API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Jul 17th, 2017
227
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 181.05 KB | None | 0 0
raw download clone embed print report
  1. Microsoft (R) Windows Debugger Version 10.0.14321.1024 AMD64
  2. Copyright (c) Microsoft Corporation. All rights reserved.
  3.  
  4. ========================================================================
  5. =================== Dump File: 071717-25828-01.dmp ===================
  6. ========================================================================
  7. Mini Kernel Dump File: Only registers and stack trace are available
  8. Windows 10 Kernel Version 14393 MP (16 procs) Free x64
  9. Product: WinNt, suite: TerminalServer SingleUserTS Personal
  10. Built by: 14393.1480.amd64fre.rs1_release.170706-2004
  11. Kernel base = 0xfffff801`e2492000 PsLoadedModuleList = 0xfffff801`e2791040
  12. Debug session time: Mon Jul 17 15:03:48.305 2017 (UTC - 4:00)
  13. System Uptime: 0 days 11:53:30.066
  14.  
  15. BugCheck D1, {8, 2, 0, fffff805cf23020e}
  16. *** WARNING: Unable to verify timestamp for bwcW10x64.sys
  17. *** ERROR: Module load completed but symbols could not be loaded for bwcW10x64.sys
  18. Probably caused by : bwcW10x64.sys ( bwcW10x64+e114 )
  19. Followup: MachineOwner
  20. 0: kd> !analyze -v
  21.  
  22. DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
  23. An attempt was made to access a pageable (or completely invalid) address at an
  24. interrupt request level (IRQL) that is too high. This is usually
  25. caused by drivers using improper addresses.
  26. If kernel debugger is available get stack backtrace.
  27.  
  28. Arguments:
  29. Arg1: 0000000000000008, memory referenced
  30. Arg2: 0000000000000002, IRQL
  31. Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
  32. Arg4: fffff805cf23020e, address which referenced memory
  33.  
  34. Debugging Details:
  35. DUMP_CLASS: 1
  36. DUMP_QUALIFIER: 400
  37. BUILD_VERSION_STRING: 10.0.14393.1480 (rs1_release.170706-2004)
  38. DUMP_TYPE: 2
  39. READ_ADDRESS: fffff801e2832338: Unable to get MiVisibleState
  40. 0000000000000008
  41. CURRENT_IRQL: 2
  42. FAULTING_IP:
  43. tcpip!IpFlcReceivePreValidatedPackets+2de
  44. fffff805`cf23020e 8a0c01 mov cl,byte ptr [rcx+rax]
  45. CPU_COUNT: 10
  46. CPU_MHZ: bb1
  47. CPU_VENDOR: GenuineIntel
  48. CPU_FAMILY: 6
  49. CPU_MODEL: 3f
  50. CPU_STEPPING: 2
  51. CPU_MICROCODE: 6,3f,2,0 (F,M,S,R) SIG: 38'00000000 (cache) 38'00000000 (init)
  52. CUSTOMER_CRASH_COUNT: 1
  53. DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
  54. BUGCHECK_STR: AV
  55.  
  56. PROCESS_NAME: System
  57.  
  58. ANALYSIS_SESSION_HOST: USERNAME-PC
  59. ANALYSIS_SESSION_TIME: 07-17-2017 16:43:41.0064
  60. ANALYSIS_VERSION: 10.0.14321.1024 amd64fre
  61. DPC_STACK_BASE: FFFFF801E503AFB0
  62. TRAP_FRAME: fffff801e503a290 -- (.trap 0xfffff801e503a290)
  63. NOTE: The trap frame does not contain all registers.
  64. Some register values may be zeroed or incorrect.
  65. rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000008
  66. rdx=000000000000000c rsi=0000000000000000 rdi=0000000000000000
  67. rip=fffff805cf23020e rsp=fffff801e503a420 rbp=fffff801e503a520
  68. r8=0000000000000010 r9=fffff805cf3be368 r10=ffff908b95d71506
  69. r11=0000000000000014 r12=0000000000000000 r13=0000000000000000
  70. r14=0000000000000000 r15=0000000000000000
  71. iopl=0 nv up ei pl zr na po nc
  72. tcpip!IpFlcReceivePreValidatedPackets+0x2de:
  73. fffff805`cf23020e 8a0c01 mov cl,byte ptr [rcx+rax] ds:00000000`00000008=??
  74. Resetting default scope
  75. LAST_CONTROL_TRANSFER: from fffff801e25ecb29 to fffff801e25e1960
  76. STACK_TEXT:
  77. fffff801`e503a148 fffff801`e25ecb29 : 00000000`0000000a 00000000`00000008 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
  78. fffff801`e503a150 fffff801`e25eb107 : 00000000`00000000 00000000`00000000 00000000`00000000 fffff805`cf21d0c1 : nt!KiBugCheckDispatch+0x69
  79. fffff801`e503a290 fffff805`cf23020e : ffff908b`00000390 00000000`00000001 ffff908b`7e0c6390 00000000`00000000 : nt!KiPageFault+0x247
  80. fffff801`e503a420 fffff805`cf22e66e : ffff908b`90cca7f0 fffff801`e503a620 00000000`00000806 fffff801`00000502 : tcpip!IpFlcReceivePreValidatedPackets+0x2de
  81. fffff801`e503a5c0 fffff801`e252e045 : 00000000`00000002 ffff908b`80bfd800 fffff805`cf22e510 fffff801`e503a770 : tcpip!FlReceiveNetBufferListChainCalloutRoutine+0x15e
  82. fffff801`e503a6f0 fffff805`cf25ebb6 : ffff908b`88d69a30 00000000`00000000 ffff908b`807d2870 ffff908b`95d71000 : nt!KeExpandKernelStackAndCalloutInternal+0x85
  83. fffff801`e503a740 fffff805`ce95392e : 00000000`00000000 fffff801`e503a840 ffff908b`00000001 ffff908b`90a9c801 : tcpip!FlReceiveNetBufferListChain+0xb6
  84. fffff801`e503a7c0 fffff805`ce9533c4 : ffff908b`910b7101 00000000`00000000 00000000`00000000 00000000`00000001 : ndis!ndisMIndicateNetBufferListsToOpen+0x11e
  85. fffff801`e503a880 fffff805`ce9605a3 : ffff908b`7d7661a0 00000000`00000000 ffff908b`95d71030 fffff801`e2559213 : ndis!ndisMTopReceiveNetBufferLists+0x224
  86. fffff801`e503a990 fffff805`ce9802f2 : 00000000`00000000 ffff908b`8a540510 ffff908b`95d71030 00000000`00000000 : ndis!ndisInvokeNextReceiveHandler+0x4f
  87. fffff801`e503aa60 fffff805`ce95e674 : ffff908b`8a540510 fffff801`e27d0f10 00000000`00000000 00000000`00000001 : ndis!ndisFilterIndicateReceiveNetBufferLists+0x21c52
  88. fffff801`e503ab00 fffff805`d0d8e114 : ffff908b`8a50b310 ffff908b`89ad9b50 00000000`00000000 ffff908b`95d71030 : ndis!NdisFIndicateReceiveNetBufferLists+0x54
  89. fffff801`e503ab40 ffff908b`8a50b310 : ffff908b`89ad9b50 00000000`00000000 ffff908b`95d71030 00000000`00000000 : bwcW10x64+0xe114
  90. fffff801`e503ab48 ffff908b`89ad9b50 : 00000000`00000000 ffff908b`95d71030 00000000`00000000 fffff805`d0d8748e : 0xffff908b`8a50b310
  91. fffff801`e503ab50 00000000`00000000 : ffff908b`95d71030 00000000`00000000 fffff805`d0d8748e ffff908b`7d1da060 : 0xffff908b`89ad9b50
  92. STACK_COMMAND: kb
  93. THREAD_SHA1_HASH_MOD_FUNC: 00b6e5d82bba166073413388ef289cf81a905e8a
  94. THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 53413fc6da1c874eb0ab6fec30da2db658f743dd
  95. THREAD_SHA1_HASH_MOD: 4663ba4bfa18d6309b28d6630365f380713d386f
  96. FOLLOWUP_IP:
  97. bwcW10x64+e114
  98. fffff805`d0d8e114 8b4c2460 mov ecx,dword ptr [rsp+60h]
  99. FAULT_INSTR_CODE: 60244c8b
  100. SYMBOL_STACK_INDEX: c
  101. SYMBOL_NAME: bwcW10x64+e114
  102. FOLLOWUP_NAME: MachineOwner
  103. MODULE_NAME: bwcW10x64
  104.  
  105. IMAGE_NAME: bwcW10x64.sys
  106.  
  107. DEBUG_FLR_IMAGE_TIMESTAMP: 57dacade
  108. BUCKET_ID_FUNC_OFFSET: e114
  109. FAILURE_BUCKET_ID: AV_bwcW10x64!unknown_function
  110. BUCKET_ID: AV_bwcW10x64!unknown_function
  111. PRIMARY_PROBLEM_CLASS: AV_bwcW10x64!unknown_function
  112. TARGET_TIME: 2017-07-17T19:03:48.000Z
  113. OSBUILD: 14393
  114. OSSERVICEPACK: 1480
  115. SERVICEPACK_NUMBER: 0
  116. OS_REVISION: 0
  117. SUITE_MASK: 784
  118. PRODUCT_TYPE: 1
  119. OSPLATFORM_TYPE: x64
  120. OSNAME: Windows 10
  121. OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS Personal
  122. USER_LCID: 0
  123. OSBUILD_TIMESTAMP: 2017-07-07 02:26:09
  124. BUILDDATESTAMP_STR: 170706-2004
  125. BUILDLAB_STR: rs1_release
  126. BUILDOSVER_STR: 10.0.14393.1480
  127. ANALYSIS_SESSION_ELAPSED_TIME: 91e
  128. ANALYSIS_SOURCE: KM
  129. FAILURE_ID_HASH_STRING: km:av_bwcw10x64!unknown_function
  130. FAILURE_ID_HASH: {e144c675-b998-8273-ed9b-f77023d8c134}
  131. Followup: MachineOwner
  132. 0: kd> lmv
  133. start end module name
  134. fffff801`e0f8b000 fffff801`e0f96000 kd (deferred)
  135. Mapped memory image file: C:\ProgramData\dbg\sym\kd.dll\57899BFCb000\kd.dll
  136. Image path: \SystemRoot\system32\kd.dll
  137. Image name: kd.dll
  138. Timestamp: Fri Jul 15 22:29:16 2016 (57899BFC)
  139. CheckSum: 00008144
  140. ImageSize: 0000B000
  141. File version: 10.0.14393.0
  142. Product version: 10.0.14393.0
  143. File flags: 0 (Mask 3F)
  144. File OS: 40004 NT Win32
  145. File type: 3.A Driver
  146. File date: 00000000.00000000
  147. Translations: 0409.04b0
  148. CompanyName: Microsoft Corporation
  149. ProductName: Microsoft® Windows® Operating System
  150. InternalName: kd.dll
  151. OriginalFilename: kd.dll
  152. ProductVersion: 10.0.14393.0
  153. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  154. FileDescription: Local Kernel Debugger
  155. LegalCopyright: © Microsoft Corporation. All rights reserved.
  156. fffff801`e241d000 fffff801`e2492000 hal (deferred)
  157. Mapped memory image file: C:\ProgramData\dbg\sym\hal.dll\594A131775000\hal.dll
  158. Image path: hal.dll
  159. Image name: hal.dll
  160. Timestamp: Wed Jun 21 02:32:55 2017 (594A1317)
  161. CheckSum: 0006EC6E
  162. ImageSize: 00075000
  163. File version: 10.0.14393.1378
  164. Product version: 10.0.14393.1378
  165. File flags: 0 (Mask 3F)
  166. File OS: 40004 NT Win32
  167. File type: 2.0 Dll
  168. File date: 00000000.00000000
  169. Translations: 0409.04b0
  170. CompanyName: Microsoft Corporation
  171. ProductName: Microsoft® Windows® Operating System
  172. InternalName: hal.dll
  173. OriginalFilename: hal.dll
  174. ProductVersion: 10.0.14393.1378
  175. FileVersion: 10.0.14393.1378 (rs1_release.170620-2008)
  176. FileDescription: Hardware Abstraction Layer DLL
  177. LegalCopyright: © Microsoft Corporation. All rights reserved.
  178. fffff801`e2492000 fffff801`e2ca9000 nt (pdb symbols) C:\ProgramData\dbg\sym\ntkrnlmp.pdb\3F52AE277BF9429AA46F8E93F346A8F91\ntkrnlmp.pdb
  179. Loaded symbol image file: ntkrnlmp.exe
  180. Mapped memory image file: C:\ProgramData\dbg\sym\ntkrnlmp.exe\595F2981817000\ntkrnlmp.exe
  181. Image path: ntkrnlmp.exe
  182. Image name: ntkrnlmp.exe
  183. Timestamp: Fri Jul 7 02:26:09 2017 (595F2981)
  184. CheckSum: 00775698
  185. ImageSize: 00817000
  186. File version: 10.0.14393.1480
  187. Product version: 10.0.14393.1480
  188. File flags: 0 (Mask 3F)
  189. File OS: 40004 NT Win32
  190. File type: 1.0 App
  191. File date: 00000000.00000000
  192. Translations: 0409.04b0
  193. CompanyName: Microsoft Corporation
  194. ProductName: Microsoft® Windows® Operating System
  195. InternalName: ntkrnlmp.exe
  196. OriginalFilename: ntkrnlmp.exe
  197. ProductVersion: 10.0.14393.1480
  198. FileVersion: 10.0.14393.1480 (rs1_release.170706-2004)
  199. FileDescription: NT Kernel & System
  200. LegalCopyright: © Microsoft Corporation. All rights reserved.
  201. fffff805`cd600000 fffff805`cd663000 CLFS (deferred)
  202. Mapped memory image file: C:\ProgramData\dbg\sym\CLFS.SYS\595F282F63000\CLFS.SYS
  203. Image path: \SystemRoot\System32\drivers\CLFS.SYS
  204. Image name: CLFS.SYS
  205. Timestamp: Fri Jul 7 02:20:31 2017 (595F282F)
  206. CheckSum: 0006B971
  207. ImageSize: 00063000
  208. File version: 10.0.14393.1480
  209. Product version: 10.0.14393.1480
  210. File flags: 0 (Mask 3F)
  211. File OS: 40004 NT Win32
  212. File type: 3.7 Driver
  213. File date: 00000000.00000000
  214. Translations: 0000.04b0
  215. CompanyName: Microsoft Corporation
  216. ProductName: Microsoft® Windows® Operating System
  217. InternalName: clfs.sys
  218. OriginalFilename: Clfs.Sys
  219. ProductVersion: 10.0.14393.1480
  220. FileVersion: 10.0.14393.1480 (rs1_release.170706-2004)
  221. FileDescription: Common Log File System Driver
  222. LegalCopyright: © Microsoft Corporation. All rights reserved.
  223. fffff805`cd670000 fffff805`cd695000 tm (deferred)
  224. Mapped memory image file: C:\ProgramData\dbg\sym\tm.sys\593276EC25000\tm.sys
  225. Image path: \SystemRoot\System32\drivers\tm.sys
  226. Image name: tm.sys
  227. Timestamp: Sat Jun 3 04:44:28 2017 (593276EC)
  228. CheckSum: 00028085
  229. ImageSize: 00025000
  230. File version: 10.0.14393.1358
  231. Product version: 10.0.14393.1358
  232. File flags: 0 (Mask 3F)
  233. File OS: 40004 NT Win32
  234. File type: 3.7 Driver
  235. File date: 00000000.00000000
  236. Translations: 0409.04b0
  237. CompanyName: Microsoft Corporation
  238. ProductName: Microsoft® Windows® Operating System
  239. InternalName: tm.sys
  240. OriginalFilename: tm.sys
  241. ProductVersion: 10.0.14393.1358
  242. FileVersion: 10.0.14393.1358 (rs1_release.170602-2252)
  243. FileDescription: Kernel Transaction Manager Driver
  244. LegalCopyright: © Microsoft Corporation. All rights reserved.
  245. fffff805`cd6a0000 fffff805`cd6b7000 PSHED (deferred)
  246. Mapped memory image file: C:\ProgramData\dbg\sym\PSHED.dll\578997A417000\PSHED.dll
  247. Image path: \SystemRoot\system32\PSHED.dll
  248. Image name: PSHED.dll
  249. Timestamp: Fri Jul 15 22:10:44 2016 (578997A4)
  250. CheckSum: 000181F2
  251. ImageSize: 00017000
  252. File version: 10.0.14393.0
  253. Product version: 10.0.14393.0
  254. File flags: 0 (Mask 3F)
  255. File OS: 40004 NT Win32
  256. File type: 3.7 Driver
  257. File date: 00000000.00000000
  258. Translations: 0409.04b0
  259. CompanyName: Microsoft Corporation
  260. ProductName: Microsoft® Windows® Operating System
  261. InternalName: pshed.dll
  262. OriginalFilename: pshed.dll
  263. ProductVersion: 10.0.14393.0
  264. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  265. FileDescription: Platform Specific Hardware Error Driver
  266. LegalCopyright: © Microsoft Corporation. All rights reserved.
  267. fffff805`cd6c0000 fffff805`cd6cc000 BOOTVID (deferred)
  268. Mapped memory image file: C:\ProgramData\dbg\sym\BOOTVID.dll\5789979Dc000\BOOTVID.dll
  269. Image path: \SystemRoot\system32\BOOTVID.dll
  270. Image name: BOOTVID.dll
  271. Timestamp: Fri Jul 15 22:10:37 2016 (5789979D)
  272. CheckSum: 00014661
  273. ImageSize: 0000C000
  274. File version: 10.0.14393.0
  275. Product version: 10.0.14393.0
  276. File flags: 0 (Mask 3F)
  277. File OS: 40004 NT Win32
  278. File type: 3.4 Driver
  279. File date: 00000000.00000000
  280. Translations: 0409.04b0
  281. CompanyName: Microsoft Corporation
  282. ProductName: Microsoft® Windows® Operating System
  283. InternalName: bootvid.dll
  284. OriginalFilename: bootvid.dll
  285. ProductVersion: 10.0.14393.0
  286. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  287. FileDescription: VGA Boot Driver
  288. LegalCopyright: © Microsoft Corporation. All rights reserved.
  289. fffff805`cd6d0000 fffff805`cd732000 FLTMGR (deferred)
  290. Mapped memory image file: C:\ProgramData\dbg\sym\FLTMGR.SYS\578997A562000\FLTMGR.SYS
  291. Image path: \SystemRoot\System32\drivers\FLTMGR.SYS
  292. Image name: FLTMGR.SYS
  293. Timestamp: Fri Jul 15 22:10:45 2016 (578997A5)
  294. CheckSum: 0005EC30
  295. ImageSize: 00062000
  296. File version: 10.0.14393.0
  297. Product version: 10.0.14393.0
  298. File flags: 0 (Mask 3F)
  299. File OS: 40004 NT Win32
  300. File type: 3.7 Driver
  301. File date: 00000000.00000000
  302. Translations: 0409.04b0
  303. CompanyName: Microsoft Corporation
  304. ProductName: Microsoft® Windows® Operating System
  305. InternalName: fltMgr.sys
  306. OriginalFilename: fltMgr.sys
  307. ProductVersion: 10.0.14393.0
  308. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  309. FileDescription: Microsoft Filesystem Filter Manager
  310. LegalCopyright: © Microsoft Corporation. All rights reserved.
  311. fffff805`cd740000 fffff805`cd79d000 msrpc (deferred)
  312. Mapped memory image file: C:\ProgramData\dbg\sym\msrpc.sys\57899A8A5d000\msrpc.sys
  313. Image path: \SystemRoot\System32\drivers\msrpc.sys
  314. Image name: msrpc.sys
  315. Timestamp: Fri Jul 15 22:23:06 2016 (57899A8A)
  316. CheckSum: 00062F5F
  317. ImageSize: 0005D000
  318. File version: 10.0.14393.0
  319. Product version: 10.0.14393.0
  320. File flags: 0 (Mask 3F)
  321. File OS: 40004 NT Win32
  322. File type: 3.7 Driver
  323. File date: 00000000.00000000
  324. Translations: 0409.04b0
  325. CompanyName: Microsoft Corporation
  326. ProductName: Microsoft® Windows® Operating System
  327. InternalName: krpcdd.sys
  328. OriginalFilename: krpcdd.sys
  329. ProductVersion: 10.0.14393.0
  330. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  331. FileDescription: Kernel Remote Procedure Call Provider
  332. LegalCopyright: © Microsoft Corporation. All rights reserved.
  333. fffff805`cd7a0000 fffff805`cd7c8000 ksecdd (deferred)
  334. Mapped memory image file: C:\ProgramData\dbg\sym\ksecdd.sys\57CF9EF228000\ksecdd.sys
  335. Image path: \SystemRoot\System32\drivers\ksecdd.sys
  336. Image name: ksecdd.sys
  337. Timestamp: Wed Sep 7 01:00:34 2016 (57CF9EF2)
  338. CheckSum: 000296FD
  339. ImageSize: 00028000
  340. File version: 10.0.14393.187
  341. Product version: 10.0.14393.187
  342. File flags: 0 (Mask 3F)
  343. File OS: 40004 NT Win32
  344. File type: 3.7 Driver
  345. File date: 00000000.00000000
  346. Translations: 0409.04b0
  347. CompanyName: Microsoft Corporation
  348. ProductName: Microsoft® Windows® Operating System
  349. InternalName: ksecdd.sys
  350. OriginalFilename: ksecdd.sys
  351. ProductVersion: 10.0.14393.187
  352. FileVersion: 10.0.14393.187 (rs1_release_inmarket.160906-1818)
  353. FileDescription: Kernel Security Support Provider Interface
  354. LegalCopyright: © Microsoft Corporation. All rights reserved.
  355. fffff805`cd7d0000 fffff805`cd880000 clipsp (deferred)
  356. Mapped memory image file: C:\ProgramData\dbg\sym\clipsp.sys\57CF9E37b0000\clipsp.sys
  357. Image path: \SystemRoot\System32\drivers\clipsp.sys
  358. Image name: clipsp.sys
  359. Timestamp: Wed Sep 7 00:57:27 2016 (57CF9E37)
  360. CheckSum: 000A8172
  361. ImageSize: 000B0000
  362. File version: 10.0.14393.187
  363. Product version: 10.0.14393.187
  364. File flags: 0 (Mask 3F)
  365. File OS: 40004 NT Win32
  366. File type: 3.7 Driver
  367. File date: 00000000.00000000
  368. Translations: 0409.04b0
  369. CompanyName: Microsoft Corporation
  370. ProductName: Microsoft® Windows® Operating System
  371. InternalName: clipsp.dll
  372. OriginalFilename: clipsp.dll
  373. ProductVersion: 10.0.14393.187
  374. FileVersion: 10.0.14393.187 (rs1_release_inmarket.160906-1818)
  375. FileDescription: CLIP Service
  376. LegalCopyright: © Microsoft Corporation. All rights reserved.
  377. fffff805`cd880000 fffff805`cd88d000 cmimcext (deferred)
  378. Mapped memory image file: C:\ProgramData\dbg\sym\cmimcext.sys\57DAC90Dd000\cmimcext.sys
  379. Image path: \SystemRoot\System32\drivers\cmimcext.sys
  380. Image name: cmimcext.sys
  381. Timestamp: Thu Sep 15 12:15:09 2016 (57DAC90D)
  382. CheckSum: 00013B93
  383. ImageSize: 0000D000
  384. File version: 10.0.14393.206
  385. Product version: 10.0.14393.206
  386. File flags: 0 (Mask 3F)
  387. File OS: 40004 NT Win32
  388. File type: 3.7 Driver
  389. File date: 00000000.00000000
  390. Translations: 0409.04b0
  391. CompanyName: Microsoft Corporation
  392. ProductName: Microsoft® Windows® Operating System
  393. InternalName: cmimcext.sys
  394. OriginalFilename: cmimcext.sys
  395. ProductVersion: 10.0.14393.206
  396. FileVersion: 10.0.14393.206 (rs1_release.160915-0644)
  397. FileDescription: Kernel Configuration Manager Initial Configuration Extension Host Export Driver
  398. LegalCopyright: © Microsoft Corporation. All rights reserved.
  399. fffff805`cd890000 fffff805`cd89c000 ntosext (deferred)
  400. Mapped memory image file: C:\ProgramData\dbg\sym\ntosext.sys\5789979Dc000\ntosext.sys
  401. Image path: \SystemRoot\System32\drivers\ntosext.sys
  402. Image name: ntosext.sys
  403. Timestamp: Fri Jul 15 22:10:37 2016 (5789979D)
  404. CheckSum: 00009F85
  405. ImageSize: 0000C000
  406. File version: 10.0.14393.0
  407. Product version: 10.0.14393.0
  408. File flags: 0 (Mask 3F)
  409. File OS: 40004 NT Win32
  410. File type: 3.7 Driver
  411. File date: 00000000.00000000
  412. Translations: 0409.04b0
  413. CompanyName: Microsoft Corporation
  414. ProductName: Microsoft® Windows® Operating System
  415. InternalName: ntosext.sys
  416. OriginalFilename: ntosext.sys
  417. ProductVersion: 10.0.14393.0
  418. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  419. FileDescription: NTOS extension host driver
  420. LegalCopyright: © Microsoft Corporation. All rights reserved.
  421. fffff805`cd8a0000 fffff805`cd940000 CI (deferred)
