Analysis
- user interaction
yes - max time kernel
899s - max time network
901s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
- submitted
02/08/2026, 07:28
General
- Target ملف البث .rar
- Size 2KB
- Sample260802-ja322afa73
- SHA256 5d88549adce5efb6380ccd531a3007ee54aa11dc849f2f8128229c06edc0f431
Malware Config
Signatures
- Downloads MZ/PE file 1 IoCs
- Executes dropped EXE 6 IoCs
- Loads dropped DLL 27 IoCs
- Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Looks up external IP address via web service 1 TTPs 2 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
- Drops file in Program Files directory 64 IoCs
- Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs
When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.
- Browser Information Discovery 1 TTPs
Enumerate browser information.
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 9 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
- Checks SCSI registry key(s) 3 TTPs 24 IoCs
SCSI information is often read in order to detect sandboxing environments.
- Enumerates system info in registry 2 TTPs 7 IoCs
- Modifies data under HKEY_USERS 2 IoCs
- Modifies registry class 6 IoCs
- NTFS ADS 1 IoCs
- Suspicious behavior: EnumeratesProcesses 6 IoCs
- Suspicious behavior: GetForegroundWindowSpam 2 IoCs
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 21 IoCs
- Suspicious use of AdjustPrivilegeToken 64 IoCs
- Suspicious use of FindShellTrayWindow 57 IoCs
- Suspicious use of SendNotifyMessage 20 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
- Suspicious use of WriteProcessMemory 64 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\ملف البث .rar"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe"1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe846ac728,0x7ffe846ac734,0x7ffe846ac7402⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1604,i,233056037759710546,16961077891413228325,262144 --field-trial-handle=1952,i,6147851274625518960,5844735198791744083,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1944 /prefetch:22⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1460,i,2437026571304048165,500909421747740051,524288 --field-trial-handle=1952,i,6147851274625518960,5844735198791744083,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2264 /prefetch:112⤵
- Downloads MZ/PE file
- System Time Discovery
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2376,i,8626312146763803819,354480012452801965,524288 --field-trial-handle=1952,i,6147851274625518960,5844735198791744083,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2348 /prefetch:132⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3240,i,11629747730355089935,18358954606589536965,2097152 --field-trial-handle=1952,i,6147851274625518960,5844735198791744083,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3260 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3280,i,4261683257514801999,3590203834433534855,2097152 --field-trial-handle=1952,i,6147851274625518960,5844735198791744083,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3288 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4316,i,6721889077100714194,4837535936992877001,2097152 --field-trial-handle=1952,i,6147851274625518960,5844735198791744083,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4332 /prefetch:92⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4632,i,13833137562079681836,16639223357392862237,2097152 --field-trial-handle=1952,i,6147851274625518960,5844735198791744083,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4692 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5524,i,10077560638139463452,8241068651449753314,524288 --field-trial-handle=1952,i,6147851274625518960,5844735198791744083,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5460 /prefetch:142⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5696,i,9754732652385125833,4609973055752332017,2097152 --field-trial-handle=1952,i,6147851274625518960,5844735198791744083,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5796 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5916,i,17267226919790436516,2601918983356441831,2097152 --field-trial-handle=1952,i,6147851274625518960,5844735198791744083,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3388 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3516,i,5119832888863383312,14479273672908778013,2097152 --field-trial-handle=1952,i,6147851274625518960,5844735198791744083,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3288 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=6060,i,15518725645051134368,15014621643467616840,2097152 --field-trial-handle=1952,i,6147851274625518960,5844735198791744083,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6032 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=6140,i,2831528919795328437,8791295183155930244,2097152 --field-trial-handle=1952,i,6147851274625518960,5844735198791744083,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6104 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=6272,i,10086374361255458206,2850036625549939295,2097152 --field-trial-handle=1952,i,6147851274625518960,5844735198791744083,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6268 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4864,i,17330490009898405987,11669634181175310812,524288 --field-trial-handle=1952,i,6147851274625518960,5844735198791744083,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5948 /prefetch:142⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5972,i,3104788098405806208,2654208828794095192,524288 --field-trial-handle=1952,i,6147851274625518960,5844735198791744083,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5980 /prefetch:142⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3532,i,13845616262182536612,3337095582758366691,524288 --field-trial-handle=1952,i,6147851274625518960,5844735198791744083,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6028 /prefetch:142⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=4336,i,14215279234248390066,669928979147167886,2097152 --field-trial-handle=1952,i,6147851274625518960,5844735198791744083,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4412 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=3908,i,2404663453247352539,11025570691214322768,2097152 --field-trial-handle=1952,i,6147851274625518960,5844735198791744083,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3344 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=3492,i,10639260600185703769,12374918293403284910,2097152 --field-trial-handle=1952,i,6147851274625518960,5844735198791744083,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3328 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4332,i,9504156751033961767,9267271213499318409,524288 --field-trial-handle=1952,i,6147851274625518960,5844735198791744083,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4428 /prefetch:142⤵
