C4DACE6DBEAA2BE44A289
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ootb-grd-ops-experience.98c0923bd68cfd11.jpg

Path C:\NVIDIA\NVAPP2\NvApp\www\assets\hashed\ootb-grd-ops-experience.98c0923bd68cfd11.jpg
Size 208KB
SHA256 b752cb3f8923920a8ea76e3094792a56d4e60bc2fe26a96c06ab07835ce44b64
MD5 7e3f662f6749edc71b6da17467a435de
SHA1 40e7745cc9fe8739fd40b3181ebc17d2ba60336d
SHA512 5102e82c85015cf02f6d9622b972daf2a1ba0ccfe57d1db0c6d66549f78199c2e102585e737d0794d02b905d0488c8769c598da0fc5d30c15d7f66aec7903c21
SSDEEP 6144:XScd+ID7Of1nvFCAu4LRvPs0KKH32hEgoAe:XNDD4nv4p4ZPrZHM0d
TLSH
T1E42412A7F4BA67E20171062C4C9DB62C61F8A4F0D0B5CEA0716D9CD3EFDC0A726E9165
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ootb-grd-overlay-experience.a712d389f2f636aa.webp

Path C:\NVIDIA\NVAPP2\NvApp\www\assets\hashed\ootb-grd-overlay-experience.a712d389f2f636aa.webp
Size 861KB
SHA256 02ebc8977708e2e7b7d7a041edeef0b9f6172d3e06260f83e6800408d405e84a
MD5 51739d132dbcb4c0ef9bd97248236493
SHA1 ee6ae1fea4db333e68154e4772f347a928d792da
SHA512 dde9cf6fa3d098a5a72d2f3260d64d9232ccbc7ef93632e7741ab93971018bb0accc43ccdacd439fb4b1318389cff050852da6afdcf7f678b509d09fac98dc09
SSDEEP 24576:cleGu4kDuLaDyVUIVzyMYA84YfBoKg8HyxH:jGulLDyVzVzyMYA84Yfjg8E
TLSH
T1C6153331A97EE5784102E8E3797315E07487D2641E9F671F66512D2BA4B80B6CE032EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ootb-grd-rewards-experience.d08599b6dfba97ba.webp

Path C:\NVIDIA\NVAPP2\NvApp\www\assets\hashed\ootb-grd-rewards-experience.d08599b6dfba97ba.webp
Size 477KB
SHA256 9bd80a21972d61ced733234b49983d791086a03771fb1ec87cd0ac2ee98c2be5
MD5 40d63993a43dd09faaa8be5acddb874d
SHA1 f300f341b9937d1a3744e90cb97e7b839f745541
SHA512 2c41197dbe99d30a6798a4122ce83a47bdaa1c1f9b8b57b134272c623c0bfb33755c28ad06d3aaa2e132c74c6c01d7d3ec20cf141b656d5f6415c2612c224ac1
SSDEEP 12288:/rzhN2UjhcKMxHaDuksZ/O/8wXuk8uruxTYChQwCvd336rSL:/yU2Ko6DcZaPXu8uxTRCQSL
TLSH
T14DA4237EE3652D8C74E011CA4B52C7C6EE9C4BF05498E9A6F2750E410229EDDBCD6B31
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ootb-nsd-driver-experience.d8406fe99b7df33f.webp

Path C:\NVIDIA\NVAPP2\NvApp\www\assets\hashed\ootb-nsd-driver-experience.d8406fe99b7df33f.webp
Size 581KB
SHA256 cfd45010afd331d8c75d976a542b7a62657c1bd73c08de830326e9dc2c1f6081
MD5 de7a1877fd107980a816a1992d526461
SHA1 169ccb6208d3a2408fd24963871f85e8005348e3
SHA512 7fb833cd3da9e91eebc4ab485f283d3527a5f2e3986bc234f83a9893c850e01fe51aabe9e0ce468011bcde14889e397b1ebc2fbf9b8641a650c0aa30fa63ae8f
SSDEEP 12288:p5BMoCKbjhPN+ENxWzy5uXFj0tDreTKgw9G6LhnTZEKvxLkDrkLvH2VVRzMuMJNw:p9fhUEN0y5a0y2e0TZEKvG/kzWV/p0Nw
TLSH
T1BAC433E665F02FA016E8F433004392A8356B695A29A60C3DBF0B7797DF3F42CD654627
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ootb-nsd-ops-experience.649207328eda51ff.webp

