API tools faq
paste
Advertisement
Guest User

Windows Error

a guest
May 22nd, 2014
72
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 154.43 KB | None | 0 0
raw download clone embed print report
  1.  
  2. Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
  3. Copyright (c) Microsoft Corporation. All rights reserved.
  4.  
  5.  
  6. Loading Dump File [C:\Windows\Minidump\052214-9796-01.dmp]
  7. Mini Kernel Dump File: Only registers and stack trace are available
  8.  
  9. Symbol search path is: srv*c:\cache*http://msdl.microsoft.com/download/symbols
  10. Executable search path is:
  11. Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
  12. Product: WinNt, suite: TerminalServer SingleUserTS Personal
  13. Built by: 7601.18229.amd64fre.win7sp1_gdr.130801-1533
  14. Machine Name:
  15. Kernel base = 0xfffff800`03453000 PsLoadedModuleList = 0xfffff800`036966d0
  16. Debug session time: Thu May 22 19:31:40.291 2014 (UTC + 3:00)
  17. System Uptime: 0 days 23:54:28.134
  18. Loading Kernel Symbols
  19. ...............................................................
  20. ................................................................
  21. .................................................
  22. Loading User Symbols
  23. Loading unloaded module list
  24. ................
  25. *******************************************************************************
  26. * *
  27. * Bugcheck Analysis *
  28. * *
  29. *******************************************************************************
  30.  
  31. Use !analyze -v to get detailed debugging information.
  32.  
  33. BugCheck 3B, {c0000005, fffff800034dcf9a, fffff880209bce10, 0}
  34.  
  35. Probably caused by : ntkrnlmp.exe ( nt!KiSystemServiceHandler+7c )
  36.  
  37. Followup: MachineOwner
  38. ---------
  39.  
  40. 0: kd> !analyze -v
  41. *******************************************************************************
  42. * *
  43. * Bugcheck Analysis *
  44. * *
  45. *******************************************************************************
  46.  
  47. SYSTEM_SERVICE_EXCEPTION (3b)
  48. An exception happened while executing a system service routine.
  49. Arguments:
  50. Arg1: 00000000c0000005, Exception code that caused the bugcheck
  51. Arg2: fffff800034dcf9a, Address of the instruction which caused the bugcheck
  52. Arg3: fffff880209bce10, Address of the context record for the exception that caused the bugcheck
  53. Arg4: 0000000000000000, zero.
  54.  
  55. Debugging Details:
  56. ------------------
  57.  
  58.  
  59. EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
  60.  
  61. FAULTING_IP:
  62. nt!IopCompleteRequest+2a
  63. fffff800`034dcf9a 498b39 mov rdi,qword ptr [r9]
  64.  
  65. CONTEXT: fffff880209bce10 -- (.cxr 0xfffff880209bce10)
  66. rax=fffff880209bd958 rbx=fffffa800d8fe920 rcx=fffffa800d8fe998
  67. rdx=fffff880209bd950 rsi=fffffa8018879460 rdi=0000000000000100
  68. rip=fffff800034dcf9a rsp=fffff880209bd7f0 rbp=0000000000000000
  69. r8=fffff880209bd8f8 r9=0000000000000000 r10=fffffa800d8fe998
  70. r11=fffff800034dcf70 r12=0000000000000001 r13=fffff880209bd8f0
  71. r14=fffffa8018879410 r15=fffff880209bdae0
  72. iopl=0 nv up ei ng nz na po nc
  73. cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010286
  74. nt!IopCompleteRequest+0x2a:
  75. fffff800`034dcf9a 498b39 mov rdi,qword ptr [r9] ds:002b:00000000`00000000=????????????????
  76. Resetting default scope
  77.  
  78. CUSTOMER_CRASH_COUNT: 1
  79.  
  80. DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
  81.  
  82. BUGCHECK_STR: 0x3B
  83.  
  84. PROCESS_NAME: nvstreamsvc.ex
  85.  
  86. CURRENT_IRQL: 1
  87.  
  88. LAST_CONTROL_TRANSFER: from 0000000000000000 to fffff800034dcf9a
  89.  
  90. STACK_TEXT:
  91. fffff880`209bc548 fffff800`034c8129 : 00000000`0000003b 00000000`c0000005 fffff800`034dcf9a fffff880`209bce10 : nt!KeBugCheckEx
  92. fffff880`209bc550 fffff800`034c7a7c : fffff880`209bd5b8 fffff880`209bce10 00000000`00000000 fffff800`034f3c50 : nt!KiBugCheckDispatch+0x69
  93. fffff880`209bc690 fffff800`034f375d : fffff800`036eb378 00000000`00000000 fffff800`03453000 fffff880`209bd5b8 : nt!KiSystemServiceHandler+0x7c
  94. fffff880`209bc6d0 fffff800`034f2535 : fffff800`036186c4 fffff880`209bc748 fffff880`209bd5b8 fffff800`03453000 : nt!RtlpExecuteHandlerForException+0xd
  95. fffff880`209bc700 fffff800`035034e1 : fffff880`209bd5b8 fffff880`209bce10 fffff880`00000000 00000000`00000100 : nt!RtlDispatchException+0x415
  96. fffff880`209bcde0 fffff800`034c8202 : fffff880`209bd5b8 fffffa80`0d8fe920 fffff880`209bd660 fffffa80`18879460 : nt!KiDispatchException+0x135
  97. fffff880`209bd480 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiExceptionDispatch+0xc2
  98.  
  99.  
  100. STACK_COMMAND: kb
  101.  
  102. FOLLOWUP_IP:
  103. nt!KiSystemServiceHandler+7c
  104. fffff800`034c7a7c b801000000 mov eax,1
  105.  
  106. SYMBOL_STACK_INDEX: 2
  107.  
  108. SYMBOL_NAME: nt!KiSystemServiceHandler+7c
  109.  
  110. FOLLOWUP_NAME: MachineOwner
  111.  
  112. MODULE_NAME: nt
  113.  
  114. IMAGE_NAME: ntkrnlmp.exe
  115.  
  116. DEBUG_FLR_IMAGE_TIMESTAMP: 51fb06cd
  117.  
  118. FAILURE_BUCKET_ID: X64_0x3B_nt!KiSystemServiceHandler+7c
  119.  
  120. BUCKET_ID: X64_0x3B_nt!KiSystemServiceHandler+7c
  121.  
  122. Followup: MachineOwner
  123. ---------
  124.  
  125. 0: kd> Imv
  126. ^ Syntax error in 'Imv'
  127. 0: kd> lmv
  128. start end module name
  129. fffff800`00b99000 fffff800`00ba3000 kdcom (deferred)
  130. Mapped memory image file: c:\cache\kdcom.dll\4D4D8061a000\kdcom.dll
  131. Image path: kdcom.dll
  132. Image name: kdcom.dll
  133. Timestamp: Sat Feb 05 18:52:49 2011 (4D4D8061)
  134. CheckSum: 0000F59B
  135. ImageSize: 0000A000
  136. File version: 6.1.7601.17556
  137. Product version: 6.1.7601.17556
  138. File flags: 0 (Mask 3F)
  139. File OS: 40004 NT Win32
  140. File type: 3.A Driver
  141. File date: 00000000.00000000
  142. Translations: 0409.04b0
  143. CompanyName: Microsoft Corporation
  144. ProductName: Microsoft® Windows® Operating System
  145. InternalName: kdcom.dll
  146. OriginalFilename: kdcom.dll
  147. ProductVersion: 6.1.7601.17556
  148. FileVersion: 6.1.7601.17556 (win7sp1_gdr.110204-2120)
  149. FileDescription: Serial Kernel Debugger
  150. LegalCopyright: © Microsoft Corporation. All rights reserved.
  151. fffff800`0340a000 fffff800`03453000 hal (deferred)
  152. Mapped memory image file: c:\cache\hal.dll\4CE7C66949000\hal.dll
  153. Image path: hal.dll
  154. Image name: hal.dll
  155. Timestamp: Sat Nov 20 15:00:25 2010 (4CE7C669)
  156. CheckSum: 000404C3
  157. ImageSize: 00049000
  158. File version: 6.1.7601.17514
  159. Product version: 6.1.7601.17514
  160. File flags: 0 (Mask 3F)
  161. File OS: 40004 NT Win32
  162. File type: 2.0 Dll
  163. File date: 00000000.00000000
  164. Translations: 0409.04b0
  165. CompanyName: Microsoft Corporation
  166. ProductName: Microsoft® Windows® Operating System
  167. InternalName: hal.dll
  168. OriginalFilename: hal.dll
  169. ProductVersion: 6.1.7601.17514
  170. FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
  171. FileDescription: Hardware Abstraction Layer DLL
  172. LegalCopyright: © Microsoft Corporation. All rights reserved.
  173. fffff800`03453000 fffff800`03a39000 nt (pdb symbols) c:\cache\ntkrnlmp.pdb\444961FE7BC64E8ABAA9F36D9855C08C2\ntkrnlmp.pdb
  174. Loaded symbol image file: ntkrnlmp.exe
  175. Mapped memory image file: c:\cache\ntoskrnl.exe\51FB06CD5e6000\ntoskrnl.exe
  176. Image path: ntkrnlmp.exe
  177. Image name: ntkrnlmp.exe
  178. Timestamp: Fri Aug 02 04:09:33 2013 (51FB06CD)
  179. CheckSum: 0055A245
  180. ImageSize: 005E6000
  181. File version: 6.1.7601.18229
  182. Product version: 6.1.7601.18229
  183. File flags: 0 (Mask 3F)
  184. File OS: 40004 NT Win32
  185. File type: 1.0 App
  186. File date: 00000000.00000000
  187. Translations: 0409.04b0
  188. CompanyName: Microsoft Corporation
  189. ProductName: Microsoft® Windows® Operating System
  190. InternalName: ntkrnlmp.exe
  191. OriginalFilename: ntkrnlmp.exe
  192. ProductVersion: 6.1.7601.18229
  193. FileVersion: 6.1.7601.18229 (win7sp1_gdr.130801-1533)
  194. FileDescription: NT Kernel & System
  195. LegalCopyright: © Microsoft Corporation. All rights reserved.
  196. fffff880`00c00000 fffff880`00c72000 cng (deferred)
  197. Mapped memory image file: c:\cache\cng.sys\4FC987BF72000\cng.sys
  198. Image path: \SystemRoot\System32\Drivers\cng.sys
  199. Image name: cng.sys
  200. Timestamp: Sat Jun 02 06:25:51 2012 (4FC987BF)
  201. CheckSum: 00075788
  202. ImageSize: 00072000
  203. File version: 6.1.7601.17856
  204. Product version: 6.1.7601.17856
  205. File flags: 0 (Mask 3F)
  206. File OS: 40004 NT Win32
  207. File type: 3.7 Driver
  208. File date: 00000000.00000000
  209. Translations: 0409.04b0
  210. CompanyName: Microsoft Corporation
  211. ProductName: Microsoft® Windows® Operating System
  212. InternalName: cng.sys
  213. OriginalFilename: cng.sys
  214. ProductVersion: 6.1.7601.17856
  215. FileVersion: 6.1.7601.17856 (win7sp1_gdr.120601-1505)
  216. FileDescription: Kernel Cryptography, Next Generation
  217. LegalCopyright: © Microsoft Corporation. All rights reserved.
  218. fffff880`00c8a000 fffff880`00cd9000 mcupdate_GenuineIntel (deferred)
  219. Mapped memory image file: c:\cache\mcupdate_GenuineIntel.dll\4CE7C7374f000\mcupdate_GenuineIntel.dll
  220. Image path: \SystemRoot\system32\mcupdate_GenuineIntel.dll
  221. Image name: mcupdate_GenuineIntel.dll
  222. Timestamp: Sat Nov 20 15:03:51 2010 (4CE7C737)
  223. CheckSum: 0004F97E
  224. ImageSize: 0004F000
  225. File version: 6.1.7601.17514
  226. Product version: 6.1.7601.17514
  227. File flags: 0 (Mask 3F)
  228. File OS: 40004 NT Win32
  229. File type: 3.A Driver
  230. File date: 00000000.00000000
  231. Translations: 0409.04b0
  232. CompanyName: Microsoft Corporation
  233. ProductName: Microsoft® Windows® Operating System
  234. InternalName: mcupdate.dll
  235. OriginalFilename: mcupdate_GenuineIntel.dll
  236. ProductVersion: 6.1.7601.17514
  237. FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
  238. FileDescription: Intel Microcode Update Library
  239. LegalCopyright: © Microsoft Corporation. All rights reserved.
  240. fffff880`00cd9000 fffff880`00ced000 PSHED (deferred)
  241. Mapped memory image file: c:\cache\PSHED.dll\4A5BE02714000\PSHED.dll
  242. Image path: \SystemRoot\system32\PSHED.dll
  243. Image name: PSHED.dll
  244. Timestamp: Tue Jul 14 04:32:23 2009 (4A5BE027)
  245. CheckSum: 0000F762
  246. ImageSize: 00014000
  247. File version: 6.1.7600.16385
  248. Product version: 6.1.7600.16385
  249. File flags: 0 (Mask 3F)
  250. File OS: 40004 NT Win32
  251. File type: 3.7 Driver
  252. File date: 00000000.00000000
  253. Translations: 0409.04b0
  254. CompanyName: Microsoft Corporation
  255. ProductName: Microsoft® Windows® Operating System
  256. InternalName: pshed.dll
  257. OriginalFilename: pshed.dll
  258. ProductVersion: 6.1.7600.16385
  259. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  260. FileDescription: Platform Specific Hardware Error Driver
  261. LegalCopyright: © Microsoft Corporation. All rights reserved.
  262. fffff880`00ced000 fffff880`00d4b000 CLFS (deferred)
  263. Mapped memory image file: c:\cache\CLFS.SYS\4A5BC11D5e000\CLFS.SYS
  264. Image path: \SystemRoot\system32\CLFS.SYS
  265. Image name: CLFS.SYS
  266. Timestamp: Tue Jul 14 02:19:57 2009 (4A5BC11D)
  267. CheckSum: 00065C46
  268. ImageSize: 0005E000
  269. File version: 6.1.7600.16385
  270. Product version: 6.1.7600.16385
  271. File flags: 0 (Mask 3F)
  272. File OS: 40004 NT Win32
  273. File type: 3.7 Driver
  274. File date: 00000000.00000000
  275. Translations: 0000.04b0
  276. CompanyName: Microsoft Corporation
  277. ProductName: Microsoft® Windows® Operating System
  278. InternalName: clfs.sys
  279. OriginalFilename: Clfs.Sys
  280. ProductVersion: 6.1.7600.16385
  281. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  282. FileDescription: Common Log File System Driver
  283. LegalCopyright: © Microsoft Corporation. All rights reserved.
  284. fffff880`00d4b000 fffff880`00d55000 msisadrv (deferred)
  285. Mapped memory image file: c:\cache\msisadrv.sys\4A5BC0FEa000\msisadrv.sys
  286. Image path: \SystemRoot\system32\drivers\msisadrv.sys
  287. Image name: msisadrv.sys
  288. Timestamp: Tue Jul 14 02:19:26 2009 (4A5BC0FE)
  289. CheckSum: 0001320D
  290. ImageSize: 0000A000
  291. File version: 6.1.7600.16385
  292. Product version: 6.1.7600.16385
  293. File flags: 0 (Mask 3F)
  294. File OS: 40004 NT Win32
  295. File type: 3.7 Driver
  296. File date: 00000000.00000000
  297. Translations: 0409.04b0
  298. CompanyName: Microsoft Corporation
  299. ProductName: Microsoft® Windows® Operating System
  300. InternalName: msisadrv.sys
  301. OriginalFilename: msisadrv.sys
  302. ProductVersion: 6.1.7600.16385
  303. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  304. FileDescription: ISA Driver
  305. LegalCopyright: © Microsoft Corporation. All rights reserved.
  306. fffff880`00d55000 fffff880`00d88000 pci (deferred)
  307. Mapped memory image file: c:\cache\pci.sys\4CE7928F33000\pci.sys
  308. Image path: \SystemRoot\system32\drivers\pci.sys
  309. Image name: pci.sys
  310. Timestamp: Sat Nov 20 11:19:11 2010 (4CE7928F)
  311. CheckSum: 00033150
  312. ImageSize: 00033000
  313. File version: 6.1.7601.17514
  314. Product version: 6.1.7601.17514
  315. File flags: 0 (Mask 3F)
  316. File OS: 40004 NT Win32
  317. File type: 2.0 Dll
  318. File date: 00000000.00000000
  319. Translations: 0409.04b0
  320. CompanyName: Microsoft Corporation
  321. ProductName: Microsoft® Windows® Operating System
  322. InternalName: pci.sys
  323. OriginalFilename: pci.sys
  324. ProductVersion: 6.1.7601.17514
  325. FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
  326. FileDescription: NT Plug and Play PCI Enumerator
  327. LegalCopyright: © Microsoft Corporation. All rights reserved.
  328. fffff880`00d88000 fffff880`00d95000 vdrvroot (deferred)
  329. Mapped memory image file: c:\cache\vdrvroot.sys\4A5BCADBd000\vdrvroot.sys
  330. Image path: \SystemRoot\system32\drivers\vdrvroot.sys
  331. Image name: vdrvroot.sys
  332. Timestamp: Tue Jul 14 03:01:31 2009 (4A5BCADB)
  333. CheckSum: 0000C04B
  334. ImageSize: 0000D000
  335. File version: 6.1.7600.16385
  336. Product version: 6.1.7600.16385
  337. File flags: 0 (Mask 3F)
  338. File OS: 40004 NT Win32
  339. File type: 2.0 Dll
  340. File date: 00000000.00000000
  341. Translations: 0409.04b0
  342. CompanyName: Microsoft Corporation
  343. ProductName: Microsoft® Windows® Operating System
  344. InternalName: vdrvroot.sys
  345. OriginalFilename: vdrvroot.sys
  346. ProductVersion: 6.1.7600.16385
  347. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  348. FileDescription: Virtual Drive Root Enumerator
  349. LegalCopyright: © Microsoft Corporation. All rights reserved.
  350. fffff880`00d95000 fffff880`00d9f000 iusb3hcs (deferred)
  351. Image path: \SystemRoot\system32\DRIVERS\iusb3hcs.sys
  352. Image name: iusb3hcs.sys
  353. Timestamp: Tue Mar 26 18:07:08 2013 (5151C7AC)
  354. CheckSum: 000133D4
  355. ImageSize: 0000A000
  356. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  357. fffff880`00d9f000 fffff880`00dfb000 volmgrx (deferred)
  358. Mapped memory image file: c:\cache\volmgrx.sys\4CE792EB5c000\volmgrx.sys
  359. Image path: \SystemRoot\System32\drivers\volmgrx.sys
  360. Image name: volmgrx.sys
  361. Timestamp: Sat Nov 20 11:20:43 2010 (4CE792EB)
  362. CheckSum: 00065F6D
  363. ImageSize: 0005C000
  364. File version: 6.1.7601.17514
  365. Product version: 6.1.7601.17514
  366. File flags: 0 (Mask 3F)
  367. File OS: 40004 NT Win32
  368. File type: 3.7 Driver
  369. File date: 00000000.00000000
  370. Translations: 0409.04b0
  371. CompanyName: Microsoft Corporation
  372. ProductName: Microsoft® Windows® Operating System
  373. InternalName: volmgrx.sys
  374. OriginalFilename: volmgrx.sys
  375. ProductVersion: 6.1.7601.17514
  376. FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
  377. FileDescription: Volume Manager Extension Driver
  378. LegalCopyright: © Microsoft Corporation. All rights reserved.
  379. fffff880`00e00000 fffff880`00ec2000 Wdf01000 (deferred)
  380. Mapped memory image file: c:\cache\Wdf01000.sys\5010AA89c2000\Wdf01000.sys
  381. Image path: \SystemRoot\system32\drivers\Wdf01000.sys
  382. Image name: Wdf01000.sys
  383. Timestamp: Thu Jul 26 05:25:13 2012 (5010AA89)
  384. CheckSum: 000CDBF1
  385. ImageSize: 000C2000
  386. File version: 1.11.9200.16384
  387. Product version: 1.11.9200.16384
  388. File flags: 0 (Mask 3F)
  389. File OS: 40004 NT Win32
  390. File type: 3.7 Driver
  391. File date: 00000000.00000000
  392. Translations: 0409.04b0
  393. CompanyName: Microsoft Corporation
  394. ProductName: Microsoft® Windows® Operating System
  395. InternalName: wdf01000.sys
  396. OriginalFilename: wdf01000.sys
  397. ProductVersion: 1.11.9200.16384
  398. FileVersion: 1.11.9200.16384 (win8_rtm.120725-1247)
  399. FileDescription: Kernel Mode Driver Framework Runtime
  400. LegalCopyright: © Microsoft Corporation. All rights reserved.
  401. fffff880`00ec7000 fffff880`00f87000 CI (deferred)
  402. Mapped memory image file: c:\cache\CI.dll\4CE7C944c0000\CI.dll
  403. Image path: \SystemRoot\system32\CI.dll
  404. Image name: CI.dll
  405. Timestamp: Sat Nov 20 15:12:36 2010 (4CE7C944)
  406. CheckSum: 000CB0F6
  407. ImageSize: 000C0000
  408. File version: 6.1.7601.17514
  409. Product version: 6.1.7601.17514
  410. File flags: 0 (Mask 3F)
  411. File OS: 40004 NT Win32
  412. File type: 3.7 Driver
  413. File date: 00000000.00000000
  414. Translations: 0409.04b0
  415. CompanyName: Microsoft Corporation
  416. ProductName: Microsoft® Windows® Operating System
  417. InternalName: ci.dll
  418. OriginalFilename: ci.dll
  419. ProductVersion: 6.1.7601.17514
  420. FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
  421. FileDescription: Code Integrity Module
  422. LegalCopyright: © Microsoft Corporation. All rights reserved.
  423. fffff880`00f87000 fffff880`00f97000 WDFLDR (deferred)
