API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Jul 17th, 2017
185
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 157.96 KB | None | 0 0
raw download clone embed print report
  1. Microsoft (R) Windows Debugger Version 10.0.14321.1024 AMD64
  2. Copyright (c) Microsoft Corporation. All rights reserved.
  3.  
  4. ========================================================================
  5. =================== Dump File: 071717-13390-01.dmp ===================
  6. ========================================================================
  7. Mini Kernel Dump File: Only registers and stack trace are available
  8. Windows 10 Kernel Version 15063 MP (8 procs) Free x64
  9. Product: WinNt, suite: TerminalServer SingleUserTS
  10. Kernel base = 0xfffff800`de407000 PsLoadedModuleList = 0xfffff800`de7535e0
  11. Debug session time: Mon Jul 17 20:37:22.121 2017 (UTC - 4:00)
  12. System Uptime: 0 days 0:00:33.767
  13.  
  14. BugCheck F7, {48c0cf8d70e52, 8c0cf8d70e52, ffff73f30728f1ad, 0}
  15. Probably caused by : ntkrnlmp.exe ( nt!_report_gsfailure+25 )
  16. Followup: MachineOwner
  17. 6: kd> !analyze -v
  18.  
  19. DRIVER_OVERRAN_STACK_BUFFER (f7)
  20. A driver has overrun a stack-based buffer. This overrun could potentially
  21. allow a malicious user to gain control of this machine.
  22. DESCRIPTION
  23. A driver overran a stack-based buffer (or local variable) in a way that would
  24. have overwritten the function's return address and jumped back to an arbitrary
  25. address when the function returned. This is the classic "buffer overrun"
  26. hacking attack and the system has been brought down to prevent a malicious user
  27. from gaining complete control of it.
  28. Do a kb to get a stack backtrace -- the last routine on the stack before the
  29. buffer overrun handlers and bugcheck call is the one that overran its local
  30. variable(s).
  31.  
  32. Arguments:
  33. Arg1: 00048c0cf8d70e52, Actual security check cookie from the stack
  34. Arg2: 00008c0cf8d70e52, Expected security check cookie
  35. Arg3: ffff73f30728f1ad, Complement of the expected security check cookie
  36. Arg4: 0000000000000000, zero
  37.  
  38. Debugging Details:
  39. DUMP_CLASS: 1
  40. DUMP_QUALIFIER: 400
  41. BUILD_VERSION_STRING: 10.0.15063.483 (WinBuild.160101.0800)
  42. SYSTEM_MANUFACTURER: System manufacturer
  43. SYSTEM_PRODUCT_NAME: System Product Name
  44. SYSTEM_SKU: SKU
  45. SYSTEM_VERSION: System Version
  46. BIOS_VENDOR: American Megatrends Inc.
  47. BIOS_VERSION: 0906
  48. BIOS_DATE: 03/22/2017
  49. BASEBOARD_MANUFACTURER: ASUSTeK COMPUTER INC.
  50. BASEBOARD_PRODUCT: MAXIMUS IX HERO
  51. BASEBOARD_VERSION: Rev 1.xx
  52. DUMP_TYPE: 2
  53. DUMP_FILE_ATTRIBUTES: 0x8
  54. Kernel Generated Triage Dump
  55. SECURITY_COOKIE: Expected 00008c0cf8d70e52 found 00048c0cf8d70e52
  56. BUGCHECK_STR: 0xF7_ONE_BIT
  57. CPU_COUNT: 8
  58. CPU_MHZ: 1068
  59. CPU_VENDOR: GenuineIntel
  60. CPU_FAMILY: 6
  61. CPU_MODEL: 9e
  62. CPU_STEPPING: 9
  63. CPU_MICROCODE: 6,9e,9,0 (F,M,S,R) SIG: 42'00000000 (cache) 42'00000000 (init)
  64. CUSTOMER_CRASH_COUNT: 1
  65. DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
  66.  
  67. PROCESS_NAME: svchost.exe
  68.  
  69. CURRENT_IRQL: 2
  70. ANALYSIS_SESSION_HOST: USERNAME-PC
  71. ANALYSIS_SESSION_TIME: 07-17-2017 21:01:03.0242
  72. ANALYSIS_VERSION: 10.0.14321.1024 amd64fre
  73. EXCEPTION_RECORD: ffffd7ebc08a3988 -- (.exr 0xffffd7ebc08a3988)
  74. Cannot read Exception record @ ffffd7ebc08a3988
  75. LAST_CONTROL_TRANSFER: from fffff800de5e1905 to fffff800de5734c0
  76. STACK_TEXT:
  77. ffff9801`c7600178 fffff800`de5e1905 : 00000000`000000f7 00048c0c`f8d70e52 00008c0c`f8d70e52 ffff73f3`0728f1ad : nt!KeBugCheckEx
  78. ffff9801`c7600180 fffff800`de5620d7 : ffff810a`f24f6960 fffff804`2628b0d2 ffff810a`f2567a40 ffff810a`f24f6d93 : nt!_report_gsfailure+0x25
  79. ffff9801`c76001c0 fffff800`de57999d : fffff800`de791000 fffff800`de407000 00053694`00889000 00000000`1337fc00 : nt!_GSHandlerCheck+0x13
  80. ffff9801`c76001f0 fffff800`de432d94 : 00000000`00000026 ffff9801`c7600320 00000000`00000000 00000000`00000000 : nt!RtlpExecuteHandlerForException+0xd
  81. ffff9801`c7600220 fffff800`de431b36 : ffff9801`c76010f8 ffff9801`c7600e40 ffff9801`c76010f8 ffff9801`c76010f8 : nt!RtlDispatchException+0x404
  82. ffff9801`c7600910 fffff800`de57e98e : ffffd7eb`c08a3988 00000228`e621b000 00000000`00000000 ffff810a`f165ccc0 : nt!KiDispatchException+0x1f6
  83. ffff9801`c7600fc0 fffff800`de57cc34 : 00000000`00000000 ffff9801`c7601320 ffffad0f`c0dc09d0 ffff9801`c76015d0 : nt!KiExceptionDispatch+0xce
  84. ffff9801`c76011a0 fffff800`de578794 : 00000000`00000000 00000000`00000000 ffff810a`ea3d27c0 ffff810a`ea0cf9c0 : nt!KiGeneralProtectionFault+0xf4
  85. ffff9801`c7601330 fffff800`de5782f6 : ffffad0f`c13509a0 00000000`00000000 00000000`00000000 fffff800`de4689f7 : nt!SwapContext+0x1e4
  86. ffff9801`c7601370 fffff800`de43aa9a : 0a000001`00000000 00000000`00000000 ffff810a`00000000 00000000`00000000 : nt!KiSwapContext+0x76
  87. ffff9801`c76014b0 fffff800`de43a461 : ffff810a`00000001 ffffd7bf`feec8f40 00040000`00000000 00000000`00000000 : nt!KiSwapThread+0x16a
  88. ffff9801`c7601560 fffff800`de4392e8 : 00000000`00000000 00000000`00000000 fffff800`de784100 ffff810a`f2743300 : nt!KiCommitThreadWait+0x101
  89. ffff9801`c7601600 fffff800`de438dfd : ffff810a`f2743300 fffff800`de784101 00000000`00000001 00000000`00000000 : nt!KeRemoveQueueEx+0x238
  90. ffff9801`c76016b0 fffff800`de437beb : 00ffff81`0aea559b ffff810a`ea559db0 ffff810a`00000000 ffff810a`ea559ba0 : nt!IoRemoveIoCompletion+0x8d
  91. ffff9801`c76017d0 fffff800`de57e413 : 00000000`00000000 ffff810a`f1ef1890 ffffad0f`c0efce00 ffffad0f`00000001 : nt!NtWaitForWorkViaWorkerFactory+0x30b
  92. ffff9801`c7601a10 00007ffd`db3e8c34 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
  93. 0000007d`44aff968 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffd`db3e8c34
  94. STACK_COMMAND: kb
  95. THREAD_SHA1_HASH_MOD_FUNC: 8f20d60503d024207b1ecd1fdde13aef9ecb7920
  96. THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 8328d665e69dd023a795221c8baf4a0ccb7ac7a8
  97. THREAD_SHA1_HASH_MOD: 9eef8c7ca0ce66f8b8b34848179f303828cff762
  98. FOLLOWUP_IP:
  99. nt!_report_gsfailure+25
  100. fffff800`de5e1905 cc int 3
  101. FAULT_INSTR_CODE: cccccccc
  102. SYMBOL_STACK_INDEX: 1
  103. SYMBOL_NAME: nt!_report_gsfailure+25
  104. FOLLOWUP_NAME: MachineOwner
  105. MODULE_NAME: nt
  106.  
  107. IMAGE_NAME: ntkrnlmp.exe
  108.  
  109. DEBUG_FLR_IMAGE_TIMESTAMP: 595f24eb
  110. IMAGE_VERSION: 10.0.15063.483
  111. BUCKET_ID_FUNC_OFFSET: 25
  112. FAILURE_BUCKET_ID: 0xF7_ONE_BIT_MISSING_GSFRAME_nt!_report_gsfailure
  113. BUCKET_ID: 0xF7_ONE_BIT_MISSING_GSFRAME_nt!_report_gsfailure
  114. PRIMARY_PROBLEM_CLASS: 0xF7_ONE_BIT_MISSING_GSFRAME_nt!_report_gsfailure
  115. TARGET_TIME: 2017-07-18T00:37:22.000Z
  116. OSBUILD: 15063
  117. OSSERVICEPACK: 483
  118. SERVICEPACK_NUMBER: 0
  119. OS_REVISION: 0
  120. SUITE_MASK: 272
  121. PRODUCT_TYPE: 1
  122. OSPLATFORM_TYPE: x64
  123. OSNAME: Windows 10
  124. OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
  125. USER_LCID: 0
  126. OSBUILD_TIMESTAMP: 2017-07-07 02:06:35
  127. BUILDDATESTAMP_STR: 160101.0800
  128. BUILDLAB_STR: WinBuild
  129. BUILDOSVER_STR: 10.0.15063.483
  130. ANALYSIS_SESSION_ELAPSED_TIME: 5fe
  131. ANALYSIS_SOURCE: KM
  132. FAILURE_ID_HASH_STRING: km:0xf7_one_bit_missing_gsframe_nt!_report_gsfailure
  133. FAILURE_ID_HASH: {8f84f302-dd0e-1f96-6f9c-0ea31ad59f42}
  134. Followup: MachineOwner
  135.  
  136. ========================================================================
  137. ============================ Driver List ===============================
  138. ========================================================================
  139. start end module name
  140. ffffacce`41800000 ffffacce`41b93000 win32kfull (deferred)
  141. Mapped memory image file: C:\ProgramData\dbg\sym\win32kfull.sys\41105314393000\win32kfull.sys
  142. Image path: win32kfull.sys
  143. Image name: win32kfull.sys
  144. Timestamp: Tue Aug 3 23:08:04 2004 (41105314)
  145. CheckSum: 003844BB
  146. ImageSize: 00393000
  147. File version: 10.0.15063.478
  148. Product version: 10.0.15063.478
  149. File flags: 0 (Mask 3F)
  150. File OS: 40004 NT Win32
  151. File type: 3.7 Driver
  152. File date: 00000000.00000000
  153. Translations: 0409.04b0
  154. CompanyName: Microsoft Corporation
  155. ProductName: Microsoft® Windows® Operating System
  156. InternalName: win32kfull.sys
  157. OriginalFilename: win32kfull.sys
  158. ProductVersion: 10.0.15063.478
  159. FileVersion: 10.0.15063.478 (WinBuild.160101.0800)
  160. FileDescription: Full/Desktop Win32k Kernel Driver
  161. LegalCopyright: © Microsoft Corporation. All rights reserved.
  162. ffffacce`41ba0000 ffffacce`41da6000 win32kbase (deferred)
  163. Mapped memory image file: C:\ProgramData\dbg\sym\win32kbase.sys\2CDDD6B0206000\win32kbase.sys
  164. Image path: win32kbase.sys
  165. Image name: win32kbase.sys
  166. Timestamp: Mon Nov 8 00:18:40 1993 (2CDDD6B0)
  167. CheckSum: 001F783B
  168. ImageSize: 00206000
  169. File version: 10.0.15063.477
  170. Product version: 10.0.15063.477
  171. File flags: 0 (Mask 3F)
  172. File OS: 40004 NT Win32
  173. File type: 3.7 Driver
  174. File date: 00000000.00000000
  175. Translations: 0409.04b0
  176. CompanyName: Microsoft Corporation
  177. ProductName: Microsoft® Windows® Operating System
  178. InternalName: win32kbase.sys
  179. OriginalFilename: win32kbase.sys
  180. ProductVersion: 10.0.15063.477
  181. FileVersion: 10.0.15063.477 (WinBuild.160101.0800)
  182. FileDescription: Base Win32k Kernel Driver
  183. LegalCopyright: © Microsoft Corporation. All rights reserved.
  184. ffffacce`41dc0000 ffffacce`41dca000 TSDDD (deferred)
  185. Mapped memory image file: C:\ProgramData\dbg\sym\TSDDD.dll\F622DB7Ea000\TSDDD.dll
  186. Image path: TSDDD.dll
  187. Image name: TSDDD.dll
  188. Timestamp: ***** Invalid (F622DB7E)
  189. CheckSum: 000074F8
  190. ImageSize: 0000A000
  191. File version: 10.0.15004.1000
  192. Product version: 10.0.15004.1000
  193. File flags: 0 (Mask 3F)
  194. File OS: 40004 NT Win32
  195. File type: 3.4 Driver
  196. File date: 00000000.00000000
  197. Translations: 0000.04b0
  198. CompanyName: Microsoft Corporation
  199. ProductName: Microsoft® Windows® Operating System
  200. InternalName: framebuf.dll
  201. OriginalFilename: framebuf.dll
  202. ProductVersion: 10.0.15004.1000
  203. FileVersion: 10.0.15004.1000 (WinBuild.160101.0800)
  204. FileDescription: Framebuffer Display Driver
  205. LegalCopyright: © Microsoft Corporation. All rights reserved.
  206. ffffacce`41dd0000 ffffacce`41e11000 cdd (deferred)
  207. Mapped memory image file: C:\ProgramData\dbg\sym\cdd.dll\9A421E1E41000\cdd.dll
  208. Image path: cdd.dll
  209. Image name: cdd.dll
  210. Timestamp: ***** Invalid (9A421E1E)
  211. CheckSum: 00045DB4
  212. ImageSize: 00041000
  213. File version: 10.0.15058.0
  214. Product version: 10.0.15058.0
  215. File flags: 0 (Mask 3F)
  216. File OS: 40004 NT Win32
  217. File type: 3.4 Driver
  218. File date: 00000000.00000000
  219. Translations: 0000.04b0
  220. CompanyName: Microsoft Corporation
  221. ProductName: Microsoft® Windows® Operating System
  222. InternalName: cdd.dll
  223. OriginalFilename: cdd.dll
  224. ProductVersion: 10.0.15058.0
  225. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  226. FileDescription: Canonical Display Driver
  227. LegalCopyright: © Microsoft Corporation. All rights reserved.
  228. ffffacce`42560000 ffffacce`425d4000 win32k (deferred)
  229. Mapped memory image file: C:\ProgramData\dbg\sym\win32k.sys\46FD924F74000\win32k.sys
  230. Image path: win32k.sys
  231. Image name: win32k.sys
  232. Timestamp: Fri Sep 28 19:46:23 2007 (46FD924F)
  233. CheckSum: 0007C4FE
  234. ImageSize: 00074000
  235. File version: 10.0.15052.0
  236. Product version: 10.0.15052.0
  237. File flags: 0 (Mask 3F)
  238. File OS: 40004 NT Win32
  239. File type: 3.7 Driver
  240. File date: 00000000.00000000
  241. Translations: 0409.04b0
  242. CompanyName: Microsoft Corporation
  243. ProductName: Microsoft® Windows® Operating System
  244. InternalName: win32k.sys
  245. OriginalFilename: win32k.sys
  246. ProductVersion: 10.0.15052.0
  247. FileVersion: 10.0.15052.0 (WinBuild.160101.0800)
  248. FileDescription: Full/Desktop Multi-User Win32 Driver
  249. LegalCopyright: © Microsoft Corporation. All rights reserved.
  250. fffff800`de407000 fffff800`dec90000 nt (pdb symbols) C:\ProgramData\dbg\sym\ntkrnlmp.pdb\DDA812F4AC284269AB8073D8423801A41\ntkrnlmp.pdb
  251. Loaded symbol image file: ntkrnlmp.exe
  252. Mapped memory image file: C:\ProgramData\dbg\sym\ntoskrnl.exe\595F24EB889000\ntoskrnl.exe
  253. Image path: ntkrnlmp.exe
  254. Image name: ntkrnlmp.exe
  255. Timestamp: Fri Jul 7 02:06:35 2017 (595F24EB)
  256. CheckSum: 007FA636
  257. ImageSize: 00889000
  258. File version: 10.0.15063.483
  259. Product version: 10.0.15063.483
  260. File flags: 0 (Mask 3F)
  261. File OS: 40004 NT Win32
  262. File type: 1.0 App
  263. File date: 00000000.00000000
  264. Translations: 0409.04b0
  265. CompanyName: Microsoft Corporation
  266. ProductName: Microsoft® Windows® Operating System
  267. InternalName: ntkrnlmp.exe
  268. OriginalFilename: ntkrnlmp.exe
  269. ProductVersion: 10.0.15063.483
  270. FileVersion: 10.0.15063.483 (WinBuild.160101.0800)
  271. FileDescription: NT Kernel & System
  272. LegalCopyright: © Microsoft Corporation. All rights reserved.
  273. fffff800`dec90000 fffff800`ded0c000 hal (deferred)
  274. Mapped memory image file: C:\ProgramData\dbg\sym\hal.dll\CEA0A6467c000\hal.dll
  275. Image path: hal.dll
  276. Image name: hal.dll
  277. Timestamp: ***** Invalid (CEA0A646)
  278. CheckSum: 000795FE
  279. ImageSize: 0007C000
  280. File version: 10.0.15058.0
  281. Product version: 10.0.15058.0
  282. File flags: 0 (Mask 3F)
  283. File OS: 40004 NT Win32
  284. File type: 2.0 Dll
  285. File date: 00000000.00000000
  286. Translations: 0409.04b0
  287. CompanyName: Microsoft Corporation
  288. ProductName: Microsoft® Windows® Operating System
  289. InternalName: hal.dll
  290. OriginalFilename: hal.dll
  291. ProductVersion: 10.0.15058.0
  292. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  293. FileDescription: Hardware Abstraction Layer DLL
  294. LegalCopyright: © Microsoft Corporation. All rights reserved.
  295. fffff800`dee00000 fffff800`dee0b000 kdcom (deferred)
  296. Image path: kdcom.dll
  297. Image name: kdcom.dll
  298. Timestamp: ***** Invalid (91688416)
  299. CheckSum: 0000C219
  300. ImageSize: 0000B000
  301. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  302. fffff800`f2c00000 fffff800`f30cf000 dump_iaStorA (deferred)
  303. Image path: dump_iaStorA.sys
  304. Image name: dump_iaStorA.sys
  305. Timestamp: Tue Sep 13 10:45:46 2016 (57D8111A)
  306. CheckSum: 000C550F
  307. ImageSize: 004CF000
  308. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  309. fffff800`f30f0000 fffff800`f310d000 dump_dumpfve (deferred)
  310. Mapped memory image file: C:\ProgramData\dbg\sym\dumpfve.sys\B65817D61d000\dumpfve.sys
  311. Image path: dump_dumpfve.sys
  312. Image name: dump_dumpfve.sys
  313. Timestamp: ***** Invalid (B65817D6)
  314. CheckSum: 0001EA4A
  315. ImageSize: 0001D000
  316. File version: 10.0.15046.0
  317. Product version: 10.0.15046.0
  318. File flags: 0 (Mask 3F)
  319. File OS: 40004 NT Win32
  320. File type: 3.7 Driver
  321. File date: 00000000.00000000
  322. Translations: 0000.04b0
  323. CompanyName: Microsoft Corporation
  324. ProductName: Microsoft® Windows® Operating System
  325. InternalName: dumpfve.sys
  326. OriginalFilename: dumpfve.sys
  327. ProductVersion: 10.0.15046.0
  328. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  329. FileDescription: Bitlocker Drive Encryption Crashdump Filter
  330. LegalCopyright: © Microsoft Corporation. All rights reserved.
  331. fffff800`f3110000 fffff800`f31c3000 dxgmms2 (deferred)
  332. Mapped memory image file: C:\ProgramData\dbg\sym\dxgmms2.sys\ABB616E9b3000\dxgmms2.sys
  333. Image path: dxgmms2.sys
  334. Image name: dxgmms2.sys
  335. Timestamp: ***** Invalid (ABB616E9)
  336. CheckSum: 000AE8C9
  337. ImageSize: 000B3000
  338. File version: 10.0.15063.312
  339. Product version: 10.0.15063.312
  340. File flags: 0 (Mask 3F)
  341. File OS: 40004 NT Win32
  342. File type: 3.7 Driver
  343. File date: 00000000.00000000
  344. Translations: 0409.04b0
  345. CompanyName: Microsoft Corporation
  346. ProductName: Microsoft® Windows® Operating System
  347. InternalName: dxgmms2.sys
  348. OriginalFilename: dxgmms2.sys
  349. ProductVersion: 10.0.15063.312
  350. FileVersion: 10.0.15063.312 (WinBuild.160101.0800)
  351. FileDescription: DirectX Graphics MMS
  352. LegalCopyright: © Microsoft Corporation. All rights reserved.
  353. fffff800`f31d0000 fffff800`f31e1000 monitor (deferred)
  354. Mapped memory image file: C:\ProgramData\dbg\sym\monitor.sys\546AA4AB11000\monitor.sys
  355. Image path: monitor.sys
  356. Image name: monitor.sys
  357. Timestamp: Mon Nov 17 20:45:15 2014 (546AA4AB)
  358. CheckSum: 0000E236
  359. ImageSize: 00011000
  360. File version: 10.0.15058.0
  361. Product version: 10.0.15058.0
  362. File flags: 0 (Mask 3F)
  363. File OS: 40004 NT Win32
  364. File type: 3.7 Driver
  365. File date: 00000000.00000000
  366. Translations: 0409.04b0
  367. CompanyName: Microsoft Corporation
  368. ProductName: Microsoft® Windows® Operating System
  369. InternalName: monitor.sys
  370. OriginalFilename: monitor.sys
  371. ProductVersion: 10.0.15058.0
  372. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  373. FileDescription: Monitor Driver
