API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Jul 18th, 2019
495
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 41.18 KB | None | 0 0
raw download clone embed print report
  1. ========================== AUTO DUMP ANALYZER ==========================
  2. Auto Dump Analyzer
  3. Version: 0.9
  4. Time to analyze file(s): 00 hours and 00 minutes and 57 seconds
  5.  
  6. ================================= CPU ==================================
  7. COUNT: 10
  8. MHZ: 3394
  9. VENDOR: AuthenticAMD
  10. FAMILY: 17
  11. MODEL: 1
  12. STEPPING: 1
  13.  
  14. ================================== OS ==================================
  15. Product: WinNt, suite: TerminalServer SingleUserTS Personal
  16. BUILD_VERSION: 10.0.17763.615 (WinBuild.160101.0800)
  17. BUILD: 17763
  18. SERVICEPACK: 615
  19. PLATFORM_TYPE: x64
  20. NAME: Windows 10
  21. EDITION: Windows 10 WinNt TerminalServer SingleUserTS Personal
  22. BUILD_TIMESTAMP: 2020-05-15 12:13:35
  23. BUILDDATESTAMP: 160101.0800
  24. BUILDLAB: WinBuild
  25. BUILDOSVER: 10.0.17763.615
  26.  
  27. =============================== DEBUGGER ===============================
  28. Microsoft (R) Windows Debugger Version 10.0.14321.1024 AMD64
  29. Copyright (c) Microsoft Corporation. All rights reserved.
  30.  
  31. =============================== COMMENTS ===============================
  32. * Information gathered from different dump files may be different. If
  33. Windows updates between two dump files, two or more OS versions may
  34. be shown above.
  35. * Additional BIOS information (including RAM information) was unreadable
  36. from the first dump file. This can be caused by an outdated BIOS.
  37.  
  38. ========================================================================
  39. ==================== Dump File: 071219-14156-01.dmp ====================
  40. ========================================================================
  41. Mini Kernel Dump File: Only registers and stack trace are available
  42. Windows 10 Kernel Version 17763 MP (16 procs) Free x64
  43. Kernel base = 0xfffff803`57203000 PsLoadedModuleList = 0xfffff803`5761e670
  44. Debug session time: Fri Jul 12 10:12:28.671 2019 (UTC - 4:00)
  45. System Uptime: 0 days 14:36:16.360
  46.  
  47. BugCheck 50, {ffffd484a626f2a0, 0, fffff803572b58bc, 2}
  48. Could not read faulting driver name
  49. Probably caused by : memory_corruption
  50. Followup: memory_corruption
  51.  
  52. PAGE_FAULT_IN_NONPAGED_AREA (50)
  53. Invalid system memory was referenced. This cannot be protected by try-except.
  54. Typically the address is just plain bad or it is pointing at freed memory.
  55.  
  56. Arguments:
  57. Arg1: ffffd484a626f2a0, memory referenced.
  58. Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
  59. Arg3: fffff803572b58bc, If non-zero, the instruction address which referenced the bad memory
  60. address.
  61. Arg4: 0000000000000002, (reserved)
  62.  
  63. Debugging Details:
  64. Could not read faulting driver name
  65. DUMP_CLASS: 1
  66. DUMP_QUALIFIER: 400
  67. DUMP_TYPE: 2
  68. DUMP_FILE_ATTRIBUTES: 0x8
  69. Kernel Generated Triage Dump
  70. READ_ADDRESS: fffff80357745390: Unable to get MiVisibleState
  71. ffffd484a626f2a0
  72. FAULTING_IP:
  73. nt!KeSetPriorityBoost+1c
  74. fffff803`572b58bc 48398120024000 cmp qword ptr [rcx+400220h],rax
  75. MM_INTERNAL_CODE: 2
  76. CUSTOMER_CRASH_COUNT: 1
  77. DEFAULT_BUCKET_ID: CODE_CORRUPTION
  78. BUGCHECK_STR: AV
  79.  
  80. PROCESS_NAME: csrss.exe
  81.  
  82. CURRENT_IRQL: 0
  83. TRAP_FRAME: ffffc580e0c99300 -- (.trap 0xffffc580e0c99300)
  84. NOTE: The trap frame does not contain all registers.
  85. Some register values may be zeroed or incorrect.
  86. rax=fffff803577609c0 rbx=0000000000000000 rcx=ffffd484a5e6f080
  87. rdx=000000000000000f rsi=0000000000000000 rdi=0000000000000000
  88. rip=fffff803572b58bc rsp=ffffc580e0c99490 rbp=ffffc580e0c994c9
  89. r8=0000000000000004 r9=0000000000000000 r10=ffffd484b09e2080
  90. r11=ffff6fffdce00000 r12=0000000000000000 r13=0000000000000000
  91. r14=0000000000000000 r15=0000000000000000
  92. iopl=0 nv up ei ng nz na po nc
  93. nt!KeSetPriorityBoost+0x1c:
  94. fffff803`572b58bc 48398120024000 cmp qword ptr [rcx+400220h],rax ds:ffffd484`a626f2a0=????????????????