- Subvert Trust Controls: Mark-of-the-Web Bypass
- NTFS ADS
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6996,i,733863464173006673,4955619250925482829,2097152 --field-trial-handle=1952,i,6147851274625518960,5844735198791744083,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7032 /prefetch:12⤵
-
-
C:\Users\Admin\Downloads\NVIDIA_app_v11.0.8.299.exe"C:\Users\Admin\Downloads\NVIDIA_app_v11.0.8.299.exe"2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\NVIDIA\NVAPP2\setup.exe"C:\NVIDIA\NVAPP2\setup.exe" -log:"C:\ProgramData\\NVIDIA Corporation\\NVIDIA App\\Installer\\Logs" -loglevel:63⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Checks SCSI registry key(s)
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\RunDll32.EXEC:\Windows\SysWOW64\RunDll32.EXE C:\Users\Admin\AppData\Local\Temp\NVI2_29.DLL,DeferredDelete {2E149E9C-FF2D-4E44-8B9A-4EEBEC9C541B} 4844 C:\NVIDIA\NVAPP2\setup.exe4⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
-
-
-
-
C:\Users\Admin\Downloads\NVIDIA_app_v11.0.8.299.exe"C:\Users\Admin\Downloads\NVIDIA_app_v11.0.8.299.exe"2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\NVIDIA\NVAPP2\setup.exe"C:\NVIDIA\NVAPP2\setup.exe" -log:"C:\ProgramData\\NVIDIA Corporation\\NVIDIA App\\Installer\\Logs" -loglevel:63⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Checks SCSI registry key(s)
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\RunDll32.EXEC:\Windows\SysWOW64\RunDll32.EXE C:\Users\Admin\AppData\Local\Temp\NVI2_29.DLL,DeferredDelete {D58E871C-7FC9-4744-B9D6-BBB64E0F3CB9} 3972 C:\NVIDIA\NVAPP2\setup.exe4⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
-
-
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6652,i,1591151583305589763,18173381008966211751,2097152 --field-trial-handle=1952,i,6147851274625518960,5844735198791744083,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6280 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4436,i,16343400761854962146,5690547230968027416,262144 --field-trial-handle=1952,i,6147851274625518960,5844735198791744083,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3816 /prefetch:102⤵
- Suspicious behavior: EnumeratesProcesses
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=3508,i,12171470711176614087,18230282545443775240,524288 --field-trial-handle=1952,i,6147851274625518960,5844735198791744083,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4528 /prefetch:142⤵
-
-
C:\Users\Admin\Downloads\NVIDIA_app_v11.0.8.299.exe"C:\Users\Admin\Downloads\NVIDIA_app_v11.0.8.299.exe"2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\NVIDIA\NVAPP2\setup.exe"C:\NVIDIA\NVAPP2\setup.exe" -log:"C:\ProgramData\\NVIDIA Corporation\\NVIDIA App\\Installer\\Logs" -loglevel:63⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Checks SCSI registry key(s)
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\RunDll32.EXEC:\Windows\SysWOW64\RunDll32.EXE C:\Users\Admin\AppData\Local\Temp\NVI2_29.DLL,DeferredDelete {DA0C5F17-87BC-439E-A812-121BA37C4DBD} 1140 C:\NVIDIA\NVAPP2\setup.exe4⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
-
-
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=7016,i,12568106065719166034,13544968274900184005,2097152 --field-trial-handle=1952,i,6147851274625518960,5844735198791744083,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7000 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=6680,i,168859321814044379,16294157333092296303,2097152 --field-trial-handle=1952,i,6147851274625518960,5844735198791744083,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6940 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=7692,i,6376164701662423932,14483392548174462027,2097152 --field-trial-handle=1952,i,6147851274625518960,5844735198791744083,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7736 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=5676,i,2670360718309667887,9460294623203534388,2097152 --field-trial-handle=1952,i,6147851274625518960,5844735198791744083,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7708 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=7240,i,3570161581336829780,8533005245168894360,2097152 --field-trial-handle=1952,i,6147851274625518960,5844735198791744083,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7052 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=6644,i,17843494854617039446,17924497626324965440,2097152 --field-trial-handle=1952,i,6147851274625518960,5844735198791744083,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6832 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"1⤵
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc1⤵
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc1⤵
-
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\msinfo32.exe"C:\Windows\system32\msinfo32.exe"1⤵
- Checks SCSI registry key(s)
- Enumerates system info in registry
- Suspicious behavior: GetForegroundWindowSpam
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe846ac728,0x7ffe846ac734,0x7ffe846ac7402⤵
-
Network
MITRE ATT&CK Enterprise v16
Discovery
Browser Information Discovery
1Peripheral Device Discovery
1Query Registry
3System Information Discovery
3System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1Internet Connection Discovery
1System Time Discovery
1Replay Monitor
Loading Replay Monitor...