  424. Mapped memory image file: c:\cache\WDFLDR.SYS\5010AB7010000\WDFLDR.SYS
  425. Image path: \SystemRoot\system32\drivers\WDFLDR.SYS
  426. Image name: WDFLDR.SYS
  427. Timestamp: Thu Jul 26 05:29:04 2012 (5010AB70)
  428. CheckSum: 00016A5F
  429. ImageSize: 00010000
  430. File version: 1.11.9200.16384
  431. Product version: 1.11.9200.16384
  432. File flags: 0 (Mask 3F)
  433. File OS: 40004 NT Win32
  434. File type: 3.7 Driver
  435. File date: 00000000.00000000
  436. Translations: 0000.04b0
  437. CompanyName: Microsoft Corporation
  438. ProductName: Microsoft® Windows® Operating System
  439. InternalName: wdfldr.sys
  440. OriginalFilename: wdfldr.sys
  441. ProductVersion: 1.11.9200.16384
  442. FileVersion: 1.11.9200.16384 (win8_rtm.120725-1247)
  443. FileDescription: Kernel Mode Driver Framework Loader
  444. LegalCopyright: © Microsoft Corporation. All rights reserved.
  445. fffff880`00f97000 fffff880`00fee000 ACPI (deferred)
  446. Mapped memory image file: c:\cache\ACPI.sys\4CE7929457000\ACPI.sys
  447. Image path: \SystemRoot\system32\drivers\ACPI.sys
  448. Image name: ACPI.sys
  449. Timestamp: Sat Nov 20 11:19:16 2010 (4CE79294)
  450. CheckSum: 0005ACF6
  451. ImageSize: 00057000
  452. File version: 6.1.7601.17514
  453. Product version: 6.1.7601.17514
  454. File flags: 0 (Mask 3F)
  455. File OS: 40004 NT Win32
  456. File type: 3.7 Driver
  457. File date: 00000000.00000000
  458. Translations: 0409.04b0
  459. CompanyName: Microsoft Corporation
  460. ProductName: Microsoft® Windows® Operating System
  461. InternalName: ACPI.sys
  462. OriginalFilename: ACPI.sys
  463. ProductVersion: 6.1.7601.17514
  464. FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
  465. FileDescription: ACPI Driver for NT
  466. LegalCopyright: © Microsoft Corporation. All rights reserved.
  467. fffff880`00fee000 fffff880`00ff7000 WMILIB (deferred)
  468. Mapped memory image file: c:\cache\WMILIB.SYS\4A5BC1179000\WMILIB.SYS
  469. Image path: \SystemRoot\system32\drivers\WMILIB.SYS
  470. Image name: WMILIB.SYS
  471. Timestamp: Tue Jul 14 02:19:51 2009 (4A5BC117)
  472. CheckSum: 00005007
  473. ImageSize: 00009000
  474. File version: 6.1.7600.16385
  475. Product version: 6.1.7600.16385
  476. File flags: 0 (Mask 3F)
  477. File OS: 40004 NT Win32
  478. File type: 3.7 Driver
  479. File date: 00000000.00000000
  480. Translations: 0409.04b0
  481. CompanyName: Microsoft Corporation
  482. ProductName: Microsoft® Windows® Operating System
  483. InternalName: WmiLib.sys
  484. OriginalFilename: WmiLib.sys
  485. ProductVersion: 6.1.7600.16385
  486. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  487. FileDescription: WMILIB WMI support library Dll
  488. LegalCopyright: © Microsoft Corporation. All rights reserved.
  489. fffff880`01000000 fffff880`01015000 partmgr (deferred)
  490. Mapped memory image file: c:\cache\partmgr.sys\4F641BC115000\partmgr.sys
  491. Image path: \SystemRoot\System32\drivers\partmgr.sys
  492. Image name: partmgr.sys
  493. Timestamp: Sat Mar 17 07:06:09 2012 (4F641BC1)
  494. CheckSum: 0001DFC8
  495. ImageSize: 00015000
  496. File version: 6.1.7601.17796
  497. Product version: 6.1.7601.17796
  498. File flags: 0 (Mask 3F)
  499. File OS: 40004 NT Win32
  500. File type: 3.7 Driver
  501. File date: 00000000.00000000
  502. Translations: 0000.04b0
  503. CompanyName: Microsoft Corporation
  504. ProductName: Microsoft® Windows® Operating System
  505. InternalName: partmgr.sys
  506. OriginalFilename: partmgr.sys
  507. ProductVersion: 6.1.7601.17796
  508. FileVersion: 6.1.7601.17796 (win7sp1_gdr.120316-1742)
  509. FileDescription: Partition Management Driver
  510. LegalCopyright: © Microsoft Corporation. All rights reserved.
  511. fffff880`01015000 fffff880`0101e000 compbatt (deferred)
  512. Mapped memory image file: c:\cache\compbatt.sys\4A5BC3B69000\compbatt.sys
  513. Image path: \SystemRoot\system32\DRIVERS\compbatt.sys
  514. Image name: compbatt.sys
  515. Timestamp: Tue Jul 14 02:31:02 2009 (4A5BC3B6)
  516. CheckSum: 000080E2
  517. ImageSize: 00009000
  518. File version: 6.1.7600.16385
  519. Product version: 6.1.7600.16385
  520. File flags: 0 (Mask 3F)
  521. File OS: 40004 NT Win32
  522. File type: 3.7 Driver
  523. File date: 00000000.00000000
  524. Translations: 0409.04b0
  525. CompanyName: Microsoft Corporation
  526. ProductName: Microsoft® Windows® Operating System
  527. InternalName: compbatt.sys
  528. OriginalFilename: compbatt.sys
  529. ProductVersion: 6.1.7600.16385
  530. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  531. FileDescription: Composite Battery Driver
  532. LegalCopyright: © Microsoft Corporation. All rights reserved.
  533. fffff880`0101e000 fffff880`0102a000 BATTC (deferred)
  534. Mapped memory image file: c:\cache\BATTC.SYS\4A5BC3B5c000\BATTC.SYS
  535. Image path: \SystemRoot\system32\DRIVERS\BATTC.SYS
  536. Image name: BATTC.SYS
  537. Timestamp: Tue Jul 14 02:31:01 2009 (4A5BC3B5)
  538. CheckSum: 000083B1
  539. ImageSize: 0000C000
  540. File version: 6.1.7600.16385
  541. Product version: 6.1.7600.16385
  542. File flags: 0 (Mask 3F)
  543. File OS: 40004 NT Win32
  544. File type: 3.7 Driver
  545. File date: 00000000.00000000
  546. Translations: 0000.04b0
  547. CompanyName: Microsoft Corporation
  548. ProductName: Microsoft® Windows® Operating System
  549. InternalName: battc.sys
  550. OriginalFilename: battc.sys
  551. ProductVersion: 6.1.7600.16385
  552. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  553. FileDescription: Battery Class Driver
  554. LegalCopyright: © Microsoft Corporation. All rights reserved.
  555. fffff880`0102a000 fffff880`0103f000 volmgr (deferred)
  556. Mapped memory image file: c:\cache\volmgr.sys\4CE792A015000\volmgr.sys
  557. Image path: \SystemRoot\system32\drivers\volmgr.sys
  558. Image name: volmgr.sys
  559. Timestamp: Sat Nov 20 11:19:28 2010 (4CE792A0)
  560. CheckSum: 00019F72
  561. ImageSize: 00015000
  562. File version: 6.1.7601.17514
  563. Product version: 6.1.7601.17514
  564. File flags: 0 (Mask 3F)
  565. File OS: 40004 NT Win32
  566. File type: 3.7 Driver
  567. File date: 00000000.00000000
  568. Translations: 0409.04b0
  569. CompanyName: Microsoft Corporation
  570. ProductName: Microsoft® Windows® Operating System
  571. InternalName: volmgr.sys
  572. OriginalFilename: volmgr.sys
  573. ProductVersion: 6.1.7601.17514
  574. FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
  575. FileDescription: Volume Manager Driver
  576. LegalCopyright: © Microsoft Corporation. All rights reserved.
  577. fffff880`0103f000 fffff880`01059000 mountmgr (deferred)
  578. Mapped memory image file: c:\cache\mountmgr.sys\4CE792991a000\mountmgr.sys
  579. Image path: \SystemRoot\System32\drivers\mountmgr.sys
  580. Image name: mountmgr.sys
  581. Timestamp: Sat Nov 20 11:19:21 2010 (4CE79299)
  582. CheckSum: 00022621
  583. ImageSize: 0001A000
  584. File version: 6.1.7601.17514
  585. Product version: 6.1.7601.17514
  586. File flags: 0 (Mask 3F)
  587. File OS: 40004 NT Win32
  588. File type: 3.7 Driver
  589. File date: 00000000.00000000
  590. Translations: 0409.04b0
  591. CompanyName: Microsoft Corporation
  592. ProductName: Microsoft® Windows® Operating System
  593. InternalName: mountmgr.sys
  594. OriginalFilename: mountmgr.sys
  595. ProductVersion: 6.1.7601.17514
  596. FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
  597. FileDescription: Mount Point Manager
  598. LegalCopyright: © Microsoft Corporation. All rights reserved.
  599. fffff880`0108d000 fffff880`017ec000 kl1 (deferred)
  600. Image path: \SystemRoot\system32\DRIVERS\kl1.sys
  601. Image name: kl1.sys
  602. Timestamp: Fri Oct 18 12:18:22 2013 (5260FCDE)
  603. CheckSum: 0007C5E5
  604. ImageSize: 0075F000
  605. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  606. fffff880`01800000 fffff880`0185e000 msrpc (deferred)
  607. Mapped memory image file: c:\cache\msrpc.sys\4CE793345e000\msrpc.sys
  608. Image path: \SystemRoot\System32\Drivers\msrpc.sys
  609. Image name: msrpc.sys
  610. Timestamp: Sat Nov 20 11:21:56 2010 (4CE79334)
  611. CheckSum: 0005E9E7
  612. ImageSize: 0005E000
  613. File version: 6.1.7601.17514
  614. Product version: 6.1.7601.17514
  615. File flags: 0 (Mask 3F)
  616. File OS: 40004 NT Win32
  617. File type: 3.7 Driver
  618. File date: 00000000.00000000
  619. Translations: 0409.04b0
  620. CompanyName: Microsoft Corporation
  621. ProductName: Microsoft® Windows® Operating System
  622. InternalName: krpcdd.sys
  623. OriginalFilename: krpcdd.sys
  624. ProductVersion: 6.1.7601.17514
  625. FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
  626. FileDescription: Kernel Remote Procedure Call Provider
  627. LegalCopyright: © Microsoft Corporation. All rights reserved.
  628. fffff880`0185e000 fffff880`01898000 rdyboost (deferred)
  629. Mapped memory image file: c:\cache\rdyboost.sys\4CE7982E3a000\rdyboost.sys
  630. Image path: \SystemRoot\System32\drivers\rdyboost.sys
  631. Image name: rdyboost.sys
  632. Timestamp: Sat Nov 20 11:43:10 2010 (4CE7982E)
  633. CheckSum: 00037356
  634. ImageSize: 0003A000
  635. File version: 6.1.7601.17514
  636. Product version: 6.1.7601.17514
  637. File flags: 0 (Mask 3F)
  638. File OS: 40004 NT Win32
  639. File type: 3.7 Driver
  640. File date: 00000000.00000000
  641. Translations: 0000.04b0
  642. CompanyName: Microsoft Corporation
  643. ProductName: Microsoft® Windows® Operating System
  644. InternalName: rdyboost.sys
  645. OriginalFilename: rdyboost.sys
  646. ProductVersion: 6.1.7601.17514
  647. FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
  648. FileDescription: ReadyBoost Driver
  649. LegalCopyright: © Microsoft Corporation. All rights reserved.
  650. fffff880`01898000 fffff880`018b9000 DefragFS (deferred)
  651. Image path: \SystemRoot\System32\Drivers\DefragFS.SYS
  652. Image name: DefragFS.SYS
  653. Timestamp: Tue Sep 11 22:24:29 2012 (504F8FED)
  654. CheckSum: 0002D581
  655. ImageSize: 00021000
  656. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  657. fffff880`018c0000 fffff880`019de000 iaStorV (deferred)
  658. Image path: \SystemRoot\system32\drivers\iaStorV.sys
  659. Image name: iaStorV.sys
  660. Timestamp: Fri Jun 11 03:46:19 2010 (4C11875B)
  661. CheckSum: 00068462
  662. ImageSize: 0011E000
  663. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  664. fffff880`01a00000 fffff880`01a4c000 volsnap (deferred)
  665. Mapped memory image file: c:\cache\volsnap.sys\4CE792C84c000\volsnap.sys
  666. Image path: \SystemRoot\system32\drivers\volsnap.sys
  667. Image name: volsnap.sys
  668. Timestamp: Sat Nov 20 11:20:08 2010 (4CE792C8)
  669. CheckSum: 000527ED
  670. ImageSize: 0004C000
  671. File version: 6.1.7601.17514
  672. Product version: 6.1.7601.17514
  673. File flags: 0 (Mask 3F)
  674. File OS: 40004 NT Win32
  675. File type: 3.7 Driver
  676. File date: 00000000.00000000
  677. Translations: 0409.04b0
  678. CompanyName: Microsoft Corporation
  679. ProductName: Microsoft® Windows® Operating System
  680. InternalName: volsnap.sys
  681. OriginalFilename: volsnap.sys
  682. ProductVersion: 6.1.7601.17514
  683. FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
  684. FileDescription: Volume Shadow Copy Driver
  685. LegalCopyright: © Microsoft Corporation. All rights reserved.
  686. fffff880`01a55000 fffff880`01d22000 iaStorA (deferred)
  687. Image path: \SystemRoot\system32\DRIVERS\iaStorA.sys
  688. Image name: iaStorA.sys
  689. Timestamp: Sat Apr 06 02:45:31 2013 (515F621B)
  690. CheckSum: 000ABA94
  691. ImageSize: 002CD000
  692. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  693. fffff880`01d22000 fffff880`01d85000 storport (deferred)
  694. Mapped memory image file: c:\cache\storport.sys\4D79A55F63000\storport.sys
  695. Image path: \SystemRoot\system32\DRIVERS\storport.sys
  696. Image name: storport.sys
  697. Timestamp: Fri Mar 11 06:30:23 2011 (4D79A55F)
  698. CheckSum: 000309FA
  699. ImageSize: 00063000
  700. File version: 6.1.7601.17577
  701. Product version: 6.1.7601.17577
  702. File flags: 0 (Mask 3F)
  703. File OS: 40004 NT Win32
  704. File type: 3.7 Driver
  705. File date: 00000000.00000000
  706. Translations: 0000.04b0
  707. CompanyName: Microsoft Corporation
  708. ProductName: Microsoft® Windows® Operating System
  709. InternalName: storport.sys
  710. OriginalFilename: storport.sys
  711. ProductVersion: 6.1.7601.17577
  712. FileVersion: 6.1.7601.17577 (win7sp1_gdr.110310-1504)
  713. FileDescription: Microsoft Storage Port Driver
  714. LegalCopyright: © Microsoft Corporation. All rights reserved.
  715. fffff880`01d85000 fffff880`01d90000 amdxata (deferred)
  716. Image path: \SystemRoot\system32\drivers\amdxata.sys
  717. Image name: amdxata.sys
  718. Timestamp: Fri Mar 19 18:18:18 2010 (4BA3A3CA)
  719. CheckSum: 000092B7
  720. ImageSize: 0000B000
  721. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  722. fffff880`01d90000 fffff880`01ddc000 fltmgr (deferred)
  723. Mapped memory image file: c:\cache\fltmgr.sys\4CE7929C4c000\fltmgr.sys
  724. Image path: \SystemRoot\system32\drivers\fltmgr.sys
  725. Image name: fltmgr.sys
  726. Timestamp: Sat Nov 20 11:19:24 2010 (4CE7929C)
  727. CheckSum: 0005452D
  728. ImageSize: 0004C000
  729. File version: 6.1.7601.17514
  730. Product version: 6.1.7601.17514
  731. File flags: 0 (Mask 3F)
  732. File OS: 40004 NT Win32
  733. File type: 3.7 Driver
  734. File date: 00000000.00000000
  735. Translations: 0409.04b0
  736. CompanyName: Microsoft Corporation
  737. ProductName: Microsoft® Windows® Operating System
  738. InternalName: fltMgr.sys
  739. OriginalFilename: fltMgr.sys
  740. ProductVersion: 6.1.7601.17514
  741. FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
  742. FileDescription: Microsoft Filesystem Filter Manager
  743. LegalCopyright: © Microsoft Corporation. All rights reserved.
  744. fffff880`01ddc000 fffff880`01df0000 fileinfo (deferred)
  745. Mapped memory image file: c:\cache\fileinfo.sys\4A5BC48114000\fileinfo.sys
  746. Image path: \SystemRoot\system32\drivers\fileinfo.sys
  747. Image name: fileinfo.sys
  748. Timestamp: Tue Jul 14 02:34:25 2009 (4A5BC481)
  749. CheckSum: 00015644
  750. ImageSize: 00014000
  751. File version: 6.1.7600.16385
  752. Product version: 6.1.7600.16385
  753. File flags: 0 (Mask 3F)
  754. File OS: 40004 NT Win32
  755. File type: 3.7 Driver
  756. File date: 00000000.00000000
  757. Translations: 0409.04b0
  758. CompanyName: Microsoft Corporation
  759. ProductName: Microsoft® Windows® Operating System
  760. InternalName: FileInfo.sys
  761. OriginalFilename: FileInfo.sys
  762. ProductVersion: 6.1.7600.16385
  763. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  764. FileDescription: FileInfo Filter Driver
  765. LegalCopyright: © Microsoft Corporation. All rights reserved.
  766. fffff880`01e09000 fffff880`01fab000 Ntfs (deferred)
  767. Mapped memory image file: c:\cache\Ntfs.sys\5167F5FC1a2000\Ntfs.sys
  768. Image path: \SystemRoot\System32\Drivers\Ntfs.sys
  769. Image name: Ntfs.sys
  770. Timestamp: Fri Apr 12 14:54:36 2013 (5167F5FC)
  771. CheckSum: 001A27D8
  772. ImageSize: 001A2000
  773. File version: 6.1.7601.18127
  774. Product version: 6.1.7601.18127
  775. File flags: 0 (Mask 3F)
  776. File OS: 40004 NT Win32
  777. File type: 3.7 Driver
  778. File date: 00000000.00000000
  779. Translations: 0409.04b0
  780. CompanyName: Microsoft Corporation
  781. ProductName: Microsoft® Windows® Operating System
  782. InternalName: ntfs.sys
  783. OriginalFilename: ntfs.sys
  784. ProductVersion: 6.1.7601.18127
  785. FileVersion: 6.1.7601.18127 (win7sp1_gdr.130412-0013)
  786. FileDescription: NT File System Driver
  787. LegalCopyright: © Microsoft Corporation. All rights reserved.
  788. fffff880`01fab000 fffff880`01fc6000 ksecdd (deferred)
  789. Mapped memory image file: c:\cache\ksecdd.sys\4FC97F6F1b000\ksecdd.sys
  790. Image path: \SystemRoot\System32\Drivers\ksecdd.sys
  791. Image name: ksecdd.sys
  792. Timestamp: Sat Jun 02 05:50:23 2012 (4FC97F6F)
  793. CheckSum: 00024C2C
  794. ImageSize: 0001B000
  795. File version: 6.1.7601.17856
  796. Product version: 6.1.7601.17856
  797. File flags: 0 (Mask 3F)
  798. File OS: 40004 NT Win32
  799. File type: 3.7 Driver
  800. File date: 00000000.00000000
  801. Translations: 0409.04b0
  802. CompanyName: Microsoft Corporation
  803. ProductName: Microsoft® Windows® Operating System
  804. InternalName: ksecdd.sys
  805. OriginalFilename: ksecdd.sys
  806. ProductVersion: 6.1.7601.17856
  807. FileVersion: 6.1.7601.17856 (win7sp1_gdr.120601-1505)
  808. FileDescription: Kernel Security Support Provider Interface
  809. LegalCopyright: © Microsoft Corporation. All rights reserved.
  810. fffff880`01fc6000 fffff880`01fd7000 pcw (deferred)
  811. Mapped memory image file: c:\cache\pcw.sys\4A5BC0FF11000\pcw.sys
  812. Image path: \SystemRoot\System32\drivers\pcw.sys
  813. Image name: pcw.sys
  814. Timestamp: Tue Jul 14 02:19:27 2009 (4A5BC0FF)
  815. CheckSum: 00014B5E
  816. ImageSize: 00011000
  817. File version: 6.1.7600.16385
  818. Product version: 6.1.7600.16385
  819. File flags: 0 (Mask 3F)
  820. File OS: 40004 NT Win32
  821. File type: 3.8 Driver
  822. File date: 00000000.00000000
  823. Translations: 0409.04b0
  824. CompanyName: Microsoft Corporation
  825. ProductName: Microsoft® Windows® Operating System
  826. InternalName: pcw.sys
  827. OriginalFilename: pcw.sys
  828. ProductVersion: 6.1.7600.16385
  829. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  830. FileDescription: Performance Counters for Windows Driver
  831. LegalCopyright: © Microsoft Corporation. All rights reserved.
  832. fffff880`01fd7000 fffff880`01fe1000 Fs_Rec (deferred)
