Microsoft (R) Windows Debugger Version 10.0.19528.1000 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\recep\Downloads\Compressed\Dump dosyaları\012520-28968-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
************* Path validation summary **************
Response Time (ms) Location
Deferred srv*
Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 18362 (Service Pack 3) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
18362.1.amd64fre.19h1_release.190318-1202
Machine Name:
Kernel base = 0xfffff800`1a600000 PsLoadedModuleList = 0xfffff800`1aa48150
Debug session time: Sat Jan 25 14:22:39.586 2020 (UTC + 3:00)
System Uptime: 0 days 0:01:02.359
Loading Kernel Symbols
...............................................................
................................................................
..................................................
Loading User Symbols
Loading unloaded module list
.......
For analysis of this file, run !analyze -v
nt!KeBugCheckEx:
fffff800`1a7c14e0 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:ffff8707`8182d070=000000000000007e
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff8001a645c32, The address that the exception occurred at
Arg3: ffff87078182e088, Exception Record Address
Arg4: ffff87078182d8d0, Context Record Address
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for atikmpag.sys
*** WARNING: Unable to verify checksum for win32k.sys
KEY_VALUES_STRING: 1
Key : AV.Dereference
Value: NullClassPtr
Key : AV.Fault
Value: Read
Key : Analysis.CPU.Sec
Value: 3
Key : Analysis.DebugAnalysisProvider.CPP
Value: Create: 8007007e on DESKTOP-1IBQR0U
Key : Analysis.DebugData
Value: CreateObject
Key : Analysis.DebugModel
Value: CreateObject
Key : Analysis.Elapsed.Sec
Value: 20
Key : Analysis.Memory.CommitPeak.Mb
Value: 68
Key : Analysis.System
Value: CreateObject
ADDITIONAL_XML: 1
BUGCHECK_CODE: 7e
BUGCHECK_P1: ffffffffc0000005
BUGCHECK_P2: fffff8001a645c32
BUGCHECK_P3: ffff87078182e088
BUGCHECK_P4: ffff87078182d8d0
EXCEPTION_RECORD: ffff87078182e088 -- (.exr 0xffff87078182e088)
ExceptionAddress: fffff8001a645c32 (nt!ExFreeHeapPool+0x00000000000000b2)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000000
Parameter[1]: 0000000000000010
Attempt to read from address 0000000000000010
CONTEXT: ffff87078182d8d0 -- (.cxr 0xffff87078182d8d0)
rax=0000000000000000 rbx=ffffc08f20dce780 rcx=0000000000000000
rdx=fffff8001a600000 rsi=0000000000000003 rdi=a2e64eada2e64ead
rip=fffff8001a645c32 rsp=ffff87078182e2c0 rbp=0000000000000001
r8=ffffc08f26e4d042 r9=0000000000000002 r10=00000000ffffffff
r11=0000000000000000 r12=ffff800000000000 r13=ffffc08f2842a060
r14=ffffc08f240953e0 r15=ffffc08f284961c0
iopl=0 nv up ei pl zr na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010246
nt!ExFreeHeapPool+0xb2:
fffff800`1a645c32 488b5810 mov rbx,qword ptr [rax+10h] ds:002b:00000000`00000010=????????????????
Resetting default scope
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: System
READ_ADDRESS: fffff8001ab733b8: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
fffff8001aa2a3c8: Unable to get Flags value from nt!KdVersionBlock
fffff8001aa2a3c8: Unable to get Flags value from nt!KdVersionBlock
unable to get nt!MmSpecialPagesInUse
0000000000000010
ERROR_CODE: (NTSTATUS) 0xc0000005 - 0x%p adresindeki y nerge 0x%p adresindeki belle e ba vurdu. Bellek u olamaz %s.
EXCEPTION_CODE_STR: c0000005
EXCEPTION_PARAMETER1: 0000000000000000
EXCEPTION_PARAMETER2: 0000000000000010
EXCEPTION_STR: 0xc0000005
STACK_TEXT:
ffff8707`8182e2c0 fffff800`1a96f0a9 : 00000000`00000001 00000000`00000000 00000000`00000300 01000000`00100000 : nt!ExFreeHeapPool+0xb2
ffff8707`8182e3e0 fffff808`a8520a78 : ffffc08f`20dce780 00000000`00000001 00000000`00000000 01000000`00100000 : nt!ExFreePool+0x9
ffff8707`8182e410 ffffc08f`20dce780 : 00000000`00000001 00000000`00000000 01000000`00100000 00000000`00000300 : atikmpag+0x10a78
ffff8707`8182e418 00000000`00000001 : 00000000`00000000 01000000`00100000 00000000`00000300 fffff808`a85219d7 : 0xffffc08f`20dce780
ffff8707`8182e420 00000000`00000000 : 01000000`00100000 00000000`00000300 fffff808`a85219d7 ffffc08f`20dce780 : 0x1
SYMBOL_NAME: nt!ExFreePool+9
IMAGE_NAME: Pool_Corruption
IMAGE_VERSION: 10.0.18362.592
MODULE_NAME: Pool_Corruption
STACK_COMMAND: .cxr 0xffff87078182d8d0 ; kb
BUCKET_ID_FUNC_OFFSET: 9
FAILURE_BUCKET_ID: AV_nt!ExFreePool
OS_VERSION: 10.0.18362.1
BUILDLAB_STR: 19h1_release
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {2ae0a97e-dcd7-47ef-dbfb-430f2cbf58a1}
Followup: Pool_corruption
---------
1: kd> lmvm Pool_Corruption
Browse full module list
start end module name
1: kd> lmDv
start end module name
ffffbd13`b5000000 ffffbd13`b53a2000 win32kfull (deferred)
Mapped memory image file: C:\Windows\system32\win32kfull.sys
Image path: \SystemRoot\System32\win32kfull.sys
Image name: win32kfull.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 00000000 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00000000
ImageSize: 003A2000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: win32kfull.sys
OriginalFilename: win32kfull.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Full/Desktop Win32k Kernel Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
ffffbd13`b5450000 ffffbd13`b54dc000 win32k C (pdb symbols) C:\ProgramData\Dbg\sym\win32k.pdb\793F4C9D83EA54F8B3080822548D288E1\win32k.pdb
Loaded symbol image file: win32k.sys
Mapped memory image file: C:\Windows\system32\win32k.sys
Image path: \SystemRoot\System32\win32k.sys
Image name: win32k.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 00000000 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00000000
ImageSize: 0008C000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: win32k.sys
OriginalFilename: win32k.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Full/Desktop Multi-User Win32 Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
ffffbd13`b5dc0000 ffffbd13`b6065000 win32kbase (deferred)
Mapped memory image file: C:\Windows\system32\win32kbase.sys
Image path: \SystemRoot\System32\win32kbase.sys
Image name: win32kbase.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 00000000 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00000000
ImageSize: 002A5000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: win32kbase.sys
OriginalFilename: win32kbase.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Base Win32k Kernel Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
ffffbd13`b6070000 ffffbd13`b60b8000 cdd (deferred)
Mapped memory image file: C:\Windows\system32\cdd.dll
Image path: \SystemRoot\System32\cdd.dll
Image name: cdd.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 00000000 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00000000
ImageSize: 00048000
File version: 10.0.18362.449
Product version: 10.0.18362.449
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.4 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: cdd.dll
OriginalFilename: cdd.dll
ProductVersion: 10.0.18362.449
FileVersion: 10.0.18362.449 (WinBuild.160101.0800)
FileDescription: Canonical Display Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`17a00000 fffff800`17a1c000 raspppoe (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\raspppoe.sys\053A7D721c000\raspppoe.sys
Image path: \SystemRoot\System32\DRIVERS\raspppoe.sys
Image name: raspppoe.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 053A7D72 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001A62E
ImageSize: 0001C000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: raspppoe.sys
OriginalFilename: raspppoe.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: RAS PPPoE mini-port/call-manager driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`17a20000 fffff800`17a2f000 ndistapi (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ndistapi.sys\690D0D05f000\ndistapi.sys
Image path: \SystemRoot\System32\DRIVERS\ndistapi.sys
Image name: ndistapi.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 690D0D05 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00013DDA
ImageSize: 0000F000
File version: 10.0.18362.476
Product version: 10.0.18362.476
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: NDISTAPI.SYS
OriginalFilename: NDISTAPI.SYS
ProductVersion: 10.0.18362.476
FileVersion: 10.0.18362.476 (WinBuild.160101.0800)
FileDescription: NDIS 3.0 connection wrapper driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`17a30000 fffff800`17a6a000 ndiswan (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ndiswan.sys\FB43C10D3a000\ndiswan.sys
Image path: \SystemRoot\System32\drivers\ndiswan.sys
Image name: ndiswan.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: FB43C10D (This is a reproducible build file hash, not a timestamp)
CheckSum: 00034409
ImageSize: 0003A000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: NDISWAN.SYS
OriginalFilename: NDISWAN.SYS
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: MS PPP Framing Driver (Strong Encryption)
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`17a70000 fffff800`17a82000 WdNisDrv (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\WdNisDrv.sys\9BDA173312000\WdNisDrv.sys
Image path: \SystemRoot\system32\Drivers\WdNisDrv.sys
Image name: WdNisDrv.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 9BDA1733 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001BFA6
ImageSize: 00012000
File version: 4.18.1902.5
Product version: 4.18.1902.5
File flags: 8 (Mask 3F) Private
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: wdnisdrv.sys
OriginalFilename: wdnisdrv.sys
ProductVersion: 4.18.1902.5
FileVersion: 4.18.1902.5 (GitEnlistment(winpbld).190221-1742)
FileDescription: Windows Defender Network Stream Filter
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`17a90000 fffff800`17aa3000 condrv (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\condrv.sys\AEE79CBA13000\condrv.sys
Image path: \SystemRoot\System32\drivers\condrv.sys
Image name: condrv.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: AEE79CBA (This is a reproducible build file hash, not a timestamp)
CheckSum: 00010A44
ImageSize: 00013000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: condrv.sys