  374. LegalCopyright: © Microsoft Corporation. All rights reserved.
  375. fffff800`f31f0000 fffff800`f3216000 luafv (deferred)
  376. Mapped memory image file: C:\ProgramData\dbg\sym\luafv.sys\7ED7BCAF26000\luafv.sys
  377. Image path: luafv.sys
  378. Image name: luafv.sys
  379. Timestamp: Mon Jun 8 05:55:59 2037 (7ED7BCAF)
  380. CheckSum: 00027EE2
  381. ImageSize: 00026000
  382. File version: 10.0.15058.0
  383. Product version: 10.0.15058.0
  384. File flags: 0 (Mask 3F)
  385. File OS: 40004 NT Win32
  386. File type: 3.7 Driver
  387. File date: 00000000.00000000
  388. Translations: 0409.04b0
  389. CompanyName: Microsoft Corporation
  390. ProductName: Microsoft® Windows® Operating System
  391. InternalName: luafv.sys
  392. OriginalFilename: luafv.sys
  393. ProductVersion: 10.0.15058.0
  394. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  395. FileDescription: LUA File Virtualization Filter Driver
  396. LegalCopyright: © Microsoft Corporation. All rights reserved.
  397. fffff800`f3220000 fffff800`f3246000 wcifs (deferred)
  398. Mapped memory image file: C:\ProgramData\dbg\sym\wcifs.sys\CE08A39126000\wcifs.sys
  399. Image path: wcifs.sys
  400. Image name: wcifs.sys
  401. Timestamp: ***** Invalid (CE08A391)
  402. CheckSum: 0003046A
  403. ImageSize: 00026000
  404. File version: 10.0.15063.442
  405. Product version: 10.0.15063.442
  406. File flags: 0 (Mask 3F)
  407. File OS: 40004 NT Win32
  408. File type: 3.7 Driver
  409. File date: 00000000.00000000
  410. Translations: 0409.04b0
  411. CompanyName: Microsoft Corporation
  412. ProductName: Microsoft® Windows® Operating System
  413. InternalName: wcifs.sys
  414. OriginalFilename: wcifs.sys
  415. ProductVersion: 10.0.15063.442
  416. FileVersion: 10.0.15063.442 (WinBuild.160101.0800)
  417. FileDescription: Windows Container Isolation FS Filter Driver
  418. LegalCopyright: © Microsoft Corporation. All rights reserved.
  419. fffff800`f3260000 fffff800`f3279000 storqosflt (deferred)
  420. Mapped memory image file: C:\ProgramData\dbg\sym\storqosflt.sys\56737F3B19000\storqosflt.sys
  421. Image path: storqosflt.sys
  422. Image name: storqosflt.sys
  423. Timestamp: Thu Dec 17 22:36:27 2015 (56737F3B)
  424. CheckSum: 00016F44
  425. ImageSize: 00019000
  426. File version: 10.0.15046.0
  427. Product version: 10.0.15046.0
  428. File flags: 0 (Mask 3F)
  429. File OS: 40004 NT Win32
  430. File type: 3.7 Driver
  431. File date: 00000000.00000000
  432. Translations: 0409.04b0
  433. CompanyName: Microsoft Corporation
  434. ProductName: Microsoft® Windows® Operating System
  435. InternalName: storqosflt.sys
  436. OriginalFilename: storqosflt.sys
  437. ProductVersion: 10.0.15046.0
  438. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  439. FileDescription: Storage QoS Filter
  440. LegalCopyright: © Microsoft Corporation. All rights reserved.
  441. fffff800`f3280000 fffff800`f328b000 registry (deferred)
  442. Mapped memory image file: C:\ProgramData\dbg\sym\registry.sys\A10D8E26b000\registry.sys
  443. Image path: registry.sys
  444. Image name: registry.sys
  445. Timestamp: ***** Invalid (A10D8E26)
  446. CheckSum: 000113F7
  447. ImageSize: 0000B000
  448. File version: 10.0.15004.1000
  449. Product version: 10.0.15004.1000
  450. File flags: 0 (Mask 3F)
  451. File OS: 40004 NT Win32
  452. File type: 3.7 Driver
  453. File date: 00000000.00000000
  454. Translations: 0409.04b0
  455. CompanyName: Microsoft Corporation
  456. ProductName: Microsoft® Windows® Operating System
  457. InternalName: registry.sys
  458. OriginalFilename: registry.sys
  459. ProductVersion: 10.0.15004.1000
  460. FileVersion: 10.0.15004.1000 (WinBuild.160101.0800)
  461. FileDescription: Registry Containment Driver
  462. LegalCopyright: © Microsoft Corporation. All rights reserved.
  463. fffff800`f3290000 fffff800`f32aa000 mslldp (deferred)
  464. Mapped memory image file: C:\ProgramData\dbg\sym\mslldp.sys\C33AB00E1a000\mslldp.sys
  465. Image path: mslldp.sys
  466. Image name: mslldp.sys
  467. Timestamp: ***** Invalid (C33AB00E)
  468. CheckSum: 00016E1F
  469. ImageSize: 0001A000
  470. File version: 10.0.15058.0
  471. Product version: 10.0.15058.0
  472. File flags: 0 (Mask 3F)
  473. File OS: 40004 NT Win32
  474. File type: 3.6 Driver
  475. File date: 00000000.00000000
  476. Translations: 0409.04b0
  477. CompanyName: Microsoft Corporation
  478. ProductName: Microsoft® Windows® Operating System
  479. InternalName: MSLLDP.SYS
  480. OriginalFilename: MSLLDP.SYS
  481. ProductVersion: 10.0.15058.0
  482. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  483. FileDescription: Microsoft Link-Layer Discovery Protocol Driver
  484. LegalCopyright: © Microsoft Corporation. All rights reserved.
  485. fffff800`f32b0000 fffff800`f32c6000 lltdio (deferred)
  486. Mapped memory image file: C:\ProgramData\dbg\sym\lltdio.sys\DD62481516000\lltdio.sys
  487. Image path: lltdio.sys
  488. Image name: lltdio.sys
  489. Timestamp: ***** Invalid (DD624815)
  490. CheckSum: 000188CA
  491. ImageSize: 00016000
  492. File version: 10.0.15052.0
  493. Product version: 10.0.15052.0
  494. File flags: 0 (Mask 3F)
  495. File OS: 40004 NT Win32
  496. File type: 3.6 Driver
  497. File date: 00000000.00000000
  498. Translations: 0409.04b0
  499. CompanyName: Microsoft Corporation
  500. ProductName: Microsoft® Windows® Operating System
  501. InternalName: LLTDIO.SYS
  502. OriginalFilename: LLTDIO.SYS
  503. ProductVersion: 10.0.15052.0
  504. FileVersion: 10.0.15052.0 (WinBuild.160101.0800)
  505. FileDescription: Link-Layer Topology Mapper I/O Driver
  506. LegalCopyright: © Microsoft Corporation. All rights reserved.
  507. fffff800`f32d0000 fffff800`f32ea000 rspndr (deferred)
  508. Mapped memory image file: C:\ProgramData\dbg\sym\rspndr.sys\283736811a000\rspndr.sys
  509. Image path: rspndr.sys
  510. Image name: rspndr.sys
  511. Timestamp: Sun May 19 22:37:53 1991 (28373681)
  512. CheckSum: 00017DD9
  513. ImageSize: 0001A000
  514. File version: 10.0.15058.0
  515. Product version: 10.0.15058.0
  516. File flags: 0 (Mask 3F)
  517. File OS: 40004 NT Win32
  518. File type: 3.6 Driver
  519. File date: 00000000.00000000
  520. Translations: 0409.04b0
  521. CompanyName: Microsoft Corporation
  522. ProductName: Microsoft® Windows® Operating System
  523. InternalName: RSPNDR.SYS
  524. OriginalFilename: RSPNDR.SYS
  525. ProductVersion: 10.0.15058.0
  526. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  527. FileDescription: Link-Layer Topology Responder Driver for NDIS 6
  528. LegalCopyright: © Microsoft Corporation. All rights reserved.
  529. fffff800`f32f0000 fffff800`f3404000 HTTP (deferred)
  530. Mapped memory image file: C:\ProgramData\dbg\sym\HTTP.sys\CC93E16B114000\HTTP.sys
  531. Image path: HTTP.sys
  532. Image name: HTTP.sys
  533. Timestamp: ***** Invalid (CC93E16B)
  534. CheckSum: 00117882
  535. ImageSize: 00114000
  536. File version: 10.0.15063.470
  537. Product version: 10.0.15063.470
  538. File flags: 0 (Mask 3F)
  539. File OS: 40004 NT Win32
  540. File type: 3.7 Driver
  541. File date: 00000000.00000000
  542. Translations: 0409.04b0
  543. CompanyName: Microsoft Corporation
  544. ProductName: Microsoft® Windows® Operating System
  545. InternalName: http.sys
  546. OriginalFilename: http.sys
  547. ProductVersion: 10.0.15063.470
  548. FileVersion: 10.0.15063.470 (WinBuild.160101.0800)
  549. FileDescription: HTTP Protocol Stack
  550. LegalCopyright: © Microsoft Corporation. All rights reserved.
  551. fffff800`f3410000 fffff800`f3431000 bowser (deferred)
  552. Mapped memory image file: C:\ProgramData\dbg\sym\bowser.sys\B091348621000\bowser.sys
  553. Image path: bowser.sys
  554. Image name: bowser.sys
  555. Timestamp: ***** Invalid (B0913486)
  556. CheckSum: 00021EC6
  557. ImageSize: 00021000
  558. File version: 10.0.15058.0
  559. Product version: 10.0.15058.0
  560. File flags: 0 (Mask 3F)
  561. File OS: 40004 NT Win32
  562. File type: 3.7 Driver
  563. File date: 00000000.00000000
  564. Translations: 0409.04b0
  565. CompanyName: Microsoft Corporation
  566. ProductName: Microsoft® Windows® Operating System
  567. InternalName: browser.sys
  568. OriginalFilename: browser.sys
  569. ProductVersion: 10.0.15058.0
  570. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  571. FileDescription: NT Lan Manager Datagram Receiver Driver
  572. LegalCopyright: © Microsoft Corporation. All rights reserved.
  573. fffff800`f3440000 fffff800`f345a000 mpsdrv (deferred)
  574. Mapped memory image file: C:\ProgramData\dbg\sym\mpsdrv.sys\148326721a000\mpsdrv.sys
  575. Image path: mpsdrv.sys
  576. Image name: mpsdrv.sys
  577. Timestamp: Wed Nov 26 21:16:18 1980 (14832672)
  578. CheckSum: 0001A5AB
  579. ImageSize: 0001A000
  580. File version: 10.0.15058.0
  581. Product version: 10.0.15058.0
  582. File flags: 0 (Mask 3F)
  583. File OS: 40004 NT Win32
  584. File type: 3.7 Driver
  585. File date: 00000000.00000000
  586. Translations: 0409.04b0
  587. CompanyName: Microsoft Corporation
  588. ProductName: Microsoft® Windows® Operating System
  589. InternalName: mpsdrv.sys
  590. OriginalFilename: mpsdrv.sys
  591. ProductVersion: 10.0.15058.0
  592. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  593. FileDescription: Microsoft Protection Service Driver
  594. LegalCopyright: © Microsoft Corporation. All rights reserved.
  595. fffff800`f3460000 fffff800`f34db000 mrxsmb (deferred)
  596. Mapped memory image file: C:\ProgramData\dbg\sym\mrxsmb.sys\41707DB67b000\mrxsmb.sys
  597. Image path: mrxsmb.sys
  598. Image name: mrxsmb.sys
  599. Timestamp: Fri Oct 15 21:47:34 2004 (41707DB6)
  600. CheckSum: 000761DC
  601. ImageSize: 0007B000
  602. File version: 10.0.15058.0
  603. Product version: 10.0.15058.0
  604. File flags: 0 (Mask 3F)
  605. File OS: 40004 NT Win32
  606. File type: 3.7 Driver
  607. File date: 00000000.00000000
  608. Translations: 0409.04b0
  609. CompanyName: Microsoft Corporation
  610. ProductName: Microsoft® Windows® Operating System
  611. InternalName: MRxSmb.sys
  612. OriginalFilename: MRXSMB.Sys
  613. ProductVersion: 10.0.15058.0
  614. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  615. FileDescription: Windows NT SMB Minirdr
  616. LegalCopyright: © Microsoft Corporation. All rights reserved.
  617. fffff800`f34e0000 fffff800`f351d000 mrxsmb20 (deferred)
  618. Mapped memory image file: C:\ProgramData\dbg\sym\mrxsmb20.sys\4FC9BDCC3d000\mrxsmb20.sys
  619. Image path: mrxsmb20.sys
  620. Image name: mrxsmb20.sys
  621. Timestamp: Sat Jun 2 03:16:28 2012 (4FC9BDCC)
  622. CheckSum: 00041784
  623. ImageSize: 0003D000
  624. File version: 10.0.15063.468
  625. Product version: 10.0.15063.468
  626. File flags: 0 (Mask 3F)
  627. File OS: 40004 NT Win32
  628. File type: 3.7 Driver
  629. File date: 00000000.00000000
  630. Translations: 0409.04b0
  631. CompanyName: Microsoft Corporation
  632. ProductName: Microsoft® Windows® Operating System
  633. InternalName: MRxSmb20.sys
  634. OriginalFilename: MRXSMB20.Sys
  635. ProductVersion: 10.0.15063.468
  636. FileVersion: 10.0.15063.468 (WinBuild.160101.0800)
  637. FileDescription: Longhorn SMB 2.0 Redirector
  638. LegalCopyright: © Microsoft Corporation. All rights reserved.
  639. fffff800`f3520000 fffff800`f3566000 srvnet (deferred)
  640. Mapped memory image file: C:\ProgramData\dbg\sym\srvnet.sys\525EB0E046000\srvnet.sys
  641. Image path: srvnet.sys
  642. Image name: srvnet.sys
  643. Timestamp: Wed Oct 16 11:29:36 2013 (525EB0E0)
  644. CheckSum: 0004A0FD
  645. ImageSize: 00046000
  646. File version: 10.0.15058.0
  647. Product version: 10.0.15058.0
  648. File flags: 0 (Mask 3F)
  649. File OS: 40004 NT Win32
  650. File type: 3.6 Driver
  651. File date: 00000000.00000000
  652. Translations: 0409.04b0
  653. CompanyName: Microsoft Corporation
  654. ProductName: Microsoft® Windows® Operating System
  655. InternalName: SRVNET.SYS
  656. OriginalFilename: SRVNET.SYS
  657. ProductVersion: 10.0.15058.0
  658. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  659. FileDescription: Server Network driver
  660. LegalCopyright: © Microsoft Corporation. All rights reserved.
  661. fffff800`f3570000 fffff800`f3578000 lgcoretemp (deferred)
  662. Image path: lgcoretemp.sys
  663. Image name: lgcoretemp.sys
  664. Timestamp: Tue Jun 9 12:52:10 2015 (557719BA)
  665. CheckSum: 00006F93
  666. ImageSize: 00008000
  667. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  668. fffff800`f3580000 fffff800`f3594000 mmcss (deferred)
  669. Mapped memory image file: C:\ProgramData\dbg\sym\mmcss.sys\95EC281D14000\mmcss.sys
  670. Image path: mmcss.sys
  671. Image name: mmcss.sys
  672. Timestamp: ***** Invalid (95EC281D)
  673. CheckSum: 000165DE
  674. ImageSize: 00014000
  675. File version: 10.0.15058.0
  676. Product version: 10.0.15058.0
  677. File flags: 0 (Mask 3F)
  678. File OS: 40004 NT Win32
  679. File type: 3.7 Driver
  680. File date: 00000000.00000000
  681. Translations: 0409.04b0
  682. CompanyName: Microsoft Corporation
  683. ProductName: Microsoft® Windows® Operating System
  684. InternalName: mmcss.sys
  685. OriginalFilename: mmcss.sys
  686. ProductVersion: 10.0.15058.0
  687. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  688. FileDescription: MMCSS Driver
  689. LegalCopyright: © Microsoft Corporation. All rights reserved.
  690. fffff800`f35a0000 fffff800`f35c6000 Ndu (deferred)
  691. Mapped memory image file: C:\ProgramData\dbg\sym\Ndu.sys\84A4289326000\Ndu.sys
  692. Image path: Ndu.sys
  693. Image name: Ndu.sys
  694. Timestamp: ***** Invalid (84A42893)
  695. CheckSum: 000290F8
  696. ImageSize: 00026000
  697. File version: 10.0.15058.0
  698. Product version: 10.0.15058.0
  699. File flags: 0 (Mask 3F)
  700. File OS: 40004 NT Win32
  701. File type: 3.6 Driver
  702. File date: 00000000.00000000
  703. Translations: 0409.04b0
  704. CompanyName: Microsoft Corporation
  705. ProductName: Microsoft® Windows® Operating System
  706. InternalName: ndu.sys
  707. OriginalFilename: ndu.sys
  708. ProductVersion: 10.0.15058.0
  709. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  710. FileDescription: Windows Network Data Usage Monitoring Driver
  711. LegalCopyright: © Microsoft Corporation. All rights reserved.
  712. fffff800`f35d0000 fffff800`f3696000 peauth (deferred)
  713. Image path: peauth.sys
  714. Image name: peauth.sys
  715. Timestamp: Sat Dec 9 21:03:08 1989 (2581B95C)
  716. CheckSum: 000C12D5
  717. ImageSize: 000C6000
  718. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  719. fffff800`f36a0000 fffff800`f36b3000 tcpipreg (deferred)
  720. Mapped memory image file: C:\ProgramData\dbg\sym\tcpipreg.sys\F09C8E9F13000\tcpipreg.sys
  721. Image path: tcpipreg.sys
  722. Image name: tcpipreg.sys
  723. Timestamp: ***** Invalid (F09C8E9F)
  724. CheckSum: 0001B5C9
  725. ImageSize: 00013000
  726. File version: 10.0.15058.0
  727. Product version: 10.0.15058.0
  728. File flags: 0 (Mask 3F)
  729. File OS: 40004 NT Win32
  730. File type: 1.0 App
  731. File date: 00000000.00000000
  732. Translations: 0409.04b0
  733. CompanyName: Microsoft Corporation
  734. ProductName: Microsoft® Windows® Operating System
  735. InternalName: tcpipreg.sys
  736. OriginalFilename: tcpipreg.sys
  737. ProductVersion: 10.0.15058.0
  738. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  739. FileDescription: TCP/IP Registry Compatibility Driver
  740. LegalCopyright: © Microsoft Corporation. All rights reserved.
  741. fffff800`f36c0000 fffff800`f370e000 mrxsmb10 (deferred)
  742. Mapped memory image file: C:\ProgramData\dbg\sym\mrxsmb10.sys\D3F9A54C4e000\mrxsmb10.sys
  743. Image path: mrxsmb10.sys
  744. Image name: mrxsmb10.sys
  745. Timestamp: ***** Invalid (D3F9A54C)
  746. CheckSum: 0004CF74
  747. ImageSize: 0004E000
  748. File version: 10.0.15063.468
  749. Product version: 10.0.15063.468
  750. File flags: 0 (Mask 3F)
  751. File OS: 40004 NT Win32
  752. File type: 3.7 Driver
  753. File date: 00000000.00000000
  754. Translations: 0409.04b0
  755. CompanyName: Microsoft Corporation
  756. ProductName: Microsoft® Windows® Operating System
  757. InternalName: MRxSmb0.sys
  758. OriginalFilename: MRXSMB0.Sys
  759. ProductVersion: 10.0.15063.468
  760. FileVersion: 10.0.15063.468 (WinBuild.160101.0800)
  761. FileDescription: Longhorn SMB Downlevel SubRdr
  762. LegalCopyright: © Microsoft Corporation. All rights reserved.
  763. fffff800`f3710000 fffff800`f37c8000 srv2 (deferred)
  764. Mapped memory image file: C:\ProgramData\dbg\sym\srv2.sys\61B5FB64b8000\srv2.sys
  765. Image path: srv2.sys
  766. Image name: srv2.sys
  767. Timestamp: Sun Dec 12 08:38:44 2021 (61B5FB64)
  768. CheckSum: 000BB8B8
  769. ImageSize: 000B8000
  770. File version: 10.0.15063.246
  771. Product version: 10.0.15063.246
  772. File flags: 0 (Mask 3F)
  773. File OS: 40004 NT Win32
  774. File type: 3.6 Driver
  775. File date: 00000000.00000000
  776. Translations: 0409.04b0
  777. CompanyName: Microsoft Corporation
  778. ProductName: Microsoft® Windows® Operating System
  779. InternalName: SRV2.SYS
  780. OriginalFilename: SRV2.SYS
  781. ProductVersion: 10.0.15063.246
  782. FileVersion: 10.0.15063.246 (WinBuild.160101.0800)
  783. FileDescription: Smb 2.0 Server driver
  784. LegalCopyright: © Microsoft Corporation. All rights reserved.
  785. fffff800`f37d0000 fffff800`f385d000 srv (deferred)
  786. Mapped memory image file: C:\ProgramData\dbg\sym\srv.sys\6EE066FD8d000\srv.sys
  787. Image path: srv.sys
  788. Image name: srv.sys
  789. Timestamp: Mon Dec 11 21:16:29 2028 (6EE066FD)
  790. CheckSum: 0006AB08
  791. ImageSize: 0008D000
  792. File version: 10.0.15063.246
  793. Product version: 10.0.15063.246
  794. File flags: 0 (Mask 3F)
  795. File OS: 40004 NT Win32
  796. File type: 3.6 Driver
  797. File date: 00000000.00000000
  798. Translations: 0409.04b0
  799. CompanyName: Microsoft Corporation
  800. ProductName: Microsoft® Windows® Operating System
  801. InternalName: SRV.SYS
  802. OriginalFilename: SRV.SYS
  803. ProductVersion: 10.0.15063.246
  804. FileVersion: 10.0.15063.246 (WinBuild.160101.0800)
  805. FileDescription: Server driver
  806. LegalCopyright: © Microsoft Corporation. All rights reserved.
  807. fffff800`f3860000 fffff800`f3890000 tunnel (deferred)
  808. Mapped memory image file: C:\ProgramData\dbg\sym\tunnel.sys\157D715030000\tunnel.sys
  809. Image path: tunnel.sys
  810. Image name: tunnel.sys
  811. Timestamp: Thu Jun 4 18:42:24 1981 (157D7150)
  812. CheckSum: 000309F8
  813. ImageSize: 00030000
  814. File version: 10.0.15046.0
  815. Product version: 10.0.15046.0
  816. File flags: 0 (Mask 3F)
  817. File OS: 40004 NT Win32
  818. File type: 3.6 Driver
  819. File date: 00000000.00000000
  820. Translations: 0409.04b0
  821. CompanyName: Microsoft Corporation
  822. ProductName: Microsoft® Windows® Operating System
  823. InternalName: tunnel.sys
  824. OriginalFilename: tunnel.sys
  825. ProductVersion: 10.0.15046.0
  826. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  827. FileDescription: Microsoft Tunnel Interface Driver