  95. Resetting default scope
  96. LAST_CONTROL_TRANSFER: from fffff8035745a731 to fffff803573b6f50
  97. STACK_TEXT:
  98. ffffc580`e0c99018 fffff803`5745a731 : 00000000`00000050 ffffd484`a626f2a0 00000000`00000000 ffffc580`e0c99300 : nt!KeBugCheckEx
  99. ffffc580`e0c99020 fffff803`572cb2e7 : ffff8001`923cc000 00000000`00000000 00000000`00000000 ffffd484`a626f2a0 : nt!MiSystemFault+0x12ffa1
  100. ffffc580`e0c99160 fffff803`573c4ac9 : ffffd484`b09e2180 00000000`00000002 00000000`00000002 fffff803`572dcfa4 : nt!MmAccessFault+0x327
  101. ffffc580`e0c99300 fffff803`572b58bc : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x349
  102. ffffc580`e0c99490 fffff803`572b6371 : 00000000`00000000 fffff803`0000000f ffffd484`b09e2080 00000000`00000000 : nt!KeSetPriorityBoost+0x1c
  103. ffffc580`e0c99530 fffff803`572d7725 : 00000000`03224002 ffffd484`00000002 ffffd484`b75cfdf0 00000000`00000000 : nt!ExpApplyPriorityBoost+0x371
  104. ffffc580`e0c995d0 fffff803`572d698f : fffff803`57c79a02 00000000`00000001 ffffd484`00000000 ffffc580`e0c99729 : nt!ExpAcquireResourceExclusiveLite+0x335
  105. ffffc580`e0c996a0 ffffc4ca`933a413d : ffffd484`a9ccc9c0 00000000`00989680 00000000`00000001 00000000`00000000 : nt!ExEnterCriticalRegionAndAcquireResourceExclusive+0x3f
  106. ffffc580`e0c996e0 ffffc4ca`931b840c : ffffc580`e0c99844 ffffc580`e0c998f0 ffffc4ca`9330c400 ffff563d`981e7f0c : win32kbase!EnterCrit+0x8d
  107. ffffc580`e0c997c0 ffffc4ca`930b950b : 00000000`00000001 00000000`00000001 ffffc4ca`9330c400 00000000`00000004 : win32kfull!EnterLeaveCrit::EnterLeaveCrit+0x1c
  108. ffffc580`e0c997f0 ffffc4ca`934281d3 : ffffd484`b09e2080 ffffd484`b09e2080 00000000`00000000 00000000`00000005 : win32kfull!RawInputThread+0xcdb
  109. ffffc580`e0c99a50 ffffc4ca`9303da9f : ffffd484`b09e2080 ffffc580`e0c99b80 00000000`00000000 ffff6fff`dce00000 : win32kbase!xxxCreateSystemThreads+0x93
  110. ffffc580`e0c99ad0 fffff803`573c8208 : ffffd484`b09e2080 00000000`00000005 0000021b`d2804650 00000000`000033a4 : win32kfull!NtUserCallNoParam+0x6f
  111. ffffc580`e0c99b00 00007fff`5bbb1144 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28
  112. 000000fb`8007fba8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007fff`5bbb1144
  113. STACK_COMMAND: kb
  114. CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
  115. fffff803572b51b3-fffff803572b51b7 5 bytes - nt!MiDeleteKernelStack+a3
  116. [ d0 be 7d fb f6:c0 99 33 67 ce ]
  117. fffff803572b51c0-fffff803572b51c1 2 bytes - nt!MiDeleteKernelStack+b0 (+0x0d)
  118. [ 80 f6:00 ce ]
  119. fffff803572b51d1-fffff803572b51d5 5 bytes - nt!MiDeleteKernelStack+c1 (+0x11)
  120. [ d7 be 7d fb f6:c7 99 33 67 ce ]
  121. fffff803572b51de-fffff803572b51df 2 bytes - nt!MiDeleteKernelStack+ce (+0x0d)
  122. [ 80 fa:00 c0 ]
  123. fffff803572b524b-fffff803572b524c 2 bytes - nt!MiDeleteKernelStack+13b (+0x6d)
  124. [ 80 fa:00 c0 ]
  125. fffff803572b535b-fffff803572b535c 2 bytes - nt!MiDeleteKernelStack+24b (+0x110)
  126. [ 80 fa:00 c0 ]
  127. fffff803572b53f7-fffff803572b53fb 5 bytes - nt!MiDeleteValidSystemPage+37 (+0x9c)
  128. [ d0 be 7d fb f6:c0 99 33 67 ce ]
  129. fffff803572b5404-fffff803572b5408 5 bytes - nt!MiDeleteValidSystemPage+44 (+0x0d)
  130. [ d7 be 7d fb f6:c7 99 33 67 ce ]
  131. fffff803572b5463-fffff803572b5464 2 bytes - nt!MiDeleteValidSystemPage+a3 (+0x5f)
  132. [ 80 fa:00 c0 ]
  133. fffff803572b54f0-fffff803572b54f1 2 bytes - nt!MiDeleteValidSystemPage+130 (+0x8d)
  134. [ 80 fa:00 c0 ]
  135. fffff803572b5584-fffff803572b5588 5 bytes - nt!MiDeleteValidSystemPage+1c4 (+0x94)
  136. [ d0 be 7d fb f6:c0 99 33 67 ce ]
  137. fffff803572b5697-fffff803572b569b 5 bytes - nt!MiDeleteValidSystemPage+2d7 (+0x113)
  138. [ d7 be 7d fb f6:c7 99 33 67 ce ]
  139. fffff803572b56e5-fffff803572b56e6 2 bytes - nt!MiDeleteValidSystemPage+325 (+0x4e)
  140. [ 80 fa:00 c0 ]
  141. fffff803572b58c1 - nt!KeSetPriorityBoost+21 (+0x1dc)
  142. [ 00:40 ]
  143. 45 errors : !nt (fffff803572b51b3-fffff803572b58c1)
  144. MODULE_NAME: memory_corruption
  145.  
  146. IMAGE_NAME: memory_corruption
  147.  
  148. FOLLOWUP_NAME: memory_corruption
  149. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  150. MEMORY_CORRUPTOR: LARGE
  151. FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
  152. BUCKET_ID: MEMORY_CORRUPTION_LARGE
  153. PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_LARGE
  154. TARGET_TIME: 2019-07-12T14:12:28.000Z
  155. SUITE_MASK: 784
  156. PRODUCT_TYPE: 1
  157. USER_LCID: 0
  158. FAILURE_ID_HASH_STRING: km:memory_corruption_large
  159. FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
  160. Followup: memory_corruption
  161.  
