nvcontainer.exe
0f0a5352c50d4701d629e7c88a7a45632e76217bdc8e21569af5d2ab3c345817
Identity
| Property | Value |
|---|---|
| Architecture | AMD64 |
| Source size | 1,691,248 bytes |
| Preferred image base | 0x140000000 |
| Entry RVA | 0xa3940 |
| Imports / exports | 210 / 1 |
| Exception/unwind ranges | 5,354 |
| Executable raw bytes | 1,217,024 |
Physical paths:
NvContainer\nvcontainer.exe
Decompilation coverage
Complete with errors: 9,468 successful reconstructions, 2 failures, 9,470 attempted entries, 9,470 reported discovered entries.
Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.
Sections
| Section | RVA | Raw offset | Raw bytes | Virtual bytes | R / W / X | Entropy |
|---|---|---|---|---|---|---|
.text |
0x1000 |
1024 |
1,217,024 | 1,216,892 | yes / no / yes | 6.453 |
.rdata |
0x12b000 |
1218048 |
242,176 | 241,690 | yes / no / no | 5.4565 |
.data |
0x167000 |
1460224 |
12,288 | 29,400 | yes / yes / no | 3.8424 |
.pdata |
0x16f000 |
1472512 |
64,512 | 64,248 | yes / no / no | 6.1882 |
.didat |
0x17f000 |
1537024 |
512 | 48 | yes / yes / no | 0.3443 |
_RDATA |
0x180000 |
1537536 |
1,024 | 640 | yes / no / no | 3.1753 |
.rsrc |
0x181000 |
1538560 |
137,728 | 137,232 | yes / no / no | 4.7049 |
.reloc |
0x1a3000 |
1676288 |
4,608 | 4,432 | yes / no / no | 5.3809 |
PE mitigation flags
| Flag | Present |
|---|---|
| dynamic_base | true |
| high_entropy_va | true |
| nx_compat | true |
| guard_cf_flag | true |
| no_seh | false |
| appcontainer | false |
| force_integrity | false |
Selected routines
| RVA | Function | Reconstruction |
|---|---|---|
0xc400 |
sub_14000C400 |
C text |
0x13360 |
sub_140013360 |
C text |
0x13970 |
sub_140013970 |
C text |
0x13ec0 |
sub_140013EC0 |
C text |
Evidence
Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.