Downloads
EULA.txt
ExcludeList.txt
FrameView SDK License (3Sept2020).docx
FrameViewSdk.nvi
FrameViewSdkExt.dll
FvContainer.System.exe
FvContainer.exe
NvMessageBus.dll
AggregatorContainerPlugin_x64.dll
FrameViewKMDServiceContainerPlugin_x64.dll
NvMessageBusBroadcast.dll
messagebus.conf
SystemDataCollectorsContainerPlugin_x64.dll
README.txt
FvSDKTestClient.exe
FvSDKTestClient_Public.exe
FvSDK.h
FvSDK_x64.dll
FvSDK_x64.lib
FvSDK_x64.pdb
FvSDK_x64UWP.lib
FvSDK_x86.dll
FvSDK_x86.lib
FvSDK_x86.pdb
FrameViewKMD.sys
FvSDK_x64.dll
FvSDK_x86.dll
PresentMon_x64.exe
TestSystemDataCollectors_x64.exe
amd_ags_x64.dll
mouseLut.json
nvrla.exe
NVFTVRDLL64.dll
NvFrapsOpenVR.man
htcvive_install.bat
cleanup_fvsdk.cmd
ddETWExternal.dll
ddETWExternal.xml
nvinstall.cmd
LICENSES.txt
nvfvsdksvc_x64.exe
MSVCRTExt.dll
MSVCRuntime_2019.nvi
0000.ui.forms
0401.ui.forms
0401.ui.strings
0404.ui.forms
0404.ui.strings
0405.ui.forms
0405.ui.strings
0406.ui.forms
0406.ui.strings
0407.ui.forms
0407.ui.strings
0408.ui.forms
0408.ui.strings
0409.ui.forms
0409.ui.strings
040a.ui.forms
040a.ui.strings
040b.ui.forms
040b.ui.strings
040c.ui.forms
040c.ui.strings
040d.ui.forms
040d.ui.strings
040e.ui.forms
040e.ui.strings
0410.ui.forms
0410.ui.strings
0411.ui.forms
0411.ui.strings
0412.ui.forms
0412.ui.strings
0413.ui.forms
0413.ui.strings
0414.ui.forms
0414.ui.strings
0415.ui.forms
0415.ui.strings
0416.ui.forms
0416.ui.strings
0419.ui.forms
0419.ui.strings
041b.ui.forms
041b.ui.strings
041d.ui.forms
041d.ui.strings
041e.ui.forms
041e.ui.strings
041f.ui.forms
041f.ui.strings
0422.ui.forms
0422.ui.strings
0424.ui.forms
0424.ui.strings
0804.ui.forms
0804.ui.strings
0809.ui.strings
080a.ui.forms
080a.ui.strings
0816.ui.forms
0816.ui.strings
DynamicBillboardPresentations.cfg
DynamicBillboardPresentations.dll
DynamicBillboardPresentations.htm
EULA_bg.png
Green_btn_Disabled.png
Green_btn_Enabled.png
Green_btn_Focus.png
Green_btn_Hover.png
Green_btn_Pressed.png
Installer_ELA_Splash_bg1a.png
Installer_ELA_Splash_bg1a_light.png
Installer_ELA_Splash_bg2a.png
Installer_ELA_Splash_bg2a_light.png
Main_BG_light.png
NVI2.DLL
NVPrxy32.dll
NVPrxy64.dll
NvInstallerUtil.dll
alert-circle.png
close.png
close_disabled.png
close_disabled_light.png
close_focus.png
close_focus_light.png
close_light.png
close_pressed.png
close_pressed_light.png
gfe-migration_bg.png
gfe-migration_bg_RTL.png
installer_bg1.png
installer_bg2.png
json2.js
min.png
min_focus.png
min_focus_light.png
min_pressed.png
pre_install_bkg_light.png
primary_btn_enabled.png
primary_btn_enabled_light.png
primary_btn_focused.png
primary_btn_focused_light.png
primary_btn_hover.png
primary_btn_hover_light.png
primary_btn_pressed.png
primary_btn_pressed_light.png
secondary_btn_enabled_light.png
