ddETWExternal.dll
676db6bd39cd2cf854e768c8da0ec5b01c2eb980f4df95f6409531b5d513f2b3
Identity
| Property | Value |
|---|---|
| Architecture | AMD64 |
| Source size | 15,984 bytes |
| Preferred image base | 0x180000000 |
| Entry RVA | 0x0 |
| Imports / exports | 0 / 0 |
| Exception/unwind ranges | 0 |
| Executable raw bytes | 0 |
Physical paths:
FrameViewSDK\etw_nv\ddETWExternal.dll
Decompilation coverage
Complete: 0 successful reconstructions, 0 failures, 0 attempted entries, 0 reported discovered entries.
Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.
Sections
| Section | RVA | Raw offset | Raw bytes | Virtual bytes | R / W / X | Entropy |
|---|---|---|---|---|---|---|
.rdata |
0x1000 |
512 |
512 | 112 | yes / no / no | 0.9852 |
.rsrc |
0x2000 |
1024 |
4,608 | 4,520 | yes / no / no | 3.606 |
PE mitigation flags
| Flag | Present |
|---|---|
| dynamic_base | true |
| high_entropy_va | true |
| nx_compat | true |
| guard_cf_flag | false |
| no_seh | false |
| appcontainer | false |
| force_integrity | false |
Evidence
Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.