  828. LegalCopyright: © Microsoft Corporation. All rights reserved.
  829. fffff804`25a00000 fffff804`25a5f000 msrpc (deferred)
  830. Mapped memory image file: C:\ProgramData\dbg\sym\msrpc.sys\16A8209D5f000\msrpc.sys
  831. Image path: msrpc.sys
  832. Image name: msrpc.sys
  833. Timestamp: Sun Jan 17 07:05:49 1982 (16A8209D)
  834. CheckSum: 0006343C
  835. ImageSize: 0005F000
  836. File version: 10.0.15058.0
  837. Product version: 10.0.15058.0
  838. File flags: 0 (Mask 3F)
  839. File OS: 40004 NT Win32
  840. File type: 3.7 Driver
  841. File date: 00000000.00000000
  842. Translations: 0409.04b0
  843. CompanyName: Microsoft Corporation
  844. ProductName: Microsoft® Windows® Operating System
  845. InternalName: krpcdd.sys
  846. OriginalFilename: krpcdd.sys
  847. ProductVersion: 10.0.15058.0
  848. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  849. FileDescription: Kernel Remote Procedure Call Provider
  850. LegalCopyright: © Microsoft Corporation. All rights reserved.
  851. fffff804`25a60000 fffff804`25a89000 ksecdd (deferred)
  852. Mapped memory image file: C:\ProgramData\dbg\sym\ksecdd.sys\85DBC70829000\ksecdd.sys
  853. Image path: ksecdd.sys
  854. Image name: ksecdd.sys
  855. Timestamp: ***** Invalid (85DBC708)
  856. CheckSum: 000289CA
  857. ImageSize: 00029000
  858. File version: 10.0.15058.0
  859. Product version: 10.0.15058.0
  860. File flags: 0 (Mask 3F)
  861. File OS: 40004 NT Win32
  862. File type: 3.7 Driver
  863. File date: 00000000.00000000
  864. Translations: 0409.04b0
  865. CompanyName: Microsoft Corporation
  866. ProductName: Microsoft® Windows® Operating System
  867. InternalName: ksecdd.sys
  868. OriginalFilename: ksecdd.sys
  869. ProductVersion: 10.0.15058.0
  870. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  871. FileDescription: Kernel Security Support Provider Interface
  872. LegalCopyright: © Microsoft Corporation. All rights reserved.
  873. fffff804`25a90000 fffff804`25aa1000 werkernel (deferred)
  874. Mapped memory image file: C:\ProgramData\dbg\sym\werkernel.sys\C3403C4211000\werkernel.sys
  875. Image path: werkernel.sys
  876. Image name: werkernel.sys
  877. Timestamp: ***** Invalid (C3403C42)
  878. CheckSum: 000160E2
  879. ImageSize: 00011000
  880. File version: 10.0.15046.0
  881. Product version: 10.0.15046.0
  882. File flags: 0 (Mask 3F)
  883. File OS: 40004 NT Win32
  884. File type: 3.7 Driver
  885. File date: 00000000.00000000
  886. Translations: 0409.04b0
  887. CompanyName: Microsoft Corporation
  888. ProductName: Microsoft® Windows® Operating System
  889. InternalName: werkernel
  890. OriginalFilename: werkernel.sys
  891. ProductVersion: 10.0.15046.0
  892. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  893. FileDescription: Windows Error Reporting Kernel Driver
  894. LegalCopyright: © Microsoft Corporation. All rights reserved.
  895. fffff804`25ab0000 fffff804`25b15000 CLFS (deferred)
  896. Mapped memory image file: C:\ProgramData\dbg\sym\CLFS.SYS\A746E82D65000\CLFS.SYS
  897. Image path: CLFS.SYS
  898. Image name: CLFS.SYS
  899. Timestamp: ***** Invalid (A746E82D)
  900. CheckSum: 0006C6FD
  901. ImageSize: 00065000
  902. File version: 10.0.15063.468
  903. Product version: 10.0.15063.468
  904. File flags: 0 (Mask 3F)
  905. File OS: 40004 NT Win32
  906. File type: 3.7 Driver
  907. File date: 00000000.00000000
  908. Translations: 0000.04b0
  909. CompanyName: Microsoft Corporation
  910. ProductName: Microsoft® Windows® Operating System
  911. InternalName: clfs.sys
  912. OriginalFilename: Clfs.Sys
  913. ProductVersion: 10.0.15063.468
  914. FileVersion: 10.0.15063.468 (WinBuild.160101.0800)
  915. FileDescription: Common Log File System Driver
  916. LegalCopyright: © Microsoft Corporation. All rights reserved.
  917. fffff804`25b20000 fffff804`25b45000 tm (deferred)
  918. Mapped memory image file: C:\ProgramData\dbg\sym\tm.sys\69649A1925000\tm.sys
  919. Image path: tm.sys
  920. Image name: tm.sys
  921. Timestamp: Mon Jan 12 01:52:09 2026 (69649A19)
  922. CheckSum: 0002374B
  923. ImageSize: 00025000
  924. File version: 10.0.15063.400
  925. Product version: 10.0.15063.400
  926. File flags: 0 (Mask 3F)
  927. File OS: 40004 NT Win32
  928. File type: 3.7 Driver
  929. File date: 00000000.00000000
  930. Translations: 0409.04b0
  931. CompanyName: Microsoft Corporation
  932. ProductName: Microsoft® Windows® Operating System
  933. InternalName: tm.sys
  934. OriginalFilename: tm.sys
  935. ProductVersion: 10.0.15063.400
  936. FileVersion: 10.0.15063.400 (WinBuild.160101.0800)
  937. FileDescription: Kernel Transaction Manager Driver
  938. LegalCopyright: © Microsoft Corporation. All rights reserved.
  939. fffff804`25b50000 fffff804`25bde000 mcupdate (deferred)
  940. Image path: mcupdate.dll
  941. Image name: mcupdate.dll
  942. Timestamp: Tue Jul 17 20:27:54 1979 (11F2820A)
  943. CheckSum: 00092CCF
  944. ImageSize: 0008E000
  945. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  946. fffff804`25be0000 fffff804`25bf7000 PSHED (deferred)
  947. Mapped memory image file: C:\ProgramData\dbg\sym\PSHED.dll\6AEC44D517000\PSHED.dll
  948. Image path: PSHED.dll
  949. Image name: PSHED.dll
  950. Timestamp: Thu Nov 5 03:56:53 2026 (6AEC44D5)
  951. CheckSum: 00016449
  952. ImageSize: 00017000
  953. File version: 10.0.15046.0
  954. Product version: 10.0.15046.0
  955. File flags: 0 (Mask 3F)
  956. File OS: 40004 NT Win32
  957. File type: 3.7 Driver
  958. File date: 00000000.00000000
  959. Translations: 0409.04b0
  960. CompanyName: Microsoft Corporation
  961. ProductName: Microsoft® Windows® Operating System
  962. InternalName: pshed.dll
  963. OriginalFilename: pshed.dll
  964. ProductVersion: 10.0.15046.0
  965. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  966. FileDescription: Platform Specific Hardware Error Driver
  967. LegalCopyright: © Microsoft Corporation. All rights reserved.
  968. fffff804`25c00000 fffff804`25ca8000 CI (deferred)
  969. Mapped memory image file: C:\ProgramData\dbg\sym\CI.dll\57C1E861a8000\CI.dll
  970. Image path: CI.dll
  971. Image name: CI.dll
  972. Timestamp: Sat Aug 27 15:22:09 2016 (57C1E861)
  973. CheckSum: 000A5ED0
  974. ImageSize: 000A8000
  975. File version: 10.0.15063.251
  976. Product version: 10.0.15063.251
  977. File flags: 0 (Mask 3F)
  978. File OS: 40004 NT Win32
  979. File type: 3.7 Driver
  980. File date: 00000000.00000000
  981. Translations: 0409.04b0
  982. CompanyName: Microsoft Corporation
  983. ProductName: Microsoft® Windows® Operating System
  984. InternalName: ci.dll
  985. OriginalFilename: ci.dll
  986. ProductVersion: 10.0.15063.251
  987. FileVersion: 10.0.15063.251 (WinBuild.160101.0800)
  988. FileDescription: Code Integrity Module
  989. LegalCopyright: © Microsoft Corporation. All rights reserved.
  990. fffff804`25cb0000 fffff804`25d52000 cng (deferred)
  991. Mapped memory image file: C:\ProgramData\dbg\sym\cng.sys\F2E91F26a2000\cng.sys
  992. Image path: cng.sys
  993. Image name: cng.sys
  994. Timestamp: ***** Invalid (F2E91F26)
  995. CheckSum: 000A8550
  996. ImageSize: 000A2000
  997. File version: 10.0.15063.0
  998. Product version: 10.0.15063.0
  999. File flags: 0 (Mask 3F)
  1000. File OS: 40004 NT Win32
  1001. File type: 3.7 Driver
  1002. File date: 00000000.00000000
  1003. Translations: 0409.04b0
  1004. CompanyName: Microsoft Corporation
  1005. ProductName: Microsoft® Windows® Operating System
  1006. InternalName: cng.sys
  1007. OriginalFilename: cng.sys
  1008. ProductVersion: 10.0.15063.0
  1009. FileVersion: 10.0.15063.0 (WinBuild.160101.0800)
  1010. FileDescription: Kernel Cryptography, Next Generation
  1011. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1012. fffff804`25d60000 fffff804`25e3e000 Wdf01000 (deferred)
  1013. Mapped memory image file: C:\ProgramData\dbg\sym\Wdf01000.sys\26EEE197de000\Wdf01000.sys
  1014. Image path: Wdf01000.sys
  1015. Image name: Wdf01000.sys
  1016. Timestamp: Wed Sep 12 21:32:07 1990 (26EEE197)
  1017. CheckSum: 000E46B7
  1018. ImageSize: 000DE000
  1019. File version: 1.21.15063.0
  1020. Product version: 1.21.15063.0
  1021. File flags: 0 (Mask 3F)
  1022. File OS: 40004 NT Win32
  1023. File type: 3.7 Driver
  1024. File date: 00000000.00000000
  1025. Translations: 0409.04b0
  1026. CompanyName: Microsoft Corporation
  1027. ProductName: Microsoft® Windows® Operating System
  1028. InternalName: wdf01000.sys
  1029. OriginalFilename: wdf01000.sys
  1030. ProductVersion: 1.21.15063.0
  1031. FileVersion: 1.21.15063.0 (WinBuild.160101.0800)
  1032. FileDescription: Kernel Mode Driver Framework Runtime
  1033. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1034. fffff804`25e40000 fffff804`25e53000 WDFLDR (deferred)
  1035. Mapped memory image file: C:\ProgramData\dbg\sym\WDFLDR.SYS\0E910A3D13000\WDFLDR.SYS
  1036. Image path: WDFLDR.SYS
  1037. Image name: WDFLDR.SYS
  1038. Timestamp: Thu Sep 29 09:06:05 1977 (0E910A3D)
  1039. CheckSum: 00018953
  1040. ImageSize: 00013000
  1041. File version: 1.21.15058.0
  1042. Product version: 1.21.15058.0
  1043. File flags: 0 (Mask 3F)
  1044. File OS: 40004 NT Win32
  1045. File type: 3.7 Driver
  1046. File date: 00000000.00000000
  1047. Translations: 0000.04b0
  1048. CompanyName: Microsoft Corporation
  1049. ProductName: Microsoft® Windows® Operating System
  1050. InternalName: wdfldr.sys
  1051. OriginalFilename: wdfldr.sys
  1052. ProductVersion: 1.21.15058.0
  1053. FileVersion: 1.21.15058.0 (WinBuild.160101.0800)
  1054. FileDescription: Kernel Mode Driver Framework Loader
  1055. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1056. fffff804`25e60000 fffff804`25e6e000 SleepStudyHelper (deferred)
  1057. Mapped memory image file: C:\ProgramData\dbg\sym\SleepStudyHelper.sys\EFF776F3e000\SleepStudyHelper.sys
  1058. Image path: SleepStudyHelper.sys
  1059. Image name: SleepStudyHelper.sys
  1060. Timestamp: ***** Invalid (EFF776F3)
  1061. CheckSum: 00010075
  1062. ImageSize: 0000E000
  1063. File version: 10.0.15052.0
  1064. Product version: 10.0.15052.0
  1065. File flags: 0 (Mask 3F)
  1066. File OS: 40004 NT Win32
  1067. File type: 3.7 Driver
  1068. File date: 00000000.00000000
  1069. Translations: 0000.04b0
  1070. CompanyName: Microsoft Corporation
  1071. ProductName: Microsoft® Windows® Operating System
  1072. InternalName: SleepStudyHelper.sys
  1073. OriginalFilename: SleepStudyHelper.sys
  1074. ProductVersion: 10.0.15052.0
  1075. FileVersion: 10.0.15052.0 (WinBuild.160101.0800)
  1076. FileDescription: Sleep Study Helper
  1077. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1078. fffff804`25e70000 fffff804`25e93000 acpiex (deferred)
  1079. Mapped memory image file: C:\ProgramData\dbg\sym\acpiex.sys\DC6150EE23000\acpiex.sys
  1080. Image path: acpiex.sys
  1081. Image name: acpiex.sys
  1082. Timestamp: ***** Invalid (DC6150EE)
  1083. CheckSum: 00028B4D
  1084. ImageSize: 00023000
  1085. File version: 10.0.15046.0
  1086. Product version: 10.0.15046.0
  1087. File flags: 0 (Mask 3F)
  1088. File OS: 40004 NT Win32
  1089. File type: 2.0 Dll
  1090. File date: 00000000.00000000
  1091. Translations: 0409.04b0
  1092. CompanyName: Microsoft Corporation
  1093. ProductName: Microsoft® Windows® Operating System
  1094. InternalName: acpiex.sys
  1095. OriginalFilename: acpiex.sys
  1096. ProductVersion: 10.0.15046.0
  1097. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  1098. FileDescription: ACPIEx Driver
  1099. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1100. fffff804`25ea0000 fffff804`25eae000 WppRecorder (deferred)
  1101. Mapped memory image file: C:\ProgramData\dbg\sym\WppRecorder.sys\1E4DAB2Fe000\WppRecorder.sys
  1102. Image path: WppRecorder.sys
  1103. Image name: WppRecorder.sys
  1104. Timestamp: Mon Feb 10 03:02:55 1986 (1E4DAB2F)
  1105. CheckSum: 0000C53D
  1106. ImageSize: 0000E000
  1107. File version: 10.0.15046.0
  1108. Product version: 10.0.15046.0
  1109. File flags: 0 (Mask 3F)
  1110. File OS: 40004 NT Win32
  1111. File type: 3.7 Driver
  1112. File date: 00000000.00000000
  1113. Translations: 0000.04b0
  1114. CompanyName: Microsoft Corporation
  1115. ProductName: Microsoft® Windows® Operating System
  1116. InternalName: WppRecorder.sys
  1117. OriginalFilename: WppRecorder.sys
  1118. ProductVersion: 10.0.15046.0
  1119. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  1120. FileDescription: WPP Trace Recorder
  1121. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1122. fffff804`25eb0000 fffff804`25f67000 ACPI (deferred)
  1123. Mapped memory image file: C:\ProgramData\dbg\sym\ACPI.sys\0B2AD2B4b7000\ACPI.sys
  1124. Image path: ACPI.sys
  1125. Image name: ACPI.sys
  1126. Timestamp: Tue Dec 9 06:17:08 1975 (0B2AD2B4)
  1127. CheckSum: 000B1260
  1128. ImageSize: 000B7000
  1129. File version: 10.0.15058.0
  1130. Product version: 10.0.15058.0
  1131. File flags: 0 (Mask 3F)
  1132. File OS: 40004 NT Win32
  1133. File type: 3.7 Driver
  1134. File date: 00000000.00000000
  1135. Translations: 0409.04b0
  1136. CompanyName: Microsoft Corporation
  1137. ProductName: Microsoft® Windows® Operating System
  1138. InternalName: ACPI.sys
  1139. OriginalFilename: ACPI.sys
  1140. ProductVersion: 10.0.15058.0
  1141. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  1142. FileDescription: ACPI Driver for NT
  1143. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1144. fffff804`25f70000 fffff804`25f7c000 WMILIB (deferred)
  1145. Mapped memory image file: C:\ProgramData\dbg\sym\WMILIB.SYS\5BAE5A54c000\WMILIB.SYS
  1146. Image path: WMILIB.SYS
  1147. Image name: WMILIB.SYS
  1148. Timestamp: Fri Sep 28 12:44:04 2018 (5BAE5A54)
  1149. CheckSum: 0000E2FE
  1150. ImageSize: 0000C000
  1151. File version: 10.0.15052.0
  1152. Product version: 10.0.15052.0
  1153. File flags: 0 (Mask 3F)
  1154. File OS: 40004 NT Win32
  1155. File type: 3.7 Driver
  1156. File date: 00000000.00000000
  1157. Translations: 0409.04b0
  1158. CompanyName: Microsoft Corporation
  1159. ProductName: Microsoft® Windows® Operating System
  1160. InternalName: WmiLib.sys
  1161. OriginalFilename: WmiLib.sys
  1162. ProductVersion: 10.0.15052.0
  1163. FileVersion: 10.0.15052.0 (WinBuild.160101.0800)
  1164. FileDescription: WMILIB WMI support library Dll
  1165. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1166. fffff804`25f90000 fffff804`25fa7000 intelpep (deferred)
  1167. Mapped memory image file: C:\ProgramData\dbg\sym\intelpep.sys\46272DF617000\intelpep.sys
  1168. Image path: intelpep.sys
  1169. Image name: intelpep.sys
  1170. Timestamp: Thu Apr 19 04:53:10 2007 (46272DF6)
  1171. CheckSum: 00022020
  1172. ImageSize: 00017000
  1173. File version: 10.0.15046.0
  1174. Product version: 10.0.15046.0
  1175. File flags: 0 (Mask 3F)
  1176. File OS: 40004 NT Win32
  1177. File type: 3.A Driver
  1178. File date: 00000000.00000000
  1179. Translations: 0409.04b0
  1180. CompanyName: Microsoft Corporation
  1181. ProductName: Microsoft® Windows® Operating System
  1182. InternalName: intelpep.sys
  1183. OriginalFilename: intelpep.sys
  1184. ProductVersion: 10.0.15046.0
  1185. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  1186. FileDescription: Intel Power Engine Plugin
  1187. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1188. fffff804`25fb0000 fffff804`25fc6000 WindowsTrustedRT (deferred)
  1189. Mapped memory image file: C:\ProgramData\dbg\sym\WindowsTrustedRT.sys\E3FF4AF616000\WindowsTrustedRT.sys
  1190. Image path: WindowsTrustedRT.sys
  1191. Image name: WindowsTrustedRT.sys
  1192. Timestamp: ***** Invalid (E3FF4AF6)
  1193. CheckSum: 0001FED5
  1194. ImageSize: 00016000
  1195. File version: 10.0.15046.0
  1196. Product version: 10.0.15046.0
  1197. File flags: 0 (Mask 3F)
  1198. File OS: 40004 NT Win32
  1199. File type: 3.7 Driver
  1200. File date: 00000000.00000000
  1201. Translations: 0409.04b0
  1202. CompanyName: Microsoft Corporation
  1203. ProductName: Microsoft® Windows® Operating System
  1204. InternalName: WindowsTrustedRT.sys
  1205. OriginalFilename: WindowsTrustedRT.sys
  1206. ProductVersion: 10.0.15046.0
  1207. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  1208. FileDescription: Windows Trusted Runtime Interface Driver
  1209. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1210. fffff804`25fd0000 fffff804`25fdb000 WindowsTrustedRTProxy (deferred)
  1211. Mapped memory image file: C:\ProgramData\dbg\sym\WindowsTrustedRTProxy.sys\44CA11F8b000\WindowsTrustedRTProxy.sys
  1212. Image path: WindowsTrustedRTProxy.sys
  1213. Image name: WindowsTrustedRTProxy.sys
  1214. Timestamp: Fri Jul 28 09:32:40 2006 (44CA11F8)
  1215. CheckSum: 0000A552
  1216. ImageSize: 0000B000
  1217. File version: 10.0.15046.0
  1218. Product version: 10.0.15046.0
  1219. File flags: 0 (Mask 3F)
  1220. File OS: 40004 NT Win32
  1221. File type: 3.7 Driver
  1222. File date: 00000000.00000000
  1223. Translations: 0409.04b0
  1224. CompanyName: Microsoft Corporation
  1225. ProductName: Microsoft® Windows® Operating System
  1226. InternalName: WindowsTrustedRTProxy.sys
  1227. OriginalFilename: WindowsTrustedRTProxy.sys
  1228. ProductVersion: 10.0.15046.0
  1229. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  1230. FileDescription: Windows Trusted Runtime Service Proxy Driver
  1231. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1232. fffff804`25fe0000 fffff804`25ff3000 pcw (deferred)
  1233. Mapped memory image file: C:\ProgramData\dbg\sym\pcw.sys\000CEFA513000\pcw.sys
  1234. Image path: pcw.sys
  1235. Image name: pcw.sys
  1236. Timestamp: Sat Jan 10 14:29:41 1970 (000CEFA5)
  1237. CheckSum: 000188B9
  1238. ImageSize: 00013000
  1239. File version: 10.0.15046.0
  1240. Product version: 10.0.15046.0
  1241. File flags: 0 (Mask 3F)
  1242. File OS: 40004 NT Win32
  1243. File type: 3.8 Driver
  1244. File date: 00000000.00000000
  1245. Translations: 0409.04b0
  1246. CompanyName: Microsoft Corporation
  1247. ProductName: Microsoft® Windows® Operating System
  1248. InternalName: pcw.sys
  1249. OriginalFilename: pcw.sys
  1250. ProductVersion: 10.0.15046.0
  1251. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  1252. FileDescription: Performance Counters for Windows Driver
  1253. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1254. fffff804`26000000 fffff804`2600b000 msisadrv (deferred)
  1255. Mapped memory image file: C:\ProgramData\dbg\sym\msisadrv.sys\BAF553EFb000\msisadrv.sys
  1256. Image path: msisadrv.sys
  1257. Image name: msisadrv.sys
  1258. Timestamp: ***** Invalid (BAF553EF)
  1259. CheckSum: 0000CAA1
  1260. ImageSize: 0000B000
  1261. File version: 10.0.15046.0
  1262. Product version: 10.0.15046.0
  1263. File flags: 0 (Mask 3F)
  1264. File OS: 40004 NT Win32
  1265. File type: 3.7 Driver
  1266. File date: 00000000.00000000
  1267. Translations: 0409.04b0