  422. Mapped memory image file: C:\ProgramData\dbg\sym\CI.dll\58BA5F50a0000\CI.dll
  423. Image path: \SystemRoot\system32\CI.dll
  424. Image name: CI.dll
  425. Timestamp: Sat Mar 4 01:31:44 2017 (58BA5F50)
  426. CheckSum: 000A3AA2
  427. ImageSize: 000A0000
  428. File version: 10.0.14393.953
  429. Product version: 10.0.14393.953
  430. File flags: 0 (Mask 3F)
  431. File OS: 40004 NT Win32
  432. File type: 3.7 Driver
  433. File date: 00000000.00000000
  434. Translations: 0409.04b0
  435. CompanyName: Microsoft Corporation
  436. ProductName: Microsoft® Windows® Operating System
  437. InternalName: ci.dll
  438. OriginalFilename: ci.dll
  439. ProductVersion: 10.0.14393.953
  440. FileVersion: 10.0.14393.953 (rs1_release_inmarket.170303-1614)
  441. FileDescription: Code Integrity Module
  442. LegalCopyright: © Microsoft Corporation. All rights reserved.
  443. fffff805`cd940000 fffff805`cd9de000 cng (deferred)
  444. Mapped memory image file: C:\ProgramData\dbg\sym\cng.sys\594A18039e000\cng.sys
  445. Image path: \SystemRoot\System32\drivers\cng.sys
  446. Image name: cng.sys
  447. Timestamp: Wed Jun 21 02:53:55 2017 (594A1803)
  448. CheckSum: 0009E903
  449. ImageSize: 0009E000
  450. File version: 10.0.14393.1378
  451. Product version: 10.0.14393.1378
  452. File flags: 0 (Mask 3F)
  453. File OS: 40004 NT Win32
  454. File type: 3.7 Driver
  455. File date: 00000000.00000000
  456. Translations: 0409.04b0
  457. CompanyName: Microsoft Corporation
  458. ProductName: Microsoft® Windows® Operating System
  459. InternalName: cng.sys
  460. OriginalFilename: cng.sys
  461. ProductVersion: 10.0.14393.1378
  462. FileVersion: 10.0.14393.1378 (rs1_release.170620-2008)
  463. FileDescription: Kernel Cryptography, Next Generation
  464. LegalCopyright: © Microsoft Corporation. All rights reserved.
  465. fffff805`cd9e0000 fffff805`cdab4000 Wdf01000 (deferred)
  466. Mapped memory image file: C:\ProgramData\dbg\sym\Wdf01000.sys\57899838d4000\Wdf01000.sys
  467. Image path: \SystemRoot\system32\drivers\Wdf01000.sys
  468. Image name: Wdf01000.sys
  469. Timestamp: Fri Jul 15 22:13:12 2016 (57899838)
  470. CheckSum: 000D2BC9
  471. ImageSize: 000D4000
  472. File version: 1.19.14393.0
  473. Product version: 1.19.14393.0
  474. File flags: 0 (Mask 3F)
  475. File OS: 40004 NT Win32
  476. File type: 3.7 Driver
  477. File date: 00000000.00000000
  478. Translations: 0409.04b0
  479. CompanyName: Microsoft Corporation
  480. ProductName: Microsoft® Windows® Operating System
  481. InternalName: wdf01000.sys
  482. OriginalFilename: wdf01000.sys
  483. ProductVersion: 1.19.14393.0
  484. FileVersion: 1.19.14393.0 (rs1_release.160715-1616)
  485. FileDescription: Kernel Mode Driver Framework Runtime
  486. LegalCopyright: © Microsoft Corporation. All rights reserved.
  487. fffff805`cdac0000 fffff805`cdad3000 WDFLDR (deferred)
  488. Mapped memory image file: C:\ProgramData\dbg\sym\WDFLDR.SYS\5789979F13000\WDFLDR.SYS
  489. Image path: \SystemRoot\system32\drivers\WDFLDR.SYS
  490. Image name: WDFLDR.SYS
  491. Timestamp: Fri Jul 15 22:10:39 2016 (5789979F)
  492. CheckSum: 0001A391
  493. ImageSize: 00013000
  494. File version: 1.19.14393.0
  495. Product version: 1.19.14393.0
  496. File flags: 0 (Mask 3F)
  497. File OS: 40004 NT Win32
  498. File type: 3.7 Driver
  499. File date: 00000000.00000000
  500. Translations: 0000.04b0
  501. CompanyName: Microsoft Corporation
  502. ProductName: Microsoft® Windows® Operating System
  503. InternalName: wdfldr.sys
  504. OriginalFilename: wdfldr.sys
  505. ProductVersion: 1.19.14393.0
  506. FileVersion: 1.19.14393.0 (rs1_release.160715-1616)
  507. FileDescription: Kernel Mode Driver Framework Loader
  508. LegalCopyright: © Microsoft Corporation. All rights reserved.
  509. fffff805`cdae0000 fffff805`cdb03000 acpiex (deferred)
  510. Mapped memory image file: C:\ProgramData\dbg\sym\acpiex.sys\57899BC723000\acpiex.sys
  511. Image path: \SystemRoot\System32\Drivers\acpiex.sys
  512. Image name: acpiex.sys
  513. Timestamp: Fri Jul 15 22:28:23 2016 (57899BC7)
  514. CheckSum: 00023092
  515. ImageSize: 00023000
  516. File version: 10.0.14393.0
  517. Product version: 10.0.14393.0
  518. File flags: 0 (Mask 3F)
  519. File OS: 40004 NT Win32
  520. File type: 2.0 Dll
  521. File date: 00000000.00000000
  522. Translations: 0409.04b0
  523. CompanyName: Microsoft Corporation
  524. ProductName: Microsoft® Windows® Operating System
  525. InternalName: acpiex.sys
  526. OriginalFilename: acpiex.sys
  527. ProductVersion: 10.0.14393.0
  528. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  529. FileDescription: ACPIEx Driver
  530. LegalCopyright: © Microsoft Corporation. All rights reserved.
  531. fffff805`cdb10000 fffff805`cdb1e000 WppRecorder (deferred)
  532. Mapped memory image file: C:\ProgramData\dbg\sym\WppRecorder.sys\57899BF8e000\WppRecorder.sys
  533. Image path: \SystemRoot\System32\Drivers\WppRecorder.sys
  534. Image name: WppRecorder.sys
  535. Timestamp: Fri Jul 15 22:29:12 2016 (57899BF8)
  536. CheckSum: 00013B72
  537. ImageSize: 0000E000
  538. File version: 10.0.14393.0
  539. Product version: 10.0.14393.0
  540. File flags: 0 (Mask 3F)
  541. File OS: 40004 NT Win32
  542. File type: 3.7 Driver
  543. File date: 00000000.00000000
  544. Translations: 0000.04b0
  545. CompanyName: Microsoft Corporation
  546. ProductName: Microsoft® Windows® Operating System
  547. InternalName: WppRecorder.sys
  548. OriginalFilename: WppRecorder.sys
  549. ProductVersion: 10.0.14393.0
  550. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  551. FileDescription: WPP Trace Recorder
  552. LegalCopyright: © Microsoft Corporation. All rights reserved.
  553. fffff805`cdb60000 fffff805`cdbee000 mcupdate_GenuineIntel (deferred)
  554. Mapped memory image file: C:\ProgramData\dbg\sym\mcupdate_GenuineIntel.dll\57899BB58e000\mcupdate_GenuineIntel.dll
  555. Image path: \SystemRoot\system32\mcupdate_GenuineIntel.dll
  556. Image name: mcupdate_GenuineIntel.dll
  557. Timestamp: Fri Jul 15 22:28:05 2016 (57899BB5)
  558. CheckSum: 00084A00
  559. ImageSize: 0008E000
  560. File version: 10.0.14393.0
  561. Product version: 10.0.14393.0
  562. File flags: 0 (Mask 3F)
  563. File OS: 40004 NT Win32
  564. File type: 3.A Driver
  565. File date: 00000000.00000000
  566. Translations: 0409.04b0
  567. CompanyName: Microsoft Corporation
  568. ProductName: Microsoft® Windows® Operating System
  569. InternalName: mcupdate.dll
  570. OriginalFilename: mcupdate_GenuineIntel.dll
  571. ProductVersion: 10.0.14393.0
  572. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  573. FileDescription: Intel Microcode Update Library
  574. LegalCopyright: © Microsoft Corporation. All rights reserved.
  575. fffff805`cdbf0000 fffff805`cdc00000 werkernel (deferred)
  576. Mapped memory image file: C:\ProgramData\dbg\sym\werkernel.sys\57899BE310000\werkernel.sys
  577. Image path: \SystemRoot\System32\drivers\werkernel.sys
  578. Image name: werkernel.sys
  579. Timestamp: Fri Jul 15 22:28:51 2016 (57899BE3)
  580. CheckSum: 00010145
  581. ImageSize: 00010000
  582. File version: 10.0.14393.0
  583. Product version: 10.0.14393.0
  584. File flags: 0 (Mask 3F)
  585. File OS: 40004 NT Win32
  586. File type: 3.7 Driver
  587. File date: 00000000.00000000
  588. Translations: 0409.04b0
  589. CompanyName: Microsoft Corporation
  590. ProductName: Microsoft® Windows® Operating System
  591. InternalName: werkernel.sys
  592. OriginalFilename: werkernel.sys
  593. ProductVersion: 10.0.14393.0
  594. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  595. FileDescription: Windows Error Reporting Kernel Driver
  596. LegalCopyright: © Microsoft Corporation. All rights reserved.
  597. fffff805`cdc00000 fffff805`cdc1f000 WindowsTrustedRT (deferred)
  598. Mapped memory image file: C:\ProgramData\dbg\sym\WindowsTrustedRT.sys\57899B791f000\WindowsTrustedRT.sys
  599. Image path: \SystemRoot\system32\drivers\WindowsTrustedRT.sys
  600. Image name: WindowsTrustedRT.sys
  601. Timestamp: Fri Jul 15 22:27:05 2016 (57899B79)
  602. CheckSum: 000289D5
  603. ImageSize: 0001F000
  604. File version: 10.0.14393.0
  605. Product version: 10.0.14393.0
  606. File flags: 0 (Mask 3F)
  607. File OS: 40004 NT Win32
  608. File type: 3.7 Driver
  609. File date: 00000000.00000000
  610. Translations: 0409.04b0
  611. CompanyName: Microsoft Corporation
  612. ProductName: Microsoft® Windows® Operating System
  613. InternalName: WindowsTrustedRT.sys
  614. OriginalFilename: WindowsTrustedRT.sys
  615. ProductVersion: 10.0.14393.0
  616. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  617. FileDescription: Windows Trusted Runtime Interface Driver
  618. LegalCopyright: © Microsoft Corporation. All rights reserved.
  619. fffff805`cdc20000 fffff805`cdc2b000 WindowsTrustedRTProxy (deferred)
  620. Mapped memory image file: C:\ProgramData\dbg\sym\WindowsTrustedRTProxy.sys\57899B79b000\WindowsTrustedRTProxy.sys
  621. Image path: \SystemRoot\System32\drivers\WindowsTrustedRTProxy.sys
  622. Image name: WindowsTrustedRTProxy.sys
  623. Timestamp: Fri Jul 15 22:27:05 2016 (57899B79)
  624. CheckSum: 00010011
  625. ImageSize: 0000B000
  626. File version: 10.0.14393.0
  627. Product version: 10.0.14393.0
  628. File flags: 0 (Mask 3F)
  629. File OS: 40004 NT Win32
  630. File type: 3.7 Driver
  631. File date: 00000000.00000000
  632. Translations: 0409.04b0
  633. CompanyName: Microsoft Corporation
  634. ProductName: Microsoft® Windows® Operating System
  635. InternalName: WindowsTrustedRTProxy.sys
  636. OriginalFilename: WindowsTrustedRTProxy.sys
  637. ProductVersion: 10.0.14393.0
  638. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  639. FileDescription: Windows Trusted Runtime Service Proxy Driver
  640. LegalCopyright: © Microsoft Corporation. All rights reserved.
  641. fffff805`cdc30000 fffff805`cdc42000 pcw (deferred)
  642. Mapped memory image file: C:\ProgramData\dbg\sym\pcw.sys\5789979D12000\pcw.sys
  643. Image path: \SystemRoot\System32\drivers\pcw.sys
  644. Image name: pcw.sys
  645. Timestamp: Fri Jul 15 22:10:37 2016 (5789979D)
  646. CheckSum: 00016E16
  647. ImageSize: 00012000
  648. File version: 10.0.14393.0
  649. Product version: 10.0.14393.0
  650. File flags: 0 (Mask 3F)
  651. File OS: 40004 NT Win32
  652. File type: 3.8 Driver
  653. File date: 00000000.00000000
  654. Translations: 0409.04b0
  655. CompanyName: Microsoft Corporation
  656. ProductName: Microsoft® Windows® Operating System
  657. InternalName: pcw.sys
  658. OriginalFilename: pcw.sys
  659. ProductVersion: 10.0.14393.0
  660. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  661. FileDescription: Performance Counters for Windows Driver
  662. LegalCopyright: © Microsoft Corporation. All rights reserved.
  663. fffff805`cdc50000 fffff805`cde82000 NTFS (deferred)
  664. Mapped memory image file: C:\ProgramData\dbg\sym\NTFS.sys\594A139E232000\NTFS.sys
  665. Image path: \SystemRoot\System32\Drivers\NTFS.sys
  666. Image name: NTFS.sys
  667. Timestamp: Wed Jun 21 02:35:10 2017 (594A139E)
  668. CheckSum: 00227375
  669. ImageSize: 00232000
  670. File version: 10.0.14393.1378
  671. Product version: 10.0.14393.1378
  672. File flags: 0 (Mask 3F)
  673. File OS: 40004 NT Win32
  674. File type: 3.7 Driver
  675. File date: 00000000.00000000
  676. Translations: 0409.04b0
  677. CompanyName: Microsoft Corporation
  678. ProductName: Microsoft® Windows® Operating System
  679. InternalName: ntfs.sys
  680. OriginalFilename: ntfs.sys
  681. ProductVersion: 10.0.14393.1378
  682. FileVersion: 10.0.14393.1378 (rs1_release.170620-2008)
  683. FileDescription: NT File System Driver
  684. LegalCopyright: © Microsoft Corporation. All rights reserved.
  685. fffff805`cdef0000 fffff805`cdfa3000 ACPI (deferred)
  686. Mapped memory image file: C:\ProgramData\dbg\sym\ACPI.sys\578997A7b3000\ACPI.sys
  687. Image path: \SystemRoot\System32\drivers\ACPI.sys
  688. Image name: ACPI.sys
  689. Timestamp: Fri Jul 15 22:10:47 2016 (578997A7)
  690. CheckSum: 000AE0BA
  691. ImageSize: 000B3000
  692. File version: 10.0.14393.0
  693. Product version: 10.0.14393.0
  694. File flags: 0 (Mask 3F)
  695. File OS: 40004 NT Win32
  696. File type: 3.7 Driver
  697. File date: 00000000.00000000
  698. Translations: 0409.04b0
  699. CompanyName: Microsoft Corporation
  700. ProductName: Microsoft® Windows® Operating System
  701. InternalName: ACPI.sys
  702. OriginalFilename: ACPI.sys
  703. ProductVersion: 10.0.14393.0
  704. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  705. FileDescription: ACPI Driver for NT
  706. LegalCopyright: © Microsoft Corporation. All rights reserved.
  707. fffff805`cdfb0000 fffff805`cdfbc000 WMILIB (deferred)
  708. Mapped memory image file: C:\ProgramData\dbg\sym\WMILIB.SYS\5789979Dc000\WMILIB.SYS
  709. Image path: \SystemRoot\System32\drivers\WMILIB.SYS
  710. Image name: WMILIB.SYS
  711. Timestamp: Fri Jul 15 22:10:37 2016 (5789979D)
  712. CheckSum: 00010B89
  713. ImageSize: 0000C000
  714. File version: 10.0.14393.0
  715. Product version: 10.0.14393.0
  716. File flags: 0 (Mask 3F)
  717. File OS: 40004 NT Win32
  718. File type: 3.7 Driver
  719. File date: 00000000.00000000
  720. Translations: 0409.04b0
  721. CompanyName: Microsoft Corporation
  722. ProductName: Microsoft® Windows® Operating System
  723. InternalName: WmiLib.sys
  724. OriginalFilename: WmiLib.sys
  725. ProductVersion: 10.0.14393.0
  726. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  727. FileDescription: WMILIB WMI support library Dll
  728. LegalCopyright: © Microsoft Corporation. All rights reserved.
  729. fffff805`cdfd0000 fffff805`cdfe1000 intelpep (deferred)
  730. Mapped memory image file: C:\ProgramData\dbg\sym\intelpep.sys\5789997311000\intelpep.sys
  731. Image path: \SystemRoot\System32\drivers\intelpep.sys
  732. Image name: intelpep.sys
  733. Timestamp: Fri Jul 15 22:18:27 2016 (57899973)
  734. CheckSum: 000124F6
  735. ImageSize: 00011000
  736. File version: 10.0.14393.0
  737. Product version: 10.0.14393.0
  738. File flags: 0 (Mask 3F)
  739. File OS: 40004 NT Win32
  740. File type: 3.A Driver
  741. File date: 00000000.00000000
  742. Translations: 0409.04b0
  743. CompanyName: Microsoft Corporation
  744. ProductName: Microsoft® Windows® Operating System
  745. InternalName: intelpep.sys
  746. OriginalFilename: intelpep.sys
  747. ProductVersion: 10.0.14393.0
  748. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  749. FileDescription: Intel Power Engine Plugin
  750. LegalCopyright: © Microsoft Corporation. All rights reserved.
  751. fffff805`ce000000 fffff805`ce057000 pci (deferred)
  752. Mapped memory image file: C:\ProgramData\dbg\sym\pci.sys\5850CC6B57000\pci.sys
  753. Image path: \SystemRoot\System32\drivers\pci.sys
  754. Image name: pci.sys
  755. Timestamp: Tue Dec 13 23:36:59 2016 (5850CC6B)
  756. CheckSum: 000539B9
  757. ImageSize: 00057000
  758. File version: 10.0.14393.594
  759. Product version: 10.0.14393.594
  760. File flags: 0 (Mask 3F)
  761. File OS: 40004 NT Win32
  762. File type: 2.0 Dll
  763. File date: 00000000.00000000
  764. Translations: 0409.04b0
  765. CompanyName: Microsoft Corporation
  766. ProductName: Microsoft® Windows® Operating System
  767. InternalName: pci.sys
  768. OriginalFilename: pci.sys
  769. ProductVersion: 10.0.14393.594
  770. FileVersion: 10.0.14393.594 (rs1_release_inmarket.161213-1754)
  771. FileDescription: NT Plug and Play PCI Enumerator
  772. LegalCopyright: © Microsoft Corporation. All rights reserved.
  773. fffff805`ce060000 fffff805`ce072000 vdrvroot (deferred)
  774. Mapped memory image file: C:\ProgramData\dbg\sym\vdrvroot.sys\57899B3612000\vdrvroot.sys
  775. Image path: \SystemRoot\System32\drivers\vdrvroot.sys
  776. Image name: vdrvroot.sys
  777. Timestamp: Fri Jul 15 22:25:58 2016 (57899B36)
  778. CheckSum: 00010662
  779. ImageSize: 00012000
  780. File version: 10.0.14393.0
  781. Product version: 10.0.14393.0
  782. File flags: 0 (Mask 3F)
  783. File OS: 40004 NT Win32
  784. File type: 2.0 Dll
  785. File date: 00000000.00000000
  786. Translations: 0409.04b0
  787. CompanyName: Microsoft Corporation
  788. ProductName: Microsoft® Windows® Operating System
  789. InternalName: vdrvroot.sys
  790. OriginalFilename: vdrvroot.sys
  791. ProductVersion: 10.0.14393.0
  792. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  793. FileDescription: Virtual Drive Root Enumerator
  794. LegalCopyright: © Microsoft Corporation. All rights reserved.
  795. fffff805`ce080000 fffff805`ce0b9000 cm_km (deferred)
  796. Image path: \SystemRoot\system32\DRIVERS\cm_km.sys
  797. Image name: cm_km.sys
  798. Timestamp: Wed May 25 05:00:10 2016 (5745699A)
  799. CheckSum: 0004A238
  800. ImageSize: 00039000
  801. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  802. fffff805`ce0c0000 fffff805`ce0e1000 pdc (deferred)
  803. Mapped memory image file: C:\ProgramData\dbg\sym\pdc.sys\595F282821000\pdc.sys
  804. Image path: \SystemRoot\system32\drivers\pdc.sys
  805. Image name: pdc.sys
  806. Timestamp: Fri Jul 7 02:20:24 2017 (595F2828)
  807. CheckSum: 00029041
  808. ImageSize: 00021000
  809. File version: 10.0.14393.1480
  810. Product version: 10.0.14393.1480
  811. File flags: 0 (Mask 3F)
  812. File OS: 40004 NT Win32
  813. File type: 3.7 Driver
  814. File date: 00000000.00000000
  815. Translations: 0000.04b0
  816. CompanyName: Microsoft Corporation
  817. ProductName: Microsoft® Windows® Operating System
  818. InternalName: pdc.sys
  819. OriginalFilename: pdc.sys
  820. ProductVersion: 10.0.14393.1480
  821. FileVersion: 10.0.14393.1480 (rs1_release.170706-2004)
  822. FileDescription: Power Dependency Coordinator Driver
  823. LegalCopyright: © Microsoft Corporation. All rights reserved.
  824. fffff805`ce0f0000 fffff805`ce109000 CEA (deferred)
  825. Mapped memory image file: C:\ProgramData\dbg\sym\CEA.sys\57899BD619000\CEA.sys
  826. Image path: \SystemRoot\system32\drivers\CEA.sys
  827. Image name: CEA.sys
  828. Timestamp: Fri Jul 15 22:28:38 2016 (57899BD6)
  829. CheckSum: 00015C18
  830. ImageSize: 00019000
  831. File version: 10.0.14393.0
  832. Product version: 10.0.14393.0
  833. File flags: 0 (Mask 3F)
  834. File OS: 40004 NT Win32
  835. File type: 2.0 Dll
  836. File date: 00000000.00000000
  837. Translations: 0409.04b0
  838. CompanyName: Microsoft Corporation
  839. ProductName: Microsoft® Windows® Operating System
  840. InternalName: EventAggregation.sys
  841. OriginalFilename: EventAggregation.sys
  842. ProductVersion: 10.0.14393.0
  843. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  844. FileDescription: Event Aggregation Kernel Mode Library
  845. LegalCopyright: © Microsoft Corporation. All rights reserved.
  846. fffff805`ce110000 fffff805`ce134000 partmgr (deferred)
  847. Mapped memory image file: C:\ProgramData\dbg\sym\partmgr.sys\58BA588F24000\partmgr.sys
  848. Image path: \SystemRoot\System32\drivers\partmgr.sys
  849. Image name: partmgr.sys
  850. Timestamp: Sat Mar 4 01:02:55 2017 (58BA588F)
  851. CheckSum: 00023424
  852. ImageSize: 00024000
  853. File version: 10.0.14393.953
  854. Product version: 10.0.14393.953
  855. File flags: 0 (Mask 3F)
  856. File OS: 40004 NT Win32
  857. File type: 3.7 Driver
  858. File date: 00000000.00000000
  859. Translations: 0000.04b0
  860. CompanyName: Microsoft Corporation
  861. ProductName: Microsoft® Windows® Operating System
  862. InternalName: partmgr.sys
  863. OriginalFilename: partmgr.sys
  864. ProductVersion: 10.0.14393.953
  865. FileVersion: 10.0.14393.953 (rs1_release_inmarket.170303-1614)
  866. FileDescription: Partition driver
  867. LegalCopyright: © Microsoft Corporation. All rights reserved.
  868. fffff805`ce140000 fffff805`ce1cd000 spaceport (deferred)
  869. Mapped memory image file: C:\ProgramData\dbg\sym\spaceport.sys\594A166F8d000\spaceport.sys
  870. Image path: \SystemRoot\System32\drivers\spaceport.sys
  871. Image name: spaceport.sys
  872. Timestamp: Wed Jun 21 02:47:11 2017 (594A166F)
  873. CheckSum: 00092C70
  874. ImageSize: 0008D000
  875. File version: 10.0.14393.1378
  876. Product version: 10.0.14393.1378
  877. File flags: 0 (Mask 3F)
  878. File OS: 40004 NT Win32
  879. File type: 3.7 Driver
  880. File date: 00000000.00000000
  881. Translations: 0000.04b0
  882. CompanyName: Microsoft Corporation
  883. ProductName: Microsoft® Windows® Operating System
  884. InternalName: spaceport.sys
  885. OriginalFilename: spaceport.sys
  886. ProductVersion: 10.0.14393.1378
  887. FileVersion: 10.0.14393.1378 (rs1_release.170620-2008)
  888. FileDescription: Storage Spaces Driver
  889. LegalCopyright: © Microsoft Corporation. All rights reserved.
  890. fffff805`ce1d0000 fffff805`ce1e8000 volmgr (deferred)
  891. Mapped memory image file: C:\ProgramData\dbg\sym\volmgr.sys\578997A318000\volmgr.sys
  892. Image path: \SystemRoot\System32\drivers\volmgr.sys
  893. Image name: volmgr.sys
  894. Timestamp: Fri Jul 15 22:10:43 2016 (578997A3)
  895. CheckSum: 000180CB
  896. ImageSize: 00018000
  897. File version: 10.0.14393.0
  898. Product version: 10.0.14393.0
  899. File flags: 0 (Mask 3F)
  900. File OS: 40004 NT Win32
  901. File type: 3.7 Driver
  902. File date: 00000000.00000000
  903. Translations: 0409.04b0
  904. CompanyName: Microsoft Corporation
  905. ProductName: Microsoft® Windows® Operating System
  906. InternalName: volmgr.sys
  907. OriginalFilename: volmgr.sys
  908. ProductVersion: 10.0.14393.0
  909. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  910. FileDescription: Volume Manager Driver
  911. LegalCopyright: © Microsoft Corporation. All rights reserved.
  912. fffff805`ce1f0000 fffff805`ce24e000 volmgrx (deferred)
  913. Mapped memory image file: C:\ProgramData\dbg\sym\volmgrx.sys\578997A55e000\volmgrx.sys
  914. Image path: \SystemRoot\System32\drivers\volmgrx.sys
  915. Image name: volmgrx.sys
  916. Timestamp: Fri Jul 15 22:10:45 2016 (578997A5)
  917. CheckSum: 0005C03C
  918. ImageSize: 0005E000
  919. File version: 10.0.14393.0
  920. Product version: 10.0.14393.0
  921. File flags: 0 (Mask 3F)
  922. File OS: 40004 NT Win32
  923. File type: 3.7 Driver
  924. File date: 00000000.00000000
  925. Translations: 0409.04b0
  926. CompanyName: Microsoft Corporation
  927. ProductName: Microsoft® Windows® Operating System
  928. InternalName: volmgrx.sys
  929. OriginalFilename: volmgrx.sys
  930. ProductVersion: 10.0.14393.0
  931. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  932. FileDescription: Volume Manager Extension Driver
