DarkModeCheck.exe
9c0863c1872266fd4700d303e866fb2ed8321862800b0f0de9cd05c6addb887c
Identity
| Property | Value |
|---|---|
| Architecture | AMD64 |
| Source size | 263,792 bytes |
| Preferred image base | 0x140000000 |
| Entry RVA | 0xb120 |
| Imports / exports | 97 / 0 |
| Exception/unwind ranges | 759 |
| Executable raw bytes | 154,112 |
Physical paths:
NVIDIA App\DarkModeCheck.exe
Decompilation coverage
Complete: 879 successful reconstructions, 0 failures, 879 attempted entries, 879 reported discovered entries.
Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.
Sections
| Section | RVA | Raw offset | Raw bytes | Virtual bytes | R / W / X | Entropy |
|---|---|---|---|---|---|---|
.text |
0x1000 |
1024 |
154,112 | 153,788 | yes / no / yes | 6.4775 |
.rdata |
0x27000 |
155136 |
79,872 | 79,798 | yes / no / no | 5.0904 |
.data |
0x3b000 |
235008 |
5,632 | 12,044 | yes / yes / no | 3.1795 |
.pdata |
0x3e000 |
240640 |
9,216 | 9,108 | yes / no / no | 5.3609 |
_RDATA |
0x41000 |
249856 |
512 | 252 | yes / no / no | 1.9315 |
.rsrc |
0x42000 |
250368 |
512 | 480 | yes / no / no | 4.7005 |
.reloc |
0x43000 |
250880 |
2,560 | 2,508 | yes / no / no | 5.3729 |
PE mitigation flags
| Flag | Present |
|---|---|
| dynamic_base | true |
| high_entropy_va | true |
| nx_compat | true |
| guard_cf_flag | true |
| no_seh | false |
| appcontainer | false |
| force_integrity | false |
Evidence
Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.