  1268. CompanyName: Microsoft Corporation
  1269. ProductName: Microsoft® Windows® Operating System
  1270. InternalName: msisadrv.sys
  1271. OriginalFilename: msisadrv.sys
  1272. ProductVersion: 10.0.15046.0
  1273. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  1274. FileDescription: ISA Driver
  1275. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1276. fffff804`26010000 fffff804`2606b000 pci (deferred)
  1277. Mapped memory image file: C:\ProgramData\dbg\sym\pci.sys\688DD7395b000\pci.sys
  1278. Image path: pci.sys
  1279. Image name: pci.sys
  1280. Timestamp: Sat Aug 2 05:15:37 2025 (688DD739)
  1281. CheckSum: 00063A5B
  1282. ImageSize: 0005B000
  1283. File version: 10.0.15058.0
  1284. Product version: 10.0.15058.0
  1285. File flags: 0 (Mask 3F)
  1286. File OS: 40004 NT Win32
  1287. File type: 2.0 Dll
  1288. File date: 00000000.00000000
  1289. Translations: 0409.04b0
  1290. CompanyName: Microsoft Corporation
  1291. ProductName: Microsoft® Windows® Operating System
  1292. InternalName: pci.sys
  1293. OriginalFilename: pci.sys
  1294. ProductVersion: 10.0.15058.0
  1295. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  1296. FileDescription: NT Plug and Play PCI Enumerator
  1297. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1298. fffff804`26070000 fffff804`26082000 vdrvroot (deferred)
  1299. Mapped memory image file: C:\ProgramData\dbg\sym\vdrvroot.sys\C0C6BED012000\vdrvroot.sys
  1300. Image path: vdrvroot.sys
  1301. Image name: vdrvroot.sys
  1302. Timestamp: ***** Invalid (C0C6BED0)
  1303. CheckSum: 0001558D
  1304. ImageSize: 00012000
  1305. File version: 10.0.15052.0
  1306. Product version: 10.0.15052.0
  1307. File flags: 0 (Mask 3F)
  1308. File OS: 40004 NT Win32
  1309. File type: 2.0 Dll
  1310. File date: 00000000.00000000
  1311. Translations: 0409.04b0
  1312. CompanyName: Microsoft Corporation
  1313. ProductName: Microsoft® Windows® Operating System
  1314. InternalName: vdrvroot.sys
  1315. OriginalFilename: vdrvroot.sys
  1316. ProductVersion: 10.0.15052.0
  1317. FileVersion: 10.0.15052.0 (WinBuild.160101.0800)
  1318. FileDescription: Virtual Drive Root Enumerator
  1319. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1320. fffff804`26090000 fffff804`260b3000 pdc (deferred)
  1321. Mapped memory image file: C:\ProgramData\dbg\sym\pdc.sys\26921BAC23000\pdc.sys
  1322. Image path: pdc.sys
  1323. Image name: pdc.sys
  1324. Timestamp: Wed Jul 4 12:39:08 1990 (26921BAC)
  1325. CheckSum: 0002C547
  1326. ImageSize: 00023000
  1327. File version: 10.0.15063.468
  1328. Product version: 10.0.15063.468
  1329. File flags: 0 (Mask 3F)
  1330. File OS: 40004 NT Win32
  1331. File type: 3.7 Driver
  1332. File date: 00000000.00000000
  1333. Translations: 0000.04b0
  1334. CompanyName: Microsoft Corporation
  1335. ProductName: Microsoft® Windows® Operating System
  1336. InternalName: pdc.sys
  1337. OriginalFilename: pdc.sys
  1338. ProductVersion: 10.0.15063.468
  1339. FileVersion: 10.0.15063.468 (WinBuild.160101.0800)
  1340. FileDescription: Power Dependency Coordinator Driver
  1341. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1342. fffff804`260c0000 fffff804`260d8000 CEA (deferred)
  1343. Mapped memory image file: C:\ProgramData\dbg\sym\CEA.sys\01CDB10218000\CEA.sys
  1344. Image path: CEA.sys
  1345. Image name: CEA.sys
  1346. Timestamp: Wed Dec 16 23:50:10 1970 (01CDB102)
  1347. CheckSum: 0001DBD0
  1348. ImageSize: 00018000
  1349. File version: 10.0.15046.0
  1350. Product version: 10.0.15046.0
  1351. File flags: 0 (Mask 3F)
  1352. File OS: 40004 NT Win32
  1353. File type: 2.0 Dll
  1354. File date: 00000000.00000000
  1355. Translations: 0409.04b0
  1356. CompanyName: Microsoft Corporation
  1357. ProductName: Microsoft® Windows® Operating System
  1358. InternalName: EventAggregation.sys
  1359. OriginalFilename: EventAggregation.sys
  1360. ProductVersion: 10.0.15046.0
  1361. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  1362. FileDescription: Event Aggregation Kernel Mode Library
  1363. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1364. fffff804`260e0000 fffff804`2610b000 partmgr (deferred)
  1365. Mapped memory image file: C:\ProgramData\dbg\sym\partmgr.sys\694A94AD2b000\partmgr.sys
  1366. Image path: partmgr.sys
  1367. Image name: partmgr.sys
  1368. Timestamp: Tue Dec 23 08:10:05 2025 (694A94AD)
  1369. CheckSum: 0003332D
  1370. ImageSize: 0002B000
  1371. File version: 10.0.15063.0
  1372. Product version: 10.0.15063.0
  1373. File flags: 0 (Mask 3F)
  1374. File OS: 40004 NT Win32
  1375. File type: 3.7 Driver
  1376. File date: 00000000.00000000
  1377. Translations: 0000.04b0
  1378. CompanyName: Microsoft Corporation
  1379. ProductName: Microsoft® Windows® Operating System
  1380. InternalName: partmgr.sys
  1381. OriginalFilename: partmgr.sys
  1382. ProductVersion: 10.0.15063.0
  1383. FileVersion: 10.0.15063.0 (WinBuild.160101.0800)
  1384. FileDescription: Partition driver
  1385. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1386. fffff804`26110000 fffff804`261a4000 spaceport (deferred)
  1387. Mapped memory image file: C:\ProgramData\dbg\sym\spaceport.sys\7AD9C5C094000\spaceport.sys
  1388. Image path: spaceport.sys
  1389. Image name: spaceport.sys
  1390. Timestamp: Wed Apr 25 01:38:08 2035 (7AD9C5C0)
  1391. CheckSum: 000914F1
  1392. ImageSize: 00094000
  1393. File version: 10.0.15058.0
  1394. Product version: 10.0.15058.0
  1395. File flags: 0 (Mask 3F)
  1396. File OS: 40004 NT Win32
  1397. File type: 3.7 Driver
  1398. File date: 00000000.00000000
  1399. Translations: 0000.04b0
  1400. CompanyName: Microsoft Corporation
  1401. ProductName: Microsoft® Windows® Operating System
  1402. InternalName: spaceport.sys
  1403. OriginalFilename: spaceport.sys
  1404. ProductVersion: 10.0.15058.0
  1405. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  1406. FileDescription: Storage Spaces Driver
  1407. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1408. fffff804`261b0000 fffff804`261c9000 volmgr (deferred)
  1409. Mapped memory image file: C:\ProgramData\dbg\sym\volmgr.sys\D713384719000\volmgr.sys
  1410. Image path: volmgr.sys
  1411. Image name: volmgr.sys
  1412. Timestamp: ***** Invalid (D7133847)
  1413. CheckSum: 00020990
  1414. ImageSize: 00019000
  1415. File version: 10.0.15058.0
  1416. Product version: 10.0.15058.0
  1417. File flags: 0 (Mask 3F)
  1418. File OS: 40004 NT Win32
  1419. File type: 3.7 Driver
  1420. File date: 00000000.00000000
  1421. Translations: 0409.04b0
  1422. CompanyName: Microsoft Corporation
  1423. ProductName: Microsoft® Windows® Operating System
  1424. InternalName: volmgr.sys
  1425. OriginalFilename: volmgr.sys
  1426. ProductVersion: 10.0.15058.0
  1427. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  1428. FileDescription: Volume Manager Driver
  1429. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1430. fffff804`261d0000 fffff804`2622e000 volmgrx (deferred)
  1431. Mapped memory image file: C:\ProgramData\dbg\sym\volmgrx.sys\D414E4325e000\volmgrx.sys
  1432. Image path: volmgrx.sys
  1433. Image name: volmgrx.sys
  1434. Timestamp: ***** Invalid (D414E432)
  1435. CheckSum: 00061535
  1436. ImageSize: 0005E000
  1437. File version: 10.0.15052.0
  1438. Product version: 10.0.15052.0
  1439. File flags: 0 (Mask 3F)
  1440. File OS: 40004 NT Win32
  1441. File type: 3.7 Driver
  1442. File date: 00000000.00000000
  1443. Translations: 0409.04b0
  1444. CompanyName: Microsoft Corporation
  1445. ProductName: Microsoft® Windows® Operating System
  1446. InternalName: volmgrx.sys
  1447. OriginalFilename: volmgrx.sys
  1448. ProductVersion: 10.0.15052.0
  1449. FileVersion: 10.0.15052.0 (WinBuild.160101.0800)
  1450. FileDescription: Volume Manager Extension Driver
  1451. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1452. fffff804`26230000 fffff804`2624e000 mountmgr (deferred)
  1453. Mapped memory image file: C:\ProgramData\dbg\sym\mountmgr.sys\EA4F8C7B1e000\mountmgr.sys
  1454. Image path: mountmgr.sys
  1455. Image name: mountmgr.sys
  1456. Timestamp: ***** Invalid (EA4F8C7B)
  1457. CheckSum: 00022641
  1458. ImageSize: 0001E000
  1459. File version: 10.0.15058.0
  1460. Product version: 10.0.15058.0
  1461. File flags: 0 (Mask 3F)
  1462. File OS: 40004 NT Win32
  1463. File type: 3.7 Driver
  1464. File date: 00000000.00000000
  1465. Translations: 0409.04b0
  1466. CompanyName: Microsoft Corporation
  1467. ProductName: Microsoft® Windows® Operating System
  1468. InternalName: mountmgr.sys
  1469. OriginalFilename: mountmgr.sys
  1470. ProductVersion: 10.0.15058.0
  1471. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  1472. FileDescription: Mount Point Manager
  1473. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1474. fffff804`26270000 fffff804`2627b000 BOOTVID (deferred)
  1475. Mapped memory image file: C:\ProgramData\dbg\sym\BOOTVID.dll\9EAF733Cb000\BOOTVID.dll
  1476. Image path: BOOTVID.dll
  1477. Image name: BOOTVID.dll
  1478. Timestamp: ***** Invalid (9EAF733C)
  1479. CheckSum: 00016298
  1480. ImageSize: 0000B000
  1481. File version: 10.0.15046.0
  1482. Product version: 10.0.15046.0
  1483. File flags: 0 (Mask 3F)
  1484. File OS: 40004 NT Win32
  1485. File type: 3.4 Driver
  1486. File date: 00000000.00000000
  1487. Translations: 0409.04b0
  1488. CompanyName: Microsoft Corporation
  1489. ProductName: Microsoft® Windows® Operating System
  1490. InternalName: bootvid.dll
  1491. OriginalFilename: bootvid.dll
  1492. ProductVersion: 10.0.15046.0
  1493. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  1494. FileDescription: VGA Boot Driver
  1495. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1496. fffff804`26280000 fffff804`262e5000 FLTMGR (deferred)
  1497. Mapped memory image file: C:\ProgramData\dbg\sym\FLTMGR.SYS\90D626DF65000\FLTMGR.SYS
  1498. Image path: FLTMGR.SYS
  1499. Image name: FLTMGR.SYS
  1500. Timestamp: ***** Invalid (90D626DF)
  1501. CheckSum: 000656FA
  1502. ImageSize: 00065000
  1503. File version: 10.0.15058.0
  1504. Product version: 10.0.15058.0
  1505. File flags: 0 (Mask 3F)
  1506. File OS: 40004 NT Win32
  1507. File type: 3.7 Driver
  1508. File date: 00000000.00000000
  1509. Translations: 0409.04b0
  1510. CompanyName: Microsoft Corporation
  1511. ProductName: Microsoft® Windows® Operating System
  1512. InternalName: fltMgr.sys
  1513. OriginalFilename: fltMgr.sys
  1514. ProductVersion: 10.0.15058.0
  1515. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  1516. FileDescription: Microsoft Filesystem Filter Manager
  1517. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1518. fffff804`262f0000 fffff804`263d0000 clipsp (deferred)
  1519. Mapped memory image file: C:\ProgramData\dbg\sym\clipsp.sys\58CCBD75e0000\clipsp.sys
  1520. Image path: clipsp.sys
  1521. Image name: clipsp.sys
  1522. Timestamp: Sat Mar 18 00:54:13 2017 (58CCBD75)
  1523. CheckSum: 000DC888
  1524. ImageSize: 000E0000
  1525. File version: 10.0.15063.0
  1526. Product version: 10.0.15063.0
  1527. File flags: 0 (Mask 3F)
  1528. File OS: 40004 NT Win32
  1529. File type: 3.7 Driver
  1530. File date: 00000000.00000000
  1531. Translations: 0409.04b0
  1532. CompanyName: Microsoft Corporation
  1533. ProductName: Microsoft® Windows® Operating System
  1534. InternalName: clipsp.dll
  1535. OriginalFilename: clipsp.dll
  1536. ProductVersion: 10.0.15063.0
  1537. FileVersion: 10.0.15063.0 (WinBuild.160101.0800)
  1538. FileDescription: CLIP Service
  1539. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1540. fffff804`263d0000 fffff804`263de000 cmimcext (deferred)
  1541. Mapped memory image file: C:\ProgramData\dbg\sym\cmimcext.sys\FF4D5961e000\cmimcext.sys
  1542. Image path: cmimcext.sys
  1543. Image name: cmimcext.sys
  1544. Timestamp: ***** Invalid (FF4D5961)
  1545. CheckSum: 00008775
  1546. ImageSize: 0000E000
  1547. File version: 10.0.15046.0
  1548. Product version: 10.0.15046.0
  1549. File flags: 0 (Mask 3F)
  1550. File OS: 40004 NT Win32
  1551. File type: 3.7 Driver
  1552. File date: 00000000.00000000
  1553. Translations: 0409.04b0
  1554. CompanyName: Microsoft Corporation
  1555. ProductName: Microsoft® Windows® Operating System
  1556. InternalName: cmimcext.sys
  1557. OriginalFilename: cmimcext.sys
  1558. ProductVersion: 10.0.15046.0
  1559. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  1560. FileDescription: Kernel Configuration Manager Initial Configuration Extension Host Export Driver
  1561. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1562. fffff804`263e0000 fffff804`263ec000 ntosext (deferred)
  1563. Mapped memory image file: C:\ProgramData\dbg\sym\ntosext.sys\CC2A33ADc000\ntosext.sys
  1564. Image path: ntosext.sys
  1565. Image name: ntosext.sys
  1566. Timestamp: ***** Invalid (CC2A33AD)
  1567. CheckSum: 00012746
  1568. ImageSize: 0000C000
  1569. File version: 10.0.15046.0
  1570. Product version: 10.0.15046.0
  1571. File flags: 0 (Mask 3F)
  1572. File OS: 40004 NT Win32
  1573. File type: 3.7 Driver
  1574. File date: 00000000.00000000
  1575. Translations: 0409.04b0
  1576. CompanyName: Microsoft Corporation
  1577. ProductName: Microsoft® Windows® Operating System
  1578. InternalName: ntosext.sys
  1579. OriginalFilename: ntosext.sys
  1580. ProductVersion: 10.0.15046.0
  1581. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  1582. FileDescription: NTOS extension host driver
  1583. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1584. fffff804`26400000 fffff804`2641c000 EhStorClass (deferred)
  1585. Mapped memory image file: C:\ProgramData\dbg\sym\EhStorClass.sys\DDF6ADD31c000\EhStorClass.sys
  1586. Image path: EhStorClass.sys
  1587. Image name: EhStorClass.sys
  1588. Timestamp: ***** Invalid (DDF6ADD3)
  1589. CheckSum: 0001B589
  1590. ImageSize: 0001C000
  1591. File version: 10.0.15046.0
  1592. Product version: 10.0.15046.0
  1593. File flags: 0 (Mask 3F)
  1594. File OS: 40004 NT Win32
  1595. File type: 3.7 Driver
  1596. File date: 00000000.00000000
  1597. Translations: 0409.04b0
  1598. CompanyName: Microsoft Corporation
  1599. ProductName: Microsoft® Windows® Operating System
  1600. InternalName: EhStorClass.sys
  1601. OriginalFilename: EhStorClass.sys
  1602. ProductVersion: 10.0.15046.0
  1603. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  1604. FileDescription: Enhanced Storage Class driver for IEEE 1667 devices
  1605. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1606. fffff804`26420000 fffff804`2643a000 fileinfo (deferred)
  1607. Mapped memory image file: C:\ProgramData\dbg\sym\fileinfo.sys\885C54141a000\fileinfo.sys
  1608. Image path: fileinfo.sys
  1609. Image name: fileinfo.sys
  1610. Timestamp: ***** Invalid (885C5414)
  1611. CheckSum: 000235B2
  1612. ImageSize: 0001A000
  1613. File version: 10.0.15058.0
  1614. Product version: 10.0.15058.0
  1615. File flags: 0 (Mask 3F)
  1616. File OS: 40004 NT Win32
  1617. File type: 3.7 Driver
  1618. File date: 00000000.00000000
  1619. Translations: 0409.04b0
  1620. CompanyName: Microsoft Corporation
  1621. ProductName: Microsoft® Windows® Operating System
  1622. InternalName: FileInfo.sys
  1623. OriginalFilename: FileInfo.sys
  1624. ProductVersion: 10.0.15058.0
  1625. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  1626. FileDescription: FileInfo Filter Driver
  1627. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1628. fffff804`26440000 fffff804`2647b000 Wof (deferred)
  1629. Mapped memory image file: C:\ProgramData\dbg\sym\Wof.sys\07E257913b000\Wof.sys
  1630. Image path: Wof.sys
  1631. Image name: Wof.sys
  1632. Timestamp: Mon Mar 11 18:47:45 1974 (07E25791)
  1633. CheckSum: 00038B80
  1634. ImageSize: 0003B000
  1635. File version: 10.0.15046.0
  1636. Product version: 10.0.15046.0
  1637. File flags: 0 (Mask 3F)
  1638. File OS: 40004 NT Win32
  1639. File type: 3.7 Driver
  1640. File date: 00000000.00000000
  1641. Translations: 0409.04b0
  1642. CompanyName: Microsoft Corporation
  1643. ProductName: Microsoft® Windows® Operating System
  1644. InternalName: wof.sys
  1645. OriginalFilename: wof.sys
  1646. ProductVersion: 10.0.15046.0
  1647. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  1648. FileDescription: Windows Overlay Filter
  1649. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1650. fffff804`26480000 fffff804`264ce000 WdFilter (deferred)
  1651. Mapped memory image file: C:\ProgramData\dbg\sym\WdFilter.sys\F9B582DD4e000\WdFilter.sys
  1652. Image path: WdFilter.sys
  1653. Image name: WdFilter.sys
  1654. Timestamp: ***** Invalid (F9B582DD)
  1655. CheckSum: 0004E39B
  1656. ImageSize: 0004E000
  1657. File version: 4.11.15063.0
  1658. Product version: 4.11.15063.0
  1659. File flags: 0 (Mask 3F)
  1660. File OS: 40004 NT Win32
  1661. File type: 3.0 Driver
  1662. File date: 00000000.00000000
  1663. Translations: 0409.04b0
  1664. CompanyName: Microsoft Corporation
  1665. ProductName: Microsoft® Windows® Operating System
  1666. InternalName: WdFilter
  1667. OriginalFilename: WdFilter.sys
  1668. ProductVersion: 4.11.15063.0
  1669. FileVersion: 4.11.15063.0 (WinBuild.160101.0800)
  1670. FileDescription: Microsoft antimalware file system filter driver
  1671. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1672. fffff804`266a0000 fffff804`26b6f000 iaStorA (deferred)
  1673. Image path: iaStorA.sys
  1674. Image name: iaStorA.sys
  1675. Timestamp: Tue Sep 13 10:45:46 2016 (57D8111A)
  1676. CheckSum: 000C550F
  1677. ImageSize: 004CF000
  1678. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  1679. fffff804`26b70000 fffff804`26bfa000 storport (deferred)
  1680. Mapped memory image file: C:\ProgramData\dbg\sym\storport.sys\005E8DE48a000\storport.sys
  1681. Image path: storport.sys
  1682. Image name: storport.sys
  1683. Timestamp: Fri Mar 13 13:18:28 1970 (005E8DE4)
  1684. CheckSum: 0008C162
  1685. ImageSize: 0008A000
  1686. File version: 10.0.15063.312
  1687. Product version: 10.0.15063.312
  1688. File flags: 0 (Mask 3F)
  1689. File OS: 40004 NT Win32
  1690. File type: 3.7 Driver
  1691. File date: 00000000.00000000
  1692. Translations: 0000.04b0
  1693. CompanyName: Microsoft Corporation
  1694. ProductName: Microsoft® Windows® Operating System
  1695. InternalName: storport.sys
  1696. OriginalFilename: storport.sys
  1697. ProductVersion: 10.0.15063.312
  1698. FileVersion: 10.0.15063.312 (WinBuild.160101.0800)
  1699. FileDescription: Microsoft Storage Port Driver
  1700. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1701. fffff804`26c00000 fffff804`26c0d000 Fs_Rec (deferred)
  1702. Mapped memory image file: C:\ProgramData\dbg\sym\Fs_Rec.sys\9836443Cd000\Fs_Rec.sys
  1703. Image path: Fs_Rec.sys
  1704. Image name: Fs_Rec.sys
  1705. Timestamp: ***** Invalid (9836443C)
  1706. CheckSum: 00012F34
  1707. ImageSize: 0000D000