  162. ========================================================================
  163. ===================== 3RD PARTY DRIVER QUICK LIST ======================
  164. ========================================================================
  165. Jul 26 2008 - OpenHardwareMonitorLib.sys - Open Hardware Monitor driver http://openhardwaremonitor.org/
  166. Aug 22 2012 - AsIO.sys - ASUS Input Output driver http://www.asus.com/
  167. Sep 12 2012 - btwsecfl.sys - Broadcom Bluetooth IT Manager Filter driver (Broadcom Corporation)
  168. Feb 28 2013 - npf.sys - NetGroup Packet Filter driver, a component of WinPCap by Riverbed
  169. Mar 14 2016 - amdgpio3.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  170. Jun 15 2016 - rzendpt.sys - Razer RzEndPt driver https://www.razer.com/
  171. Jun 15 2016 - rzudd.sys - Razer Rzudd Engine Driver https://www.razer.com/
  172. Jun 22 2016 - btwusb.sys - Bluetooth USB Device driver (Broadcom Corporation)
  173. Jul 30 2016 - e1r65x64.sys - Intel(R) Gigabit Adapter NDIS 6.x driver https://downloadcenter.intel.com/
  174. Nov 28 2016 - CMUSBDAC.sys - C-Media USB Audio Class 1.0 and 2.0 DAC Device Driver https://www.cmedia.com.tw/
  175. Mar 14 2017 - RTKVHD64.sys - Realtek Audio Driver system driver https://www.realtek.com/en/
  176. Mar 27 2017 - AMDRyzenMasterDriver.sys - AMD Ryzen Master driver
  177. Jul 20 2017 - SteamStreamingSpeakers.sys - Steam Streaming Speakers driver (Valve Corporation)
  178. Jul 28 2017 - SteamStreamingMicrophone.sys - Steam Streaming Microphone driver (Valve Corporation)
  179. Sep 15 2017 - iocbios2.sys - !!! Overclocking Software - Intel(R) Extreme Tuning Utility Performance Tuning driver
  180. Aug 16 2018 - nvvhci.sys - Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  181. Sep 10 2018 - amdpsp.sys - Advanced Micro Devices, Inc http://support.amd.com/
  182. Sep 14 2018 - aow_drv_x64_ev.sys - Tencent Gaming Buddy driver
  183. Oct 11 2018 - AMDPCIDev.sys - Advanced Micro Devices PCI Device driver
  184. Nov 12 2018 - amdgpio2.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  185. Dec 11 2018 - cpuz148_x64.sys - CPUID driver
  186. Jan 21 2019 - FACEIT.sys - FACEIT Client https://www.faceit.com/
  187. Mar 14 2019 - nvvad64v.sys - Nvidia Virtual Audio Driver http://www.nvidia.com/
  188. Mar 19 2019 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
  189. Mar 29 2019 - mbamswissarmy.sys - MalwareBytes Anti-Malware system driver https://www.malwarebytes.com/
  190. Jul 03 2019 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
  191.  
  192. ========================================================================
  193. ========================== 3RD PARTY DRIVERS ===========================
  194. ========================================================================
  195. Image name: OpenHardwareMonitorLib.sys
  196. Search : https://www.google.com/search?q=OpenHardwareMonitorLib.sys
  197. ADA Info : Open Hardware Monitor driver http://openhardwaremonitor.org/
  198. Timestamp : Sat Jul 26 2008
  199.  
  200. Image name: AsIO.sys
  201. Search : https://www.google.com/search?q=AsIO.sys
  202. ADA Info : ASUS Input Output driver http://www.asus.com/
  203. Timestamp : Wed Aug 22 2012
  204.  
  205. Image name: btwsecfl.sys
  206. Search : https://www.google.com/search?q=btwsecfl.sys
  207. ADA Info : Broadcom Bluetooth IT Manager Filter driver (Broadcom Corporation)
  208. Timestamp : Wed Sep 12 2012
  209.  
  210. Image name: npf.sys
  211. Search : https://www.google.com/search?q=npf.sys
  212. ADA Info : NetGroup Packet Filter driver, a component of WinPCap by Riverbed
  213. Timestamp : Thu Feb 28 2013
  214.  
  215. Image name: amdgpio3.sys
  216. Search : https://www.google.com/search?q=amdgpio3.sys
  217. ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  218. Timestamp : Mon Mar 14 2016
  219.  
  220. Image name: rzendpt.sys
  221. Search : https://www.google.com/search?q=rzendpt.sys
  222. ADA Info : Razer RzEndPt driver https://www.razer.com/
  223. Timestamp : Wed Jun 15 2016
  224.  
  225. Image name: rzudd.sys
  226. Search : https://www.google.com/search?q=rzudd.sys
  227. ADA Info : Razer Rzudd Engine Driver https://www.razer.com/
  228. Timestamp : Wed Jun 15 2016
  229.  
  230. Image name: btwusb.sys
  231. Search : https://www.google.com/search?q=btwusb.sys
  232. ADA Info : Bluetooth USB Device driver (Broadcom Corporation)
  233. Timestamp : Wed Jun 22 2016
  234.  
  235. Image name: e1r65x64.sys
  236. Search : https://www.google.com/search?q=e1r65x64.sys
  237. ADA Info : Intel(R) Gigabit Adapter NDIS 6.x driver https://downloadcenter.intel.com/
  238. Timestamp : Sat Jul 30 2016
  239.  
  240. Image name: CMUSBDAC.sys
  241. Search : https://www.google.com/search?q=CMUSBDAC.sys
  242. ADA Info : C-Media USB Audio Class 1.0 and 2.0 DAC Device Driver https://www.cmedia.com.tw/
  243. Timestamp : Mon Nov 28 2016
  244.  
  245. Image name: RTKVHD64.sys
  246. Search : https://www.google.com/search?q=RTKVHD64.sys
  247. ADA Info : Realtek Audio Driver system driver https://www.realtek.com/en/
  248. Timestamp : Tue Mar 14 2017
  249.  
  250. Image name: AMDRyzenMasterDriver.sys
  251. Search : https://www.google.com/search?q=AMDRyzenMasterDriver.sys
  252. ADA Info : AMD Ryzen Master driver
  253. Timestamp : Mon Mar 27 2017
  254.  
  255. Image name: SteamStreamingSpeakers.sys
  256. Search : https://www.google.com/search?q=SteamStreamingSpeakers.sys
  257. ADA Info : Steam Streaming Speakers driver (Valve Corporation)
  258. Timestamp : Thu Jul 20 2017
  259.  
  260. Image name: SteamStreamingMicrophone.sys
  261. Search : https://www.google.com/search?q=SteamStreamingMicrophone.sys
  262. ADA Info : Steam Streaming Microphone driver (Valve Corporation)
  263. Timestamp : Fri Jul 28 2017
  264.  
  265. Image name: iocbios2.sys
  266. Search : https://www.google.com/search?q=iocbios2.sys
  267. ADA Info : !!! Overclocking Software - Intel(R) Extreme Tuning Utility Performance Tuning driver
  268. Timestamp : Fri Sep 15 2017
  269.  
  270. Image name: nvvhci.sys
  271. Search : https://www.google.com/search?q=nvvhci.sys
  272. ADA Info : Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  273. Timestamp : Thu Aug 16 2018
  274.  
  275. Image name: amdpsp.sys
  276. Search : https://www.google.com/search?q=amdpsp.sys
  277. ADA Info : Advanced Micro Devices, Inc http://support.amd.com/
  278. Timestamp : Mon Sep 10 2018
  279.  
  280. Image name: aow_drv_x64_ev.sys
  281. Search : https://www.google.com/search?q=aow_drv_x64_ev.sys
  282. ADA Info : Tencent Gaming Buddy driver
  283. Timestamp : Fri Sep 14 2018
  284.  