secondary_btn_focused.png
secondary_btn_focused_light.png
secondary_btn_hover_light.png
secondary_btn_pressed.png
secondary_btn_pressed_light.png
splash.png
theme.cfg
uninstall_btn_enabled.png
uninstall_btn_enabled_light.png
uninstall_btn_focused.png
uninstall_btn_focused_light.png
uninstall_btn_hover.png
uninstall_btn_hover_light.png
uninstall_btn_pressed.png
uninstall_btn_pressed_light.png
MessageBus.dll
MessageBus.nvi
NvMessageBus.dll
NvMessageBusBroadcast.dll
messagebus.conf
MessageBus.dll
NvMessageBus.dll
7z.dll
7z.exe
NVIDIA App.exe
NVIDIA Overlay.exe
NvLocalizedConfig.conf
NvLocalizedConfig.dll
NVIDIA App Permission.exe
NVIDIA App.json
NVIDIA Overlay.json
DesktopNotification.json
Diagnostics.json
NvCplPlugin.json
ShareServer.json
product-config.json
UpdateFrameworkPlugin.dll
component_profiles.json
chrome_100_percent.pak
chrome_200_percent.pak
chrome_elf.dll
Downloader.json
DriverUpdateRecommendation.json
d3dcompiler_47.dll
CrimsonUtil.dll
libcrypto-3-x64.dll
icudtl.dat
libEGL.dll
libGLESv2.dll
af.pak
am.pak
ar.pak
bg.pak
bn.pak
ca.pak
cs.pak
da.pak
de.pak
el.pak
en-GB.pak
en-US.pak
es-419.pak
es.pak
et.pak
fa.pak
fi.pak
fil.pak
fr.pak
gu.pak
he.pak
hi.pak
hr.pak
hu.pak
id.pak
it.pak
ja.pak
kn.pak
ko.pak
lt.pak
lv.pak
ml.pak
mr.pak
ms.pak
nb.pak
nl.pak
pl.pak
pt-BR.pak
pt-PT.pak
ro.pak
ru.pak
sk.pak
sl.pak
sr.pak
sv.pak
sw.pak
ta.pak
te.pak
th.pak
tr.pak
uk.pak
ur.pak
vi.pak
zh-CN.pak
zh-TW.pak
BackgroundProcess.conf
BackgroundProcess.dll
LocalGames.dll
NvCplDisplayPlugin.dll
NvCplPlugin.dll
NvPerfMon.dll
NvWorkstation.dll
SystemInfo.dll
AppDiscovery.dll
DriverInstall.dll
LoginId.dll
MessageBusRouter.conf
MessageBusRouter.dll
NvIGOUtil.dll
NvOc.dll
Gallery.dll
GraphicsSetting.dll
MessageBusRouter.conf
NvCamera.dll
Rise.dll
ShareServer.dll
resources.pak
snapshot_blob.bin
v8_context_snapshot.bin
DarkModeCheck.exe
EULA.txt
EULA_ar-SA.html
EULA_cs-CZ.html
EULA_da-DK.html
EULA_de-DE.html
EULA_el-GR.html
EULA_en-GB.html
EULA_en-US.html
EULA_es-ES.html
EULA_es-MX.html
EULA_fi-FI.html
EULA_fr-FR.html
EULA_he-IL.html
EULA_hu-HU.html
EULA_it-IT.html
EULA_ja-JP.html
EULA_ko-KR.html
EULA_nb-NO.html
EULA_nl-NL.html
EULA_pl-PL.html
EULA_pt-BR.html
EULA_pt-PT.html
EULA_ru-RU.html
EULA_sk-SK.html
EULA_sl-SI.html
EULA_sv-SE.html
EULA_th-TH.html
EULA_tr-TR.html
EULA_uk-UA.html
EULA_zh-CHS.html
EULA_zh-CHT.html
FunctionalConsent_ar-SA.txt
FunctionalConsent_cs-CZ.txt
FunctionalConsent_da-DK.txt
FunctionalConsent_de-DE.txt
FunctionalConsent_el-GR.txt
FunctionalConsent_en-GB.txt
FunctionalConsent_en-US.txt
FunctionalConsent_es-ES.txt
FunctionalConsent_es-MX.txt
FunctionalConsent_fi-FI.txt
FunctionalConsent_fr-FR.txt
FunctionalConsent_he-IL.txt
FunctionalConsent_hu-HU.txt