  1708. File version: 10.0.15052.0
  1709. Product version: 10.0.15052.0
  1710. File flags: 0 (Mask 3F)
  1711. File OS: 40004 NT Win32
  1712. File type: 3.7 Driver
  1713. File date: 00000000.00000000
  1714. Translations: 0409.04b0
  1715. CompanyName: Microsoft Corporation
  1716. ProductName: Microsoft® Windows® Operating System
  1717. InternalName: fs_rec.sys
  1718. OriginalFilename: fs_rec.sys
  1719. ProductVersion: 10.0.15052.0
  1720. FileVersion: 10.0.15052.0 (WinBuild.160101.0800)
  1721. FileDescription: File System Recognizer Driver
  1722. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1723. fffff804`26c10000 fffff804`26d46000 ndis (deferred)
  1724. Mapped memory image file: C:\ProgramData\dbg\sym\ndis.sys\45396ECD136000\ndis.sys
  1725. Image path: ndis.sys
  1726. Image name: ndis.sys
  1727. Timestamp: Fri Oct 20 20:50:21 2006 (45396ECD)
  1728. CheckSum: 00138177
  1729. ImageSize: 00136000
  1730. File version: 10.0.15063.442
  1731. Product version: 10.0.15063.442
  1732. File flags: 0 (Mask 3F)
  1733. File OS: 40004 NT Win32
  1734. File type: 3.6 Driver
  1735. File date: 00000000.00000000
  1736. Translations: 0409.04b0
  1737. CompanyName: Microsoft Corporation
  1738. ProductName: Microsoft® Windows® Operating System
  1739. InternalName: NDIS.SYS
  1740. OriginalFilename: NDIS.SYS
  1741. ProductVersion: 10.0.15063.442
  1742. FileVersion: 10.0.15063.442 (WinBuild.160101.0800)
  1743. FileDescription: Network Driver Interface Specification (NDIS)
  1744. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1745. fffff804`26d50000 fffff804`26dd5000 NETIO (deferred)
  1746. Mapped memory image file: C:\ProgramData\dbg\sym\NETIO.SYS\2F813BEF85000\NETIO.SYS
  1747. Image path: NETIO.SYS
  1748. Image name: NETIO.SYS
  1749. Timestamp: Tue Apr 4 08:30:39 1995 (2F813BEF)
  1750. CheckSum: 0008E61A
  1751. ImageSize: 00085000
  1752. File version: 10.0.15063.468
  1753. Product version: 10.0.15063.468
  1754. File flags: 0 (Mask 3F)
  1755. File OS: 40004 NT Win32
  1756. File type: 3.6 Driver
  1757. File date: 00000000.00000000
  1758. Translations: 0409.04b0
  1759. CompanyName: Microsoft Corporation
  1760. ProductName: Microsoft® Windows® Operating System
  1761. InternalName: netio.sys
  1762. OriginalFilename: netio.sys
  1763. ProductVersion: 10.0.15063.468
  1764. FileVersion: 10.0.15063.468 (WinBuild.160101.0800)
  1765. FileDescription: Network I/O Subsystem
  1766. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1767. fffff804`26de0000 fffff804`26e10000 ksecpkg (deferred)
  1768. Mapped memory image file: C:\ProgramData\dbg\sym\ksecpkg.sys\AC6D7E9B30000\ksecpkg.sys
  1769. Image path: ksecpkg.sys
  1770. Image name: ksecpkg.sys
  1771. Timestamp: ***** Invalid (AC6D7E9B)
  1772. CheckSum: 0002A48F
  1773. ImageSize: 00030000
  1774. File version: 10.0.15058.0
  1775. Product version: 10.0.15058.0
  1776. File flags: 0 (Mask 3F)
  1777. File OS: 40004 NT Win32
  1778. File type: 3.7 Driver
  1779. File date: 00000000.00000000
  1780. Translations: 0409.04b0
  1781. CompanyName: Microsoft Corporation
  1782. ProductName: Microsoft® Windows® Operating System
  1783. InternalName: ksecpkg.sys
  1784. OriginalFilename: ksecpkg.sys
  1785. ProductVersion: 10.0.15058.0
  1786. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  1787. FileDescription: Kernel Security Support Provider Interface Packages
  1788. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1789. fffff804`26fb0000 fffff804`271f3000 NTFS (deferred)
  1790. Mapped memory image file: C:\ProgramData\dbg\sym\NTFS.sys\26C2A6E9243000\NTFS.sys
  1791. Image path: NTFS.sys
  1792. Image name: NTFS.sys
  1793. Timestamp: Fri Aug 10 08:22:01 1990 (26C2A6E9)
  1794. CheckSum: 00244449
  1795. ImageSize: 00243000
  1796. File version: 10.0.15063.442
  1797. Product version: 10.0.15063.442
  1798. File flags: 0 (Mask 3F)
  1799. File OS: 40004 NT Win32
  1800. File type: 3.7 Driver
  1801. File date: 00000000.00000000
  1802. Translations: 0409.04b0
  1803. CompanyName: Microsoft Corporation
  1804. ProductName: Microsoft® Windows® Operating System
  1805. InternalName: ntfs.sys
  1806. OriginalFilename: ntfs.sys
  1807. ProductVersion: 10.0.15063.442
  1808. FileVersion: 10.0.15063.442 (WinBuild.160101.0800)
  1809. FileDescription: NT File System Driver
  1810. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1811. fffff804`27200000 fffff804`27264000 volsnap (deferred)
  1812. Mapped memory image file: C:\ProgramData\dbg\sym\volsnap.sys\DC1CFF9164000\volsnap.sys
  1813. Image path: volsnap.sys
  1814. Image name: volsnap.sys
  1815. Timestamp: ***** Invalid (DC1CFF91)
  1816. CheckSum: 0006B682
  1817. ImageSize: 00064000
  1818. File version: 10.0.15058.0
  1819. Product version: 10.0.15058.0
  1820. File flags: 0 (Mask 3F)
  1821. File OS: 40004 NT Win32
  1822. File type: 3.7 Driver
  1823. File date: 00000000.00000000
  1824. Translations: 0409.04b0
  1825. CompanyName: Microsoft Corporation
  1826. ProductName: Microsoft® Windows® Operating System
  1827. InternalName: volsnap.sys
  1828. OriginalFilename: volsnap.sys
  1829. ProductVersion: 10.0.15058.0
  1830. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  1831. FileDescription: Volume Shadow Copy driver
  1832. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1833. fffff804`27270000 fffff804`272bc000 rdyboost (deferred)
  1834. Mapped memory image file: C:\ProgramData\dbg\sym\rdyboost.sys\CA830C4C4c000\rdyboost.sys
  1835. Image path: rdyboost.sys
  1836. Image name: rdyboost.sys
  1837. Timestamp: ***** Invalid (CA830C4C)
  1838. CheckSum: 0004E490
  1839. ImageSize: 0004C000
  1840. File version: 10.0.15058.0
  1841. Product version: 10.0.15058.0
  1842. File flags: 0 (Mask 3F)
  1843. File OS: 40004 NT Win32
  1844. File type: 3.7 Driver
  1845. File date: 00000000.00000000
  1846. Translations: 0000.04b0
  1847. CompanyName: Microsoft Corporation
  1848. ProductName: Microsoft® Windows® Operating System
  1849. InternalName: rdyboost.sys
  1850. OriginalFilename: rdyboost.sys
  1851. ProductVersion: 10.0.15058.0
  1852. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  1853. FileDescription: ReadyBoost Driver
  1854. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1855. fffff804`272c0000 fffff804`272e4000 mup (deferred)
  1856. Mapped memory image file: C:\ProgramData\dbg\sym\mup.sys\98323F4C24000\mup.sys
  1857. Image path: mup.sys
  1858. Image name: mup.sys
  1859. Timestamp: ***** Invalid (98323F4C)
  1860. CheckSum: 0002CA2F
  1861. ImageSize: 00024000
  1862. File version: 10.0.15058.0
  1863. Product version: 10.0.15058.0
  1864. File flags: 0 (Mask 3F)
  1865. File OS: 40004 NT Win32
  1866. File type: 3.6 Driver
  1867. File date: 00000000.00000000
  1868. Translations: 0409.04b0
  1869. CompanyName: Microsoft Corporation
  1870. ProductName: Microsoft® Windows® Operating System
  1871. InternalName: MUP.SYS
  1872. OriginalFilename: MUP.SYS
  1873. ProductVersion: 10.0.15058.0
  1874. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  1875. FileDescription: Multiple UNC Provider Driver
  1876. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1877. fffff804`272f0000 fffff804`27301000 iorate (deferred)
  1878. Mapped memory image file: C:\ProgramData\dbg\sym\iorate.sys\510C4C9F11000\iorate.sys
  1879. Image path: iorate.sys
  1880. Image name: iorate.sys
  1881. Timestamp: Fri Feb 1 18:15:43 2013 (510C4C9F)
  1882. CheckSum: 00019E81
  1883. ImageSize: 00011000
  1884. File version: 10.0.15046.0
  1885. Product version: 10.0.15046.0
  1886. File flags: 0 (Mask 3F)
  1887. File OS: 40004 NT Win32
  1888. File type: 3.7 Driver
  1889. File date: 00000000.00000000
  1890. Translations: 0409.04b0
  1891. CompanyName: Microsoft Corporation
  1892. ProductName: Microsoft® Windows® Operating System
  1893. InternalName: iorate.sys
  1894. OriginalFilename: iorate.sys
  1895. ProductVersion: 10.0.15046.0
  1896. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  1897. FileDescription: I/O rate control Filter
  1898. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1899. fffff804`27320000 fffff804`2733e000 disk (deferred)
  1900. Mapped memory image file: C:\ProgramData\dbg\sym\disk.sys\49CE6E681e000\disk.sys
  1901. Image path: disk.sys
  1902. Image name: disk.sys
  1903. Timestamp: Sat Mar 28 14:37:28 2009 (49CE6E68)
  1904. CheckSum: 0001E637
  1905. ImageSize: 0001E000
  1906. File version: 10.0.15058.0
  1907. Product version: 10.0.15058.0
  1908. File flags: 0 (Mask 3F)
  1909. File OS: 40004 NT Win32
  1910. File type: 3.7 Driver
  1911. File date: 00000000.00000000
  1912. Translations: 0000.04b0
  1913. CompanyName: Microsoft Corporation
  1914. ProductName: Microsoft® Windows® Operating System
  1915. InternalName: disk.sys
  1916. OriginalFilename: disk.sys
  1917. ProductVersion: 10.0.15058.0
  1918. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  1919. FileDescription: PnP Disk Driver
  1920. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1921. fffff804`27340000 fffff804`273a5000 CLASSPNP (deferred)
  1922. Mapped memory image file: C:\ProgramData\dbg\sym\CLASSPNP.SYS\2A05694965000\CLASSPNP.SYS
  1923. Image path: CLASSPNP.SYS
  1924. Image name: CLASSPNP.SYS
  1925. Timestamp: Mon May 4 12:41:45 1992 (2A056949)
  1926. CheckSum: 0006CAEA
  1927. ImageSize: 00065000
  1928. File version: 10.0.15058.0
  1929. Product version: 10.0.15058.0
  1930. File flags: 0 (Mask 3F)
  1931. File OS: 40004 NT Win32
  1932. File type: 3.7 Driver
  1933. File date: 00000000.00000000
  1934. Translations: 0000.04b0
  1935. CompanyName: Microsoft Corporation
  1936. ProductName: Microsoft® Windows® Operating System
  1937. InternalName: Classpnp.sys
  1938. OriginalFilename: Classpnp.sys
  1939. ProductVersion: 10.0.15058.0
  1940. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  1941. FileDescription: SCSI Class System Dll
  1942. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1943. fffff804`273d0000 fffff804`273eb000 crashdmp (deferred)
  1944. Mapped memory image file: C:\ProgramData\dbg\sym\crashdmp.sys\2C13F6811b000\crashdmp.sys
  1945. Image path: crashdmp.sys
  1946. Image name: crashdmp.sys
  1947. Timestamp: Mon Jun 7 22:16:33 1993 (2C13F681)
  1948. CheckSum: 0001EF18
  1949. ImageSize: 0001B000
  1950. File version: 10.0.15058.0
  1951. Product version: 10.0.15058.0
  1952. File flags: 0 (Mask 3F)
  1953. File OS: 40004 NT Win32
  1954. File type: 3.7 Driver
  1955. File date: 00000000.00000000
  1956. Translations: 0409.04b0
  1957. CompanyName: Microsoft Corporation
  1958. ProductName: Microsoft® Windows® Operating System
  1959. InternalName: crashdmp.sys
  1960. OriginalFilename: crashdmp.sys
  1961. ProductVersion: 10.0.15058.0
  1962. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  1963. FileDescription: Crash Dump Driver
  1964. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1965. fffff804`273f0000 fffff804`2741e000 cdrom (deferred)
  1966. Mapped memory image file: C:\ProgramData\dbg\sym\cdrom.sys\04CCA32D2e000\cdrom.sys
  1967. Image path: cdrom.sys
  1968. Image name: cdrom.sys
  1969. Timestamp: Thu Jul 20 18:39:41 1972 (04CCA32D)
  1970. CheckSum: 00036ABC
  1971. ImageSize: 0002E000
  1972. File version: 10.0.15046.0
  1973. Product version: 10.0.15046.0
  1974. File flags: 0 (Mask 3F)
  1975. File OS: 40004 NT Win32
  1976. File type: 3.7 Driver
  1977. File date: 00000000.00000000
  1978. Translations: 0000.04b0
  1979. CompanyName: Microsoft Corporation
  1980. ProductName: Microsoft® Windows® Operating System
  1981. InternalName: cdrom.sys
  1982. OriginalFilename: cdrom.sys
  1983. ProductVersion: 10.0.15046.0
  1984. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  1985. FileDescription: SCSI CD-ROM Driver
  1986. LegalCopyright: © Microsoft Corporation. All rights reserved.
  1987. fffff804`27420000 fffff804`27434000 filecrypt (deferred)
  1988. Mapped memory image file: C:\ProgramData\dbg\sym\filecrypt.sys\719E181314000\filecrypt.sys
  1989. Image path: filecrypt.sys
  1990. Image name: filecrypt.sys
  1991. Timestamp: Tue May 28 04:10:59 2030 (719E1813)
  1992. CheckSum: 0001B03D
  1993. ImageSize: 00014000
  1994. File version: 10.0.15046.0
  1995. Product version: 10.0.15046.0
  1996. File flags: 0 (Mask 3F)
  1997. File OS: 40004 NT Win32
  1998. File type: 3.7 Driver
  1999. File date: 00000000.00000000
  2000. Translations: 0409.04b0
  2001. CompanyName: Microsoft Corporation
  2002. ProductName: Microsoft® Windows® Operating System
  2003. InternalName: filecrypt.sys
  2004. OriginalFilename: filecrypt.sys
  2005. ProductVersion: 10.0.15046.0
  2006. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  2007. FileDescription: Windows sandboxing and encryption filter
  2008. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2009. fffff804`27440000 fffff804`2744d000 tbs (deferred)
  2010. Mapped memory image file: C:\ProgramData\dbg\sym\tbs.sys\6C444C9Bd000\tbs.sys
  2011. Image path: tbs.sys
  2012. Image name: tbs.sys
  2013. Timestamp: Sat Jul 24 03:49:47 2027 (6C444C9B)
  2014. CheckSum: 00007016
  2015. ImageSize: 0000D000
  2016. File version: 10.0.15046.0
  2017. Product version: 10.0.15046.0
  2018. File flags: 0 (Mask 3F)
  2019. File OS: 40004 NT Win32
  2020. File type: 3.7 Driver
  2021. File date: 00000000.00000000
  2022. Translations: 0409.04b0
  2023. CompanyName: Microsoft Corporation
  2024. ProductName: Microsoft® Windows® Operating System
  2025. InternalName: TBS.SYS
  2026. OriginalFilename: TBS.SYS
  2027. ProductVersion: 10.0.15046.0
  2028. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  2029. FileDescription: Export driver for kernel mode TPM API
  2030. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2031. fffff804`27450000 fffff804`2745a000 Null (deferred)
  2032. Mapped memory image file: C:\ProgramData\dbg\sym\Null.SYS\D1CBAAABa000\Null.SYS
  2033. Image path: Null.SYS
  2034. Image name: Null.SYS
  2035. Timestamp: ***** Invalid (D1CBAAAB)
  2036. CheckSum: 00011868
  2037. ImageSize: 0000A000
  2038. File version: 10.0.15046.0
  2039. Product version: 10.0.15046.0
  2040. File flags: 0 (Mask 3F)
  2041. File OS: 40004 NT Win32
  2042. File type: 3.7 Driver
  2043. File date: 00000000.00000000
  2044. Translations: 0409.04b0
  2045. CompanyName: Microsoft Corporation
  2046. ProductName: Microsoft® Windows® Operating System
  2047. InternalName: null.sys
  2048. OriginalFilename: null.sys
  2049. ProductVersion: 10.0.15046.0
  2050. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  2051. FileDescription: NULL Driver
  2052. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2053. fffff804`27460000 fffff804`2746a000 Beep (deferred)
  2054. Mapped memory image file: C:\ProgramData\dbg\sym\Beep.SYS\A94A035Ea000\Beep.SYS
  2055. Image path: Beep.SYS
  2056. Image name: Beep.SYS
  2057. Timestamp: ***** Invalid (A94A035E)
  2058. CheckSum: 0000B8DE
  2059. ImageSize: 0000A000
  2060. File version: 10.0.15046.0
  2061. Product version: 10.0.15046.0
  2062. File flags: 0 (Mask 3F)
  2063. File OS: 40004 NT Win32
  2064. File type: 3.7 Driver
  2065. File date: 00000000.00000000
  2066. Translations: 0409.04b0
  2067. CompanyName: Microsoft Corporation
  2068. ProductName: Microsoft® Windows® Operating System
  2069. InternalName: beep.sys
  2070. OriginalFilename: beep.sys
  2071. ProductVersion: 10.0.15046.0
  2072. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  2073. FileDescription: BEEP Driver
  2074. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2075. fffff804`27470000 fffff804`27485000 BasicDisplay (deferred)
  2076. Mapped memory image file: C:\ProgramData\dbg\sym\BasicDisplay.sys\E7A205B415000\BasicDisplay.sys
  2077. Image path: BasicDisplay.sys
  2078. Image name: BasicDisplay.sys
  2079. Timestamp: ***** Invalid (E7A205B4)
  2080. CheckSum: 000178AD
  2081. ImageSize: 00015000
  2082. File version: 10.0.15046.0
  2083. Product version: 10.0.15046.0
  2084. File flags: 0 (Mask 3F)
  2085. File OS: 40004 NT Win32
  2086. File type: 3.4 Driver
  2087. File date: 00000000.00000000
  2088. Translations: 0000.04b0
  2089. CompanyName: Microsoft Corporation
  2090. ProductName: Microsoft® Windows® Operating System
  2091. InternalName: BasicDisplay.sys
  2092. OriginalFilename: BasicDisplay.sys
  2093. ProductVersion: 10.0.15046.0
  2094. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  2095. FileDescription: Microsoft Basic Display Driver
  2096. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2097. fffff804`27490000 fffff804`274a4000 watchdog (deferred)
  2098. Mapped memory image file: C:\ProgramData\dbg\sym\watchdog.sys\DFC4C1CD14000\watchdog.sys
  2099. Image path: watchdog.sys
  2100. Image name: watchdog.sys
  2101. Timestamp: ***** Invalid (DFC4C1CD)
  2102. CheckSum: 0001BE1C
  2103. ImageSize: 00014000
  2104. File version: 10.0.15058.0
  2105. Product version: 10.0.15058.0
  2106. File flags: 0 (Mask 3F)
  2107. File OS: 40004 NT Win32
  2108. File type: 2.0 Dll
  2109. File date: 00000000.00000000
  2110. Translations: 0000.04b0
  2111. CompanyName: Microsoft Corporation
  2112. ProductName: Microsoft® Windows® Operating System
  2113. InternalName: watchdog.sys
  2114. OriginalFilename: watchdog.sys
  2115. ProductVersion: 10.0.15058.0
  2116. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  2117. FileDescription: Watchdog Driver
  2118. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2119. fffff804`274b0000 fffff804`2770a000 dxgkrnl (deferred)
  2120. Mapped memory image file: C:\ProgramData\dbg\sym\dxgkrnl.sys\DE0AC79A25a000\dxgkrnl.sys
  2121. Image path: dxgkrnl.sys
  2122. Image name: dxgkrnl.sys
  2123. Timestamp: ***** Invalid (DE0AC79A)
  2124. CheckSum: 00260856
  2125. ImageSize: 0025A000
  2126. File version: 10.0.15063.481
  2127. Product version: 10.0.15063.481
  2128. File flags: 0 (Mask 3F)
  2129. File OS: 40004 NT Win32
  2130. File type: 3.7 Driver
  2131. File date: 00000000.00000000
  2132. Translations: 0409.04b0
  2133. CompanyName: Microsoft Corporation
  2134. ProductName: Microsoft® Windows® Operating System
  2135. InternalName: dxgkrnl.sys
  2136. OriginalFilename: dxgkrnl.sys
  2137. ProductVersion: 10.0.15063.481
  2138. FileVersion: 10.0.15063.481 (WinBuild.160101.0800)
  2139. FileDescription: DirectX Graphics Kernel
  2140. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2141. fffff804`27710000 fffff804`2772a000 vmbkmclr (deferred)
  2142. Mapped memory image file: C:\ProgramData\dbg\sym\vmbkmclr.sys\2CD1D7AA1a000\vmbkmclr.sys
  2143. Image path: vmbkmclr.sys
  2144. Image name: vmbkmclr.sys
  2145. Timestamp: Fri Oct 29 22:55:38 1993 (2CD1D7AA)
  2146. CheckSum: 0001B34D
  2147. ImageSize: 0001A000
  2148. File version: 10.0.15046.0
  2149. Product version: 10.0.15046.0
  2150. File flags: 0 (Mask 3F)
  2151. File OS: 40004 NT Win32
  2152. File type: 3.7 Driver