  285. Image name: AMDPCIDev.sys
  286. Search : https://www.google.com/search?q=AMDPCIDev.sys
  287. ADA Info : Advanced Micro Devices PCI Device driver
  288. Timestamp : Thu Oct 11 2018
  289.  
  290. Image name: amdgpio2.sys
  291. Search : https://www.google.com/search?q=amdgpio2.sys
  292. ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  293. Timestamp : Mon Nov 12 2018
  294.  
  295. Image name: cpuz148_x64.sys
  296. Search : https://www.google.com/search?q=cpuz148_x64.sys
  297. ADA Info : CPUID driver
  298. Timestamp : Tue Dec 11 2018
  299.  
  300. Image name: FACEIT.sys
  301. Search : https://www.google.com/search?q=FACEIT.sys
  302. ADA Info : FACEIT Client https://www.faceit.com/
  303. Timestamp : Mon Jan 21 2019
  304.  
  305. Image name: nvvad64v.sys
  306. Search : https://www.google.com/search?q=nvvad64v.sys
  307. ADA Info : Nvidia Virtual Audio Driver http://www.nvidia.com/
  308. Timestamp : Thu Mar 14 2019
  309.  
  310. Image name: nvhda64v.sys
  311. Search : https://www.google.com/search?q=nvhda64v.sys
  312. ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
  313. Timestamp : Tue Mar 19 2019
  314.  
  315. Image name: mbamswissarmy.sys
  316. Search : https://www.google.com/search?q=mbamswissarmy.sys
  317. ADA Info : MalwareBytes Anti-Malware system driver https://www.malwarebytes.com/
  318. Timestamp : Fri Mar 29 2019
  319.  
  320. Image name: nvlddmkm.sys
  321. Search : https://www.google.com/search?q=nvlddmkm.sys
  322. ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
  323. Timestamp : Wed Jul 3 2019
  324.  
  325. If any of the above drivers are from Microsoft then please let me know.
  326. I will have them moved to the Microsoft list on the next update.
  327.  
  328. ========================================================================
  329. ========================== MICROSOFT DRIVERS ===========================
  330. ========================================================================
  331. ACPI.sys ACPI Driver for NT (Microsoft)
  332. acpiex.sys ACPIEx Driver (Microsoft)
  333. afd.sys Ancillary Function Driver for WinSock (Microsoft)
  334. afunix.sys AF_UNIX Socket Provider driver (Microsoft)
  335. AgileVpn.sys RAS Agil VPN Miniport Call Manager driver (Microsoft)
  336. ahcache.sys Application Compatibility Cache (Microsoft)
  337. amdppm.sys Processor Device Driver
  338. bam.sys BAM Kernal driver (Microsoft)
  339. BasicDisplay.sys Basic Display driver (Microsoft)
  340. BasicRender.sys Basic Render driver (Microsoft)
  341. Beep.SYS BEEP driver (Microsoft)
  342. BOOTVID.dll VGA Boot Driver (Microsoft)
  343. bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
  344. cdd.dll Canonical Display Driver (Microsoft)
  345. cdrom.sys SCSI CD-ROM Driver (Microsoft)
  346. CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
  347. CI.dll Code Integrity Module (Microsoft)
  348. CLASSPNP.SYS SCSI Class System Dll (Microsoft)
  349. cldflt.sys Cloud Files Mini Filter driver (Microsoft)
  350. CLFS.SYS Common Log File System Driver (Microsoft)
  351. clipsp.sys CLIP Service (Microsoft)
  352. cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
  353. cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
  354. CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
  355. condrv.sys Console Driver (Microsoft)
  356. crashdmp.sys Crash Dump driver (Microsoft)
  357. dfsc.sys DFS Namespace Client Driver (Microsoft)
  358. disk.sys PnP Disk Driver (Microsoft)
  359. drmk.sys Digital Rights Management (DRM) driver (Microsoft)
  360. dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  361. dump_storahci.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  362. dump_storport.sys Provides disk access during crash dump file generation (Microsoft)
  363. dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
  364. dxgmms2.sys DirectX Graphics MMS
  365. EhStorClass.sys Enhanced Storage Class driver for IEEE... (Microsoft)
  366. filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
  367. fileinfo.sys FileInfo Filter Driver (Microsoft)
  368. FLTMGR.SYS Filesystem Filter Manager (Microsoft)
  369. Fs_Rec.sys File System Recognizer Driver (Microsoft)
  370. fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
  371. fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
  372. gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
  373. hal.dll Hardware Abstraction Layer DLL (Microsoft)
  374. HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
  375. HIDCLASS.SYS Hid Class Library (Microsoft)
  376. HIDPARSE.SYS Hid Parsing Library (Microsoft)
  377. hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
  378. HTTP.sys HTTP Protocol Stack (Microsoft)
  379. intelpep.sys Intel Power Engine Plugin (Microsoft)
  380. iorate.sys I/O rate control Filter (Microsoft)
  381. kbdclass.sys Keyboard Class Driver (Microsoft)
  382. kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
  383. kdcom.dll Kernel Debugger HW Extension DLL (Microsoft)
  384. kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
  385. ks.sys Kernal CSA Library (Microsoft)
  386. ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
  387. ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
  388. ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
  389. lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
  390. luafv.sys LUA File Virtualization Filter Driver (Microsoft)
  391. mcupdate.dll Media Center Update (Microsoft)
  392. mmcss.sys MMCSS Driver (Microsoft)
  393. monitor.sys Monitor Driver (Microsoft)
  394. mouclass.sys Mouse Class Driver (Microsoft)
  395. mouhid.sys HID Mouse Filter Driver (Microsoft)
  396. mountmgr.sys Mount Point Manager (Microsoft)
  397. mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
  398. mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
  399. mrxsmb10.sys Longhorn SMB Downlevel SubRdr (Microsoft)
  400. mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
  401. Msfs.SYS Mailslot driver (Microsoft)
  402. msgpioclx.sys GPIO Class Extension Driver (Microsoft)
  403. msisadrv.sys ISA Driver (Microsoft)
  404. mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
  405. msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
  406. mssmbios.sys System Management BIOS driver (Microsoft)
  407. mup.sys Multiple UNC Provider driver (Microsoft)
  408. ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
  409. ndistapi.sys NDIS 3.0 Connection Wrapper driver (Microsoft)