  833. Mapped memory image file: c:\cache\Fs_Rec.sys\4F4EEFD2a000\Fs_Rec.sys
  834. Image path: \SystemRoot\System32\Drivers\Fs_Rec.sys
  835. Image name: Fs_Rec.sys
  836. Timestamp: Thu Mar 01 05:41:06 2012 (4F4EEFD2)
  837. CheckSum: 00012F92
  838. ImageSize: 0000A000
  839. File version: 6.1.7601.17787
  840. Product version: 6.1.7601.17787
  841. File flags: 0 (Mask 3F)
  842. File OS: 40004 NT Win32
  843. File type: 3.7 Driver
  844. File date: 00000000.00000000
  845. Translations: 0409.04b0
  846. CompanyName: Microsoft Corporation
  847. ProductName: Microsoft® Windows® Operating System
  848. InternalName: fs_rec.sys
  849. OriginalFilename: fs_rec.sys
  850. ProductVersion: 6.1.7601.17787
  851. FileVersion: 6.1.7601.17787 (win7sp1_gdr.120229-1502)
  852. FileDescription: File System Recognizer Driver
  853. LegalCopyright: © Microsoft Corporation. All rights reserved.
  854. fffff880`01fe1000 fffff880`01fec000 iaStorF (deferred)
  855. Image path: \SystemRoot\system32\DRIVERS\iaStorF.sys
  856. Image name: iaStorF.sys
  857. Timestamp: Sat Apr 06 02:45:35 2013 (515F621F)
  858. CheckSum: 0000CD41
  859. ImageSize: 0000B000
  860. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  861. fffff880`02000000 fffff880`0202a000 ksecpkg (deferred)
  862. Mapped memory image file: c:\cache\ksecpkg.sys\4FC9880F2a000\ksecpkg.sys
  863. Image path: \SystemRoot\System32\Drivers\ksecpkg.sys
  864. Image name: ksecpkg.sys
  865. Timestamp: Sat Jun 02 06:27:11 2012 (4FC9880F)
  866. CheckSum: 00026530
  867. ImageSize: 0002A000
  868. File version: 6.1.7601.17856
  869. Product version: 6.1.7601.17856
  870. File flags: 0 (Mask 3F)
  871. File OS: 40004 NT Win32
  872. File type: 3.7 Driver
  873. File date: 00000000.00000000
  874. Translations: 0409.04b0
  875. CompanyName: Microsoft Corporation
  876. ProductName: Microsoft® Windows® Operating System
  877. InternalName: ksecpkg.sys
  878. OriginalFilename: ksecpkg.sys
  879. ProductVersion: 6.1.7601.17856
  880. FileVersion: 6.1.7601.17856 (win7sp1_gdr.120601-1505)
  881. FileDescription: Kernel Security Support Provider Interface Packages
  882. LegalCopyright: © Microsoft Corporation. All rights reserved.
  883. fffff880`0202a000 fffff880`02073000 fwpkclnt (deferred)
  884. Mapped memory image file: c:\cache\fwpkclnt.sys\50E4F5C849000\fwpkclnt.sys
  885. Image path: \SystemRoot\System32\drivers\fwpkclnt.sys
  886. Image name: fwpkclnt.sys
  887. Timestamp: Thu Jan 03 05:06:48 2013 (50E4F5C8)
  888. CheckSum: 0004D5F9
  889. ImageSize: 00049000
  890. File version: 6.1.7601.18042
  891. Product version: 6.1.7601.18042
  892. File flags: 0 (Mask 3F)
  893. File OS: 40004 NT Win32
  894. File type: 2.0 Dll
  895. File date: 00000000.00000000
  896. Translations: 0409.04b0
  897. CompanyName: Microsoft Corporation
  898. ProductName: Microsoft® Windows® Operating System
  899. InternalName: fwpkclnt.sys
  900. OriginalFilename: fwpkclnt.sys
  901. ProductVersion: 6.1.7601.18042
  902. FileVersion: 6.1.7601.18042 (win7sp1_gdr.130102-1436)
  903. FileDescription: FWP/IPsec Kernel-Mode API
  904. LegalCopyright: © Microsoft Corporation. All rights reserved.
  905. fffff880`02073000 fffff880`0207c000 stdcfltn (deferred)
  906. Image path: \SystemRoot\system32\DRIVERS\stdcfltn.sys
  907. Image name: stdcfltn.sys
  908. Timestamp: Sat Jul 16 07:31:13 2011 (4E211411)
  909. CheckSum: 00007FF2
  910. ImageSize: 00009000
  911. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  912. fffff880`0207c000 fffff880`02084000 spldr (deferred)
  913. Image path: \SystemRoot\System32\Drivers\spldr.sys
  914. Image name: spldr.sys
  915. Timestamp: Mon May 11 19:56:27 2009 (4A0858BB)
  916. CheckSum: 0000E0E9
  917. ImageSize: 00008000
  918. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  919. fffff880`02084000 fffff880`0208f000 nvpciflt (deferred)
  920. Image path: \SystemRoot\system32\DRIVERS\nvpciflt.sys
  921. Image name: nvpciflt.sys
  922. Timestamp: Sat Feb 08 17:45:01 2014 (52F650FD)
  923. CheckSum: 0001724B
  924. ImageSize: 0000B000
  925. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  926. fffff880`0208f000 fffff880`020a1000 mup (deferred)
  927. Mapped memory image file: c:\cache\mup.sys\4A5BC20112000\mup.sys
  928. Image path: \SystemRoot\System32\Drivers\mup.sys
  929. Image name: mup.sys
  930. Timestamp: Tue Jul 14 02:23:45 2009 (4A5BC201)
  931. CheckSum: 00015DFD
  932. ImageSize: 00012000
  933. File version: 6.1.7600.16385
  934. Product version: 6.1.7600.16385
  935. File flags: 0 (Mask 3F)
  936. File OS: 40004 NT Win32
  937. File type: 3.6 Driver
  938. File date: 00000000.00000000
  939. Translations: 0409.04b0
  940. CompanyName: Microsoft Corporation
  941. ProductName: Microsoft® Windows® Operating System
  942. InternalName: MUP.SYS
  943. OriginalFilename: MUP.SYS
  944. ProductVersion: 6.1.7600.16385
  945. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  946. FileDescription: Multiple UNC Provider Driver
  947. LegalCopyright: © Microsoft Corporation. All rights reserved.
  948. fffff880`020a5000 fffff880`02197000 ndis (deferred)
  949. Mapped memory image file: c:\cache\ndis.sys\5034F6B2f2000\ndis.sys
  950. Image path: \SystemRoot\system32\drivers\ndis.sys
  951. Image name: ndis.sys
  952. Timestamp: Wed Aug 22 18:11:46 2012 (5034F6B2)
  953. CheckSum: 000E8B11
  954. ImageSize: 000F2000
  955. File version: 6.1.7601.17939
  956. Product version: 6.1.7601.17939
  957. File flags: 0 (Mask 3F)
  958. File OS: 40004 NT Win32
  959. File type: 3.6 Driver
  960. File date: 00000000.00000000
  961. Translations: 0409.04b0
  962. CompanyName: Microsoft Corporation
  963. ProductName: Microsoft® Windows® Operating System
  964. InternalName: NDIS.SYS
  965. OriginalFilename: NDIS.SYS
  966. ProductVersion: 6.1.7601.17939
  967. FileVersion: 6.1.7601.17939 (win7sp1_gdr.120822-0331)
  968. FileDescription: NDIS 6.20 driver
  969. LegalCopyright: © Microsoft Corporation. All rights reserved.
  970. fffff880`02197000 fffff880`021f7000 NETIO (deferred)
  971. Mapped memory image file: c:\cache\NETIO.SYS\5034F6A060000\NETIO.SYS
  972. Image path: \SystemRoot\system32\drivers\NETIO.SYS
  973. Image name: NETIO.SYS
  974. Timestamp: Wed Aug 22 18:11:28 2012 (5034F6A0)
  975. CheckSum: 00067D76
  976. ImageSize: 00060000
  977. File version: 6.1.7601.17939
  978. Product version: 6.1.7601.17939
  979. File flags: 0 (Mask 3F)
  980. File OS: 40004 NT Win32
  981. File type: 3.6 Driver
  982. File date: 00000000.00000000
  983. Translations: 0409.04b0
  984. CompanyName: Microsoft Corporation
  985. ProductName: Microsoft® Windows® Operating System
  986. InternalName: netio.sys
  987. OriginalFilename: netio.sys
  988. ProductVersion: 6.1.7601.17939
  989. FileVersion: 6.1.7601.17939 (win7sp1_gdr.120822-0331)
  990. FileDescription: Network I/O Subsystem
  991. LegalCopyright: © Microsoft Corporation. All rights reserved.
  992. fffff880`021f7000 fffff880`02200000 hwpolicy (deferred)
  993. Mapped memory image file: c:\cache\hwpolicy.sys\4CE7927E9000\hwpolicy.sys
  994. Image path: \SystemRoot\System32\drivers\hwpolicy.sys
  995. Image name: hwpolicy.sys
  996. Timestamp: Sat Nov 20 11:18:54 2010 (4CE7927E)
  997. CheckSum: 0000D9F4
  998. ImageSize: 00009000
  999. File version: 6.1.7601.17514
  1000. Product version: 6.1.7601.17514
  1001. File flags: 0 (Mask 3F)
  1002. File OS: 40004 NT Win32
  1003. File type: 2.0 Dll
  1004. File date: 00000000.00000000
  1005. Translations: 0409.04b0
  1006. CompanyName: Microsoft Corporation
  1007. ProductName: Microsoft® Windows® Operating System
  1008. InternalName: hwpolicy.sys
  1009. OriginalFilename: hwpolicy.sys
  1010. ProductVersion: 6.1.7601.17514
  1011. FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
  1012. FileDescription: Hardware Policy Driver
  1013. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1014. fffff880`02200000 fffff880`02400000 tcpip (deferred)
  1015. Mapped memory image file: c:\cache\tcpip.sys\51D78B2C200000\tcpip.sys
  1016. Image path: \SystemRoot\System32\drivers\tcpip.sys
  1017. Image name: tcpip.sys
  1018. Timestamp: Sat Jul 06 06:12:44 2013 (51D78B2C)
  1019. CheckSum: 001D58C0
  1020. ImageSize: 00200000
  1021. File version: 6.1.7601.18203
  1022. Product version: 6.1.7601.18203
  1023. File flags: 0 (Mask 3F)
  1024. File OS: 40004 NT Win32
  1025. File type: 3.6 Driver
  1026. File date: 00000000.00000000
  1027. Translations: 0409.04b0
  1028. CompanyName: Microsoft Corporation
  1029. ProductName: Microsoft® Windows® Operating System
  1030. InternalName: tcpip.sys
  1031. OriginalFilename: tcpip.sys
  1032. ProductVersion: 6.1.7601.18203
  1033. FileVersion: 6.1.7601.18203 (win7sp1_gdr.130705-1535)
  1034. FileDescription: TCP/IP Driver
  1035. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1036. fffff880`02400000 fffff880`0242f000 SCSIPORT (deferred)
  1037. Mapped memory image file: c:\cache\SCSIPORT.SYS\4CE7A4192f000\SCSIPORT.SYS
  1038. Image path: \SystemRoot\system32\DRIVERS\SCSIPORT.SYS
  1039. Image name: SCSIPORT.SYS
  1040. Timestamp: Sat Nov 20 12:34:01 2010 (4CE7A419)
  1041. CheckSum: 000375EA
  1042. ImageSize: 0002F000
  1043. File version: 6.1.7601.17514
  1044. Product version: 6.1.7601.17514
  1045. File flags: 0 (Mask 3F)
  1046. File OS: 40004 NT Win32
  1047. File type: 3.7 Driver
  1048. File date: 00000000.00000000
  1049. Translations: 0409.04b0
  1050. CompanyName: Microsoft Corporation
  1051. ProductName: Microsoft® Windows® Operating System
  1052. InternalName: scsiport.sys
  1053. OriginalFilename: scsiport.sys
  1054. ProductVersion: 6.1.7601.17514
  1055. FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
  1056. FileDescription: SCSI Port Driver
  1057. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1058. fffff880`0242f000 fffff880`02472000 ks (deferred)
  1059. Mapped memory image file: c:\cache\ks.sys\4CE7A3F343000\ks.sys
  1060. Image path: \SystemRoot\system32\DRIVERS\ks.sys
  1061. Image name: ks.sys
  1062. Timestamp: Sat Nov 20 12:33:23 2010 (4CE7A3F3)
  1063. CheckSum: 00045588
  1064. ImageSize: 00043000
  1065. File version: 6.1.7601.17514
  1066. Product version: 6.1.7601.17514
  1067. File flags: 0 (Mask 3F)
  1068. File OS: 40004 NT Win32
  1069. File type: 3.0 Driver
  1070. File date: 00000000.00000000
  1071. Translations: 0000.04b0
  1072. CompanyName: Microsoft Corporation
  1073. ProductName: Microsoft® Windows® Operating System
  1074. InternalName: ks.sys
  1075. OriginalFilename: ks.sys
  1076. ProductVersion: 6.1.7601.17514
  1077. FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
  1078. FileDescription: Kernel CSA Library
  1079. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1080. fffff880`02478000 fffff880`024b2000 fvevol (deferred)
  1081. Mapped memory image file: c:\cache\fvevol.sys\5100A65C3a000\fvevol.sys
  1082. Image path: \SystemRoot\System32\DRIVERS\fvevol.sys
  1083. Image name: fvevol.sys
  1084. Timestamp: Thu Jan 24 05:11:24 2013 (5100A65C)
  1085. CheckSum: 00042141
  1086. ImageSize: 0003A000
  1087. File version: 6.1.7601.18062
  1088. Product version: 6.1.7601.18062
  1089. File flags: 0 (Mask 3F)
  1090. File OS: 40004 NT Win32
  1091. File type: 3.7 Driver
  1092. File date: 00000000.00000000
  1093. Translations: 0000.04b0
  1094. CompanyName: Microsoft Corporation
  1095. ProductName: Microsoft® Windows® Operating System
  1096. InternalName: FVEVOL.SYS
  1097. OriginalFilename: FVEVOL.SYS
  1098. ProductVersion: 6.1.7601.18062
  1099. FileVersion: 6.1.7601.18062 (win7sp1_gdr.130123-1433)
  1100. FileDescription: BitLocker Drive Encryption Driver
  1101. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1102. fffff880`024b2000 fffff880`024bc000 EMSC (deferred)
  1103. Image path: \SystemRoot\system32\DRIVERS\EMSC.SYS
  1104. Image name: EMSC.SYS
  1105. Timestamp: Fri Jun 19 23:35:47 2009 (4A3BF6A3)
  1106. CheckSum: 0000C68C
  1107. ImageSize: 0000A000
  1108. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  1109. fffff880`024bc000 fffff880`024d2000 disk (deferred)
  1110. Mapped memory image file: c:\cache\disk.sys\4A5BC11D16000\disk.sys
  1111. Image path: \SystemRoot\system32\drivers\disk.sys
  1112. Image name: disk.sys
  1113. Timestamp: Tue Jul 14 02:19:57 2009 (4A5BC11D)
  1114. CheckSum: 0001FF1D
  1115. ImageSize: 00016000
  1116. File version: 6.1.7600.16385
  1117. Product version: 6.1.7600.16385
  1118. File flags: 0 (Mask 3F)
  1119. File OS: 40004 NT Win32
  1120. File type: 3.7 Driver
  1121. File date: 00000000.00000000
  1122. Translations: 0000.04b0
  1123. CompanyName: Microsoft Corporation
  1124. ProductName: Microsoft® Windows® Operating System
  1125. InternalName: disk.sys
  1126. OriginalFilename: disk.sys
  1127. ProductVersion: 6.1.7600.16385
  1128. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  1129. FileDescription: PnP Disk Driver
  1130. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1131. fffff880`024d2000 fffff880`02502000 CLASSPNP (deferred)
  1132. Mapped memory image file: c:\cache\CLASSPNP.SYS\4CE7929B30000\CLASSPNP.SYS
  1133. Image path: \SystemRoot\system32\drivers\CLASSPNP.SYS
  1134. Image name: CLASSPNP.SYS
  1135. Timestamp: Sat Nov 20 11:19:23 2010 (4CE7929B)
  1136. CheckSum: 000318BE
  1137. ImageSize: 00030000
  1138. File version: 6.1.7601.17514
  1139. Product version: 6.1.7601.17514
  1140. File flags: 0 (Mask 3F)
  1141. File OS: 40004 NT Win32
  1142. File type: 3.7 Driver
  1143. File date: 00000000.00000000
  1144. Translations: 0000.04b0
  1145. CompanyName: Microsoft Corporation
  1146. ProductName: Microsoft® Windows® Operating System
  1147. InternalName: Classpnp.sys
  1148. OriginalFilename: Classpnp.sys
  1149. ProductVersion: 6.1.7601.17514
  1150. FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
  1151. FileDescription: SCSI Class System Dll
  1152. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1153. fffff880`02502000 fffff880`02517000 lltdio (deferred)
  1154. Mapped memory image file: c:\cache\lltdio.sys\4A5BCC9215000\lltdio.sys
  1155. Image path: \SystemRoot\system32\DRIVERS\lltdio.sys
  1156. Image name: lltdio.sys
  1157. Timestamp: Tue Jul 14 03:08:50 2009 (4A5BCC92)
  1158. CheckSum: 0001109D
  1159. ImageSize: 00015000
  1160. File version: 6.1.7600.16385
  1161. Product version: 6.1.7600.16385
  1162. File flags: 0 (Mask 3F)
  1163. File OS: 40004 NT Win32
  1164. File type: 3.6 Driver
  1165. File date: 00000000.00000000
  1166. Translations: 0409.04b0
  1167. CompanyName: Microsoft Corporation
  1168. ProductName: Microsoft® Windows® Operating System
  1169. InternalName: LLTDIO.SYS
  1170. OriginalFilename: LLTDIO.SYS
  1171. ProductVersion: 6.1.7600.16385
  1172. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  1173. FileDescription: Link-Layer Topology Mapper I/O Driver
  1174. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1175. fffff880`0251a000 fffff880`025c0000 klif (deferred)
  1176. Image path: \SystemRoot\system32\DRIVERS\klif.sys
  1177. Image name: klif.sys
  1178. Timestamp: Tue Apr 29 14:46:48 2014 (535F9128)
  1179. CheckSum: 0009ACAB
  1180. ImageSize: 000A6000
  1181. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  1182. fffff880`025c0000 fffff880`025ef000 ndiswan (deferred)
  1183. Mapped memory image file: c:\cache\ndiswan.sys\4CE7A8702f000\ndiswan.sys
  1184. Image path: \SystemRoot\system32\DRIVERS\ndiswan.sys
  1185. Image name: ndiswan.sys
  1186. Timestamp: Sat Nov 20 12:52:32 2010 (4CE7A870)
  1187. CheckSum: 0002BB81
  1188. ImageSize: 0002F000
  1189. File version: 6.1.7601.17514
  1190. Product version: 6.1.7601.17514
  1191. File flags: 0 (Mask 3F)
  1192. File OS: 40004 NT Win32
  1193. File type: 3.6 Driver
  1194. File date: 00000000.00000000
  1195. Translations: 0409.04b0
  1196. CompanyName: Microsoft Corporation
  1197. ProductName: Microsoft® Windows® Operating System
  1198. InternalName: NDISWAN.SYS
  1199. OriginalFilename: NDISWAN.SYS
  1200. ProductVersion: 6.1.7601.17514
  1201. FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
  1202. FileDescription: MS PPP Framing Driver (Strong Encryption)
  1203. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1204. fffff880`04c00000 fffff880`04c09000 rdpencdd (deferred)
  1205. Mapped memory image file: c:\cache\rdpencdd.sys\4A5BCE629000\rdpencdd.sys
  1206. Image path: \SystemRoot\system32\drivers\rdpencdd.sys
  1207. Image name: rdpencdd.sys
  1208. Timestamp: Tue Jul 14 03:16:34 2009 (4A5BCE62)
  1209. CheckSum: 000074D5
  1210. ImageSize: 00009000
  1211. File version: 6.1.7600.16385
  1212. Product version: 6.1.7600.16385
  1213. File flags: 0 (Mask 3F)
  1214. File OS: 40004 NT Win32
  1215. File type: 3.4 Driver
  1216. File date: 00000000.00000000
  1217. Translations: 0409.04b0
  1218. CompanyName: Microsoft Corporation
  1219. ProductName: Microsoft® Windows® Operating System
  1220. InternalName: RDPENCDD.SYS
  1221. OriginalFilename: RDPENCDD.SYS
  1222. ProductVersion: 6.1.7600.16385
  1223. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  1224. FileDescription: RDP Encoder Miniport
  1225. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1226. fffff880`04c09000 fffff880`04c12000 rdprefmp (deferred)
  1227. Mapped memory image file: c:\cache\rdprefmp.sys\4A5BCE639000\rdprefmp.sys
  1228. Image path: \SystemRoot\system32\drivers\rdprefmp.sys
  1229. Image name: rdprefmp.sys
  1230. Timestamp: Tue Jul 14 03:16:35 2009 (4A5BCE63)
  1231. CheckSum: 0000ABCD
  1232. ImageSize: 00009000
  1233. File version: 6.1.7600.16385
  1234. Product version: 6.1.7600.16385
  1235. File flags: 0 (Mask 3F)
  1236. File OS: 40004 NT Win32
  1237. File type: 3.4 Driver
  1238. File date: 00000000.00000000
  1239. Translations: 0409.04b0
  1240. CompanyName: Microsoft Corporation
  1241. ProductName: Microsoft® Windows® Operating System
  1242. InternalName: RDPREFMP.SYS
  1243. OriginalFilename: RDPREFMP.SYS
  1244. ProductVersion: 6.1.7600.16385
  1245. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  1246. FileDescription: RDP Reflector Driver Miniport
  1247. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1248. fffff880`04c12000 fffff880`04c1d000 Msfs (deferred)
  1249. Mapped memory image file: c:\cache\Msfs.SYS\4A5BC113b000\Msfs.SYS
  1250. Image path: \SystemRoot\System32\Drivers\Msfs.SYS
  1251. Image name: Msfs.SYS
  1252. Timestamp: Tue Jul 14 02:19:47 2009 (4A5BC113)
  1253. CheckSum: 00007126
  1254. ImageSize: 0000B000
  1255. File version: 6.1.7600.16385
  1256. Product version: 6.1.7600.16385
  1257. File flags: 0 (Mask 3F)
  1258. File OS: 40004 NT Win32
  1259. File type: 3.7 Driver
  1260. File date: 00000000.00000000
  1261. Translations: 0409.04b0
  1262. CompanyName: Microsoft Corporation
  1263. ProductName: Microsoft® Windows® Operating System
  1264. InternalName: MSFS.SYS
  1265. OriginalFilename: MSFS.SYS
  1266. ProductVersion: 6.1.7600.16385
  1267. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  1268. FileDescription: Mailslot driver
  1269. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1270. fffff880`04c1d000 fffff880`04c2e000 Npfs (deferred)