  2153. File date: 00000000.00000000
  2154. Translations: 0409.04b0
  2155. CompanyName: Microsoft Corporation
  2156. ProductName: Microsoft® Windows® Operating System
  2157. InternalName: vmbkmclr.sys
  2158. OriginalFilename: vmbkmclr.sys
  2159. ProductVersion: 10.0.15046.0
  2160. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  2161. FileDescription: Hyper-V VMBus Root KMCL
  2162. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2163. fffff804`27730000 fffff804`27740000 BasicRender (deferred)
  2164. Mapped memory image file: C:\ProgramData\dbg\sym\BasicRender.sys\4692B90410000\BasicRender.sys
  2165. Image path: BasicRender.sys
  2166. Image name: BasicRender.sys
  2167. Timestamp: Mon Jul 9 18:39:00 2007 (4692B904)
  2168. CheckSum: 000185B7
  2169. ImageSize: 00010000
  2170. File version: 10.0.15063.409
  2171. Product version: 10.0.15063.409
  2172. File flags: 0 (Mask 3F)
  2173. File OS: 40004 NT Win32
  2174. File type: 3.4 Driver
  2175. File date: 00000000.00000000
  2176. Translations: 0000.04b0
  2177. CompanyName: Microsoft Corporation
  2178. ProductName: Microsoft® Windows® Operating System
  2179. InternalName: BasicRender.sys
  2180. OriginalFilename: BasicRender.sys
  2181. ProductVersion: 10.0.15063.409
  2182. FileVersion: 10.0.15063.409 (WinBuild.160101.0800)
  2183. FileDescription: Microsoft Basic Render Driver
  2184. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2185. fffff804`27740000 fffff804`27759000 Npfs (deferred)
  2186. Mapped memory image file: C:\ProgramData\dbg\sym\Npfs.SYS\71DCD8D919000\Npfs.SYS
  2187. Image path: Npfs.SYS
  2188. Image name: Npfs.SYS
  2189. Timestamp: Sun Jul 14 18:34:01 2030 (71DCD8D9)
  2190. CheckSum: 00012322
  2191. ImageSize: 00019000
  2192. File version: 10.0.15058.0
  2193. Product version: 10.0.15058.0
  2194. File flags: 0 (Mask 3F)
  2195. File OS: 40004 NT Win32
  2196. File type: 3.7 Driver
  2197. File date: 00000000.00000000
  2198. Translations: 0409.04b0
  2199. CompanyName: Microsoft Corporation
  2200. ProductName: Microsoft® Windows® Operating System
  2201. InternalName: npfs.sys
  2202. OriginalFilename: npfs.sys
  2203. ProductVersion: 10.0.15058.0
  2204. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  2205. FileDescription: NPFS Driver
  2206. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2207. fffff804`27760000 fffff804`27770000 Msfs (deferred)
  2208. Mapped memory image file: C:\ProgramData\dbg\sym\Msfs.SYS\39F56D6310000\Msfs.SYS
  2209. Image path: Msfs.SYS
  2210. Image name: Msfs.SYS
  2211. Timestamp: Tue Oct 24 07:07:15 2000 (39F56D63)
  2212. CheckSum: 0000C5C3
  2213. ImageSize: 00010000
  2214. File version: 10.0.15052.0
  2215. Product version: 10.0.15052.0
  2216. File flags: 0 (Mask 3F)
  2217. File OS: 40004 NT Win32
  2218. File type: 3.7 Driver
  2219. File date: 00000000.00000000
  2220. Translations: 0409.04b0
  2221. CompanyName: Microsoft Corporation
  2222. ProductName: Microsoft® Windows® Operating System
  2223. InternalName: MSFS.SYS
  2224. OriginalFilename: MSFS.SYS
  2225. ProductVersion: 10.0.15052.0
  2226. FileVersion: 10.0.15052.0 (WinBuild.160101.0800)
  2227. FileDescription: Mailslot driver
  2228. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2229. fffff804`27770000 fffff804`27792000 tdx (deferred)
  2230. Mapped memory image file: C:\ProgramData\dbg\sym\tdx.sys\92AD75A722000\tdx.sys
  2231. Image path: tdx.sys
  2232. Image name: tdx.sys
  2233. Timestamp: ***** Invalid (92AD75A7)
  2234. CheckSum: 00026155
  2235. ImageSize: 00022000
  2236. File version: 10.0.15063.409
  2237. Product version: 10.0.15063.409
  2238. File flags: 0 (Mask 3F)
  2239. File OS: 40004 NT Win32
  2240. File type: 3.6 Driver
  2241. File date: 00000000.00000000
  2242. Translations: 0409.04b0
  2243. CompanyName: Microsoft Corporation
  2244. ProductName: Microsoft® Windows® Operating System
  2245. InternalName: tdx.sys
  2246. OriginalFilename: tdx.sys
  2247. ProductVersion: 10.0.15063.409
  2248. FileVersion: 10.0.15063.409 (WinBuild.160101.0800)
  2249. FileDescription: TDI Translation Driver
  2250. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2251. fffff804`277a0000 fffff804`277b0000 TDI (deferred)
  2252. Mapped memory image file: C:\ProgramData\dbg\sym\TDI.SYS\D2C3B05910000\TDI.SYS
  2253. Image path: TDI.SYS
  2254. Image name: TDI.SYS
  2255. Timestamp: ***** Invalid (D2C3B059)
  2256. CheckSum: 0000FA4A
  2257. ImageSize: 00010000
  2258. File version: 10.0.15058.0
  2259. Product version: 10.0.15058.0
  2260. File flags: 0 (Mask 3F)
  2261. File OS: 40004 NT Win32
  2262. File type: 3.6 Driver
  2263. File date: 00000000.00000000
  2264. Translations: 0409.04b0
  2265. CompanyName: Microsoft Corporation
  2266. ProductName: Microsoft® Windows® Operating System
  2267. InternalName: tdi.sys
  2268. OriginalFilename: tdi.sys
  2269. ProductVersion: 10.0.15058.0
  2270. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  2271. FileDescription: TDI Wrapper
  2272. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2273. fffff804`277b0000 fffff804`27802000 netbt (deferred)
  2274. Mapped memory image file: C:\ProgramData\dbg\sym\netbt.sys\B2AD25BE52000\netbt.sys
  2275. Image path: netbt.sys
  2276. Image name: netbt.sys
  2277. Timestamp: ***** Invalid (B2AD25BE)
  2278. CheckSum: 00055B39
  2279. ImageSize: 00052000
  2280. File version: 10.0.15058.0
  2281. Product version: 10.0.15058.0
  2282. File flags: 0 (Mask 3F)
  2283. File OS: 40004 NT Win32
  2284. File type: 3.7 Driver
  2285. File date: 00000000.00000000
  2286. Translations: 0409.04b0
  2287. CompanyName: Microsoft Corporation
  2288. ProductName: Microsoft® Windows® Operating System
  2289. InternalName: netbt.sys
  2290. OriginalFilename: netbt.sys
  2291. ProductVersion: 10.0.15058.0
  2292. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  2293. FileDescription: MBT Transport driver
  2294. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2295. fffff804`27810000 fffff804`278ab000 afd (deferred)
  2296. Mapped memory image file: C:\ProgramData\dbg\sym\afd.sys\ED6FDF1B9b000\afd.sys
  2297. Image path: afd.sys
  2298. Image name: afd.sys
  2299. Timestamp: ***** Invalid (ED6FDF1B)
  2300. CheckSum: 0009BF2E
  2301. ImageSize: 0009B000
  2302. File version: 10.0.15058.0
  2303. Product version: 10.0.15058.0
  2304. File flags: 0 (Mask 3F)
  2305. File OS: 40004 NT Win32
  2306. File type: 3.7 Driver
  2307. File date: 00000000.00000000
  2308. Translations: 0409.04b0
  2309. CompanyName: Microsoft Corporation
  2310. ProductName: Microsoft® Windows® Operating System
  2311. InternalName: afd.sys
  2312. OriginalFilename: afd.sys
  2313. ProductVersion: 10.0.15058.0
  2314. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  2315. FileDescription: Ancillary Function Driver for WinSock
  2316. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2317. fffff804`278b0000 fffff804`278ca000 vwififlt (deferred)
  2318. Mapped memory image file: C:\ProgramData\dbg\sym\vwififlt.sys\7575D0541a000\vwififlt.sys
  2319. Image path: vwififlt.sys
  2320. Image name: vwififlt.sys
  2321. Timestamp: Sat Jun 12 08:15:16 2032 (7575D054)
  2322. CheckSum: 000177F5
  2323. ImageSize: 0001A000
  2324. File version: 10.0.15046.0
  2325. Product version: 10.0.15046.0
  2326. File flags: 0 (Mask 3F)
  2327. File OS: 40004 NT Win32
  2328. File type: 3.6 Driver
  2329. File date: 00000000.00000000
  2330. Translations: 0000.04b0
  2331. CompanyName: Microsoft Corporation
  2332. ProductName: Microsoft® Windows® Operating System
  2333. InternalName: vwififlt.sys
  2334. OriginalFilename: vwififlt.sys
  2335. ProductVersion: 10.0.15046.0
  2336. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  2337. FileDescription: Virtual WiFi Filter Driver
  2338. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2339. fffff804`278d0000 fffff804`278f9000 pacer (deferred)
  2340. Mapped memory image file: C:\ProgramData\dbg\sym\pacer.sys\C07DAF1029000\pacer.sys
  2341. Image path: pacer.sys
  2342. Image name: pacer.sys
  2343. Timestamp: ***** Invalid (C07DAF10)
  2344. CheckSum: 0002B1A2
  2345. ImageSize: 00029000
  2346. File version: 10.0.15058.0
  2347. Product version: 10.0.15058.0
  2348. File flags: 0 (Mask 3F)
  2349. File OS: 40004 NT Win32
  2350. File type: 3.6 Driver
  2351. File date: 00000000.00000000
  2352. Translations: 0409.04b0
  2353. CompanyName: Microsoft Corporation
  2354. ProductName: Microsoft® Windows® Operating System
  2355. InternalName: pacer.sys
  2356. OriginalFilename: pacer.sys
  2357. ProductVersion: 10.0.15058.0
  2358. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  2359. FileDescription: QoS Packet Scheduler
  2360. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2361. fffff804`27900000 fffff804`27912000 netbios (deferred)
  2362. Mapped memory image file: C:\ProgramData\dbg\sym\netbios.sys\93C21EE712000\netbios.sys
  2363. Image path: netbios.sys
  2364. Image name: netbios.sys
  2365. Timestamp: ***** Invalid (93C21EE7)
  2366. CheckSum: 0001A8FF
  2367. ImageSize: 00012000
  2368. File version: 10.0.15046.0
  2369. Product version: 10.0.15046.0
  2370. File flags: 0 (Mask 3F)
  2371. File OS: 40004 NT Win32
  2372. File type: 3.6 Driver
  2373. File date: 00000000.00000000
  2374. Translations: 0409.04b0
  2375. CompanyName: Microsoft Corporation
  2376. ProductName: Microsoft® Windows® Operating System
  2377. InternalName: NETBIOS.SYS
  2378. OriginalFilename: NETBIOS.SYS
  2379. ProductVersion: 10.0.15046.0
  2380. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  2381. FileDescription: NetBIOS interface driver
  2382. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2383. fffff804`27920000 fffff804`27995000 rdbss (deferred)
  2384. Mapped memory image file: C:\ProgramData\dbg\sym\rdbss.sys\E291A5CA75000\rdbss.sys
  2385. Image path: rdbss.sys
  2386. Image name: rdbss.sys
  2387. Timestamp: ***** Invalid (E291A5CA)
  2388. CheckSum: 000792B0
  2389. ImageSize: 00075000
  2390. File version: 10.0.15058.0
  2391. Product version: 10.0.15058.0
  2392. File flags: 0 (Mask 3F)
  2393. File OS: 40004 NT Win32
  2394. File type: 3.7 Driver
  2395. File date: 00000000.00000000
  2396. Translations: 0409.04b0
  2397. CompanyName: Microsoft Corporation
  2398. ProductName: Microsoft® Windows® Operating System
  2399. InternalName: rdbss.sys
  2400. OriginalFilename: RDBSS.Sys
  2401. ProductVersion: 10.0.15058.0
  2402. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  2403. FileDescription: Redirected Drive Buffering SubSystem Driver
  2404. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2405. fffff804`279a0000 fffff804`27a2f000 csc (deferred)
  2406. Mapped memory image file: C:\ProgramData\dbg\sym\csc.sys\7EFA9C6D8f000\csc.sys
  2407. Image path: csc.sys
  2408. Image name: csc.sys
  2409. Timestamp: Sat Jul 4 16:47:41 2037 (7EFA9C6D)
  2410. CheckSum: 0008D9D8
  2411. ImageSize: 0008F000
  2412. File version: 10.0.15058.0
  2413. Product version: 10.0.15058.0
  2414. File flags: 0 (Mask 3F)
  2415. File OS: 40004 NT Win32
  2416. File type: 3.7 Driver
  2417. File date: 00000000.00000000
  2418. Translations: 0409.04b0
  2419. CompanyName: Microsoft Corporation
  2420. ProductName: Microsoft® Windows® Operating System
  2421. InternalName: csc.sys
  2422. OriginalFilename: CSC.Sys
  2423. ProductVersion: 10.0.15058.0
  2424. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  2425. FileDescription: Windows Client Side Caching Driver
  2426. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2427. fffff804`27a30000 fffff804`27a73000 YSDrv (deferred)
  2428. Image path: YSDrv.sys
  2429. Image name: YSDrv.sys
  2430. Timestamp: Sat Jan 21 01:41:13 2017 (58830289)
  2431. CheckSum: 00042B72
  2432. ImageSize: 00043000
  2433. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  2434. fffff804`27a80000 fffff804`27a91000 nsiproxy (deferred)
  2435. Mapped memory image file: C:\ProgramData\dbg\sym\nsiproxy.sys\E796A4DD11000\nsiproxy.sys
  2436. Image path: nsiproxy.sys
  2437. Image name: nsiproxy.sys
  2438. Timestamp: ***** Invalid (E796A4DD)
  2439. CheckSum: 0001247A
  2440. ImageSize: 00011000
  2441. File version: 10.0.15058.0
  2442. Product version: 10.0.15058.0
  2443. File flags: 0 (Mask 3F)
  2444. File OS: 40004 NT Win32
  2445. File type: 3.6 Driver
  2446. File date: 00000000.00000000
  2447. Translations: 0409.04b0
  2448. CompanyName: Microsoft Corporation
  2449. ProductName: Microsoft® Windows® Operating System
  2450. InternalName: nsiproxy.sys
  2451. OriginalFilename: nsiproxy.sys
  2452. ProductVersion: 10.0.15058.0
  2453. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  2454. FileDescription: NSI Proxy
  2455. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2456. fffff804`27aa0000 fffff804`27aaf000 npsvctrig (deferred)
  2457. Mapped memory image file: C:\ProgramData\dbg\sym\npsvctrig.sys\EFF190DDf000\npsvctrig.sys
  2458. Image path: npsvctrig.sys
  2459. Image name: npsvctrig.sys
  2460. Timestamp: ***** Invalid (EFF190DD)
  2461. CheckSum: 00009E31
  2462. ImageSize: 0000F000
  2463. File version: 10.0.15046.0
  2464. Product version: 10.0.15046.0
  2465. File flags: 0 (Mask 3F)
  2466. File OS: 40004 NT Win32
  2467. File type: 3.7 Driver
  2468. File date: 00000000.00000000
  2469. Translations: 0409.04b0
  2470. CompanyName: Microsoft Corporation
  2471. ProductName: Microsoft® Windows® Operating System
  2472. InternalName: npsvctrig.sys
  2473. OriginalFilename: npsvctrig.sys
  2474. ProductVersion: 10.0.15046.0
  2475. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  2476. FileDescription: Named pipe service triggers
  2477. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2478. fffff804`27ab0000 fffff804`27ac0000 mssmbios (deferred)
  2479. Mapped memory image file: C:\ProgramData\dbg\sym\mssmbios.sys\BC4E1F4C10000\mssmbios.sys
  2480. Image path: mssmbios.sys
  2481. Image name: mssmbios.sys
  2482. Timestamp: ***** Invalid (BC4E1F4C)
  2483. CheckSum: 0000F528
  2484. ImageSize: 00010000
  2485. File version: 10.0.15046.0
  2486. Product version: 10.0.15046.0
  2487. File flags: 0 (Mask 3F)
  2488. File OS: 40004 NT Win32
  2489. File type: 3.7 Driver
  2490. File date: 00000000.00000000
  2491. Translations: 0409.04b0
  2492. CompanyName: Microsoft Corporation
  2493. ProductName: Microsoft® Windows® Operating System
  2494. InternalName: smbios.sys
  2495. OriginalFilename: smbios.sys
  2496. ProductVersion: 10.0.15046.0
  2497. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  2498. FileDescription: System Management BIOS Driver
  2499. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2500. fffff804`27ac0000 fffff804`27ace000 MpKsl5e538c4b (deferred)
  2501. Image path: MpKsl5e538c4b.sys
  2502. Image name: MpKsl5e538c4b.sys
  2503. Timestamp: Tue May 19 21:50:37 2015 (555BE86D)
  2504. CheckSum: 0000D1AA
  2505. ImageSize: 0000E000
  2506. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  2507. fffff804`27ad0000 fffff804`27ada000 gpuenergydrv (deferred)
  2508. Mapped memory image file: C:\ProgramData\dbg\sym\gpuenergydrv.sys\05622075a000\gpuenergydrv.sys
  2509. Image path: gpuenergydrv.sys
  2510. Image name: gpuenergydrv.sys
  2511. Timestamp: Sat Nov 11 03:01:57 1972 (05622075)
  2512. CheckSum: 0000429A
  2513. ImageSize: 0000A000
  2514. File version: 10.0.15046.0
  2515. Product version: 10.0.15046.0
  2516. File flags: 0 (Mask 3F)
  2517. File OS: 40004 NT Win32
  2518. File type: 3.7 Driver
  2519. File date: 00000000.00000000
  2520. Translations: 0409.04b0
  2521. CompanyName: Microsoft Corporation
  2522. ProductName: Microsoft® Windows® Operating System
  2523. InternalName: gpuenergydrv.sys
  2524. OriginalFilename: gpuenergydrv.sys
  2525. ProductVersion: 10.0.15046.0
  2526. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  2527. FileDescription: GPU Energy Kernel Driver
  2528. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2529. fffff804`27ae0000 fffff804`27b0b000 dfsc (deferred)
  2530. Mapped memory image file: C:\ProgramData\dbg\sym\dfsc.sys\640317972b000\dfsc.sys
  2531. Image path: dfsc.sys
  2532. Image name: dfsc.sys
  2533. Timestamp: Sat Mar 4 05:04:07 2023 (64031797)
  2534. CheckSum: 00032C04
  2535. ImageSize: 0002B000
  2536. File version: 10.0.15058.0
  2537. Product version: 10.0.15058.0
  2538. File flags: 0 (Mask 3F)
  2539. File OS: 40004 NT Win32
  2540. File type: 3.7 Driver
  2541. File date: 00000000.00000000
  2542. Translations: 0409.04b0
  2543. CompanyName: Microsoft Corporation
  2544. ProductName: Microsoft® Windows® Operating System
  2545. InternalName: dfsclient.sys
  2546. OriginalFilename: dfsclient.sys
  2547. ProductVersion: 10.0.15058.0
  2548. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  2549. FileDescription: DFS Namespace Client Driver
  2550. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2551. fffff804`27b30000 fffff804`27b71000 ahcache (deferred)
  2552. Mapped memory image file: C:\ProgramData\dbg\sym\ahcache.sys\410882A241000\ahcache.sys
  2553. Image path: ahcache.sys
  2554. Image name: ahcache.sys
  2555. Timestamp: Thu Jul 29 00:52:50 2004 (410882A2)
  2556. CheckSum: 00045EB6
  2557. ImageSize: 00041000
  2558. File version: 10.0.15058.0
  2559. Product version: 10.0.15058.0
  2560. File flags: 0 (Mask 3F)
  2561. File OS: 40004 NT Win32
  2562. File type: 3.7 Driver
  2563. File date: 00000000.00000000
  2564. Translations: 0409.04b0
  2565. CompanyName: Microsoft Corporation
  2566. ProductName: Microsoft® Windows® Operating System
  2567. InternalName: ahcache.sys
  2568. OriginalFilename: ahcache.sys
  2569. ProductVersion: 10.0.15058.0
  2570. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  2571. FileDescription: Application Compatibility Cache
  2572. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2573. fffff804`27b80000 fffff804`27b91000 CompositeBus (deferred)
  2574. Mapped memory image file: C:\ProgramData\dbg\sym\CompositeBus.sys\A29FEBD911000\CompositeBus.sys
  2575. Image path: CompositeBus.sys
  2576. Image name: CompositeBus.sys
  2577. Timestamp: ***** Invalid (A29FEBD9)
  2578. CheckSum: 0000BFAF
  2579. ImageSize: 00011000
  2580. File version: 10.0.15046.0
  2581. Product version: 10.0.15046.0
  2582. File flags: 0 (Mask 3F)
  2583. File OS: 40004 NT Win32
  2584. File type: 2.0 Dll
  2585. File date: 00000000.00000000
  2586. Translations: 0409.04b0
  2587. CompanyName: Microsoft Corporation
  2588. ProductName: Microsoft® Windows® Operating System
  2589. InternalName: compositebus.sys
  2590. OriginalFilename: compositebus.sys
  2591. ProductVersion: 10.0.15046.0
  2592. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  2593. FileDescription: Multi-Transport Composite Bus Enumerator
  2594. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2595. fffff804`27ba0000 fffff804`27bad000 kdnic (deferred)