OriginalFilename: condrv.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Console Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`18390000 fffff800`183b2000 rasl2tp (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\rasl2tp.sys\A7AA404E22000\rasl2tp.sys
Image path: \SystemRoot\System32\drivers\rasl2tp.sys
Image name: rasl2tp.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: A7AA404E (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001CFD6
ImageSize: 00022000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: rasl2tp.sys
OriginalFilename: rasl2tp.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: RAS L2TP mini-port/call-manager driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`183c0000 fffff800`183e0000 raspptp (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\raspptp.sys\5489359020000\raspptp.sys
Image path: \SystemRoot\System32\drivers\raspptp.sys
Image name: raspptp.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 54893590 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001C964
ImageSize: 00020000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: RASPPTP.SYS
OriginalFilename: RASPPTP.SYS
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Peer-to-Peer Tunneling Protocol
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1a55d000 fffff800`1a600000 hal (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\halaacpi.dll\1CD3FB4Fa3000\halaacpi.dll
Image path: hal.dll
Image name: hal.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 1CD3FB4F (This is a reproducible build file hash, not a timestamp)
CheckSum: 00099D18
ImageSize: 000A3000
File version: 10.0.18362.387
Product version: 10.0.18362.387
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: hal.dll
OriginalFilename: hal.dll
ProductVersion: 10.0.18362.387
FileVersion: 10.0.18362.387 (WinBuild.160101.0800)
FileDescription: Hardware Abstraction Layer DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1a600000 fffff800`1b0b6000 nt (pdb symbols) C:\ProgramData\Dbg\sym\ntkrnlmp.pdb\F3A4F64B6F639A058AD6F33155ACA4F61\ntkrnlmp.pdb
Loaded symbol image file: ntkrnlmp.exe
Mapped memory image file: C:\ProgramData\Dbg\sym\ntoskrnl.exe\04F6EBA0ab6000\ntoskrnl.exe
Image path: ntkrnlmp.exe
Image name: ntkrnlmp.exe
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 04F6EBA0 (This is a reproducible build file hash, not a timestamp)
CheckSum: 009824D3
ImageSize: 00AB6000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 1.0 App
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ntkrnlmp.exe
OriginalFilename: ntkrnlmp.exe
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: NT Kernel & System
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1d400000 fffff800`1d40b000 kd (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\kd.dll\5A75D524b000\kd.dll
Image path: \SystemRoot\system32\kd.dll
Image name: kd.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 5A75D524 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000A0B7
ImageSize: 0000B000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.A Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: kd.dll
OriginalFilename: kd.dll
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Local Kernel Debugger
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1d410000 fffff800`1d432000 mcupdate_AuthenticAMD (deferred)
Mapped memory image file: C:\Windows\system32\mcupdate_AuthenticAMD.dll
Image path: \SystemRoot\system32\mcupdate_AuthenticAMD.dll
Image name: mcupdate_AuthenticAMD.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: F9972F7B (This is a reproducible build file hash, not a timestamp)
CheckSum: 00020565
ImageSize: 00022000
File version: 10.0.18362.1
Product version: 10.0.18362.1
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.A Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: mcupdate.dll
OriginalFilename: mcupdate_AuthenticAMD.dll
ProductVersion: 10.0.18362.1
FileVersion: 10.0.18362.1 (WinBuild.160101.0800)
FileDescription: AMD Microcode Update Library
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1d440000 fffff800`1d451000 werkernel (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\werkernel.sys\958E14B211000\werkernel.sys
Image path: \SystemRoot\System32\drivers\werkernel.sys
Image name: werkernel.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 958E14B2 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001470F
ImageSize: 00011000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: werkernel
OriginalFilename: werkernel.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Windows Error Reporting Kernel Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1d460000 fffff800`1d48a000 ksecdd (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ksecdd.sys\A35F28F62a000\ksecdd.sys
Image path: \SystemRoot\System32\drivers\ksecdd.sys
Image name: ksecdd.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: A35F28F6 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00033CC6
ImageSize: 0002A000
File version: 10.0.18362.113
Product version: 10.0.18362.113
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ksecdd.sys
OriginalFilename: ksecdd.sys
ProductVersion: 10.0.18362.113
FileVersion: 10.0.18362.113 (WinBuild.160101.0800)
FileDescription: Kernel Security Support Provider Interface
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1d490000 fffff800`1d4f0000 msrpc (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\msrpc.sys\7862AB0860000\msrpc.sys
Image path: \SystemRoot\System32\drivers\msrpc.sys
Image name: msrpc.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 7862AB08 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000652A4
ImageSize: 00060000
File version: 10.0.18362.476
Product version: 10.0.18362.476
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: krpcdd.sys
OriginalFilename: krpcdd.sys
ProductVersion: 10.0.18362.476
FileVersion: 10.0.18362.476 (WinBuild.160101.0800)
FileDescription: Kernel Remote Procedure Call Provider
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1d500000 fffff800`1d527000 tm (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\tm.sys\9A74C3B727000\tm.sys
Image path: \SystemRoot\System32\drivers\tm.sys
Image name: tm.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 9A74C3B7 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000266D6
ImageSize: 00027000
File version: 10.0.18362.356
Product version: 10.0.18362.356
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: tm.sys
OriginalFilename: tm.sys
ProductVersion: 10.0.18362.356
FileVersion: 10.0.18362.356 (WinBuild.160101.0800)
FileDescription: Kernel Transaction Manager Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1d530000 fffff800`1d598000 CLFS (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\CLFS.SYS\2B95B1D768000\CLFS.SYS
Image path: \SystemRoot\System32\drivers\CLFS.SYS
Image name: CLFS.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 2B95B1D7 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0006FE01
ImageSize: 00068000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: clfs.sys
OriginalFilename: Clfs.Sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Common Log File System Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1d5a0000 fffff800`1d5ba000 PSHED (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\PSHED.dll\B21F9DDA1a000\PSHED.dll
Image path: \SystemRoot\system32\PSHED.dll
Image name: PSHED.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: B21F9DDA (This is a reproducible build file hash, not a timestamp)
CheckSum: 00022517
ImageSize: 0001A000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: pshed.dll
OriginalFilename: pshed.dll
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Platform Specific Hardware Error Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1d5c0000 fffff800`1d5cb000 BOOTVID (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\BOOTVID.dll\0F301604b000\BOOTVID.dll
Image path: \SystemRoot\system32\BOOTVID.dll
Image name: BOOTVID.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 0F301604 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00014DA3
ImageSize: 0000B000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.4 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: bootvid.dll
OriginalFilename: bootvid.dll
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: VGA Boot Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1d5d0000 fffff800`1d6d5000 clipsp (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\clipsp.sys\5D8991BA105000\clipsp.sys
Image path: \SystemRoot\System32\drivers\clipsp.sys
Image name: clipsp.sys
Browse all global symbols functions data
Timestamp: Tue Sep 24 06:47:06 2019 (5D8991BA)
CheckSum: 000FC072
ImageSize: 00105000
File version: 10.0.18362.387
Product version: 10.0.18362.387
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: clipsp.dll
OriginalFilename: clipsp.dll
ProductVersion: 10.0.18362.387
FileVersion: 10.0.18362.387 (WinBuild.160101.0800)
FileDescription: CLIP Service
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1d6e0000 fffff800`1d751000 FLTMGR (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\FLTMGR.SYS\801A5F1171000\FLTMGR.SYS
Image path: \SystemRoot\System32\drivers\FLTMGR.SYS
Image name: FLTMGR.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 801A5F11 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0006BC71
ImageSize: 00071000
File version: 10.0.18362.476
Product version: 10.0.18362.476
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: fltMgr.sys
OriginalFilename: fltMgr.sys
ProductVersion: 10.0.18362.476
FileVersion: 10.0.18362.476 (WinBuild.160101.0800)
FileDescription: Microsoft Filesystem Filter Manager
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1d760000 fffff800`1d76e000 cmimcext (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\cmimcext.sys\C7F022B4e000\cmimcext.sys
Image path: \SystemRoot\System32\drivers\cmimcext.sys
Image name: cmimcext.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: C7F022B4 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000AE3A
ImageSize: 0000E000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: cmimcext.sys
