NVIDIA PACK V4.rar
- SHA256 9a4e54a6781e17f7f646a89f2c3d5e622c59205b6f40c152802eeeee239fb7eb
Overview
overview
7Static
static
5NVIDIA PACK V4.rar
windows10-2004-x64
7NVIDIA PACK V4.rar
windows11-ltsc_2024-x64
1NVIDIA PAC...er.url
windows10-2004-x64
1NVIDIA PAC...er.url
windows11-ltsc_2024-x64
1NVIDIA PAC...es.bat
windows10-2004-x64
3NVIDIA PAC...es.bat
windows11-ltsc_2024-x64
3NVIDIA PAC...v3.exe
windows10-2004-x64
1NVIDIA PAC...v3.exe
windows11-ltsc_2024-x64
1NVIDIA PAC....0.exe
windows10-2004-x64
5NVIDIA PAC....0.exe
windows11-ltsc_2024-x64
5NVIDIA PAC...at.bat
windows10-2004-x64
7NVIDIA PAC...at.bat
windows11-ltsc_2024-x64
7NVIDIA PAC...ce.xml
windows10-2004-x64
3NVIDIA PAC...ce.xml
windows11-ltsc_2024-x64
1NVIDIA PAC...ee.nip
windows10-2004-x64
3NVIDIA PAC...ee.nip
windows11-ltsc_2024-x64
3NVIDIA PAC...or.exe
windows10-2004-x64
1NVIDIA PAC...or.exe
windows11-ltsc_2024-x64
1NVIDIA PAC...xe.xml
windows10-2004-x64
3NVIDIA PAC...xe.xml
windows11-ltsc_2024-x64
1Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
NVIDIA PACK V4.rar
Resource
win10v2004-20260513-en
windows10-2004-x64
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
NVIDIA PACK V4.rar
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
NVIDIA PACK V4/Afterburner.url
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
NVIDIA PACK V4/Afterburner.url
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
NVIDIA PACK V4/Clean Temp Files.bat
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
NVIDIA PACK V4/Clean Temp Files.bat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral7
Sample
NVIDIA PACK V4/MSI_util_v3.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
NVIDIA PACK V4/MSI_util_v3.exe
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
NVIDIA PACK V4/NVCleanstall_1.19.0.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral10
Sample
NVIDIA PACK V4/NVCleanstall_1.19.0.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral11
Sample
NVIDIA PACK V4/Nvidia Debloat.bat
Resource
win10v2004-20260513-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral12
Sample
NVIDIA PACK V4/Nvidia Debloat.bat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
8 signatures
150 seconds
Behavioral task
behavioral13
Sample
NVIDIA PACK V4/Nvidia Profile Inspector/Reference.xml
Resource
win10v2004-20260513-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral14
Sample
NVIDIA PACK V4/Nvidia Profile Inspector/Reference.xml
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
NVIDIA PACK V4/Nvidia Profile Inspector/Risxn Free.nip
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral16
Sample
NVIDIA PACK V4/Nvidia Profile Inspector/Risxn Free.nip
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral17
Sample
NVIDIA PACK V4/Nvidia Profile Inspector/nvidiaProfileInspector.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
NVIDIA PACK V4/Nvidia Profile Inspector/nvidiaProfileInspector.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
NVIDIA PACK V4/Nvidia Profile Inspector/nvidiaProfileInspector.exe.xml
Resource
win10v2004-20260513-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral20
Sample
NVIDIA PACK V4/Nvidia Profile Inspector/nvidiaProfileInspector.exe.xml
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target NVIDIA PACK V4.rar
- Size 3.9MB
- Sample260809-akpgysga44
- SHA256 9a4e54a6781e17f7f646a89f2c3d5e622c59205b6f40c152802eeeee239fb7eb
- MD5 75e24b99c8be9bec727074846b7bd51e
- SHA1 07d52911d73317f82fcd62fcaba6f3cba31eec92
- SHA512 e35e6d8a83eebf44d68fd30eafa1c955ba1be01717aacc6ce973cb77e97a5010c47710067034a7db948335634b41aba12306baeb1e0f9b29268a9077399b836c
- SSDEEP 98304:QX+8ttEt56rGo21mg9J9n9951H2euv1SaxB:QX+wtEt5668g9j3qeuN9
- TLSH T151163382BDEDD3E9F39EF6444C2DF12487A88ACD110E5273443A5D906DAA45933237EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- ConfuserEx .NET packer 1 IoCs
Detects ConfuserEx .NET packer.