  1271. Mapped memory image file: c:\cache\Npfs.SYS\4A5BC11411000\Npfs.SYS
  1272. Image path: \SystemRoot\System32\Drivers\Npfs.SYS
  1273. Image name: Npfs.SYS
  1274. Timestamp: Tue Jul 14 02:19:48 2009 (4A5BC114)
  1275. CheckSum: 00019AED
  1276. ImageSize: 00011000
  1277. File version: 6.1.7600.16385
  1278. Product version: 6.1.7600.16385
  1279. File flags: 0 (Mask 3F)
  1280. File OS: 40004 NT Win32
  1281. File type: 3.7 Driver
  1282. File date: 00000000.00000000
  1283. Translations: 0409.04b0
  1284. CompanyName: Microsoft Corporation
  1285. ProductName: Microsoft® Windows® Operating System
  1286. InternalName: npfs.sys
  1287. OriginalFilename: npfs.sys
  1288. ProductVersion: 6.1.7600.16385
  1289. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  1290. FileDescription: NPFS Driver
  1291. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1292. fffff880`04c2e000 fffff880`04c50000 tdx (deferred)
  1293. Mapped memory image file: c:\cache\tdx.sys\4CE7933222000\tdx.sys
  1294. Image path: \SystemRoot\system32\DRIVERS\tdx.sys
  1295. Image name: tdx.sys
  1296. Timestamp: Sat Nov 20 11:21:54 2010 (4CE79332)
  1297. CheckSum: 000288B2
  1298. ImageSize: 00022000
  1299. File version: 6.1.7601.17514
  1300. Product version: 6.1.7601.17514
  1301. File flags: 0 (Mask 3F)
  1302. File OS: 40004 NT Win32
  1303. File type: 3.6 Driver
  1304. File date: 00000000.00000000
  1305. Translations: 0409.04b0
  1306. CompanyName: Microsoft Corporation
  1307. ProductName: Microsoft® Windows® Operating System
  1308. InternalName: tdx.sys
  1309. OriginalFilename: tdx.sys
  1310. ProductVersion: 6.1.7601.17514
  1311. FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
  1312. FileDescription: TDI Translation Driver
  1313. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1314. fffff880`04c50000 fffff880`04c5d000 TDI (deferred)
  1315. Mapped memory image file: c:\cache\TDI.SYS\4CE7933Ed000\TDI.SYS
  1316. Image path: \SystemRoot\system32\DRIVERS\TDI.SYS
  1317. Image name: TDI.SYS
  1318. Timestamp: Sat Nov 20 11:22:06 2010 (4CE7933E)
  1319. CheckSum: 00016255
  1320. ImageSize: 0000D000
  1321. File version: 6.1.7601.17514
  1322. Product version: 6.1.7601.17514
  1323. File flags: 0 (Mask 3F)
  1324. File OS: 40004 NT Win32
  1325. File type: 3.6 Driver
  1326. File date: 00000000.00000000
  1327. Translations: 0409.04b0
  1328. CompanyName: Microsoft Corporation
  1329. ProductName: Microsoft® Windows® Operating System
  1330. InternalName: tdi.sys
  1331. OriginalFilename: tdi.sys
  1332. ProductVersion: 6.1.7601.17514
  1333. FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
  1334. FileDescription: TDI Wrapper
  1335. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1336. fffff880`04c5d000 fffff880`04c6d000 kltdi (deferred)
  1337. Image path: \SystemRoot\system32\DRIVERS\kltdi.sys
  1338. Image name: kltdi.sys
  1339. Timestamp: Mon Apr 29 15:07:50 2013 (517E6296)
  1340. CheckSum: 0000F741
  1341. ImageSize: 00010000
  1342. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  1343. fffff880`04c6d000 fffff880`04f3a000 dump_iaStorA (deferred)
  1344. Image path: \SystemRoot\System32\Drivers\dump_iaStorA.sys
  1345. Image name: dump_iaStorA.sys
  1346. Timestamp: Sat Apr 06 02:45:31 2013 (515F621B)
  1347. CheckSum: 000ABA94
  1348. ImageSize: 002CD000
  1349. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  1350. fffff880`04f3a000 fffff880`04f52000 PDFsFilter (deferred)
  1351. Image path: \SystemRoot\system32\DRIVERS\PDFsFilter.sys
  1352. Image name: PDFsFilter.sys
  1353. Timestamp: Fri Aug 24 00:57:13 2012 (5036A739)
  1354. CheckSum: 0001A15A
  1355. ImageSize: 00018000
  1356. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  1357. fffff880`04f54000 fffff880`04f7e000 cdrom (deferred)
  1358. Mapped memory image file: c:\cache\cdrom.sys\4CE792982a000\cdrom.sys
  1359. Image path: \SystemRoot\system32\DRIVERS\cdrom.sys
  1360. Image name: cdrom.sys
  1361. Timestamp: Sat Nov 20 11:19:20 2010 (4CE79298)
  1362. CheckSum: 0002B742
  1363. ImageSize: 0002A000
  1364. File version: 6.1.7601.17514
  1365. Product version: 6.1.7601.17514
  1366. File flags: 0 (Mask 3F)
  1367. File OS: 40004 NT Win32
  1368. File type: 3.7 Driver
  1369. File date: 00000000.00000000
  1370. Translations: 0000.04b0
  1371. CompanyName: Microsoft Corporation
  1372. ProductName: Microsoft® Windows® Operating System
  1373. InternalName: cdrom.sys
  1374. OriginalFilename: cdrom.sys
  1375. ProductVersion: 6.1.7601.17514
  1376. FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
  1377. FileDescription: SCSI CD-ROM Driver
  1378. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1379. fffff880`04f7e000 fffff880`04f9f000 klflt (deferred)
  1380. Image path: \SystemRoot\system32\DRIVERS\klflt.sys
  1381. Image name: klflt.sys
  1382. Timestamp: Tue Nov 26 14:37:56 2013 (52949624)
  1383. CheckSum: 00018536
  1384. ImageSize: 00021000
  1385. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  1386. fffff880`04f9f000 fffff880`04fa8000 Null (deferred)
  1387. Mapped memory image file: c:\cache\Null.SYS\4A5BC1099000\Null.SYS
  1388. Image path: \SystemRoot\System32\Drivers\Null.SYS
  1389. Image name: Null.SYS
  1390. Timestamp: Tue Jul 14 02:19:37 2009 (4A5BC109)
  1391. CheckSum: 0000E9DB
  1392. ImageSize: 00009000
  1393. File version: 6.1.7600.16385
  1394. Product version: 6.1.7600.16385
  1395. File flags: 0 (Mask 3F)
  1396. File OS: 40004 NT Win32
  1397. File type: 3.7 Driver
  1398. File date: 00000000.00000000
  1399. Translations: 0409.04b0
  1400. CompanyName: Microsoft Corporation
  1401. ProductName: Microsoft® Windows® Operating System
  1402. InternalName: null.sys
  1403. OriginalFilename: null.sys
  1404. ProductVersion: 6.1.7600.16385
  1405. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  1406. FileDescription: NULL Driver
  1407. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1408. fffff880`04fa8000 fffff880`04faf000 Beep (deferred)
  1409. Mapped memory image file: c:\cache\Beep.SYS\4A5BCA8D7000\Beep.SYS
  1410. Image path: \SystemRoot\System32\Drivers\Beep.SYS
  1411. Image name: Beep.SYS
  1412. Timestamp: Tue Jul 14 03:00:13 2009 (4A5BCA8D)
  1413. CheckSum: 000036EB
  1414. ImageSize: 00007000
  1415. File version: 6.1.7600.16385
  1416. Product version: 6.1.7600.16385
  1417. File flags: 0 (Mask 3F)
  1418. File OS: 40004 NT Win32
  1419. File type: 3.7 Driver
  1420. File date: 00000000.00000000
  1421. Translations: 0409.04b0
  1422. CompanyName: Microsoft Corporation
  1423. ProductName: Microsoft® Windows® Operating System
  1424. InternalName: beep.sys
  1425. OriginalFilename: beep.sys
  1426. ProductVersion: 6.1.7600.16385
  1427. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  1428. FileDescription: BEEP Driver
  1429. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1430. fffff880`04faf000 fffff880`04fbd000 vga (deferred)
  1431. Mapped memory image file: c:\cache\vga.sys\4A5BC587e000\vga.sys
  1432. Image path: \SystemRoot\System32\drivers\vga.sys
  1433. Image name: vga.sys
  1434. Timestamp: Tue Jul 14 02:38:47 2009 (4A5BC587)
  1435. CheckSum: 00013E6F
  1436. ImageSize: 0000E000
  1437. File version: 6.1.7600.16385
  1438. Product version: 6.1.7600.16385
  1439. File flags: 0 (Mask 3F)
  1440. File OS: 40004 NT Win32
  1441. File type: 3.4 Driver
  1442. File date: 00000000.00000000
  1443. Translations: 0000.04b0
  1444. CompanyName: Microsoft Corporation
  1445. ProductName: Microsoft® Windows® Operating System
  1446. InternalName: vga.sys
  1447. OriginalFilename: vga.sys
  1448. ProductVersion: 6.1.7600.16385
  1449. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  1450. FileDescription: VGA/Super VGA Video Driver
  1451. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1452. fffff880`04fbd000 fffff880`04fe2000 VIDEOPRT (deferred)
  1453. Mapped memory image file: c:\cache\VIDEOPRT.SYS\4A5BC58B25000\VIDEOPRT.SYS
  1454. Image path: \SystemRoot\System32\drivers\VIDEOPRT.SYS
  1455. Image name: VIDEOPRT.SYS
  1456. Timestamp: Tue Jul 14 02:38:51 2009 (4A5BC58B)
  1457. CheckSum: 00028FC7
  1458. ImageSize: 00025000
  1459. File version: 6.1.7600.16385
  1460. Product version: 6.1.7600.16385
  1461. File flags: 0 (Mask 3F)
  1462. File OS: 40004 NT Win32
  1463. File type: 3.4 Driver
  1464. File date: 00000000.00000000
  1465. Translations: 0000.04b0
  1466. CompanyName: Microsoft Corporation
  1467. ProductName: Microsoft® Windows® Operating System
  1468. InternalName: videoprt.sys
  1469. OriginalFilename: videoprt.sys
  1470. ProductVersion: 6.1.7600.16385
  1471. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  1472. FileDescription: Video Port Driver
  1473. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1474. fffff880`04fe2000 fffff880`04ff2000 watchdog (deferred)
  1475. Mapped memory image file: c:\cache\watchdog.sys\4A5BC53F10000\watchdog.sys
  1476. Image path: \SystemRoot\System32\drivers\watchdog.sys
  1477. Image name: watchdog.sys
  1478. Timestamp: Tue Jul 14 02:37:35 2009 (4A5BC53F)
  1479. CheckSum: 00019CBE
  1480. ImageSize: 00010000
  1481. File version: 6.1.7600.16385
  1482. Product version: 6.1.7600.16385
  1483. File flags: 0 (Mask 3F)
  1484. File OS: 40004 NT Win32
  1485. File type: 2.0 Dll
  1486. File date: 00000000.00000000
  1487. Translations: 0000.04b0
  1488. CompanyName: Microsoft Corporation
  1489. ProductName: Microsoft® Windows® Operating System
  1490. InternalName: watchdog.sys
  1491. OriginalFilename: watchdog.sys
  1492. ProductVersion: 6.1.7600.16385
  1493. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  1494. FileDescription: Watchdog Driver
  1495. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1496. fffff880`04ff2000 fffff880`04ffb000 RDPCDD (deferred)
  1497. Mapped memory image file: c:\cache\RDPCDD.sys\4A5BCE629000\RDPCDD.sys
  1498. Image path: \SystemRoot\System32\DRIVERS\RDPCDD.sys
  1499. Image name: RDPCDD.sys
  1500. Timestamp: Tue Jul 14 03:16:34 2009 (4A5BCE62)
  1501. CheckSum: 0000FFAC
  1502. ImageSize: 00009000
  1503. File version: 6.1.7600.16385
  1504. Product version: 6.1.7600.16385
  1505. File flags: 0 (Mask 3F)
  1506. File OS: 40004 NT Win32
  1507. File type: 3.4 Driver
  1508. File date: 00000000.00000000
  1509. Translations: 0409.04b0
  1510. CompanyName: Microsoft Corporation
  1511. ProductName: Microsoft® Windows® Operating System
  1512. InternalName: RDPCDD.SYS
  1513. OriginalFilename: RDPCDD.SYS
  1514. ProductVersion: 6.1.7600.16385
  1515. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  1516. FileDescription: RDP Miniport
  1517. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1518. fffff880`05000000 fffff880`0504d000 nvkflt (deferred)
  1519. Image path: \SystemRoot\system32\DRIVERS\nvkflt.sys
  1520. Image name: nvkflt.sys
  1521. Timestamp: Sat Feb 08 17:42:25 2014 (52F65061)
  1522. CheckSum: 0004EFA8
  1523. ImageSize: 0004D000
  1524. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  1525. fffff880`0504d000 fffff880`050a7000 RtsPStor (deferred)
  1526. Image path: \SystemRoot\system32\DRIVERS\RtsPStor.sys
  1527. Image name: RtsPStor.sys
  1528. Timestamp: Thu Dec 13 04:44:23 2012 (50C94107)
  1529. CheckSum: 000570A2
  1530. ImageSize: 0005A000
  1531. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  1532. fffff880`050a7000 fffff880`050b9000 umbus (deferred)
  1533. Mapped memory image file: c:\cache\umbus.sys\4CE7A69512000\umbus.sys
  1534. Image path: \SystemRoot\system32\DRIVERS\umbus.sys
  1535. Image name: umbus.sys
  1536. Timestamp: Sat Nov 20 12:44:37 2010 (4CE7A695)
  1537. CheckSum: 0001AF58
  1538. ImageSize: 00012000
  1539. File version: 6.1.7601.17514
  1540. Product version: 6.1.7601.17514
  1541. File flags: 0 (Mask 3F)
  1542. File OS: 40004 NT Win32
  1543. File type: 2.0 Dll
  1544. File date: 00000000.00000000
  1545. Translations: 0409.04b0
  1546. CompanyName: Microsoft Corporation
  1547. ProductName: Microsoft® Windows® Operating System
  1548. InternalName: umbus.sys
  1549. OriginalFilename: umbus.sys
  1550. ProductVersion: 6.1.7601.17514
  1551. FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
  1552. FileDescription: User-Mode Bus Enumerator
  1553. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1554. fffff880`050b9000 fffff880`05142000 afd (deferred)
  1555. Mapped memory image file: c:\cache\afd.sys\4EFA941889000\afd.sys
  1556. Image path: \SystemRoot\system32\drivers\afd.sys
  1557. Image name: afd.sys
  1558. Timestamp: Wed Dec 28 05:59:20 2011 (4EFA9418)
  1559. CheckSum: 000873E8
  1560. ImageSize: 00089000
  1561. File version: 6.1.7601.17752
  1562. Product version: 6.1.7601.17752
  1563. File flags: 0 (Mask 3F)
  1564. File OS: 40004 NT Win32
  1565. File type: 3.7 Driver
  1566. File date: 00000000.00000000
  1567. Translations: 0409.04b0
  1568. CompanyName: Microsoft Corporation
  1569. ProductName: Microsoft® Windows® Operating System
  1570. InternalName: afd.sys
  1571. OriginalFilename: afd.sys
  1572. ProductVersion: 6.1.7601.17752
  1573. FileVersion: 6.1.7601.17752 (win7sp1_gdr.111227-1505)
  1574. FileDescription: Ancillary Function Driver for WinSock
  1575. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1576. fffff880`05142000 fffff880`05187000 netbt (deferred)
  1577. Mapped memory image file: c:\cache\netbt.sys\4CE7938645000\netbt.sys
  1578. Image path: \SystemRoot\System32\DRIVERS\netbt.sys
  1579. Image name: netbt.sys
  1580. Timestamp: Sat Nov 20 11:23:18 2010 (4CE79386)
  1581. CheckSum: 00041134
  1582. ImageSize: 00045000
  1583. File version: 6.1.7601.17514
  1584. Product version: 6.1.7601.17514
  1585. File flags: 0 (Mask 3F)
  1586. File OS: 40004 NT Win32
  1587. File type: 3.7 Driver
  1588. File date: 00000000.00000000
  1589. Translations: 0409.04b0
  1590. CompanyName: Microsoft Corporation
  1591. ProductName: Microsoft® Windows® Operating System
  1592. InternalName: netbt.sys
  1593. OriginalFilename: netbt.sys
  1594. ProductVersion: 6.1.7601.17514
  1595. FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
  1596. FileDescription: MBT Transport driver
  1597. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1598. fffff880`05187000 fffff880`05192000 ws2ifsl (deferred)
  1599. Mapped memory image file: c:\cache\ws2ifsl.sys\4A5BCCF9b000\ws2ifsl.sys
  1600. Image path: \SystemRoot\system32\drivers\ws2ifsl.sys
  1601. Image name: ws2ifsl.sys
  1602. Timestamp: Tue Jul 14 03:10:33 2009 (4A5BCCF9)
  1603. CheckSum: 0000B7A3
  1604. ImageSize: 0000B000
  1605. File version: 6.1.7600.16385
  1606. Product version: 6.1.7600.16385
  1607. File flags: 0 (Mask 3F)
  1608. File OS: 40004 NT Win32
  1609. File type: 3.7 Driver
  1610. File date: 00000000.00000000
  1611. Translations: 0409.04b0
  1612. CompanyName: Microsoft Corporation
  1613. ProductName: Microsoft® Windows® Operating System
  1614. InternalName: ws2ifsl.sys
  1615. OriginalFilename: ws2ifsl.sys
  1616. ProductVersion: 6.1.7600.16385
  1617. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  1618. FileDescription: Winsock2 IFS Layer
  1619. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1620. fffff880`05192000 fffff880`0519b000 wfplwf (deferred)
  1621. Mapped memory image file: c:\cache\wfplwf.sys\4A5BCCB69000\wfplwf.sys
  1622. Image path: \SystemRoot\system32\DRIVERS\wfplwf.sys
  1623. Image name: wfplwf.sys
  1624. Timestamp: Tue Jul 14 03:09:26 2009 (4A5BCCB6)
  1625. CheckSum: 0000B17B
  1626. ImageSize: 00009000
  1627. File version: 6.1.7600.16385
  1628. Product version: 6.1.7600.16385
  1629. File flags: 0 (Mask 3F)
  1630. File OS: 40004 NT Win32
  1631. File type: 3.6 Driver
  1632. File date: 00000000.00000000
  1633. Translations: 0000.04b0
  1634. CompanyName: Microsoft Corporation
  1635. ProductName: Microsoft® Windows® Operating System
  1636. InternalName: WFPLWF.SYS
  1637. OriginalFilename: WFPLWF.SYS
  1638. ProductVersion: 6.1.7600.16385
  1639. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  1640. FileDescription: WFP NDIS 6.20 Lightweight Filter Driver
  1641. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1642. fffff880`0519b000 fffff880`051c1000 pacer (deferred)
  1643. Mapped memory image file: c:\cache\pacer.sys\4CE7A86226000\pacer.sys
  1644. Image path: \SystemRoot\system32\DRIVERS\pacer.sys
  1645. Image name: pacer.sys
  1646. Timestamp: Sat Nov 20 12:52:18 2010 (4CE7A862)
  1647. CheckSum: 00020DCF
  1648. ImageSize: 00026000
  1649. File version: 6.1.7601.17514
  1650. Product version: 6.1.7601.17514
  1651. File flags: 0 (Mask 3F)
  1652. File OS: 40004 NT Win32
  1653. File type: 3.6 Driver
  1654. File date: 00000000.00000000
  1655. Translations: 0409.04b0
  1656. CompanyName: Microsoft Corporation
  1657. ProductName: Microsoft® Windows® Operating System
  1658. InternalName: pacer.sys
  1659. OriginalFilename: pacer.sys
  1660. ProductVersion: 6.1.7601.17514
  1661. FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
  1662. FileDescription: QoS Packet Scheduler
  1663. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1664. fffff880`051c1000 fffff880`051d7000 vwififlt (deferred)
  1665. Mapped memory image file: c:\cache\vwififlt.sys\4A5BCC3A16000\vwififlt.sys
  1666. Image path: \SystemRoot\system32\DRIVERS\vwififlt.sys
  1667. Image name: vwififlt.sys
  1668. Timestamp: Tue Jul 14 03:07:22 2009 (4A5BCC3A)
  1669. CheckSum: 0001A7DC
  1670. ImageSize: 00016000
  1671. File version: 6.1.7600.16385
  1672. Product version: 6.1.7600.16385
  1673. File flags: 0 (Mask 3F)
  1674. File OS: 40004 NT Win32
  1675. File type: 3.6 Driver
  1676. File date: 00000000.00000000
  1677. Translations: 0000.04b0
  1678. CompanyName: Microsoft Corporation
  1679. ProductName: Microsoft® Windows® Operating System
  1680. InternalName: vwififlt.sys
  1681. OriginalFilename: vwififlt.sys
  1682. ProductVersion: 6.1.7600.16385
  1683. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  1684. FileDescription: Virtual WiFi Filter Driver
  1685. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1686. fffff880`051d7000 fffff880`051fa000 luafv (deferred)
  1687. Mapped memory image file: c:\cache\luafv.sys\4A5BC29523000\luafv.sys
  1688. Image path: \SystemRoot\system32\drivers\luafv.sys
  1689. Image name: luafv.sys
  1690. Timestamp: Tue Jul 14 02:26:13 2009 (4A5BC295)
  1691. CheckSum: 00027BF1
  1692. ImageSize: 00023000
  1693. File version: 6.1.7600.16385
  1694. Product version: 6.1.7600.16385
  1695. File flags: 0 (Mask 3F)
  1696. File OS: 40004 NT Win32
  1697. File type: 3.7 Driver
  1698. File date: 00000000.00000000
  1699. Translations: 0409.04b0
  1700. CompanyName: Microsoft Corporation
  1701. ProductName: Microsoft® Windows® Operating System
  1702. InternalName: luafv.sys
  1703. OriginalFilename: luafv.sys
  1704. ProductVersion: 6.1.7600.16385
  1705. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  1706. FileDescription: LUA File Virtualization Filter Driver
  1707. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1708. fffff880`05400000 fffff880`0541b000 wanarp (deferred)
  1709. Mapped memory image file: c:\cache\wanarp.sys\4CE7A8741b000\wanarp.sys