OriginalFilename: cmimcext.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Kernel Configuration Manager Initial Configuration Extension Host Export Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1d770000 fffff800`1d77c000 ntosext (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ntosext.sys\BAC877D8c000\ntosext.sys
Image path: \SystemRoot\System32\drivers\ntosext.sys
Image name: ntosext.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: BAC877D8 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000A58B
ImageSize: 0000C000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ntosext.sys
OriginalFilename: ntosext.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: NTOS extension host driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1d780000 fffff800`1d793000 WDFLDR (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\WDFLDR.SYS\3B39678013000\WDFLDR.SYS
Image path: \SystemRoot\system32\drivers\WDFLDR.SYS
Image name: WDFLDR.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 3B396780 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00016EB9
ImageSize: 00013000
File version: 1.29.18362.592
Product version: 1.29.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: wdfldr.sys
OriginalFilename: wdfldr.sys
ProductVersion: 1.29.18362.592
FileVersion: 1.29.18362.592 (WinBuild.160101.0800)
FileDescription: Kernel Mode Driver Framework Loader
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1d7a0000 fffff800`1d7af000 SleepStudyHelper (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\SleepStudyHelper.sys\BA6E2346f000\SleepStudyHelper.sys
Image path: \SystemRoot\system32\drivers\SleepStudyHelper.sys
Image name: SleepStudyHelper.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: BA6E2346 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00015004
ImageSize: 0000F000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: SleepStudyHelper.sys
OriginalFilename: SleepStudyHelper.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Sleep Study Helper
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1d7b0000 fffff800`1d7c0000 WppRecorder (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\WppRecorder.sys\34A5423110000\WppRecorder.sys
Image path: \SystemRoot\system32\drivers\WppRecorder.sys
Image name: WppRecorder.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 34A54231 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001785F
ImageSize: 00010000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: WppRecorder.sys
OriginalFilename: WppRecorder.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: WPP Trace Recorder
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1d7d0000 fffff800`1d7f5000 acpiex (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\acpiex.sys\2B91EDB225000\acpiex.sys
Image path: \SystemRoot\System32\Drivers\acpiex.sys
Image name: acpiex.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 2B91EDB2 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002ED84
ImageSize: 00025000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: acpiex.sys
OriginalFilename: acpiex.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: ACPIEx Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1d800000 fffff800`1d8dc000 CI (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\CI.dll\E1AF0052dc000\CI.dll
Image path: \SystemRoot\system32\CI.dll
Image name: CI.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: E1AF0052 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000E93A3
ImageSize: 000DC000
File version: 10.0.18362.418
Product version: 10.0.18362.418
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ci.dll
OriginalFilename: ci.dll
ProductVersion: 10.0.18362.418
FileVersion: 10.0.18362.418 (WinBuild.160101.0800)
FileDescription: Code Integrity Module
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1d8e0000 fffff800`1d99c000 cng (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\cng.sys\5444B5A1bc000\cng.sys
Image path: \SystemRoot\System32\drivers\cng.sys
Image name: cng.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 5444B5A1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000C43CD
ImageSize: 000BC000
File version: 10.0.18362.295
Product version: 10.0.18362.295
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: cng.sys
OriginalFilename: cng.sys
ProductVersion: 10.0.18362.295
FileVersion: 10.0.18362.295 (WinBuild.160101.0800)
FileDescription: Kernel Cryptography, Next Generation
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1d9a0000 fffff800`1da75000 Wdf01000 (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\Wdf01000.sys\116A658Ad5000\Wdf01000.sys
Image path: \SystemRoot\system32\drivers\Wdf01000.sys
Image name: Wdf01000.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 116A658A (This is a reproducible build file hash, not a timestamp)
CheckSum: 000D3347
ImageSize: 000D5000
File version: 1.29.18362.10013
Product version: 1.29.18362.10013
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: wdf01000.sys
OriginalFilename: wdf01000.sys
ProductVersion: 1.29.18362.10013
FileVersion: 1.29.18362.10013 (WinBuild.160101.0800)
FileDescription: Kernel Mode Driver Framework Runtime
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1da80000 fffff800`1da9a000 SgrmAgent (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\SgrmAgent.sys\F851A1951a000\SgrmAgent.sys
Image path: \SystemRoot\system32\drivers\SgrmAgent.sys
Image name: SgrmAgent.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: F851A195 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001DBB9
ImageSize: 0001A000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.0 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: SgrmAgent
OriginalFilename: SgrmAgent.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: System Guard Runtime Monitor Agent Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1daa0000 fffff800`1db6c000 ACPI (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ACPI.sys\90B929F2cc000\ACPI.sys
Image path: \SystemRoot\System32\drivers\ACPI.sys
Image name: ACPI.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 90B929F2 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000C4A0F
ImageSize: 000CC000
File version: 10.0.18362.329
Product version: 10.0.18362.329
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ACPI.sys
OriginalFilename: ACPI.sys
ProductVersion: 10.0.18362.329
FileVersion: 10.0.18362.329 (WinBuild.160101.0800)
FileDescription: ACPI Driver for NT
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1db70000 fffff800`1db7c000 WMILIB (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\WMILIB.SYS\59021E3Dc000\WMILIB.SYS
Image path: \SystemRoot\System32\drivers\WMILIB.SYS
Image name: WMILIB.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 59021E3D (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000D867
ImageSize: 0000C000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: WmiLib.sys
OriginalFilename: WmiLib.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: WMILIB WMI support library Dll
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1dba0000 fffff800`1dbfb000 intelpep (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\intelpep.sys\A0B377F15b000\intelpep.sys
Image path: \SystemRoot\System32\drivers\intelpep.sys
Image name: intelpep.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: A0B377F1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00056D26
ImageSize: 0005B000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.A Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: intelpep.sys
OriginalFilename: intelpep.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Intel Power Engine Plugin
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1dc00000 fffff800`1dc17000 WindowsTrustedRT (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\WindowsTrustedRT.sys\CB95CE3D17000\WindowsTrustedRT.sys
Image path: \SystemRoot\system32\drivers\WindowsTrustedRT.sys
Image name: WindowsTrustedRT.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: CB95CE3D (This is a reproducible build file hash, not a timestamp)
CheckSum: 000130AA
ImageSize: 00017000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: WindowsTrustedRT.sys
OriginalFilename: WindowsTrustedRT.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Windows Trusted Runtime Interface Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1dc20000 fffff800`1dc2b000 WindowsTrustedRTProxy (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\WindowsTrustedRTProxy.sys\514E3023b000\WindowsTrustedRTProxy.sys
Image path: \SystemRoot\System32\drivers\WindowsTrustedRTProxy.sys
Image name: WindowsTrustedRTProxy.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 514E3023 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000F15D
ImageSize: 0000B000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: WindowsTrustedRTProxy.sys
OriginalFilename: WindowsTrustedRTProxy.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Windows Trusted Runtime Service Proxy Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1dc30000 fffff800`1dc45000 pcw (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\pcw.sys\6B73152715000\pcw.sys
Image path: \SystemRoot\System32\drivers\pcw.sys
Image name: pcw.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 6B731527 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00014D32
ImageSize: 00015000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.8 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: pcw.sys
OriginalFilename: pcw.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Performance Counters for Windows Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1dc50000 fffff800`1dc5b000 msisadrv (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\msisadrv.sys\5E470A0Eb000\msisadrv.sys
Image path: \SystemRoot\System32\drivers\msisadrv.sys
Image name: msisadrv.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 5E470A0E (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000E733
ImageSize: 0000B000
File version: 10.0.18362.476
Product version: 10.0.18362.476
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: msisadrv.sys
OriginalFilename: msisadrv.sys
ProductVersion: 10.0.18362.476