  2596. Mapped memory image file: C:\ProgramData\dbg\sym\kdnic.sys\E88EF29Ad000\kdnic.sys
  2597. Image path: kdnic.sys
  2598. Image name: kdnic.sys
  2599. Timestamp: ***** Invalid (E88EF29A)
  2600. CheckSum: 00012EF1
  2601. ImageSize: 0000D000
  2602. File version: 6.1.0.0
  2603. Product version: 6.1.0.0
  2604. File flags: 0 (Mask 3F)
  2605. File OS: 40004 NT Win32
  2606. File type: 3.7 Driver
  2607. File date: 00000000.00000000
  2608. Translations: 0000.04b0
  2609. CompanyName: Microsoft Corporation
  2610. ProductName: Microsoft Kernel Debugger Network Adapter (NDIS 6.20 Miniport)
  2611. InternalName: kdnic.sys
  2612. OriginalFilename: kdnic.sys
  2613. ProductVersion: 6.01.00.0000
  2614. FileVersion: 6.01.00.0000 (WinBuild.160101.0800)
  2615. FileDescription: Microsoft Kernel Debugger Network Miniport
  2616. LegalCopyright: Copyright (C) Microsoft Corporation. All rights reserved.
  2617. fffff804`27bb0000 fffff804`27bc5000 umbus (deferred)
  2618. Mapped memory image file: C:\ProgramData\dbg\sym\umbus.sys\6863F00915000\umbus.sys
  2619. Image path: umbus.sys
  2620. Image name: umbus.sys
  2621. Timestamp: Tue Jul 1 10:26:17 2025 (6863F009)
  2622. CheckSum: 0001604F
  2623. ImageSize: 00015000
  2624. File version: 10.0.15046.0
  2625. Product version: 10.0.15046.0
  2626. File flags: 0 (Mask 3F)
  2627. File OS: 40004 NT Win32
  2628. File type: 2.0 Dll
  2629. File date: 00000000.00000000
  2630. Translations: 0409.04b0
  2631. CompanyName: Microsoft Corporation
  2632. ProductName: Microsoft® Windows® Operating System
  2633. InternalName: umbus.sys
  2634. OriginalFilename: umbus.sys
  2635. ProductVersion: 10.0.15046.0
  2636. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  2637. FileDescription: User-Mode Bus Enumerator
  2638. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2639. fffff804`27bd0000 fffff804`27be2000 hidusb (deferred)
  2640. Mapped memory image file: C:\ProgramData\dbg\sym\hidusb.sys\572851EF12000\hidusb.sys
  2641. Image path: hidusb.sys
  2642. Image name: hidusb.sys
  2643. Timestamp: Tue May 3 03:23:27 2016 (572851EF)
  2644. CheckSum: 00016E3E
  2645. ImageSize: 00012000
  2646. File version: 10.0.15046.0
  2647. Product version: 10.0.15046.0
  2648. File flags: 0 (Mask 3F)
  2649. File OS: 40004 NT Win32
  2650. File type: 2.0 Dll
  2651. File date: 00000000.00000000
  2652. Translations: 0409.04b0
  2653. CompanyName: Microsoft Corporation
  2654. ProductName: Microsoft® Windows® Operating System
  2655. InternalName: HIDUSB.SYS
  2656. OriginalFilename: HIDUSB.SYS
  2657. ProductVersion: 10.0.15046.0
  2658. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  2659. FileDescription: USB Miniport Driver for Input Devices
  2660. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2661. fffff804`27bf0000 fffff804`27c23000 HIDCLASS (deferred)
  2662. Mapped memory image file: C:\ProgramData\dbg\sym\HIDCLASS.SYS\28A8EF3D33000\HIDCLASS.SYS
  2663. Image path: HIDCLASS.SYS
  2664. Image name: HIDCLASS.SYS
  2665. Timestamp: Wed Aug 14 04:52:13 1991 (28A8EF3D)
  2666. CheckSum: 000367E8
  2667. ImageSize: 00033000
  2668. File version: 10.0.15058.0
  2669. Product version: 10.0.15058.0
  2670. File flags: 0 (Mask 3F)
  2671. File OS: 40004 NT Win32
  2672. File type: 2.0 Dll
  2673. File date: 00000000.00000000
  2674. Translations: 0409.04b0
  2675. CompanyName: Microsoft Corporation
  2676. ProductName: Microsoft® Windows® Operating System
  2677. InternalName: hidclass.sys
  2678. OriginalFilename: hidclass.sys
  2679. ProductVersion: 10.0.15058.0
  2680. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  2681. FileDescription: Hid Class Library
  2682. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2683. fffff804`27c30000 fffff804`27c42000 HIDPARSE (deferred)
  2684. Mapped memory image file: C:\ProgramData\dbg\sym\HIDPARSE.SYS\CCA5718512000\HIDPARSE.SYS
  2685. Image path: HIDPARSE.SYS
  2686. Image name: HIDPARSE.SYS
  2687. Timestamp: ***** Invalid (CCA57185)
  2688. CheckSum: 0001506A
  2689. ImageSize: 00012000
  2690. File version: 10.0.15046.0
  2691. Product version: 10.0.15046.0
  2692. File flags: 0 (Mask 3F)
  2693. File OS: 40004 NT Win32
  2694. File type: 2.0 Dll
  2695. File date: 00000000.00000000
  2696. Translations: 0409.04b0
  2697. CompanyName: Microsoft Corporation
  2698. ProductName: Microsoft® Windows® Operating System
  2699. InternalName: hidparse.sys
  2700. OriginalFilename: hidparse.sys
  2701. ProductVersion: 10.0.15046.0
  2702. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  2703. FileDescription: Hid Parsing Library
  2704. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2705. fffff804`27c50000 fffff804`27c63000 kbdclass (deferred)
  2706. Mapped memory image file: C:\ProgramData\dbg\sym\kbdclass.sys\D67B605D13000\kbdclass.sys
  2707. Image path: kbdclass.sys
  2708. Image name: kbdclass.sys
  2709. Timestamp: ***** Invalid (D67B605D)
  2710. CheckSum: 00019BCB
  2711. ImageSize: 00013000
  2712. File version: 10.0.15046.0
  2713. Product version: 10.0.15046.0
  2714. File flags: 0 (Mask 3F)
  2715. File OS: 40004 NT Win32
  2716. File type: 3.7 Driver
  2717. File date: 00000000.00000000
  2718. Translations: 0409.04b0
  2719. CompanyName: Microsoft Corporation
  2720. ProductName: Microsoft® Windows® Operating System
  2721. InternalName: kbdclass.sys
  2722. OriginalFilename: kbdclass.sys
  2723. ProductVersion: 10.0.15046.0
  2724. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  2725. FileDescription: Keyboard Class Driver
  2726. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2727. fffff804`27c70000 fffff804`27c7f000 mouhid (deferred)
  2728. Mapped memory image file: C:\ProgramData\dbg\sym\mouhid.sys\E277736Ff000\mouhid.sys
  2729. Image path: mouhid.sys
  2730. Image name: mouhid.sys
  2731. Timestamp: ***** Invalid (E277736F)
  2732. CheckSum: 000145D4
  2733. ImageSize: 0000F000
  2734. File version: 10.0.15046.0
  2735. Product version: 10.0.15046.0
  2736. File flags: 0 (Mask 3F)
  2737. File OS: 40004 NT Win32
  2738. File type: 2.0 Dll
  2739. File date: 00000000.00000000
  2740. Translations: 0409.04b0
  2741. CompanyName: Microsoft Corporation
  2742. ProductName: Microsoft® Windows® Operating System
  2743. InternalName: mouhid.sys
  2744. OriginalFilename: mouhid.sys
  2745. ProductVersion: 10.0.15046.0
  2746. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  2747. FileDescription: HID Mouse Filter Driver
  2748. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2749. fffff804`27c80000 fffff804`27c93000 mouclass (deferred)
  2750. Mapped memory image file: C:\ProgramData\dbg\sym\mouclass.sys\7BC8E3F513000\mouclass.sys
  2751. Image path: mouclass.sys
  2752. Image name: mouclass.sys
  2753. Timestamp: Tue Oct 23 10:38:45 2035 (7BC8E3F5)
  2754. CheckSum: 000154AD
  2755. ImageSize: 00013000
  2756. File version: 10.0.15058.0
  2757. Product version: 10.0.15058.0
  2758. File flags: 0 (Mask 3F)
  2759. File OS: 40004 NT Win32
  2760. File type: 3.7 Driver
  2761. File date: 00000000.00000000
  2762. Translations: 0409.04b0
  2763. CompanyName: Microsoft Corporation
  2764. ProductName: Microsoft® Windows® Operating System
  2765. InternalName: mouclass.sys
  2766. OriginalFilename: mouclass.sys
  2767. ProductVersion: 10.0.15058.0
  2768. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  2769. FileDescription: Mouse Class Driver
  2770. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2771. fffff804`27cb0000 fffff804`27cbf000 dump_storport (deferred)
  2772. Image path: dump_storport.sys
  2773. Image name: dump_storport.sys
  2774. Timestamp: Wed Aug 28 09:02:36 2013 (521DF4EC)
  2775. CheckSum: 00015D88
  2776. ImageSize: 0000F000
  2777. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  2778. fffff804`27d90000 fffff804`2802c000 tcpip (deferred)
  2779. Mapped memory image file: C:\ProgramData\dbg\sym\tcpip.sys\35A110E029c000\tcpip.sys
  2780. Image path: tcpip.sys
  2781. Image name: tcpip.sys
  2782. Timestamp: Mon Jul 6 14:01:04 1998 (35A110E0)
  2783. CheckSum: 00295C38
  2784. ImageSize: 0029C000
  2785. File version: 10.0.15063.442
  2786. Product version: 10.0.15063.442
  2787. File flags: 0 (Mask 3F)
  2788. File OS: 40004 NT Win32
  2789. File type: 3.6 Driver
  2790. File date: 00000000.00000000
  2791. Translations: 0409.04b0
  2792. CompanyName: Microsoft Corporation
  2793. ProductName: Microsoft® Windows® Operating System
  2794. InternalName: tcpip.sys
  2795. OriginalFilename: tcpip.sys
  2796. ProductVersion: 10.0.15063.442
  2797. FileVersion: 10.0.15063.442 (WinBuild.160101.0800)
  2798. FileDescription: TCP/IP Driver
  2799. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2800. fffff804`28030000 fffff804`2809a000 fwpkclnt (deferred)
  2801. Mapped memory image file: C:\ProgramData\dbg\sym\fwpkclnt.sys\36B0062A6a000\fwpkclnt.sys
  2802. Image path: fwpkclnt.sys
  2803. Image name: fwpkclnt.sys
  2804. Timestamp: Thu Jan 28 01:39:38 1999 (36B0062A)
  2805. CheckSum: 0006ABB4
  2806. ImageSize: 0006A000
  2807. File version: 10.0.15058.0
  2808. Product version: 10.0.15058.0
  2809. File flags: 0 (Mask 3F)
  2810. File OS: 40004 NT Win32
  2811. File type: 2.0 Dll
  2812. File date: 00000000.00000000
  2813. Translations: 0409.04b0
  2814. CompanyName: Microsoft Corporation
  2815. ProductName: Microsoft® Windows® Operating System
  2816. InternalName: fwpkclnt.sys
  2817. OriginalFilename: fwpkclnt.sys
  2818. ProductVersion: 10.0.15058.0
  2819. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  2820. FileDescription: FWP/IPsec Kernel-Mode API
  2821. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2822. fffff804`280a0000 fffff804`280cc000 wfplwfs (deferred)
  2823. Mapped memory image file: C:\ProgramData\dbg\sym\wfplwfs.sys\4BBA3B962c000\wfplwfs.sys
  2824. Image path: wfplwfs.sys
  2825. Image name: wfplwfs.sys
  2826. Timestamp: Mon Apr 5 15:35:50 2010 (4BBA3B96)
  2827. CheckSum: 00033C97
  2828. ImageSize: 0002C000
  2829. File version: 10.0.15058.0
  2830. Product version: 10.0.15058.0
  2831. File flags: 0 (Mask 3F)
  2832. File OS: 40004 NT Win32
  2833. File type: 3.6 Driver
  2834. File date: 00000000.00000000
  2835. Translations: 0000.04b0
  2836. CompanyName: Microsoft Corporation
  2837. ProductName: Microsoft® Windows® Operating System
  2838. InternalName: WFPLWFS.SYS
  2839. OriginalFilename: WFPLWFS.SYS
  2840. ProductVersion: 10.0.15058.0
  2841. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  2842. FileDescription: WFP NDIS 6.30 Lightweight Filter Driver
  2843. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2844. fffff804`280d0000 fffff804`28186000 fvevol (deferred)
  2845. Mapped memory image file: C:\ProgramData\dbg\sym\fvevol.sys\36B7F511b6000\fvevol.sys
  2846. Image path: fvevol.sys
  2847. Image name: fvevol.sys
  2848. Timestamp: Wed Feb 3 02:04:49 1999 (36B7F511)
  2849. CheckSum: 000B8351
  2850. ImageSize: 000B6000
  2851. File version: 10.0.15061.0
  2852. Product version: 10.0.15061.0
  2853. File flags: 0 (Mask 3F)
  2854. File OS: 40004 NT Win32
  2855. File type: 3.7 Driver
  2856. File date: 00000000.00000000
  2857. Translations: 0000.04b0
  2858. CompanyName: Microsoft Corporation
  2859. ProductName: Microsoft® Windows® Operating System
  2860. InternalName: FVEVOL.SYS
  2861. OriginalFilename: FVEVOL.SYS
  2862. ProductVersion: 10.0.15061.0
  2863. FileVersion: 10.0.15061.0 (WinBuild.160101.0800)
  2864. FileDescription: BitLocker Drive Encryption Driver
  2865. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2866. fffff804`28190000 fffff804`2819b000 volume (deferred)
  2867. Mapped memory image file: C:\ProgramData\dbg\sym\volume.sys\9CBEE8B7b000\volume.sys
  2868. Image path: volume.sys
  2869. Image name: volume.sys
  2870. Timestamp: ***** Invalid (9CBEE8B7)
  2871. CheckSum: 00012BB5
  2872. ImageSize: 0000B000
  2873. File version: 10.0.15046.0
  2874. Product version: 10.0.15046.0
  2875. File flags: 0 (Mask 3F)
  2876. File OS: 40004 NT Win32
  2877. File type: 3.7 Driver
  2878. File date: 00000000.00000000
  2879. Translations: 0000.04b0
  2880. CompanyName: Microsoft Corporation
  2881. ProductName: Microsoft® Windows® Operating System
  2882. InternalName: volume.sys
  2883. OriginalFilename: volume.sys
  2884. ProductVersion: 10.0.15046.0
  2885. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  2886. FileDescription: Volume driver
  2887. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2888. fffff804`29400000 fffff804`29464000 USBXHCI (deferred)
  2889. Mapped memory image file: C:\ProgramData\dbg\sym\USBXHCI.SYS\42DB248264000\USBXHCI.SYS
  2890. Image path: USBXHCI.SYS
  2891. Image name: USBXHCI.SYS
  2892. Timestamp: Sun Jul 17 23:39:46 2005 (42DB2482)
  2893. CheckSum: 00063B8A
  2894. ImageSize: 00064000
  2895. File version: 10.0.15063.137
  2896. Product version: 10.0.15063.137
  2897. File flags: 0 (Mask 3F)
  2898. File OS: 40004 NT Win32
  2899. File type: 3.7 Driver
  2900. File date: 00000000.00000000
  2901. Translations: 0409.04b0
  2902. CompanyName: Microsoft Corporation
  2903. ProductName: Microsoft® Windows® Operating System
  2904. InternalName: usbxhci.sys
  2905. OriginalFilename: usbxhci.sys
  2906. ProductVersion: 10.0.15063.137
  2907. FileVersion: 10.0.15063.137 (WinBuild.160101.0800)
  2908. FileDescription: USB XHCI Driver
  2909. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2910. fffff804`29470000 fffff804`294a9000 ucx01000 (deferred)
  2911. Mapped memory image file: C:\ProgramData\dbg\sym\ucx01000.sys\2D6A1C0439000\ucx01000.sys
  2912. Image path: ucx01000.sys
  2913. Image name: ucx01000.sys
  2914. Timestamp: Tue Feb 22 09:51:48 1994 (2D6A1C04)
  2915. CheckSum: 0003CD1A
  2916. ImageSize: 00039000
  2917. File version: 10.0.15046.0
  2918. Product version: 10.0.15046.0
  2919. File flags: 0 (Mask 3F)
  2920. File OS: 40004 NT Win32
  2921. File type: 3.7 Driver
  2922. File date: 00000000.00000000
  2923. Translations: 0409.04b0
  2924. CompanyName: Microsoft Corporation
  2925. ProductName: Microsoft® Windows® Operating System
  2926. InternalName: ucx01000.sys
  2927. OriginalFilename: ucx01000.sys
  2928. ProductVersion: 10.0.15046.0
  2929. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  2930. FileDescription: USB Controller Extension
  2931. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2932. fffff804`294b0000 fffff804`294e3000 TeeDriverW8x64 (deferred)
  2933. Image path: TeeDriverW8x64.sys
  2934. Image name: TeeDriverW8x64.sys
  2935. Timestamp: Wed Aug 31 18:45:52 2016 (57C75E20)
  2936. CheckSum: 0003AE59
  2937. ImageSize: 00033000
  2938. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  2939. fffff804`294f0000 fffff804`29578000 e1d65x64 (deferred)
  2940. Image path: e1d65x64.sys
  2941. Image name: e1d65x64.sys
  2942. Timestamp: Tue Jul 26 12:48:21 2016 (57979455)
  2943. CheckSum: 00091FC7
  2944. ImageSize: 00088000
  2945. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  2946. fffff804`29580000 fffff804`2958c000 wmiacpi (deferred)
  2947. Mapped memory image file: C:\ProgramData\dbg\sym\wmiacpi.sys\15BDC190c000\wmiacpi.sys
  2948. Image path: wmiacpi.sys
  2949. Image name: wmiacpi.sys
  2950. Timestamp: Thu Jul 23 13:29:52 1981 (15BDC190)
  2951. CheckSum: 00012E7A
  2952. ImageSize: 0000C000
  2953. File version: 10.0.15046.0
  2954. Product version: 10.0.15046.0
  2955. File flags: 0 (Mask 3F)
  2956. File OS: 40004 NT Win32
  2957. File type: 3.7 Driver
  2958. File date: 00000000.00000000
  2959. Translations: 0409.04b0
  2960. CompanyName: Microsoft Corporation
  2961. ProductName: Microsoft® Windows® Operating System
  2962. InternalName: wmiacpi.sys
  2963. OriginalFilename: wmiacpi.sys
  2964. ProductVersion: 10.0.15046.0
  2965. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  2966. FileDescription: Windows Management Interface for ACPI
  2967. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2968. fffff804`29590000 fffff804`295c8000 intelppm (deferred)
  2969. Mapped memory image file: C:\ProgramData\dbg\sym\intelppm.sys\CDD5C2DE38000\intelppm.sys
  2970. Image path: intelppm.sys
  2971. Image name: intelppm.sys
  2972. Timestamp: ***** Invalid (CDD5C2DE)
  2973. CheckSum: 0003AB14
  2974. ImageSize: 00038000
  2975. File version: 10.0.15058.0
  2976. Product version: 10.0.15058.0
  2977. File flags: 0 (Mask 3F)
  2978. File OS: 40004 NT Win32
  2979. File type: 3.7 Driver
  2980. File date: 00000000.00000000
  2981. Translations: 0409.04b0
  2982. CompanyName: Microsoft Corporation
  2983. ProductName: Microsoft® Windows® Operating System
  2984. InternalName: intelppm.sys
  2985. OriginalFilename: intelppm.sys
  2986. ProductVersion: 10.0.15058.0
  2987. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  2988. FileDescription: Processor Device Driver