  1710. Image path: \SystemRoot\system32\DRIVERS\wanarp.sys
  1711. Image name: wanarp.sys
  1712. Timestamp: Sat Nov 20 12:52:36 2010 (4CE7A874)
  1713. CheckSum: 00017CCC
  1714. ImageSize: 0001B000
  1715. File version: 6.1.7601.17514
  1716. Product version: 6.1.7601.17514
  1717. File flags: 0 (Mask 3F)
  1718. File OS: 40004 NT Win32
  1719. File type: 3.6 Driver
  1720. File date: 00000000.00000000
  1721. Translations: 0409.04b0
  1722. CompanyName: Microsoft Corporation
  1723. ProductName: Microsoft® Windows® Operating System
  1724. InternalName: WANARP.SYS
  1725. OriginalFilename: WANARP.SYS
  1726. ProductVersion: 6.1.7601.17514
  1727. FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
  1728. FileDescription: MS Remote Access and Routing ARP Driver
  1729. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1730. fffff880`0541b000 fffff880`0542f000 termdd (deferred)
  1731. Mapped memory image file: c:\cache\termdd.sys\4CE7AB0C14000\termdd.sys
  1732. Image path: \SystemRoot\system32\DRIVERS\termdd.sys
  1733. Image name: termdd.sys
  1734. Timestamp: Sat Nov 20 13:03:40 2010 (4CE7AB0C)
  1735. CheckSum: 00019E15
  1736. ImageSize: 00014000
  1737. File version: 6.1.7601.17514
  1738. Product version: 6.1.7601.17514
  1739. File flags: 0 (Mask 3F)
  1740. File OS: 40004 NT Win32
  1741. File type: 3.7 Driver
  1742. File date: 00000000.00000000
  1743. Translations: 0409.04b0
  1744. CompanyName: Microsoft Corporation
  1745. ProductName: Microsoft® Windows® Operating System
  1746. InternalName: termdd.sys
  1747. OriginalFilename: termdd.sys
  1748. ProductVersion: 6.1.7601.17514
  1749. FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
  1750. FileDescription: Remote Desktop Server Driver
  1751. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1752. fffff880`0542f000 fffff880`05480000 rdbss (deferred)
  1753. Mapped memory image file: c:\cache\rdbss.sys\4CE7949751000\rdbss.sys
  1754. Image path: \SystemRoot\system32\DRIVERS\rdbss.sys
  1755. Image name: rdbss.sys
  1756. Timestamp: Sat Nov 20 11:27:51 2010 (4CE79497)
  1757. CheckSum: 0004D76F
  1758. ImageSize: 00051000
  1759. File version: 6.1.7601.17514
  1760. Product version: 6.1.7601.17514
  1761. File flags: 0 (Mask 3F)
  1762. File OS: 40004 NT Win32
  1763. File type: 3.7 Driver
  1764. File date: 00000000.00000000
  1765. Translations: 0409.04b0
  1766. CompanyName: Microsoft Corporation
  1767. ProductName: Microsoft® Windows® Operating System
  1768. InternalName: rdbss.sys
  1769. OriginalFilename: RDBSS.Sys
  1770. ProductVersion: 6.1.7601.17514
  1771. FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
  1772. FileDescription: Redirected Drive Buffering SubSystem Driver
  1773. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1774. fffff880`05484000 fffff880`055d7000 bflwfx64 (deferred)
  1775. Image path: \SystemRoot\system32\DRIVERS\bflwfx64.sys
  1776. Image name: bflwfx64.sys
  1777. Timestamp: Thu Jun 14 19:01:42 2012 (4FDA0AE6)
  1778. CheckSum: 00011EE2
  1779. ImageSize: 00153000
  1780. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  1781. fffff880`055d7000 fffff880`055e1000 klim6 (deferred)
  1782. Image path: \SystemRoot\system32\DRIVERS\klim6.sys
  1783. Image name: klim6.sys
  1784. Timestamp: Thu Jul 11 10:54:08 2013 (51DE64A0)
  1785. CheckSum: 0001610A
  1786. ImageSize: 0000A000
  1787. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  1788. fffff880`055e1000 fffff880`055f0000 netbios (deferred)
  1789. Mapped memory image file: c:\cache\netbios.sys\4A5BCCB6f000\netbios.sys
  1790. Image path: \SystemRoot\system32\DRIVERS\netbios.sys
  1791. Image name: netbios.sys
  1792. Timestamp: Tue Jul 14 03:09:26 2009 (4A5BCCB6)
  1793. CheckSum: 00011668
  1794. ImageSize: 0000F000
  1795. File version: 6.1.7600.16385
  1796. Product version: 6.1.7600.16385
  1797. File flags: 0 (Mask 3F)
  1798. File OS: 40004 NT Win32
  1799. File type: 3.6 Driver
  1800. File date: 00000000.00000000
  1801. Translations: 0409.04b0
  1802. CompanyName: Microsoft Corporation
  1803. ProductName: Microsoft® Windows® Operating System
  1804. InternalName: NETBIOS.SYS
  1805. OriginalFilename: NETBIOS.SYS
  1806. ProductVersion: 6.1.7600.16385
  1807. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  1808. FileDescription: NetBIOS interface driver
  1809. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1810. fffff880`055f0000 fffff880`055fd000 nvvad64v (deferred)
  1811. Image path: \SystemRoot\system32\drivers\nvvad64v.sys
  1812. Image name: nvvad64v.sys
  1813. Timestamp: Fri Mar 21 19:42:58 2014 (532C7A22)
  1814. CheckSum: 00011E1A
  1815. ImageSize: 0000D000
  1816. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  1817. fffff880`05800000 fffff880`05826000 tunnel (deferred)
  1818. Mapped memory image file: c:\cache\tunnel.sys\4CE7A84626000\tunnel.sys
  1819. Image path: \SystemRoot\system32\DRIVERS\tunnel.sys
  1820. Image name: tunnel.sys
  1821. Timestamp: Sat Nov 20 12:51:50 2010 (4CE7A846)
  1822. CheckSum: 0002CD96
  1823. ImageSize: 00026000
  1824. File version: 6.1.7601.17514
  1825. Product version: 6.1.7601.17514
  1826. File flags: 0 (Mask 3F)
  1827. File OS: 40004 NT Win32
  1828. File type: 3.6 Driver
  1829. File date: 00000000.00000000
  1830. Translations: 0409.04b0
  1831. CompanyName: Microsoft Corporation
  1832. ProductName: Microsoft® Windows® Operating System
  1833. InternalName: tunnel.sys
  1834. OriginalFilename: tunnel.sys
  1835. ProductVersion: 6.1.7601.17514
  1836. FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
  1837. FileDescription: Microsoft Tunnel Interface Driver
  1838. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1839. fffff880`05830000 fffff880`05924000 dxgkrnl (deferred)
  1840. Mapped memory image file: c:\cache\dxgkrnl.sys\5164DC49f4000\dxgkrnl.sys
  1841. Image path: \SystemRoot\System32\drivers\dxgkrnl.sys
  1842. Image name: dxgkrnl.sys
  1843. Timestamp: Wed Apr 10 06:28:09 2013 (5164DC49)
  1844. CheckSum: 000F750D
  1845. ImageSize: 000F4000
  1846. File version: 6.1.7601.18126
  1847. Product version: 6.1.7601.18126
  1848. File flags: 0 (Mask 3F)
  1849. File OS: 40004 NT Win32
  1850. File type: 3.7 Driver
  1851. File date: 00000000.00000000
  1852. Translations: 0409.04b0
  1853. CompanyName: Microsoft Corporation
  1854. ProductName: Microsoft® Windows® Operating System
  1855. InternalName: dxgkrnl.sys
  1856. OriginalFilename: dxgkrnl.sys
  1857. ProductVersion: 6.1.7601.18126
  1858. FileVersion: 6.1.7601.18126 (win7sp1_gdr.130409-1534)
  1859. FileDescription: DirectX Graphics Kernel
  1860. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1861. fffff880`05924000 fffff880`0596a000 dxgmms1 (deferred)
  1862. Mapped memory image file: c:\cache\dxgmms1.sys\5164DC1346000\dxgmms1.sys
  1863. Image path: \SystemRoot\System32\drivers\dxgmms1.sys
  1864. Image name: dxgmms1.sys
  1865. Timestamp: Wed Apr 10 06:27:15 2013 (5164DC13)
  1866. CheckSum: 00043C9B
  1867. ImageSize: 00046000
  1868. File version: 6.1.7601.18126
  1869. Product version: 6.1.7601.18126
  1870. File flags: 0 (Mask 3F)
  1871. File OS: 40004 NT Win32
  1872. File type: 3.7 Driver
  1873. File date: 00000000.00000000
  1874. Translations: 0409.04b0
  1875. CompanyName: Microsoft Corporation
  1876. ProductName: Microsoft® Windows® Operating System
  1877. InternalName: dxgmms1.sys
  1878. OriginalFilename: dxgmms1.sys
  1879. ProductVersion: 6.1.7601.18126
  1880. FileVersion: 6.1.7601.18126 (win7sp1_gdr.130409-1534)
  1881. FileDescription: DirectX Graphics MMS
  1882. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1883. fffff880`0596a000 fffff880`05976000 nsiproxy (deferred)
  1884. Mapped memory image file: c:\cache\nsiproxy.sys\4A5BC15Ec000\nsiproxy.sys
  1885. Image path: \SystemRoot\system32\drivers\nsiproxy.sys
  1886. Image name: nsiproxy.sys
  1887. Timestamp: Tue Jul 14 02:21:02 2009 (4A5BC15E)
  1888. CheckSum: 00013ED5
  1889. ImageSize: 0000C000
  1890. File version: 6.1.7600.16385
  1891. Product version: 6.1.7600.16385
  1892. File flags: 0 (Mask 3F)
  1893. File OS: 40004 NT Win32
  1894. File type: 3.6 Driver
  1895. File date: 00000000.00000000
  1896. Translations: 0409.04b0
  1897. CompanyName: Microsoft Corporation
  1898. ProductName: Microsoft® Windows® Operating System
  1899. InternalName: nsiproxy.sys
  1900. OriginalFilename: nsiproxy.sys
  1901. ProductVersion: 6.1.7600.16385
  1902. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  1903. FileDescription: NSI Proxy
  1904. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1905. fffff880`05976000 fffff880`05981000 mssmbios (deferred)
  1906. Mapped memory image file: c:\cache\mssmbios.sys\4A5BC3BEb000\mssmbios.sys
  1907. Image path: \SystemRoot\system32\DRIVERS\mssmbios.sys
  1908. Image name: mssmbios.sys
  1909. Timestamp: Tue Jul 14 02:31:10 2009 (4A5BC3BE)
  1910. CheckSum: 0000F474
  1911. ImageSize: 0000B000
  1912. File version: 6.1.7600.16385
  1913. Product version: 6.1.7600.16385
  1914. File flags: 0 (Mask 3F)
  1915. File OS: 40004 NT Win32
  1916. File type: 3.7 Driver
  1917. File date: 00000000.00000000
  1918. Translations: 0409.04b0
  1919. CompanyName: Microsoft Corporation
  1920. ProductName: Microsoft® Windows® Operating System
  1921. InternalName: smbios.sys
  1922. OriginalFilename: smbios.sys
  1923. ProductVersion: 6.1.7600.16385
  1924. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  1925. FileDescription: System Management BIOS Driver
  1926. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1927. fffff880`05981000 fffff880`059ae000 kneps (deferred)
  1928. Image path: \SystemRoot\system32\DRIVERS\kneps.sys
  1929. Image name: kneps.sys
  1930. Timestamp: Tue Mar 05 11:09:23 2013 (5135B643)
  1931. CheckSum: 0003395F
  1932. ImageSize: 0002D000
  1933. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  1934. fffff880`059ae000 fffff880`059ba000 ElbyCDIO (deferred)
  1935. Image path: \SystemRoot\System32\Drivers\ElbyCDIO.sys
  1936. Image name: ElbyCDIO.sys
  1937. Timestamp: Mon Mar 04 11:21:51 2013 (513467AF)
  1938. CheckSum: 0001936A
  1939. ImageSize: 0000C000
  1940. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  1941. fffff880`059ba000 fffff880`059c9000 discache (deferred)
  1942. Mapped memory image file: c:\cache\discache.sys\4A5BC52Ef000\discache.sys
  1943. Image path: \SystemRoot\System32\drivers\discache.sys
  1944. Image name: discache.sys
  1945. Timestamp: Tue Jul 14 02:37:18 2009 (4A5BC52E)
  1946. CheckSum: 00015F3F
  1947. ImageSize: 0000F000
  1948. File version: 6.1.7600.16385
  1949. Product version: 6.1.7600.16385
  1950. File flags: 0 (Mask 3F)
  1951. File OS: 40004 NT Win32
  1952. File type: 2.0 Dll
  1953. File date: 00000000.00000000
  1954. Translations: 0409.04b0
  1955. CompanyName: Microsoft Corporation
  1956. ProductName: Microsoft® Windows® Operating System
  1957. InternalName: syscache.sys
  1958. OriginalFilename: syscache.sys
  1959. ProductVersion: 6.1.7600.16385
  1960. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  1961. FileDescription: System Indexer/Cache Driver
  1962. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1963. fffff880`059c9000 fffff880`059e7000 dfsc (deferred)
  1964. Mapped memory image file: c:\cache\dfsc.sys\4CE794471e000\dfsc.sys
  1965. Image path: \SystemRoot\System32\Drivers\dfsc.sys
  1966. Image name: dfsc.sys
  1967. Timestamp: Sat Nov 20 11:26:31 2010 (4CE79447)
  1968. CheckSum: 0001D647
  1969. ImageSize: 0001E000
  1970. File version: 6.1.7601.17514
  1971. Product version: 6.1.7601.17514
  1972. File flags: 0 (Mask 3F)
  1973. File OS: 40004 NT Win32
  1974. File type: 3.7 Driver
  1975. File date: 00000000.00000000
  1976. Translations: 0409.04b0
  1977. CompanyName: Microsoft Corporation
  1978. ProductName: Microsoft® Windows® Operating System
  1979. InternalName: dfsclient.sys
  1980. OriginalFilename: dfsclient.sys
  1981. ProductVersion: 6.1.7601.17514
  1982. FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
  1983. FileDescription: DFS Namespace Client Driver
  1984. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1985. fffff880`059e7000 fffff880`059f8000 blbdrive (deferred)
  1986. Mapped memory image file: c:\cache\blbdrive.sys\4A5BC4DF11000\blbdrive.sys
  1987. Image path: \SystemRoot\system32\DRIVERS\blbdrive.sys
  1988. Image name: blbdrive.sys
  1989. Timestamp: Tue Jul 14 02:35:59 2009 (4A5BC4DF)
  1990. CheckSum: 00019567
  1991. ImageSize: 00011000
  1992. File version: 6.1.7600.16385
  1993. Product version: 6.1.7600.16385
  1994. File flags: 0 (Mask 3F)
  1995. File OS: 40004 NT Win32
  1996. File type: 3.7 Driver
  1997. File date: 00000000.00000000
  1998. Translations: 0409.04b0
  1999. CompanyName: Microsoft Corporation
  2000. ProductName: Microsoft® Windows® Operating System
  2001. InternalName: blbdrive.sys
  2002. OriginalFilename: blbdrive.sys
  2003. ProductVersion: 6.1.7600.16385
  2004. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  2005. FileDescription: BLB Drive Driver
  2006. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2007. fffff880`05a00000 fffff880`05ac3000 iusb3xhc (deferred)
  2008. Image path: \SystemRoot\system32\DRIVERS\iusb3xhc.sys
  2009. Image name: iusb3xhc.sys
  2010. Timestamp: Tue Mar 26 18:05:28 2013 (5151C748)
  2011. CheckSum: 000CDDA1
  2012. ImageSize: 000C3000
  2013. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  2014. fffff880`05ac3000 fffff880`05ac4f00 USBD (deferred)
  2015. Mapped memory image file: c:\cache\USBD.SYS\4D8C0BFB1f00\USBD.SYS
  2016. Image path: \SystemRoot\system32\DRIVERS\USBD.SYS
  2017. Image name: USBD.SYS
  2018. Timestamp: Fri Mar 25 05:28:59 2011 (4D8C0BFB)
  2019. CheckSum: 00005257
  2020. ImageSize: 00001F00
  2021. File version: 6.1.7601.17586
  2022. Product version: 6.1.7601.17586
  2023. File flags: 0 (Mask 3F)
  2024. File OS: 40004 NT Win32
  2025. File type: 2.0 Dll
  2026. File date: 00000000.00000000
  2027. Translations: 0000.04b0
  2028. CompanyName: Microsoft Corporation
  2029. ProductName: Microsoft® Windows® Operating System
  2030. InternalName: usbd.sys
  2031. OriginalFilename: usbd.sys
  2032. ProductVersion: 6.1.7601.17586
  2033. FileVersion: 6.1.7601.17586 (win7sp1_gdr.110324-1501)
  2034. FileDescription: Universal Serial Bus Driver
  2035. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2036. fffff880`05ac5000 fffff880`05ad8000 HECIx64 (deferred)
  2037. Image path: \SystemRoot\system32\DRIVERS\HECIx64.sys
  2038. Image name: HECIx64.sys
  2039. Timestamp: Mon Dec 17 21:32:21 2012 (50CF7345)
  2040. CheckSum: 0001803D
  2041. ImageSize: 00013000
  2042. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  2043. fffff880`05ad8000 fffff880`05ae9000 usbehci (deferred)
  2044. Mapped memory image file: c:\cache\usbehci.sys\4D8C0C0011000\usbehci.sys
  2045. Image path: \SystemRoot\system32\drivers\usbehci.sys
  2046. Image name: usbehci.sys
  2047. Timestamp: Fri Mar 25 05:29:04 2011 (4D8C0C00)
  2048. CheckSum: 0000DE59
  2049. ImageSize: 00011000
  2050. File version: 6.1.7601.17586
  2051. Product version: 6.1.7601.17586
  2052. File flags: 0 (Mask 3F)
  2053. File OS: 40004 NT Win32
  2054. File type: 2.0 Dll
  2055. File date: 00000000.00000000
  2056. Translations: 0409.04b0
  2057. CompanyName: Microsoft Corporation
  2058. ProductName: Microsoft® Windows® Operating System
  2059. InternalName: USBEHCI.sys
  2060. OriginalFilename: USBEHCI.sys
  2061. ProductVersion: 6.1.7601.17586
  2062. FileVersion: 6.1.7601.17586 (win7sp1_gdr.110324-1501)
  2063. FileDescription: EHCI eUSB Miniport Driver
  2064. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2065. fffff880`05ae9000 fffff880`05af8000 VClone (deferred)
  2066. Image path: \SystemRoot\system32\DRIVERS\VClone.sys
  2067. Image name: VClone.sys
  2068. Timestamp: Mon Mar 11 02:49:12 2013 (513D2A08)
  2069. CheckSum: 0000CEB4
  2070. ImageSize: 0000F000
  2071. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  2072. fffff880`05af8000 fffff880`05f1c000 igdkmd64 (deferred)
  2073. Image path: \SystemRoot\system32\DRIVERS\igdkmd64.sys
  2074. Image name: igdkmd64.sys
  2075. Timestamp: Thu Jan 23 00:42:16 2014 (52E04948)
  2076. CheckSum: 004167F1
  2077. ImageSize: 00424000
  2078. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  2079. fffff880`05f1c000 fffff880`05f40000 HDAudBus (deferred)
  2080. Mapped memory image file: c:\cache\HDAudBus.sys\4CE7A65E24000\HDAudBus.sys
  2081. Image path: \SystemRoot\system32\DRIVERS\HDAudBus.sys
  2082. Image name: HDAudBus.sys
  2083. Timestamp: Sat Nov 20 12:43:42 2010 (4CE7A65E)
  2084. CheckSum: 0002BFAB
  2085. ImageSize: 00024000
  2086. File version: 6.1.7601.17514
  2087. Product version: 6.1.7601.17514
  2088. File flags: 0 (Mask 3F)
  2089. File OS: 40004 NT Win32
  2090. File type: 3.9 Driver
  2091. File date: 00000000.00000000
  2092. Translations: 0409.04b0
  2093. CompanyName: Microsoft Corporation
  2094. ProductName: Microsoft® Windows® Operating System
  2095. InternalName: hdaudbus.sys
  2096. OriginalFilename: hdaudbus.sys
  2097. ProductVersion: 6.1.7601.17514
  2098. FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
  2099. FileDescription: High Definition Audio Bus Driver
  2100. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2101. fffff880`05f40000 fffff880`05f96000 USBPORT (deferred)
  2102. Mapped memory image file: c:\cache\USBPORT.SYS\4D8C0C0856000\USBPORT.SYS
  2103. Image path: \SystemRoot\system32\drivers\USBPORT.SYS
  2104. Image name: USBPORT.SYS
  2105. Timestamp: Fri Mar 25 05:29:12 2011 (4D8C0C08)
  2106. CheckSum: 00056970
  2107. ImageSize: 00056000
  2108. File version: 6.1.7601.17586
  2109. Product version: 6.1.7601.17586
  2110. File flags: 0 (Mask 3F)
  2111. File OS: 40004 NT Win32
  2112. File type: 2.0 Dll
  2113. File date: 00000000.00000000
  2114. Translations: 0409.04b0
  2115. CompanyName: Microsoft Corporation
  2116. ProductName: Microsoft® Windows® Operating System
  2117. InternalName: usbport.sys
  2118. OriginalFilename: usbport.sys
  2119. ProductVersion: 6.1.7601.17586
  2120. FileVersion: 6.1.7601.17586 (win7sp1_gdr.110324-1501)
  2121. FileDescription: USB 1.1 & 2.0 Port Driver
  2122. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2123. fffff880`05f96000 fffff880`05fc0000 e22w7x64 (deferred)
  2124. Image path: \SystemRoot\system32\DRIVERS\e22w7x64.sys
  2125. Image name: e22w7x64.sys
  2126. Timestamp: Wed Dec 05 18:43:48 2012 (50BF79C4)
  2127. CheckSum: 00035FA2
  2128. ImageSize: 0002A000
  2129. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  2130. fffff880`05fc0000 fffff880`05fe0000 sdbus (deferred)
  2131. Mapped memory image file: c:\cache\sdbus.sys\4CE796E620000\sdbus.sys
  2132. Image path: \SystemRoot\system32\DRIVERS\sdbus.sys
  2133. Image name: sdbus.sys
  2134. Timestamp: Sat Nov 20 11:37:42 2010 (4CE796E6)
  2135. CheckSum: 000220E3
  2136. ImageSize: 00020000
  2137. File version: 6.1.7601.17514
  2138. Product version: 6.1.7601.17514
  2139. File flags: 0 (Mask 3F)
  2140. File OS: 40004 NT Win32