  410. ndisuio.sys NDIS User mode I/O driver (Microsoft)
  411. NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
  412. ndiswan.sys MS PPP Framing Driver (Strong Encryption) Microsoft)
  413. NDProxy.sys NDIS Proxy driver (Microsoft)
  414. Ndu.sys Network Data Usage Monitoring driver (Microsoft)
  415. netbios.sys NetBIOS Interface driver (Microsoft)
  416. netbt.sys MBT Transport driver (Microsoft)
  417. NETIO.SYS Network I/O Subsystem (Microsoft)
  418. Npfs.SYS NPFS driver (Microsoft)
  419. npsvctrig.sys Named pipe service triggers (Microsoft)
  420. nsiproxy.sys NSI Proxy driver (Microsoft)
  421. Ntfs.sys NT File System Driver (Microsoft)
  422. ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
  423. ntosext.sys NTOS Extension Host driver (Microsoft)
  424. Null.SYS NULL Driver (Microsoft)
  425. pacer.sys QoS Packet Scheduler (Microsoft)
  426. partmgr.sys Partition driver (Microsoft)
  427. pci.sys NT Plug and Play PCI Enumerator (Microsoft)
  428. pcw.sys Performance Counter Driver (Microsoft)
  429. pdc.sys Power Dependency Coordinator Driver (Microsoft)
  430. peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
  431. portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
  432. PSHED.dll Platform Specific Hardware Error driver (Microsoft)
  433. rasl2tp.sys RAS L2TP Mini-port/Call-manager driver (Microsoft)
  434. raspppoe.sys RAS PPPoE Mini-port/Call manager driver (Microsoft)
  435. raspptp.sys Peer-to-Peer Tunneling Protocol (Microsoft)
  436. rassstp.sys RAS SSTP Miniport Call Manager driver (Microsoft)
  437. rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
  438. rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
  439. rdpvideominiport.sys RDP Video Miniport driver (Microsoft)
  440. rdyboost.sys ReadyBoost Driver (Microsoft)
  441. rspndr.sys Link-Layer Topology Responder driver (Microsoft)
  442. SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
  443. SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
  444. spaceport.sys Storage Spaces driver (Microsoft)
  445. srv2.sys Smb 2.0 Server driver (Microsoft)
  446. srvnet.sys Server Network driver (Microsoft)
  447. storahci.sys MS AHCI Storport Miniport Driver (Microsoft)
  448. storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
  449. storqosflt.sys Storage QoS Filter driver (Microsoft)
  450. swenum.sys Plug and Play Software Device Enumerator (Microsoft)
  451. tbs.sys Export driver for kernel mode TPM API (Microsoft)
  452. tcpip.sys TCP/IP Protocol driver (Microsoft)
  453. tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
  454. TDI.SYS TDI Wrapper driver (Microsoft)
  455. tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
  456. tm.sys Kernel Transaction Manager driver (Microsoft)
  457. ucx01000.sys USB Controller Extension (Microsoft)
  458. umbus.sys User-Mode Bus Enumerator (Microsoft)
  459. umpass.sys Generic pass-through driver (Microsoft)
  460. usbaudio.sys USB Audio Class Driver (Microsoft)
  461. usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
  462. USBD.SYS Universal Serial Bus Driver (Microsoft)
  463. UsbHub3.sys USB3 HUB driver (Microsoft)
  464. usbser.sys USB Serial driver (Microsoft)
  465. usbvideo.sys USB Video Class Driver (Microsoft)
  466. USBXHCI.SYS USB XHCI driver (Microsoft)
  467. vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
  468. Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
  469. volmgr.sys Volume Manager Driver (Microsoft)
  470. volmgrx.sys Volume Manager Extension Driver (Microsoft)
  471. volsnap.sys Volume Shadow Copy driver (Microsoft)
  472. volume.sys Volume driver (Microsoft)
  473. vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
  474. wanarp.sys MS Remote Access and Routing ARP driver (Microsoft)
  475. watchdog.sys Watchdog driver (Microsoft)
  476. wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
  477. Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
  478. WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
  479. WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
  480. WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
  481. werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
  482. wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
  483. win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
  484. win32kbase.sys Base Win32k Kernel Driver (Microsoft)
  485. win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
  486. WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
  487. WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
  488. winhvr.sys Windows Hypervisor Root Interface Driver
  489. winquic.sys QUIC Transport Protocol driver (Microsoft)
  490. wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
  491. WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
  492. Wof.sys Windows Overlay Filter (Microsoft)
  493. WppRecorder.sys WPP Trace Recorder (Microsoft)
  494. WSDPrint.sys Web Services Print Device driver (Microsoft)
  495. WSDScan.sys Web Service Based Scan Device driver (Microsoft)
  496.  
  497. Unloaded modules:
  498. fffff803`56570000 fffff803`56581000 MSKSSRV.sys
  499. fffff803`56420000 fffff803`56430000 hiber_storpo
  500. fffff803`56430000 fffff803`5645e000 hiber_storah
  501. fffff803`56460000 fffff803`5647e000 hiber_dumpfv
  502. fffff803`563c0000 fffff803`563cc000 umpass.sys
  503. fffff803`599f0000 fffff803`59a01000 MSKSSRV.sys
  504. fffff803`602b0000 fffff803`602bc000 WdmCompanion
  505. fffff803`5ddf0000 fffff803`5de00000 dump_storpor
  506. fffff803`5b330000 fffff803`5b35e000 dump_storahc
  507. fffff803`5b1c0000 fffff803`5b1de000 dump_dumpfve
  508. fffff803`59320000 fffff803`5933c000 dam.sys
  509. fffff803`5b340000 fffff803`5b351000 WdBoot.sys
  510. fffff803`5b330000 fffff803`5b339000 MbamElam.sys
  511. fffff803`5ddf0000 fffff803`5de00000 hwpolicy.sys
  512.  
  513. ========================================================================
  514. ============================== BIOS INFO ===============================
  515. ========================================================================
  516. sysinfo: could not find necessary interfaces.
  517. sysinfo: note that mssmbios.sys must be loaded (XPSP2+).
  518.  
  519. ========================================================================
  520. ============================== IMAGE SCAN ==============================
  521. ========================================================================
  522.  
