nvvad64v.sys
1635fe7969dabb11902c9906432affd462e595c4b8d81d69fb55f2ff4824bc7b
Identity
| Property | Value |
|---|---|
| Architecture | AMD64 |
| Source size | 62,696 bytes |
| Preferred image base | 0x140000000 |
| Entry RVA | 0xc000 |
| Imports / exports | 44 / 0 |
| Exception/unwind ranges | 129 |
| Executable raw bytes | 28,160 |
Physical paths:
Installer2\VirtualAudio.Driver.{7C43349F-A7F0-4D47-8E5D-C03E063D8955}\nvvad64v.sys
Decompilation coverage
Complete: 172 successful reconstructions, 0 failures, 172 attempted entries, 172 reported discovered entries.
Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.
Sections
| Section | RVA | Raw offset | Raw bytes | Virtual bytes | R / W / X | Entropy |
|---|---|---|---|---|---|---|
.text |
0x1000 |
1024 |
8,192 | 7,920 | yes / no / yes | 5.6992 |
.rdata |
0x3000 |
9216 |
6,144 | 5,764 | yes / no / no | 4.3916 |
.data |
0x5000 |
15360 |
2,560 | 2,184 | yes / yes / no | 1.8988 |
.pdata |
0x6000 |
17920 |
2,048 | 1,548 | yes / no / no | 3.5052 |
PAGE |
0x7000 |
19968 |
17,920 | 17,625 | yes / no / yes | 5.9929 |
INIT |
0xc000 |
37888 |
2,048 | 1,644 | yes / no / yes | 4.4898 |
.rsrc |
0xd000 |
39936 |
2,048 | 1,920 | yes / no / no | 3.2972 |
.reloc |
0xe000 |
41984 |
512 | 436 | yes / no / no | 4.8726 |
PE mitigation flags
| Flag | Present |
|---|---|
| dynamic_base | true |
| high_entropy_va | true |
| nx_compat | true |
| guard_cf_flag | true |
| no_seh | false |
| appcontainer | false |
| force_integrity | true |
Evidence
Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.