Path C:\NVIDIA\NVAPP2\NvApp\www\assets\hashed\ootb-nsd-ops-experience.649207328eda51ff.webp
Size 226KB
SHA256 64ea849c90d263aa32d001f67955cbfa6a1f40a0540f7847fe7c2537638f969a
MD5 ab55045f5cf274801a465320c9ba5df8
SHA1 b3923c1052fe219a5745c4ccc67141c2b1378bf2
SHA512 a5d25c3b0f71475d3294ff1220c35d2d423cf0bfe8abe539fe862baf111791494ca5931ba7e453e1d2bee331d40b016af97bb246418d5166e34cdd0746517caf
SSDEEP 3072:HAm2sWxtt9bneXqeacFiYPxXX4xdNOUwGDnb3wu37qd593KL3LpDbvMjGPq0m4c8:g+4tXneGcF8dzH3w+yAFDrMqyr41TtKY
TLSH
T142342360B53E50CFCA47DABD1E1500CDB5A5777682CEA80EA449D5FCE63A96CC3EC940
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ootb-nsd-overlay-experience.143ab5b607f0db65.webp

Path C:\NVIDIA\NVAPP2\NvApp\www\assets\hashed\ootb-nsd-overlay-experience.143ab5b607f0db65.webp
Size 688KB
SHA256 18062827212f79445ec051e5bee95b2654b5bd3522a9ec2b6bd1695bc09dcf21
MD5 8e68c14a06b7f50d275d6f573df8d7af
SHA1 7b5ae8a1f7bc669a44e3d4159ca963e5ec4edd62
SHA512 a7f1d5bc7d5052e41e94bd3876f5ebb450a20430994ccbb1e6366df5a7eaed800678315fbc45fbefe81f68046ad87917bf53c1f898bd1f736055e9ce7722caf5
SSDEEP 12288:lWBkDIDYerbTM3zV6aF/oT/YNDkz3l4QY9R3Xk8lQrCYeemGtxfxfxiZ1L:lWxDYebcV6aF/oT/Y+J4Q6k8lQrCbe3w
TLSH
T19CE42389DF507ECC6394A521E7ED41E9AEC69427044C82C0E0686DBFBE5EDC0DB47B86
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ootb-nsd-rewards-experience.dc6251a422b0d9bb.webp

Path C:\NVIDIA\NVAPP2\NvApp\www\assets\hashed\ootb-nsd-rewards-experience.dc6251a422b0d9bb.webp
Size 531KB
SHA256 fa004a1748eb5cb8a298f0ecc4f23c71da230681cd4c016bfb7d3c59d920faf9
MD5 f9239075935554aed2e6e3eb46d5ceb5
SHA1 becaf5f9f5e793ae57f0bf4f11a0b17a7f03f9c7
SHA512 2da44a969f6a8e85a61a05f38c5e9d32923d29e768e317aa4e084117d3b296721ab8e8d6fb49696c857a1fa18f3b655b619a6fe05261ad04d0b9ab52a4ca2693
SSDEEP 12288:ZtdjK1GYNMxHpK+WMhQ9yXoPB3CzrvBjG:bd4NMxJ0MK9yXwByzzw
TLSH
T1B2C423C9F8CDC62A185B22FB00BD3CE8DA67A072DF20E52B3299D850A5D794F4D91725
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ootb-nwd-driver-experience.5039068ad925bc01.webp

Path C:\NVIDIA\NVAPP2\NvApp\www\assets\hashed\ootb-nwd-driver-experience.5039068ad925bc01.webp
Size 511KB
SHA256 298804f9b483f6af329c32a6274446112333575c4456987b2ae2cce48e25aea2
MD5 831131c1c2630e75352caad9b23d21f4
SHA1 5cf278abbb2f465fbd271fdb4c982c4c38764555
SHA512 8722ea80c05b267dbae935de9762964d5dd685b7b7c6db96270dd1914c131beb4a42dcacae42b9eda9ca2ec704c176018e062e40ca7226ff315bfe05910a58e4
SSDEEP 12288:rNdalYw25MPqTambykue2tg0AyiuwnZh9zEavSZey:rTJqqTam92tgRypwnjVEmKey
TLSH
T1CAB423E1DA17E210683EED15A353E8CCF328487EE7B87A84952671DE811254DD30EE9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ootb-nwd-ops-experience.5cd200c7395eae61.webp