  2141. File type: 3.7 Driver
  2142. File date: 00000000.00000000
  2143. Translations: 0409.04b0
  2144. CompanyName: Microsoft Corporation
  2145. ProductName: Microsoft® Windows® Operating System
  2146. InternalName: sdbus.sys
  2147. OriginalFilename: sdbus.sys
  2148. ProductVersion: 6.1.7601.17514
  2149. FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
  2150. FileDescription: SecureDigital Bus Driver
  2151. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2152. fffff880`05fe0000 fffff880`05ffa000 rassstp (deferred)
  2153. Mapped memory image file: c:\cache\rassstp.sys\4A5BCCF11a000\rassstp.sys
  2154. Image path: \SystemRoot\system32\DRIVERS\rassstp.sys
  2155. Image name: rassstp.sys
  2156. Timestamp: Tue Jul 14 03:10:25 2009 (4A5BCCF1)
  2157. CheckSum: 0002274B
  2158. ImageSize: 0001A000
  2159. File version: 6.1.7600.16385
  2160. Product version: 6.1.7600.16385
  2161. File flags: 0 (Mask 3F)
  2162. File OS: 40004 NT Win32
  2163. File type: 3.6 Driver
  2164. File date: 00000000.00000000
  2165. Translations: 0409.04b0
  2166. CompanyName: Microsoft Corporation
  2167. ProductName: Microsoft® Windows® Operating System
  2168. InternalName: rassstp.sys
  2169. OriginalFilename: rassstp.sys
  2170. ProductVersion: 6.1.7600.16385
  2171. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  2172. FileDescription: RAS SSTP Miniport Call Manager
  2173. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2174. fffff880`06207000 fffff880`06e00000 nvlddmkm (deferred)
  2175. Image path: \SystemRoot\system32\DRIVERS\nvlddmkm.sys
  2176. Image name: nvlddmkm.sys
  2177. Timestamp: Sat Feb 08 17:48:31 2014 (52F651CF)
  2178. CheckSum: 00BC7EE8
  2179. ImageSize: 00BF9000
  2180. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  2181. fffff880`07000000 fffff880`07021000 raspptp (deferred)
  2182. Mapped memory image file: c:\cache\raspptp.sys\4CE7A86F21000\raspptp.sys
  2183. Image path: \SystemRoot\system32\DRIVERS\raspptp.sys
  2184. Image name: raspptp.sys
  2185. Timestamp: Sat Nov 20 12:52:31 2010 (4CE7A86F)
  2186. CheckSum: 000251CB
  2187. ImageSize: 00021000
  2188. File version: 6.1.7601.17514
  2189. Product version: 6.1.7601.17514
  2190. File flags: 0 (Mask 3F)
  2191. File OS: 40004 NT Win32
  2192. File type: 3.6 Driver
  2193. File date: 00000000.00000000
  2194. Translations: 0409.04b0
  2195. CompanyName: Microsoft Corporation
  2196. ProductName: Microsoft® Windows® Operating System
  2197. InternalName: RASPPTP.SYS
  2198. OriginalFilename: RASPPTP.SYS
  2199. ProductVersion: 6.1.7601.17514
  2200. FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
  2201. FileDescription: Peer-to-Peer Tunneling Protocol
  2202. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2203. fffff880`07021000 fffff880`07662000 bcmwl664 (deferred)
  2204. Image path: \SystemRoot\system32\DRIVERS\bcmwl664.sys
  2205. Image name: bcmwl664.sys
  2206. Timestamp: Wed Dec 12 08:54:36 2012 (50C82A2C)
  2207. CheckSum: 0063CE5A
  2208. ImageSize: 00641000
  2209. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  2210. fffff880`07662000 fffff880`0766f000 vwifibus (deferred)
  2211. Mapped memory image file: c:\cache\vwifibus.sys\4A5BCC39d000\vwifibus.sys
  2212. Image path: \SystemRoot\system32\DRIVERS\vwifibus.sys
  2213. Image name: vwifibus.sys
  2214. Timestamp: Tue Jul 14 03:07:21 2009 (4A5BCC39)
  2215. CheckSum: 0000C5FA
  2216. ImageSize: 0000D000
  2217. File version: 6.1.7600.16385
  2218. Product version: 6.1.7600.16385
  2219. File flags: 0 (Mask 3F)
  2220. File OS: 40004 NT Win32
  2221. File type: 3.7 Driver
  2222. File date: 00000000.00000000
  2223. Translations: 0409.04b0
  2224. CompanyName: Microsoft Corporation
  2225. ProductName: Microsoft® Windows® Operating System
  2226. InternalName: VWiFiBus.sys
  2227. OriginalFilename: VWiFiBus.sys
  2228. ProductVersion: 6.1.7600.16385
  2229. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  2230. FileDescription: Virtual WiFi Bus Driver
  2231. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2232. fffff880`0766f000 fffff880`07673500 CmBatt (deferred)
  2233. Mapped memory image file: c:\cache\CmBatt.sys\4A5BC3B74500\CmBatt.sys
  2234. Image path: \SystemRoot\system32\DRIVERS\CmBatt.sys
  2235. Image name: CmBatt.sys
  2236. Timestamp: Tue Jul 14 02:31:03 2009 (4A5BC3B7)
  2237. CheckSum: 0000D93A
  2238. ImageSize: 00004500
  2239. File version: 6.1.7600.16385
  2240. Product version: 6.1.7600.16385
  2241. File flags: 0 (Mask 3F)
  2242. File OS: 40004 NT Win32
  2243. File type: 3.7 Driver
  2244. File date: 00000000.00000000
  2245. Translations: 0409.04b0
  2246. CompanyName: Microsoft Corporation
  2247. ProductName: Microsoft® Windows® Operating System
  2248. InternalName: cmbatt.sys
  2249. OriginalFilename: cmbatt.sys
  2250. ProductVersion: 6.1.7600.16385
  2251. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  2252. FileDescription: Control Method Battery Driver
  2253. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2254. fffff880`07674000 fffff880`07692000 i8042prt (deferred)
  2255. Mapped memory image file: c:\cache\i8042prt.sys\4A5BC11D1e000\i8042prt.sys
  2256. Image path: \SystemRoot\system32\DRIVERS\i8042prt.sys
  2257. Image name: i8042prt.sys
  2258. Timestamp: Tue Jul 14 02:19:57 2009 (4A5BC11D)
  2259. CheckSum: 00025E29
  2260. ImageSize: 0001E000
  2261. File version: 6.1.7600.16385
  2262. Product version: 6.1.7600.16385
  2263. File flags: 0 (Mask 3F)
  2264. File OS: 40004 NT Win32
  2265. File type: 3.7 Driver
  2266. File date: 00000000.00000000
  2267. Translations: 0409.04b0
  2268. CompanyName: Microsoft Corporation
  2269. ProductName: Microsoft® Windows® Operating System
  2270. InternalName: i8042prt.sys
  2271. OriginalFilename: i8042prt.sys
  2272. ProductVersion: 6.1.7600.16385
  2273. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  2274. FileDescription: i8042 Port Driver
  2275. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2276. fffff880`07692000 fffff880`07709000 SynTP (deferred)
  2277. Image path: \SystemRoot\system32\DRIVERS\SynTP.sys
  2278. Image name: SynTP.sys
  2279. Timestamp: Mon Apr 08 09:04:17 2013 (51625DE1)
  2280. CheckSum: 000807D3
  2281. ImageSize: 00077000
  2282. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  2283. fffff880`07709000 fffff880`07714000 klkbdflt (deferred)
  2284. Image path: \SystemRoot\system32\DRIVERS\klkbdflt.sys
  2285. Image name: klkbdflt.sys
  2286. Timestamp: Thu Aug 08 16:09:50 2013 (5203989E)
  2287. CheckSum: 0001287C
  2288. ImageSize: 0000B000
  2289. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  2290. fffff880`07714000 fffff880`07723000 kbdclass (deferred)
  2291. Mapped memory image file: c:\cache\kbdclass.sys\4A5BC116f000\kbdclass.sys
  2292. Image path: \SystemRoot\system32\DRIVERS\kbdclass.sys
  2293. Image name: kbdclass.sys
  2294. Timestamp: Tue Jul 14 02:19:50 2009 (4A5BC116)
  2295. CheckSum: 0001B4C5
  2296. ImageSize: 0000F000
  2297. File version: 6.1.7600.16385
  2298. Product version: 6.1.7600.16385
  2299. File flags: 0 (Mask 3F)
  2300. File OS: 40004 NT Win32
  2301. File type: 3.7 Driver
  2302. File date: 00000000.00000000
  2303. Translations: 0409.04b0
  2304. CompanyName: Microsoft Corporation
  2305. ProductName: Microsoft® Windows® Operating System
  2306. InternalName: kbdclass.sys
  2307. OriginalFilename: kbdclass.sys
  2308. ProductVersion: 6.1.7600.16385
  2309. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  2310. FileDescription: Keyboard Class Driver
  2311. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2312. fffff880`07723000 fffff880`0772f000 klmouflt (deferred)
  2313. Image path: \SystemRoot\system32\DRIVERS\klmouflt.sys
  2314. Image name: klmouflt.sys
  2315. Timestamp: Thu Aug 08 16:10:02 2013 (520398AA)
  2316. CheckSum: 00007A05
  2317. ImageSize: 0000C000
  2318. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  2319. fffff880`0772f000 fffff880`0773e000 mouclass (deferred)
  2320. Mapped memory image file: c:\cache\mouclass.sys\4A5BC116f000\mouclass.sys
  2321. Image path: \SystemRoot\system32\DRIVERS\mouclass.sys
  2322. Image name: mouclass.sys
  2323. Timestamp: Tue Jul 14 02:19:50 2009 (4A5BC116)
  2324. CheckSum: 0000E5DE
  2325. ImageSize: 0000F000
  2326. File version: 6.1.7600.16385
  2327. Product version: 6.1.7600.16385
  2328. File flags: 0 (Mask 3F)
  2329. File OS: 40004 NT Win32
  2330. File type: 3.7 Driver
  2331. File date: 00000000.00000000
  2332. Translations: 0409.04b0
  2333. CompanyName: Microsoft Corporation
  2334. ProductName: Microsoft® Windows® Operating System
  2335. InternalName: mouclass.sys
  2336. OriginalFilename: mouclass.sys
  2337. ProductVersion: 6.1.7600.16385
  2338. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  2339. FileDescription: Mouse Class Driver
  2340. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2341. fffff880`0773e000 fffff880`0774b000 Smb_driver_Intel (deferred)
  2342. Image path: \SystemRoot\system32\DRIVERS\Smb_driver_Intel.sys
  2343. Image name: Smb_driver_Intel.sys
  2344. Timestamp: Mon Apr 08 09:06:07 2013 (51625E4F)
  2345. CheckSum: 00009586
  2346. ImageSize: 0000D000
  2347. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  2348. fffff880`0774b000 fffff880`07765000 ST_Accel (deferred)
  2349. Image path: \SystemRoot\system32\DRIVERS\ST_Accel.sys
  2350. Image name: ST_Accel.sys
  2351. Timestamp: Thu Apr 11 21:21:11 2013 (5166FF17)
  2352. CheckSum: 00016E3B
  2353. ImageSize: 0001A000
  2354. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  2355. fffff880`07765000 fffff880`0776e000 wmiacpi (deferred)
  2356. Mapped memory image file: c:\cache\wmiacpi.sys\4A5BC3B69000\wmiacpi.sys
  2357. Image path: \SystemRoot\system32\DRIVERS\wmiacpi.sys
  2358. Image name: wmiacpi.sys
  2359. Timestamp: Tue Jul 14 02:31:02 2009 (4A5BC3B6)
  2360. CheckSum: 000042C0
  2361. ImageSize: 00009000
  2362. File version: 6.1.7600.16385
  2363. Product version: 6.1.7600.16385
  2364. File flags: 0 (Mask 3F)
  2365. File OS: 40004 NT Win32
  2366. File type: 3.7 Driver
  2367. File date: 00000000.00000000
  2368. Translations: 0409.04b0
  2369. CompanyName: Microsoft Corporation
  2370. ProductName: Microsoft® Windows® Operating System
  2371. InternalName: wmiacpi.sys
  2372. OriginalFilename: wmiacpi.sys
  2373. ProductVersion: 6.1.7600.16385
  2374. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  2375. FileDescription: Windows Management Interface for ACPI
  2376. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2377. fffff880`0776e000 fffff880`07784000 intelppm (deferred)
  2378. Mapped memory image file: c:\cache\intelppm.sys\4A5BC0FD16000\intelppm.sys
  2379. Image path: \SystemRoot\system32\DRIVERS\intelppm.sys
  2380. Image name: intelppm.sys
  2381. Timestamp: Tue Jul 14 02:19:25 2009 (4A5BC0FD)
  2382. CheckSum: 0000F4EC
  2383. ImageSize: 00016000
  2384. File version: 6.1.7600.16385
  2385. Product version: 6.1.7600.16385
  2386. File flags: 0 (Mask 3F)
  2387. File OS: 40004 NT Win32
  2388. File type: 3.7 Driver
  2389. File date: 00000000.00000000
  2390. Translations: 0409.04b0
  2391. CompanyName: Microsoft Corporation
  2392. ProductName: Microsoft® Windows® Operating System
  2393. InternalName: intelppm.sys
  2394. OriginalFilename: intelppm.sys
  2395. ProductVersion: 6.1.7600.16385
  2396. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  2397. FileDescription: Processor Device Driver
  2398. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2399. fffff880`07784000 fffff880`07794000 CompositeBus (deferred)
  2400. Mapped memory image file: c:\cache\CompositeBus.sys\4CE7A3ED10000\CompositeBus.sys
  2401. Image path: \SystemRoot\system32\DRIVERS\CompositeBus.sys
  2402. Image name: CompositeBus.sys
  2403. Timestamp: Sat Nov 20 12:33:17 2010 (4CE7A3ED)
  2404. CheckSum: 0000983B
  2405. ImageSize: 00010000
  2406. File version: 6.1.7601.17514
  2407. Product version: 6.1.7601.17514
  2408. File flags: 0 (Mask 3F)
  2409. File OS: 40004 NT Win32
  2410. File type: 2.0 Dll
  2411. File date: 00000000.00000000
  2412. Translations: 0409.04b0
  2413. CompanyName: Microsoft Corporation
  2414. ProductName: Microsoft® Windows® Operating System
  2415. InternalName: compositebus.sys
  2416. OriginalFilename: compositebus.sys
  2417. ProductVersion: 6.1.7601.17514
  2418. FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
  2419. FileDescription: Multi-Transport Composite Bus Enumerator
  2420. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2421. fffff880`07794000 fffff880`077aa000 AgileVpn (deferred)
  2422. Mapped memory image file: c:\cache\AgileVpn.sys\4A5BCCF016000\AgileVpn.sys
  2423. Image path: \SystemRoot\system32\DRIVERS\AgileVpn.sys
  2424. Image name: AgileVpn.sys
  2425. Timestamp: Tue Jul 14 03:10:24 2009 (4A5BCCF0)
  2426. CheckSum: 000192BE
  2427. ImageSize: 00016000
  2428. File version: 6.1.7600.16385
  2429. Product version: 6.1.7600.16385
  2430. File flags: 0 (Mask 3F)
  2431. File OS: 40004 NT Win32
  2432. File type: 3.6 Driver
  2433. File date: 00000000.00000000
  2434. Translations: 0409.04b0
  2435. CompanyName: Microsoft Corporation
  2436. ProductName: Microsoft® Windows® Operating System
  2437. InternalName: agilevpn.sys
  2438. OriginalFilename: agilevpn.sys
  2439. ProductVersion: 6.1.7600.16385
  2440. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  2441. FileDescription: RAS Agile Vpn Miniport Call Manager
  2442. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2443. fffff880`077aa000 fffff880`077ce000 rasl2tp (deferred)
  2444. Mapped memory image file: c:\cache\rasl2tp.sys\4CE7A87224000\rasl2tp.sys
  2445. Image path: \SystemRoot\system32\DRIVERS\rasl2tp.sys
  2446. Image name: rasl2tp.sys
  2447. Timestamp: Sat Nov 20 12:52:34 2010 (4CE7A872)
  2448. CheckSum: 0002CCA3
  2449. ImageSize: 00024000
  2450. File version: 6.1.7601.17514
  2451. Product version: 6.1.7601.17514
  2452. File flags: 0 (Mask 3F)
  2453. File OS: 40004 NT Win32
  2454. File type: 3.6 Driver
  2455. File date: 00000000.00000000
  2456. Translations: 0409.04b0
  2457. CompanyName: Microsoft Corporation
  2458. ProductName: Microsoft® Windows® Operating System
  2459. InternalName: rasl2tp.sys
  2460. OriginalFilename: rasl2tp.sys
  2461. ProductVersion: 6.1.7601.17514
  2462. FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
  2463. FileDescription: RAS L2TP mini-port/call-manager driver
  2464. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2465. fffff880`077ce000 fffff880`077da000 ndistapi (deferred)
  2466. Mapped memory image file: c:\cache\ndistapi.sys\4A5BCCD8c000\ndistapi.sys
  2467. Image path: \SystemRoot\system32\DRIVERS\ndistapi.sys
  2468. Image name: ndistapi.sys
  2469. Timestamp: Tue Jul 14 03:10:00 2009 (4A5BCCD8)
  2470. CheckSum: 000063EA
  2471. ImageSize: 0000C000
  2472. File version: 6.1.7600.16385
  2473. Product version: 6.1.7600.16385
  2474. File flags: 0 (Mask 3F)
  2475. File OS: 40004 NT Win32
  2476. File type: 3.6 Driver
  2477. File date: 00000000.00000000
  2478. Translations: 0409.04b0
  2479. CompanyName: Microsoft Corporation
  2480. ProductName: Microsoft® Windows® Operating System
  2481. InternalName: NDISTAPI.SYS
  2482. OriginalFilename: NDISTAPI.SYS
  2483. ProductVersion: 6.1.7600.16385
  2484. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  2485. FileDescription: NDIS 3.0 connection wrapper driver
  2486. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2487. fffff880`077da000 fffff880`077f5000 raspppoe (deferred)
  2488. Mapped memory image file: c:\cache\raspppoe.sys\4A5BCCE91b000\raspppoe.sys
  2489. Image path: \SystemRoot\system32\DRIVERS\raspppoe.sys
  2490. Image name: raspppoe.sys
  2491. Timestamp: Tue Jul 14 03:10:17 2009 (4A5BCCE9)
  2492. CheckSum: 00019A00
  2493. ImageSize: 0001B000
  2494. File version: 6.1.7600.16385
  2495. Product version: 6.1.7600.16385
  2496. File flags: 0 (Mask 3F)
  2497. File OS: 40004 NT Win32
  2498. File type: 3.6 Driver
  2499. File date: 00000000.00000000
  2500. Translations: 0409.04b0
  2501. CompanyName: Microsoft Corporation
  2502. ProductName: Microsoft® Windows® Operating System
  2503. InternalName: raspppoe.sys
  2504. OriginalFilename: raspppoe.sys
  2505. ProductVersion: 6.1.7600.16385
  2506. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  2507. FileDescription: RAS PPPoE mini-port/call-manager driver
  2508. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2509. fffff880`077f5000 fffff880`077f6480 swenum (deferred)
  2510. Mapped memory image file: c:\cache\swenum.sys\4A5BCA921480\swenum.sys
  2511. Image path: \SystemRoot\system32\DRIVERS\swenum.sys
  2512. Image name: swenum.sys
  2513. Timestamp: Tue Jul 14 03:00:18 2009 (4A5BCA92)
  2514. CheckSum: 0000934E
  2515. ImageSize: 00001480
  2516. File version: 6.1.7600.16385
  2517. Product version: 6.1.7600.16385
  2518. File flags: 0 (Mask 3F)
  2519. File OS: 40004 NT Win32
  2520. File type: 3.0 Driver
  2521. File date: 00000000.00000000
  2522. Translations: 0000.04b0
  2523. CompanyName: Microsoft Corporation
  2524. ProductName: Microsoft® Windows® Operating System
  2525. InternalName: swenum.sys
  2526. OriginalFilename: swenum.sys
  2527. ProductVersion: 6.1.7600.16385
  2528. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  2529. FileDescription: Plug and Play Software Device Enumerator
  2530. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2531. fffff880`07812000 fffff880`0784f000 portcls (deferred)
  2532. Mapped memory image file: c:\cache\portcls.sys\4A5BCC033d000\portcls.sys
  2533. Image path: \SystemRoot\system32\drivers\portcls.sys
  2534. Image name: portcls.sys
  2535. Timestamp: Tue Jul 14 03:06:27 2009 (4A5BCC03)
  2536. CheckSum: 00047A50
  2537. ImageSize: 0003D000
  2538. File version: 6.1.7600.16385
  2539. Product version: 6.1.7600.16385
  2540. File flags: 0 (Mask 3F)
  2541. File OS: 40004 NT Win32
  2542. File type: 3.9 Driver
  2543. File date: 00000000.00000000
  2544. Translations: 0409.04b0
  2545. CompanyName: Microsoft Corporation
  2546. ProductName: Microsoft® Windows® Operating System
  2547. InternalName: portcls.sys
  2548. OriginalFilename: portcls.sys
  2549. ProductVersion: 6.1.7600.16385
  2550. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  2551. FileDescription: Port Class (Class Driver for Port/Miniport Devices)
  2552. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2553. fffff880`0784f000 fffff880`07871000 drmk (deferred)
  2554. Image path: \SystemRoot\system32\drivers\drmk.sys
  2555. Image name: drmk.sys
  2556. Timestamp: Tue Jul 14 04:01:25 2009 (4A5BD8E5)
  2557. CheckSum: 0002966E
  2558. ImageSize: 00022000
  2559. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  2560. fffff880`07871000 fffff880`07876200 ksthunk (deferred)
  2561. Mapped memory image file: c:\cache\ksthunk.sys\4A5BCA935200\ksthunk.sys
  2562. Image path: \SystemRoot\system32\drivers\ksthunk.sys
  2563. Image name: ksthunk.sys
  2564. Timestamp: Tue Jul 14 03:00:19 2009 (4A5BCA93)
  2565. CheckSum: 0000AF92
  2566. ImageSize: 00005200
  2567. File version: 6.1.7600.16385