FileVersion: 10.0.18362.476 (WinBuild.160101.0800)
FileDescription: ISA Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1dc60000 fffff800`1dccf000 pci (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\pci.sys\0F5250186f000\pci.sys
Image path: \SystemRoot\System32\drivers\pci.sys
Image name: pci.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 0F525018 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0006D7FB
ImageSize: 0006F000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: pci.sys
OriginalFilename: pci.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: NT Plug and Play PCI Enumerator
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1dcd0000 fffff800`1dce3000 vdrvroot (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\vdrvroot.sys\0101BCC613000\vdrvroot.sys
Image path: \SystemRoot\System32\drivers\vdrvroot.sys
Image name: vdrvroot.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 0101BCC6 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000145B3
ImageSize: 00013000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: vdrvroot.sys
OriginalFilename: vdrvroot.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Virtual Drive Root Enumerator
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1dcf0000 fffff800`1dd23000 pdc (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\pdc.sys\87C34D9533000\pdc.sys
Image path: \SystemRoot\system32\drivers\pdc.sys
Image name: pdc.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 87C34D95 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0003134C
ImageSize: 00033000
File version: 10.0.18362.476
Product version: 10.0.18362.476
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: pdc.sys
OriginalFilename: pdc.sys
ProductVersion: 10.0.18362.476
FileVersion: 10.0.18362.476 (WinBuild.160101.0800)
FileDescription: Power Dependency Coordinator Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1dd30000 fffff800`1dd49000 CEA (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\CEA.sys\F381110719000\CEA.sys
Image path: \SystemRoot\system32\drivers\CEA.sys
Image name: CEA.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: F3811107 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00020C00
ImageSize: 00019000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: EventAggregation.sys
OriginalFilename: EventAggregation.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Event Aggregation Kernel Mode Library
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1dd50000 fffff800`1dd80000 partmgr (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\partmgr.sys\89C96AD130000\partmgr.sys
Image path: \SystemRoot\System32\drivers\partmgr.sys
Image name: partmgr.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 89C96AD1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000360FF
ImageSize: 00030000
File version: 10.0.18362.476
Product version: 10.0.18362.476
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: partmgr.sys
OriginalFilename: partmgr.sys
ProductVersion: 10.0.18362.476
FileVersion: 10.0.18362.476 (WinBuild.160101.0800)
FileDescription: Partition driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1dd90000 fffff800`1de35000 spaceport (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\spaceport.sys\A70F0B50a5000\spaceport.sys
Image path: \SystemRoot\System32\drivers\spaceport.sys
Image name: spaceport.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: A70F0B50 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000A2D79
ImageSize: 000A5000
File version: 10.0.18362.449
Product version: 10.0.18362.449
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: spaceport.sys
OriginalFilename: spaceport.sys
ProductVersion: 10.0.18362.449
FileVersion: 10.0.18362.449 (WinBuild.160101.0800)
FileDescription: Storage Spaces Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1de40000 fffff800`1de5a000 volmgr (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\volmgr.sys\211CEF761a000\volmgr.sys
Image path: \SystemRoot\System32\drivers\volmgr.sys
Image name: volmgr.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 211CEF76 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000205AA
ImageSize: 0001A000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: volmgr.sys
OriginalFilename: volmgr.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Volume Manager Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1de60000 fffff800`1dec3000 volmgrx (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\volmgrx.sys\D6F366B763000\volmgrx.sys
Image path: \SystemRoot\System32\drivers\volmgrx.sys
Image name: volmgrx.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: D6F366B7 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00062F8E
ImageSize: 00063000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: volmgrx.sys
OriginalFilename: volmgrx.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Volume Manager Extension Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1ded0000 fffff800`1deef000 mountmgr (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mountmgr.sys\63D3E2C91f000\mountmgr.sys
Image path: \SystemRoot\System32\drivers\mountmgr.sys
Image name: mountmgr.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 63D3E2C9 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00028F0C
ImageSize: 0001F000
File version: 10.0.18362.449
Product version: 10.0.18362.449
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: mountmgr.sys
OriginalFilename: mountmgr.sys
ProductVersion: 10.0.18362.449
FileVersion: 10.0.18362.449 (WinBuild.160101.0800)
FileDescription: Mount Point Manager
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1def0000 fffff800`1df1e000 storahci (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\storahci.sys\381E77BB2e000\storahci.sys
Image path: \SystemRoot\System32\drivers\storahci.sys
Image name: storahci.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 381E77BB (This is a reproducible build file hash, not a timestamp)
CheckSum: 0003052D
ImageSize: 0002E000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: storahci.sys
OriginalFilename: storahci.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: MS AHCI Storport Miniport Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1df20000 fffff800`1dfc2000 storport (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\storport.sys\A692CE5Ba2000\storport.sys
Image path: \SystemRoot\System32\drivers\storport.sys
Image name: storport.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: A692CE5B (This is a reproducible build file hash, not a timestamp)
CheckSum: 000A8237
ImageSize: 000A2000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: storport.sys
OriginalFilename: storport.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Microsoft Storage Port Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1dfd0000 fffff800`1dfeb000 EhStorClass (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\EhStorClass.sys\526CC2021b000\EhStorClass.sys
Image path: \SystemRoot\System32\drivers\EhStorClass.sys
Image name: EhStorClass.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 526CC202 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001B490
ImageSize: 0001B000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: EhStorClass.sys
OriginalFilename: EhStorClass.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Enhanced Storage Class driver for IEEE 1667 devices
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1dff0000 fffff800`1e00a000 fileinfo (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\fileinfo.sys\24BBED201a000\fileinfo.sys
Image path: \SystemRoot\System32\drivers\fileinfo.sys
Image name: fileinfo.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 24BBED20 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00021B6C
ImageSize: 0001A000
File version: 10.0.18362.476
Product version: 10.0.18362.476
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: FileInfo.sys
OriginalFilename: FileInfo.sys
ProductVersion: 10.0.18362.476
FileVersion: 10.0.18362.476 (WinBuild.160101.0800)
FileDescription: FileInfo Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1e010000 fffff800`1e04d000 Wof (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\Wof.sys\EE8C76003d000\Wof.sys
Image path: \SystemRoot\System32\Drivers\Wof.sys
Image name: Wof.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: EE8C7600 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00042754
ImageSize: 0003D000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: wof.sys
OriginalFilename: wof.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Windows Overlay Filter
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1e050000 fffff800`1e0a4000 WdFilter (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\WdFilter.sys\C3363EEA54000\WdFilter.sys
Image path: \SystemRoot\system32\drivers\WdFilter.sys
Image name: WdFilter.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: C3363EEA (This is a reproducible build file hash, not a timestamp)
CheckSum: 0005C472
ImageSize: 00054000
File version: 4.18.1902.5
Product version: 4.18.1902.5
File flags: 8 (Mask 3F) Private
File OS: 40004 NT Win32
File type: 3.0 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: WdFilter
OriginalFilename: WdFilter.sys
ProductVersion: 4.18.1902.5
FileVersion: 4.18.1902.5 (GitEnlistment(winpbld).190221-1742)
FileDescription: Microsoft antimalware file system filter driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1e0b0000 fffff800`1e34d000 Ntfs (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\Ntfs.sys\B0B0EBAD29d000\Ntfs.sys
Image path: \SystemRoot\System32\Drivers\Ntfs.sys
Image name: Ntfs.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: B0B0EBAD (This is a reproducible build file hash, not a timestamp)
CheckSum: 002A19BE
ImageSize: 0029D000
File version: 10.0.18362.535
Product version: 10.0.18362.535
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ntfs.sys
OriginalFilename: ntfs.sys
ProductVersion: 10.0.18362.535
FileVersion: 10.0.18362.535 (WinBuild.160101.0800)
FileDescription: NT File System Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1e350000 fffff800`1e35d000 Fs_Rec (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\Fs_Rec.sys\49E932BAd000\Fs_Rec.sys