  2989. LegalCopyright: © Microsoft Corporation. All rights reserved.
  2990. fffff804`295d0000 fffff804`295db000 acpipagr (deferred)
  2991. Mapped memory image file: C:\ProgramData\dbg\sym\acpipagr.sys\D0E95064b000\acpipagr.sys
  2992. Image path: acpipagr.sys
  2993. Image name: acpipagr.sys
  2994. Timestamp: ***** Invalid (D0E95064)
  2995. CheckSum: 0000A4E8
  2996. ImageSize: 0000B000
  2997. File version: 10.0.15046.0
  2998. Product version: 10.0.15046.0
  2999. File flags: 0 (Mask 3F)
  3000. File OS: 40004 NT Win32
  3001. File type: 3.7 Driver
  3002. File date: 00000000.00000000
  3003. Translations: 0409.04b0
  3004. CompanyName: Microsoft Corporation
  3005. ProductName: Microsoft® Windows® Operating System
  3006. InternalName: acpipagr.sys
  3007. OriginalFilename: acpipagr.sys
  3008. ProductVersion: 10.0.15046.0
  3009. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  3010. FileDescription: ACPI Processor Aggregator Device Driver
  3011. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3012. fffff804`295e0000 fffff804`295ed000 UEFI (deferred)
  3013. Mapped memory image file: C:\ProgramData\dbg\sym\UEFI.sys\6337616Cd000\UEFI.sys
  3014. Image path: UEFI.sys
  3015. Image name: UEFI.sys
  3016. Timestamp: Fri Sep 30 17:36:44 2022 (6337616C)
  3017. CheckSum: 00012520
  3018. ImageSize: 0000D000
  3019. File version: 10.0.15046.0
  3020. Product version: 10.0.15046.0
  3021. File flags: 0 (Mask 3F)
  3022. File OS: 40004 NT Win32
  3023. File type: 3.7 Driver
  3024. File date: 00000000.00000000
  3025. Translations: 0409.04b0
  3026. CompanyName: Microsoft Corporation
  3027. ProductName: Microsoft® Windows® Operating System
  3028. InternalName: UEFI.sys
  3029. OriginalFilename: UEFI.sys
  3030. ProductVersion: 10.0.15046.0
  3031. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  3032. FileDescription: UEFI Driver for NT
  3033. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3034. fffff804`295f0000 fffff804`295fd000 NdisVirtualBus (deferred)
  3035. Mapped memory image file: C:\ProgramData\dbg\sym\NdisVirtualBus.sys\B2B82E4Cd000\NdisVirtualBus.sys
  3036. Image path: NdisVirtualBus.sys
  3037. Image name: NdisVirtualBus.sys
  3038. Timestamp: ***** Invalid (B2B82E4C)
  3039. CheckSum: 0000767E
  3040. ImageSize: 0000D000
  3041. File version: 10.0.15046.0
  3042. Product version: 10.0.15046.0
  3043. File flags: 0 (Mask 3F)
  3044. File OS: 40004 NT Win32
  3045. File type: 3.6 Driver
  3046. File date: 00000000.00000000
  3047. Translations: 0409.04b0
  3048. CompanyName: Microsoft Corporation
  3049. ProductName: Microsoft® Windows® Operating System
  3050. InternalName: NdisVirtualBus.sys
  3051. OriginalFilename: NdisVirtualBus.sys
  3052. ProductVersion: 10.0.15046.0
  3053. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  3054. FileDescription: Microsoft Virtual Network Adapter Enumerator
  3055. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3056. fffff804`29600000 fffff804`2960c000 swenum (deferred)
  3057. Mapped memory image file: C:\ProgramData\dbg\sym\swenum.sys\B9D78944c000\swenum.sys
  3058. Image path: swenum.sys
  3059. Image name: swenum.sys
  3060. Timestamp: ***** Invalid (B9D78944)
  3061. CheckSum: 00010256
  3062. ImageSize: 0000C000
  3063. File version: 10.0.15004.1000
  3064. Product version: 10.0.15004.1000
  3065. File flags: 0 (Mask 3F)
  3066. File OS: 40004 NT Win32
  3067. File type: 3.0 Driver
  3068. File date: 00000000.00000000
  3069. Translations: 0000.04b0
  3070. CompanyName: Microsoft Corporation
  3071. ProductName: Microsoft® Windows® Operating System
  3072. InternalName: swenum.sys
  3073. OriginalFilename: swenum.sys
  3074. ProductVersion: 10.0.15004.1000
  3075. FileVersion: 10.0.15004.1000 (WinBuild.160101.0800)
  3076. FileDescription: Plug and Play Software Device Enumerator
  3077. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3078. fffff804`29610000 fffff804`29614e00 LGBusEnum (deferred)
  3079. Image path: LGBusEnum.sys
  3080. Image name: LGBusEnum.sys
  3081. Timestamp: Mon Jun 13 14:47:08 2016 (575EFFAC)
  3082. CheckSum: 00012B72
  3083. ImageSize: 00004E00
  3084. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  3085. fffff804`29620000 fffff804`2962c800 LGJoyXlCore (deferred)
  3086. Image path: LGJoyXlCore.sys
  3087. Image name: LGJoyXlCore.sys
  3088. Timestamp: Mon Jun 13 14:47:06 2016 (575EFFAA)
  3089. CheckSum: 0001D8B6
  3090. ImageSize: 0000C800
  3091. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  3092. fffff804`29630000 fffff804`2963d000 rdpbus (deferred)
  3093. Mapped memory image file: C:\ProgramData\dbg\sym\rdpbus.sys\401D6CEAd000\rdpbus.sys
  3094. Image path: rdpbus.sys
  3095. Image name: rdpbus.sys
  3096. Timestamp: Sun Feb 1 16:17:30 2004 (401D6CEA)
  3097. CheckSum: 0000F0A9
  3098. ImageSize: 0000D000
  3099. File version: 10.0.15046.0
  3100. Product version: 10.0.15046.0
  3101. File flags: 0 (Mask 3F)
  3102. File OS: 40004 NT Win32
  3103. File type: 3.0 Driver
  3104. File date: 00000000.00000000
  3105. Translations: 0409.04b0
  3106. CompanyName: Microsoft Corporation
  3107. ProductName: Microsoft® Windows® Operating System
  3108. InternalName: RDPBUS.SYS
  3109. OriginalFilename: RDPBUS.SYS
  3110. ProductVersion: 10.0.15046.0
  3111. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  3112. FileDescription: Microsoft RDP Bus Device driver
  3113. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3114. fffff804`29640000 fffff804`29675000 nvhda64v (deferred)
  3115. Image path: nvhda64v.sys
  3116. Image name: nvhda64v.sys
  3117. Timestamp: Tue May 16 09:02:27 2017 (591AF863)
  3118. CheckSum: 00045048
  3119. ImageSize: 00035000
  3120. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  3121. fffff804`29680000 fffff804`2968e000 ksthunk (deferred)
  3122. Mapped memory image file: C:\ProgramData\dbg\sym\ksthunk.sys\A98424C7e000\ksthunk.sys
  3123. Image path: ksthunk.sys
  3124. Image name: ksthunk.sys
  3125. Timestamp: ***** Invalid (A98424C7)
  3126. CheckSum: 0000EC18
  3127. ImageSize: 0000E000
  3128. File version: 10.0.15063.312
  3129. Product version: 10.0.15063.312
  3130. File flags: 0 (Mask 3F)
  3131. File OS: 40004 NT Win32
  3132. File type: 3.0 Driver
  3133. File date: 00000000.00000000
  3134. Translations: 0409.04b0
  3135. CompanyName: Microsoft Corporation
  3136. ProductName: Microsoft® Windows® Operating System
  3137. InternalName: ksthunk.sys
  3138. OriginalFilename: ksthunk.sys
  3139. ProductVersion: 10.0.15063.312
  3140. FileVersion: 10.0.15063.312 (WinBuild.160101.0800)
  3141. FileDescription: Kernel Streaming WOW Thunk Service
  3142. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3143. fffff804`29690000 fffff804`2971c000 UsbHub3 (deferred)
  3144. Mapped memory image file: C:\ProgramData\dbg\sym\UsbHub3.sys\20EB40398c000\UsbHub3.sys
  3145. Image path: UsbHub3.sys
  3146. Image name: UsbHub3.sys
  3147. Timestamp: Fri Jul 3 01:25:13 1987 (20EB4039)
  3148. CheckSum: 00089ACF
  3149. ImageSize: 0008C000
  3150. File version: 10.0.15063.470
  3151. Product version: 10.0.15063.470
  3152. File flags: 0 (Mask 3F)
  3153. File OS: 40004 NT Win32
  3154. File type: 3.7 Driver
  3155. File date: 00000000.00000000
  3156. Translations: 0409.04b0
  3157. CompanyName: Microsoft Corporation
  3158. ProductName: Microsoft® Windows® Operating System
  3159. InternalName: usbhub3.sys
  3160. OriginalFilename: usbhub3.sys
  3161. ProductVersion: 10.0.15063.470
  3162. FileVersion: 10.0.15063.470 (WinBuild.160101.0800)
  3163. FileDescription: USB3 HUB Driver
  3164. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3165. fffff804`29720000 fffff804`2972e000 USBD (deferred)
  3166. Mapped memory image file: C:\ProgramData\dbg\sym\USBD.SYS\02B9A964e000\USBD.SYS
  3167. Image path: USBD.SYS
  3168. Image name: USBD.SYS
  3169. Timestamp: Mon Jun 14 00:32:36 1971 (02B9A964)
  3170. CheckSum: 00013619
  3171. ImageSize: 0000E000
  3172. File version: 10.0.15052.0
  3173. Product version: 10.0.15052.0
  3174. File flags: 0 (Mask 3F)
  3175. File OS: 40004 NT Win32
  3176. File type: 2.0 Dll
  3177. File date: 00000000.00000000
  3178. Translations: 0000.04b0
  3179. CompanyName: Microsoft Corporation
  3180. ProductName: Microsoft® Windows® Operating System
  3181. InternalName: usbd.sys
  3182. OriginalFilename: usbd.sys
  3183. ProductVersion: 10.0.15052.0
  3184. FileVersion: 10.0.15052.0 (WinBuild.160101.0800)
  3185. FileDescription: Universal Serial Bus Driver
  3186. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3187. fffff804`29730000 fffff804`29ca6000 RTKVHD64 (deferred)
  3188. Image path: RTKVHD64.sys
  3189. Image name: RTKVHD64.sys
  3190. Timestamp: Tue Nov 22 05:34:09 2016 (58341F21)
  3191. CheckSum: 00547888
  3192. ImageSize: 00576000
  3193. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  3194. fffff804`29cb0000 fffff804`29d0c000 fastfat (deferred)
  3195. Mapped memory image file: C:\ProgramData\dbg\sym\fastfat.SYS\CC46D5C95c000\fastfat.SYS
  3196. Image path: fastfat.SYS
  3197. Image name: fastfat.SYS
  3198. Timestamp: ***** Invalid (CC46D5C9)
  3199. CheckSum: 0005B6D3
  3200. ImageSize: 0005C000
  3201. File version: 10.0.15063.312
  3202. Product version: 10.0.15063.312
  3203. File flags: 0 (Mask 3F)
  3204. File OS: 40004 NT Win32
  3205. File type: 3.7 Driver
  3206. File date: 00000000.00000000
  3207. Translations: 0409.04b0
  3208. CompanyName: Microsoft Corporation
  3209. ProductName: Microsoft® Windows® Operating System
  3210. InternalName: fastfat.sys
  3211. OriginalFilename: FastFAT.Sys
  3212. ProductVersion: 10.0.15063.312
  3213. FileVersion: 10.0.15063.312 (WinBuild.160101.0800)
  3214. FileDescription: Fast FAT File System Driver
  3215. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3216. fffff804`29d10000 fffff804`29d37000 usbaudio (deferred)
  3217. Mapped memory image file: C:\ProgramData\dbg\sym\usbaudio.sys\DAF8C27627000\usbaudio.sys
  3218. Image path: usbaudio.sys
  3219. Image name: usbaudio.sys
  3220. Timestamp: ***** Invalid (DAF8C276)
  3221. CheckSum: 00027F07
  3222. ImageSize: 00027000
  3223. File version: 10.0.15046.0
  3224. Product version: 10.0.15046.0
  3225. File flags: 0 (Mask 3F)
  3226. File OS: 40004 NT Win32
  3227. File type: 2.0 Dll
  3228. File date: 00000000.00000000
  3229. Translations: 0409.04b0
  3230. CompanyName: Microsoft Corporation
  3231. ProductName: Microsoft® Windows® Operating System
  3232. InternalName: USBAudio.sys
  3233. OriginalFilename: USBAudio.sys
  3234. ProductVersion: 10.0.15046.0
  3235. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  3236. FileDescription: USB Audio Class Driver
  3237. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3238. fffff804`29d40000 fffff804`2ac7b000 nvlddmkm (deferred)
  3239. Image path: nvlddmkm.sys
  3240. Image name: nvlddmkm.sys
  3241. Timestamp: Tue Jun 27 16:02:17 2017 (5952B9C9)
  3242. CheckSum: 00EF68E7
  3243. ImageSize: 00F3B000
  3244. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  3245. fffff804`2ac80000 fffff804`2ac9d000 HDAudBus (deferred)
  3246. Mapped memory image file: C:\ProgramData\dbg\sym\HDAudBus.sys\21FD85791d000\HDAudBus.sys
  3247. Image path: HDAudBus.sys
  3248. Image name: HDAudBus.sys
  3249. Timestamp: Wed Jan 27 01:21:45 1988 (21FD8579)
  3250. CheckSum: 0001E51D
  3251. ImageSize: 0001D000
  3252. File version: 10.0.15046.0
  3253. Product version: 10.0.15046.0
  3254. File flags: 0 (Mask 3F)
  3255. File OS: 40004 NT Win32
  3256. File type: 3.9 Driver
  3257. File date: 00000000.00000000
  3258. Translations: 0409.04b0
  3259. CompanyName: Microsoft Corporation
  3260. ProductName: Microsoft® Windows® Operating System
  3261. InternalName: hdaudbus.sys
  3262. OriginalFilename: hdaudbus.sys
  3263. ProductVersion: 10.0.15046.0
  3264. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  3265. FileDescription: High Definition Audio Bus Driver
  3266. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3267. fffff804`2aca0000 fffff804`2ad03000 portcls (deferred)
  3268. Mapped memory image file: C:\ProgramData\dbg\sym\portcls.sys\ABE570C263000\portcls.sys
  3269. Image path: portcls.sys
  3270. Image name: portcls.sys
  3271. Timestamp: ***** Invalid (ABE570C2)
  3272. CheckSum: 0005DD44
  3273. ImageSize: 00063000
  3274. File version: 10.0.15046.0
  3275. Product version: 10.0.15046.0
  3276. File flags: 0 (Mask 3F)
  3277. File OS: 40004 NT Win32
  3278. File type: 3.9 Driver
  3279. File date: 00000000.00000000
  3280. Translations: 0409.04b0
  3281. CompanyName: Microsoft Corporation
  3282. ProductName: Microsoft® Windows® Operating System
  3283. InternalName: portcls.sys
  3284. OriginalFilename: portcls.sys
  3285. ProductVersion: 10.0.15046.0
  3286. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  3287. FileDescription: Port Class (Class Driver for Port/Miniport Devices)
  3288. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3289. fffff804`2ad10000 fffff804`2ad31000 drmk (deferred)
  3290. Image path: drmk.sys
  3291. Image name: drmk.sys
  3292. Timestamp: ***** Invalid (A01C1986)
  3293. CheckSum: 000244D4
  3294. ImageSize: 00021000
  3295. Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
  3296. fffff804`2ad40000 fffff804`2ada7000 ks (deferred)
  3297. Mapped memory image file: C:\ProgramData\dbg\sym\ks.sys\12A4A31867000\ks.sys
  3298. Image path: ks.sys
  3299. Image name: ks.sys
  3300. Timestamp: Thu Nov 29 22:12:24 1979 (12A4A318)
  3301. CheckSum: 00068D97
  3302. ImageSize: 00067000
  3303. File version: 10.0.15058.0
  3304. Product version: 10.0.15058.0
  3305. File flags: 0 (Mask 3F)
  3306. File OS: 40004 NT Win32
  3307. File type: 3.0 Driver
  3308. File date: 00000000.00000000
  3309. Translations: 0000.04b0
  3310. CompanyName: Microsoft Corporation
  3311. ProductName: Microsoft® Windows® Operating System
  3312. InternalName: ks.sys
  3313. OriginalFilename: ks.sys
  3314. ProductVersion: 10.0.15058.0
  3315. FileVersion: 10.0.15058.0 (WinBuild.160101.0800)
  3316. FileDescription: Kernel CSA Library
  3317. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3318. fffff804`2adb0000 fffff804`2ade1000 usbccgp (deferred)
  3319. Mapped memory image file: C:\ProgramData\dbg\sym\usbccgp.sys\5B5307EA31000\usbccgp.sys
  3320. Image path: usbccgp.sys
  3321. Image name: usbccgp.sys
  3322. Timestamp: Sat Jul 21 06:16:10 2018 (5B5307EA)
  3323. CheckSum: 0002DC32
  3324. ImageSize: 00031000
  3325. File version: 10.0.15046.0
  3326. Product version: 10.0.15046.0
  3327. File flags: 0 (Mask 3F)
  3328. File OS: 40004 NT Win32
  3329. File type: 2.0 Dll
  3330. File date: 00000000.00000000
  3331. Translations: 0409.04b0
  3332. CompanyName: Microsoft Corporation
  3333. ProductName: Microsoft® Windows® Operating System
  3334. InternalName: USBCCGP.SYS
  3335. OriginalFilename: USBCCGP.SYS
  3336. ProductVersion: 10.0.15046.0
  3337. FileVersion: 10.0.15046.0 (WinBuild.160101.0800)
  3338. FileDescription: USB Common Class Generic Parent Driver
  3339. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3340. fffff804`2adf0000 fffff804`2ae00000 kbdhid (deferred)
  3341. Mapped memory image file: C:\ProgramData\dbg\sym\kbdhid.sys\6264CDC410000\kbdhid.sys
  3342. Image path: kbdhid.sys
  3343. Image name: kbdhid.sys
  3344. Timestamp: Sun Apr 24 00:10:44 2022 (6264CDC4)
  3345. CheckSum: 00010564
  3346. ImageSize: 00010000
  3347. File version: 10.0.15052.0
  3348. Product version: 10.0.15052.0
  3349. File flags: 0 (Mask 3F)
  3350. File OS: 40004 NT Win32
  3351. File type: 2.0 Dll
  3352. File date: 00000000.00000000
  3353. Translations: 0409.04b0
  3354. CompanyName: Microsoft Corporation
  3355. ProductName: Microsoft® Windows® Operating System
  3356. InternalName: kbdhid.sys
  3357. OriginalFilename: kbdhid.sys
  3358. ProductVersion: 10.0.15052.0
  3359. FileVersion: 10.0.15052.0 (WinBuild.160101.0800)
  3360. FileDescription: HID Keyboard Filter Driver
  3361. LegalCopyright: © Microsoft Corporation. All rights reserved.
  3362. Unloaded modules:
  3363. fffff800`f3250000 fffff800`f325b000 cldflt.sys
  3364. Timestamp: unavailable (00000000)
  3365. Checksum: 00000000
  3366. ImageSize: 0000B000
  3367. fffff804`27b10000 fffff804`27b30000 dam.sys
  3368. Timestamp: unavailable (00000000)
  3369. Checksum: 00000000
  3370. ImageSize: 00020000
  3371. fffff804`25f80000 fffff804`25f8f000 WdBoot.sys
  3372. Timestamp: unavailable (00000000)
  3373. Checksum: 00000000
  3374. ImageSize: 0000F000
  3375. fffff804`27310000 fffff804`2731f000 hwpolicy.sys
  3376. Timestamp: unavailable (00000000)
  3377. Checksum: 00000000
  3378. ImageSize: 0000F000
  3379.  
  3380. ========================================================================
  3381. ============================= BIOS INFO ================================
  3382. ========================================================================
  3383. [SMBIOS Data Tables v3.0]
  3384. [DMI Version - 0]
  3385. [2.0 Calling Convention - No]
  3386. [Table Size - 4347 bytes]
  3387. [BIOS Information (Type 0) - Length 24 - Handle 0000h]
  3388. Vendor American Megatrends Inc.
  3389. BIOS Version 0906
  3390. BIOS Starting Address Segment f000
  3391. BIOS Release Date 03/22/2017
  3392. BIOS ROM Size 1000000
  3393. BIOS Characteristics
  3394. 07: - PCI Supported
  3395. 10: - APM Supported
  3396. 11: - Upgradeable FLASH BIOS
  3397. 12: - BIOS Shadowing Supported
  3398. 15: - CD-Boot Supported
  3399. 16: - Selectable Boot Supported
  3400. 17: - BIOS ROM Socketed
  3401. 19: - EDD Supported
  3402. 23: - 1.2MB Floppy Supported
  3403. 24: - 720KB Floppy Supported
  3404. 25: - 2.88MB Floppy Supported
  3405. 26: - Print Screen Device Supported
  3406. 27: - Keyboard Services Supported
  3407. 28: - Serial Services Supported
  3408. 29: - Printer Services Supported
  3409. 32: - BIOS Vendor Reserved
  3410. BIOS Characteristic Extensions
  3411. 00: - ACPI Supported
  3412. 01: - USB Legacy Supported
  3413. 08: - BIOS Boot Specification Supported
  3414. 10: - Specification Reserved
  3415. 11: - Specification Reserved
  3416. BIOS Major Revision 5
  3417. BIOS Minor Revision 12
  3418. EC Firmware Major Revision 255
  3419. EC Firmware Minor Revision 255
  3420. [System Information (Type 1) - Length 27 - Handle 0001h]
  3421. Manufacturer System manufacturer
  3422. Product Name System Product Name
  3423. Version System Version
  3424. UUID 00000000-0000-0000-0000-000000000000
  3425. Wakeup Type Power Switch
  3426. SKUNumber SKU
  3427. [BaseBoard Information (Type 2) - Length 15 - Handle 0002h]
  3428. Manufacturer ASUSTeK COMPUTER INC.
  3429. Product MAXIMUS IX HERO
  3430. Version Rev 1.xx
  3431. Feature Flags 09h
  3432. 137213664: - 137213712: - ȽÎج
  3433. Location Default string
  3434. Chassis Handle 0003h
  3435. Board Type 0ah - Processor/Memory Module
  3436. Number of Child Handles 0
  3437. [System Enclosure (Type 3) - Length 22 - Handle 0003h]
  3438. Manufacturer Default string
  3439. Chassis Type Desktop
  3440. Version Default string
  3441. Bootup State Safe
  3442. Power Supply State Safe
  3443. Thermal State Safe
  3444. Security Status None
  3445. OEM Defined 0
  3446. Height 0U
  3447. Number of Power Cords 1
  3448. Number of Contained Elements 0
  3449. Contained Element Size 3
  3450. [Onboard Devices Information (Type 10) - Length 6 - Handle 0028h]
  3451. Number of Devices 1
  3452. 01: Type Video [enabled]
  3453. [OEM Strings (Type 11) - Length 5 - Handle 0029h]
  3454. Number of Strings 4
  3455. 1 Default string
  3456. 2 Default string
  3457. 3 SAVANNA
  3458. 4 Default string
  3459. [System Configuration Options (Type 12) - Length 5 - Handle 002ah]
  3460. [Physical Memory Array (Type 16) - Length 23 - Handle 0045h]
  3461. Location 03h - SystemBoard/Motherboard
  3462. Use 03h - System Memory
  3463. Memory Error Correction 03h - None
  3464. Maximum Capacity 67108864KB
  3465. Number of Memory Devices 4
  3466. [Memory Device (Type 17) - Length 40 - Handle 0046h]
  3467. Physical Memory Array Handle 0045h
  3468. Total Width 0 bits
  3469. Data Width 0 bits
  3470. Form Factor 02h - Unknown
  3471. Device Locator ChannelA-DIMM1
  3472. Bank Locator BANK 0
  3473. Memory Type 02h - Unknown
  3474. Type Detail 0000h -
  3475. Speed 0MHz
  3476. [Memory Device (Type 17) - Length 40 - Handle 0047h]
  3477. Physical Memory Array Handle 0045h
  3478. Total Width 64 bits
  3479. Data Width 64 bits
  3480. Size 8192MB
  3481. Form Factor 09h - DIMM
  3482. Device Locator ChannelA-DIMM2
  3483. Bank Locator BANK 1
  3484. Memory Type 1ah - Specification Reserved
  3485. Type Detail 0080h - Synchronous
  3486. Speed 2700MHz
  3487. Manufacturer Corsair
  3488. Part Number CMK16GX4M2B3000C15
  3489. [Memory Device (Type 17) - Length 40 - Handle 0048h]
  3490. Physical Memory Array Handle 0045h
  3491. Total Width 0 bits
  3492. Data Width 0 bits
  3493. Form Factor 02h - Unknown
  3494. Device Locator ChannelB-DIMM1
  3495. Bank Locator BANK 2
  3496. Memory Type 02h - Unknown
  3497. Type Detail 0000h -
  3498. Speed 0MHz
  3499. [Memory Device (Type 17) - Length 40 - Handle 0049h]
  3500. Physical Memory Array Handle 0045h
  3501. Total Width 64 bits
  3502. Data Width 64 bits
  3503. Size 8192MB
  3504. Form Factor 09h - DIMM
  3505. Device Locator ChannelB-DIMM2
  3506. Bank Locator BANK 3
  3507. Memory Type 1ah - Specification Reserved
  3508. Type Detail 0080h - Synchronous
  3509. Speed 2700MHz
  3510. Manufacturer Corsair
  3511. Part Number CMK16GX4M2B3000C15
  3512. [Memory Array Mapped Address (Type 19) - Length 31 - Handle 004ah]
  3513. Starting Address 00000000h
  3514. Ending Address 00ffffffh
  3515. Memory Array Handle 0045h
  3516. Partition Width 02
  3517. [Cache Information (Type 7) - Length 19 - Handle 004bh]
  3518. Socket Designation L1 Cache
  3519. Cache Configuration 0180h - WB Enabled Int NonSocketed L1
  3520. Maximum Cache Size 0100h - 256K
  3521. Installed Size 0100h - 256K
  3522. Supported SRAM Type 0020h - Synchronous
  3523. Current SRAM Type 0020h - Synchronous
  3524. Cache Speed 0ns
  3525. Error Correction Type ParitySingle-Bit ECC
  3526. System Cache Type Unified
  3527. Associativity 8-way Set-Associative
  3528. [Cache Information (Type 7) - Length 19 - Handle 004ch]
  3529. Socket Designation L2 Cache
  3530. Cache Configuration 0181h - WB Enabled Int NonSocketed L2
  3531. Maximum Cache Size 0400h - 1024K
  3532. Installed Size 0400h - 1024K
  3533. Supported SRAM Type 0020h - Synchronous
  3534. Current SRAM Type 0020h - Synchronous
  3535. Cache Speed 0ns
  3536. Error Correction Type Multi-Bit ECC
  3537. System Cache Type Unified
  3538. Associativity 4-way Set-Associative
  3539. [Cache Information (Type 7) - Length 19 - Handle 004dh]
  3540. Socket Designation L3 Cache
  3541. Cache Configuration 0182h - WB Enabled Int NonSocketed L3
  3542. Maximum Cache Size 2000h - 8192K
  3543. Installed Size 2000h - 8192K
  3544. Supported SRAM Type 0020h - Synchronous
  3545. Current SRAM Type 0020h - Synchronous
  3546. Cache Speed 0ns
  3547. Error Correction Type Specification Reserved
  3548. System Cache Type Unified
  3549. Associativity 16-way Set-Associative
  3550. [Processor Information (Type 4) - Length 48 - Handle 004eh]
  3551. Socket Designation LGA1151
  3552. Processor Type Central Processor
  3553. Processor Family c6h - Specification Reserved
  3554. Processor Manufacturer Intel(R) Corporation
  3555. Processor ID e9060900fffbebbf
  3556. Processor Version Intel(R) Core(TM) i7-7700K CPU @ 4.20GHz
  3557. Processor Voltage 8bh - 1.1V
  3558. External Clock 100MHz
  3559. Max Speed 8300MHz
  3560. Current Speed 4200MHz
  3561. Status Enabled Populated
  3562. Processor Upgrade Other
  3563. L1 Cache Handle 004bh
  3564. L2 Cache Handle 004ch
  3565. L3 Cache Handle 004dh
  3566. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 004fh]
  3567. Starting Address 00000000h
  3568. Ending Address 007fffffh
  3569. Memory Device Handle 0047h
  3570. Mem Array Mapped Adr Handle 004ah
  3571. Interleave Position 01
  3572. Interleave Data Depth 02
  3573. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0050h]
  3574. Starting Address 00800000h
  3575. Ending Address 00ffffffh
  3576. Memory Device Handle 0049h
  3577. Mem Array Mapped Adr Handle 004ah
  3578. Interleave Position 02
  3579. Interleave Data Depth 02
  3580. 6: kd> q
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!