  2568. Product version: 6.1.7600.16385
  2569. File flags: 0 (Mask 3F)
  2570. File OS: 40004 NT Win32
  2571. File type: 3.0 Driver
  2572. File date: 00000000.00000000
  2573. Translations: 0409.04b0
  2574. CompanyName: Microsoft Corporation
  2575. ProductName: Microsoft® Windows® Operating System
  2576. InternalName: ksthunk.sys
  2577. OriginalFilename: ksthunk.sys
  2578. ProductVersion: 6.1.7600.16385
  2579. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  2580. FileDescription: Kernel Streaming WOW Thunk Service
  2581. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2582. fffff880`07877000 fffff880`078d1000 usbhub (deferred)
  2583. Mapped memory image file: c:\cache\usbhub.sys\4D8C0C155a000\usbhub.sys
  2584. Image path: \SystemRoot\system32\DRIVERS\usbhub.sys
  2585. Image name: usbhub.sys
  2586. Timestamp: Fri Mar 25 05:29:25 2011 (4D8C0C15)
  2587. CheckSum: 00054F31
  2588. ImageSize: 0005A000
  2589. File version: 6.1.7601.17586
  2590. Product version: 6.1.7601.17586
  2591. File flags: 0 (Mask 3F)
  2592. File OS: 40004 NT Win32
  2593. File type: 2.0 Dll
  2594. File date: 00000000.00000000
  2595. Translations: 0409.04b0
  2596. CompanyName: Microsoft Corporation
  2597. ProductName: Microsoft® Windows® Operating System
  2598. InternalName: usbhub.sys
  2599. OriginalFilename: usbhub.sys
  2600. ProductVersion: 6.1.7601.17586
  2601. FileVersion: 6.1.7601.17586 (win7sp1_gdr.110324-1501)
  2602. FileDescription: Default Hub Driver for USB
  2603. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2604. fffff880`078d1000 fffff880`078e6000 NDProxy (deferred)
  2605. Mapped memory image file: c:\cache\NDProxy.SYS\4CE7A86415000\NDProxy.SYS
  2606. Image path: \SystemRoot\System32\Drivers\NDProxy.SYS
  2607. Image name: NDProxy.SYS
  2608. Timestamp: Sat Nov 20 12:52:20 2010 (4CE7A864)
  2609. CheckSum: 00019428
  2610. ImageSize: 00015000
  2611. File version: 6.1.7601.17514
  2612. Product version: 6.1.7601.17514
  2613. File flags: 0 (Mask 3F)
  2614. File OS: 40004 NT Win32
  2615. File type: 3.7 Driver
  2616. File date: 00000000.00000000
  2617. Translations: 0409.04b0
  2618. CompanyName: Microsoft Corporation
  2619. ProductName: Microsoft® Windows® Operating System
  2620. InternalName: ndproxy.sys
  2621. OriginalFilename: ndproxy.sys
  2622. ProductVersion: 6.1.7601.17514
  2623. FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
  2624. FileDescription: NDIS Proxy
  2625. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2626. fffff880`07959000 fffff880`079b8000 iusb3hub (deferred)
  2627. Image path: \SystemRoot\system32\DRIVERS\iusb3hub.sys
  2628. Image name: iusb3hub.sys
  2629. Timestamp: Tue Mar 26 18:05:25 2013 (5151C745)
  2630. CheckSum: 00066E60
  2631. ImageSize: 0005F000
  2632. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  2633. fffff880`079b8000 fffff880`079e5280 usbvideo (deferred)
  2634. Mapped memory image file: c:\cache\usbvideo.sys\4CE7A6922d280\usbvideo.sys
  2635. Image path: \SystemRoot\System32\Drivers\usbvideo.sys
  2636. Image name: usbvideo.sys
  2637. Timestamp: Sat Nov 20 12:44:34 2010 (4CE7A692)
  2638. CheckSum: 0002F4A8
  2639. ImageSize: 0002D280
  2640. File version: 6.1.7601.17514
  2641. Product version: 6.1.7601.17514
  2642. File flags: 0 (Mask 3F)
  2643. File OS: 40004 NT Win32
  2644. File type: 3.0 Driver
  2645. File date: 00000000.00000000
  2646. Translations: 0409.04b0
  2647. CompanyName: Microsoft Corporation
  2648. ProductName: Microsoft® Windows® Operating System
  2649. InternalName: usbvideo.sys
  2650. OriginalFilename: usbvideo.sys
  2651. ProductVersion: 6.1.7601.17514
  2652. FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
  2653. FileDescription: USB Video Class Driver
  2654. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2655. fffff880`079e6000 fffff880`079f9000 dump_dumpfve (deferred)
  2656. Mapped memory image file: c:\cache\dumpfve.sys\4A5BC18F13000\dumpfve.sys
  2657. Image path: \SystemRoot\System32\Drivers\dump_dumpfve.sys
  2658. Image name: dump_dumpfve.sys
  2659. Timestamp: Tue Jul 14 02:21:51 2009 (4A5BC18F)
  2660. CheckSum: 00010DEA
  2661. ImageSize: 00013000
  2662. File version: 6.1.7600.16385
  2663. Product version: 6.1.7600.16385
  2664. File flags: 0 (Mask 3F)
  2665. File OS: 40004 NT Win32
  2666. File type: 3.7 Driver
  2667. File date: 00000000.00000000
  2668. Translations: 0000.04b0
  2669. CompanyName: Microsoft Corporation
  2670. ProductName: Microsoft® Windows® Operating System
  2671. InternalName: dumpfve.sys
  2672. OriginalFilename: dumpfve.sys
  2673. ProductVersion: 6.1.7600.16385
  2674. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  2675. FileDescription: Bitlocker Drive Encryption Crashdump Filter
  2676. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2677. fffff880`09c04000 fffff880`09f3c280 RTKVHD64 (deferred)
  2678. Image path: \SystemRoot\system32\drivers\RTKVHD64.sys
  2679. Image name: RTKVHD64.sys
  2680. Timestamp: Wed Apr 03 14:12:27 2013 (515C0E9B)
  2681. CheckSum: 0033D8A2
  2682. ImageSize: 00338280
  2683. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  2684. fffff880`09f3d000 fffff880`09f5a000 usbccgp (deferred)
  2685. Mapped memory image file: c:\cache\usbccgp.sys\4D8C0C0A1d000\usbccgp.sys
  2686. Image path: \SystemRoot\system32\DRIVERS\usbccgp.sys
  2687. Image name: usbccgp.sys
  2688. Timestamp: Fri Mar 25 05:29:14 2011 (4D8C0C0A)
  2689. CheckSum: 0001B399
  2690. ImageSize: 0001D000
  2691. File version: 6.1.7601.17586
  2692. Product version: 6.1.7601.17586
  2693. File flags: 0 (Mask 3F)
  2694. File OS: 40004 NT Win32
  2695. File type: 2.0 Dll
  2696. File date: 00000000.00000000
  2697. Translations: 0409.04b0
  2698. CompanyName: Microsoft Corporation
  2699. ProductName: Microsoft® Windows® Operating System
  2700. InternalName: USBCCGP.SYS
  2701. OriginalFilename: USBCCGP.SYS
  2702. ProductVersion: 6.1.7601.17586
  2703. FileVersion: 6.1.7601.17586 (win7sp1_gdr.110324-1501)
  2704. FileDescription: USB Common Class Generic Parent Driver
  2705. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2706. fffff880`09f5a000 fffff880`09f68000 hidusb (deferred)
  2707. Mapped memory image file: c:\cache\hidusb.sys\4CE7A665e000\hidusb.sys
  2708. Image path: \SystemRoot\system32\DRIVERS\hidusb.sys
  2709. Image name: hidusb.sys
  2710. Timestamp: Sat Nov 20 12:43:49 2010 (4CE7A665)
  2711. CheckSum: 00012706
  2712. ImageSize: 0000E000
  2713. File version: 6.1.7601.17514
  2714. Product version: 6.1.7601.17514
  2715. File flags: 0 (Mask 3F)
  2716. File OS: 40004 NT Win32
  2717. File type: 2.0 Dll
  2718. File date: 00000000.00000000
  2719. Translations: 0409.04b0
  2720. CompanyName: Microsoft Corporation
  2721. ProductName: Microsoft® Windows® Operating System
  2722. InternalName: HIDUSB.SYS
  2723. OriginalFilename: HIDUSB.SYS
  2724. ProductVersion: 6.1.7601.17514
  2725. FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
  2726. FileDescription: USB Miniport Driver for Input Devices
  2727. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2728. fffff880`09f68000 fffff880`09f81000 HIDCLASS (deferred)
  2729. Mapped memory image file: c:\cache\HIDCLASS.SYS\4CE7A66519000\HIDCLASS.SYS
  2730. Image path: \SystemRoot\system32\DRIVERS\HIDCLASS.SYS
  2731. Image name: HIDCLASS.SYS
  2732. Timestamp: Sat Nov 20 12:43:49 2010 (4CE7A665)
  2733. CheckSum: 00015D32
  2734. ImageSize: 00019000
  2735. File version: 6.1.7601.17514
  2736. Product version: 6.1.7601.17514
  2737. File flags: 0 (Mask 3F)
  2738. File OS: 40004 NT Win32
  2739. File type: 2.0 Dll
  2740. File date: 00000000.00000000
  2741. Translations: 0409.04b0
  2742. CompanyName: Microsoft Corporation
  2743. ProductName: Microsoft® Windows® Operating System
  2744. InternalName: hidclass.sys
  2745. OriginalFilename: hidclass.sys
  2746. ProductVersion: 6.1.7601.17514
  2747. FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
  2748. FileDescription: Hid Class Library
  2749. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2750. fffff880`09f81000 fffff880`09f89080 HIDPARSE (deferred)
  2751. Mapped memory image file: c:\cache\HIDPARSE.SYS\4A5BCBF98080\HIDPARSE.SYS
  2752. Image path: \SystemRoot\system32\DRIVERS\HIDPARSE.SYS
  2753. Image name: HIDPARSE.SYS
  2754. Timestamp: Tue Jul 14 03:06:17 2009 (4A5BCBF9)
  2755. CheckSum: 0000D669
  2756. ImageSize: 00008080
  2757. File version: 6.1.7600.16385
  2758. Product version: 6.1.7600.16385
  2759. File flags: 0 (Mask 3F)
  2760. File OS: 40004 NT Win32
  2761. File type: 2.0 Dll
  2762. File date: 00000000.00000000
  2763. Translations: 0409.04b0
  2764. CompanyName: Microsoft Corporation
  2765. ProductName: Microsoft® Windows® Operating System
  2766. InternalName: hidparse.sys
  2767. OriginalFilename: hidparse.sys
  2768. ProductVersion: 6.1.7600.16385
  2769. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  2770. FileDescription: Hid Parsing Library
  2771. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2772. fffff880`09f8a000 fffff880`09f97000 mouhid (deferred)
  2773. Mapped memory image file: c:\cache\mouhid.sys\4A5BCA94d000\mouhid.sys
  2774. Image path: \SystemRoot\system32\DRIVERS\mouhid.sys
  2775. Image name: mouhid.sys
  2776. Timestamp: Tue Jul 14 03:00:20 2009 (4A5BCA94)
  2777. CheckSum: 00009604
  2778. ImageSize: 0000D000
  2779. File version: 6.1.7600.16385
  2780. Product version: 6.1.7600.16385
  2781. File flags: 0 (Mask 3F)
  2782. File OS: 40004 NT Win32
  2783. File type: 2.0 Dll
  2784. File date: 00000000.00000000
  2785. Translations: 0409.04b0
  2786. CompanyName: Microsoft Corporation
  2787. ProductName: Microsoft® Windows® Operating System
  2788. InternalName: mouhid.sys
  2789. OriginalFilename: mouhid.sys
  2790. ProductVersion: 6.1.7600.16385
  2791. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  2792. FileDescription: HID Mouse Filter Driver
  2793. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2794. fffff880`09f97000 fffff880`09fa5000 kbdhid (deferred)
  2795. Mapped memory image file: c:\cache\kbdhid.sys\4CE7A3F5e000\kbdhid.sys
  2796. Image path: \SystemRoot\system32\DRIVERS\kbdhid.sys
  2797. Image name: kbdhid.sys
  2798. Timestamp: Sat Nov 20 12:33:25 2010 (4CE7A3F5)
  2799. CheckSum: 0000D561
  2800. ImageSize: 0000E000
  2801. File version: 6.1.7601.17514
  2802. Product version: 6.1.7601.17514
  2803. File flags: 0 (Mask 3F)
  2804. File OS: 40004 NT Win32
  2805. File type: 2.0 Dll
  2806. File date: 00000000.00000000
  2807. Translations: 0409.04b0
  2808. CompanyName: Microsoft Corporation
  2809. ProductName: Microsoft® Windows® Operating System
  2810. InternalName: kbdhid.sys
  2811. OriginalFilename: kbdhid.sys
  2812. ProductVersion: 6.1.7601.17514
  2813. FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
  2814. FileDescription: HID Keyboard Filter Driver
  2815. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2816. fffff880`09fa5000 fffff880`09fdb000 fastfat (deferred)
  2817. Mapped memory image file: c:\cache\fastfat.SYS\4A5BC1F036000\fastfat.SYS
  2818. Image path: \SystemRoot\System32\Drivers\fastfat.SYS
  2819. Image name: fastfat.SYS
  2820. Timestamp: Tue Jul 14 02:23:28 2009 (4A5BC1F0)
  2821. CheckSum: 0003AE1E
  2822. ImageSize: 00036000
  2823. File version: 6.1.7600.16385
  2824. Product version: 6.1.7600.16385
  2825. File flags: 0 (Mask 3F)
  2826. File OS: 40004 NT Win32
  2827. File type: 3.7 Driver
  2828. File date: 00000000.00000000
  2829. Translations: 0409.04b0
  2830. CompanyName: Microsoft Corporation
  2831. ProductName: Microsoft® Windows® Operating System
  2832. InternalName: fastfat.sys
  2833. OriginalFilename: FastFAT.Sys
  2834. ProductVersion: 6.1.7600.16385
  2835. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  2836. FileDescription: Fast FAT File System Driver
  2837. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2838. fffff880`09fdb000 fffff880`09fe9000 crashdmp (deferred)
  2839. Mapped memory image file: c:\cache\crashdmp.sys\4A5BCABDe000\crashdmp.sys
  2840. Image path: \SystemRoot\System32\Drivers\crashdmp.sys
  2841. Image name: crashdmp.sys
  2842. Timestamp: Tue Jul 14 03:01:01 2009 (4A5BCABD)
  2843. CheckSum: 000178C7
  2844. ImageSize: 0000E000
  2845. File version: 6.1.7600.16385
  2846. Product version: 6.1.7600.16385
  2847. File flags: 0 (Mask 3F)
  2848. File OS: 40004 NT Win32
  2849. File type: 3.7 Driver
  2850. File date: 00000000.00000000
  2851. Translations: 0409.04b0
  2852. CompanyName: Microsoft Corporation
  2853. ProductName: Microsoft® Windows® Operating System
  2854. InternalName: crashdmp.sys
  2855. OriginalFilename: crashdmp.sys
  2856. ProductVersion: 6.1.7600.16385
  2857. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  2858. FileDescription: Crash Dump Driver
  2859. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2860. fffff880`09fe9000 fffff880`09ff3000 dump_diskdump (deferred)
  2861. Mapped memory image file: c:\cache\diskdump.sys\4DB1DF50a000\diskdump.sys
  2862. Image path: \SystemRoot\System32\Drivers\dump_diskdump.sys
  2863. Image name: dump_diskdump.sys
  2864. Timestamp: Fri Apr 22 23:04:32 2011 (4DB1DF50)
  2865. CheckSum: 0000E8AB
  2866. ImageSize: 0000A000
  2867. File version: 6.1.7601.17601
  2868. Product version: 6.1.7601.17601
  2869. File flags: 0 (Mask 3F)
  2870. File OS: 40004 NT Win32
  2871. File type: 3.7 Driver
  2872. File date: 00000000.00000000
  2873. Translations: 0409.04b0
  2874. CompanyName: Microsoft Corporation
  2875. ProductName: Microsoft® Windows® Operating System
  2876. InternalName: diskdump.sys
  2877. OriginalFilename: diskdump.sys
  2878. ProductVersion: 6.1.7601.17601
  2879. FileVersion: 6.1.7601.17601 (win7sp1_gdr.110422-0546)
  2880. FileDescription: Crash Dump Disk Driver
  2881. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2882. fffff880`09ff3000 fffff880`09fff000 Dxapi (deferred)
  2883. Mapped memory image file: c:\cache\Dxapi.sys\4A5BC574c000\Dxapi.sys
  2884. Image path: \SystemRoot\System32\drivers\Dxapi.sys
  2885. Image name: Dxapi.sys
  2886. Timestamp: Tue Jul 14 02:38:28 2009 (4A5BC574)
  2887. CheckSum: 0001418E
  2888. ImageSize: 0000C000
  2889. File version: 6.1.7600.16385
  2890. Product version: 6.1.7600.16385
  2891. File flags: 0 (Mask 3F)
  2892. File OS: 40004 NT Win32
  2893. File type: 3.7 Driver
  2894. File date: 00000000.00000000
  2895. Translations: 0409.04b0
  2896. CompanyName: Microsoft Corporation
  2897. ProductName: Microsoft® Windows® Operating System
  2898. InternalName: dxapi.sys
  2899. OriginalFilename: dxapi.sys
  2900. ProductVersion: 6.1.7600.16385
  2901. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  2902. FileDescription: DirectX API Driver
  2903. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2904. fffff880`0b436000 fffff880`0b44f000 WudfPf (deferred)
  2905. Mapped memory image file: c:\cache\WudfPf.sys\5010AAE519000\WudfPf.sys
  2906. Image path: \SystemRoot\system32\drivers\WudfPf.sys
  2907. Image name: WudfPf.sys
  2908. Timestamp: Thu Jul 26 05:26:45 2012 (5010AAE5)
  2909. CheckSum: 00021262
  2910. ImageSize: 00019000
  2911. File version: 6.2.9200.16384
  2912. Product version: 6.2.9200.16384
  2913. File flags: 0 (Mask 3F)
  2914. File OS: 40004 NT Win32
  2915. File type: 3.7 Driver
  2916. File date: 00000000.00000000
  2917. Translations: 0000.04b0
  2918. CompanyName: Microsoft Corporation
  2919. ProductName: Microsoft® Windows® Operating System
  2920. InternalName: WUDFPf.sys
  2921. OriginalFilename: WUDFPf.sys
  2922. ProductVersion: 6.2.9200.16384
  2923. FileVersion: 6.2.9200.16384 (win8_rtm.120725-1247)
  2924. FileDescription: Windows Driver Foundation - User-mode Driver Framework Platform Driver
  2925. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2926. fffff880`0b488000 fffff880`0b496000 monitor (deferred)
  2927. Mapped memory image file: c:\cache\monitor.sys\4A5BC58Ce000\monitor.sys
  2928. Image path: \SystemRoot\system32\DRIVERS\monitor.sys
  2929. Image name: monitor.sys
  2930. Timestamp: Tue Jul 14 02:38:52 2009 (4A5BC58C)
  2931. CheckSum: 000092BF
  2932. ImageSize: 0000E000
  2933. File version: 6.1.7600.16385
  2934. Product version: 6.1.7600.16385
  2935. File flags: 0 (Mask 3F)
  2936. File OS: 40004 NT Win32
  2937. File type: 3.7 Driver
  2938. File date: 00000000.00000000
  2939. Translations: 0409.04b0
  2940. CompanyName: Microsoft Corporation
  2941. ProductName: Microsoft® Windows® Operating System
  2942. InternalName: monitor.sys
  2943. OriginalFilename: monitor.sys
  2944. ProductVersion: 6.1.7600.16385
  2945. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  2946. FileDescription: Monitor Driver
  2947. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2948. fffff880`0b496000 fffff880`0b4a1000 WSDPrint (deferred)
  2949. Mapped memory image file: c:\cache\WSDPrint.sys\4A5BD3B8b000\WSDPrint.sys
  2950. Image path: \SystemRoot\system32\DRIVERS\WSDPrint.sys
  2951. Image name: WSDPrint.sys
  2952. Timestamp: Tue Jul 14 03:39:20 2009 (4A5BD3B8)
  2953. CheckSum: 0000FFC5
  2954. ImageSize: 0000B000
  2955. File version: 6.1.7600.16385
  2956. Product version: 6.1.7600.16385
  2957. File flags: 0 (Mask 3F)
  2958. File OS: 40004 NT Win32
  2959. File type: 3.7 Driver
  2960. File date: 00000000.00000000
  2961. Translations: 0409.04b0
  2962. CompanyName: Microsoft Corporation
  2963. ProductName: Microsoft® Windows® Operating System
  2964. InternalName: WSDPrint.sys
  2965. OriginalFilename: WSDPrint.sys
  2966. ProductVersion: 6.1.7600.16385
  2967. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  2968. FileDescription: Web Services Print Device Driver
  2969. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2970. fffff880`0b4a1000 fffff880`0b4ac000 asyncmac (deferred)
  2971. Mapped memory image file: c:\cache\asyncmac.sys\4A5BCCE5b000\asyncmac.sys
  2972. Image path: \SystemRoot\system32\DRIVERS\asyncmac.sys
  2973. Image name: asyncmac.sys
  2974. Timestamp: Tue Jul 14 03:10:13 2009 (4A5BCCE5)
  2975. CheckSum: 0000682A
  2976. ImageSize: 0000B000
  2977. File version: 6.1.7600.16385
  2978. Product version: 6.1.7600.16385
  2979. File flags: 0 (Mask 3F)
  2980. File OS: 40004 NT Win32
  2981. File type: 3.6 Driver
  2982. File date: 00000000.00000000
  2983. Translations: 0409.04b0
  2984. CompanyName: Microsoft Corporation
  2985. ProductName: Microsoft® Windows® Operating System
  2986. InternalName: ASYNCMAC.SYS
  2987. OriginalFilename: ASYNCMAC.SYS
  2988. ProductVersion: 6.1.7600.16385
  2989. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  2990. FileDescription: MS Remote Access serial network driver
  2991. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2992. fffff880`0b4ac000 fffff880`0b4ada80 MSPQM (deferred)
  2993. Mapped memory image file: c:\cache\MSPQM.sys\4A5BCA911a80\MSPQM.sys
  2994. Image path: \SystemRoot\system32\drivers\MSPQM.sys
  2995. Image name: MSPQM.sys
  2996. Timestamp: Tue Jul 14 03:00:17 2009 (4A5BCA91)
  2997. CheckSum: 0000CC3D
  2998. ImageSize: 00001A80
  2999. File version: 6.1.7600.16385