Image path: \SystemRoot\System32\Drivers\Fs_Rec.sys
Image name: Fs_Rec.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 49E932BA (This is a reproducible build file hash, not a timestamp)
CheckSum: 000171CB
ImageSize: 0000D000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: fs_rec.sys
OriginalFilename: fs_rec.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: File System Recognizer Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1e360000 fffff800`1e4d2000 ndis (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ndis.sys\20136331172000\ndis.sys
Image path: \SystemRoot\system32\drivers\ndis.sys
Image name: ndis.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 20136331 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00178802
ImageSize: 00172000
File version: 10.0.18362.387
Product version: 10.0.18362.387
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: NDIS.SYS
OriginalFilename: NDIS.SYS
ProductVersion: 10.0.18362.387
FileVersion: 10.0.18362.387 (WinBuild.160101.0800)
FileDescription: Network Driver Interface Specification (NDIS)
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1e4e0000 fffff800`1e574000 NETIO (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\NETIO.SYS\E337515594000\NETIO.SYS
Image path: \SystemRoot\system32\drivers\NETIO.SYS
Image name: NETIO.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: E3375155 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00099164
ImageSize: 00094000
File version: 10.0.18362.476
Product version: 10.0.18362.476
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: netio.sys
OriginalFilename: netio.sys
ProductVersion: 10.0.18362.476
FileVersion: 10.0.18362.476 (WinBuild.160101.0800)
FileDescription: Network I/O Subsystem
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1e580000 fffff800`1e5b2000 ksecpkg (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ksecpkg.sys\E1E129D532000\ksecpkg.sys
Image path: \SystemRoot\System32\Drivers\ksecpkg.sys
Image name: ksecpkg.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: E1E129D5 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00030E9D
ImageSize: 00032000
File version: 10.0.18362.387
Product version: 10.0.18362.387
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ksecpkg.sys
OriginalFilename: ksecpkg.sys
ProductVersion: 10.0.18362.387
FileVersion: 10.0.18362.387 (WinBuild.160101.0800)
FileDescription: Kernel Security Support Provider Interface Packages
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1e5c0000 fffff800`1e8aa000 tcpip (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\tcpip.sys\56FA3E2F2ea000\tcpip.sys
Image path: \SystemRoot\System32\drivers\tcpip.sys
Image name: tcpip.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 56FA3E2F (This is a reproducible build file hash, not a timestamp)
CheckSum: 002E0CE0
ImageSize: 002EA000
File version: 10.0.18362.476
Product version: 10.0.18362.476
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: tcpip.sys
OriginalFilename: tcpip.sys
ProductVersion: 10.0.18362.476
FileVersion: 10.0.18362.476 (WinBuild.160101.0800)
FileDescription: TCP/IP Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1e8b0000 fffff800`1e92a000 fwpkclnt (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\fwpkclnt.sys\58C1E6ED7a000\fwpkclnt.sys
Image path: \SystemRoot\System32\drivers\fwpkclnt.sys
Image name: fwpkclnt.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 58C1E6ED (This is a reproducible build file hash, not a timestamp)
CheckSum: 0007E5A5
ImageSize: 0007A000
File version: 10.0.18362.476
Product version: 10.0.18362.476
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: fwpkclnt.sys
OriginalFilename: fwpkclnt.sys
ProductVersion: 10.0.18362.476
FileVersion: 10.0.18362.476 (WinBuild.160101.0800)
FileDescription: FWP/IPsec Kernel-Mode API
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1e930000 fffff800`1e960000 wfplwfs (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\wfplwfs.sys\60902CBB30000\wfplwfs.sys
Image path: \SystemRoot\System32\drivers\wfplwfs.sys
Image name: wfplwfs.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 60902CBB (This is a reproducible build file hash, not a timestamp)
CheckSum: 00031F74
ImageSize: 00030000
File version: 10.0.18362.476
Product version: 10.0.18362.476
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: WFPLWFS.SYS
OriginalFilename: WFPLWFS.SYS
ProductVersion: 10.0.18362.476
FileVersion: 10.0.18362.476 (WinBuild.160101.0800)
FileDescription: WFP NDIS 6.30 Lightweight Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1e970000 fffff800`1ea39000 fvevol (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\fvevol.sys\D4B5A2E7c9000\fvevol.sys
Image path: \SystemRoot\System32\DRIVERS\fvevol.sys
Image name: fvevol.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: D4B5A2E7 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000D13CD
ImageSize: 000C9000
File version: 10.0.18362.476
Product version: 10.0.18362.476
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: FVEVOL.SYS
OriginalFilename: FVEVOL.SYS
ProductVersion: 10.0.18362.476
FileVersion: 10.0.18362.476 (WinBuild.160101.0800)
FileDescription: BitLocker Drive Encryption Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1ea40000 fffff800`1ea4b000 volume (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\volume.sys\A4E9FDFAb000\volume.sys
Image path: \SystemRoot\System32\drivers\volume.sys
Image name: volume.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: A4E9FDFA (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000D971
ImageSize: 0000B000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: volume.sys
OriginalFilename: volume.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Volume driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1ea50000 fffff800`1eabd000 volsnap (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\volsnap.sys\1876F5336d000\volsnap.sys
Image path: \SystemRoot\System32\drivers\volsnap.sys
Image name: volsnap.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 1876F533 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00071C3E
ImageSize: 0006D000
File version: 10.0.18362.476
Product version: 10.0.18362.476
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: volsnap.sys
OriginalFilename: volsnap.sys
ProductVersion: 10.0.18362.476
FileVersion: 10.0.18362.476 (WinBuild.160101.0800)
FileDescription: Volume Shadow Copy driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1eac0000 fffff800`1eb0e000 rdyboost (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\rdyboost.sys\F450CEB34e000\rdyboost.sys
Image path: \SystemRoot\System32\drivers\rdyboost.sys
Image name: rdyboost.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: F450CEB3 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0004BF9F
ImageSize: 0004E000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: rdyboost.sys
OriginalFilename: rdyboost.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: ReadyBoost Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1eb10000 fffff800`1eb35000 mup (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mup.sys\565E031125000\mup.sys
Image path: \SystemRoot\System32\Drivers\mup.sys
Image name: mup.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 565E0311 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002B4FE
ImageSize: 00025000
File version: 10.0.18362.476
Product version: 10.0.18362.476
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: MUP.SYS
OriginalFilename: MUP.SYS
ProductVersion: 10.0.18362.476
FileVersion: 10.0.18362.476 (WinBuild.160101.0800)
FileDescription: Multiple UNC Provider Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1eb40000 fffff800`1eb52000 iorate (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\iorate.sys\18D52DDA12000\iorate.sys
Image path: \SystemRoot\system32\drivers\iorate.sys
Image name: iorate.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 18D52DDA (This is a reproducible build file hash, not a timestamp)
CheckSum: 00011F64
ImageSize: 00012000
File version: 10.0.18362.476
Product version: 10.0.18362.476
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: iorate.sys
OriginalFilename: iorate.sys
ProductVersion: 10.0.18362.476
FileVersion: 10.0.18362.476 (WinBuild.160101.0800)
FileDescription: I/O rate control Filter
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1eb70000 fffff800`1eb8c000 disk (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\disk.sys\384FEFED1c000\disk.sys
Image path: \SystemRoot\System32\drivers\disk.sys
Image name: disk.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 384FEFED (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001F656
ImageSize: 0001C000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: disk.sys
OriginalFilename: disk.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: PnP Disk Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`1eb90000 fffff800`1ebfb000 CLASSPNP (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\CLASSPNP.SYS\09ED6E496b000\CLASSPNP.SYS
Image path: \SystemRoot\System32\drivers\CLASSPNP.SYS
Image name: CLASSPNP.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 09ED6E49 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0006B831
ImageSize: 0006B000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: Classpnp.sys
OriginalFilename: Classpnp.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: SCSI Class System Dll
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a7c00000 fffff808`a7f74000 dxgkrnl (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\dxgkrnl.sys\B1B2A7DF374000\dxgkrnl.sys
Image path: \SystemRoot\System32\drivers\dxgkrnl.sys
Image name: dxgkrnl.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: B1B2A7DF (This is a reproducible build file hash, not a timestamp)
CheckSum: 0037704F
ImageSize: 00374000
File version: 10.0.18362.449
Product version: 10.0.18362.449
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: dxgkrnl.sys
OriginalFilename: dxgkrnl.sys
ProductVersion: 10.0.18362.449
FileVersion: 10.0.18362.449 (WinBuild.160101.0800)
FileDescription: DirectX Graphics Kernel