FunctionalConsent_it-IT.txt
FunctionalConsent_ja-JP.txt
FunctionalConsent_ko-KR.txt
FunctionalConsent_nb-NO.txt
FunctionalConsent_nl-NL.txt
FunctionalConsent_pl-PL.txt
FunctionalConsent_pt-BR.txt
FunctionalConsent_pt-PT.txt
FunctionalConsent_ru-RU.txt
FunctionalConsent_sk-SK.txt
FunctionalConsent_sl-SI.txt
FunctionalConsent_sv-SE.txt
FunctionalConsent_th-TH.txt
FunctionalConsent_tr-TR.txt
FunctionalConsent_uk-UA.txt
FunctionalConsent_zh-CHS.txt
FunctionalConsent_zh-CHT.txt
InstallerExtension.dll
NvApp.nvi
NvAppApi.dll
NvAppExt.dll
NvConfigGenerator.dll
NvAccount.dll
DesktopNotification.dll
Diagnostics.dll
Downloader.dll
DriverUpdateRecommendation.dll
NvAppIgoIpcProxy.dll
NvKVStorage.dll
_OverClockingNvc.dll
NvDriverDiagnostics.dll
PrivacyPolicy_ar-SA.htm
PrivacyPolicy_cs-CZ.htm
PrivacyPolicy_da-DK.htm
PrivacyPolicy_de-DE.htm
PrivacyPolicy_el-GR.htm
PrivacyPolicy_es-ES.htm
PrivacyPolicy_es-MX.htm
PrivacyPolicy_fi-FI.htm
PrivacyPolicy_fr-FR.htm
PrivacyPolicy_he-IL.htm
PrivacyPolicy_hu-HU.htm
PrivacyPolicy_it-IT.htm
PrivacyPolicy_ja-JP.htm
PrivacyPolicy_ko-KR.htm
PrivacyPolicy_nb-NO.htm
PrivacyPolicy_nl-NL.htm
PrivacyPolicy_pl-PL.htm
PrivacyPolicy_pt-BR.htm
PrivacyPolicy_ru-RU.htm
PrivacyPolicy_sk-SK.htm
PrivacyPolicy_sl-SI.htm
PrivacyPolicy_sv-SE.htm
PrivacyPolicy_th-TH.htm
PrivacyPolicy_tr-TR.htm
PrivacyPolicy_uk-UA.htm
PrivacyPolicy_zh-CHS.htm
PrivacyPolicy_zh-CHT.htm
NvApp_upgrade_text_0401.txt
NvApp_upgrade_text_0404.txt
NvApp_upgrade_text_0405.txt
NvApp_upgrade_text_0406.txt
NvApp_upgrade_text_0407.txt
NvApp_upgrade_text_0408.txt
NvApp_upgrade_text_0409.txt
NvApp_upgrade_text_040a.txt
NvApp_upgrade_text_040b.txt
NvApp_upgrade_text_040c.txt
NvApp_upgrade_text_040d.txt
NvApp_upgrade_text_040e.txt
NvApp_upgrade_text_0410.txt
NvApp_upgrade_text_0411.txt
NvApp_upgrade_text_0412.txt
NvApp_upgrade_text_0413.txt
NvApp_upgrade_text_0414.txt
NvApp_upgrade_text_0415.txt
NvApp_upgrade_text_0416.txt
NvApp_upgrade_text_0419.txt
NvApp_upgrade_text_041b.txt
NvApp_upgrade_text_041d.txt
NvApp_upgrade_text_041e.txt
NvApp_upgrade_text_041f.txt
NvApp_upgrade_text_0422.txt
NvApp_upgrade_text_0424.txt
NvApp_upgrade_text_0804.txt
NvApp_upgrade_text_0809.txt
NvApp_upgrade_text_080a.txt
NvApp_upgrade_text_0816.txt
license.txt
137.4423317664192b26.js
281.ceb9f1584c8db4a5.js
3rdpartylicenses.txt
48.523e5fe09512ea96.js
531.a97ff808b5a5a618.js
540.0a3b9aebecd1f0ce.js
629.b5be9b397926972e.js
832.36fe00025ac87e01.js
842.ac013a5bc355d1fa.js
851.30a9f2c0cdc3463d.js
DefaultStreamerBackgroundArt.a079e7d7fdd1ed01.jpg
Deselect_All_24.9c60743cf04d1b72.svg
MaterialIcons-Regular.196fa4a92dd6fa73.ttf
MaterialIcons-Regular.1e50f5c2ffa6aba4.eot
MaterialIcons-Regular.7ea2023eeca07427.woff2
MaterialIcons-Regular.db852539204b1a34.woff