  933. LegalCopyright: © Microsoft Corporation. All rights reserved.
  934. fffff805`ce250000 fffff805`ce25e000 klbackupdisk (deferred)
  935. Image path: \SystemRoot\system32\DRIVERS\klbackupdisk.sys
  936. Image name: klbackupdisk.sys
  937. Timestamp: Fri Apr 22 09:25:48 2016 (571A265C)
  938. CheckSum: 00012795
  939. ImageSize: 0000E000
  940. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  941. fffff805`ce260000 fffff805`ce27e000 mountmgr (deferred)
  942. Mapped memory image file: C:\ProgramData\dbg\sym\mountmgr.sys\578997A21e000\mountmgr.sys
  943. Image path: \SystemRoot\System32\drivers\mountmgr.sys
  944. Image name: mountmgr.sys
  945. Timestamp: Fri Jul 15 22:10:42 2016 (578997A2)
  946. CheckSum: 0001F35F
  947. ImageSize: 0001E000
  948. File version: 10.0.14393.0
  949. Product version: 10.0.14393.0
  950. File flags: 0 (Mask 3F)
  951. File OS: 40004 NT Win32
  952. File type: 3.7 Driver
  953. File date: 00000000.00000000
  954. Translations: 0409.04b0
  955. CompanyName: Microsoft Corporation
  956. ProductName: Microsoft® Windows® Operating System
  957. InternalName: mountmgr.sys
  958. OriginalFilename: mountmgr.sys
  959. ProductVersion: 10.0.14393.0
  960. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  961. FileDescription: Mount Point Manager
  962. LegalCopyright: © Microsoft Corporation. All rights reserved.
  963. fffff805`ce280000 fffff805`ce2a4000 storahci (deferred)
  964. Mapped memory image file: C:\ProgramData\dbg\sym\storahci.sys\58BA5AC424000\storahci.sys
  965. Image path: \SystemRoot\System32\drivers\storahci.sys
  966. Image name: storahci.sys
  967. Timestamp: Sat Mar 4 01:12:20 2017 (58BA5AC4)
  968. CheckSum: 0002B55C
  969. ImageSize: 00024000
  970. File version: 10.0.14393.953
  971. Product version: 10.0.14393.953
  972. File flags: 0 (Mask 3F)
  973. File OS: 40004 NT Win32
  974. File type: 3.7 Driver
  975. File date: 00000000.00000000
  976. Translations: 0409.04b0
  977. CompanyName: Microsoft Corporation
  978. ProductName: Microsoft® Windows® Operating System
  979. InternalName: storahci.sys
  980. OriginalFilename: storahci.sys
  981. ProductVersion: 10.0.14393.953
  982. FileVersion: 10.0.14393.953 (rs1_release_inmarket.170303-1614)
  983. FileDescription: MS AHCI Storport Miniport Driver
  984. LegalCopyright: © Microsoft Corporation. All rights reserved.
  985. fffff805`ce2b0000 fffff805`ce332000 storport (deferred)
  986. Mapped memory image file: C:\ProgramData\dbg\sym\storport.sys\593279AA82000\storport.sys
  987. Image path: \SystemRoot\System32\drivers\storport.sys
  988. Image name: storport.sys
  989. Timestamp: Sat Jun 3 04:56:10 2017 (593279AA)
  990. CheckSum: 0008A8FC
  991. ImageSize: 00082000
  992. File version: 10.0.14393.1358
  993. Product version: 10.0.14393.1358
  994. File flags: 0 (Mask 3F)
  995. File OS: 40004 NT Win32
  996. File type: 3.7 Driver
  997. File date: 00000000.00000000
  998. Translations: 0000.04b0
  999. CompanyName: Microsoft Corporation
  1000. ProductName: Microsoft® Windows® Operating System
  1001. InternalName: storport.sys
  1002. OriginalFilename: storport.sys
  1003. ProductVersion: 10.0.14393.1358
  1004. FileVersion: 10.0.14393.1358 (rs1_release.170602-2252)
  1005. FileDescription: Microsoft Storage Port Driver
  1006. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1007. fffff805`ce340000 fffff805`ce8b4000 iaStorA (deferred)
  1008. Image path: \SystemRoot\System32\drivers\iaStorA.sys
  1009. Image name: iaStorA.sys
  1010. Timestamp: Wed Nov 4 05:27:49 2015 (5639DDA5)
  1011. CheckSum: 00168F4C
  1012. ImageSize: 00574000
  1013. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  1014. fffff805`ce8c0000 fffff805`ce8dc000 EhStorClass (deferred)
  1015. Mapped memory image file: C:\ProgramData\dbg\sym\EhStorClass.sys\5789997B1c000\EhStorClass.sys
  1016. Image path: \SystemRoot\System32\drivers\EhStorClass.sys
  1017. Image name: EhStorClass.sys
  1018. Timestamp: Fri Jul 15 22:18:35 2016 (5789997B)
  1019. CheckSum: 0001B7C5
  1020. ImageSize: 0001C000
  1021. File version: 10.0.14393.0
  1022. Product version: 10.0.14393.0
  1023. File flags: 0 (Mask 3F)
  1024. File OS: 40004 NT Win32
  1025. File type: 3.7 Driver
  1026. File date: 00000000.00000000
  1027. Translations: 0409.04b0
  1028. CompanyName: Microsoft Corporation
  1029. ProductName: Microsoft® Windows® Operating System
  1030. InternalName: EhStorClass.sys
  1031. OriginalFilename: EhStorClass.sys
  1032. ProductVersion: 10.0.14393.0
  1033. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  1034. FileDescription: Enhanced Storage Class driver for IEEE 1667 devices
  1035. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1036. fffff805`ce8e0000 fffff805`ce8f9000 fileinfo (deferred)
  1037. Mapped memory image file: C:\ProgramData\dbg\sym\fileinfo.sys\57899B3D19000\fileinfo.sys
  1038. Image path: \SystemRoot\System32\drivers\fileinfo.sys
  1039. Image name: fileinfo.sys
  1040. Timestamp: Fri Jul 15 22:26:05 2016 (57899B3D)
  1041. CheckSum: 000215EC
  1042. ImageSize: 00019000
  1043. File version: 10.0.14393.0
  1044. Product version: 10.0.14393.0
  1045. File flags: 0 (Mask 3F)
  1046. File OS: 40004 NT Win32
  1047. File type: 3.7 Driver
  1048. File date: 00000000.00000000
  1049. Translations: 0409.04b0
  1050. CompanyName: Microsoft Corporation
  1051. ProductName: Microsoft® Windows® Operating System
  1052. InternalName: FileInfo.sys
  1053. OriginalFilename: FileInfo.sys
  1054. ProductVersion: 10.0.14393.0
  1055. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  1056. FileDescription: FileInfo Filter Driver
  1057. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1058. fffff805`ce900000 fffff805`ce938000 Wof (deferred)
  1059. Mapped memory image file: C:\ProgramData\dbg\sym\Wof.sys\57A55D5438000\Wof.sys
  1060. Image path: \SystemRoot\System32\Drivers\Wof.sys
  1061. Image name: Wof.sys
  1062. Timestamp: Fri Aug 5 23:45:24 2016 (57A55D54)
  1063. CheckSum: 000376A3
  1064. ImageSize: 00038000
  1065. File version: 10.0.14393.82
  1066. Product version: 10.0.14393.82
  1067. File flags: 0 (Mask 3F)
  1068. File OS: 40004 NT Win32
  1069. File type: 3.7 Driver
  1070. File date: 00000000.00000000
  1071. Translations: 0409.04b0
  1072. CompanyName: Microsoft Corporation
  1073. ProductName: Microsoft® Windows® Operating System
  1074. InternalName: wof.sys
  1075. OriginalFilename: wof.sys
  1076. ProductVersion: 10.0.14393.82
  1077. FileVersion: 10.0.14393.82 (rs1_release.160805-1735)
  1078. FileDescription: Windows Overlay Filter
  1079. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1080. fffff805`ce940000 fffff805`ce94d000 Fs_Rec (deferred)
  1081. Mapped memory image file: C:\ProgramData\dbg\sym\Fs_Rec.sys\5789979Dd000\Fs_Rec.sys
  1082. Image path: \SystemRoot\System32\Drivers\Fs_Rec.sys
  1083. Image name: Fs_Rec.sys
  1084. Timestamp: Fri Jul 15 22:10:37 2016 (5789979D)
  1085. CheckSum: 000131D6
  1086. ImageSize: 0000D000
  1087. File version: 10.0.14393.0
  1088. Product version: 10.0.14393.0
  1089. File flags: 0 (Mask 3F)
  1090. File OS: 40004 NT Win32
  1091. File type: 3.7 Driver
  1092. File date: 00000000.00000000
  1093. Translations: 0409.04b0
  1094. CompanyName: Microsoft Corporation
  1095. ProductName: Microsoft® Windows® Operating System
  1096. InternalName: fs_rec.sys
  1097. OriginalFilename: fs_rec.sys
  1098. ProductVersion: 10.0.14393.0
  1099. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  1100. FileDescription: File System Recognizer Driver
  1101. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1102. fffff805`ce950000 fffff805`cea78000 ndis (pdb symbols) C:\ProgramData\dbg\sym\ndis.pdb\4F4D613DD7C746A6A1BBF75358A448361\ndis.pdb
  1103. Loaded symbol image file: ndis.sys
  1104. Mapped memory image file: C:\ProgramData\dbg\sym\ndis.sys\59327B45128000\ndis.sys
  1105. Image path: \SystemRoot\system32\drivers\ndis.sys
  1106. Image name: ndis.sys
  1107. Timestamp: Sat Jun 3 05:03:01 2017 (59327B45)
  1108. CheckSum: 001290D5
  1109. ImageSize: 00128000
  1110. File version: 10.0.14393.1358
  1111. Product version: 10.0.14393.1358
  1112. File flags: 0 (Mask 3F)
  1113. File OS: 40004 NT Win32
  1114. File type: 3.6 Driver
  1115. File date: 00000000.00000000
  1116. Translations: 0409.04b0
  1117. CompanyName: Microsoft Corporation
  1118. ProductName: Microsoft® Windows® Operating System
  1119. InternalName: NDIS.SYS
  1120. OriginalFilename: NDIS.SYS
  1121. ProductVersion: 10.0.14393.1358
  1122. FileVersion: 10.0.14393.1358 (rs1_release.170602-2252)
  1123. FileDescription: Network Driver Interface Specification (NDIS)
  1124. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1125. fffff805`cea90000 fffff805`cf199000 kl1 (deferred)
  1126. Image path: \SystemRoot\system32\DRIVERS\kl1.sys
  1127. Image name: kl1.sys
  1128. Timestamp: Fri Apr 1 10:20:28 2016 (56FE83AC)
  1129. CheckSum: 0008EC17
  1130. ImageSize: 00709000
  1131. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  1132. fffff805`cf1a0000 fffff805`cf1d9000 klupd_klif_arkmon (deferred)
  1133. Image path: \SystemRoot\System32\Drivers\klupd_klif_arkmon.sys
  1134. Image name: klupd_klif_arkmon.sys
  1135. Timestamp: Thu Mar 30 10:41:32 2017 (58DD191C)
  1136. CheckSum: 00038D0D
  1137. ImageSize: 00039000
  1138. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  1139. fffff805`cf1e0000 fffff805`cf1eb000 msisadrv (deferred)
  1140. Mapped memory image file: C:\ProgramData\dbg\sym\msisadrv.sys\57899BE3b000\msisadrv.sys
  1141. Image path: \SystemRoot\System32\drivers\msisadrv.sys
  1142. Image name: msisadrv.sys
  1143. Timestamp: Fri Jul 15 22:28:51 2016 (57899BE3)
  1144. CheckSum: 0000CFE7
  1145. ImageSize: 0000B000
  1146. File version: 10.0.14393.0
  1147. Product version: 10.0.14393.0
  1148. File flags: 0 (Mask 3F)
  1149. File OS: 40004 NT Win32
  1150. File type: 3.7 Driver
  1151. File date: 00000000.00000000
  1152. Translations: 0409.04b0
  1153. CompanyName: Microsoft Corporation
  1154. ProductName: Microsoft® Windows® Operating System
  1155. InternalName: msisadrv.sys
  1156. OriginalFilename: msisadrv.sys
  1157. ProductVersion: 10.0.14393.0
  1158. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  1159. FileDescription: ISA Driver
  1160. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1161. fffff805`cf200000 fffff805`cf477000 tcpip (pdb symbols) C:\ProgramData\dbg\sym\tcpip.pdb\B33E4C5C43FC449794D536EFE243AFA31\tcpip.pdb
  1162. Loaded symbol image file: tcpip.sys
  1163. Mapped memory image file: C:\ProgramData\dbg\sym\tcpip.sys\595F28FD277000\tcpip.sys
  1164. Image path: \SystemRoot\System32\drivers\tcpip.sys
  1165. Image name: tcpip.sys
  1166. Timestamp: Fri Jul 7 02:23:57 2017 (595F28FD)
  1167. CheckSum: 002767C1
  1168. ImageSize: 00277000
  1169. File version: 10.0.14393.1480
  1170. Product version: 10.0.14393.1480
  1171. File flags: 0 (Mask 3F)
  1172. File OS: 40004 NT Win32
  1173. File type: 3.6 Driver
  1174. File date: 00000000.00000000
  1175. Translations: 0409.04b0
  1176. CompanyName: Microsoft Corporation
  1177. ProductName: Microsoft® Windows® Operating System
  1178. InternalName: tcpip.sys
  1179. OriginalFilename: tcpip.sys
  1180. ProductVersion: 10.0.14393.1480
  1181. FileVersion: 10.0.14393.1480 (rs1_release.170706-2004)
  1182. FileDescription: TCP/IP Driver
  1183. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1184. fffff805`cf480000 fffff805`cf4e9000 fwpkclnt (deferred)
  1185. Mapped memory image file: C:\ProgramData\dbg\sym\fwpkclnt.sys\58BA5ECD69000\fwpkclnt.sys
  1186. Image path: \SystemRoot\System32\drivers\fwpkclnt.sys
  1187. Image name: fwpkclnt.sys
  1188. Timestamp: Sat Mar 4 01:29:33 2017 (58BA5ECD)
  1189. CheckSum: 0006571E
  1190. ImageSize: 00069000
  1191. File version: 10.0.14393.953
  1192. Product version: 10.0.14393.953
  1193. File flags: 0 (Mask 3F)
  1194. File OS: 40004 NT Win32
  1195. File type: 2.0 Dll
  1196. File date: 00000000.00000000
  1197. Translations: 0409.04b0
  1198. CompanyName: Microsoft Corporation
  1199. ProductName: Microsoft® Windows® Operating System
  1200. InternalName: fwpkclnt.sys
  1201. OriginalFilename: fwpkclnt.sys
  1202. ProductVersion: 10.0.14393.953
  1203. FileVersion: 10.0.14393.953 (rs1_release_inmarket.170303-1614)
  1204. FileDescription: FWP/IPsec Kernel-Mode API
  1205. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1206. fffff805`cf4f0000 fffff805`cf51a000 wfplwfs (deferred)
  1207. Mapped memory image file: C:\ProgramData\dbg\sym\wfplwfs.sys\57899B352a000\wfplwfs.sys
  1208. Image path: \SystemRoot\System32\drivers\wfplwfs.sys
  1209. Image name: wfplwfs.sys
  1210. Timestamp: Fri Jul 15 22:25:57 2016 (57899B35)
  1211. CheckSum: 0002C860
  1212. ImageSize: 0002A000
  1213. File version: 10.0.14393.0
  1214. Product version: 10.0.14393.0
  1215. File flags: 0 (Mask 3F)
  1216. File OS: 40004 NT Win32
  1217. File type: 3.6 Driver
  1218. File date: 00000000.00000000
  1219. Translations: 0000.04b0
  1220. CompanyName: Microsoft Corporation
  1221. ProductName: Microsoft® Windows® Operating System
  1222. InternalName: WFPLWFS.SYS
  1223. OriginalFilename: WFPLWFS.SYS
  1224. ProductVersion: 10.0.14393.0
  1225. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  1226. FileDescription: WFP NDIS 6.30 Lightweight Filter Driver
  1227. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1228. fffff805`cf520000 fffff805`cf5c3000 fvevol (deferred)
  1229. Mapped memory image file: C:\ProgramData\dbg\sym\fvevol.sys\57DACE04a3000\fvevol.sys
  1230. Image path: \SystemRoot\System32\DRIVERS\fvevol.sys
  1231. Image name: fvevol.sys
  1232. Timestamp: Thu Sep 15 12:36:20 2016 (57DACE04)
  1233. CheckSum: 000AD58D
  1234. ImageSize: 000A3000
  1235. File version: 10.0.14393.206
  1236. Product version: 10.0.14393.206
  1237. File flags: 0 (Mask 3F)
  1238. File OS: 40004 NT Win32
  1239. File type: 3.7 Driver
  1240. File date: 00000000.00000000
  1241. Translations: 0000.04b0
  1242. CompanyName: Microsoft Corporation
  1243. ProductName: Microsoft® Windows® Operating System
  1244. InternalName: FVEVOL.SYS
  1245. OriginalFilename: FVEVOL.SYS
  1246. ProductVersion: 10.0.14393.206
  1247. FileVersion: 10.0.14393.206 (rs1_release.160915-0644)
  1248. FileDescription: BitLocker Drive Encryption Driver
  1249. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1250. fffff805`cf5d0000 fffff805`cf5db000 volume (deferred)
  1251. Mapped memory image file: C:\ProgramData\dbg\sym\volume.sys\5789979Db000\volume.sys
  1252. Image path: \SystemRoot\System32\drivers\volume.sys
  1253. Image name: volume.sys
  1254. Timestamp: Fri Jul 15 22:10:37 2016 (5789979D)
  1255. CheckSum: 00013C5C
  1256. ImageSize: 0000B000
  1257. File version: 10.0.14393.0
  1258. Product version: 10.0.14393.0
  1259. File flags: 0 (Mask 3F)
  1260. File OS: 40004 NT Win32
  1261. File type: 3.7 Driver
  1262. File date: 00000000.00000000
  1263. Translations: 0000.04b0
  1264. CompanyName: Microsoft Corporation
  1265. ProductName: Microsoft® Windows® Operating System
  1266. InternalName: volume.sys
  1267. OriginalFilename: volume.sys
  1268. ProductVersion: 10.0.14393.0
  1269. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  1270. FileDescription: Volume driver
  1271. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1272. fffff805`cf5e0000 fffff805`cf644000 volsnap (deferred)
  1273. Mapped memory image file: C:\ProgramData\dbg\sym\volsnap.sys\578997A464000\volsnap.sys
  1274. Image path: \SystemRoot\System32\drivers\volsnap.sys
  1275. Image name: volsnap.sys
  1276. Timestamp: Fri Jul 15 22:10:44 2016 (578997A4)
  1277. CheckSum: 000688C8
  1278. ImageSize: 00064000
  1279. File version: 10.0.14393.0
  1280. Product version: 10.0.14393.0
  1281. File flags: 0 (Mask 3F)
  1282. File OS: 40004 NT Win32
  1283. File type: 3.7 Driver
  1284. File date: 00000000.00000000
  1285. Translations: 0409.04b0
  1286. CompanyName: Microsoft Corporation
  1287. ProductName: Microsoft® Windows® Operating System
  1288. InternalName: volsnap.sys
  1289. OriginalFilename: volsnap.sys
  1290. ProductVersion: 10.0.14393.0
  1291. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  1292. FileDescription: Volume Shadow Copy driver
  1293. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1294. fffff805`cf650000 fffff805`cf698000 rdyboost (deferred)
  1295. Mapped memory image file: C:\ProgramData\dbg\sym\rdyboost.sys\57899B0C48000\rdyboost.sys
  1296. Image path: \SystemRoot\System32\drivers\rdyboost.sys
  1297. Image name: rdyboost.sys
  1298. Timestamp: Fri Jul 15 22:25:16 2016 (57899B0C)
  1299. CheckSum: 0004C49F
  1300. ImageSize: 00048000
  1301. File version: 10.0.14393.0
  1302. Product version: 10.0.14393.0
  1303. File flags: 0 (Mask 3F)
  1304. File OS: 40004 NT Win32
  1305. File type: 3.7 Driver
  1306. File date: 00000000.00000000
  1307. Translations: 0000.04b0
  1308. CompanyName: Microsoft Corporation
  1309. ProductName: Microsoft® Windows® Operating System
  1310. InternalName: rdyboost.sys
  1311. OriginalFilename: rdyboost.sys
  1312. ProductVersion: 10.0.14393.0
  1313. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  1314. FileDescription: ReadyBoost Driver
  1315. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1316. fffff805`cf6a0000 fffff805`cf6c5000 mup (deferred)
  1317. Mapped memory image file: C:\ProgramData\dbg\sym\mup.sys\594A135C25000\mup.sys
  1318. Image path: \SystemRoot\System32\Drivers\mup.sys
  1319. Image name: mup.sys
  1320. Timestamp: Wed Jun 21 02:34:04 2017 (594A135C)
  1321. CheckSum: 0002AD91
  1322. ImageSize: 00025000
  1323. File version: 10.0.14393.1378
  1324. Product version: 10.0.14393.1378
  1325. File flags: 0 (Mask 3F)
  1326. File OS: 40004 NT Win32
  1327. File type: 3.6 Driver
  1328. File date: 00000000.00000000
  1329. Translations: 0409.04b0
  1330. CompanyName: Microsoft Corporation
  1331. ProductName: Microsoft® Windows® Operating System
  1332. InternalName: MUP.SYS
  1333. OriginalFilename: MUP.SYS
  1334. ProductVersion: 10.0.14393.1378
  1335. FileVersion: 10.0.14393.1378 (rs1_release.170620-2008)
  1336. FileDescription: Multiple UNC Provider Driver
  1337. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1338. fffff805`cf6d0000 fffff805`cf6ec000 klupd_klif_klbg (deferred)
  1339. Image path: \SystemRoot\System32\Drivers\klupd_klif_klbg.sys
  1340. Image name: klupd_klif_klbg.sys
  1341. Timestamp: Thu Mar 30 10:51:17 2017 (58DD1B65)
  1342. CheckSum: 000234F1
  1343. ImageSize: 0001C000
  1344. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  1345. fffff805`cf6f0000 fffff805`cf700000 iorate (deferred)
  1346. Mapped memory image file: C:\ProgramData\dbg\sym\iorate.sys\5819BC0F10000\iorate.sys
  1347. Image path: \SystemRoot\system32\drivers\iorate.sys
  1348. Image name: iorate.sys
  1349. Timestamp: Wed Nov 2 06:12:31 2016 (5819BC0F)
  1350. CheckSum: 00016120
  1351. ImageSize: 00010000
  1352. File version: 10.0.14393.447
  1353. Product version: 10.0.14393.447
  1354. File flags: 0 (Mask 3F)
  1355. File OS: 40004 NT Win32
  1356. File type: 3.7 Driver
  1357. File date: 00000000.00000000
  1358. Translations: 0409.04b0
  1359. CompanyName: Microsoft Corporation
  1360. ProductName: Microsoft® Windows® Operating System
  1361. InternalName: iorate.sys
  1362. OriginalFilename: iorate.sys
  1363. ProductVersion: 10.0.14393.447
  1364. FileVersion: 10.0.14393.447 (rs1_release_inmarket.161102-0100)
  1365. FileDescription: I/O rate control Filter
  1366. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1367. fffff805`cf710000 fffff805`cf72e000 disk (deferred)
  1368. Mapped memory image file: C:\ProgramData\dbg\sym\disk.sys\578997AC1e000\disk.sys
  1369. Image path: \SystemRoot\System32\drivers\disk.sys
  1370. Image name: disk.sys
  1371. Timestamp: Fri Jul 15 22:10:52 2016 (578997AC)
  1372. CheckSum: 000225F7
  1373. ImageSize: 0001E000
  1374. File version: 10.0.14393.0
  1375. Product version: 10.0.14393.0
  1376. File flags: 0 (Mask 3F)
  1377. File OS: 40004 NT Win32
  1378. File type: 3.7 Driver
  1379. File date: 00000000.00000000
  1380. Translations: 0000.04b0
  1381. CompanyName: Microsoft Corporation
  1382. ProductName: Microsoft® Windows® Operating System
  1383. InternalName: disk.sys
  1384. OriginalFilename: disk.sys
  1385. ProductVersion: 10.0.14393.0
  1386. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  1387. FileDescription: PnP Disk Driver
  1388. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1389. fffff805`cf730000 fffff805`cf792000 CLASSPNP (deferred)
  1390. Mapped memory image file: C:\ProgramData\dbg\sym\CLASSPNP.SYS\58BA589362000\CLASSPNP.SYS
  1391. Image path: \SystemRoot\System32\drivers\CLASSPNP.SYS
  1392. Image name: CLASSPNP.SYS
  1393. Timestamp: Sat Mar 4 01:02:59 2017 (58BA5893)
  1394. CheckSum: 0006A40D
  1395. ImageSize: 00062000
  1396. File version: 10.0.14393.953
  1397. Product version: 10.0.14393.953
  1398. File flags: 0 (Mask 3F)
  1399. File OS: 40004 NT Win32
  1400. File type: 3.7 Driver
  1401. File date: 00000000.00000000
  1402. Translations: 0000.04b0
  1403. CompanyName: Microsoft Corporation
  1404. ProductName: Microsoft® Windows® Operating System
  1405. InternalName: Classpnp.sys
  1406. OriginalFilename: Classpnp.sys
  1407. ProductVersion: 10.0.14393.953
  1408. FileVersion: 10.0.14393.953 (rs1_release_inmarket.170303-1614)
  1409. FileDescription: SCSI Class System Dll
  1410. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1411. fffff805`cf7c0000 fffff805`cf7d9000 crashdmp (deferred)
  1412. Mapped memory image file: C:\ProgramData\dbg\sym\crashdmp.sys\5801A69319000\crashdmp.sys
  1413. Image path: \SystemRoot\System32\Drivers\crashdmp.sys
  1414. Image name: crashdmp.sys
  1415. Timestamp: Fri Oct 14 23:46:27 2016 (5801A693)
  1416. CheckSum: 0001FFD2
  1417. ImageSize: 00019000
  1418. File version: 10.0.14393.351
  1419. Product version: 10.0.14393.351
  1420. File flags: 0 (Mask 3F)
  1421. File OS: 40004 NT Win32
  1422. File type: 3.7 Driver
  1423. File date: 00000000.00000000
  1424. Translations: 0409.04b0
  1425. CompanyName: Microsoft Corporation
  1426. ProductName: Microsoft® Windows® Operating System
  1427. InternalName: crashdmp.sys
  1428. OriginalFilename: crashdmp.sys
  1429. ProductVersion: 10.0.14393.351
  1430. FileVersion: 10.0.14393.351 (rs1_release_inmarket.161014-1755)