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a7f80000 fffff808`a7f96000 watchdog (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\watchdog.sys\2147479916000\watchdog.sys
Image path: \SystemRoot\System32\drivers\watchdog.sys
Image name: watchdog.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 21474799 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000124E8
ImageSize: 00016000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: watchdog.sys
OriginalFilename: watchdog.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Watchdog Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a7fa0000 fffff808`a7fb6000 BasicDisplay (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\BasicDisplay.sys\4E6E05E116000\BasicDisplay.sys
Image path: \SystemRoot\System32\DriverStore\FileRepository\basicdisplay.inf_amd64_307898c750ba9e44\BasicDisplay.sys
Image name: BasicDisplay.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 4E6E05E1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00014386
ImageSize: 00016000
File version: 10.0.18362.476
Product version: 10.0.18362.476
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.4 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: BasicDisplay.sys
OriginalFilename: BasicDisplay.sys
ProductVersion: 10.0.18362.476
FileVersion: 10.0.18362.476 (WinBuild.160101.0800)
FileDescription: Microsoft Basic Display Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a7fc0000 fffff808`a7fd1000 BasicRender (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\BasicRender.sys\82A9322811000\BasicRender.sys
Image path: \SystemRoot\System32\DriverStore\FileRepository\basicrender.inf_amd64_ba2a8de08ea0d469\BasicRender.sys
Image name: BasicRender.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 82A93228 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000128BB
ImageSize: 00011000
File version: 10.0.18362.476
Product version: 10.0.18362.476
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.4 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: BasicRender.sys
OriginalFilename: BasicRender.sys
ProductVersion: 10.0.18362.476
FileVersion: 10.0.18362.476 (WinBuild.160101.0800)
FileDescription: Microsoft Basic Render Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a7fe0000 fffff808`a7ffc000 Npfs (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\Npfs.SYS\B03ECFD31c000\Npfs.SYS
Image path: \SystemRoot\System32\Drivers\Npfs.SYS
Image name: Npfs.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: B03ECFD3 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000252E2
ImageSize: 0001C000
File version: 10.0.18362.476
Product version: 10.0.18362.476
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: npfs.sys
OriginalFilename: npfs.sys
ProductVersion: 10.0.18362.476
FileVersion: 10.0.18362.476 (WinBuild.160101.0800)
FileDescription: NPFS Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a8000000 fffff808`a8011000 Msfs (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\Msfs.SYS\91FE0FF411000\Msfs.SYS
Image path: \SystemRoot\System32\Drivers\Msfs.SYS
Image name: Msfs.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 91FE0FF4 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000C221
ImageSize: 00011000
File version: 10.0.18362.476
Product version: 10.0.18362.476
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: MSFS.SYS
OriginalFilename: MSFS.SYS
ProductVersion: 10.0.18362.476
FileVersion: 10.0.18362.476 (WinBuild.160101.0800)
FileDescription: Mailslot driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a8020000 fffff808`a8046000 tdx (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\tdx.sys\0A1F3DC426000\tdx.sys
Image path: \SystemRoot\system32\DRIVERS\tdx.sys
Image name: tdx.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 0A1F3DC4 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000301E4
ImageSize: 00026000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: tdx.sys
OriginalFilename: tdx.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: TDI Translation Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a8050000 fffff808`a8060000 TDI (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\TDI.SYS\894065A010000\TDI.SYS
Image path: \SystemRoot\system32\DRIVERS\TDI.SYS
Image name: TDI.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 894065A0 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000137D6
ImageSize: 00010000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: tdi.sys
OriginalFilename: tdi.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: TDI Wrapper
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a8070000 fffff808`a80c9000 netbt (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\netbt.sys\113D2A2259000\netbt.sys
Image path: \SystemRoot\System32\DRIVERS\netbt.sys
Image name: netbt.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 113D2A22 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00061EC2
ImageSize: 00059000
File version: 10.0.18362.476
Product version: 10.0.18362.476
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: netbt.sys
OriginalFilename: netbt.sys
ProductVersion: 10.0.18362.476
FileVersion: 10.0.18362.476 (WinBuild.160101.0800)
FileDescription: MBT Transport driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a80d0000 fffff808`a80e3000 afunix (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\afunix.sys\9D6C12C413000\afunix.sys
Image path: \SystemRoot\system32\drivers\afunix.sys
Image name: afunix.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 9D6C12C4 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000E15B
ImageSize: 00013000
File version: 10.0.18362.685
Product version: 10.0.18362.685
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: afunix.sys
OriginalFilename: afunix.sys
ProductVersion: 10.0.18362.685
FileVersion: 10.0.18362.685 (WinBuild.160101.0800)
FileDescription: AF_UNIX socket provider
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a80f0000 fffff808`a8197000 afd (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\afd.sys\B88DD13Ea7000\afd.sys
Image path: \SystemRoot\system32\drivers\afd.sys
Image name: afd.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: B88DD13E (This is a reproducible build file hash, not a timestamp)
CheckSum: 000A4CCD
ImageSize: 000A7000
File version: 10.0.18362.476
Product version: 10.0.18362.476
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: afd.sys
OriginalFilename: afd.sys
ProductVersion: 10.0.18362.476
FileVersion: 10.0.18362.476 (WinBuild.160101.0800)
FileDescription: Ancillary Function Driver for WinSock
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a81a0000 fffff808`a81ba000 vwififlt (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\vwififlt.sys\393962891a000\vwififlt.sys
Image path: \SystemRoot\System32\drivers\vwififlt.sys
Image name: vwififlt.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 39396289 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00013579
ImageSize: 0001A000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: vwififlt.sys
OriginalFilename: vwififlt.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Virtual WiFi Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a81c0000 fffff808`a81eb000 pacer (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\pacer.sys\E7276BDE2b000\pacer.sys
Image path: \SystemRoot\System32\drivers\pacer.sys
Image name: pacer.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: E7276BDE (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002E905
ImageSize: 0002B000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: pacer.sys
OriginalFilename: pacer.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: QoS Packet Scheduler
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a81f0000 fffff808`a8204000 netbios (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\netbios.sys\B37FD2E914000\netbios.sys
Image path: \SystemRoot\system32\drivers\netbios.sys
Image name: netbios.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: B37FD2E9 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001A112
ImageSize: 00014000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: NETBIOS.SYS
OriginalFilename: NETBIOS.SYS
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: NetBIOS interface driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a8210000 fffff808`a828b000 rdbss (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\rdbss.sys\652921127b000\rdbss.sys
Image path: \SystemRoot\system32\DRIVERS\rdbss.sys
Image name: rdbss.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 65292112 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0007AD63
ImageSize: 0007B000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: rdbss.sys
OriginalFilename: RDBSS.Sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Redirected Drive Buffering SubSystem Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a8290000 fffff808`a82a2000 nsiproxy (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\nsiproxy.sys\528DA18A12000\nsiproxy.sys
Image path: \SystemRoot\system32\drivers\nsiproxy.sys
Image name: nsiproxy.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 528DA18A (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001AB54
ImageSize: 00012000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: nsiproxy.sys
OriginalFilename: nsiproxy.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: NSI Proxy
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a82b0000 fffff808`a82bd000 npsvctrig (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\npsvctrig.sys\0E7AC006d000\npsvctrig.sys
Image path: \SystemRoot\System32\drivers\npsvctrig.sys
Image name: npsvctrig.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 0E7AC006 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000A178
ImageSize: 0000D000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: npsvctrig.sys
OriginalFilename: npsvctrig.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Named pipe service triggers
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a82c0000 fffff808`a82d0000 mssmbios (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mssmbios.sys\E6DC521D10000\mssmbios.sys
Image path: \SystemRoot\System32\drivers\mssmbios.sys