NVIDIASans_W_Bd.5aafff8b08f9a971.woff2
NVIDIASans_W_Md.14ea224b997bf6e0.woff2
NVIDIASans_W_Rg.33fb51adcc625f4e.woff2
Select_All_24.5528d1942c3b1881.svg
ar_SA.json
bg_BG.json
cs_CZ.json
da_DK.json
de_DE.json
el_GR.json
en_GB.json
en_US.json
es_ES.json
es_MX.json
fi_FI.json
fr_FR.json
hr_HR.json
hu_HU.json
it_IT.json
ja_JP.json
ko_KR.json
nb_NO.json
nl_NL.json
pl_PL.json
pt_BR.json
pt_PT.json
ro_RO.json
ru_RU.json
sk_SK.json
sl_SI.json
sv_SE.json
th_TH.json
tr_TR.json
uk_UA.json
zh_CN.json
zh_TW.json
geforce_mark.svg
img_gfe_branding.svg
img_gfn_branding.svg
common.0ec4c044ad0e04ab.js
favicon.ico
index.html
main.773bf72edc4f8c25.js
polyfills.bf75149cdc274fc4.js
runtime.b0b4701991d45f16.js
styles.cfbb30dc5419c537.css
109.99dfb2e7f6bca99f.js
16.e23374031330727a.js
47.57b3c3ffae121aee.js
476.7153c78ef7330996.js
586.52810f8620423ac8.js
74.e5bad639e655c09b.js
807.ea3130d4b628c107.js
981.5aed5be620cc5251.js
988.705a0f570c6af3b1.js
icon1.25.png
icon1.5.png
icon2.0.png
icon2.5.png
icon.png
close_default_icon10.png
close_disable_icon10.png
close_hover_icon10.png
close_press_icon10.png
maximize_default_icon10.png
maximize_disable_icon10.png
maximize_hover_icon10.png
maximize_press_icon10.png
minimize_default_icon10.png
minimize_disable_icon10.png
minimize_hover_icon10.png
minimize_press_icon10.png
windowmode_default_icon10.png
windowmode_disable_icon10.png
windowmode_hover_icon10.png
windowmode_press_icon10.png
close_default_icon125.png
close_disable_icon125.png
close_hover_icon125.png
close_press_icon125.png
maximize_default_icon125.png
maximize_disable_icon125.png
maximize_hover_icon125.png
maximize_press_icon125.png
minimize_default_icon125.png
minimize_disable_icon125.png
minimize_hover_icon125.png
minimize_press_icon125.png
windowmode_default_icon125.png
windowmode_disable_icon125.png
windowmode_hover_icon125.png
windowmode_press_icon125.png
close_default_icon15.png
close_disable_icon15.png
close_hover_icon15.png
close_press_icon15.png
maximize_default_icon15.png
maximize_disable_icon15.png
maximize_hover_icon15.png
maximize_press_icon15.png
minimize_default_icon15.png
minimize_disable_icon15.png
minimize_hover_icon15.png
minimize_press_icon15.png
windowmode_default_icon15.png
windowmode_disable_icon15.png
windowmode_hover_icon15.png
windowmode_press_icon15.png
close_default_icon20.png
close_disable_icon20.png
close_hover_icon20.png
close_press_icon20.png
maximize_default_icon20.png
maximize_disable_icon20.png
maximize_hover_icon20.png
maximize_press_icon20.png
minimize_default_icon20.png
minimize_disable_icon20.png
minimize_hover_icon20.png
minimize_press_icon20.png
windowmode_default_icon20.png
windowmode_disable_icon20.png
windowmode_hover_icon20.png
