nvvad32v.sys
bf036afb14ced98ef68a3947230f58b565a14dce8c45367b6229a3b1187ccb22
Identity
| Property | Value |
|---|---|
| Architecture | x86 |
| Source size | 55,528 bytes |
| Preferred image base | 0x400000 |
| Entry RVA | 0xa000 |
| Imports / exports | 50 / 0 |
| Exception/unwind ranges | 0 |
| Executable raw bytes | 25,600 |
Physical paths:
Installer2\VirtualAudio.Driver.{7C43349F-A7F0-4D47-8E5D-C03E063D8955}\nvvad32v.sys
Decompilation coverage
Complete: 182 successful reconstructions, 0 failures, 182 attempted entries, 182 reported discovered entries.
Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.
Sections
| Section | RVA | Raw offset | Raw bytes | Virtual bytes | R / W / X | Entropy |
|---|---|---|---|---|---|---|
.text |
0x1000 |
1024 |
6,656 | 6,294 | yes / no / yes | 5.7352 |
.rdata |
0x3000 |
7680 |
3,072 | 3,052 | yes / no / no | 5.043 |
.data |
0x4000 |
10752 |
1,536 | 1,432 | yes / yes / no | 2.6559 |
PAGE |
0x5000 |
12288 |
17,408 | 16,981 | yes / no / yes | 6.0253 |
INIT |
0xa000 |
29696 |
1,536 | 1,506 | yes / no / yes | 5.3696 |
.rsrc |
0xb000 |
31232 |
2,048 | 1,920 | yes / no / no | 3.2972 |
.reloc |
0xc000 |
33280 |
2,048 | 1,624 | yes / no / no | 5.8117 |
PE mitigation flags
| Flag | Present |
|---|---|
| dynamic_base | true |
| high_entropy_va | false |
| nx_compat | true |
| guard_cf_flag | true |
| no_seh | true |
| appcontainer | false |
| force_integrity | true |
Evidence
Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.