  523. MZ at ffffc4ca`93000000, prot 00000040, type 01000000 - size 38b000
  524. Name: win32kfull.sys
  525. MZ at ffffc4ca`93390000, prot 00000040, type 01000000 - size 25c000
  526. Name: win32kbase.sys
  527. MZ at ffffc4ca`93640000, prot 00000040, type 01000000 - size 48000
  528. Name: cdd.dll
  529. MZ at ffffc4ca`938d0000, prot 00000040, type 01000000 - size 8b000
  530. Name: WIN32K.SYS
  531. MZ at fffff803`55f30000, prot 00000040, type 01000000 - size 4f000
  532. Name: srvnet.sys
  533. MZ at fffff803`55f80000, prot 00000040, type 01000000 - size 27000
  534. Name: ndu.exe
  535. MZ at fffff803`55fb0000, prot 00000040, type 01000000 - size 51000
  536. Name: mrxsmb10.exe
  537. MZ at fffff803`56100000, prot 00000040, type 01000000 - size 14000
  538. Name: tcpipreg.exe
  539. MZ at fffff803`56120000, prot 00000040, type 01000000 - size c5000
  540. Name: srv2.exe
  541. MZ at fffff803`561f0000, prot 00000040, type 01000000 - size 1c000
  542. Name: rassstp.exe
  543. MZ at fffff803`56210000, prot 00000040, type 01000000 - size 18000
  544. Name: ndproxy.exe
  545. MZ at fffff803`56230000, prot 00000040, type 01000000 - size 27000
  546. Name: AgileVpn.exe
  547. MZ at fffff803`56260000, prot 00000040, type 01000000 - size 21000
  548. Name: rasl2tp.exe
  549. MZ at fffff803`56290000, prot 00000040, type 01000000 - size 20000
  550. Name: raspptp.exe
  551. MZ at fffff803`562c0000, prot 00000040, type 01000000 - size 1c000
  552. Name: raspppoe.exe
  553. MZ at fffff803`562e0000, prot 00000040, type 01000000 - size f000
  554. Name: NDISTAPI.SYS
  555. MZ at fffff803`562f0000, prot 00000040, type 01000000 - size 3b000
  556. Name: ndiswan.exe
  557. MZ at fffff803`56330000, prot 00000040, type 01000000 - size d000
  558. Name: WSDPrint.exe
  559. MZ at fffff803`56340000, prot 00000040, type 01000000 - size d000
  560. Name: WSDScan.exe
  561. MZ at fffff803`563f0000, prot 00000040, type 01000000 - size 18000
  562. Name: ndisuio.exe
  563. MZ at fffff803`56410000, prot 00000040, type 01000000 - size d000
  564. Name: rdpvideominiport.exe
  565. MZ at fffff803`56490000, prot 00000040, type 01000000 - size 89000
  566. Name: mrxsmb.sys
  567. MZ at fffff803`56520000, prot 00000040, type 01000000 - size 46000
  568. Name: mrxsmb20.exe
  569. MZ at fffff803`56590000, prot 00000040, type 01000000 - size b000
  570. Name: umpass.exe
  571. MZ at fffff803`57203000, prot 00000040, type 01000000 - size a71000
  572. Name: ntoskrnl.exe
  573. MZ at fffff803`57c75000, prot 00000040, type 01000000 - size 9c000
  574. Name: HAL.dll
  575. MZ at fffff803`57e2d000, prot 00000040, type 01000000 - size 11000
  576. Name: WerLiveKernelApi.dll
  577. MZ at fffff803`57e6b000, prot 00000040, type 01000000 - size 62000
  578. Name: msrpc.sys
  579. MZ at fffff803`57ece000, prot 00000040, type 01000000 - size 27000
  580. Name: ntostmhost.dll
  581. MZ at fffff803`57ef6000, prot 00000040, type 01000000 - size 6a000
  582. Name: CLFS.SYS
  583. MZ at fffff803`57f61000, prot 00000040, type 01000000 - size 18000
  584. Name: PSHED.dll
  585. MZ at fffff803`58102000, prot 00000040, type 01000000 - size e000
  586. Name: cmimcext.dll
  587. MZ at fffff803`58111000, prot 00000040, type 01000000 - size c000
  588. Name: ntosext.dll
  589. MZ at fffff803`5811e000, prot 00000040, type 01000000 - size d3000
  590. Name: CI.dll
  591. MZ at fffff803`581f2000, prot 00000040, type 01000000 - size b7000
  592. Name: cng.sys
  593. MZ at fffff803`59000000, prot 00000040, type 01000000 - size 11000
  594. Name: msfs.exe
  595. MZ at fffff803`59020000, prot 00000040, type 01000000 - size 27000
  596. Name: tdx.exe
  597. MZ at fffff803`59050000, prot 00000040, type 01000000 - size 10000
  598. Name: TDI.SYS
  599. MZ at fffff803`59070000, prot 00000040, type 01000000 - size 51000
  600. Name: netbt.exe
  601. MZ at fffff803`590d0000, prot 00000040, type 01000000 - size 13000
  602. Name: afunix.dll
  603. MZ at fffff803`590f0000, prot 00000040, type 01000000 - size a6000
  604. Name: afd.exe
  605. MZ at fffff803`591a0000, prot 00000040, type 01000000 - size 1a000
  606. Name: vwififlt.SYS
  607. MZ at fffff803`591c0000, prot 00000040, type 01000000 - size 2b000
  608. Name: pacer.exe
  609. MZ at fffff803`591f0000, prot 00000040, type 01000000 - size 14000
  610. Name: netbios.exe
  611. MZ at fffff803`59210000, prot 00000040, type 01000000 - size 7a000
  612. Name: rdbss.sys
  613. MZ at fffff803`59290000, prot 00000040, type 01000000 - size 12000
  614. Name: nsiproxy.exe
  615. MZ at fffff803`592b0000, prot 00000040, type 01000000 - size d000
  616. Name: NpSvcTrig.exe
  617. MZ at fffff803`592c0000, prot 00000040, type 01000000 - size 10000
  618. Name: mssmbios.exe
  619. MZ at fffff803`592e0000, prot 00000040, type 01000000 - size a000
  620. Name: gpuenergydrv.exe
  621. MZ at fffff803`592f0000, prot 00000040, type 01000000 - size 2c000
  622. Name: dfsc.exe
  623. MZ at fffff803`59340000, prot 00000040, type 01000000 - size 14000
  624. Name: bam.exe
  625. MZ at fffff803`59370000, prot 00000040, type 01000000 - size 4e000
  626. Name: ahcache.exe
  627. MZ at fffff803`593c0000, prot 00000040, type 01000000 - size 84000
  628. Name: Vid.exe
