Downloader.dll
b12df892d47aaeb73f30b9f655a1f7c39541193bc6ec3546b6e982f4e78b2bbe
Identity
| Property | Value |
|---|---|
| Architecture | AMD64 |
| Source size | 5,425,776 bytes |
| Preferred image base | 0x180000000 |
| Entry RVA | 0x20e0 |
| Imports / exports | 550 / 1 |
| Exception/unwind ranges | 14,531 |
| Executable raw bytes | 4,298,240 |
Physical paths:
NVIDIA App\Plugins\localuser\NvApp\Downloader.dll
Decompilation coverage
Complete with errors: 27,505 successful reconstructions, 5 failures, 27,510 attempted entries, 27,510 reported discovered entries.
Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.
Sections
| Section | RVA | Raw offset | Raw bytes | Virtual bytes | R / W / X | Entropy |
|---|---|---|---|---|---|---|
.text |
0x1000 |
1024 |
4,298,240 | 4,298,230 | yes / no / yes | 5.3225 |
.rdata |
0x41b000 |
4299264 |
765,440 | 765,041 | yes / no / no | 5.149 |
.data |
0x4d6000 |
5064704 |
63,488 | 86,057 | yes / yes / no | 3.8347 |
.pdata |
0x4ec000 |
5128192 |
192,512 | 192,108 | yes / no / no | 6.0246 |
.idata |
0x51b000 |
5320704 |
34,816 | 34,635 | yes / no / no | 4.2883 |
.gfids |
0x524000 |
5355520 |
30,208 | 30,180 | yes / no / no | 4.0551 |
.giats |
0x52c000 |
5385728 |
512 | 288 | yes / no / no | 0.2787 |
.tls |
0x52d000 |
5386240 |
1,024 | 777 | yes / yes / no | 0.0112 |
.00cfg |
0x52e000 |
5387264 |
512 | 373 | yes / no / no | 0.4319 |
.rsrc |
0x52f000 |
5387776 |
2,048 | 1,546 | yes / no / no | 3.3392 |
.reloc |
0x530000 |
5389824 |
25,600 | 25,522 | yes / no / no | 3.0567 |
PE mitigation flags
| Flag | Present |
|---|---|
| dynamic_base | true |
| high_entropy_va | true |
| nx_compat | true |
| guard_cf_flag | true |
| no_seh | false |
| appcontainer | false |
| force_integrity | false |
Extracted native interfaces
| Name | Command | Notification | Description |
|---|---|---|---|
GetFirstBootTimeAfterInstall |
True | False | |
GetMaxDaysBetweenReleases |
True | False | |
CheckForUpdate |
True | False | |
GetLatestUpdateCheckTime |
True | False | |
GetTaskDownloadStatus |
True | False | |
GetDownloadStatus |
True | False | |
StartDownload |
True | False | |
StartDownloadAndPostProcess |
True | False | |
ScheduleDownloadAndPostProcess |
True | False | |
PauseDownload |
True | False | |
ResumeDownload |
True | False | |
ResumeDownloadAndPostProcess |
True | False | |
StopDownload |
True | False | |
GetPostProcessingStatus |
True | False | |
StartPostProcessing |
True | False | |
TriggerAutoUpdate |
True | False | |
RegisterCheckForUpdateProgress |
True | False | |
RegisterDownloadProgress |
True | False | |
RegisterPostProcessingProgress |
True | False | |
RegisterAutoUpdateProgress |
True | False | |
CreateProfileFromSourceProfile |
True | False | |
GetUpdateChannel |
True | False | returns the udpate channel information |
SetUpdateChannel |
True | False | sets the udpate channel information |
Evidence
Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.