BackgroundProcess.dll
71f7038fae4657eb27dfba113ffeeb981e6952588d5e1709b952eed6760d8dcc
Identity
| Property | Value |
|---|---|
| Architecture | AMD64 |
| Source size | 1,662,576 bytes |
| Preferred image base | 0x180000000 |
| Entry RVA | 0x1710 |
| Imports / exports | 389 / 1 |
| Exception/unwind ranges | 4,562 |
| Executable raw bytes | 1,334,272 |
Physical paths:
NVIDIA App\CEF\plugins\BackgroundProcess\BackgroundProcess.dll
Decompilation coverage
Complete: 8,553 successful reconstructions, 0 failures, 8,553 attempted entries, 8,553 reported discovered entries.
Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.
Sections
| Section | RVA | Raw offset | Raw bytes | Virtual bytes | R / W / X | Entropy |
|---|---|---|---|---|---|---|
.text |
0x1000 |
1024 |
1,334,272 | 1,333,986 | yes / no / yes | 4.97 |
.rdata |
0x147000 |
1335296 |
196,096 | 195,933 | yes / no / no | 4.7416 |
.data |
0x177000 |
1531392 |
18,432 | 24,305 | yes / yes / no | 3.8806 |
.pdata |
0x17d000 |
1549824 |
60,928 | 60,516 | yes / no / no | 5.768 |
.idata |
0x18c000 |
1610752 |
26,624 | 26,259 | yes / no / no | 4.357 |
.gfids |
0x193000 |
1637376 |
4,096 | 3,876 | yes / no / no | 3.1903 |
.giats |
0x194000 |
1641472 |
512 | 288 | yes / no / no | 0.2623 |
.tls |
0x195000 |
1641984 |
1,024 | 777 | yes / yes / no | 0.0112 |
.00cfg |
0x196000 |
1643008 |
512 | 373 | yes / no / no | 0.4266 |
.rsrc |
0x197000 |
1643520 |
2,048 | 1,542 | yes / no / no | 3.3301 |
.reloc |
0x198000 |
1645568 |
6,656 | 6,598 | yes / no / no | 2.3176 |
PE mitigation flags
| Flag | Present |
|---|---|
| dynamic_base | true |
| high_entropy_va | true |
| nx_compat | true |
| guard_cf_flag | true |
| no_seh | false |
| appcontainer | false |
| force_integrity | false |
Extracted native interfaces
| Name | Command | Notification | Description |
|---|---|---|---|
RestartProcesses |
True | False | Restarts the list of processes. |
Evidence
Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.