nvvad64a.sys
0cdd4404f6878daa2e28dd9ae7ac51974b56c686488fdaba245fc5759cdfb9d2
Identity
| Property | Value |
|---|---|
| Architecture | ARM64 |
| Source size | 64,232 bytes |
| Preferred image base | 0x140000000 |
| Entry RVA | 0xe000 |
| Imports / exports | 44 / 0 |
| Exception/unwind ranges | 95 |
| Executable raw bytes | 31,744 |
Physical paths:
Installer2\VirtualAudio.Driver.{7C43349F-A7F0-4D47-8E5D-C03E063D8955}\nvvad64a.sys
Decompilation coverage
Complete: 171 successful reconstructions, 0 failures, 171 attempted entries, 171 reported discovered entries.
Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.
Sections
| Section | RVA | Raw offset | Raw bytes | Virtual bytes | R / W / X | Entropy |
|---|---|---|---|---|---|---|
.text |
0x1000 |
1024 |
8,704 | 8,576 | yes / no / yes | 6.0056 |
.rdata |
0x4000 |
9728 |
5,120 | 4,720 | yes / no / no | 4.211 |
.data |
0x6000 |
14848 |
2,560 | 2,144 | yes / yes / no | 1.9083 |
.pdata |
0x7000 |
17408 |
1,024 | 760 | yes / no / no | 3.7239 |
PAGE |
0x8000 |
18432 |
20,992 | 20,873 | yes / no / yes | 6.1902 |
INIT |
0xe000 |
39424 |
2,048 | 1,634 | yes / no / yes | 4.4143 |
.rsrc |
0xf000 |
41472 |
2,048 | 1,920 | yes / no / no | 3.2959 |
.reloc |
0x10000 |
43520 |
512 | 424 | yes / no / no | 4.7709 |
PE mitigation flags
| Flag | Present |
|---|---|
| dynamic_base | true |
| high_entropy_va | true |
| nx_compat | true |
| guard_cf_flag | true |
| no_seh | false |
| appcontainer | false |
| force_integrity | true |
Evidence
Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.