_nvspserviceplugin64.dll
8f7587a1610874e9263fb5ab6890875f1527c4fc9e62c82c0746958416ba76fe
Identity
| Property | Value |
|---|---|
| Architecture | AMD64 |
| Source size | 2,026,096 bytes |
| Preferred image base | 0x180000000 |
| Entry RVA | 0x1750 |
| Imports / exports | 237 / 1 |
| Exception/unwind ranges | 4,518 |
| Executable raw bytes | 1,617,408 |
Physical paths:
NVIDIA App\ShadowPlay\Plugins\LocalSystem\_nvspserviceplugin64.dll
Decompilation coverage
Complete: 8,595 successful reconstructions, 0 failures, 8,595 attempted entries, 8,595 reported discovered entries.
Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.
Sections
| Section | RVA | Raw offset | Raw bytes | Virtual bytes | R / W / X | Entropy |
|---|---|---|---|---|---|---|
.text |
0x1000 |
1024 |
1,617,408 | 1,617,049 | yes / no / yes | 5.3532 |
.rdata |
0x18c000 |
1618432 |
292,352 | 292,237 | yes / no / no | 4.6447 |
.data |
0x1d4000 |
1910784 |
14,336 | 29,184 | yes / yes / no | 2.8998 |
.pdata |
0x1dc000 |
1925120 |
60,416 | 59,928 | yes / no / no | 5.7785 |
.idata |
0x1eb000 |
1985536 |
12,800 | 12,326 | yes / no / no | 3.7921 |
.gfids |
0x1ef000 |
1998336 |
4,608 | 4,104 | yes / no / no | 3.025 |
.tls |
0x1f1000 |
2002944 |
1,024 | 871 | yes / yes / no | 0.0112 |
.00cfg |
0x1f2000 |
2003968 |
512 | 373 | yes / no / no | 0.3467 |
.rsrc |
0x1f3000 |
2004480 |
1,024 | 952 | yes / no / no | 3.1521 |
.reloc |
0x1f4000 |
2005504 |
10,240 | 9,876 | yes / no / no | 3.0169 |
PE mitigation flags
| Flag | Present |
|---|---|
| dynamic_base | true |
| high_entropy_va | true |
| nx_compat | true |
| guard_cf_flag | true |
| no_seh | false |
| appcontainer | false |
| force_integrity | false |
Evidence
Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.