  629. MZ at fffff803`59450000, prot 00000040, type 01000000 - size 1e000
  630. Name: winhvr.sys
  631. MZ at fffff803`59470000, prot 00000040, type 01000000 - size 11000
  632. Name: CompositeBus.exe
  633. MZ at fffff803`59490000, prot 00000040, type 01000000 - size d000
  634. Name: kdnic.sys
  635. MZ at fffff803`594a0000, prot 00000040, type 01000000 - size 15000
  636. Name: UmBus.exe
  637. MZ at fffff803`594c0000, prot 00000040, type 01000000 - size 78000
  638. Name: usbxhci.exe
  639. MZ at fffff803`59540000, prot 00000040, type 01000000 - size 3f000
  640. Name: ucx01000.exe
  641. MZ at fffff803`59610000, prot 00000040, type 01000000 - size 2b000
  642. Name: winquic.sys
  643. MZ at fffff803`59640000, prot 00000040, type 01000000 - size 18000
  644. Name: lltdio.exe
  645. MZ at fffff803`59660000, prot 00000040, type 01000000 - size 1a000
  646. Name: mslldp.exe
  647. MZ at fffff803`59680000, prot 00000040, type 01000000 - size 1b000
  648. Name: rspndr.exe
  649. MZ at fffff803`596a0000, prot 00000040, type 01000000 - size 1c000
  650. Name: wanarp.exe
  651. MZ at fffff803`596c0000, prot 00000040, type 01000000 - size 139000
  652. Name: http.exe
  653. MZ at fffff803`59800000, prot 00000040, type 01000000 - size 25000
  654. Name: bowser.exe
  655. MZ at fffff803`59830000, prot 00000040, type 01000000 - size 1a000
  656. Name: mpsdrv.exe
  657. MZ at fffff803`59870000, prot 00000040, type 01000000 - size d8000
  658. Name: dxgmms2.sys
  659. MZ at fffff803`59950000, prot 00000040, type 01000000 - size 76000
  660. Name: cldflt.exe
  661. MZ at fffff803`599d0000, prot 00000040, type 01000000 - size 1b000
  662. Name: storqosflt.exe
  663. MZ at fffff803`59a10000, prot 00000040, type 01000000 - size 13000
  664. Name: condrv.exe
  665. MZ at fffff803`59a30000, prot 00000040, type 01000000 - size 33b000
  666. Name: dxgkrnl.sys
  667. MZ at fffff803`59d70000, prot 00000040, type 01000000 - size 16000
  668. Name: watchdog.sys
  669. MZ at fffff803`59d90000, prot 00000040, type 01000000 - size 16000
  670. Name: BasicDisplay.exe
  671. MZ at fffff803`59db0000, prot 00000040, type 01000000 - size 11000
  672. Name: BasicRender.exe
  673. MZ at fffff803`59dd0000, prot 00000040, type 01000000 - size 1c000
  674. Name: npfs.exe
  675. MZ at fffff803`5b000000, prot 00000040, type 01000000 - size 2e000
  676. Name: cdrom.exe
  677. MZ at fffff803`5b030000, prot 00000040, type 01000000 - size 15000
  678. Name: filecrypt.exe
  679. MZ at fffff803`5b050000, prot 00000040, type 01000000 - size a000
  680. Name: null.exe
  681. MZ at fffff803`5b060000, prot 00000040, type 01000000 - size a000
  682. Name: beep.exe
  683. MZ at fffff803`5b0e0000, prot 00000040, type 01000000 - size 2b000
  684. Name: ksecdd.sys
  685. MZ at fffff803`5b110000, prot 00000040, type 01000000 - size b000
  686. Name: BOOTVID.dll
  687. MZ at fffff803`5b120000, prot 00000040, type 01000000 - size 70000
  688. Name: FLTMGR.SYS
  689. MZ at fffff803`5b200000, prot 00000040, type 01000000 - size 24000
  690. Name: acpiex.exe
  691. MZ at fffff803`5b230000, prot 00000040, type 01000000 - size 1a000
  692. Name: SgrmAgent.exe
  693. MZ at fffff803`5b250000, prot 00000040, type 01000000 - size c8000
  694. Name: ACPI.SYS
  695. MZ at fffff803`5b320000, prot 00000040, type 01000000 - size c000
  696. Name: WMILIB.SYS
  697. MZ at fffff803`5b360000, prot 00000040, type 01000000 - size 43000
  698. Name: intelpep.exe
  699. MZ at fffff803`5b3b0000, prot 00000040, type 01000000 - size 16000
  700. Name: WindowsTrustedRT.exe
  701. MZ at fffff803`5b3d0000, prot 00000040, type 01000000 - size b000
  702. Name: WindowsTrustedRTProxy.exe
  703. MZ at fffff803`5b3e0000, prot 00000040, type 01000000 - size 14000
  704. Name: pcw.exe
  705. MZ at fffff803`5b400000, prot 00000040, type 01000000 - size b000
  706. Name: msisadrv.exe
  707. MZ at fffff803`5b410000, prot 00000040, type 01000000 - size 6b000
  708. Name: pci.exe
  709. MZ at fffff803`5b480000, prot 00000040, type 01000000 - size 12000
  710. Name: vdrvroot.exe
  711. MZ at fffff803`5b4a0000, prot 00000040, type 01000000 - size 2e000
  712. Name: PDC.exe
  713. MZ at fffff803`5b4d0000, prot 00000040, type 01000000 - size 19000
  714. Name: CEA.sys
  715. MZ at fffff803`5b4f0000, prot 00000040, type 01000000 - size 2f000
  716. Name: partmgr.exe
  717. MZ at fffff803`5b520000, prot 00000040, type 01000000 - size a4000
  718. Name: spaceport.exe
  719. MZ at fffff803`5b5d0000, prot 00000040, type 01000000 - size 19000
  720. Name: volmgr.exe
  721. MZ at fffff803`5b5f0000, prot 00000040, type 01000000 - size 63000
  722. Name: volmgrx.exe
  723. MZ at fffff803`5b660000, prot 00000040, type 01000000 - size 1f000
  724. Name: mountmgr.exe
  725. MZ at fffff803`5b680000, prot 00000040, type 01000000 - size 2d000
  726. Name: storahci.exe
  727. MZ at fffff803`5b6b0000, prot 00000040, type 01000000 - size 9c000
  728. Name: storport.sys
  729. MZ at fffff803`5b750000, prot 00000040, type 01000000 - size 1c000
  730. Name: EhStorClass.exe
  731. MZ at fffff803`5b770000, prot 00000040, type 01000000 - size 2db000
  732. Name: TCPIP.SYS
  733. MZ at fffff803`5ba50000, prot 00000040, type 01000000 - size 78000