  1431. FileDescription: Crash Dump Driver
  1432. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1433. fffff805`cf7e0000 fffff805`cf82d000 mrxsmb10 (deferred)
  1434. Mapped memory image file: C:\ProgramData\dbg\sym\mrxsmb10.sys\595F2C904d000\mrxsmb10.sys
  1435. Image path: \SystemRoot\system32\DRIVERS\mrxsmb10.sys
  1436. Image name: mrxsmb10.sys
  1437. Timestamp: Fri Jul 7 02:39:12 2017 (595F2C90)
  1438. CheckSum: 000497C9
  1439. ImageSize: 0004D000
  1440. File version: 10.0.14393.1480
  1441. Product version: 10.0.14393.1480
  1442. File flags: 0 (Mask 3F)
  1443. File OS: 40004 NT Win32
  1444. File type: 3.7 Driver
  1445. File date: 00000000.00000000
  1446. Translations: 0409.04b0
  1447. CompanyName: Microsoft Corporation
  1448. ProductName: Microsoft® Windows® Operating System
  1449. InternalName: MRxSmb0.sys
  1450. OriginalFilename: MRXSMB0.Sys
  1451. ProductVersion: 10.0.14393.1480
  1452. FileVersion: 10.0.14393.1480 (rs1_release.170706-2004)
  1453. FileDescription: Longhorn SMB Downlevel SubRdr
  1454. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1455. fffff805`cf830000 fffff805`cf844000 mmcss (deferred)
  1456. Mapped memory image file: C:\ProgramData\dbg\sym\mmcss.sys\578999FD14000\mmcss.sys
  1457. Image path: \SystemRoot\system32\drivers\mmcss.sys
  1458. Image name: mmcss.sys
  1459. Timestamp: Fri Jul 15 22:20:45 2016 (578999FD)
  1460. CheckSum: 00018AF4
  1461. ImageSize: 00014000
  1462. File version: 10.0.14393.0
  1463. Product version: 10.0.14393.0
  1464. File flags: 0 (Mask 3F)
  1465. File OS: 40004 NT Win32
  1466. File type: 3.7 Driver
  1467. File date: 00000000.00000000
  1468. Translations: 0409.04b0
  1469. CompanyName: Microsoft Corporation
  1470. ProductName: Microsoft® Windows® Operating System
  1471. InternalName: mmcss.sys
  1472. OriginalFilename: mmcss.sys
  1473. ProductVersion: 10.0.14393.0
  1474. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  1475. FileDescription: MMCSS Driver
  1476. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1477. fffff805`cf8a0000 fffff805`cf93e000 klhk (deferred)
  1478. Image path: \SystemRoot\System32\drivers\klhk.sys
  1479. Image name: klhk.sys
  1480. Timestamp: Tue Mar 28 08:56:34 2017 (58DA5D82)
  1481. CheckSum: 00087C22
  1482. ImageSize: 0009E000
  1483. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  1484. fffff805`cf940000 fffff805`cf971000 cdrom (deferred)
  1485. Mapped memory image file: C:\ProgramData\dbg\sym\cdrom.sys\578997A231000\cdrom.sys
  1486. Image path: \SystemRoot\System32\drivers\cdrom.sys
  1487. Image name: cdrom.sys
  1488. Timestamp: Fri Jul 15 22:10:42 2016 (578997A2)
  1489. CheckSum: 00033C7A
  1490. ImageSize: 00031000
  1491. File version: 10.0.14393.0
  1492. Product version: 10.0.14393.0
  1493. File flags: 0 (Mask 3F)
  1494. File OS: 40004 NT Win32
  1495. File type: 3.7 Driver
  1496. File date: 00000000.00000000
  1497. Translations: 0000.04b0
  1498. CompanyName: Microsoft Corporation
  1499. ProductName: Microsoft® Windows® Operating System
  1500. InternalName: cdrom.sys
  1501. OriginalFilename: cdrom.sys
  1502. ProductVersion: 10.0.14393.0
  1503. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  1504. FileDescription: SCSI CD-ROM Driver
  1505. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1506. fffff805`cf980000 fffff805`cf994000 klbackupflt (deferred)
  1507. Image path: \SystemRoot\system32\DRIVERS\klbackupflt.sys
  1508. Image name: klbackupflt.sys
  1509. Timestamp: Thu May 19 11:15:06 2016 (573DD87A)
  1510. CheckSum: 0001F07D
  1511. ImageSize: 00014000
  1512. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  1513. fffff805`cf9a0000 fffff805`cf9dd000 klflt (deferred)
  1514. Image path: \SystemRoot\system32\DRIVERS\klflt.sys
  1515. Image name: klflt.sys
  1516. Timestamp: Thu Dec 29 06:26:07 2016 (5864F2CF)
  1517. CheckSum: 00038E8E
  1518. ImageSize: 0003D000
  1519. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  1520. fffff805`cf9e0000 fffff805`cf9fd000 filecrypt (deferred)
  1521. Mapped memory image file: C:\ProgramData\dbg\sym\filecrypt.sys\57899A6F1d000\filecrypt.sys
  1522. Image path: \SystemRoot\system32\drivers\filecrypt.sys
  1523. Image name: filecrypt.sys
  1524. Timestamp: Fri Jul 15 22:22:39 2016 (57899A6F)
  1525. CheckSum: 0002343D
  1526. ImageSize: 0001D000
  1527. File version: 10.0.14393.0
  1528. Product version: 10.0.14393.0
  1529. File flags: 0 (Mask 3F)
  1530. File OS: 40004 NT Win32
  1531. File type: 3.7 Driver
  1532. File date: 00000000.00000000
  1533. Translations: 0409.04b0
  1534. CompanyName: Microsoft Corporation
  1535. ProductName: Microsoft® Windows® Operating System
  1536. InternalName: filecrypt.sys
  1537. OriginalFilename: filecrypt.sys
  1538. ProductVersion: 10.0.14393.0
  1539. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  1540. FileDescription: Windows sandboxing and encryption filter
  1541. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1542. fffff805`cfa00000 fffff805`cfa0e000 tbs (deferred)
  1543. Mapped memory image file: C:\ProgramData\dbg\sym\tbs.sys\57899BA3e000\tbs.sys
  1544. Image path: \SystemRoot\system32\drivers\tbs.sys
  1545. Image name: tbs.sys
  1546. Timestamp: Fri Jul 15 22:27:47 2016 (57899BA3)
  1547. CheckSum: 00010815
  1548. ImageSize: 0000E000
  1549. File version: 10.0.14393.0
  1550. Product version: 10.0.14393.0
  1551. File flags: 0 (Mask 3F)
  1552. File OS: 40004 NT Win32
  1553. File type: 3.7 Driver
  1554. File date: 00000000.00000000
  1555. Translations: 0409.04b0
  1556. CompanyName: Microsoft Corporation
  1557. ProductName: Microsoft® Windows® Operating System
  1558. InternalName: TBS.SYS
  1559. OriginalFilename: TBS.SYS
  1560. ProductVersion: 10.0.14393.0
  1561. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  1562. FileDescription: Export driver for kernel mode TPM API
  1563. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1564. fffff805`cfa10000 fffff805`cfa1a000 klpd (deferred)
  1565. Image path: \SystemRoot\system32\DRIVERS\klpd.sys
  1566. Image name: klpd.sys
  1567. Timestamp: Mon Apr 11 10:25:19 2016 (570BB3CF)
  1568. CheckSum: 0000C832
  1569. ImageSize: 0000A000
  1570. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  1571. fffff805`cfa90000 fffff805`cfb09000 NETIO (deferred)
  1572. Mapped memory image file: C:\ProgramData\dbg\sym\NETIO.SYS\595F2E8179000\NETIO.SYS
  1573. Image path: \SystemRoot\system32\drivers\NETIO.SYS
  1574. Image name: NETIO.SYS
  1575. Timestamp: Fri Jul 7 02:47:29 2017 (595F2E81)
  1576. CheckSum: 0007B87A
  1577. ImageSize: 00079000
  1578. File version: 10.0.14393.1480
  1579. Product version: 10.0.14393.1480
  1580. File flags: 0 (Mask 3F)
  1581. File OS: 40004 NT Win32
  1582. File type: 3.6 Driver
  1583. File date: 00000000.00000000
  1584. Translations: 0409.04b0
  1585. CompanyName: Microsoft Corporation
  1586. ProductName: Microsoft® Windows® Operating System
  1587. InternalName: netio.sys
  1588. OriginalFilename: netio.sys
  1589. ProductVersion: 10.0.14393.1480
  1590. FileVersion: 10.0.14393.1480 (rs1_release.170706-2004)
  1591. FileDescription: Network I/O Subsystem
  1592. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1593. fffff805`cfb10000 fffff805`cfb40000 ksecpkg (deferred)
  1594. Mapped memory image file: C:\ProgramData\dbg\sym\ksecpkg.sys\57A55D1E30000\ksecpkg.sys
  1595. Image path: \SystemRoot\System32\Drivers\ksecpkg.sys
  1596. Image name: ksecpkg.sys
  1597. Timestamp: Fri Aug 5 23:44:30 2016 (57A55D1E)
  1598. CheckSum: 00032E8D
  1599. ImageSize: 00030000
  1600. File version: 10.0.14393.82
  1601. Product version: 10.0.14393.82
  1602. File flags: 0 (Mask 3F)
  1603. File OS: 40004 NT Win32
  1604. File type: 3.7 Driver
  1605. File date: 00000000.00000000
  1606. Translations: 0409.04b0
  1607. CompanyName: Microsoft Corporation
  1608. ProductName: Microsoft® Windows® Operating System
  1609. InternalName: ksecpkg.sys
  1610. OriginalFilename: ksecpkg.sys
  1611. ProductVersion: 10.0.14393.82
  1612. FileVersion: 10.0.14393.82 (rs1_release.160805-1735)
  1613. FileDescription: Kernel Security Support Provider Interface Packages
  1614. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1615. fffff805`cfb40000 fffff805`cfbb5000 mrxsmb (deferred)
  1616. Mapped memory image file: C:\ProgramData\dbg\sym\mrxsmb.sys\58BA5C7275000\mrxsmb.sys
  1617. Image path: \SystemRoot\system32\DRIVERS\mrxsmb.sys
  1618. Image name: mrxsmb.sys
  1619. Timestamp: Sat Mar 4 01:19:30 2017 (58BA5C72)
  1620. CheckSum: 0007CFA7
  1621. ImageSize: 00075000
  1622. File version: 10.0.14393.953
  1623. Product version: 10.0.14393.953
  1624. File flags: 0 (Mask 3F)
  1625. File OS: 40004 NT Win32
  1626. File type: 3.7 Driver
  1627. File date: 00000000.00000000
  1628. Translations: 0409.04b0
  1629. CompanyName: Microsoft Corporation
  1630. ProductName: Microsoft® Windows® Operating System
  1631. InternalName: MRxSmb.sys
  1632. OriginalFilename: MRXSMB.Sys
  1633. ProductVersion: 10.0.14393.953
  1634. FileVersion: 10.0.14393.953 (rs1_release_inmarket.170303-1614)
  1635. FileDescription: Windows NT SMB Minirdr
  1636. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1637. fffff805`cfe00000 fffff805`cfe14000 BasicDisplay (deferred)
  1638. Mapped memory image file: C:\ProgramData\dbg\sym\BasicDisplay.sys\58D9F67414000\BasicDisplay.sys
  1639. Image path: \SystemRoot\System32\drivers\BasicDisplay.sys
  1640. Image name: BasicDisplay.sys
  1641. Timestamp: Tue Mar 28 01:36:52 2017 (58D9F674)
  1642. CheckSum: 000151AC
  1643. ImageSize: 00014000
  1644. File version: 10.0.14393.1066
  1645. Product version: 10.0.14393.1066
  1646. File flags: 0 (Mask 3F)
  1647. File OS: 40004 NT Win32
  1648. File type: 3.4 Driver
  1649. File date: 00000000.00000000
  1650. Translations: 0000.04b0
  1651. CompanyName: Microsoft Corporation
  1652. ProductName: Microsoft® Windows® Operating System
  1653. InternalName: BasicDisplay.sys
  1654. OriginalFilename: BasicDisplay.sys
  1655. ProductVersion: 10.0.14393.1066
  1656. FileVersion: 10.0.14393.1066 (rs1_release_sec.170327-1835)
  1657. FileDescription: Microsoft Basic Display Driver
  1658. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1659. fffff805`cfe20000 fffff805`cfe34000 watchdog (deferred)
  1660. Mapped memory image file: C:\ProgramData\dbg\sym\watchdog.sys\57899B9B14000\watchdog.sys
  1661. Image path: \SystemRoot\System32\drivers\watchdog.sys
  1662. Image name: watchdog.sys
  1663. Timestamp: Fri Jul 15 22:27:39 2016 (57899B9B)
  1664. CheckSum: 00019FE0
  1665. ImageSize: 00014000
  1666. File version: 10.0.14393.0
  1667. Product version: 10.0.14393.0
  1668. File flags: 0 (Mask 3F)
  1669. File OS: 40004 NT Win32
  1670. File type: 2.0 Dll
  1671. File date: 00000000.00000000
  1672. Translations: 0000.04b0
  1673. CompanyName: Microsoft Corporation
  1674. ProductName: Microsoft® Windows® Operating System
  1675. InternalName: watchdog.sys
  1676. OriginalFilename: watchdog.sys
  1677. ProductVersion: 10.0.14393.0
  1678. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  1679. FileDescription: Watchdog Driver
  1680. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1681. fffff805`cfe40000 fffff805`d005e000 dxgkrnl (deferred)
  1682. Mapped memory image file: C:\ProgramData\dbg\sym\dxgkrnl.sys\5932781C21e000\dxgkrnl.sys
  1683. Image path: \SystemRoot\System32\drivers\dxgkrnl.sys
  1684. Image name: dxgkrnl.sys
  1685. Timestamp: Sat Jun 3 04:49:32 2017 (5932781C)
  1686. CheckSum: 00222B57
  1687. ImageSize: 0021E000
  1688. File version: 10.0.14393.1358
  1689. Product version: 10.0.14393.1358
  1690. File flags: 0 (Mask 3F)
  1691. File OS: 40004 NT Win32
  1692. File type: 3.7 Driver
  1693. File date: 00000000.00000000
  1694. Translations: 0409.04b0
  1695. CompanyName: Microsoft Corporation
  1696. ProductName: Microsoft® Windows® Operating System
  1697. InternalName: dxgkrnl.sys
  1698. OriginalFilename: dxgkrnl.sys
  1699. ProductVersion: 10.0.14393.1358
  1700. FileVersion: 10.0.14393.1358 (rs1_release.170602-2252)
  1701. FileDescription: DirectX Graphics Kernel
  1702. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1703. fffff805`d0060000 fffff805`d0072000 BasicRender (deferred)
  1704. Mapped memory image file: C:\ProgramData\dbg\sym\BasicRender.sys\59327E2812000\BasicRender.sys
  1705. Image path: \SystemRoot\System32\drivers\BasicRender.sys
  1706. Image name: BasicRender.sys
  1707. Timestamp: Sat Jun 3 05:15:20 2017 (59327E28)
  1708. CheckSum: 0000CFC2
  1709. ImageSize: 00012000
  1710. File version: 10.0.14393.1358
  1711. Product version: 10.0.14393.1358
  1712. File flags: 0 (Mask 3F)
  1713. File OS: 40004 NT Win32
  1714. File type: 3.4 Driver
  1715. File date: 00000000.00000000
  1716. Translations: 0000.04b0
  1717. CompanyName: Microsoft Corporation
  1718. ProductName: Microsoft® Windows® Operating System
  1719. InternalName: BasicRender.sys
  1720. OriginalFilename: BasicRender.sys
  1721. ProductVersion: 10.0.14393.1358
  1722. FileVersion: 10.0.14393.1358 (rs1_release.170602-2252)
  1723. FileDescription: Microsoft Basic Render Driver
  1724. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1725. fffff805`d0080000 fffff805`d0099000 Npfs (deferred)
  1726. Mapped memory image file: C:\ProgramData\dbg\sym\Npfs.SYS\5789979E19000\Npfs.SYS
  1727. Image path: \SystemRoot\System32\Drivers\Npfs.SYS
  1728. Image name: Npfs.SYS
  1729. Timestamp: Fri Jul 15 22:10:38 2016 (5789979E)
  1730. CheckSum: 00013E91
  1731. ImageSize: 00019000
  1732. File version: 10.0.14393.0
  1733. Product version: 10.0.14393.0
  1734. File flags: 0 (Mask 3F)
  1735. File OS: 40004 NT Win32
  1736. File type: 3.7 Driver
  1737. File date: 00000000.00000000
  1738. Translations: 0409.04b0
  1739. CompanyName: Microsoft Corporation
  1740. ProductName: Microsoft® Windows® Operating System
  1741. InternalName: npfs.sys
  1742. OriginalFilename: npfs.sys
  1743. ProductVersion: 10.0.14393.0
  1744. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  1745. FileDescription: NPFS Driver
  1746. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1747. fffff805`d00a0000 fffff805`d00b0000 Msfs (deferred)
  1748. Mapped memory image file: C:\ProgramData\dbg\sym\Msfs.SYS\5789979E10000\Msfs.SYS
  1749. Image path: \SystemRoot\System32\Drivers\Msfs.SYS
  1750. Image name: Msfs.SYS
  1751. Timestamp: Fri Jul 15 22:10:38 2016 (5789979E)
  1752. CheckSum: 0000ACDE
  1753. ImageSize: 00010000
  1754. File version: 10.0.14393.0
  1755. Product version: 10.0.14393.0
  1756. File flags: 0 (Mask 3F)
  1757. File OS: 40004 NT Win32
  1758. File type: 3.7 Driver
  1759. File date: 00000000.00000000
  1760. Translations: 0409.04b0
  1761. CompanyName: Microsoft Corporation
  1762. ProductName: Microsoft® Windows® Operating System
  1763. InternalName: MSFS.SYS
  1764. OriginalFilename: MSFS.SYS
  1765. ProductVersion: 10.0.14393.0
  1766. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  1767. FileDescription: Mailslot driver
  1768. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1769. fffff805`d00b0000 fffff805`d00c3000 klwfp (deferred)
  1770. Image path: \SystemRoot\system32\DRIVERS\klwfp.sys
  1771. Image name: klwfp.sys
  1772. Timestamp: Mon Jun 13 05:29:14 2016 (575E7CEA)
  1773. CheckSum: 00019D1D
  1774. ImageSize: 00013000
  1775. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  1776. fffff805`d00d0000 fffff805`d00f3000 tdx (deferred)
  1777. Mapped memory image file: C:\ProgramData\dbg\sym\tdx.sys\595F2EF223000\tdx.sys
  1778. Image path: \SystemRoot\system32\DRIVERS\tdx.sys
  1779. Image name: tdx.sys
  1780. Timestamp: Fri Jul 7 02:49:22 2017 (595F2EF2)
  1781. CheckSum: 0002C182
  1782. ImageSize: 00023000
  1783. File version: 10.0.14393.1480
  1784. Product version: 10.0.14393.1480
  1785. File flags: 0 (Mask 3F)
  1786. File OS: 40004 NT Win32
  1787. File type: 3.6 Driver
  1788. File date: 00000000.00000000
  1789. Translations: 0409.04b0
  1790. CompanyName: Microsoft Corporation
  1791. ProductName: Microsoft® Windows® Operating System
  1792. InternalName: tdx.sys
  1793. OriginalFilename: tdx.sys
  1794. ProductVersion: 10.0.14393.1480
  1795. FileVersion: 10.0.14393.1480 (rs1_release.170706-2004)
  1796. FileDescription: TDI Translation Driver
  1797. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1798. fffff805`d0100000 fffff805`d0110000 TDI (deferred)
  1799. Mapped memory image file: C:\ProgramData\dbg\sym\TDI.SYS\57899BBA10000\TDI.SYS
  1800. Image path: \SystemRoot\system32\DRIVERS\TDI.SYS
  1801. Image name: TDI.SYS
  1802. Timestamp: Fri Jul 15 22:28:10 2016 (57899BBA)
  1803. CheckSum: 00011322
  1804. ImageSize: 00010000
  1805. File version: 10.0.14393.0
  1806. Product version: 10.0.14393.0
  1807. File flags: 0 (Mask 3F)
  1808. File OS: 40004 NT Win32
  1809. File type: 3.6 Driver
  1810. File date: 00000000.00000000
  1811. Translations: 0409.04b0
  1812. CompanyName: Microsoft Corporation
  1813. ProductName: Microsoft® Windows® Operating System
  1814. InternalName: tdi.sys
  1815. OriginalFilename: tdi.sys
  1816. ProductVersion: 10.0.14393.0
  1817. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  1818. FileDescription: TDI Wrapper
  1819. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1820. fffff805`d0110000 fffff805`d015b000 netbt (deferred)
  1821. Mapped memory image file: C:\ProgramData\dbg\sym\netbt.sys\57899B034b000\netbt.sys
  1822. Image path: \SystemRoot\System32\DRIVERS\netbt.sys
  1823. Image name: netbt.sys
  1824. Timestamp: Fri Jul 15 22:25:07 2016 (57899B03)
  1825. CheckSum: 0004B5B9
  1826. ImageSize: 0004B000
  1827. File version: 10.0.14393.0
  1828. Product version: 10.0.14393.0
  1829. File flags: 0 (Mask 3F)
  1830. File OS: 40004 NT Win32
  1831. File type: 3.7 Driver
  1832. File date: 00000000.00000000
  1833. Translations: 0409.04b0
  1834. CompanyName: Microsoft Corporation
  1835. ProductName: Microsoft® Windows® Operating System
  1836. InternalName: netbt.sys
  1837. OriginalFilename: netbt.sys
  1838. ProductVersion: 10.0.14393.0
  1839. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  1840. FileDescription: MBT Transport driver
  1841. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1842. fffff805`d0160000 fffff805`d01f5000 afd (deferred)
  1843. Mapped memory image file: C:\ProgramData\dbg\sym\afd.sys\5801A84995000\afd.sys
  1844. Image path: \SystemRoot\system32\drivers\afd.sys
  1845. Image name: afd.sys
  1846. Timestamp: Fri Oct 14 23:53:45 2016 (5801A849)
  1847. CheckSum: 0009BB84
  1848. ImageSize: 00095000
  1849. File version: 10.0.14393.351
  1850. Product version: 10.0.14393.351
  1851. File flags: 0 (Mask 3F)
  1852. File OS: 40004 NT Win32
  1853. File type: 3.7 Driver
  1854. File date: 00000000.00000000
  1855. Translations: 0409.04b0
  1856. CompanyName: Microsoft Corporation
  1857. ProductName: Microsoft® Windows® Operating System
  1858. InternalName: afd.sys
  1859. OriginalFilename: afd.sys
  1860. ProductVersion: 10.0.14393.351
  1861. FileVersion: 10.0.14393.351 (rs1_release_inmarket.161014-1755)
  1862. FileDescription: Ancillary Function Driver for WinSock
  1863. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1864. fffff805`d0200000 fffff805`d0244000 srvnet (deferred)
  1865. Mapped memory image file: C:\ProgramData\dbg\sym\srvnet.sys\57CF9B5544000\srvnet.sys
  1866. Image path: \SystemRoot\System32\DRIVERS\srvnet.sys
  1867. Image name: srvnet.sys
  1868. Timestamp: Wed Sep 7 00:45:09 2016 (57CF9B55)
  1869. CheckSum: 000460BC
  1870. ImageSize: 00044000
  1871. File version: 10.0.14393.187
  1872. Product version: 10.0.14393.187
  1873. File flags: 0 (Mask 3F)
  1874. File OS: 40004 NT Win32
  1875. File type: 3.6 Driver
  1876. File date: 00000000.00000000
  1877. Translations: 0409.04b0
  1878. CompanyName: Microsoft Corporation
  1879. ProductName: Microsoft® Windows® Operating System
  1880. InternalName: SRVNET.SYS
  1881. OriginalFilename: SRVNET.SYS
  1882. ProductVersion: 10.0.14393.187
  1883. FileVersion: 10.0.14393.187 (rs1_release_inmarket.160906-1818)
  1884. FileDescription: Server Network driver
  1885. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1886. fffff805`d0260000 fffff805`d035e000 klif (deferred)
  1887. Image path: \SystemRoot\system32\DRIVERS\klif.sys
  1888. Image name: klif.sys
  1889. Timestamp: Thu Mar 23 10:51:44 2017 (58D3E100)
  1890. CheckSum: 000FB8B4
  1891. ImageSize: 000FE000
  1892. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  1893. fffff805`d0360000 fffff805`d03c8000 ks (deferred)
  1894. Mapped memory image file: C:\ProgramData\dbg\sym\ks.sys\58BA5E8E68000\ks.sys
  1895. Image path: \SystemRoot\system32\DRIVERS\ks.sys
  1896. Image name: ks.sys
  1897. Timestamp: Sat Mar 4 01:28:30 2017 (58BA5E8E)
  1898. CheckSum: 0006D05F
  1899. ImageSize: 00068000
  1900. File version: 10.0.14393.953
  1901. Product version: 10.0.14393.953
  1902. File flags: 0 (Mask 3F)
  1903. File OS: 40004 NT Win32
  1904. File type: 3.0 Driver
  1905. File date: 00000000.00000000
  1906. Translations: 0000.04b0
  1907. CompanyName: Microsoft Corporation
  1908. ProductName: Microsoft® Windows® Operating System
  1909. InternalName: ks.sys
  1910. OriginalFilename: ks.sys
  1911. ProductVersion: 10.0.14393.953
  1912. FileVersion: 10.0.14393.953 (rs1_release_inmarket.170303-1614)
  1913. FileDescription: Kernel CSA Library
  1914. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1915. fffff805`d03d0000 fffff805`d03da000 Null (deferred)
  1916. Image path: \SystemRoot\System32\Drivers\Null.SYS
  1917. Image name: Null.SYS
  1918. Timestamp: unavailable (00000000)
  1919. CheckSum: 00000000
  1920. ImageSize: 0000A000
  1921. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  1922. fffff805`d03e0000 fffff805`d03ea000 Beep (deferred)
  1923. Mapped memory image file: C:\ProgramData\dbg\sym\Beep.SYS\57899A4Aa000\Beep.SYS
  1924. Image path: \SystemRoot\System32\Drivers\Beep.SYS
  1925. Image name: Beep.SYS
  1926. Timestamp: Fri Jul 15 22:22:02 2016 (57899A4A)
  1927. CheckSum: 00010470
  1928. ImageSize: 0000A000
  1929. File version: 10.0.14393.0
  1930. Product version: 10.0.14393.0
  1931. File flags: 0 (Mask 3F)
  1932. File OS: 40004 NT Win32
  1933. File type: 3.7 Driver
  1934. File date: 00000000.00000000
  1935. Translations: 0409.04b0
  1936. CompanyName: Microsoft Corporation
  1937. ProductName: Microsoft® Windows® Operating System