Path C:\NVIDIA\NVAPP2\NvApp\www\assets\hashed\ootb-nwd-ops-experience.5cd200c7395eae61.webp
Size 427KB
SHA256 1546f26719742d4d1d45360ba1e29bfdb257ad29f10800660f96b3d6a6daabfe
MD5 d9118b90294f8fcae61ae0090495797c
SHA1 5fc9c77a1a5ff52e03bbaf03bb895298e58b606f
SHA512 2961165b5d223fcc7c47d625e3c6bfa334cc72d400202a8333aab2e88e406a3c82bacfbb02063e0b6daf93267c6724272ae1ef0c8bc2dbff6b4b96f2221f2a63
SSDEEP 6144:Pz7+KSUIvmRKhkLmUDZp9Xh0vtw+7swRkv2AbU40WoVIVs8XgsA/u37kkxmEJkCn:b7hbSYmUt7itwKLk3bAWo+sKdAFCn
TLSH
T104942330757A18D6FA6C51B1B57D7608D9A30CC3C181045BA7BDBD089A5778E0E8BF1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ootb-nwd-overlay-experience.c38db2b6d23a19d1.webp

Path C:\NVIDIA\NVAPP2\NvApp\www\assets\hashed\ootb-nwd-overlay-experience.c38db2b6d23a19d1.webp
Size 643KB
SHA256 328ca68e6c08114eeae2c00c936951d246419e4ed368b1c53cc9114fb171484d
MD5 a97aa44e9a8ffe660c70ed871b62cffd
SHA1 e9e1b74d990d690137f814d120399d3002a0f250
SHA512 49571852f334e05de115be603760614b105b7ac3291fc951e94319855701547ec957686512fd7c732c358febcc03b76560d85ea8475dcd315b9503b539e4ac51
SSDEEP 12288:KFUiipM0i7Z3xhWe7S3MA++FycfUjPCDxHFauvUf9vHHEB//XNQdfYTQb4J1XRx:Kapni1BhWe7HIGPSGd1f6XNQhYcbMf
TLSH
T197E423F14124D8B0F5407E0A7485CA3CA32A7A87DB7B5E5208B82756C64FD7BE634B39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Marquee_Hero_Image_Gradient.svg

Path C:\NVIDIA\NVAPP2\NvApp\www\assets\img\Marquee_Hero_Image_Gradient.svg
Size 68KB
SHA256 ccf2b77b27e7f5a297f14e2643131686a1f48bc52c1127baa447f3527408466c
MD5 3f03b5fa3d228e924ff4ac0a034c0669
SHA1 ecc1f84198f79323e2d91fd4fe1842468074eefb
SHA512 c34c0db11b355e1bb82f4c766a074f0fd010849817c440a2194292c764a0f21648c288f1c89b25c9ad6230259f4d071c09c27d1bf98de0dd0a6b2f92866b310c
SSDEEP 1536:WfuTw+NwB+Nm/j9CzX7oqACfMWUlfAjHnZ8zQdnHvU:hTwm18IzX7/nZnHvU
TLSH
T18863CE33038F6A9BBB235C92C42077200EB5B9E79764E6C97DD558A286BF340CC18D79
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Marquee_Hero_Image_Gradient_RTL.svg

Path C:\NVIDIA\NVAPP2\NvApp\www\assets\img\Marquee_Hero_Image_Gradient_RTL.svg
Size 68KB
SHA256 2c83cfbe96ec803325d6a0ebd62f23ecf44cedf6ecf70e405ecf4152a3f6d1cb
MD5 27da811419713779cc4465014484bdb5
SHA1 019f8834f8ac75cd0b8c161c18c1bc6ba671e5d9
SHA512 cb9b4cd6d19c39ff178a2044d00fdad9989218cf13ae7624a83ad082900dfeafd7d45e4e9ea79dd0e39c42afac4b1c8a738a131f4b3f7d6c6922b023abb53121
SSDEEP 1536:mfuTw+NwB+Nm/j9CzX7oqACfMWUlfAjHnZ8zQdnHv/:RTwm18IzX7/nZnHv/
TLSH
T1CC63CE33038F6A9BBB235C92C42077200EB5B9E79764E6C97DD558A286BF340CC18D79
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mobile_marquee_hero_mask_ltr.webp

Path C:\NVIDIA\NVAPP2\NvApp\www\assets\img\mobile_marquee_hero_mask_ltr.webp
Size 43KB
SHA256 69cc5690bdcb4a8cd8e05a44f429899f7a36b098e80e4315d83049f7e17acafe
MD5 1fc534c4904958ac5cebd68166f86f6f
SHA1 d3b9b610948e2b47734fa3789c675657c5fa5320
SHA512 a330b6c320d042fee165dd05ae51f938ee2ac7aa41c3e504345b0600405d307c85fa277d7131e4c308541e63d97d44f2acc2ddc8c9f1c5affb3474f1cce82702
SSDEEP 768:sYy0VoQEM+fSAE4+MgE9MSaGDkNA00SgkM72mKWg6803V9Criyb5jDXw9fzqfC:sQBEM+qjPXSa8k+NMcvZ8qGj5AfzkC
TLSH
T15013F1FACF8742F6D503C5BB03B0E706D923C29E53EC8984696D37B65E2A7452D8E045
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mobile_marquee_hero_mask_rtl.webp

