NvTelemetry64.dll
64f71e1b98f1fcea2d38f353e3097108c8a0d5196123d15fd94e25a44f887ee5
Identity
| Property | Value |
|---|---|
| Architecture | AMD64 |
| Source size | 8,169,072 bytes |
| Preferred image base | 0x180000000 |
| Entry RVA | 0x26d270 |
| Imports / exports | 336 / 31 |
| Exception/unwind ranges | 20,623 |
| Executable raw bytes | 6,001,152 |
Physical paths:
NvTelemetry\plugin\NvTelemetry64.dll
Decompilation coverage
Complete with errors: 20,730 successful reconstructions, 14 failures, 20,744 attempted entries, 20,744 reported discovered entries.
Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.
Sections
| Section | RVA | Raw offset | Raw bytes | Virtual bytes | R / W / X | Entropy |
|---|---|---|---|---|---|---|
.text |
0x1000 |
1024 |
6,001,152 | 6,000,691 | yes / no / yes | 6.6826 |
.rdata |
0x5bb000 |
6002176 |
1,755,136 | 1,754,860 | yes / no / no | 5.7234 |
.data |
0x768000 |
7757312 |
86,016 | 113,620 | yes / yes / no | 4.6327 |
.pdata |
0x784000 |
7843328 |
247,808 | 247,476 | yes / no / no | 6.4076 |
_RDATA |
0x7c1000 |
8091136 |
1,024 | 640 | yes / no / no | 3.1536 |
.rsrc |
0x7c2000 |
8092160 |
1,536 | 1,368 | yes / no / no | 3.8365 |
.reloc |
0x7c3000 |
8093696 |
65,024 | 64,848 | yes / no / no | 5.4511 |
PE mitigation flags
| Flag | Present |
|---|---|
| dynamic_base | true |
| high_entropy_va | true |
| nx_compat | true |
| guard_cf_flag | true |
| no_seh | false |
| appcontainer | false |
| force_integrity | false |
Evidence
Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.