  1938. InternalName: beep.sys
  1939. OriginalFilename: beep.sys
  1940. ProductVersion: 10.0.14393.0
  1941. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  1942. FileDescription: BEEP Driver
  1943. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1944. fffff805`d0800000 fffff805`d0875000 rdbss (deferred)
  1945. Mapped memory image file: C:\ProgramData\dbg\sym\rdbss.sys\5902820475000\rdbss.sys
  1946. Image path: \SystemRoot\system32\DRIVERS\rdbss.sys
  1947. Image name: rdbss.sys
  1948. Timestamp: Thu Apr 27 19:43:00 2017 (59028204)
  1949. CheckSum: 00075B49
  1950. ImageSize: 00075000
  1951. File version: 10.0.14393.1198
  1952. Product version: 10.0.14393.1198
  1953. File flags: 0 (Mask 3F)
  1954. File OS: 40004 NT Win32
  1955. File type: 3.7 Driver
  1956. File date: 00000000.00000000
  1957. Translations: 0409.04b0
  1958. CompanyName: Microsoft Corporation
  1959. ProductName: Microsoft® Windows® Operating System
  1960. InternalName: rdbss.sys
  1961. OriginalFilename: RDBSS.Sys
  1962. ProductVersion: 10.0.14393.1198
  1963. FileVersion: 10.0.14393.1198 (rs1_release_sec.170427-1353)
  1964. FileDescription: Redirected Drive Buffering SubSystem Driver
  1965. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1966. fffff805`d0880000 fffff805`d08c3000 XQHDrv (deferred)
  1967. Image path: \SystemRoot\system32\DRIVERS\XQHDrv.sys
  1968. Image name: XQHDrv.sys
  1969. Timestamp: Tue Sep 15 23:29:39 2015 (55F8E223)
  1970. CheckSum: 0004CD1A
  1971. ImageSize: 00043000
  1972. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  1973. fffff805`d08d0000 fffff805`d08f6000 VBoxUSBMon (deferred)
  1974. Image path: \SystemRoot\system32\DRIVERS\VBoxUSBMon.sys
  1975. Image name: VBoxUSBMon.sys
  1976. Timestamp: Tue Sep 15 23:25:39 2015 (55F8E133)
  1977. CheckSum: 0001FCCF
  1978. ImageSize: 00026000
  1979. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  1980. fffff805`d0900000 fffff805`d0911000 nsiproxy (deferred)
  1981. Mapped memory image file: C:\ProgramData\dbg\sym\nsiproxy.sys\57899B6511000\nsiproxy.sys
  1982. Image path: \SystemRoot\system32\drivers\nsiproxy.sys
  1983. Image name: nsiproxy.sys
  1984. Timestamp: Fri Jul 15 22:26:45 2016 (57899B65)
  1985. CheckSum: 00012F73
  1986. ImageSize: 00011000
  1987. File version: 10.0.14393.0
  1988. Product version: 10.0.14393.0
  1989. File flags: 0 (Mask 3F)
  1990. File OS: 40004 NT Win32
  1991. File type: 3.6 Driver
  1992. File date: 00000000.00000000
  1993. Translations: 0409.04b0
  1994. CompanyName: Microsoft Corporation
  1995. ProductName: Microsoft® Windows® Operating System
  1996. InternalName: nsiproxy.sys
  1997. OriginalFilename: nsiproxy.sys
  1998. ProductVersion: 10.0.14393.0
  1999. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  2000. FileDescription: NSI Proxy
  2001. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2002. fffff805`d0920000 fffff805`d092d000 npsvctrig (deferred)
  2003. Mapped memory image file: C:\ProgramData\dbg\sym\npsvctrig.sys\57899BD1d000\npsvctrig.sys
  2004. Image path: \SystemRoot\System32\drivers\npsvctrig.sys
  2005. Image name: npsvctrig.sys
  2006. Timestamp: Fri Jul 15 22:28:33 2016 (57899BD1)
  2007. CheckSum: 0000C09A
  2008. ImageSize: 0000D000
  2009. File version: 10.0.14393.0
  2010. Product version: 10.0.14393.0
  2011. File flags: 0 (Mask 3F)
  2012. File OS: 40004 NT Win32
  2013. File type: 3.7 Driver
  2014. File date: 00000000.00000000
  2015. Translations: 0409.04b0
  2016. CompanyName: Microsoft Corporation
  2017. ProductName: Microsoft® Windows® Operating System
  2018. InternalName: npsvctrig.sys
  2019. OriginalFilename: npsvctrig.sys
  2020. ProductVersion: 10.0.14393.0
  2021. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  2022. FileDescription: Named pipe service triggers
  2023. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2024. fffff805`d0930000 fffff805`d0940000 mssmbios (pdb symbols) C:\ProgramData\dbg\sym\mssmbios.pdb\09D137475CBE4BA886019EBE309BBC341\mssmbios.pdb
  2025. Loaded symbol image file: mssmbios.sys
  2026. Mapped memory image file: C:\ProgramData\dbg\sym\mssmbios.sys\57899B3810000\mssmbios.sys
  2027. Image path: \SystemRoot\System32\drivers\mssmbios.sys
  2028. Image name: mssmbios.sys
  2029. Timestamp: Fri Jul 15 22:26:00 2016 (57899B38)
  2030. CheckSum: 00018946
  2031. ImageSize: 00010000
  2032. File version: 10.0.14393.0
  2033. Product version: 10.0.14393.0
  2034. File flags: 0 (Mask 3F)
  2035. File OS: 40004 NT Win32
  2036. File type: 3.7 Driver
  2037. File date: 00000000.00000000
  2038. Translations: 0409.04b0
  2039. CompanyName: Microsoft Corporation
  2040. ProductName: Microsoft® Windows® Operating System
  2041. InternalName: smbios.sys
  2042. OriginalFilename: smbios.sys
  2043. ProductVersion: 10.0.14393.0
  2044. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  2045. FileDescription: System Management BIOS Driver
  2046. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2047. fffff805`d0940000 fffff805`d096d000 kneps (deferred)
  2048. Image path: \SystemRoot\system32\DRIVERS\kneps.sys
  2049. Image name: kneps.sys
  2050. Timestamp: Fri Dec 16 04:16:17 2016 (5853B0E1)
  2051. CheckSum: 00032DA1
  2052. ImageSize: 0002D000
  2053. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  2054. fffff805`d0970000 fffff805`d097a000 gpuenergydrv (deferred)
  2055. Mapped memory image file: C:\ProgramData\dbg\sym\gpuenergydrv.sys\57899BB9a000\gpuenergydrv.sys
  2056. Image path: \SystemRoot\System32\drivers\gpuenergydrv.sys
  2057. Image name: gpuenergydrv.sys
  2058. Timestamp: Fri Jul 15 22:28:09 2016 (57899BB9)
  2059. CheckSum: 0001091E
  2060. ImageSize: 0000A000
  2061. File version: 10.0.14393.0
  2062. Product version: 10.0.14393.0
  2063. File flags: 0 (Mask 3F)
  2064. File OS: 40004 NT Win32
  2065. File type: 3.7 Driver
  2066. File date: 00000000.00000000
  2067. Translations: 0409.04b0
  2068. CompanyName: Microsoft Corporation
  2069. ProductName: Microsoft® Windows® Operating System
  2070. InternalName: gpuenergydrv.sys
  2071. OriginalFilename: gpuenergydrv.sys
  2072. ProductVersion: 10.0.14393.0
  2073. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  2074. FileDescription: GPU Energy Kernel Driver
  2075. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2076. fffff805`d0980000 fffff805`d09aa000 dfsc (deferred)
  2077. Mapped memory image file: C:\ProgramData\dbg\sym\dfsc.sys\594A19062a000\dfsc.sys
  2078. Image path: \SystemRoot\System32\Drivers\dfsc.sys
  2079. Image name: dfsc.sys
  2080. Timestamp: Wed Jun 21 02:58:14 2017 (594A1906)
  2081. CheckSum: 00027291
  2082. ImageSize: 0002A000
  2083. File version: 10.0.14393.1378
  2084. Product version: 10.0.14393.1378
  2085. File flags: 0 (Mask 3F)
  2086. File OS: 40004 NT Win32
  2087. File type: 3.7 Driver
  2088. File date: 00000000.00000000
  2089. Translations: 0409.04b0
  2090. CompanyName: Microsoft Corporation
  2091. ProductName: Microsoft® Windows® Operating System
  2092. InternalName: dfsclient.sys
  2093. OriginalFilename: dfsclient.sys
  2094. ProductVersion: 10.0.14393.1378
  2095. FileVersion: 10.0.14393.1378 (rs1_release.170620-2008)
  2096. FileDescription: DFS Namespace Client Driver
  2097. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2098. fffff805`d09b0000 fffff805`d09c9000 mpsdrv (deferred)
  2099. Mapped memory image file: C:\ProgramData\dbg\sym\mpsdrv.sys\57899B8419000\mpsdrv.sys
  2100. Image path: \SystemRoot\System32\drivers\mpsdrv.sys
  2101. Image name: mpsdrv.sys
  2102. Timestamp: Fri Jul 15 22:27:16 2016 (57899B84)
  2103. CheckSum: 00020E89
  2104. ImageSize: 00019000
  2105. File version: 10.0.14393.0
  2106. Product version: 10.0.14393.0
  2107. File flags: 0 (Mask 3F)
  2108. File OS: 40004 NT Win32
  2109. File type: 3.7 Driver
  2110. File date: 00000000.00000000
  2111. Translations: 0409.04b0
  2112. CompanyName: Microsoft Corporation
  2113. ProductName: Microsoft® Windows® Operating System
  2114. InternalName: mpsdrv.sys
  2115. OriginalFilename: mpsdrv.sys
  2116. ProductVersion: 10.0.14393.0
  2117. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  2118. FileDescription: Microsoft Protection Service Driver
  2119. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2120. fffff805`d09d0000 fffff805`d09ea000 CLVirtualDrive (deferred)
  2121. Image path: \SystemRoot\system32\DRIVERS\CLVirtualDrive.sys
  2122. Image name: CLVirtualDrive.sys
  2123. Timestamp: Mon Nov 11 22:31:36 2013 (5281A118)
  2124. CheckSum: 00020934
  2125. ImageSize: 0001A000
  2126. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  2127. fffff805`d09f0000 fffff805`d0a2f000 ahcache (deferred)
  2128. Mapped memory image file: C:\ProgramData\dbg\sym\ahcache.sys\5801A3183f000\ahcache.sys
  2129. Image path: \SystemRoot\system32\DRIVERS\ahcache.sys
  2130. Image name: ahcache.sys
  2131. Timestamp: Fri Oct 14 23:31:36 2016 (5801A318)
  2132. CheckSum: 000385C6
  2133. ImageSize: 0003F000
  2134. File version: 10.0.14393.351
  2135. Product version: 10.0.14393.351
  2136. File flags: 0 (Mask 3F)
  2137. File OS: 40004 NT Win32
  2138. File type: 3.7 Driver
  2139. File date: 00000000.00000000
  2140. Translations: 0409.04b0
  2141. CompanyName: Microsoft Corporation
  2142. ProductName: Microsoft® Windows® Operating System
  2143. InternalName: ahcache.sys
  2144. OriginalFilename: ahcache.sys
  2145. ProductVersion: 10.0.14393.351
  2146. FileVersion: 10.0.14393.351 (rs1_release_inmarket.161014-1755)
  2147. FileDescription: Application Compatibility Cache
  2148. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2149. fffff805`d0a30000 fffff805`d0a3c000 kltap (deferred)
  2150. Image path: \SystemRoot\System32\drivers\kltap.sys
  2151. Image name: kltap.sys
  2152. Timestamp: Mon May 16 17:04:28 2016 (573A35DC)
  2153. CheckSum: 0000FCAA
  2154. ImageSize: 0000C000
  2155. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  2156. fffff805`d0a40000 fffff805`d0a51000 CompositeBus (deferred)
  2157. Mapped memory image file: C:\ProgramData\dbg\sym\CompositeBus.sys\578999DB11000\CompositeBus.sys
  2158. Image path: \SystemRoot\System32\DriverStore\FileRepository\compositebus.inf_amd64_a140581a8f8b58b7\CompositeBus.sys
  2159. Image name: CompositeBus.sys
  2160. Timestamp: Fri Jul 15 22:20:11 2016 (578999DB)
  2161. CheckSum: 0001577C
  2162. ImageSize: 00011000
  2163. File version: 10.0.14393.0
  2164. Product version: 10.0.14393.0
  2165. File flags: 0 (Mask 3F)
  2166. File OS: 40004 NT Win32
  2167. File type: 2.0 Dll
  2168. File date: 00000000.00000000
  2169. Translations: 0409.04b0
  2170. CompanyName: Microsoft Corporation
  2171. ProductName: Microsoft® Windows® Operating System
  2172. InternalName: compositebus.sys
  2173. OriginalFilename: compositebus.sys
  2174. ProductVersion: 10.0.14393.0
  2175. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  2176. FileDescription: Multi-Transport Composite Bus Enumerator
  2177. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2178. fffff805`d0a60000 fffff805`d0a6e000 kdnic (deferred)
  2179. Mapped memory image file: C:\ProgramData\dbg\sym\kdnic.sys\57899BCCe000\kdnic.sys
  2180. Image path: \SystemRoot\System32\drivers\kdnic.sys
  2181. Image name: kdnic.sys
  2182. Timestamp: Fri Jul 15 22:28:28 2016 (57899BCC)
  2183. CheckSum: 0000E1E7
  2184. ImageSize: 0000E000
  2185. File version: 6.1.0.0
  2186. Product version: 6.1.0.0
  2187. File flags: 0 (Mask 3F)
  2188. File OS: 40004 NT Win32
  2189. File type: 3.7 Driver
  2190. File date: 00000000.00000000
  2191. Translations: 0000.04b0
  2192. CompanyName: Microsoft Corporation
  2193. ProductName: Microsoft Kernel Debugger Network Adapter (NDIS 6.20 Miniport)
  2194. InternalName: kdnic.sys
  2195. OriginalFilename: kdnic.sys
  2196. ProductVersion: 6.01.00.0000
  2197. FileVersion: 6.01.00.0000 (rs1_release.160715-1616)
  2198. FileDescription: Microsoft Kernel Debugger Network Miniport
  2199. LegalCopyright: Copyright (C) Microsoft Corporation. All rights reserved.
  2200. fffff805`d0a70000 fffff805`d0a85000 umbus (deferred)
  2201. Mapped memory image file: C:\ProgramData\dbg\sym\umbus.sys\57899A6915000\umbus.sys
  2202. Image path: \SystemRoot\System32\drivers\umbus.sys
  2203. Image name: umbus.sys
  2204. Timestamp: Fri Jul 15 22:22:33 2016 (57899A69)
  2205. CheckSum: 0001B6BB
  2206. ImageSize: 00015000
  2207. File version: 10.0.14393.0
  2208. Product version: 10.0.14393.0
  2209. File flags: 0 (Mask 3F)
  2210. File OS: 40004 NT Win32
  2211. File type: 2.0 Dll
  2212. File date: 00000000.00000000
  2213. Translations: 0409.04b0
  2214. CompanyName: Microsoft Corporation
  2215. ProductName: Microsoft® Windows® Operating System
  2216. InternalName: umbus.sys
  2217. OriginalFilename: umbus.sys
  2218. ProductVersion: 10.0.14393.0
  2219. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  2220. FileDescription: User-Mode Bus Enumerator
  2221. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2222. fffff805`d0a90000 fffff805`d0abb000 intelppm (deferred)
  2223. Mapped memory image file: C:\ProgramData\dbg\sym\intelppm.sys\578997A32b000\intelppm.sys
  2224. Image path: \SystemRoot\System32\drivers\intelppm.sys
  2225. Image name: intelppm.sys
  2226. Timestamp: Fri Jul 15 22:10:43 2016 (578997A3)
  2227. CheckSum: 0002E623
  2228. ImageSize: 0002B000
  2229. File version: 10.0.14393.0
  2230. Product version: 10.0.14393.0
  2231. File flags: 0 (Mask 3F)
  2232. File OS: 40004 NT Win32
  2233. File type: 3.7 Driver
  2234. File date: 00000000.00000000
  2235. Translations: 0409.04b0
  2236. CompanyName: Microsoft Corporation
  2237. ProductName: Microsoft® Windows® Operating System
  2238. InternalName: intelppm.sys
  2239. OriginalFilename: intelppm.sys
  2240. ProductVersion: 10.0.14393.0
  2241. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  2242. FileDescription: Processor Device Driver
  2243. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2244. fffff805`d0ac0000 fffff805`d0ad8000 registry (deferred)
  2245. Mapped memory image file: C:\ProgramData\dbg\sym\registry.sys\57899B7818000\registry.sys
  2246. Image path: \SystemRoot\System32\drivers\registry.sys
  2247. Image name: registry.sys
  2248. Timestamp: Fri Jul 15 22:27:04 2016 (57899B78)
  2249. CheckSum: 00020281
  2250. ImageSize: 00018000
  2251. File version: 10.0.14393.0
  2252. Product version: 10.0.14393.0
  2253. File flags: 0 (Mask 3F)
  2254. File OS: 40004 NT Win32
  2255. File type: 3.7 Driver
  2256. File date: 00000000.00000000
  2257. Translations: 0409.04b0
  2258. CompanyName: Microsoft Corporation
  2259. ProductName: Microsoft® Windows® Operating System
  2260. InternalName: registry.sys
  2261. OriginalFilename: registry.sys
  2262. ProductVersion: 10.0.14393.0
  2263. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  2264. FileDescription: Registry Containment Driver
  2265. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2266. fffff805`d0ae0000 fffff805`d0af8000 mslldp (deferred)
  2267. Mapped memory image file: C:\ProgramData\dbg\sym\mslldp.sys\57899BC818000\mslldp.sys
  2268. Image path: \SystemRoot\system32\drivers\mslldp.sys
  2269. Image name: mslldp.sys
  2270. Timestamp: Fri Jul 15 22:28:24 2016 (57899BC8)
  2271. CheckSum: 0001478C
  2272. ImageSize: 00018000
  2273. File version: 10.0.14393.0
  2274. Product version: 10.0.14393.0
  2275. File flags: 0 (Mask 3F)
  2276. File OS: 40004 NT Win32
  2277. File type: 3.6 Driver
  2278. File date: 00000000.00000000
  2279. Translations: 0409.04b0
  2280. CompanyName: Microsoft Corporation
  2281. ProductName: Microsoft® Windows® Operating System
  2282. InternalName: MSLLDP.SYS
  2283. OriginalFilename: MSLLDP.SYS
  2284. ProductVersion: 10.0.14393.0
  2285. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  2286. FileDescription: Microsoft Link-Layer Discovery Protocol Driver
  2287. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2288. fffff805`d0b00000 fffff805`d0b16000 lltdio (deferred)
  2289. Mapped memory image file: C:\ProgramData\dbg\sym\lltdio.sys\57899B7F16000\lltdio.sys
  2290. Image path: \SystemRoot\system32\drivers\lltdio.sys
  2291. Image name: lltdio.sys
  2292. Timestamp: Fri Jul 15 22:27:11 2016 (57899B7F)
  2293. CheckSum: 0001E69C
  2294. ImageSize: 00016000
  2295. File version: 10.0.14393.0
  2296. Product version: 10.0.14393.0
  2297. File flags: 0 (Mask 3F)
  2298. File OS: 40004 NT Win32
  2299. File type: 3.6 Driver
  2300. File date: 00000000.00000000
  2301. Translations: 0409.04b0
  2302. CompanyName: Microsoft Corporation
  2303. ProductName: Microsoft® Windows® Operating System
  2304. InternalName: LLTDIO.SYS
  2305. OriginalFilename: LLTDIO.SYS
  2306. ProductVersion: 10.0.14393.0
  2307. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  2308. FileDescription: Link-Layer Topology Mapper I/O Driver
  2309. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2310. fffff805`d0b20000 fffff805`d0b3a000 rspndr (deferred)
  2311. Mapped memory image file: C:\ProgramData\dbg\sym\rspndr.sys\57899B911a000\rspndr.sys
  2312. Image path: \SystemRoot\system32\drivers\rspndr.sys
  2313. Image name: rspndr.sys
  2314. Timestamp: Fri Jul 15 22:27:29 2016 (57899B91)
  2315. CheckSum: 00015D77
  2316. ImageSize: 0001A000
  2317. File version: 10.0.14393.0
  2318. Product version: 10.0.14393.0
  2319. File flags: 0 (Mask 3F)
  2320. File OS: 40004 NT Win32
  2321. File type: 3.6 Driver
  2322. File date: 00000000.00000000
  2323. Translations: 0409.04b0
  2324. CompanyName: Microsoft Corporation
  2325. ProductName: Microsoft® Windows® Operating System
  2326. InternalName: RSPNDR.SYS
  2327. OriginalFilename: RSPNDR.SYS
  2328. ProductVersion: 10.0.14393.0
  2329. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  2330. FileDescription: Link-Layer Topology Responder Driver for NDIS 6
  2331. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2332. fffff805`d0b40000 fffff805`d0b56000 ndisuio (deferred)
  2333. Mapped memory image file: C:\ProgramData\dbg\sym\ndisuio.sys\57899B5816000\ndisuio.sys
  2334. Image path: \SystemRoot\system32\drivers\ndisuio.sys
  2335. Image name: ndisuio.sys
  2336. Timestamp: Fri Jul 15 22:26:32 2016 (57899B58)
  2337. CheckSum: 00013919
  2338. ImageSize: 00016000
  2339. File version: 10.0.14393.0
  2340. Product version: 10.0.14393.0
  2341. File flags: 0 (Mask 3F)
  2342. File OS: 40004 NT Win32
  2343. File type: 3.6 Driver
  2344. File date: 00000000.00000000
  2345. Translations: 0409.04b0
  2346. CompanyName: Microsoft Corporation
  2347. ProductName: Microsoft® Windows® Operating System
  2348. InternalName: NDISUIO.SYS
  2349. OriginalFilename: NDISUIO.SYS
  2350. ProductVersion: 10.0.14393.0
  2351. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  2352. FileDescription: NDIS User mode I/O driver
  2353. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2354. fffff805`d0b60000 fffff805`d0be9000 nwifi (deferred)
  2355. Mapped memory image file: C:\ProgramData\dbg\sym\nwifi.sys\58BA5EEE89000\nwifi.sys
  2356. Image path: \SystemRoot\system32\DRIVERS\nwifi.sys
  2357. Image name: nwifi.sys
  2358. Timestamp: Sat Mar 4 01:30:06 2017 (58BA5EEE)
  2359. CheckSum: 00090A47
  2360. ImageSize: 00089000
  2361. File version: 10.0.14393.953
  2362. Product version: 10.0.14393.953
  2363. File flags: 0 (Mask 3F)
  2364. File OS: 40004 NT Win32
  2365. File type: 3.6 Driver
  2366. File date: 00000000.00000000
  2367. Translations: 0409.04b0
  2368. CompanyName: Microsoft Corporation
  2369. ProductName: Microsoft® Windows® Operating System
  2370. InternalName: NWiFi.SYS
  2371. OriginalFilename: NWiFi.SYS
  2372. ProductVersion: 10.0.14393.953
  2373. FileVersion: 10.0.14393.953 (rs1_release_inmarket.170303-1614)
  2374. FileDescription: NativeWiFi Miniport Driver
  2375. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2376. fffff805`d0bf0000 fffff805`d0d02000 HTTP (deferred)
  2377. Mapped memory image file: C:\ProgramData\dbg\sym\HTTP.sys\595F2AC7112000\HTTP.sys
  2378. Image path: \SystemRoot\system32\drivers\HTTP.sys
  2379. Image name: HTTP.sys
  2380. Timestamp: Fri Jul 7 02:31:35 2017 (595F2AC7)
  2381. CheckSum: 001102F0
  2382. ImageSize: 00112000
  2383. File version: 10.0.14393.1480
  2384. Product version: 10.0.14393.1480
  2385. File flags: 0 (Mask 3F)
  2386. File OS: 40004 NT Win32
  2387. File type: 3.7 Driver
  2388. File date: 00000000.00000000
  2389. Translations: 0409.04b0
  2390. CompanyName: Microsoft Corporation
  2391. ProductName: Microsoft® Windows® Operating System
  2392. InternalName: http.sys
  2393. OriginalFilename: http.sys
  2394. ProductVersion: 10.0.14393.1480
  2395. FileVersion: 10.0.14393.1480 (rs1_release.170706-2004)
  2396. FileDescription: HTTP Protocol Stack
  2397. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2398. fffff805`d0d10000 fffff805`d0d22000 condrv (deferred)
  2399. Mapped memory image file: C:\ProgramData\dbg\sym\condrv.sys\5789979E12000\condrv.sys
  2400. Image path: \SystemRoot\System32\drivers\condrv.sys
  2401. Image name: condrv.sys
  2402. Timestamp: Fri Jul 15 22:10:38 2016 (5789979E)
  2403. CheckSum: 000111F4
  2404. ImageSize: 00012000
  2405. File version: 10.0.14393.0
  2406. Product version: 10.0.14393.0
  2407. File flags: 0 (Mask 3F)
  2408. File OS: 40004 NT Win32
  2409. File type: 3.7 Driver
  2410. File date: 00000000.00000000
  2411. Translations: 0409.04b0
  2412. CompanyName: Microsoft Corporation
  2413. ProductName: Microsoft® Windows® Operating System
  2414. InternalName: condrv.sys
  2415. OriginalFilename: condrv.sys
  2416. ProductVersion: 10.0.14393.0
  2417. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  2418. FileDescription: Console Driver
  2419. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2420. fffff805`d0d30000 fffff805`d0d4e000 WudfPf (deferred)
  2421. Mapped memory image file: C:\ProgramData\dbg\sym\WudfPf.sys\57899B421e000\WudfPf.sys
  2422. Image path: \SystemRoot\system32\drivers\WudfPf.sys
  2423. Image name: WudfPf.sys
  2424. Timestamp: Fri Jul 15 22:26:10 2016 (57899B42)
  2425. CheckSum: 00021168
  2426. ImageSize: 0001E000
  2427. File version: 10.0.14393.0
  2428. Product version: 10.0.14393.0
  2429. File flags: 0 (Mask 3F)
  2430. File OS: 40004 NT Win32
  2431. File type: 3.7 Driver
  2432. File date: 00000000.00000000
  2433. Translations: 0000.04b0
  2434. CompanyName: Microsoft Corporation