Path C:\NVIDIA\NVAPP2\NvApp\www\assets\img\mobile_marquee_hero_mask_rtl.webp
Size 42KB
SHA256 1428f5b98ee6f731d7c915d3eb3a47408a0bd32bb921d7c15e100cc690c3f4e8
MD5 b7fe274b0bba13d81ffa004bc449cc22
SHA1 3532ae94a13835f888cc8755aa87619bcc8284fc
SHA512 42f24271c9fe3f39214e252bbe3b3528560f301522dc9dd96fefed6918e8e5776fc4d248218cddb528c620156505da68844d798a15883b396f025b5e48c62d4a
SSDEEP 768:LYy+k1TNh+g48lZT8iG4FCf7WUuw5MjTywaM1Cly0Ri/vyAk/A7P9au9xdP:Lqk1ns8lZT8h4FQuwejTyNCL0Ri1k/hm
TLSH
T13213F1FB84D9FA43CED393BC3AF46E6DA1527A66B36597841AC1A231245D48B3C5C00E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

setup.CFG

Path C:\NVIDIA\NVAPP2\setup.CFG
Size 46KB
SHA256 9d4bcf9df40e6fc4aa0fb7d6d64ee9578bd2c65cb5b343b8a1be523afb0b3f32
MD5 f086bb78756a89bb616e1f6f45032370
SHA1 574baf38845b84739b02616c88db5ad7f71396a4
SHA512 fcbbc2101122498b089a48595e0469e6a143b76abaaa4d2b25856dc8ed9cb18a9d8360cb0771d2e394238cfd443d039075c593c5893dd5be6260585fbaa21d30
SSDEEP 768:PqhJ97BjSVDckzratJAZvJpJ3X6A95952H:Pakzrat+pbI
TLSH
T1FF23E86A748DFF254F500F779EB53815204FED71A22C31FA90EE32B7A2E39282572591
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

setup.exe

Path C:\NVIDIA\NVAPP2\setup.exe
Size 637KB
SHA256 c17f3d77c86883c672a36fb4b099e76818a99e9748ae1c3444f7ef6fac7d1102
MD5 ce4ced0dd207537ba477ba8083434eb4
SHA1 11da3c5bc11661ebff2e2630387f325c479e4e4c
SHA512 736bc610ad7958d9292fff4281f20faa6a280e205ea51513e98e18c3010b4d53fb1fc76bdd8713cd0e5a4af61e256b4af73292b56a435e4c177bde80fc093aa9
SSDEEP 12288:zWgv9fTDlpi7nYDBdz2i95FGsNeFm42fRH/J+PhyKyVkKB0Hazq6evtsYV:zwnYDBdiixe5QH+Ij4aq6evts2
TLSH
T142D47C207AE5C43AF5B357306EBEDAAA042DBE640F3584EB77C4492D29705C25A71B33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.setup.exe.log

