NvAppIgoIpcProxy.dll
16b4d31149d89b3ac6f1ada950907521c6b75dc515b1c063b06eb2213a5e6eb5
Identity
| Property | Value |
|---|---|
| Architecture | AMD64 |
| Source size | 1,698,416 bytes |
| Preferred image base | 0x180000000 |
| Entry RVA | 0x1730 |
| Imports / exports | 370 / 1 |
| Exception/unwind ranges | 4,736 |
| Executable raw bytes | 1,353,216 |
Physical paths:
NVIDIA App\Plugins\localuser\NvApp\NvAppIgoIpcProxy.dll
Decompilation coverage
Complete: 9,015 successful reconstructions, 0 failures, 9,015 attempted entries, 9,015 reported discovered entries.
Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.
Sections
| Section | RVA | Raw offset | Raw bytes | Virtual bytes | R / W / X | Entropy |
|---|---|---|---|---|---|---|
.text |
0x1000 |
1024 |
1,353,216 | 1,353,018 | yes / no / yes | 4.9315 |
.rdata |
0x14c000 |
1354240 |
207,360 | 207,272 | yes / no / no | 4.7183 |
.data |
0x17f000 |
1561600 |
21,504 | 26,289 | yes / yes / no | 4.0192 |
.pdata |
0x186000 |
1583104 |
62,976 | 62,808 | yes / no / no | 5.7667 |
.idata |
0x196000 |
1646080 |
25,600 | 25,476 | yes / no / no | 4.3611 |
.gfids |
0x19d000 |
1671680 |
4,608 | 4,416 | yes / no / no | 3.2709 |
.giats |
0x19f000 |
1676288 |
512 | 280 | yes / no / no | 0.2084 |
.tls |
0x1a0000 |
1676800 |
1,024 | 777 | yes / yes / no | 0.0112 |
.00cfg |
0x1a1000 |
1677824 |
512 | 373 | yes / no / no | 0.416 |
.rsrc |
0x1a2000 |
1678336 |
2,048 | 1,542 | yes / no / no | 3.3297 |
.reloc |
0x1a3000 |
1680384 |
7,680 | 7,192 | yes / no / no | 2.442 |
PE mitigation flags
| Flag | Present |
|---|---|
| dynamic_base | true |
| high_entropy_va | true |
| nx_compat | true |
| guard_cf_flag | true |
| no_seh | false |
| appcontainer | false |
| force_integrity | false |
Extracted native interfaces
| Name | Command | Notification | Description |
|---|---|---|---|
SendMessageViaProxy |
True | False | Send a message that will be broadcast to all subscribers via IpcProxyMessageNotification |
IpcProxyMessageNotification |
True | False | Broadcast notification containing the message payload from SendMessage |
Evidence
Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.