7z.exe
3a48b1cb3d10cb76271625913c64ced4fa91f62c5c430af36fb567704b01b12f
Identity
| Property | Value |
|---|---|
| Architecture | AMD64 |
| Source size | 556,144 bytes |
| Preferred image base | 0x140000000 |
| Entry RVA | 0x4ffc0 |
| Imports / exports | 154 / 0 |
| Exception/unwind ranges | 1,618 |
| Executable raw bytes | 408,064 |
Physical paths:
NVIDIA App\7z.exe
Decompilation coverage
Complete: 2,427 successful reconstructions, 0 failures, 2,427 attempted entries, 2,427 reported discovered entries.
Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.
Sections
| Section | RVA | Raw offset | Raw bytes | Virtual bytes | R / W / X | Entropy |
|---|---|---|---|---|---|---|
.text |
0x1000 |
1024 |
408,064 | 408,030 | yes / no / yes | 6.4292 |
.rdata |
0x65000 |
409088 |
105,472 | 105,418 | yes / no / no | 5.5351 |
.data |
0x7f000 |
514560 |
5,120 | 23,204 | yes / yes / no | 2.2252 |
.pdata |
0x85000 |
519680 |
19,456 | 19,416 | yes / no / no | 5.6959 |
.fptable |
0x8a000 |
539136 |
512 | 256 | yes / yes / no | 0.0 |
.rsrc |
0x8b000 |
539648 |
2,048 | 1,976 | yes / no / no | 4.9358 |
.reloc |
0x8c000 |
541696 |
4,096 | 3,620 | yes / no / no | 5.2084 |
PE mitigation flags
| Flag | Present |
|---|---|
| dynamic_base | true |
| high_entropy_va | true |
| nx_compat | true |
| guard_cf_flag | true |
| no_seh | false |
| appcontainer | false |
| force_integrity | false |
Evidence
Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.