  2435. ProductName: Microsoft® Windows® Operating System
  2436. InternalName: WUDFPf.sys
  2437. OriginalFilename: WUDFPf.sys
  2438. ProductVersion: 10.0.14393.0
  2439. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  2440. FileDescription: Windows Driver Foundation - User-mode Driver Framework Platform Driver
  2441. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2442. fffff805`d0d50000 fffff805`d0d72000 bowser (deferred)
  2443. Mapped memory image file: C:\ProgramData\dbg\sym\bowser.sys\5819BE9B22000\bowser.sys
  2444. Image path: \SystemRoot\system32\DRIVERS\bowser.sys
  2445. Image name: bowser.sys
  2446. Timestamp: Wed Nov 2 06:23:23 2016 (5819BE9B)
  2447. CheckSum: 00024BA4
  2448. ImageSize: 00022000
  2449. File version: 10.0.14393.447
  2450. Product version: 10.0.14393.447
  2451. File flags: 0 (Mask 3F)
  2452. File OS: 40004 NT Win32
  2453. File type: 3.7 Driver
  2454. File date: 00000000.00000000
  2455. Translations: 0409.04b0
  2456. CompanyName: Microsoft Corporation
  2457. ProductName: Microsoft® Windows® Operating System
  2458. InternalName: browser.sys
  2459. OriginalFilename: browser.sys
  2460. ProductVersion: 10.0.14393.447
  2461. FileVersion: 10.0.14393.447 (rs1_release_inmarket.161102-0100)
  2462. FileDescription: NT Lan Manager Datagram Receiver Driver
  2463. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2464. fffff805`d0d80000 fffff805`d10e6000 bwcW10x64 T (no symbols)
  2465. Loaded symbol image file: bwcW10x64.sys
  2466. Image path: \SystemRoot\system32\DRIVERS\bwcW10x64.sys
  2467. Image name: bwcW10x64.sys
  2468. Timestamp: Thu Sep 15 12:22:54 2016 (57DACADE)
  2469. CheckSum: 000313BC
  2470. ImageSize: 00366000
  2471. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  2472. fffff805`d10f0000 fffff805`d10fc000 klim6 (deferred)
  2473. Image path: \SystemRoot\system32\DRIVERS\klim6.sys
  2474. Image name: klim6.sys
  2475. Timestamp: Fri Sep 30 09:35:20 2016 (57EE6A18)
  2476. CheckSum: 0001BB70
  2477. ImageSize: 0000C000
  2478. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  2479. fffff805`d1100000 fffff805`d1120000 klwtp (deferred)
  2480. Image path: \SystemRoot\system32\DRIVERS\klwtp.sys
  2481. Image name: klwtp.sys
  2482. Timestamp: Thu Jan 12 04:21:38 2017 (58774AA2)
  2483. CheckSum: 00022906
  2484. ImageSize: 00020000
  2485. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  2486. fffff805`d1120000 fffff805`d1139000 vwififlt (deferred)
  2487. Mapped memory image file: C:\ProgramData\dbg\sym\vwififlt.sys\57899BB719000\vwififlt.sys
  2488. Image path: \SystemRoot\System32\drivers\vwififlt.sys
  2489. Image name: vwififlt.sys
  2490. Timestamp: Fri Jul 15 22:28:07 2016 (57899BB7)
  2491. CheckSum: 00019E68
  2492. ImageSize: 00019000
  2493. File version: 10.0.14393.0
  2494. Product version: 10.0.14393.0
  2495. File flags: 0 (Mask 3F)
  2496. File OS: 40004 NT Win32
  2497. File type: 3.6 Driver
  2498. File date: 00000000.00000000
  2499. Translations: 0000.04b0
  2500. CompanyName: Microsoft Corporation
  2501. ProductName: Microsoft® Windows® Operating System
  2502. InternalName: vwififlt.sys
  2503. OriginalFilename: vwififlt.sys
  2504. ProductVersion: 10.0.14393.0
  2505. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  2506. FileDescription: Virtual WiFi Filter Driver
  2507. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2508. fffff805`d1140000 fffff805`d1152000 kldisk (deferred)
  2509. Image path: \SystemRoot\system32\DRIVERS\kldisk.sys
  2510. Image name: kldisk.sys
  2511. Timestamp: Fri Dec 25 02:47:51 2015 (567CF4A7)
  2512. CheckSum: 0001E276
  2513. ImageSize: 00012000
  2514. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  2515. fffff805`d1170000 fffff805`d119b000 pacer (deferred)
  2516. Mapped memory image file: C:\ProgramData\dbg\sym\pacer.sys\57899B112b000\pacer.sys
  2517. Image path: \SystemRoot\System32\drivers\pacer.sys
  2518. Image name: pacer.sys
  2519. Timestamp: Fri Jul 15 22:25:21 2016 (57899B11)
  2520. CheckSum: 00034F3A
  2521. ImageSize: 0002B000
  2522. File version: 10.0.14393.0
  2523. Product version: 10.0.14393.0
  2524. File flags: 0 (Mask 3F)
  2525. File OS: 40004 NT Win32
  2526. File type: 3.6 Driver
  2527. File date: 00000000.00000000
  2528. Translations: 0409.04b0
  2529. CompanyName: Microsoft Corporation
  2530. ProductName: Microsoft® Windows® Operating System
  2531. InternalName: pacer.sys
  2532. OriginalFilename: pacer.sys
  2533. ProductVersion: 10.0.14393.0
  2534. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  2535. FileDescription: QoS Packet Scheduler
  2536. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2537. fffff805`d11a0000 fffff805`d11b2000 netbios (deferred)
  2538. Mapped memory image file: C:\ProgramData\dbg\sym\netbios.sys\57899B8612000\netbios.sys
  2539. Image path: \SystemRoot\system32\drivers\netbios.sys
  2540. Image name: netbios.sys
  2541. Timestamp: Fri Jul 15 22:27:18 2016 (57899B86)
  2542. CheckSum: 00013FEB
  2543. ImageSize: 00012000
  2544. File version: 10.0.14393.0
  2545. Product version: 10.0.14393.0
  2546. File flags: 0 (Mask 3F)
  2547. File OS: 40004 NT Win32
  2548. File type: 3.6 Driver
  2549. File date: 00000000.00000000
  2550. Translations: 0409.04b0
  2551. CompanyName: Microsoft Corporation
  2552. ProductName: Microsoft® Windows® Operating System
  2553. InternalName: NETBIOS.SYS
  2554. OriginalFilename: NETBIOS.SYS
  2555. ProductVersion: 10.0.14393.0
  2556. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  2557. FileDescription: NetBIOS interface driver
  2558. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2559. fffff805`d11c0000 fffff805`d11fb000 mrxsmb20 (deferred)
  2560. Mapped memory image file: C:\ProgramData\dbg\sym\mrxsmb20.sys\595F2C923b000\mrxsmb20.sys
  2561. Image path: \SystemRoot\system32\DRIVERS\mrxsmb20.sys
  2562. Image name: mrxsmb20.sys
  2563. Timestamp: Fri Jul 7 02:39:14 2017 (595F2C92)
  2564. CheckSum: 00038EC2
  2565. ImageSize: 0003B000
  2566. File version: 10.0.14393.1480
  2567. Product version: 10.0.14393.1480
  2568. File flags: 0 (Mask 3F)
  2569. File OS: 40004 NT Win32
  2570. File type: 3.7 Driver
  2571. File date: 00000000.00000000
  2572. Translations: 0409.04b0
  2573. CompanyName: Microsoft Corporation
  2574. ProductName: Microsoft® Windows® Operating System
  2575. InternalName: MRxSmb20.sys
  2576. OriginalFilename: MRXSMB20.Sys
  2577. ProductVersion: 10.0.14393.1480
  2578. FileVersion: 10.0.14393.1480 (rs1_release.170706-2004)
  2579. FileDescription: Longhorn SMB 2.0 Redirector
  2580. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2581. fffff805`d2200000 fffff805`d2238000 ucx01000 (deferred)
  2582. Mapped memory image file: C:\ProgramData\dbg\sym\ucx01000.sys\57899B0638000\ucx01000.sys
  2583. Image path: \SystemRoot\system32\drivers\ucx01000.sys
  2584. Image name: ucx01000.sys
  2585. Timestamp: Fri Jul 15 22:25:10 2016 (57899B06)
  2586. CheckSum: 00033D57
  2587. ImageSize: 00038000
  2588. File version: 10.0.14393.0
  2589. Product version: 10.0.14393.0
  2590. File flags: 0 (Mask 3F)
  2591. File OS: 40004 NT Win32
  2592. File type: 3.7 Driver
  2593. File date: 00000000.00000000
  2594. Translations: 0409.04b0
  2595. CompanyName: Microsoft Corporation
  2596. ProductName: Microsoft® Windows® Operating System
  2597. InternalName: ucx01000.sys
  2598. OriginalFilename: ucx01000.sys
  2599. ProductVersion: 10.0.14393.0
  2600. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  2601. FileDescription: USB Controller Extension
  2602. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2603. fffff805`d2240000 fffff805`d2270000 TeeDriverW8x64 (deferred)
  2604. Image path: \SystemRoot\System32\drivers\TeeDriverW8x64.sys
  2605. Image name: TeeDriverW8x64.sys
  2606. Timestamp: Wed Feb 3 17:41:13 2016 (56B28209)
  2607. CheckSum: 0002D6E1
  2608. ImageSize: 00030000
  2609. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  2610. fffff805`d2270000 fffff805`d228c000 usbehci (deferred)
  2611. Mapped memory image file: C:\ProgramData\dbg\sym\usbehci.sys\57899A8B1c000\usbehci.sys
  2612. Image path: \SystemRoot\System32\drivers\usbehci.sys
  2613. Image name: usbehci.sys
  2614. Timestamp: Fri Jul 15 22:23:07 2016 (57899A8B)
  2615. CheckSum: 0001B9AC
  2616. ImageSize: 0001C000
  2617. File version: 10.0.14393.0
  2618. Product version: 10.0.14393.0
  2619. File flags: 0 (Mask 3F)
  2620. File OS: 40004 NT Win32
  2621. File type: 2.0 Dll
  2622. File date: 00000000.00000000
  2623. Translations: 0409.04b0
  2624. CompanyName: Microsoft Corporation
  2625. ProductName: Microsoft® Windows® Operating System
  2626. InternalName: USBEHCI.sys
  2627. OriginalFilename: USBEHCI.sys
  2628. ProductVersion: 10.0.14393.0
  2629. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  2630. FileDescription: EHCI eUSB Miniport Driver
  2631. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2632. fffff805`d2290000 fffff805`d2306000 USBPORT (deferred)
  2633. Mapped memory image file: C:\ProgramData\dbg\sym\USBPORT.SYS\57899A8D76000\USBPORT.SYS
  2634. Image path: \SystemRoot\System32\drivers\USBPORT.SYS
  2635. Image name: USBPORT.SYS
  2636. Timestamp: Fri Jul 15 22:23:09 2016 (57899A8D)
  2637. CheckSum: 0007230D
  2638. ImageSize: 00076000
  2639. File version: 10.0.14393.0
  2640. Product version: 10.0.14393.0
  2641. File flags: 0 (Mask 3F)
  2642. File OS: 40004 NT Win32
  2643. File type: 2.0 Dll
  2644. File date: 00000000.00000000
  2645. Translations: 0409.04b0
  2646. CompanyName: Microsoft Corporation
  2647. ProductName: Microsoft® Windows® Operating System
  2648. InternalName: usbport.sys
  2649. OriginalFilename: usbport.sys
  2650. ProductVersion: 10.0.14393.0
  2651. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  2652. FileDescription: USB 1.1 & 2.0 Port Driver
  2653. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2654. fffff805`d2720000 fffff805`d272c000 wmiacpi (deferred)
  2655. Mapped memory image file: C:\ProgramData\dbg\sym\wmiacpi.sys\5789996Bc000\wmiacpi.sys
  2656. Image path: \SystemRoot\System32\drivers\wmiacpi.sys
  2657. Image name: wmiacpi.sys
  2658. Timestamp: Fri Jul 15 22:18:19 2016 (5789996B)
  2659. CheckSum: 0000723D
  2660. ImageSize: 0000C000
  2661. File version: 10.0.14393.0
  2662. Product version: 10.0.14393.0
  2663. File flags: 0 (Mask 3F)
  2664. File OS: 40004 NT Win32
  2665. File type: 3.7 Driver
  2666. File date: 00000000.00000000
  2667. Translations: 0409.04b0
  2668. CompanyName: Microsoft Corporation
  2669. ProductName: Microsoft® Windows® Operating System
  2670. InternalName: wmiacpi.sys
  2671. OriginalFilename: wmiacpi.sys
  2672. ProductVersion: 10.0.14393.0
  2673. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  2674. FileDescription: Windows Management Interface for ACPI
  2675. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2676. fffff805`d2730000 fffff805`d273d000 UEFI (deferred)
  2677. Mapped memory image file: C:\ProgramData\dbg\sym\UEFI.sys\5789979Dd000\UEFI.sys
  2678. Image path: \SystemRoot\System32\drivers\UEFI.sys
  2679. Image name: UEFI.sys
  2680. Timestamp: Fri Jul 15 22:10:37 2016 (5789979D)
  2681. CheckSum: 00008F69
  2682. ImageSize: 0000D000
  2683. File version: 10.0.14393.0
  2684. Product version: 10.0.14393.0
  2685. File flags: 0 (Mask 3F)
  2686. File OS: 40004 NT Win32
  2687. File type: 3.7 Driver
  2688. File date: 00000000.00000000
  2689. Translations: 0409.04b0
  2690. CompanyName: Microsoft Corporation
  2691. ProductName: Microsoft® Windows® Operating System
  2692. InternalName: UEFI.sys
  2693. OriginalFilename: UEFI.sys
  2694. ProductVersion: 10.0.14393.0
  2695. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  2696. FileDescription: UEFI Driver for NT
  2697. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2698. fffff805`d2740000 fffff805`d274e000 nvvad64v (deferred)
  2699. Image path: \SystemRoot\system32\drivers\nvvad64v.sys
  2700. Image name: nvvad64v.sys
  2701. Timestamp: Wed Apr 5 17:21:30 2017 (58E55FDA)
  2702. CheckSum: 00011610
  2703. ImageSize: 0000E000
  2704. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  2705. fffff805`d2750000 fffff805`d275e000 ksthunk (deferred)
  2706. Mapped memory image file: C:\ProgramData\dbg\sym\ksthunk.sys\57899BE8e000\ksthunk.sys
  2707. Image path: \SystemRoot\system32\drivers\ksthunk.sys
  2708. Image name: ksthunk.sys
  2709. Timestamp: Fri Jul 15 22:28:56 2016 (57899BE8)
  2710. CheckSum: 00007648
  2711. ImageSize: 0000E000
  2712. File version: 10.0.14393.0
  2713. Product version: 10.0.14393.0
  2714. File flags: 0 (Mask 3F)
  2715. File OS: 40004 NT Win32
  2716. File type: 3.0 Driver
  2717. File date: 00000000.00000000
  2718. Translations: 0409.04b0
  2719. CompanyName: Microsoft Corporation
  2720. ProductName: Microsoft® Windows® Operating System
  2721. InternalName: ksthunk.sys
  2722. OriginalFilename: ksthunk.sys
  2723. ProductVersion: 10.0.14393.0
  2724. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  2725. FileDescription: Kernel Streaming WOW Thunk Service
  2726. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2727. fffff805`d2760000 fffff805`d276f000 nvvhci (deferred)
  2728. Image path: \SystemRoot\System32\drivers\nvvhci.sys
  2729. Image name: nvvhci.sys
  2730. Timestamp: Tue Dec 27 20:44:00 2016 (586318E0)
  2731. CheckSum: 0000EDC5
  2732. ImageSize: 0000F000
  2733. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  2734. fffff805`d2770000 fffff805`d277d000 NdisVirtualBus (deferred)
  2735. Mapped memory image file: C:\ProgramData\dbg\sym\NdisVirtualBus.sys\57899B58d000\NdisVirtualBus.sys
  2736. Image path: \SystemRoot\System32\drivers\NdisVirtualBus.sys
  2737. Image name: NdisVirtualBus.sys
  2738. Timestamp: Fri Jul 15 22:26:32 2016 (57899B58)
  2739. CheckSum: 00012DF8
  2740. ImageSize: 0000D000
  2741. File version: 10.0.14393.0
  2742. Product version: 10.0.14393.0
  2743. File flags: 0 (Mask 3F)
  2744. File OS: 40004 NT Win32
  2745. File type: 3.6 Driver
  2746. File date: 00000000.00000000
  2747. Translations: 0409.04b0
  2748. CompanyName: Microsoft Corporation
  2749. ProductName: Microsoft® Windows® Operating System
  2750. InternalName: NdisVirtualBus.sys
  2751. OriginalFilename: NdisVirtualBus.sys
  2752. ProductVersion: 10.0.14393.0
  2753. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  2754. FileDescription: Microsoft Virtual Network Adapter Enumerator
  2755. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2756. fffff805`d2780000 fffff805`d278c000 swenum (deferred)
  2757. Mapped memory image file: C:\ProgramData\dbg\sym\swenum.sys\57899BE7c000\swenum.sys
  2758. Image path: \SystemRoot\System32\drivers\swenum.sys
  2759. Image name: swenum.sys
  2760. Timestamp: Fri Jul 15 22:28:55 2016 (57899BE7)
  2761. CheckSum: 0000F2D2
  2762. ImageSize: 0000C000
  2763. File version: 10.0.14393.0
  2764. Product version: 10.0.14393.0
  2765. File flags: 0 (Mask 3F)
  2766. File OS: 40004 NT Win32
  2767. File type: 3.0 Driver
  2768. File date: 00000000.00000000
  2769. Translations: 0000.04b0
  2770. CompanyName: Microsoft Corporation
  2771. ProductName: Microsoft® Windows® Operating System
  2772. InternalName: swenum.sys
  2773. OriginalFilename: swenum.sys
  2774. ProductVersion: 10.0.14393.0
  2775. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  2776. FileDescription: Plug and Play Software Device Enumerator
  2777. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2778. fffff805`d2790000 fffff805`d279d000 CorsairVBusDriver (deferred)
  2779. Image path: \SystemRoot\System32\drivers\CorsairVBusDriver.sys
  2780. Image name: CorsairVBusDriver.sys
  2781. Timestamp: Tue Jan 17 11:58:53 2017 (587E4D4D)
  2782. CheckSum: 00010AF9
  2783. ImageSize: 0000D000
  2784. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  2785. fffff805`d27a0000 fffff805`d27ae000 ScpVBus (deferred)
  2786. Image path: \SystemRoot\System32\drivers\ScpVBus.sys
  2787. Image name: ScpVBus.sys
  2788. Timestamp: Sun May 5 17:31:26 2013 (5186CFAE)
  2789. CheckSum: 00010BD7
  2790. ImageSize: 0000E000
  2791. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  2792. fffff805`d27b0000 fffff805`d27be000 rdpbus (deferred)
  2793. Mapped memory image file: C:\ProgramData\dbg\sym\rdpbus.sys\578997C3e000\rdpbus.sys
  2794. Image path: \SystemRoot\System32\drivers\rdpbus.sys
  2795. Image name: rdpbus.sys
  2796. Timestamp: Fri Jul 15 22:11:15 2016 (578997C3)
  2797. CheckSum: 000113C4
  2798. ImageSize: 0000E000
  2799. File version: 10.0.14393.0
  2800. Product version: 10.0.14393.0
  2801. File flags: 0 (Mask 3F)
  2802. File OS: 40004 NT Win32
  2803. File type: 3.0 Driver
  2804. File date: 00000000.00000000
  2805. Translations: 0409.04b0
  2806. CompanyName: Microsoft Corporation
  2807. ProductName: Microsoft® Windows® Operating System
  2808. InternalName: RDPBUS.SYS
  2809. OriginalFilename: RDPBUS.SYS
  2810. ProductVersion: 10.0.14393.0
  2811. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  2812. FileDescription: Microsoft RDP Bus Device driver
  2813. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2814. fffff805`d27c0000 fffff805`d2840000 usbhub (deferred)
  2815. Mapped memory image file: C:\ProgramData\dbg\sym\usbhub.sys\5789996B80000\usbhub.sys
  2816. Image path: \SystemRoot\System32\drivers\usbhub.sys
  2817. Image name: usbhub.sys
  2818. Timestamp: Fri Jul 15 22:18:19 2016 (5789996B)
  2819. CheckSum: 0008763F
  2820. ImageSize: 00080000
  2821. File version: 10.0.14393.0
  2822. Product version: 10.0.14393.0
  2823. File flags: 0 (Mask 3F)
  2824. File OS: 40004 NT Win32
  2825. File type: 2.0 Dll
  2826. File date: 00000000.00000000
  2827. Translations: 0409.04b0
  2828. CompanyName: Microsoft Corporation
  2829. ProductName: Microsoft® Windows® Operating System
  2830. InternalName: usbhub.sys
  2831. OriginalFilename: usbhub.sys
  2832. ProductVersion: 10.0.14393.0
  2833. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  2834. FileDescription: Default Hub Driver for USB
  2835. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2836. fffff805`d2840000 fffff805`d284e000 USBD (deferred)
  2837. Mapped memory image file: C:\ProgramData\dbg\sym\USBD.SYS\57899BCBe000\USBD.SYS
  2838. Image path: \SystemRoot\System32\drivers\USBD.SYS
  2839. Image name: USBD.SYS
  2840. Timestamp: Fri Jul 15 22:28:27 2016 (57899BCB)
  2841. CheckSum: 00008DBA
  2842. ImageSize: 0000E000
  2843. File version: 10.0.14393.0
  2844. Product version: 10.0.14393.0
  2845. File flags: 0 (Mask 3F)
  2846. File OS: 40004 NT Win32
  2847. File type: 2.0 Dll
  2848. File date: 00000000.00000000
  2849. Translations: 0000.04b0
  2850. CompanyName: Microsoft Corporation
  2851. ProductName: Microsoft® Windows® Operating System
  2852. InternalName: usbd.sys
  2853. OriginalFilename: usbd.sys
  2854. ProductVersion: 10.0.14393.0
  2855. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  2856. FileDescription: Universal Serial Bus Driver
  2857. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2858. fffff805`d2860000 fffff805`d288f000 HIDCLASS (deferred)
  2859. Mapped memory image file: C:\ProgramData\dbg\sym\HIDCLASS.SYS\5801A8C42f000\HIDCLASS.SYS
  2860. Image path: \SystemRoot\System32\drivers\HIDCLASS.SYS
  2861. Image name: HIDCLASS.SYS
  2862. Timestamp: Fri Oct 14 23:55:48 2016 (5801A8C4)
  2863. CheckSum: 0003317A
  2864. ImageSize: 0002F000
  2865. File version: 10.0.14393.351
  2866. Product version: 10.0.14393.351
  2867. File flags: 0 (Mask 3F)
  2868. File OS: 40004 NT Win32
  2869. File type: 2.0 Dll
  2870. File date: 00000000.00000000
  2871. Translations: 0409.04b0
  2872. CompanyName: Microsoft Corporation
  2873. ProductName: Microsoft® Windows® Operating System
  2874. InternalName: hidclass.sys
  2875. OriginalFilename: hidclass.sys
  2876. ProductVersion: 10.0.14393.351
  2877. FileVersion: 10.0.14393.351 (rs1_release_inmarket.161014-1755)
  2878. FileDescription: Hid Class Library
  2879. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2880. fffff805`d2890000 fffff805`d28a2000 HIDPARSE (deferred)
  2881. Mapped memory image file: C:\ProgramData\dbg\sym\HIDPARSE.SYS\57A55D9D12000\HIDPARSE.SYS
  2882. Image path: \SystemRoot\System32\drivers\HIDPARSE.SYS
  2883. Image name: HIDPARSE.SYS
  2884. Timestamp: Fri Aug 5 23:46:37 2016 (57A55D9D)
  2885. CheckSum: 0001624B
  2886. ImageSize: 00012000
  2887. File version: 10.0.14393.82
  2888. Product version: 10.0.14393.82
  2889. File flags: 0 (Mask 3F)
  2890. File OS: 40004 NT Win32
  2891. File type: 2.0 Dll
  2892. File date: 00000000.00000000
  2893. Translations: 0409.04b0
  2894. CompanyName: Microsoft Corporation
  2895. ProductName: Microsoft® Windows® Operating System
  2896. InternalName: hidparse.sys
  2897. OriginalFilename: hidparse.sys
  2898. ProductVersion: 10.0.14393.82
  2899. FileVersion: 10.0.14393.82 (rs1_release.160805-1735)
  2900. FileDescription: Hid Parsing Library
  2901. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2902. fffff805`d28b0000 fffff805`d28e5000 nvhda64v (deferred)
  2903. Image path: \SystemRoot\system32\drivers\nvhda64v.sys
  2904. Image name: nvhda64v.sys
  2905. Timestamp: Wed Mar 15 08:48:41 2017 (58C93829)
  2906. CheckSum: 000401C4
  2907. ImageSize: 00035000
  2908. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  2909. fffff805`d28f0000 fffff805`d2977000 UsbHub3 (deferred)
  2910. Mapped memory image file: C:\ProgramData\dbg\sym\UsbHub3.sys\5789998E87000\UsbHub3.sys
  2911. Image path: \SystemRoot\System32\drivers\UsbHub3.sys
  2912. Image name: UsbHub3.sys
  2913. Timestamp: Fri Jul 15 22:18:54 2016 (5789998E)
  2914. CheckSum: 0008E82B
  2915. ImageSize: 00087000
  2916. File version: 10.0.14393.0
  2917. Product version: 10.0.14393.0
  2918. File flags: 0 (Mask 3F)
  2919. File OS: 40004 NT Win32
  2920. File type: 3.7 Driver
  2921. File date: 00000000.00000000
  2922. Translations: 0409.04b0
  2923. CompanyName: Microsoft Corporation
  2924. ProductName: Microsoft® Windows® Operating System
  2925. InternalName: usbhub3.sys
  2926. OriginalFilename: usbhub3.sys
  2927. ProductVersion: 10.0.14393.0
  2928. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  2929. FileDescription: USB3 HUB Driver
  2930. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2931. fffff805`d2980000 fffff805`d2990000 kbdhid (deferred)
  2932. Mapped memory image file: C:\ProgramData\dbg\sym\kbdhid.sys\57DACFAB10000\kbdhid.sys
