• Welcome to TechPowerUp Forums, Guest! Please check out our forum guidelines for info related to our community.
  • The forums have been upgraded with support for dark mode. By default it will follow the setting on your system/browser. You may override it by scrolling to the end of the page and clicking the gears icon.

NVflash FALCON_GSP ready to be used.

Ah, this certificate was leaked in the NVIDIA hack. Still not sure why you used it to sign the exe. The signing date is today, while the NVFlash binary itself is from at least 1 year ago?
 
Ah, this certificate was leaked in the NVIDIA hack. Still not sure why you used it to sign the exe. The signing date is today, while the NVFlash binary itself is from at least 1 year ago?
It may have leaked, but it cannot be cancelled. :)
 
Tested it in a VM, not seeing any malicious activity. No filesystem writes. However, the VM has no NVIDIA GPU/drivers, so any such activity could be executed only later during the program, at a point that's never reached in my VM/Virustotal
 
Tested it in a VM, not seeing any malicious activity. No filesystem writes. However, the VM has no NVIDIA GPU/drivers, so any such activity could be executed only later during the program, at a point that's never reached in my VM/Virustotal
At some point someones gotta test it on real hardware. I can't really afford that frankly, but maybe someone will be braver than I.
 
At some point someones gotta test it on real hardware. I can't really afford that frankly, but maybe someone will be braver than I.
whether or not that works, you don't need to use anything like this that is related in any way to leaking nvidia stuff (certificates and whatnot). you can achieve this simply by using human ingenuity coupled with some free tools.
just rack your brains a little, the solution is already within everyone's reach.
 
At some point someones gotta test it on real hardware. I can't really afford that frankly, but maybe someone will be braver than I.
Test it on real hardware:
GPU mismatch.
Flash a Tesla in a Quadro.
It's not possible, nvidia won't allow it.

whether or not that works, you don't need to use anything like this that is related in any way to leaking nvidia stuff (certificates and whatnot). you can achieve this simply by using human ingenuity coupled with some free tools.
just rack your brains a little, the solution is already within everyone's reach.
You simply did not have time to try to flash parts from other video cards. This is interesting.
 
Last edited:
whether or not that works, you don't need to use anything like this that is related in any way to leaking nvidia stuff (certificates and whatnot). you can achieve this simply by using human ingenuity coupled with some free tools.
just rack your brains a little, the solution is already within everyone's reach.
If you are refering to simple hardware flashers, been there, played with that and got the brick and subsequent unbrick to prove it.

If you mean something else, this vagueness is silly. Say what you mean.
 
Nice!

I compared both binaries, there is definitely no virus payload inside the version posted here.
While large parts of the files are identical, it looks like the GSP version contains fewer (!) code or data
 
The IPs in my section, belong to NVIDIA's contact server for FTP transfer between headless cards.
And to request generation of a signature.

There can be a possibility to make signatures with nvflash, but its main purpose was initially the request and verification.
It will be good to decompile ~ but idk if useful for access.

If this is any Nvidia certificate or a self made - i could verify.
I didnt want to sign the exe, because Nvidia wasn't insisting on having such. Just fixed PE header past modification, to not mess with the rest.
And also i wouldn't be allowed to either. Else i maybe could/should consider from now.

In any case, thank you for publishing - but given this is not your edit
It would be good to mark it at such somewhere. Maybe it is and i am wrong
Please just add your name and do not advertise ontop of Nvidia's property :)

No websites, no discord links
Allowed is one thing, moral is another.
That's my personal request to the OP.
Else thank you for the upload.
 
To know what to claim for, you need to understand technology.
These IP addresses are certificate verification. :(
Antiviruses write everything that this is a clean program.

I did not say it was malware, I pointed out that it connects to more servers than the other tools :)

I do like that we're being given options :)
 
Yeah, we started off wrong. My sincere apologies for that (internet translators are very poor, sadly).

Thank you for your contribution here.
 
What changes to nvflash.exe have been made here?

My understanding from reading the other threads (please forgive me if I am wrong), Wotwow found a nvflash in a OEM updater possibly by Asus which bypassed certain things?

So why has it been resigned and not shared in its original state?
 
Back
Top