Path C:\ProgramData\NVIDIA Corporation\NVIDIA App\Installer\Logs\LOG.setup.exe.log
Size 250KB
SHA256 0f6c01015fbde03b03ff21a613fddcbe1e7a0c7868c5c3aed44a83dcb125be6c
MD5 b92dad0cc03a7831d908e7c3d5efdc18
SHA1 1704bfb91c7675da6314a009e094a2c4fbcd0b76
SHA512 179d39bbe9145918a3c3f047da88f7575fa572e3673e93e7735a7f7af341c6a5c249a0441f46d22e8d0380d6dba71506aff06d6d40084217831b2013741d6e0d
SSDEEP 768:SLhLAINjvXJS3pNGfUPG3uZFV9MER70HC7eH66BsBtyVr102ATo7PBIKnpg+G3cN:SLhLAINjhS3pocj+88fL
TLSH
T16E4440C369688361E1B9895FB7469537FD3CAC1362410129327DF68A5FF52400ABF3EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 168B
SHA256 ed637fc1e608c61ae3aececf7929c8c7eacc4f603489f9d7dabc18755790b4da
MD5 37932a877aba5f53cc7c3536efd34a0e
SHA1 a941201b79db685884c55529ddd10cfe057a5712
SHA512 b7e5c542239c64e49d16fbe9ecb1038c5c1632667c693f979fec741efbd163b96edffa4dfa5e7fa65e84b8f4ae20265044e0df0b593266f338d1ca1b0d5f477c
TLSH
T194C04C943EE0C0DACF851979B56509E0E11464D416941F43E595444694FF1D76408751
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 447ca1aa0ce54305a8497f2e114368ac081374958a6ee759b9995ee932e6eda5
MD5 93b689f8868ec949cf9c48d3d2572c88
SHA1 7c3ff5a17dc38b4cee5ab321c3ff2e01633fbf73
SHA512 73a4073e58884ea65ad58664b19838ef0c15c3520c15c5de4836816856eb4d9aead99a803552d88c1f6dbdcea22d6402545eb814c31f673565a940404ed47a1f
TLSH
T190419B5CBC90E0C1DF248DBEB6D38DD479323984259E2BE75121562861FF7B3114B798
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 d923fd3ee54c5d3e8d1afeae96f1f1817668fc87ce1dea3b4d3a7b7fb98b25d6
MD5 bc61eaf866d2b7d8f4d56f4814e9837f
SHA1 c6f66117d9062345921749c2059d51a82b20d7b2
SHA512 918a750fdb214f3522d9383d150f97e96a339318992b56855c613f0a811431e6cdb4f1e9689d46bb244613e2b1ad6e3ff47779a4c2ae2a6bf4130df11edee5bc
SSDEEP 192:DvlvLMTAQefN1VEbhf+KWMNSFGhae49N//GXZyhyZAqBGV+B2JdxZoPasRcooBf8:DvlvLMTAQefN1VEbhf+KWMNSFGhae492
TLSH
T1693235F743B1C92DCE1195F4AA14AE1FCF581A28431D38368AD0BE16D3B6562F14279F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 599de21f1e3aef580e8ccecfeffdf27b7780a31b01570aa436b0b403caacfdee
MD5 5b97643a7a64aec48c81eb421f322fdf
SHA1 e95f9e1c612037358f2a6b86cd5dd033e54a8317
SHA512 dc06fc06cc569118402c4394dd91769a9a31e250cb42818086829118d3ba651014d61461bea3e750c340cd34c61bbbeaf29317b10b576d51c8d2abba4fb86e90
SSDEEP 192:DRrrt1f+KWMLSFGhae49N//GfXZyhyBZx6qBGVN9BBPhlAv21dxqZ9HPasfzj3zT:DRrrt1f+KWMLSFGhae49N//GfXZyhyBN
TLSH
T1A22248F783E5C92DCE1195F8AB14AE1BCE180A18431D383689D4BE1BD3F6462E14279F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 0e102a958e8c445ba1519f7336d150e3c8b8e2252548fb4058d356e9691ebba2
MD5 ae7a425789c51138ad45ff36eaaf13f2
SHA1 e4cf42dc7288edc9b5534c882ee535ef0343b843
SHA512 c94f069b7a6c4860f1771434e53c3e652adad514d3f5632f7fd41e2659feb2ea4c1e41101c6552a3b5ad4c61d45bca33c7fb0a6bde5af49e88c3b9181e2984d5
SSDEEP 384:DRrrt1XYK3e32OXwf+KWMLSFGhae49N//GXZyhyZx6qBGV+B21dxZoPasRcooBfC:Xb4MoJCl
TLSH
T10C5269F783E5C92DCE1155F8AA14AE1BCE181A28431D3836C9D4BE17E3E6472E14279F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 13KB
SHA256 3b60cbf1308d17cac1d4e0a60ccbee7a2c0c176b284529a1c92af0ca68aee339
MD5 be32d07cc88be83aac7e0b03af284ee1
SHA1 41d5c53adecedbb76b557a15dd1e9a539fe95bdb
SHA512 292e2697bb3e4e7bec7d6040d8b9249919d2c056194b9c05322ec1b0a70911ca33e2bee11e3be90f29fe0aa245e84162150e19ff3f9d1f5fe2d58371cdcbd63e
SSDEEP 384:Dvmrt1XYK3e32OXMwf+KWMNSFGhae49N//GXZyhyZx6qBGV+B21dxZoPasRcooBl:Pb4MoJCC
TLSH
T1B25258F783E5C92DCE1155F4AA14AE1BCE181A28431D383689D4BE17E3E6472E14279F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 89c4ae2eb1faffcad5512d222eb12ae01a7f294c02fc6f5c4b93e41e77f95889
MD5 a75fb02de42295792e0609655f24ef56
SHA1 83dfc10226f55314eb696dc7b14ca814ae198fae
SHA512 828819210334d0d90a1bfb870e4d63a1f1a61cf91fc34bb642074778a224bbbeb4b15f320bbd2fbe823e1417a2eb2dcea20a87b7876bcff7defe4c0981752878