  2933. Image path: \SystemRoot\System32\drivers\kbdhid.sys
  2934. Image name: kbdhid.sys
  2935. Timestamp: Thu Sep 15 12:43:23 2016 (57DACFAB)
  2936. CheckSum: 00015351
  2937. ImageSize: 00010000
  2938. File version: 10.0.14393.206
  2939. Product version: 10.0.14393.206
  2940. File flags: 0 (Mask 3F)
  2941. File OS: 40004 NT Win32
  2942. File type: 2.0 Dll
  2943. File date: 00000000.00000000
  2944. Translations: 0409.04b0
  2945. CompanyName: Microsoft Corporation
  2946. ProductName: Microsoft® Windows® Operating System
  2947. InternalName: kbdhid.sys
  2948. OriginalFilename: kbdhid.sys
  2949. ProductVersion: 10.0.14393.206
  2950. FileVersion: 10.0.14393.206 (rs1_release.160915-0644)
  2951. FileDescription: HID Keyboard Filter Driver
  2952. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2953. fffff805`d2990000 fffff805`d299c000 klkbdflt (deferred)
  2954. Image path: \SystemRoot\system32\DRIVERS\klkbdflt.sys
  2955. Image name: klkbdflt.sys
  2956. Timestamp: Fri May 13 16:10:05 2016 (5736349D)
  2957. CheckSum: 000110D2
  2958. ImageSize: 0000C000
  2959. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  2960. fffff805`d29a0000 fffff805`d29b3000 kbdclass (deferred)
  2961. Mapped memory image file: C:\ProgramData\dbg\sym\kbdclass.sys\57899B5313000\kbdclass.sys
  2962. Image path: \SystemRoot\System32\drivers\kbdclass.sys
  2963. Image name: kbdclass.sys
  2964. Timestamp: Fri Jul 15 22:26:27 2016 (57899B53)
  2965. CheckSum: 000191C7
  2966. ImageSize: 00013000
  2967. File version: 10.0.14393.0
  2968. Product version: 10.0.14393.0
  2969. File flags: 0 (Mask 3F)
  2970. File OS: 40004 NT Win32
  2971. File type: 3.7 Driver
  2972. File date: 00000000.00000000
  2973. Translations: 0409.04b0
  2974. CompanyName: Microsoft Corporation
  2975. ProductName: Microsoft® Windows® Operating System
  2976. InternalName: kbdclass.sys
  2977. OriginalFilename: kbdclass.sys
  2978. ProductVersion: 10.0.14393.0
  2979. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  2980. FileDescription: Keyboard Class Driver
  2981. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2982. fffff805`d29c0000 fffff805`d2ac6000 cthda (deferred)
  2983. Image path: \SystemRoot\system32\drivers\cthda.sys
  2984. Image name: cthda.sys
  2985. Timestamp: Tue Jun 23 05:27:01 2015 (55892665)
  2986. CheckSum: 0010F42E
  2987. ImageSize: 00106000
  2988. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  2989. fffff805`d2ad0000 fffff805`d2b2b000 fastfat (deferred)
  2990. Mapped memory image file: C:\ProgramData\dbg\sym\fastfat.SYS\58258B955b000\fastfat.SYS
  2991. Image path: \SystemRoot\System32\Drivers\fastfat.SYS
  2992. Image name: fastfat.SYS
  2993. Timestamp: Fri Nov 11 04:12:53 2016 (58258B95)
  2994. CheckSum: 0005ED2D
  2995. ImageSize: 0005B000
  2996. File version: 10.0.14393.479
  2997. Product version: 10.0.14393.479
  2998. File flags: 0 (Mask 3F)
  2999. File OS: 40004 NT Win32
  3000. File type: 3.7 Driver
  3001. File date: 00000000.00000000
  3002. Translations: 0409.04b0
  3003. CompanyName: Microsoft Corporation
  3004. ProductName: Microsoft® Windows® Operating System
  3005. InternalName: fastfat.sys
  3006. OriginalFilename: FastFAT.Sys
  3007. ProductVersion: 10.0.14393.479
  3008. FileVersion: 10.0.14393.479 (rs1_release.161110-2025)
  3009. FileDescription: Fast FAT File System Driver
  3010. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3011. fffff805`d2b30000 fffff805`d2b60000 usbccgp (deferred)
  3012. Mapped memory image file: C:\ProgramData\dbg\sym\usbccgp.sys\57899BB330000\usbccgp.sys
  3013. Image path: \SystemRoot\System32\drivers\usbccgp.sys
  3014. Image name: usbccgp.sys
  3015. Timestamp: Fri Jul 15 22:28:03 2016 (57899BB3)
  3016. CheckSum: 0002EEAD
  3017. ImageSize: 00030000
  3018. File version: 10.0.14393.0
  3019. Product version: 10.0.14393.0
  3020. File flags: 0 (Mask 3F)
  3021. File OS: 40004 NT Win32
  3022. File type: 2.0 Dll
  3023. File date: 00000000.00000000
  3024. Translations: 0409.04b0
  3025. CompanyName: Microsoft Corporation
  3026. ProductName: Microsoft® Windows® Operating System
  3027. InternalName: USBCCGP.SYS
  3028. OriginalFilename: USBCCGP.SYS
  3029. ProductVersion: 10.0.14393.0
  3030. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  3031. FileDescription: USB Common Class Generic Parent Driver
  3032. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3033. fffff805`d2b60000 fffff805`d2bc5000 RtsUer (deferred)
  3034. Image path: \SystemRoot\system32\Drivers\RtsUer.sys
  3035. Image name: RtsUer.sys
  3036. Timestamp: Mon May 11 03:10:15 2015 (555055D7)
  3037. CheckSum: 00073B7D
  3038. ImageSize: 00065000
  3039. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  3040. fffff805`d2bd0000 fffff805`d2be1000 hidusb (deferred)
  3041. Mapped memory image file: C:\ProgramData\dbg\sym\hidusb.sys\57A55DE511000\hidusb.sys
  3042. Image path: \SystemRoot\System32\drivers\hidusb.sys
  3043. Image name: hidusb.sys
  3044. Timestamp: Fri Aug 5 23:47:49 2016 (57A55DE5)
  3045. CheckSum: 0000C7AD
  3046. ImageSize: 00011000
  3047. File version: 10.0.14393.82
  3048. Product version: 10.0.14393.82
  3049. File flags: 0 (Mask 3F)
  3050. File OS: 40004 NT Win32
  3051. File type: 2.0 Dll
  3052. File date: 00000000.00000000
  3053. Translations: 0409.04b0
  3054. CompanyName: Microsoft Corporation
  3055. ProductName: Microsoft® Windows® Operating System
  3056. InternalName: HIDUSB.SYS
  3057. OriginalFilename: HIDUSB.SYS
  3058. ProductVersion: 10.0.14393.82
  3059. FileVersion: 10.0.14393.82 (rs1_release.160805-1735)
  3060. FileDescription: USB Miniport Driver for Input Devices
  3061. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3062. fffff805`d2bf0000 fffff805`d2c28000 ibtusb (deferred)
  3063. Image path: \SystemRoot\system32\DRIVERS\ibtusb.sys
  3064. Image name: ibtusb.sys
  3065. Timestamp: Mon Jan 9 16:58:26 2017 (58740782)
  3066. CheckSum: 0003B8E5
  3067. ImageSize: 00038000
  3068. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  3069. fffff805`d2c30000 fffff805`d2c4c000 BTHUSB (deferred)
  3070. Mapped memory image file: C:\ProgramData\dbg\sym\BTHUSB.sys\57B7E7591c000\BTHUSB.sys
  3071. Image path: \SystemRoot\System32\drivers\BTHUSB.sys
  3072. Image name: BTHUSB.sys
  3073. Timestamp: Sat Aug 20 01:15:05 2016 (57B7E759)
  3074. CheckSum: 00019B3B
  3075. ImageSize: 0001C000
  3076. File version: 10.0.14393.103
  3077. Product version: 10.0.14393.103
  3078. File flags: 0 (Mask 3F)
  3079. File OS: 40004 NT Win32
  3080. File type: 2.0 Dll
  3081. File date: 00000000.00000000
  3082. Translations: 0409.04b0
  3083. CompanyName: Microsoft Corporation
  3084. ProductName: Microsoft® Windows® Operating System
  3085. InternalName: bthusb.sys
  3086. OriginalFilename: bthusb.sys
  3087. ProductVersion: 10.0.14393.103
  3088. FileVersion: 10.0.14393.103 (rs1_release_inmarket.160819-1924)
  3089. FileDescription: Bluetooth Miniport Driver
  3090. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3091. fffff805`d2c50000 fffff805`d2d43000 bthport (deferred)
  3092. Mapped memory image file: C:\ProgramData\dbg\sym\bthport.sys\590284B4f3000\bthport.sys
  3093. Image path: \SystemRoot\System32\drivers\bthport.sys
  3094. Image name: bthport.sys
  3095. Timestamp: Thu Apr 27 19:54:28 2017 (590284B4)
  3096. CheckSum: 000F8560
  3097. ImageSize: 000F3000
  3098. File version: 10.0.14393.1198
  3099. Product version: 10.0.14393.1198
  3100. File flags: 0 (Mask 3F)
  3101. File OS: 40004 NT Win32
  3102. File type: 2.0 Dll
  3103. File date: 00000000.00000000
  3104. Translations: 0409.04b0
  3105. CompanyName: Microsoft Corporation
  3106. ProductName: Microsoft® Windows® Operating System
  3107. InternalName: bthport.sys
  3108. OriginalFilename: bthport.sys
  3109. ProductVersion: 10.0.14393.1198
  3110. FileVersion: 10.0.14393.1198 (rs1_release_sec.170427-1353)
  3111. FileDescription: Bluetooth Bus Driver
  3112. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3113. fffff805`d2d50000 fffff805`d2d5f000 mouhid (deferred)
  3114. Mapped memory image file: C:\ProgramData\dbg\sym\mouhid.sys\57899B97f000\mouhid.sys
  3115. Image path: \SystemRoot\System32\drivers\mouhid.sys
  3116. Image name: mouhid.sys
  3117. Timestamp: Fri Jul 15 22:27:35 2016 (57899B97)
  3118. CheckSum: 00015F86
  3119. ImageSize: 0000F000
  3120. File version: 10.0.14393.0
  3121. Product version: 10.0.14393.0
  3122. File flags: 0 (Mask 3F)
  3123. File OS: 40004 NT Win32
  3124. File type: 2.0 Dll
  3125. File date: 00000000.00000000
  3126. Translations: 0409.04b0
  3127. CompanyName: Microsoft Corporation
  3128. ProductName: Microsoft® Windows® Operating System
  3129. InternalName: mouhid.sys
  3130. OriginalFilename: mouhid.sys
  3131. ProductVersion: 10.0.14393.0
  3132. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  3133. FileDescription: HID Mouse Filter Driver
  3134. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3135. fffff805`d2d60000 fffff805`d2d6c000 klmouflt (deferred)
  3136. Image path: \SystemRoot\system32\DRIVERS\klmouflt.sys
  3137. Image name: klmouflt.sys
  3138. Timestamp: Tue Jun 2 08:36:12 2015 (556DA33C)
  3139. CheckSum: 00013191
  3140. ImageSize: 0000C000
  3141. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  3142. fffff805`d2d70000 fffff805`d2d82000 mouclass (deferred)
  3143. Mapped memory image file: C:\ProgramData\dbg\sym\mouclass.sys\57899B6012000\mouclass.sys
  3144. Image path: \SystemRoot\System32\drivers\mouclass.sys
  3145. Image name: mouclass.sys
  3146. Timestamp: Fri Jul 15 22:26:40 2016 (57899B60)
  3147. CheckSum: 0001CA6D
  3148. ImageSize: 00012000
  3149. File version: 10.0.14393.0
  3150. Product version: 10.0.14393.0
  3151. File flags: 0 (Mask 3F)
  3152. File OS: 40004 NT Win32
  3153. File type: 3.7 Driver
  3154. File date: 00000000.00000000
  3155. Translations: 0409.04b0
  3156. CompanyName: Microsoft Corporation
  3157. ProductName: Microsoft® Windows® Operating System
  3158. InternalName: mouclass.sys
  3159. OriginalFilename: mouclass.sys
  3160. ProductVersion: 10.0.14393.0
  3161. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  3162. FileDescription: Mouse Class Driver
  3163. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3164. fffff805`d2d90000 fffff805`d2dd3000 BthLEEnum (deferred)
  3165. Mapped memory image file: C:\ProgramData\dbg\sym\BthLEEnum.sys\5902861743000\BthLEEnum.sys
  3166. Image path: \SystemRoot\System32\drivers\BthLEEnum.sys
  3167. Image name: BthLEEnum.sys
  3168. Timestamp: Thu Apr 27 20:00:23 2017 (59028617)
  3169. CheckSum: 0004AB7E
  3170. ImageSize: 00043000
  3171. File version: 10.0.14393.1198
  3172. Product version: 10.0.14393.1198
  3173. File flags: 0 (Mask 3F)
  3174. File OS: 40004 NT Win32
  3175. File type: 3.7 Driver
  3176. File date: 00000000.00000000
  3177. Translations: 0409.04b0
  3178. CompanyName: Microsoft Corporation
  3179. ProductName: Microsoft® Windows® Operating System
  3180. InternalName: BthLEEnum.SYS
  3181. OriginalFilename: BthLEEnum.SYS
  3182. ProductVersion: 10.0.14393.1198
  3183. FileVersion: 10.0.14393.1198 (rs1_release_sec.170427-1353)
  3184. FileDescription: Bluetooth LE Bus Enumerator
  3185. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3186. fffff805`d2de0000 fffff805`d2e13000 rfcomm (deferred)
  3187. Mapped memory image file: C:\ProgramData\dbg\sym\rfcomm.sys\57899B6933000\rfcomm.sys
  3188. Image path: \SystemRoot\System32\drivers\rfcomm.sys
  3189. Image name: rfcomm.sys
  3190. Timestamp: Fri Jul 15 22:26:49 2016 (57899B69)
  3191. CheckSum: 00035A38
  3192. ImageSize: 00033000
  3193. File version: 10.0.14393.0
  3194. Product version: 10.0.14393.0
  3195. File flags: 0 (Mask 3F)
  3196. File OS: 40004 NT Win32
  3197. File type: 3.6 Driver
  3198. File date: 00000000.00000000
  3199. Translations: 0409.04b0
  3200. CompanyName: Microsoft Corporation
  3201. ProductName: Microsoft® Windows® Operating System
  3202. InternalName: rfcomm.sys
  3203. OriginalFilename: rfcomm.sys
  3204. ProductVersion: 10.0.14393.0
  3205. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  3206. FileDescription: Bluetooth RFCOMM Driver
  3207. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3208. fffff805`d2e20000 fffff805`d2e42000 BthEnum (deferred)
  3209. Mapped memory image file: C:\ProgramData\dbg\sym\BthEnum.sys\57B7E83222000\BthEnum.sys
  3210. Image path: \SystemRoot\System32\drivers\BthEnum.sys
  3211. Image name: BthEnum.sys
  3212. Timestamp: Sat Aug 20 01:18:42 2016 (57B7E832)
  3213. CheckSum: 000211BB
  3214. ImageSize: 00022000
  3215. File version: 10.0.14393.103
  3216. Product version: 10.0.14393.103
  3217. File flags: 0 (Mask 3F)
  3218. File OS: 40004 NT Win32
  3219. File type: 3.7 Driver
  3220. File date: 00000000.00000000
  3221. Translations: 0409.04b0
  3222. CompanyName: Microsoft Corporation
  3223. ProductName: Microsoft® Windows® Operating System
  3224. InternalName: bthenum.SYS
  3225. OriginalFilename: bthenum.SYS
  3226. ProductVersion: 10.0.14393.103
  3227. FileVersion: 10.0.14393.103 (rs1_release_inmarket.160819-1924)
  3228. FileDescription: Bluetooth Bus Extender
  3229. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3230. fffff805`d2e50000 fffff805`d2e75000 bthpan (deferred)
  3231. Mapped memory image file: C:\ProgramData\dbg\sym\bthpan.sys\595F2E9925000\bthpan.sys
  3232. Image path: \SystemRoot\System32\drivers\bthpan.sys
  3233. Image name: bthpan.sys
  3234. Timestamp: Fri Jul 7 02:47:53 2017 (595F2E99)
  3235. CheckSum: 00027C4F
  3236. ImageSize: 00025000
  3237. File version: 10.0.14393.1480
  3238. Product version: 10.0.14393.1480
  3239. File flags: 0 (Mask 3F)
  3240. File OS: 40004 NT Win32
  3241. File type: 3.7 Driver
  3242. File date: 00000000.00000000
  3243. Translations: 0409.04b0
  3244. CompanyName: Microsoft Corporation
  3245. ProductName: Microsoft® Windows® Operating System
  3246. InternalName: bthpan.sys
  3247. OriginalFilename: bthpan.sys
  3248. ProductVersion: 10.0.14393.1480
  3249. FileVersion: 10.0.14393.1480 (rs1_release.170706-2004)
  3250. FileDescription: Bluetooth Personal Area Networking
  3251. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3252. fffff805`d2e80000 fffff805`d2e9d000 dump_dumpfve (deferred)
  3253. Mapped memory image file: C:\ProgramData\dbg\sym\dumpfve.sys\57899BA21d000\dumpfve.sys
  3254. Image path: \SystemRoot\System32\Drivers\dump_dumpfve.sys
  3255. Image name: dump_dumpfve.sys
  3256. Timestamp: Fri Jul 15 22:27:46 2016 (57899BA2)
  3257. CheckSum: 00025B3A
  3258. ImageSize: 0001D000
  3259. File version: 10.0.14393.0
  3260. Product version: 10.0.14393.0
  3261. File flags: 0 (Mask 3F)
  3262. File OS: 40004 NT Win32
  3263. File type: 3.7 Driver
  3264. File date: 00000000.00000000
  3265. Translations: 0000.04b0
  3266. CompanyName: Microsoft Corporation
  3267. ProductName: Microsoft® Windows® Operating System
  3268. InternalName: dumpfve.sys
  3269. OriginalFilename: dumpfve.sys
  3270. ProductVersion: 10.0.14393.0
  3271. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  3272. FileDescription: Bitlocker Drive Encryption Crashdump Filter
  3273. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3274. fffff805`d2ea0000 fffff805`d2f47000 dxgmms2 (deferred)
  3275. Mapped memory image file: C:\ProgramData\dbg\sym\dxgmms2.sys\58BA5E7Ea7000\dxgmms2.sys
  3276. Image path: \SystemRoot\System32\drivers\dxgmms2.sys
  3277. Image name: dxgmms2.sys
  3278. Timestamp: Sat Mar 4 01:28:14 2017 (58BA5E7E)
  3279. CheckSum: 000A6365
  3280. ImageSize: 000A7000
  3281. File version: 10.0.14393.953
  3282. Product version: 10.0.14393.953
  3283. File flags: 0 (Mask 3F)
  3284. File OS: 40004 NT Win32
  3285. File type: 3.7 Driver
  3286. File date: 00000000.00000000
  3287. Translations: 0409.04b0
  3288. CompanyName: Microsoft Corporation
  3289. ProductName: Microsoft® Windows® Operating System
  3290. InternalName: dxgmms2.sys
  3291. OriginalFilename: dxgmms2.sys
  3292. ProductVersion: 10.0.14393.953
  3293. FileVersion: 10.0.14393.953 (rs1_release_inmarket.170303-1614)
  3294. FileDescription: DirectX Graphics MMS
  3295. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3296. fffff805`d2f50000 fffff805`d2f60000 monitor (deferred)
  3297. Mapped memory image file: C:\ProgramData\dbg\sym\monitor.sys\57899BCA10000\monitor.sys
  3298. Image path: \SystemRoot\System32\drivers\monitor.sys
  3299. Image name: monitor.sys
  3300. Timestamp: Fri Jul 15 22:28:26 2016 (57899BCA)
  3301. CheckSum: 00015D31
  3302. ImageSize: 00010000
  3303. File version: 10.0.14393.0
  3304. Product version: 10.0.14393.0
  3305. File flags: 0 (Mask 3F)
  3306. File OS: 40004 NT Win32
  3307. File type: 3.7 Driver
  3308. File date: 00000000.00000000
  3309. Translations: 0409.04b0
  3310. CompanyName: Microsoft Corporation
  3311. ProductName: Microsoft® Windows® Operating System
  3312. InternalName: monitor.sys
  3313. OriginalFilename: monitor.sys
  3314. ProductVersion: 10.0.14393.0
  3315. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  3316. FileDescription: Monitor Driver
  3317. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3318. fffff805`d2f60000 fffff805`d2f86000 luafv (deferred)
  3319. Mapped memory image file: C:\ProgramData\dbg\sym\luafv.sys\57899A3C26000\luafv.sys
  3320. Image path: \SystemRoot\system32\drivers\luafv.sys
  3321. Image name: luafv.sys
  3322. Timestamp: Fri Jul 15 22:21:48 2016 (57899A3C)
  3323. CheckSum: 0002DC1D
  3324. ImageSize: 00026000
  3325. File version: 10.0.14393.0
  3326. Product version: 10.0.14393.0
  3327. File flags: 0 (Mask 3F)
  3328. File OS: 40004 NT Win32
  3329. File type: 3.7 Driver
  3330. File date: 00000000.00000000
  3331. Translations: 0409.04b0
  3332. CompanyName: Microsoft Corporation
  3333. ProductName: Microsoft® Windows® Operating System
  3334. InternalName: luafv.sys
  3335. OriginalFilename: luafv.sys
  3336. ProductVersion: 10.0.14393.0
  3337. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  3338. FileDescription: LUA File Virtualization Filter Driver
  3339. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3340. fffff805`d2f90000 fffff805`d2fb0000 wcifs (deferred)
  3341. Mapped memory image file: C:\ProgramData\dbg\sym\wcifs.sys\57DACF5B20000\wcifs.sys
  3342. Image path: \SystemRoot\system32\drivers\wcifs.sys
  3343. Image name: wcifs.sys
  3344. Timestamp: Thu Sep 15 12:42:03 2016 (57DACF5B)
  3345. CheckSum: 00029B9E
  3346. ImageSize: 00020000
  3347. File version: 10.0.14393.206
  3348. Product version: 10.0.14393.206
  3349. File flags: 0 (Mask 3F)
  3350. File OS: 40004 NT Win32
  3351. File type: 3.7 Driver
  3352. File date: 00000000.00000000
  3353. Translations: 0409.04b0
  3354. CompanyName: Microsoft Corporation
  3355. ProductName: Microsoft® Windows® Operating System
  3356. InternalName: wcifs.sys
  3357. OriginalFilename: wcifs.sys
  3358. ProductVersion: 10.0.14393.206
  3359. FileVersion: 10.0.14393.206 (rs1_release.160915-0644)
  3360. FileDescription: Windows Container Isolation FS Filter Driver
  3361. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3362. fffff805`d2fb0000 fffff805`d2fc9000 storqosflt (deferred)
  3363. Mapped memory image file: C:\ProgramData\dbg\sym\storqosflt.sys\57899B6319000\storqosflt.sys
  3364. Image path: \SystemRoot\system32\drivers\storqosflt.sys
  3365. Image name: storqosflt.sys
  3366. Timestamp: Fri Jul 15 22:26:43 2016 (57899B63)
  3367. CheckSum: 00019F7D
  3368. ImageSize: 00019000
  3369. File version: 10.0.14393.0
  3370. Product version: 10.0.14393.0
  3371. File flags: 0 (Mask 3F)
  3372. File OS: 40004 NT Win32
  3373. File type: 3.7 Driver
  3374. File date: 00000000.00000000
  3375. Translations: 0409.04b0
  3376. CompanyName: Microsoft Corporation
  3377. ProductName: Microsoft® Windows® Operating System
  3378. InternalName: storqosflt.sys
  3379. OriginalFilename: storqosflt.sys
  3380. ProductVersion: 10.0.14393.0
  3381. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  3382. FileDescription: Storage QoS Filter
  3383. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3384. fffff805`d2fd0000 fffff805`d2fe6000 wcnfs (deferred)
  3385. Mapped memory image file: C:\ProgramData\dbg\sym\wcnfs.sys\57899BCB16000\wcnfs.sys
  3386. Image path: \SystemRoot\system32\drivers\wcnfs.sys
  3387. Image name: wcnfs.sys
  3388. Timestamp: Fri Jul 15 22:28:27 2016 (57899BCB)
  3389. CheckSum: 0001C3CE
  3390. ImageSize: 00016000
  3391. File version: 10.0.14393.0
  3392. Product version: 10.0.14393.0
  3393. File flags: 0 (Mask 3F)
  3394. File OS: 40004 NT Win32
  3395. File type: 3.7 Driver
  3396. File date: 00000000.00000000
  3397. Translations: 0409.04b0
  3398. CompanyName: Microsoft Corporation
  3399. ProductName: Microsoft® Windows® Operating System
  3400. InternalName: wcnfs.sys
  3401. OriginalFilename: wcnfs.sys
  3402. ProductVersion: 10.0.14393.0
  3403. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  3404. FileDescription: Windows Container Name Virtualization FS Filter Driver
  3405. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3406. fffff805`d2ff0000 fffff805`d2ffc000 npf (deferred)
  3407. Image path: \??\C:\Windows\system32\drivers\npf.sys
  3408. Image name: npf.sys
  3409. Timestamp: Fri Jun 25 12:50:58 2010 (4C24DE72)
  3410. CheckSum: 00011844
  3411. ImageSize: 0000C000
  3412. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  3413. fffff805`d3010000 fffff805`d301f000 dump_diskdump (deferred)
  3414. Mapped memory image file: C:\ProgramData\dbg\sym\diskdump.sys\57899A45f000\diskdump.sys
  3415. Image path: \SystemRoot\System32\Drivers\dump_diskdump.sys
  3416. Image name: dump_diskdump.sys
  3417. Timestamp: Fri Jul 15 22:21:57 2016 (57899A45)
  3418. CheckSum: 0000DF2B
  3419. ImageSize: 0000F000
  3420. File version: 10.0.14393.0
  3421. Product version: 10.0.14393.0
  3422. File flags: 0 (Mask 3F)
  3423. File OS: 40004 NT Win32
  3424. File type: 3.7 Driver
  3425. File date: 00000000.00000000
  3426. Translations: 0409.04b0
  3427. CompanyName: Microsoft Corporation
  3428. ProductName: Microsoft® Windows® Operating System
  3429. InternalName: diskdump.sys
  3430. OriginalFilename: diskdump.sys
  3431. ProductVersion: 10.0.14393.0
  3432. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  3433. FileDescription: Crash Dump Disk Driver