  734. Name: fwpkclnt.sys
  735. MZ at fffff803`5bad0000, prot 00000040, type 01000000 - size c8000
  736. Name: fvevol.exe
  737. MZ at fffff803`5bba0000, prot 00000040, type 01000000 - size 6d000
  738. Name: volsnap.exe
  739. MZ at fffff803`5bc10000, prot 00000040, type 01000000 - size 4f000
  740. Name: rdyboost.exe
  741. MZ at fffff803`5bc60000, prot 00000040, type 01000000 - size 25000
  742. Name: MUP.SYS
  743. MZ at fffff803`5bc90000, prot 00000040, type 01000000 - size 11000
  744. Name: iorate.exe
  745. MZ at fffff803`5bcb0000, prot 00000040, type 01000000 - size 1c000
  746. Name: disk.exe
  747. MZ at fffff803`5bcd0000, prot 00000040, type 01000000 - size 6f000
  748. Name: CLASSPNP.SYS
  749. MZ at fffff803`5bd60000, prot 00000040, type 01000000 - size 1c000
  750. Name: CRASHDMP.SYS
  751. MZ at fffff803`5bdb0000, prot 00000040, type 01000000 - size 10a000
  752. Name: clipsp.sys
  753. MZ at fffff803`5bec0000, prot 00000040, type 01000000 - size d1000
  754. Name: Wdf01000.exe
  755. MZ at fffff803`5bfa0000, prot 00000040, type 01000000 - size 13000
  756. Name: WDFLDR.SYS
  757. MZ at fffff803`5bfc0000, prot 00000040, type 01000000 - size 10000
  758. Name: WppRecorder.sys
  759. MZ at fffff803`5bfe0000, prot 00000040, type 01000000 - size f000
  760. Name: SleepStudyHelper.sys
  761. MZ at fffff803`5bff0000, prot 00000040, type 01000000 - size e000
  762. Name: tbs.sys
  763. MZ at fffff803`5c000000, prot 00000040, type 01000000 - size 28d000
  764. Name: ntfs.exe
  765. MZ at fffff803`5c290000, prot 00000040, type 01000000 - size d000
  766. Name: fs_rec.exe
  767. MZ at fffff803`5c2a0000, prot 00000040, type 01000000 - size 153000
  768. Name: NDIS.SYS
  769. MZ at fffff803`5c400000, prot 00000040, type 01000000 - size 95000
  770. Name: NETIO.SYS
  771. MZ at fffff803`5c4a0000, prot 00000040, type 01000000 - size 32000
  772. Name: ksecpkg.exe
  773. MZ at fffff803`5dcb0000, prot 00000040, type 01000000 - size 1a000
  774. Name: fileinfo.exe
  775. MZ at fffff803`5dcd0000, prot 00000040, type 01000000 - size 3e000
  776. Name: wof.exe
  777. MZ at fffff803`5dda0000, prot 00000040, type 01000000 - size 30000
  778. Name: wfplwfs.exe
  779. MZ at fffff803`5dde0000, prot 00000040, type 01000000 - size b000
  780. Name: volume.exe
  781. MZ at fffff803`5f400000, prot 00000040, type 01000000 - size 75000
  782. Name: ks.sys
  783. MZ at fffff803`5f490000, prot 00000040, type 01000000 - size c000
  784. Name: wmiacpi.exe
  785. MZ at fffff803`5f4b0000, prot 00000040, type 01000000 - size 2d000
  786. Name: msgpioclx.exe
  787. MZ at fffff803`5f4e0000, prot 00000040, type 01000000 - size 3a000
  788. Name: amdppm.exe
  789. MZ at fffff803`5f540000, prot 00000040, type 01000000 - size f000
  790. Name: ksthunk.exe
  791. MZ at fffff803`5f5a0000, prot 00000040, type 01000000 - size d000
  792. Name: NdisVirtualBus.exe
  793. MZ at fffff803`5f5b0000, prot 00000040, type 01000000 - size c000
  794. Name: swenum.exe
  795. MZ at fffff803`5f5c0000, prot 00000040, type 01000000 - size e000
  796. Name: rdpbus.exe
  797. MZ at fffff803`5f5d0000, prot 00000040, type 01000000 - size 93000
  798. Name: usbhub3.sys
  799. MZ at fffff803`5f670000, prot 00000040, type 01000000 - size e000
  800. Name: USBD.SYS
  801. MZ at fffff803`5fc70000, prot 00000040, type 01000000 - size 31000
  802. Name: usbccgp.exe
  803. MZ at fffff803`5fcb0000, prot 00000040, type 01000000 - size 12000
  804. Name: hidusb.exe
  805. MZ at fffff803`5fcd0000, prot 00000040, type 01000000 - size 3b000
  806. Name: HIDCLASS.SYS
  807. MZ at fffff803`5fd10000, prot 00000040, type 01000000 - size 13000
  808. Name: HIDPARSE.SYS
  809. MZ at fffff803`5fd40000, prot 00000040, type 01000000 - size f000
  810. Name: mouhid.exe
  811. MZ at fffff803`5fd90000, prot 00000040, type 01000000 - size 13000
  812. Name: mouclass.exe
  813. MZ at fffff803`5fdb0000, prot 00000040, type 01000000 - size 11000
  814. Name: kbdhid.exe
  815. MZ at fffff803`5fdd0000, prot 00000040, type 01000000 - size 13000
  816. Name: kbdclass.exe
  817. MZ at fffff803`601d0000, prot 00000040, type 01000000 - size 1a000
  818. Name: USBSER.exe
  819. MZ at fffff803`60240000, prot 00000040, type 01000000 - size 2d000
  820. Name: storahci.exe
  821. MZ at fffff803`60290000, prot 00000040, type 01000000 - size 1d000
  822. Name: DUMPFVE.SYS
  823. MZ at fffff803`602c0000, prot 00000040, type 01000000 - size 4e000
  824. Name: usbvideo.exe
  825. MZ at fffff803`60310000, prot 00000040, type 01000000 - size 35000
  826. Name: USBAudio.exe
  827. MZ at fffff803`60350000, prot 00000040, type 01000000 - size 16000
  828. Name: monitor.exe
  829. MZ at fffff803`60370000, prot 00000040, type 01000000 - size 29000
  830. Name: luafv.exe
  831. MZ at fffff803`603a0000, prot 00000040, type 01000000 - size 2d000
  832. Name: wcifs.exe
  833. MZ at fffff803`61920000, prot 00000040, type 01000000 - size 1f000
  834. Name: hdaudbus.exe
  835. MZ at fffff803`61940000, prot 00000040, type 01000000 - size 65000
  836. Name: portcls.sys
  837. MZ at fffff803`619e0000, prot 00000040, type 01000000 - size 14000
  838. Name: mmcss.exe
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!