SSDEEP 192:DvmlvLMTAQefN1VEwf+KWMNSFGhae49N//GXZyhyZAqBGV+B2JdxZoPasRcooBfS:DvmlvLMTAQefN1VEwf+KWMNSFGhae49U
TLSH
T1674236F743B1C92DCE1195F49A14AE1BCF581A28432D38368AD0BE16D3E6462F14279F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 3KB
SHA256 113a7951e5952ec08e4621da6713ba8727fcad40d83d64d0fc99d11169bb80da
MD5 1ab1b7c7b58c59404ece495f67fa296e
SHA1 2e71d8dd5a3876f48777b06bce75265959e3c49a
SHA512 dd69bfc686fe723274450991981a5974a9d576e6b556e62aacce603b0d50ed164212363c9e42cfd86e9e72a4f3540d631fb63f9dc0fd14391fc99c6c35bb2bf8
TLSH
T19A716D63D57FB41B613818AF2E44FD091C79B436818268F8DE9AD2FCF0A58F71B12466
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 1ff79f03229b47bf24e4cd3bff86acb6e37cd1e63a5b8997cc54c1cd2a0288b5
MD5 9d6c1322fb7addcf8f5beab919d9417f
SHA1 b4e3b9b17de2f176ff81cef9377b03f6fda7fbda
SHA512 b075d8ceaf619933819063d464c19720702534a92118e1e7d79c0e7ebf7356415c9e9af627eca35ad2d2c65bf2f708172adadae681a01dc903465353f4caa39e
SSDEEP 192:ZRK7oKuv7uvnPRpfSf99UHsb+WNPjw16pZ3beNRokwF7VVyIsnAUgE:ZRK7BKKHX6lGw0k9eINE
TLSH
T1F942B65EA910697B6DCBD22AF926BB62E7F5102571D02E84E6FCCA1C20E75CC6313417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 d30ae6bcbd54e5bafcd6f9400bb02b7cdcd69a08a65ba5e9620eb703047de41d
MD5 1c63031f116a4faf95e927f34be0b3c0
SHA1 04a195ee3a939e0db8ae3e4705c16fcbe64af7a0
SHA512 2431615dd1186b908057bd5263ed0e08e6f66e62dca4c2624d806ee0280f9e5f479a00005f26c67361c2709c518296fa0ccc56c99a28104a4225f22bb98fade9
SSDEEP 192:ZR1ooKov7uvAPRp2SfT9UHsb+WNn6pZUD2cRokwFiVVyIsnAUgR:ZR1oB0K6XT7GwKi2TmR
TLSH
T13332B66EAA10697B6DCBD22AF9227793E7F5102571D42E84E7FC8A2C10E75DC2313417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 a16f68d803c9d9f2b95710aff5d4b0381c4d23badc2ae88ac0b98f2108fd885b
MD5 2c0b29321dcdbd6637268457b92a2499
SHA1 5572239f5461b2b68a9ab1a6aaa1faa73e15fb23
SHA512 d3c469c3a92bdf73284c2d00634c60a91449251539d8c10ead0f43f2d961b4c50822a4046b336f4f2f96242a29e5e367d71bca3803e84422856f0d3eec43f7c3
SSDEEP 192:ZR12oKUv7uvAPRp2SfT9UHsb+WNn6pZ3beGRokwF1VVyIsnAUgE:ZR12BQK6XT7GwK9elfE
TLSH
T17942C56EAA10697B6DCBD22AF926B753E7F5102171D42E84E6FCCA2C20E75CC6317407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 de6235cd24565a80cd0cc9a6b32bdbbb0e21860e292f6d08e26e85432a394637
MD5 4ae68f64b16043cb8aa3baca5f2b71a4
SHA1 771dd14cd1a7c45774e1ba9f3a46565dee5a9bde
SHA512 e7fac408f0ca82d0aa3a8e68c99bf4c0d3fcc6c31e70128e7fa799dd4c74fd269df26cb3768b82dbc5021e5bee8980d97cf075981a17f2e18b2080be5e2a4ad2
SSDEEP 192:ZR12oKuv7uvAPRp2Sf99UHsb+WNn6pZ3beGRokwF1VVyIsnAUgE:ZR12BKK6XTlGwK9elfE
TLSH
T1B442C56EAA10697B6DCBD22AF926B753E7F5102171D42E84E6FCCA2C20E75CC6317407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 11KB
SHA256 93785f5a55dd4064becb4f1cff2db93ee5c453069390cd1f175b14efbc7c3712
MD5 3f745d2e721c8e8653083d0942fd1e3b
SHA1 65c5deb319ad77fa2904b9e80a68747d89661424
SHA512 1054802f590f58b87fcf7dd07e0c496be092915ce6b1963537363cc344b69aa858c5224a631afcd5370a01ccfdb24fd88e105054f3077d30b55a845f9d252488
SSDEEP 192:etK4K6nP7KxkXqK4I40pUZNCgVLHrKHfFKslEOlbXzKD/0T+ErUkKN9mO5a1AfTH:oKj8P7KxkXqKf/pUZNCgVLH2Hfgslxbg
TLSH
T10132EA67948D9E3B4FD8D518CC176B8B6CB4019673780824A6FF9D0403A67CE114A6BB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\9fb28eacc8cd5eb65e9f9f177e77f1b0cab86165\index.txt
Size 137B
SHA256 72d149419226cb6e9e4a873b7c2e7d9e04fe4e93f6153beee688c039e2d87809
MD5 c9132ce5faa1d439eea9e4e280586dd0
SHA1 0c34f81cef6975eed496fbc8551af5301a6a2406
SHA512 bbdae015ebc0ddeac96a56e76145c6007d8cecea4b016bf8aba6e85c06865ebb5358b95bef20ecd15956acc2d6fcd9120d46016ca13d543a129d6add85eddbb1
TLSH
T1B0C02BF7C244DA011A24CEDA3830C23CD2CF34048D5740BC504412C10B24306C0630E1
