SystemDataCollectorsContainerPlugin_x64.dll
0fefcd9d1b06470cf19c304f33514f6ed65ca19d85d6a3637b68135cbd87a5d2
Identity
| Property | Value |
|---|---|
| Architecture | AMD64 |
| Source size | 644,208 bytes |
| Preferred image base | 0x180000000 |
| Entry RVA | 0x422e0 |
| Imports / exports | 160 / 90 |
| Exception/unwind ranges | 1,937 |
| Executable raw bytes | 444,416 |
Physical paths:
FrameViewSDK\FvContainer\plugins\SystemDataCollectorsContainerPlugin_x64.dll
Decompilation coverage
Complete: 2,591 successful reconstructions, 0 failures, 2,591 attempted entries, 2,591 reported discovered entries.
Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.
Sections
| Section | RVA | Raw offset | Raw bytes | Virtual bytes | R / W / X | Entropy |
|---|---|---|---|---|---|---|
.text |
0x1000 |
1024 |
444,416 | 444,332 | yes / no / yes | 6.4442 |
.rdata |
0x6e000 |
445440 |
140,288 | 140,026 | yes / no / no | 5.1274 |
.data |
0x91000 |
585728 |
19,456 | 56,324 | yes / yes / no | 4.6571 |
.pdata |
0x9f000 |
605184 |
23,552 | 23,244 | yes / no / no | 5.7093 |
_RDATA |
0xa5000 |
628736 |
512 | 500 | yes / no / no | 4.179 |
.rsrc |
0xa6000 |
629248 |
512 | 248 | yes / no / no | 2.5211 |
.reloc |
0xa7000 |
629760 |
4,096 | 4,064 | yes / no / no | 5.4357 |
PE mitigation flags
| Flag | Present |
|---|---|
| dynamic_base | true |
| high_entropy_va | true |
| nx_compat | true |
| guard_cf_flag | true |
| no_seh | false |
| appcontainer | false |
| force_integrity | false |
Evidence
Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.