Image name: mssmbios.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: E6DC521D (This is a reproducible build file hash, not a timestamp)
CheckSum: 000119C0
ImageSize: 00010000
File version: 10.0.18362.476
Product version: 10.0.18362.476
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: smbios.sys
OriginalFilename: smbios.sys
ProductVersion: 10.0.18362.476
FileVersion: 10.0.18362.476 (WinBuild.160101.0800)
FileDescription: System Management BIOS Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a82e0000 fffff808`a82ea000 gpuenergydrv (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\gpuenergydrv.sys\0CC24294a000\gpuenergydrv.sys
Image path: \SystemRoot\System32\drivers\gpuenergydrv.sys
Image name: gpuenergydrv.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 0CC24294 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000084A8
ImageSize: 0000A000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: gpuenergydrv.sys
OriginalFilename: gpuenergydrv.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: GPU Energy Kernel Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a82f0000 fffff808`a831c000 dfsc (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\dfsc.sys\FABE3F7D2c000\dfsc.sys
Image path: \SystemRoot\System32\Drivers\dfsc.sys
Image name: dfsc.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: FABE3F7D (This is a reproducible build file hash, not a timestamp)
CheckSum: 00030A7C
ImageSize: 0002C000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: dfsclient.sys
OriginalFilename: dfsclient.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: DFS Namespace Client Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a8340000 fffff808`a8356000 bam (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\bam.sys\2219877816000\bam.sys
Image path: \SystemRoot\system32\drivers\bam.sys
Image name: bam.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 22198778 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00018911
ImageSize: 00016000
File version: 10.0.18362.476
Product version: 10.0.18362.476
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: bam.sys
OriginalFilename: bam.sys
ProductVersion: 10.0.18362.476
FileVersion: 10.0.18362.476 (WinBuild.160101.0800)
FileDescription: BAM Kernel Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a8360000 fffff808`a83af000 ahcache (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ahcache.sys\A8473BE24f000\ahcache.sys
Image path: \SystemRoot\system32\DRIVERS\ahcache.sys
Image name: ahcache.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: A8473BE2 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00056682
ImageSize: 0004F000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ahcache.sys
OriginalFilename: ahcache.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Application Compatibility Cache
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a83b0000 fffff808`a843c000 Vid (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\Vid.sys\5684D88D8c000\Vid.sys
Image path: \SystemRoot\System32\drivers\Vid.sys
Image name: Vid.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 5684D88D (This is a reproducible build file hash, not a timestamp)
CheckSum: 00090950
ImageSize: 0008C000
File version: 10.0.18362.476
Product version: 10.0.18362.476
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: vid.sys
OriginalFilename: vid.sys
ProductVersion: 10.0.18362.476
FileVersion: 10.0.18362.476 (WinBuild.160101.0800)
FileDescription: Microsoft Hyper-V Virtualization Infrastructure Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a8440000 fffff808`a845f000 winhvr (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\winhvr.sys\8D3328641f000\winhvr.sys
Image path: \SystemRoot\System32\drivers\winhvr.sys
Image name: winhvr.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 8D332864 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002174D
ImageSize: 0001F000
File version: 10.0.18362.476
Product version: 10.0.18362.476
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: WinHvR.sys
OriginalFilename: WinHvR.sys
ProductVersion: 10.0.18362.476
FileVersion: 10.0.18362.476 (WinBuild.160101.0800)
FileDescription: Windows Hypervisor Root Interface Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a8460000 fffff808`a8471000 CompositeBus (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\CompositeBus.sys\F050D61611000\CompositeBus.sys
Image path: \SystemRoot\System32\DriverStore\FileRepository\compositebus.inf_amd64_43ac632006e874bb\CompositeBus.sys
Image name: CompositeBus.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: F050D616 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000160B1
ImageSize: 00011000
File version: 10.0.18362.329
Product version: 10.0.18362.329
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: compositebus.sys
OriginalFilename: compositebus.sys
ProductVersion: 10.0.18362.329
FileVersion: 10.0.18362.329 (WinBuild.160101.0800)
FileDescription: Multi-Transport Composite Bus Enumerator
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a8480000 fffff808`a848d000 kdnic (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\kdnic.sys\1FF5F7F5d000\kdnic.sys
Image path: \SystemRoot\System32\drivers\kdnic.sys
Image name: kdnic.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 1FF5F7F5 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000F14F
ImageSize: 0000D000
File version: 6.1.0.0
Product version: 6.1.0.0
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft Kernel Debugger Network Adapter (NDIS 6.20 Miniport)
InternalName: kdnic.sys
OriginalFilename: kdnic.sys
ProductVersion: 6.01.00.0000
FileVersion: 6.01.00.0000 (WinBuild.160101.0800)
FileDescription: Microsoft Kernel Debugger Network Miniport
LegalCopyright: Copyright (C) Microsoft Corporation. All rights reserved.
fffff808`a8490000 fffff808`a84a5000 umbus (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\umbus.sys\3104A4AD15000\umbus.sys
Image path: \SystemRoot\System32\DriverStore\FileRepository\umbus.inf_amd64_e566af5dd9858a0e\umbus.sys
Image name: umbus.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 3104A4AD (This is a reproducible build file hash, not a timestamp)
CheckSum: 00011629
ImageSize: 00015000
File version: 10.0.18362.476
Product version: 10.0.18362.476
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: umbus.sys
OriginalFilename: umbus.sys
ProductVersion: 10.0.18362.476
FileVersion: 10.0.18362.476 (WinBuild.160101.0800)
FileDescription: User-Mode Bus Enumerator
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a84b0000 fffff808`a84c5000 CAD (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\CAD.sys\56CE6ABF15000\CAD.sys
Image path: \SystemRoot\System32\drivers\CAD.sys
Image name: CAD.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 56CE6ABF (This is a reproducible build file hash, not a timestamp)
CheckSum: 000131EA
ImageSize: 00015000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: cad.sys
OriginalFilename: cad.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Charge Arbiration Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a84d0000 fffff808`a850a000 amdppm (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\amdppm.sys\A51358DF3a000\amdppm.sys
Image path: \SystemRoot\System32\drivers\amdppm.sys
Image name: amdppm.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: A51358DF (This is a reproducible build file hash, not a timestamp)
CheckSum: 00039820
ImageSize: 0003A000
File version: 10.0.18362.387
Product version: 10.0.18362.387
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: amdppm.sys
OriginalFilename: amdppm.sys
ProductVersion: 10.0.18362.387
FileVersion: 10.0.18362.387 (WinBuild.160101.0800)
FileDescription: Processor Device Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a8510000 fffff808`a855d000 atikmpag T (no symbols)
Loaded symbol image file: atikmpag.sys
Image path: \SystemRoot\system32\DRIVERS\atikmpag.sys
Image name: atikmpag.sys
Browse all global symbols functions data
Timestamp: Fri Mar 4 18:16:46 2011 (4D71025E)
CheckSum: 00050E17
ImageSize: 0004D000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff808`a8560000 fffff808`a85cb000 fastfat (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\fastfat.SYS\2734E7BF6b000\fastfat.SYS
Image path: \SystemRoot\System32\Drivers\fastfat.SYS
Image name: fastfat.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 2734E7BF (This is a reproducible build file hash, not a timestamp)
CheckSum: 00070CE7
ImageSize: 0006B000
File version: 10.0.18362.535
Product version: 10.0.18362.535
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: fastfat.sys
OriginalFilename: FastFAT.Sys
ProductVersion: 10.0.18362.535
FileVersion: 10.0.18362.535 (WinBuild.160101.0800)
FileDescription: Fast FAT File System Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a85d0000 fffff808`a8623000 srvnet (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\srvnet.sys\220AB43D53000\srvnet.sys
Image path: \SystemRoot\System32\DRIVERS\srvnet.sys
Image name: srvnet.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 220AB43D (This is a reproducible build file hash, not a timestamp)
CheckSum: 0005758C
ImageSize: 00053000
File version: 10.0.18362.207
Product version: 10.0.18362.207
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: SRVNET.SYS
OriginalFilename: SRVNET.SYS
ProductVersion: 10.0.18362.207
FileVersion: 10.0.18362.207 (WinBuild.160101.0800)
FileDescription: Server Network driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a8630000 fffff808`a8682000 mrxsmb10 (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mrxsmb10.sys\5DDA4A7752000\mrxsmb10.sys
Image path: \SystemRoot\system32\DRIVERS\mrxsmb10.sys
Image name: mrxsmb10.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 5DDA4A77 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000540CF
ImageSize: 00052000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: MRxSmb0.sys
OriginalFilename: MRXSMB0.Sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Longhorn SMB Downlevel SubRdr
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a8690000 fffff808`a8766000 peauth (deferred)
Image path: \SystemRoot\system32\drivers\peauth.sys
Image name: peauth.sys
