LoginId.dll
87319cac6eaec67bfab7999494bfbf69d35f4c668f063196f58e22ddcf207f3e
Identity
| Property | Value |
|---|---|
| Architecture | AMD64 |
| Source size | 1,707,632 bytes |
| Preferred image base | 0x180000000 |
| Entry RVA | 0x1780 |
| Imports / exports | 355 / 2 |
| Exception/unwind ranges | 4,704 |
| Executable raw bytes | 1,372,672 |
Physical paths:
NVIDIA App\CEF\plugins\NVIDIA App\LoginId.dll
Decompilation coverage
Complete: 8,759 successful reconstructions, 0 failures, 8,759 attempted entries, 8,759 reported discovered entries.
Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.
Sections
| Section | RVA | Raw offset | Raw bytes | Virtual bytes | R / W / X | Entropy |
|---|---|---|---|---|---|---|
.text |
0x1000 |
1024 |
1,372,672 | 1,372,223 | yes / no / yes | 4.991 |
.rdata |
0x151000 |
1373696 |
202,240 | 201,962 | yes / no / no | 4.7348 |
.data |
0x183000 |
1575936 |
18,432 | 23,617 | yes / yes / no | 3.9744 |
.pdata |
0x189000 |
1594368 |
62,464 | 62,388 | yes / no / no | 5.775 |
.idata |
0x199000 |
1656832 |
25,600 | 25,092 | yes / no / no | 4.3189 |
.gfids |
0x1a0000 |
1682432 |
4,096 | 4,068 | yes / no / no | 3.331 |
.giats |
0x1a1000 |
1686528 |
512 | 280 | yes / no / no | 0.2287 |
.tls |
0x1a2000 |
1687040 |
1,024 | 777 | yes / yes / no | 0.0112 |
.00cfg |
0x1a3000 |
1688064 |
512 | 373 | yes / no / no | 0.4117 |
.rsrc |
0x1a4000 |
1688576 |
1,536 | 1,482 | yes / no / no | 4.0243 |
.reloc |
0x1a5000 |
1690112 |
7,168 | 6,816 | yes / no / no | 2.2486 |
PE mitigation flags
| Flag | Present |
|---|---|
| dynamic_base | true |
| high_entropy_va | true |
| nx_compat | true |
| guard_cf_flag | true |
| no_seh | false |
| appcontainer | false |
| force_integrity | false |
Extracted native interfaces
| Name | Command | Notification | Description |
|---|---|---|---|
AddAppInfoToPersistence |
True | False | Adds App Information to persistence, if persistence file not present it will be created If App Information exists already, it will be Updated. |
DeleteAppInfoFromPersistence |
True | False | Deletes App Information from persistence if persistence exists and it contains the app entry. |
GetAllAppInfoFromPersistence |
True | False | Fetches information for all apps from persistence. |
Evidence
Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.