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5a5759.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\9fb28eacc8cd5eb65e9f9f177e77f1b0cab86165\index.txt~RFe5a5759.TMP
Size 144B
SHA256 86e2676b04f054b4065a29f6d661b0a7a894a593985e5a0a86e7df7ef5859057
MD5 80327519154198c6942b6c34e5c32203
SHA1 bb679d45f263d688e10b9eb65a41ee6851915315
SHA512 999fd6a8afcc775a286e6882393c6ed9a7d10c15d83bd7541a43a7b218cf2057acaac8c265e2eb5f3d0d24816000bfce4400aaf6eca71a297a77fd1c5c12311b
TLSH
T177C02BF7C255DA011B248DDB3430C62CD6CF3C048ED790BC600532C10B34207C0630E1
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 5KB
SHA256 06413dc461905e3f877c7f2bcc2160a45ea490bcfd0fcc04672b715d73248e4e
MD5 d9efc92885d6a356e63e7559ab6e23e1
SHA1 7536904d3a8f6827ff7e7ea430c17816e46791df
SHA512 0125349dc728c272ab5a5f73f451fa9aaf91b8e6493f713cdba0ab0332e87641b1e7521287a05c01d3a5151f4889de89fd0311c1ed6ad4cbee77c88be6ec7cb0
SSDEEP 96:gC0d+qKJku7fby2f2eaPph/nfSl8h4otop5mItD6B6/XGyvODcyXxwzjQ41maUbB:gC0AJr7fbyVlFiU2RqDFcmxoQ41maUbB
TLSH
T13BC12A72F4796C3759F7A565B5032E43DEA461FBEA40AEA8D6E64F0C00E70EC1342113
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 5KB
SHA256 383fbe98c2d296875c3e3eda27888b23b093cc4769f0e67c85860e784f7e6ae5
MD5 3d4a32ed6e70862d87affa7692911050
SHA1 724c0b4e2f7d657163d6d3f9cb7df86aa2138e25
SHA512 fb8164ee04ec463f1a5fbbee96ce0d47334ba29fe10b77925f68f2e3fcba04df253fbe2d2a307deee47ea166701402daa9039919f4f43ae06a94d6c25528f4e2
SSDEEP 96:CbJ0d+qKJku7fby2f2eaPph/nfSl8h4otop5mItD6B6/XGyvODcyXxwzjQ4t1aU9:Ct0AJr7fbyVlFiU2RqDFcmxoQ4t1aUbB
TLSH
T14EC12A72F8696C7769F7A565B4032E43DEB461BBEA009EA8D6E64F0C00EB0EC1342113
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 5KB
SHA256 f3a4a90d1bba62d4c19ba47d3ac078a3a44b515e3b8547dd555649a1b66613b4
MD5 ac940586d84058e9d2205fb75f2b72b8
SHA1 8d2adc7cc733acabb3e2e954eafba4ff4c712879
SHA512 0787f49c17b5cdb9a06134775cd80a31874d5b4458f5bf08fd93e23d06b088ab4189fbf0bc660210053fc0e8bb4229d73ab2dabc00cb81490153cf62afea4d66
SSDEEP 96:CbJ0d+qKJku7fby2f2eaPph/nfSl8h4otop5mnD6B6/9GGfvODcQTaU/RNC39ISJ:Ct0AJr7fbyVlFiU2QqQvUcQTaU/uCOD
TLSH
T1C2C11A75E86E5C7B4DF3A445B1032D03CEA461ABB955BE68E9EA4F0C00E74EC1343167
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 6KB
SHA256 834b9e2d63af25eb0a9eb50769b087ffd2ed338d67c3ddb1d10b97c3c75f7166
MD5 3fcfe09277653ec8e4b3a71731a89c91
SHA1 352b1fd6bf47997510d64a1c7c8e90817c76f76c
SHA512 5e0e1fa79800a568e284e6b11407f260c0d02ecf4767c6724fc441fa6004a98646320f20a51bc19097e7558ecaaea38fc2419d6aa2feb3d1a8f570cd7b93eca7
SSDEEP 192:Ct0AJr7fbyVlFiU2QqQvUcmxoQ4t8aU/uCO1:CtttMFWQ/mxp4NU/uCO1
TLSH
T12AD12B71E86E5C7B4DF3B445B1032D43CEA861ABBA54BA68E9EA5F0C00E74DD1782123
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 4KB
SHA256 9e95fd5c820a7463a72eefe126dcbd403767b3e89b4b4347d49662ae605891c0
MD5 8d15f3103cd4ec38502d2a5ddf52cafa
SHA1 c945937015049b4228363f1e56b793b726a34d67
SHA512 aead9f0258dcf575eee810761771e1e40be90d567b96a2e2eac9f9f9ccf13252ed89140151fc2203ab1edcb5b4589c6eb1edafbdc095ffec598cab228acba5ec
SSDEEP 96:gC0d+qKJku7fby2f2eaPphrn3RDotok5m3D6B6AGyvODqLU/bjv4a:gC0AJr7fbyVlFDUDQqkFqLU/bH
TLSH
T123A10976F4664C3B5DB7D544B5132E03CFA4A2ABB961ABA4D9DD1F0C00EB0E81742617
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 5KB
SHA256 e2d7629fc0dcc519e61da1059c4a1bc50c3de6c697e9be33e0558d9fa89ec591
MD5 8e84630dd1668ab473f566d3955078ed
SHA1 4f6ef5c971eba17789d9017bc0eb905f8b751e0c
SHA512 4c02cf18f7b0342939f2f79407638a97967203ce35bbeea2daaa48fefd478ce61e4be7c25e7d353183c027660cd3a7b2ca4fa18f2845854597d3f344a530486a
SSDEEP 96:CbJod+qKJku7fby2f2eaPph/nfSl8h4otop5mnD6B6/9GGfvODcQTaU/RNC39ISJ:CtoAJr7fbyVlFiU2QqQvUcQTaU/uCOD
TLSH
T1D0C11A71E46E5C7B5DF3A449B1032D03CEA462ABB955BE68E9EA5F0C00E74EC1383127
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prep_Activatable Class_Hermes_perf.cache