resource yara_rule static1/unpack001/NVIDIA PACK V4/NVCleanstall_1.19.0.exe ConfuserEx - Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/NVIDIA PACK V4/MSI_util_v3.exe unpack001/NVIDIA PACK V4/Nvidia Profile Inspector/nvidiaProfileInspector.exe - Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/NVIDIA PACK V4/NVCleanstall_1.19.0.exe
File Explorer
-
NVIDIA PACK V4.rar.rar 3.9MB
-
NVIDIA PACK V4/Afterburner.url80B
-
NVIDIA PACK V4/Clean Temp Files.bat.bat 1KB
-
NVIDIA PACK V4/MSI_util_v3.exe.exe 45KB
-
NVIDIA PACK V4/NVCleanstall_1.19.0.exe.exe 3.8MB
-
NVIDIA PACK V4/Nvidia Debloat.bat1KB
-
NVIDIA PACK V4/Nvidia Profile Inspector/Reference.xml.xml 213KB
-
NVIDIA PACK V4/Nvidia Profile Inspector/Risxn Free.nip23KB
-
NVIDIA PACK V4/Nvidia Profile Inspector/nvidiaProfileInspector.exe.exe 535KB
-
NVIDIA PACK V4/Nvidia Profile Inspector/nvidiaProfileInspector.exe.config.xml 158B
NVIDIA PACK V4/Afterburner.url
- SHA256 406a450d22291f33ae517a50a1a0512e4fcffa7c2d75002d64d46eb34e8f72a5
- MD5 0af3a308b4de127b221773d72da988ba
- SHA1 5f0a4b8786d7f6727d9020046edf146a96758523
- SHA512 c8164cc7a03ee036063e778708e3b05f9ae851ca716ce6f40ef5127ae76a9bab38099557de2de27e6a63a19f7c7fa8d388ba33f3ecd59f8a630c94a8e2ad7a57
- TLSH T1DFA02473C40DC07C5707041C4410DD30C403D440C0F3C0DCC35457040447033CD50304
- MD5 SHA1 SHA512 TLSH
NVIDIA PACK V4/Clean Temp Files.bat
- SHA256 bad63a42f7a2b3d49b2f1afd046337e1d78ca744814ced577b084259ce23f15d
- MD5 71fd0ae93297ac4599d568cc881d6e97
- SHA1 d791e8ba66eebfba552dda87c90be170f4d99d23
- SHA512 d8f1a73075871daa223e884a79867018464bbb4fc6168b28229c089e54a1f1ac8dff156e39871f501e8db6256d42dca5f08bf48cbeb3ea7425f3c221ed942ab8
- TLSH T15F31C00135F617B085F25D6A328F22F3D20976CA95AC09340AD051F0EE655EB1BB73CE
- MD5 SHA1 SHA512 TLSH
NVIDIA PACK V4/MSI_util_v3.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 695800afad96f858a3f291b7df21c16649528f13d39b63fb7c233e5676c8df6f
- MD5 6c748415c350f14fd5b78fa5c37173a5
- SHA1 332d64f5885a738d6ce968172b79b1101303cb5b
- SHA512 c53c5d8ab355d950ae27022dc79f168def1aaeeb64398a553bb96f73d5f1c4df2e085b977a3c558329979b86f99a940fa94e33e671c9dcc5cd7a1310d2eb7461
- SSDEEP 768:1AthLhXIHo+tMCXCBU4copfP4xSwpPO0zsU9RXMJmiuofnC8+d:2kztMCSBU4copwVXz9dMYKfz+d
- TLSH T1D1234B0177DD4B3BE1FE0AB85472100507B2F5BA6531FBCE5D9960DE5CA3B808A61B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
51542
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\projects\MSI_util_v3_solution\MSI_util\MSI_util\obj\Release\MSI_util_v3.pdb
mscoree
_CorExeMain
Name
.text
Size
42KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
NVIDIA PACK V4/NVCleanstall_1.19.0.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 9dd36ef956af927cf41fa441f91b329a7973e13965e4e7d70e6fa9c1df1cade6
- MD5 b2c6e0b0e19a3e1657761b7e8c3f1716
- SHA1 36c5a84f88c13c94a998904aeb14a2faa76830fa
- SHA512 944cca789c3006effa72c73eb0804ed14b557dfa86bc91f1d2b8fe3ce951a203063d02e635c482c03d670cac08d9d64e0a32d3d6bf3a3bfc003a020bbb3eef15
- SSDEEP 98304:nq0Kv4bIAe+9hHjQNsbUEBE6frVLSt+zcyk:nq0u459ZkNc7WwrV2ozY
- TLSH T17D0633DD5ADFF87BD6CA4DB1829B0FA2CBAE45B68024A79E75015978F4222BC170D034
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
14:6b:48:63:06:b6:4a:8e:40:1a:c6:23:c5:a9:1f:62:1b:e3:8f:7f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=604 057 982,CN=TechPowerUp LLC,O=TechPowerUp LLC,L=Spokane,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.3=#13025553,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Jan 1, 0001
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
SERIALNUMBER=604 057 982,CN=TechPowerUp LLC,O=TechPowerUp LLC,L=Spokane,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.3=#13025553,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