  3434. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3435. fffff805`d3050000 fffff805`d3074000 dump_storahci (deferred)
  3436. Mapped memory image file: C:\ProgramData\dbg\sym\storahci.sys\58BA5AC424000\storahci.sys
  3437. Image path: \SystemRoot\System32\Drivers\dump_storahci.sys
  3438. Image name: dump_storahci.sys
  3439. Timestamp: Sat Mar 4 01:12:20 2017 (58BA5AC4)
  3440. CheckSum: 0002B55C
  3441. ImageSize: 00024000
  3442. File version: 10.0.14393.953
  3443. Product version: 10.0.14393.953
  3444. File flags: 0 (Mask 3F)
  3445. File OS: 40004 NT Win32
  3446. File type: 3.7 Driver
  3447. File date: 00000000.00000000
  3448. Translations: 0409.04b0
  3449. CompanyName: Microsoft Corporation
  3450. ProductName: Microsoft® Windows® Operating System
  3451. InternalName: storahci.sys
  3452. OriginalFilename: storahci.sys
  3453. ProductVersion: 10.0.14393.953
  3454. FileVersion: 10.0.14393.953 (rs1_release_inmarket.170303-1614)
  3455. FileDescription: MS AHCI Storport Miniport Driver
  3456. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3457. fffff805`d30a0000 fffff805`d3ebf000 nvlddmkm (deferred)
  3458. Image path: \SystemRoot\System32\DriverStore\FileRepository\nv_desktop_ref4i.inf_amd64_1854074a80c04de8\nvlddmkm.sys
  3459. Image name: nvlddmkm.sys
  3460. Timestamp: Thu May 18 01:03:49 2017 (591D2B35)
  3461. CheckSum: 00DCA1A3
  3462. ImageSize: 00E1F000
  3463. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  3464. fffff805`d3ec0000 fffff805`d3edb000 HDAudBus (deferred)
  3465. Mapped memory image file: C:\ProgramData\dbg\sym\HDAudBus.sys\57899B7F1b000\HDAudBus.sys
  3466. Image path: \SystemRoot\System32\drivers\HDAudBus.sys
  3467. Image name: HDAudBus.sys
  3468. Timestamp: Fri Jul 15 22:27:11 2016 (57899B7F)
  3469. CheckSum: 0002436E
  3470. ImageSize: 0001B000
  3471. File version: 10.0.14393.0
  3472. Product version: 10.0.14393.0
  3473. File flags: 0 (Mask 3F)
  3474. File OS: 40004 NT Win32
  3475. File type: 3.9 Driver
  3476. File date: 00000000.00000000
  3477. Translations: 0409.04b0
  3478. CompanyName: Microsoft Corporation
  3479. ProductName: Microsoft® Windows® Operating System
  3480. InternalName: hdaudbus.sys
  3481. OriginalFilename: hdaudbus.sys
  3482. ProductVersion: 10.0.14393.0
  3483. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  3484. FileDescription: High Definition Audio Bus Driver
  3485. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3486. fffff805`d3ee0000 fffff805`d3f41000 portcls (deferred)
  3487. Mapped memory image file: C:\ProgramData\dbg\sym\portcls.sys\57899B0661000\portcls.sys
  3488. Image path: \SystemRoot\System32\drivers\portcls.sys
  3489. Image name: portcls.sys
  3490. Timestamp: Fri Jul 15 22:25:10 2016 (57899B06)
  3491. CheckSum: 0005BE02
  3492. ImageSize: 00061000
  3493. File version: 10.0.14393.0
  3494. Product version: 10.0.14393.0
  3495. File flags: 0 (Mask 3F)
  3496. File OS: 40004 NT Win32
  3497. File type: 3.9 Driver
  3498. File date: 00000000.00000000
  3499. Translations: 0409.04b0
  3500. CompanyName: Microsoft Corporation
  3501. ProductName: Microsoft® Windows® Operating System
  3502. InternalName: portcls.sys
  3503. OriginalFilename: portcls.sys
  3504. ProductVersion: 10.0.14393.0
  3505. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  3506. FileDescription: Port Class (Class Driver for Port/Miniport Devices)
  3507. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3508. fffff805`d3f50000 fffff805`d3f71000 drmk (deferred)
  3509. Image path: \SystemRoot\System32\drivers\drmk.sys
  3510. Image name: drmk.sys
  3511. Timestamp: Fri Jul 15 22:27:13 2016 (57899B81)
  3512. CheckSum: 0001C8DB
  3513. ImageSize: 00021000
  3514. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  3515. fffff805`d3f80000 fffff805`d3fe3000 USBXHCI (deferred)
  3516. Mapped memory image file: C:\ProgramData\dbg\sym\USBXHCI.SYS\59327C4063000\USBXHCI.SYS
  3517. Image path: \SystemRoot\System32\drivers\USBXHCI.SYS
  3518. Image name: USBXHCI.SYS
  3519. Timestamp: Sat Jun 3 05:07:12 2017 (59327C40)
  3520. CheckSum: 00064D6E
  3521. ImageSize: 00063000
  3522. File version: 10.0.14393.1358
  3523. Product version: 10.0.14393.1358
  3524. File flags: 0 (Mask 3F)
  3525. File OS: 40004 NT Win32
  3526. File type: 3.7 Driver
  3527. File date: 00000000.00000000
  3528. Translations: 0409.04b0
  3529. CompanyName: Microsoft Corporation
  3530. ProductName: Microsoft® Windows® Operating System
  3531. InternalName: usbxhci.sys
  3532. OriginalFilename: usbxhci.sys
  3533. ProductVersion: 10.0.14393.1358
  3534. FileVersion: 10.0.14393.1358 (rs1_release.170602-2252)
  3535. FileDescription: USB XHCI Driver
  3536. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3537. fffff805`d4000000 fffff805`d408c000 srv (deferred)
  3538. Mapped memory image file: C:\ProgramData\dbg\sym\srv.sys\590283F88c000\srv.sys
  3539. Image path: \SystemRoot\System32\DRIVERS\srv.sys
  3540. Image name: srv.sys
  3541. Timestamp: Thu Apr 27 19:51:20 2017 (590283F8)
  3542. CheckSum: 000705B7
  3543. ImageSize: 0008C000
  3544. File version: 10.0.14393.1198
  3545. Product version: 10.0.14393.1198
  3546. File flags: 0 (Mask 3F)
  3547. File OS: 40004 NT Win32
  3548. File type: 3.6 Driver
  3549. File date: 00000000.00000000
  3550. Translations: 0409.04b0
  3551. CompanyName: Microsoft Corporation
  3552. ProductName: Microsoft® Windows® Operating System
  3553. InternalName: SRV.SYS
  3554. OriginalFilename: SRV.SYS
  3555. ProductVersion: 10.0.14393.1198
  3556. FileVersion: 10.0.14393.1198 (rs1_release_sec.170427-1353)
  3557. FileDescription: Server driver
  3558. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3559. fffff805`d4090000 fffff805`d40ce000 klupd_klif_klark (deferred)
  3560. Image path: \SystemRoot\System32\Drivers\klupd_klif_klark.sys
  3561. Image name: klupd_klif_klark.sys
  3562. Timestamp: Thu Mar 30 10:51:16 2017 (58DD1B64)
  3563. CheckSum: 0003E432
  3564. ImageSize: 0003E000
  3565. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  3566. fffff805`d40d0000 fffff805`d40d7000 NTIOLib_X64_fffff805d40d0000 (deferred)
  3567. Image path: \??\C:\Program Files\Alienware\Command Center\ClockGen\CPU_Frequency\NTIOLib_X64.sys
  3568. Image name: NTIOLib_X64.sys
  3569. Timestamp: Tue Nov 20 03:25:26 2012 (50AB3E76)
  3570. CheckSum: 0000DBA0
  3571. ImageSize: 00007000
  3572. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  3573. fffff805`d4600000 fffff805`d46c2000 peauth (deferred)
  3574. Image path: \SystemRoot\system32\drivers\peauth.sys
  3575. Image name: peauth.sys
  3576. Timestamp: Fri Jul 15 22:24:39 2016 (57899AE7)
  3577. CheckSum: 000B7F13
  3578. ImageSize: 000C2000
  3579. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  3580. fffff805`d46d0000 fffff805`d46e4000 tcpipreg (deferred)
  3581. Mapped memory image file: C:\ProgramData\dbg\sym\tcpipreg.sys\595F2E4E14000\tcpipreg.sys
  3582. Image path: \SystemRoot\System32\drivers\tcpipreg.sys
  3583. Image name: tcpipreg.sys
  3584. Timestamp: Fri Jul 7 02:46:38 2017 (595F2E4E)
  3585. CheckSum: 00012EE4
  3586. ImageSize: 00014000
  3587. File version: 10.0.14393.1480
  3588. Product version: 10.0.14393.1480
  3589. File flags: 0 (Mask 3F)
  3590. File OS: 40004 NT Win32
  3591. File type: 1.0 App
  3592. File date: 00000000.00000000
  3593. Translations: 0409.04b0
  3594. CompanyName: Microsoft Corporation
  3595. ProductName: Microsoft® Windows® Operating System
  3596. InternalName: tcpipreg.sys
  3597. OriginalFilename: tcpipreg.sys
  3598. ProductVersion: 10.0.14393.1480
  3599. FileVersion: 10.0.14393.1480 (rs1_release.170706-2004)
  3600. FileDescription: TCP/IP Registry Compatibility Driver
  3601. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3602. fffff805`d46f0000 fffff805`d47a4000 srv2 (deferred)
  3603. Mapped memory image file: C:\ProgramData\dbg\sym\srv2.sys\590283F9b4000\srv2.sys
  3604. Image path: \SystemRoot\System32\DRIVERS\srv2.sys
  3605. Image name: srv2.sys
  3606. Timestamp: Thu Apr 27 19:51:21 2017 (590283F9)
  3607. CheckSum: 000B05F8
  3608. ImageSize: 000B4000
  3609. File version: 10.0.14393.1198
  3610. Product version: 10.0.14393.1198
  3611. File flags: 0 (Mask 3F)
  3612. File OS: 40004 NT Win32
  3613. File type: 3.6 Driver
  3614. File date: 00000000.00000000
  3615. Translations: 0409.04b0
  3616. CompanyName: Microsoft Corporation
  3617. ProductName: Microsoft® Windows® Operating System
  3618. InternalName: SRV2.SYS
  3619. OriginalFilename: SRV2.SYS
  3620. ProductVersion: 10.0.14393.1198
  3621. FileVersion: 10.0.14393.1198 (rs1_release_sec.170427-1353)
  3622. FileDescription: Smb 2.0 Server driver
  3623. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3624. fffff805`d6000000 fffff805`d63cd000 Netwbw02 (deferred)
  3625. Image path: \SystemRoot\System32\drivers\Netwbw02.sys
  3626. Image name: Netwbw02.sys
  3627. Timestamp: Mon Jun 22 00:57:10 2015 (558795A6)
  3628. CheckSum: 003A77F9
  3629. ImageSize: 003CD000
  3630. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  3631. fffff805`d63d0000 fffff805`d63de000 vwifibus (deferred)
  3632. Mapped memory image file: C:\ProgramData\dbg\sym\vwifibus.sys\57899B91e000\vwifibus.sys
  3633. Image path: \SystemRoot\System32\drivers\vwifibus.sys
  3634. Image name: vwifibus.sys
  3635. Timestamp: Fri Jul 15 22:27:29 2016 (57899B91)
  3636. CheckSum: 0000BB83
  3637. ImageSize: 0000E000
  3638. File version: 10.0.14393.0
  3639. Product version: 10.0.14393.0
  3640. File flags: 0 (Mask 3F)
  3641. File OS: 40004 NT Win32
  3642. File type: 3.7 Driver
  3643. File date: 00000000.00000000
  3644. Translations: 0409.04b0
  3645. CompanyName: Microsoft Corporation
  3646. ProductName: Microsoft® Windows® Operating System
  3647. InternalName: VWiFiBus.sys
  3648. OriginalFilename: VWiFiBus.sys
  3649. ProductVersion: 10.0.14393.0
  3650. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  3651. FileDescription: Virtual Wireless Bus Driver
  3652. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3653. fffff805`d63e0000 fffff805`d63f1000 vwifimp (deferred)
  3654. Mapped memory image file: C:\ProgramData\dbg\sym\vwifimp.sys\5902869E11000\vwifimp.sys
  3655. Image path: \SystemRoot\System32\drivers\vwifimp.sys
  3656. Image name: vwifimp.sys
  3657. Timestamp: Thu Apr 27 20:02:38 2017 (5902869E)
  3658. CheckSum: 00016EEC
  3659. ImageSize: 00011000
  3660. File version: 10.0.14393.1198
  3661. Product version: 10.0.14393.1198
  3662. File flags: 0 (Mask 3F)
  3663. File OS: 40004 NT Win32
  3664. File type: 3.6 Driver
  3665. File date: 00000000.00000000
  3666. Translations: 0000.04b0
  3667. CompanyName: Microsoft Corporation
  3668. ProductName: Microsoft® Windows® Operating System
  3669. InternalName: vwifimp.sys
  3670. OriginalFilename: vwifimp.sys
  3671. ProductVersion: 10.0.14393.1198
  3672. FileVersion: 10.0.14393.1198 (rs1_release_sec.170427-1353)
  3673. FileDescription: Virtual WiFi Miniport Driver
  3674. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3675. fffff805`d6400000 fffff805`d640d000 rdpvideominiport (deferred)
  3676. Mapped memory image file: C:\ProgramData\dbg\sym\rdpvideominiport.sys\578997BEd000\rdpvideominiport.sys
  3677. Image path: \SystemRoot\System32\drivers\rdpvideominiport.sys
  3678. Image name: rdpvideominiport.sys
  3679. Timestamp: Fri Jul 15 22:11:10 2016 (578997BE)
  3680. CheckSum: 0000CEFD
  3681. ImageSize: 0000D000
  3682. File version: 10.0.14393.0
  3683. Product version: 10.0.14393.0
  3684. File flags: 0 (Mask 3F)
  3685. File OS: 40004 NT Win32
  3686. File type: 3.0 Driver
  3687. File date: 00000000.00000000
  3688. Translations: 0409.04b0
  3689. CompanyName: Microsoft Corporation
  3690. ProductName: Microsoft® Windows® Operating System
  3691. InternalName: rdpvideominiport.sys
  3692. OriginalFilename: rdpvideominiport.sys
  3693. ProductVersion: 10.0.14393.0
  3694. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  3695. FileDescription: Microsoft RDP Video Miniport driver
  3696. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3697. fffff805`d6410000 fffff805`d6a62000 rikvm_F73955D2 (deferred)
  3698. Image path: \??\C:\WINDOWS\system32\Drivers\rikvm_F73955D2.sys
  3699. Image name: rikvm_F73955D2.sys
  3700. Timestamp: Mon Mar 23 22:53:38 2015 (5510D1B2)
  3701. CheckSum: 0003B396
  3702. ImageSize: 00652000
  3703. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  3704. fffff805`d6a70000 fffff805`d6a9f000 tunnel (deferred)
  3705. Mapped memory image file: C:\ProgramData\dbg\sym\tunnel.sys\57899B4C2f000\tunnel.sys
  3706. Image path: \SystemRoot\System32\drivers\tunnel.sys
  3707. Image name: tunnel.sys
  3708. Timestamp: Fri Jul 15 22:26:20 2016 (57899B4C)
  3709. CheckSum: 0002AF14
  3710. ImageSize: 0002F000
  3711. File version: 10.0.14393.0
  3712. Product version: 10.0.14393.0
  3713. File flags: 0 (Mask 3F)
  3714. File OS: 40004 NT Win32
  3715. File type: 3.6 Driver
  3716. File date: 00000000.00000000
  3717. Translations: 0409.04b0
  3718. CompanyName: Microsoft Corporation
  3719. ProductName: Microsoft® Windows® Operating System
  3720. InternalName: tunnel.sys
  3721. OriginalFilename: tunnel.sys
  3722. ProductVersion: 10.0.14393.0
  3723. FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
  3724. FileDescription: Microsoft Tunnel Interface Driver
  3725. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3726. fffff805`d6ab0000 fffff805`d6ab7000 NTIOLib_X64_fffff805d6ab0000 (deferred)
  3727. Image path: \??\C:\Program Files\Alienware\Command Center\CPU\CPU_Ratio\NTIOLib_X64.sys
  3728. Image name: NTIOLib_X64.sys
  3729. Timestamp: Tue Nov 20 03:19:18 2012 (50AB3D06)
  3730. CheckSum: 00006FFB
  3731. ImageSize: 00007000
  3732. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  3733. fffff805`d6ac0000 fffff805`d6ad7000 klupd_klif_kimul (deferred)
  3734. Image path: \SystemRoot\System32\Drivers\klupd_klif_kimul.sys
  3735. Image name: klupd_klif_kimul.sys
  3736. Timestamp: Mon Feb 6 06:09:33 2017 (5898596D)
  3737. CheckSum: 0001A5E7
  3738. ImageSize: 00017000
  3739. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  3740. fffff805`d6ae0000 fffff805`d6b0b000 klupd_klif_mark (deferred)
  3741. Image path: \SystemRoot\System32\Drivers\klupd_klif_mark.sys
  3742. Image name: klupd_klif_mark.sys
  3743. Timestamp: Thu Mar 30 10:46:51 2017 (58DD1A5B)
  3744. CheckSum: 00039585
  3745. ImageSize: 0002B000
  3746. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  3747. fffff805`d6b10000 fffff805`d6b17000 NTIOLib_X64 (deferred)
  3748. Image path: \??\C:\Program Files (x86)\msi\ODD Monitor\NTIOLib_X64.sys
  3749. Image name: NTIOLib_X64.sys
  3750. Timestamp: Sun Jan 17 21:31:59 2010 (4B53C81F)
  3751. CheckSum: 000057D8
  3752. ImageSize: 00007000
  3753. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  3754. fffff805`d6b20000 fffff805`d6b27000 NTIOLib_X64_fffff805d6b20000 (deferred)
  3755. Image path: \??\C:\Program Files\Alienware\Command Center\DDR\NTIOLib_X64.sys
  3756. Image name: NTIOLib_X64.sys
  3757. Timestamp: Mon Nov 26 05:11:53 2012 (50B34069)
  3758. CheckSum: 000045FC
  3759. ImageSize: 00007000
  3760. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  3761. fffff805`d6b30000 fffff805`d6b37000 NTIOLib_X64_fffff805d6b30000 (deferred)
  3762. Image path: \??\C:\Program Files\Alienware\Command Center\SMBus\NTIOLib_X64.sys
  3763. Image name: NTIOLib_X64.sys
  3764. Timestamp: Sun Nov 18 23:31:30 2012 (50A9B622)
  3765. CheckSum: 0000A019
  3766. ImageSize: 00007000
  3767. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  3768. fffff805`d6b40000 fffff805`d6b47000 NTIOLib_X64_fffff805d6b40000 (deferred)
  3769. Image path: \??\C:\Program Files\Alienware\Command Center\ClockGen\NTIOLib_X64.sys
  3770. Image name: NTIOLib_X64.sys
  3771. Timestamp: Tue Nov 20 03:11:26 2012 (50AB3B2E)
  3772. CheckSum: 00012F13
  3773. ImageSize: 00007000
  3774. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  3775. fffff805`d6b50000 fffff805`d6b57000 NTIOLib_X64_fffff805d6b50000 (deferred)
  3776. Image path: \??\C:\Program Files\Alienware\Command Center\CPU\NTIOLib_X64.sys
  3777. Image name: NTIOLib_X64.sys
  3778. Timestamp: Tue Nov 20 03:14:23 2012 (50AB3BDF)
  3779. CheckSum: 000036EC
  3780. ImageSize: 00007000
  3781. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  3782. fffff805`d6b60000 fffff805`d6b6a000 CorsairVHidDriver (deferred)
  3783. Image path: \SystemRoot\System32\drivers\CorsairVHidDriver.sys
  3784. Image name: CorsairVHidDriver.sys
  3785. Timestamp: Tue Jan 17 11:58:54 2017 (587E4D4E)
  3786. CheckSum: 00012E7E
  3787. ImageSize: 0000A000
  3788. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  3789. fffff805`d6b70000 fffff805`d6b77000 NTIOLib_Thermals_X64 (deferred)
  3790. Image path: \??\C:\Program Files\Alienware\Command Center\NTIOLib_Thermals_X64.sys
  3791. Image name: NTIOLib_Thermals_X64.sys
  3792. Timestamp: Tue Dec 3 03:49:26 2013 (529D9B16)
  3793. CheckSum: 0000CE0B
  3794. ImageSize: 00007000
  3795. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  3796. fffff805`d6bb0000 fffff805`d6bd1000 e22w10x64 (deferred)
  3797. Image path: \SystemRoot\System32\drivers\e22w10x64.sys
  3798. Image name: e22w10x64.sys
  3799. Timestamp: Tue Jul 28 15:16:28 2015 (55B7D50C)
  3800. CheckSum: 0002CDC0
  3801. ImageSize: 00021000
  3802. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  3803. fffffa65`6c600000 fffffa65`6c988000 win32kfull (deferred)
  3804. Image path: \SystemRoot\System32\win32kfull.sys
  3805. Image name: win32kfull.sys
  3806. Timestamp: unavailable (00000000)
  3807. CheckSum: 00000000
  3808. ImageSize: 00388000
  3809. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  3810. fffffa65`6c990000 fffffa65`6cb10000 win32kbase (deferred)
  3811. Image path: \SystemRoot\System32\win32kbase.sys
  3812. Image name: win32kbase.sys
  3813. Timestamp: unavailable (00000000)
  3814. CheckSum: 00000000
  3815. ImageSize: 00180000
  3816. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  3817. fffffa65`6cb20000 fffffa65`6cb2a000 TSDDD (deferred)
  3818. Image path: \SystemRoot\System32\TSDDD.dll
  3819. Image name: TSDDD.dll
  3820. Timestamp: unavailable (00000000)
  3821. CheckSum: 00000000
  3822. ImageSize: 0000A000
  3823. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  3824. fffffa65`6cb30000 fffffa65`6cb91000 ATMFD (deferred)
  3825. Image path: \SystemRoot\System32\ATMFD.DLL
  3826. Image name: ATMFD.DLL
  3827. Timestamp: unavailable (00000000)
  3828. CheckSum: 00000000
  3829. ImageSize: 00061000
  3830. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  3831. fffffa65`6cc00000 fffffa65`6cc40000 cdd (deferred)
  3832. Image path: \SystemRoot\System32\cdd.dll
  3833. Image name: cdd.dll
  3834. Timestamp: unavailable (00000000)
  3835. CheckSum: 00000000
  3836. ImageSize: 00040000
  3837. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  3838. fffffa65`6d160000 fffffa65`6d19b000 win32k (deferred)
  3839. Image path: \SystemRoot\System32\win32k.sys
  3840. Image name: win32k.sys
  3841. Timestamp: unavailable (00000000)
  3842. CheckSum: 00000000
  3843. ImageSize: 0003B000
  3844. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  3845. Unloaded modules:
  3846. fffff805`d6aa0000 fffff805`d6aaf000 hiber_storpo
  3847. Timestamp: unavailable (00000000)
  3848. Checksum: 00000000
  3849. ImageSize: 0000F000
  3850. fffff805`d6b80000 fffff805`d6ba4000 hiber_storah
  3851. Timestamp: unavailable (00000000)
  3852. Checksum: 00000000
  3853. ImageSize: 00024000
  3854. fffff805`d6be0000 fffff805`d6bfd000 hiber_dumpfv
  3855. Timestamp: unavailable (00000000)
  3856. Checksum: 00000000
  3857. ImageSize: 0001D000
  3858. fffff805`d63d0000 fffff805`d63de000 vwifibus.sys
  3859. Timestamp: unavailable (00000000)
  3860. Checksum: 00000000
  3861. ImageSize: 0000E000
  3862. fffff805`d6000000 fffff805`d63cd000 Netwbw02.sys
  3863. Timestamp: unavailable (00000000)
  3864. Checksum: 00000000
  3865. ImageSize: 003CD000
  3866. fffff805`d63e0000 fffff805`d63f1000 vwifimp.sys
  3867. Timestamp: unavailable (00000000)
  3868. Checksum: 00000000
  3869. ImageSize: 00011000
  3870. fffff805`d26e0000 fffff805`d26ee000 vwifibus.sys
  3871. Timestamp: unavailable (00000000)
  3872. Checksum: 00000000
  3873. ImageSize: 0000E000
  3874. fffff805`d2310000 fffff805`d26dd000 Netwbw02.sys
  3875. Timestamp: unavailable (00000000)
  3876. Checksum: 00000000
  3877. ImageSize: 003CD000
  3878. fffff805`d6aa0000 fffff805`d6ab1000 vwifimp.sys
  3879. Timestamp: unavailable (00000000)
  3880. Checksum: 00000000
  3881. ImageSize: 00011000
  3882. fffff805`d6b80000 fffff805`d6ba1000 e22w10x64.sy
  3883. Timestamp: unavailable (00000000)
  3884. Checksum: 00000000
  3885. ImageSize: 00021000
  3886. fffff805`d26f0000 fffff805`d2711000 e22w10x64.sy
  3887. Timestamp: unavailable (00000000)
  3888. Checksum: 00000000
  3889. ImageSize: 00021000
  3890. fffff805`d2850000 fffff805`d285a000 CorsairVHidD
  3891. Timestamp: unavailable (00000000)
  3892. Checksum: 00000000
  3893. ImageSize: 0000A000
  3894. fffff805`cf7f0000 fffff805`cf7ff000 dump_storpor
  3895. Timestamp: unavailable (00000000)
  3896. Checksum: 00000000
  3897. ImageSize: 0000F000
  3898. fffff805`cf830000 fffff805`cf854000 dump_storahc
  3899. Timestamp: unavailable (00000000)
  3900. Checksum: 00000000
  3901. ImageSize: 00024000
  3902. fffff805`cf880000 fffff805`cf89d000 dump_dumpfve
  3903. Timestamp: unavailable (00000000)
  3904. Checksum: 00000000
  3905. ImageSize: 0001D000
  3906. fffff805`d09b0000 fffff805`d09c4000 dam.sys
  3907. Timestamp: unavailable (00000000)
  3908. Checksum: 00000000
  3909. ImageSize: 00014000
  3910. fffff805`d1140000 fffff805`d1163000 VBoxNetAdp6.
  3911. Timestamp: unavailable (00000000)
  3912. Checksum: 00000000
  3913. ImageSize: 00023000
  3914. fffff805`cdfc0000 fffff805`cdfcb000 klelam.sys
  3915. Timestamp: unavailable (00000000)
  3916. Checksum: 00000000
  3917. ImageSize: 0000B000
  3918. fffff805`cf700000 fffff805`cf70f000 hwpolicy.sys
  3919. Timestamp: unavailable (00000000)
  3920. Checksum: 00000000
  3921. ImageSize: 0000F000
  3922.  
  3923. ------------------------------ BIOS INFO -------------------------------
  3924. sysinfo: could not find necessary interfaces.
  3925. sysinfo: note that mssmbios.sys must be loaded (XPSP2+).
  3926. 0: kd> q
  3927. quit:
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!