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
Size 599B
SHA256 b536a3dae9ea5c69081f0491eed829e3b57e32401fdf49a63031bcd6b20e6fdb
MD5 658ab8c32d4cc5deb36ac5f63da4658b
SHA1 30c12cd871ff0c2c4098d794e9ae4f2540586813
SHA512 a73030c008ef3c2e274f11c90bfe79fa8ae402f76801c710bed8cc1ab1218a84858ea566b772be4bade8ef639a019c57d297028df15b64b3753482cf0f3c8f85
TLSH
T12AF05C83EB6A1B72C456123DC8EE56E47B31D1846EC11367A2107B1D3C2B7192D174BD
MD5 SHA1 SHA512 TLSH

Submit Download

memory/3000-3140-0x000001FA00250000-0x000001FA0034F000-memory.dmp

Download

memory/3000-3212-0x000001FA00250000-0x000001FA0034F000-memory.dmp

Download

memory/4296-2971-0x00000125001E0000-0x00000125002E0000-memory.dmp

Download

memory/4296-3015-0x0000012505700000-0x0000012505720000-memory.dmp

Download

memory/4296-3001-0x0000012501C80000-0x0000012501CA0000-memory.dmp

Download

memory/4296-2984-0x0000012501E80000-0x0000012501F80000-memory.dmp

Download

memory/4296-2983-0x0000012501A40000-0x0000012501A60000-memory.dmp

Download

memory/4296-2970-0x00000125001E0000-0x00000125002E0000-memory.dmp

Download

memory/5712-3139-0x000000000F400000-0x000000000F47C000-memory.dmp

Download