windowmode_press_icon20.png
close_default_icon25.png
close_disable_icon25.png
close_hover_icon25.png
close_press_icon25.png
maximize_default_icon25.png
maximize_disable_icon25.png
maximize_hover_icon25.png
maximize_press_icon25.png
minimize_default_icon25.png
minimize_disable_icon25.png
minimize_hover_icon25.png
minimize_press_icon25.png
windowmode_default_icon25.png
windowmode_disable_icon25.png
windowmode_hover_icon25.png
windowmode_press_icon25.png
config.json
ootb-grd-driver-experience.ae47d97afbef711e.jpg
ootb-grd-ops-experience.98c0923bd68cfd11.jpg
ootb-grd-overlay-experience.a712d389f2f636aa.webp
ootb-grd-rewards-experience.d08599b6dfba97ba.webp
ootb-nsd-driver-experience.d8406fe99b7df33f.webp
ootb-nsd-ops-experience.649207328eda51ff.webp
ootb-nsd-overlay-experience.143ab5b607f0db65.webp
ootb-nsd-rewards-experience.dc6251a422b0d9bb.webp
ootb-nwd-driver-experience.5039068ad925bc01.webp
ootb-nwd-ops-experience.5cd200c7395eae61.webp
ootb-nwd-overlay-experience.c38db2b6d23a19d1.webp
ar_SA.json
bg_BG.json
cs_CZ.json
da_DK.json
de_DE.json
el_GR.json
en_GB.json
en_US.json
es_ES.json
es_MX.json
fi_FI.json
fr_FR.json
hr_HR.json
hu_HU.json
it_IT.json
ja_JP.json
ko_KR.json
nb_NO.json
nl_NL.json
pl_PL.json
pt_BR.json
pt_PT.json
ro_RO.json
ru_RU.json
sk_SK.json
sl_SI.json
sv_SE.json
th_TH.json
tr_TR.json
uk_UA.json
zh_CN.json
zh_TW.json
Asterisk_24.svg
DVI.svg
DefaultGameArt.jpg
HDMI.svg
Marquee_Hero_Image_Fallback.webp
Marquee_Hero_Image_Gradient.svg
Marquee_Hero_Image_Gradient_RTL.svg
More-Menu_32.svg
TV.svg
USB.svg
VGA.svg
auto_display_mode.svg
avatar_generic_118.svg
badge_G-Sync.svg
badge_G-Sync_ultimate.svg
coupons_expandable_banner.webp
display_Port.svg
driver.svg
driver_update_notification_grd_fallback.webp
driver_update_notification_nsd_fallback.webp
fallback-app-icon.svg
fallback-hero-image.svg
grd_desktop_notification_icon.webp
grd_marquee_fallback.webp
icon_igpu.svg
icon_laptop.svg
icon_monitor.svg
icon_tv.svg
installation-billboard-fallback.svg
landscape.svg
landscape_flipped.svg
laptop_Display.svg
lt_arrow.svg
marquee-fallback.svg
marquee-individual-fallback.svg
mobile_marquee_hero_mask_ltr.webp
mobile_marquee_hero_mask_rtl.webp
more-menu-hover_32_rounded-corners.svg
nsd_marquee_fallback.webp
nv-gpu.svg
nvapp-logo.svg
nvidia_symbol.svg
nwd_marquee_fallback.webp
ootb-nwd-discovery-experience.webp
optimus.svg
overlay.svg
portrait.svg
portrait_flipped.svg
rewards_fallback.svg
rewards_viewdetails_fallback.svg
rt_arrow.svg
wifi_off.svg
wrench_icon.svg
graphics-content.json
reward-content.json
settings-content.json
system-content.json
common.b546f19286497963.js
favicon.ico
index.html
main.543f77ff0dcbc629.js
nvapp-service-worker.js
offline.html
polyfills.9f6fe9d1b0e3b8c2.js