58:24:3a:a2:6d:ea:4b:c0:a3:78:e9:83:f7:c0:6d:c8
Issuer
CN=SSL.com EV Code Signing Intermediate CA RSA R3,O=SSL Corp,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 7, 2025 - Apr 1, 2028
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2024,O=DigiCert,C=US
Serial Number
0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 26, 2024 - Nov 25, 2035
Subject
CN=SSL.com EV Code Signing Intermediate CA RSA R3,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
42:4b:6a:53:ce:c7:66:14:1c:2a:63:b1:a5:1c:41:04
Issuer
CN=SSL.com EV Root Certification Authority RSA R2,O=SSL Corporation,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 26, 2019 - Mar 22, 2034
Minor OS version
0
Major OS version
4
Entry point
3922510
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
3.7MB
Virtual Size
3.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
64KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
NVIDIA PACK V4/Nvidia Debloat.bat
- SHA256 b0c127b4781125b2417941958f0f20fa338f6d0d17610a2eadc5297122ae47d3
- MD5 08c8a4166d562518c0a1312631f531eb
- SHA1 fd0e06f392176ad08974a9342a07c6f7137e03a9
- SHA512 e7134df1e0977b4e62b0dd38b0571ae8abda06acbdcdb392109efecf569ff2d3822735c71cb808d7f752b2bdc490dd10aa407a7e3ea4801852a792340e31c078
- TLSH T16B311103670EC0BA62D1807AEFA35D22FE264401915029473B95D3EAE7CA5CC57BC558
- MD5 SHA1 SHA512 TLSH
NVIDIA PACK V4/Nvidia Profile Inspector/Reference.xml
- SHA256 5a31c0500500713efd83160cef3db3f56b807b7c4f7a8b4ee7f4ffe05c676081
- MD5 1a8493bff2d17c83e299101954dcb562
- SHA1 439258f42f755d40311a31b37f6d37f447d546ba
- SHA512 75f2383f73fd3e03fdd17e93091cca7192919cb76ff564cafa7ee8d33d50db83d94dd3905d06b67c01f52f580b73573b490beb61f9a58af3cad3c0a29ce0aa2f
- SSDEEP 768:4wPznLJY2cI2YDqbcSQ98orYfLERQe1jE9Vv+hpGT6yYfoBVxL0n:vLKnI2YDqSDrYxUjE7v/T6yZBVBI
- TLSH T12D24D64950F8986ABB3445F1F6172A29DEA2528B07864329F99C06436FB3CDD12D3D3F
- MD5 SHA1 SHA512 SSDEEP TLSH
NVIDIA PACK V4/Nvidia Profile Inspector/Risxn Free.nip
- SHA256 4438f0915f5d9f225ab137cd9f97fb5ec86de2a6a3389219c9f9b67487e42ec7
- MD5 8cad237e31b02791b63988b6ed2d2779
- SHA1 828e8375519cc7cf77301bb4a973083cda55304a
- SHA512 ee3928d609405c0328c26d486d064e3eb665b7442ab91e0fcbf226d6fa73b75fc4ef144bccdbf5fdc7cb64745dd29c49c2873f437fd09af1865b9e882751d15b
- SSDEEP 96:PKIRcHEH1HGHkHyHoUHIHxHWHhHUHQH/HqH2HyHMsHrHeHSHMRsHAHf4BHwrHXH0:iIgRSM25y5DJtHC
- TLSH T13AB2F66D71C56A0FA2385DD6F66A9339DF28612705534070F89E760F2F239EA03E7E06
- MD5 SHA1 SHA512 SSDEEP TLSH
NVIDIA PACK V4/Nvidia Profile Inspector/nvidiaProfileInspector.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 1233487ea4db928ee062f12b00a6eda01445d001ab55566107234dea4dc65872
- MD5 ff5f39370b67a274cb58ba7e2039d2e2
- SHA1 3020bb33e563e9efe59ea22aa4588bed5f1b2897
- SHA512 7decec37c80d1d5ad6296d737d5d16c4fc92353a3ae4bd083c4a7b267bb6073a53d9f6152b20f9b5e62ba6c93f76d08f813812a83ce164db4c91107d7ad5a95f
- SSDEEP 6144:4sP/zdlaCgMOx9mN1S0Mi11iBFmEobpU0u5p:/P5cCdOHmN1S0Mi2BFmLU0A
- TLSH T13DC4BE4D35ECA99AEB0804F2F13F25259A5BEA560A85532CB97C26B37363DC811C1D3F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
537638
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
517KB
Virtual Size
517KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
NVIDIA PACK V4/Nvidia Profile Inspector/nvidiaProfileInspector.exe.config
- SHA256 383b8dcb968b6bd0633658d9bb55c4acaf4c85a075aa456904a42d4e4efd5561
- MD5 ce6d0bc7328b0fab08de80f292c1eaa4
- SHA1 ae505d6f60a71259b91865f6d5a3d674e9de0ebe
- SHA512 f009ad44131f19997c7c7be38144132d9f701fda4492f3782a2717b92859f189196fac5a7d7e6ff6952f2c1735f27ffaddf0f7acbb45b98a7d85572e96c16c00
- TLSH T164C02B9940347C37CC214F139360C1254FF83262F434000CF0AFFF68062004E830A396
- MD5 SHA1 SHA512 TLSH