  3000. Product version: 6.1.7600.16385
  3001. File flags: 0 (Mask 3F)
  3002. File OS: 40004 NT Win32
  3003. File type: 3.9 Driver
  3004. File date: 00000000.00000000
  3005. Translations: 0000.04b0
  3006. CompanyName: Microsoft Corporation
  3007. ProductName: Microsoft® Windows® Operating System
  3008. InternalName: mspqm.sys
  3009. OriginalFilename: mspqm.sys
  3010. ProductVersion: 6.1.7600.16385
  3011. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  3012. FileDescription: MS Proxy Quality Manager
  3013. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3014. fffff880`0b4c0000 fffff880`0b529000 srv2 (deferred)
  3015. Mapped memory image file: c:\cache\srv2.sys\4DBA2B0A69000\srv2.sys
  3016. Image path: \SystemRoot\System32\DRIVERS\srv2.sys
  3017. Image name: srv2.sys
  3018. Timestamp: Fri Apr 29 06:05:46 2011 (4DBA2B0A)
  3019. CheckSum: 0006CA1E
  3020. ImageSize: 00069000
  3021. File version: 6.1.7601.17608
  3022. Product version: 6.1.7601.17608
  3023. File flags: 0 (Mask 3F)
  3024. File OS: 40004 NT Win32
  3025. File type: 3.6 Driver
  3026. File date: 00000000.00000000
  3027. Translations: 0409.04b0
  3028. CompanyName: Microsoft Corporation
  3029. ProductName: Microsoft® Windows® Operating System
  3030. InternalName: SRV2.SYS
  3031. OriginalFilename: SRV2.SYS
  3032. ProductVersion: 6.1.7601.17608
  3033. FileVersion: 6.1.7601.17608 (win7sp1_gdr.110428-1525)
  3034. FileDescription: Smb 2.0 Server driver
  3035. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3036. fffff880`0b529000 fffff880`0b5c1000 srv (deferred)
  3037. Mapped memory image file: c:\cache\srv.sys\4DBA2B1E98000\srv.sys
  3038. Image path: \SystemRoot\System32\DRIVERS\srv.sys
  3039. Image name: srv.sys
  3040. Timestamp: Fri Apr 29 06:06:06 2011 (4DBA2B1E)
  3041. CheckSum: 0007C839
  3042. ImageSize: 00098000
  3043. File version: 6.1.7601.17608
  3044. Product version: 6.1.7601.17608
  3045. File flags: 0 (Mask 3F)
  3046. File OS: 40004 NT Win32
  3047. File type: 3.6 Driver
  3048. File date: 00000000.00000000
  3049. Translations: 0409.04b0
  3050. CompanyName: Microsoft Corporation
  3051. ProductName: Microsoft® Windows® Operating System
  3052. InternalName: SRV.SYS
  3053. OriginalFilename: SRV.SYS
  3054. ProductVersion: 6.1.7601.17608
  3055. FileVersion: 6.1.7601.17608 (win7sp1_gdr.110428-1525)
  3056. FileDescription: Server driver
  3057. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3058. fffff880`0d837000 fffff880`0d88a000 nwifi (deferred)
  3059. Mapped memory image file: c:\cache\nwifi.sys\4A5BCC3B53000\nwifi.sys
  3060. Image path: \SystemRoot\system32\DRIVERS\nwifi.sys
  3061. Image name: nwifi.sys
  3062. Timestamp: Tue Jul 14 03:07:23 2009 (4A5BCC3B)
  3063. CheckSum: 00057B55
  3064. ImageSize: 00053000
  3065. File version: 6.1.7600.16385
  3066. Product version: 6.1.7600.16385
  3067. File flags: 0 (Mask 3F)
  3068. File OS: 40004 NT Win32
  3069. File type: 3.6 Driver
  3070. File date: 00000000.00000000
  3071. Translations: 0409.04b0
  3072. CompanyName: Microsoft Corporation
  3073. ProductName: Microsoft® Windows® Operating System
  3074. InternalName: NWiFi.SYS
  3075. OriginalFilename: NWiFi.SYS
  3076. ProductVersion: 6.1.7600.16385
  3077. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  3078. FileDescription: NativeWiFi Miniport Driver
  3079. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3080. fffff880`0d88a000 fffff880`0d89d000 ndisuio (deferred)
  3081. Mapped memory image file: c:\cache\ndisuio.sys\4CE7A7E013000\ndisuio.sys
  3082. Image path: \SystemRoot\system32\DRIVERS\ndisuio.sys
  3083. Image name: ndisuio.sys
  3084. Timestamp: Sat Nov 20 12:50:08 2010 (4CE7A7E0)
  3085. CheckSum: 0001D42D
  3086. ImageSize: 00013000
  3087. File version: 6.1.7601.17514
  3088. Product version: 6.1.7601.17514
  3089. File flags: 0 (Mask 3F)
  3090. File OS: 40004 NT Win32
  3091. File type: 3.6 Driver
  3092. File date: 00000000.00000000
  3093. Translations: 0409.04b0
  3094. CompanyName: Microsoft Corporation
  3095. ProductName: Microsoft® Windows® Operating System
  3096. InternalName: NDISUIO.SYS
  3097. OriginalFilename: NDISUIO.SYS
  3098. ProductVersion: 6.1.7601.17514
  3099. FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
  3100. FileDescription: NDIS User mode I/O driver
  3101. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3102. fffff880`0d89d000 fffff880`0d8b5000 rspndr (deferred)
  3103. Mapped memory image file: c:\cache\rspndr.sys\4A5BCC9218000\rspndr.sys
  3104. Image path: \SystemRoot\system32\DRIVERS\rspndr.sys
  3105. Image name: rspndr.sys
  3106. Timestamp: Tue Jul 14 03:08:50 2009 (4A5BCC92)
  3107. CheckSum: 0001656B
  3108. ImageSize: 00018000
  3109. File version: 6.1.7600.16385
  3110. Product version: 6.1.7600.16385
  3111. File flags: 0 (Mask 3F)
  3112. File OS: 40004 NT Win32
  3113. File type: 3.6 Driver
  3114. File date: 00000000.00000000
  3115. Translations: 0409.04b0
  3116. CompanyName: Microsoft Corporation
  3117. ProductName: Microsoft® Windows® Operating System
  3118. InternalName: RSPNDR.SYS
  3119. OriginalFilename: RSPNDR.SYS
  3120. ProductVersion: 6.1.7600.16385
  3121. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  3122. FileDescription: Link-Layer Topology Responder Driver for NDIS 6
  3123. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3124. fffff880`0d8b5000 fffff880`0d97e000 HTTP (deferred)
  3125. Mapped memory image file: c:\cache\HTTP.sys\4CE793CEc9000\HTTP.sys
  3126. Image path: \SystemRoot\system32\drivers\HTTP.sys
  3127. Image name: HTTP.sys
  3128. Timestamp: Sat Nov 20 11:24:30 2010 (4CE793CE)
  3129. CheckSum: 000C56EE
  3130. ImageSize: 000C9000
  3131. File version: 6.1.7601.17514
  3132. Product version: 6.1.7601.17514
  3133. File flags: 0 (Mask 3F)
  3134. File OS: 40004 NT Win32
  3135. File type: 3.7 Driver
  3136. File date: 00000000.00000000
  3137. Translations: 0409.04b0
  3138. CompanyName: Microsoft Corporation
  3139. ProductName: Microsoft® Windows® Operating System
  3140. InternalName: http.sys
  3141. OriginalFilename: http.sys
  3142. ProductVersion: 6.1.7601.17514
  3143. FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
  3144. FileDescription: HTTP Protocol Stack
  3145. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3146. fffff880`0d97e000 fffff880`0d99c000 bowser (deferred)
  3147. Mapped memory image file: c:\cache\bowser.sys\4D6493281e000\bowser.sys
  3148. Image path: \SystemRoot\system32\DRIVERS\bowser.sys
  3149. Image name: bowser.sys
  3150. Timestamp: Wed Feb 23 06:55:04 2011 (4D649328)
  3151. CheckSum: 00022D38
  3152. ImageSize: 0001E000
  3153. File version: 6.1.7601.17565
  3154. Product version: 6.1.7601.17565
  3155. File flags: 0 (Mask 3F)
  3156. File OS: 40004 NT Win32
  3157. File type: 3.7 Driver
  3158. File date: 00000000.00000000
  3159. Translations: 0409.04b0
  3160. CompanyName: Microsoft Corporation
  3161. ProductName: Microsoft® Windows® Operating System
  3162. InternalName: browser.sys
  3163. OriginalFilename: browser.sys
  3164. ProductVersion: 6.1.7601.17565
  3165. FileVersion: 6.1.7601.17565 (win7sp1_gdr.110222-1630)
  3166. FileDescription: NT Lan Manager Datagram Receiver Driver
  3167. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3168. fffff880`0d99c000 fffff880`0d9b4000 mpsdrv (deferred)
  3169. Mapped memory image file: c:\cache\mpsdrv.sys\4A5BCC7918000\mpsdrv.sys
  3170. Image path: \SystemRoot\System32\drivers\mpsdrv.sys
  3171. Image name: mpsdrv.sys
  3172. Timestamp: Tue Jul 14 03:08:25 2009 (4A5BCC79)
  3173. CheckSum: 0001C76E
  3174. ImageSize: 00018000
  3175. File version: 6.1.7600.16385
  3176. Product version: 6.1.7600.16385
  3177. File flags: 0 (Mask 3F)
  3178. File OS: 40004 NT Win32
  3179. File type: 3.7 Driver
  3180. File date: 00000000.00000000
  3181. Translations: 0409.04b0
  3182. CompanyName: Microsoft Corporation
  3183. ProductName: Microsoft® Windows® Operating System
  3184. InternalName: mpsdrv.sys
  3185. OriginalFilename: mpsdrv.sys
  3186. ProductVersion: 6.1.7600.16385
  3187. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  3188. FileDescription: Microsoft Protection Service Driver
  3189. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3190. fffff880`0d9b4000 fffff880`0d9e1000 mrxsmb (deferred)
  3191. Mapped memory image file: c:\cache\mrxsmb.sys\4DB782262d000\mrxsmb.sys
  3192. Image path: \SystemRoot\system32\DRIVERS\mrxsmb.sys
  3193. Image name: mrxsmb.sys
  3194. Timestamp: Wed Apr 27 05:40:38 2011 (4DB78226)
  3195. CheckSum: 00030225
  3196. ImageSize: 0002D000
  3197. File version: 6.1.7601.17605
  3198. Product version: 6.1.7601.17605
  3199. File flags: 0 (Mask 3F)
  3200. File OS: 40004 NT Win32
  3201. File type: 3.7 Driver
  3202. File date: 00000000.00000000
  3203. Translations: 0409.04b0
  3204. CompanyName: Microsoft Corporation
  3205. ProductName: Microsoft® Windows® Operating System
  3206. InternalName: MRxSmb.sys
  3207. OriginalFilename: MRXSMB.Sys
  3208. ProductVersion: 6.1.7601.17605
  3209. FileVersion: 6.1.7601.17605 (win7sp1_gdr.110426-1503)
  3210. FileDescription: Windows NT SMB Minirdr
  3211. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3212. fffff880`0de58000 fffff880`0dea6000 mrxsmb10 (deferred)
  3213. Mapped memory image file: c:\cache\mrxsmb10.sys\4E17C1044e000\mrxsmb10.sys
  3214. Image path: \SystemRoot\system32\DRIVERS\mrxsmb10.sys
  3215. Image name: mrxsmb10.sys
  3216. Timestamp: Sat Jul 09 05:46:28 2011 (4E17C104)
  3217. CheckSum: 000503C4
  3218. ImageSize: 0004E000
  3219. File version: 6.1.7601.17647
  3220. Product version: 6.1.7601.17647
  3221. File flags: 0 (Mask 3F)
  3222. File OS: 40004 NT Win32
  3223. File type: 3.7 Driver
  3224. File date: 00000000.00000000
  3225. Translations: 0409.04b0
  3226. CompanyName: Microsoft Corporation
  3227. ProductName: Microsoft® Windows® Operating System
  3228. InternalName: MRxSmb0.sys
  3229. OriginalFilename: MRXSMB0.Sys
  3230. ProductVersion: 6.1.7601.17647
  3231. FileVersion: 6.1.7601.17647 (win7sp1_gdr.110708-1503)
  3232. FileDescription: Longhorn SMB Downlevel SubRdr
  3233. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3234. fffff880`0dea6000 fffff880`0deca000 mrxsmb20 (deferred)
  3235. Mapped memory image file: c:\cache\mrxsmb20.sys\4DB781E924000\mrxsmb20.sys
  3236. Image path: \SystemRoot\system32\DRIVERS\mrxsmb20.sys
  3237. Image name: mrxsmb20.sys
  3238. Timestamp: Wed Apr 27 05:39:37 2011 (4DB781E9)
  3239. CheckSum: 0002D8BD
  3240. ImageSize: 00024000
  3241. File version: 6.1.7601.17605
  3242. Product version: 6.1.7601.17605
  3243. File flags: 0 (Mask 3F)
  3244. File OS: 40004 NT Win32
  3245. File type: 3.7 Driver
  3246. File date: 00000000.00000000
  3247. Translations: 0409.04b0
  3248. CompanyName: Microsoft Corporation
  3249. ProductName: Microsoft® Windows® Operating System
  3250. InternalName: MRxSmb20.sys
  3251. OriginalFilename: MRXSMB20.Sys
  3252. ProductVersion: 6.1.7601.17605
  3253. FileVersion: 6.1.7601.17605 (win7sp1_gdr.110426-1503)
  3254. FileDescription: Longhorn SMB 2.0 Redirector
  3255. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3256. fffff880`0deca000 fffff880`0df70000 peauth (deferred)
  3257. Image path: \SystemRoot\system32\drivers\peauth.sys
  3258. Image name: peauth.sys
  3259. Timestamp: Tue Jul 14 04:01:19 2009 (4A5BD8DF)
  3260. CheckSum: 000AB7C9
  3261. ImageSize: 000A6000
  3262. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  3263. fffff880`0df70000 fffff880`0df7b000 secdrv (deferred)
  3264. Image path: \SystemRoot\System32\Drivers\secdrv.SYS
  3265. Image name: secdrv.SYS
  3266. Timestamp: Wed Sep 13 16:18:38 2006 (4508052E)
  3267. CheckSum: 00010B40
  3268. ImageSize: 0000B000
  3269. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  3270. fffff880`0df7b000 fffff880`0dfac000 srvnet (deferred)
  3271. Mapped memory image file: c:\cache\srvnet.sys\4DBA2AFF31000\srvnet.sys
  3272. Image path: \SystemRoot\System32\DRIVERS\srvnet.sys
  3273. Image name: srvnet.sys
  3274. Timestamp: Fri Apr 29 06:05:35 2011 (4DBA2AFF)
  3275. CheckSum: 0003409F
  3276. ImageSize: 00031000
  3277. File version: 6.1.7601.17608
  3278. Product version: 6.1.7601.17608
  3279. File flags: 0 (Mask 3F)
  3280. File OS: 40004 NT Win32
  3281. File type: 3.6 Driver
  3282. File date: 00000000.00000000
  3283. Translations: 0409.04b0
  3284. CompanyName: Microsoft Corporation
  3285. ProductName: Microsoft® Windows® Operating System
  3286. InternalName: SRVNET.SYS
  3287. OriginalFilename: SRVNET.SYS
  3288. ProductVersion: 6.1.7601.17608
  3289. FileVersion: 6.1.7601.17608 (win7sp1_gdr.110428-1525)
  3290. FileDescription: Server Network driver
  3291. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3292. fffff880`0dfac000 fffff880`0dfbe000 tcpipreg (deferred)
  3293. Mapped memory image file: c:\cache\tcpipreg.sys\506C62BE12000\tcpipreg.sys
  3294. Image path: \SystemRoot\System32\drivers\tcpipreg.sys
  3295. Image name: tcpipreg.sys
  3296. Timestamp: Wed Oct 03 19:07:26 2012 (506C62BE)
  3297. CheckSum: 00010902
  3298. ImageSize: 00012000
  3299. File version: 6.1.7601.17964
  3300. Product version: 6.1.7601.17964
  3301. File flags: 0 (Mask 3F)
  3302. File OS: 40004 NT Win32
  3303. File type: 1.0 App
  3304. File date: 00000000.00000000
  3305. Translations: 0409.04b0
  3306. CompanyName: Microsoft Corporation
  3307. ProductName: Microsoft® Windows® Operating System
  3308. InternalName: tcpipreg.sys
  3309. OriginalFilename: tcpipreg.sys
  3310. ProductVersion: 6.1.7601.17964
  3311. FileVersion: 6.1.7601.17964 (win7sp1_gdr.121003-0333)
  3312. FileDescription: TCP/IP Registry Compatibility Driver
  3313. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3314. fffff880`0dfbe000 fffff880`0dfd5e00 WibuKey64 (deferred)
  3315. Image path: \SystemRoot\SYSTEM32\DRIVERS\WibuKey64.sys
  3316. Image name: WibuKey64.sys
  3317. Timestamp: Thu Sep 22 14:24:10 2011 (4E7B1ADA)
  3318. CheckSum: 0001C6AD
  3319. ImageSize: 00017E00
  3320. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  3321. fffff960`000c0000 fffff960`003d7000 win32k (deferred)
  3322. Mapped memory image file: c:\cache\win32k.sys\5202F253317000\win32k.sys
  3323. Image path: \SystemRoot\System32\win32k.sys
  3324. Image name: win32k.sys
  3325. Timestamp: Thu Aug 08 04:20:19 2013 (5202F253)
  3326. CheckSum: 0031170D
  3327. ImageSize: 00317000
  3328. File version: 6.1.7601.18233
  3329. Product version: 6.1.7601.18233
  3330. File flags: 0 (Mask 3F)
  3331. File OS: 40004 NT Win32
  3332. File type: 3.7 Driver
  3333. File date: 00000000.00000000
  3334. Translations: 0409.04b0
  3335. CompanyName: Microsoft Corporation
  3336. ProductName: Microsoft® Windows® Operating System
  3337. InternalName: win32k.sys
  3338. OriginalFilename: win32k.sys
  3339. ProductVersion: 6.1.7601.18233
  3340. FileVersion: 6.1.7601.18233 (win7sp1_gdr.130807-1534)
  3341. FileDescription: Multi-User Win32 Driver
  3342. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3343. fffff960`00410000 fffff960`0041a000 TSDDD (deferred)
  3344. Mapped memory image file: c:\cache\TSDDD.dll\4A5BCE62a000\TSDDD.dll
  3345. Image path: \SystemRoot\System32\TSDDD.dll
  3346. Image name: TSDDD.dll
  3347. Timestamp: Tue Jul 14 03:16:34 2009 (4A5BCE62)
  3348. CheckSum: 00009E96
  3349. ImageSize: 0000A000
  3350. File version: 6.1.7600.16385
  3351. Product version: 6.1.7600.16385
  3352. File flags: 0 (Mask 3F)
  3353. File OS: 40004 NT Win32
  3354. File type: 3.4 Driver
  3355. File date: 00000000.00000000
  3356. Translations: 0000.04b0
  3357. CompanyName: Microsoft Corporation
  3358. ProductName: Microsoft® Windows® Operating System
  3359. InternalName: framebuf.dll
  3360. OriginalFilename: framebuf.dll
  3361. ProductVersion: 6.1.7600.16385
  3362. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  3363. FileDescription: Framebuffer Display Driver
  3364. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3365. fffff960`006f0000 fffff960`00717000 cdd (deferred)
  3366. Image path: \SystemRoot\System32\cdd.dll
  3367. Image name: cdd.dll
  3368. Timestamp: unavailable (00000000)
  3369. CheckSum: 00000000
  3370. ImageSize: 00027000
  3371. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  3372. fffff960`00810000 fffff960`00871000 ATMFD (deferred)
  3373. Image path: \SystemRoot\System32\ATMFD.DLL
  3374. Image name: ATMFD.DLL
  3375. Timestamp: Sun Dec 16 16:45:03 2012 (50CDDE6F)
  3376. CheckSum: 00064F96
  3377. ImageSize: 00061000
  3378. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  3379.  
  3380. Unloaded modules:
  3381. fffff880`0b44f000 fffff880`0b485000 WUDFRd.sys
  3382. Timestamp: unavailable (00000000)
  3383. Checksum: 00000000
  3384. ImageSize: 00036000
  3385. fffff880`0b5c1000 fffff880`0b5dc000 USBSTOR.SYS
  3386. Timestamp: unavailable (00000000)
  3387. Checksum: 00000000
  3388. ImageSize: 0001B000
  3389. fffff880`0b400000 fffff880`0b436000 WUDFRd.sys
  3390. Timestamp: unavailable (00000000)
  3391. Checksum: 00000000
  3392. ImageSize: 00036000
  3393. fffff880`0b47c000 fffff880`0b47e000 MSPQM.sys
  3394. Timestamp: unavailable (00000000)
  3395. Checksum: 00000000
  3396. ImageSize: 00002000
  3397. fffff880`0b471000 fffff880`0b47c000 WSDPrint.sys
  3398. Timestamp: unavailable (00000000)
  3399. Checksum: 00000000
  3400. ImageSize: 0000B000
  3401. fffff880`07800000 fffff880`0780e000 monitor.sys
  3402. Timestamp: unavailable (00000000)
  3403. Checksum: 00000000
  3404. ImageSize: 0000E000
  3405. fffff880`0b47e000 fffff880`0b488000 hiber_storpo
  3406. Timestamp: unavailable (00000000)
  3407. Checksum: 00000000
  3408. ImageSize: 0000A000
  3409. fffff880`26473000 fffff880`26740000 hiber_iaStor
  3410. Timestamp: unavailable (00000000)
  3411. Checksum: 00000000
  3412. ImageSize: 002CD000
  3413. fffff880`26740000 fffff880`26753000 hiber_dumpfv
  3414. Timestamp: unavailable (00000000)
  3415. Checksum: 00000000
  3416. ImageSize: 00013000
  3417. fffff880`078e6000 fffff880`07959000 IntcDAud.sys
  3418. Timestamp: unavailable (00000000)
  3419. Checksum: 00000000
  3420. ImageSize: 00073000
  3421. fffff880`0b400000 fffff880`0b471000 spsys.sys
  3422. Timestamp: unavailable (00000000)
  3423. Checksum: 00000000
  3424. ImageSize: 00071000
  3425. fffff880`078e6000 fffff880`07959000 IntcDAud.sys
  3426. Timestamp: unavailable (00000000)
  3427. Checksum: 00000000
  3428. ImageSize: 00073000
  3429. fffff880`02502000 fffff880`02510000 crashdmp.sys
  3430. Timestamp: unavailable (00000000)
  3431. Checksum: 00000000
  3432. ImageSize: 0000E000
  3433. fffff880`02510000 fffff880`0251a000 dump_storpor
  3434. Timestamp: unavailable (00000000)
  3435. Checksum: 00000000
  3436. ImageSize: 0000A000
  3437. fffff880`04c74000 fffff880`04f41000 dump_iaStorA
  3438. Timestamp: unavailable (00000000)
  3439. Checksum: 00000000
  3440. ImageSize: 002CD000
  3441. fffff880`04f41000 fffff880`04f54000 dump_dumpfve
  3442. Timestamp: unavailable (00000000)
  3443. Checksum: 00000000
  3444. ImageSize: 00013000
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!