runtime.6902366c13489cbd.js
styles.6f9168baa909d726.css
FeatureWhitelist.json
NvBackend.nvi
NvBackend64.dll
NvBackendAPI64.dll
NvOAWrapperCache.exe
OAWrapper.exe
Ontology64.dll
fingerprint.db
NvContainer.nvi
NvContainerAIUser.nvi
NvContainerLocalSystem.nvi
NvContainerRecovery.bat
NvContainerSession.nvi
NvContainerUser.nvi
NvPluginWatchdog.nvi
NvContainer.exe
NvPluginWatchdog.dll
NvCPL.nvi
NvUI.dll
NvUIR.dll
NvXDCore.dll
nvcpl.dll
nvxdapix.dll
nvxdbat.dll
nvxdplcy.dll
nvxdsyncplugin.dll
NGXWrapper.dll
NvDLISR.nvi
NvTelemetry.json
NvTelemetry.nvi
NvTelemetry64.dll
NvTelemetryAPI32.dll
NvTelemetryAPI64.dll
NvTelemetryBridge32.dll
NvTelemetryBridge64.dll
nvaudcap32v.dll
nvaudcap64a.dll
nvaudcap64v.dll
nvvad.cat
nvvad.inf
nvvad.nvi
nvvad32v.sys
nvvad64a.sys
nvvad64v.sys
ShadowPlay.nvi
ShadowPlayExt.dll
_nvspcaps64.dll
_nvspserviceplugin64.dll
capcore64.dll
ipccommon64.dll
nvfcapi64.dll
nvfp64.dll
nvmf64.dll
nvovapi64.dll
nvspapi64.dll
nvspcap.dll
nvspcap64.dll
nvsphelper64.exe
nvsphelperplugin64.dll
nvspscreenshot64.dll
setup.CFG
setup.exe
NVI2UI.dll
0000.ui.strings
Main_BG.png
NVIDIASans_Bd.ttf
NVIDIASans_BdIt.ttf
NVIDIASans_It.ttf
NVIDIASans_Lt.ttf
NVIDIASans_LtIt.ttf
NVIDIASans_Md.ttf
NVIDIASans_MdIt.ttf
NVIDIASans_Rg.ttf
PrivacyPolicy_en-US.htm
frame_divider_bar.png
min_light.png
pre_install_bkg.png
restartlater_btn_enabled.png
restartlater_btn_focused.png
restartlater_btn_hover.png
restartlater_btn_pressed.png
restartnow_btn_enabled.png
restartnow_btn_focused.png
restartnow_btn_hover.png
restartnow_btn_pressed.png
secondary_btn_enabled.png
secondary_btn_hover.png
LOG.setup.exe.log
616AD1AB067CFD351D6C0EF6F3E12F40
8EC9B1D0ABBD7F98B401D425828828CE_0583AA7C00CE3653328DA30939A9F11E
C8E534EE129F27D55460CE17FD628216_1130D9B25898B0DB0D4F04DC5B93F141
616AD1AB067CFD351D6C0EF6F3E12F40
8EC9B1D0ABBD7F98B401D425828828CE_0583AA7C00CE3653328DA30939A9F11E
C8E534EE129F27D55460CE17FD628216_1130D9B25898B0DB0D4F04DC5B93F141
settings.dat
BookmarkMergedSurfaceOrdering
BrowsingTopicsState
f_000005
f_000026
f_000034
f_000036
the-real-index
the-real-index
the-real-index
the-real-index
Network Persistent State
Network Persistent State
Network Persistent State
Network Persistent State
Network Persistent State
SCT Auditing Pending Reports
TransportSecurity
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Secure Preferences
index.txt
index.txt~RFe59bb47.TMP
the-real-index
the-real-index~RFe58bc46.TMP
the-real-index
Local State
Local State
Local State
Local State
Local State
Local State
Local State
Local State
SearchHoverUnifiedTileModelCache.dat
5d696d521de238c3.customDestinations-ms
5d696d521de238c3.customDestinations-ms
5d696d521de238c3.customDestinations-ms
NVIDIA_app_v11.0.8.299.exe:Zone.Identifier