Browse all global symbols functions data
Timestamp: Mon Jan 12 04:52:12 2015 (54B328CC)
CheckSum: 000D2C81
ImageSize: 000D6000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff808`a8770000 fffff808`a8783000 vwifimp (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\vwifimp.sys\3AE8886D13000\vwifimp.sys
Image path: \SystemRoot\System32\drivers\vwifimp.sys
Image name: vwifimp.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 3AE8886D (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000C8CD
ImageSize: 00013000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: vwifimp.sys
OriginalFilename: vwifimp.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Virtual WiFi Miniport Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a8790000 fffff808`a8855000 srv2 (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\srv2.sys\BD56ACC9c5000\srv2.sys
Image path: \SystemRoot\System32\DRIVERS\srv2.sys
Image name: srv2.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: BD56ACC9 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000C36EE
ImageSize: 000C5000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: SRV2.SYS
OriginalFilename: SRV2.SYS
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Smb 2.0 Server driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a8890000 fffff808`a88ad000 crashdmp (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\crashdmp.sys\2985CB131d000\crashdmp.sys
Image path: \SystemRoot\System32\Drivers\crashdmp.sys
Image name: crashdmp.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 2985CB13 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00024E3D
ImageSize: 0001D000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: crashdmp.sys
OriginalFilename: crashdmp.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Crash Dump Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a88b0000 fffff808`a88cd000 rassstp (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\rassstp.sys\6EC6A1E51d000\rassstp.sys
Image path: \SystemRoot\System32\drivers\rassstp.sys
Image name: rassstp.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 6EC6A1E5 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00015F3B
ImageSize: 0001D000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: rassstp.sys
OriginalFilename: rassstp.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: RAS SSTP Miniport Call Manager
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a88d0000 fffff808`a8911000 NDProxy (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\NDProxy.sys\193FE71341000\NDProxy.sys
Image path: \SystemRoot\System32\DRIVERS\NDProxy.sys
Image name: NDProxy.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 193FE713 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0003DD10
ImageSize: 00041000
File version: 10.0.18362.476
Product version: 10.0.18362.476
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ndproxy.sys
OriginalFilename: ndproxy.sys
ProductVersion: 10.0.18362.476
FileVersion: 10.0.18362.476 (WinBuild.160101.0800)
FileDescription: NDIS Proxy
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a8920000 fffff808`a8947000 AgileVpn (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\AgileVpn.sys\A96AFF6D27000\AgileVpn.sys
Image path: \SystemRoot\System32\drivers\AgileVpn.sys
Image name: AgileVpn.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: A96AFF6D (This is a reproducible build file hash, not a timestamp)
CheckSum: 00028AB1
ImageSize: 00027000
File version: 10.0.18362.476
Product version: 10.0.18362.476
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: agilevpn.sys
OriginalFilename: agilevpn.sys
ProductVersion: 10.0.18362.476
FileVersion: 10.0.18362.476 (WinBuild.160101.0800)
FileDescription: RAS Agile Vpn Miniport Call Manager
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a8970000 fffff808`a89a0000 cdrom (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\cdrom.sys\9F6B0B7B30000\cdrom.sys
Image path: \SystemRoot\System32\drivers\cdrom.sys
Image name: cdrom.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 9F6B0B7B (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002ED2A
ImageSize: 00030000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: cdrom.sys
OriginalFilename: cdrom.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: SCSI CD-ROM Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a89b0000 fffff808`a89c5000 filecrypt (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\filecrypt.sys\4EAD73C115000\filecrypt.sys
Image path: \SystemRoot\system32\drivers\filecrypt.sys
Image name: filecrypt.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 4EAD73C1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001D98F
ImageSize: 00015000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: filecrypt.sys
OriginalFilename: filecrypt.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Windows sandboxing and encryption filter
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a89d0000 fffff808`a89de000 tbs (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\tbs.sys\965BAC31e000\tbs.sys
Image path: \SystemRoot\system32\drivers\tbs.sys
Image name: tbs.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 965BAC31 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000147E0
ImageSize: 0000E000
File version: 10.0.18362.685
Product version: 10.0.18362.685
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: TBS.SYS
OriginalFilename: TBS.SYS
ProductVersion: 10.0.18362.685
FileVersion: 10.0.18362.685 (WinBuild.160101.0800)
FileDescription: Export driver for kernel mode TPM API
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a89e0000 fffff808`a89ea000 Null (deferred)
Image path: \SystemRoot\System32\Drivers\Null.SYS
Image name: Null.SYS
Browse all global symbols functions data
Timestamp: unavailable (00000000)
CheckSum: 00000000
ImageSize: 0000A000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff808`a89f0000 fffff808`a89fa000 Beep (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\Beep.SYS\528EC21Aa000\Beep.SYS
Image path: \SystemRoot\System32\Drivers\Beep.SYS
Image name: Beep.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 528EC21A (This is a reproducible build file hash, not a timestamp)
CheckSum: 00008114
ImageSize: 0000A000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: beep.sys
OriginalFilename: beep.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: BEEP Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a9400000 fffff808`a94a6000 rt640x64 (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\rt640x64.sys\5BCDE005a6000\rt640x64.sys
Image path: \SystemRoot\System32\drivers\rt640x64.sys
Image name: rt640x64.sys
Browse all global symbols functions data
Timestamp: Mon Oct 22 17:34:45 2018 (5BCDE005)
CheckSum: 000ACC60
ImageSize: 000A6000
File version: 9.1.409.2015
Product version: 9.1.409.2015
File flags: 8 (Mask 3F) Private
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Realtek
ProductName: Realtek 8125/8136/8168/8169 PCI/PCIe Adapters
InternalName: rt640x64.sys
OriginalFilename: rt640x64.sys
ProductVersion: 9.001.0409.2015
FileVersion: 9.001.0409.2015
FileDescription: Realtek 8125/8136/8168/8169 NDIS 6.40 64-bit Driver
LegalCopyright: Copyright (C) 2018 Realtek Semiconductor Corporation. All Right Reserved.
fffff808`a94b0000 fffff808`a9724000 netr28x (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\netr28x.sys\55684D03274000\netr28x.sys
Image path: \SystemRoot\System32\drivers\netr28x.sys
Image name: netr28x.sys
Browse all global symbols functions data
Timestamp: Fri May 29 14:26:59 2015 (55684D03)
CheckSum: 0026E14A
ImageSize: 00274000
File version: 5.0.57.0
Product version: 5.0.57.0
File flags: 8 (Mask 3F) Private
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: MediaTek Inc.
ProductName: MediaTek 802.11n Wireless Adapters
InternalName: netr28.sys
OriginalFilename: netr28.sys
ProductVersion: 5.00.57.0000
FileVersion: 5.00.57.0000
FileDescription: MediaTek 802.11 Wireless Adapter Driver
LegalCopyright: MediaTek Inc. (C)2014. All rights reserved.
fffff808`a9730000 fffff808`a973e000 vwifibus (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\vwifibus.sys\4F3B1CDEe000\vwifibus.sys
Image path: \SystemRoot\System32\drivers\vwifibus.sys
Image name: vwifibus.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 4F3B1CDE (This is a reproducible build file hash, not a timestamp)
CheckSum: 00013F1E
ImageSize: 0000E000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: VWiFiBus.sys
OriginalFilename: VWiFiBus.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Virtual Wireless Bus Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a9740000 fffff808`a974f000 usbohci (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\usbohci.sys\316BF486f000\usbohci.sys
Image path: \SystemRoot\System32\drivers\usbohci.sys
Image name: usbohci.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 316BF486 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00008506
ImageSize: 0000F000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: USBOHCI.sys
OriginalFilename: USBOHCI.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: OHCI USB Miniport Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a9750000 fffff808`a97ca000 USBPORT (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\USBPORT.SYS\A13767BB7a000\USBPORT.SYS
Image path: \SystemRoot\System32\drivers\USBPORT.SYS
Image name: USBPORT.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: A13767BB (This is a reproducible build file hash, not a timestamp)
CheckSum: 0007EE32
ImageSize: 0007A000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: usbport.sys
OriginalFilename: usbport.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: USB 1.1 & 2.0 Port Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a97d0000 fffff808`a97ed000 usbehci (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\usbehci.sys\7C61F55C1d000\usbehci.sys
Image path: \SystemRoot\System32\drivers\usbehci.sys
Image name: usbehci.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 7C61F55C (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001A6AF
ImageSize: 0001D000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: USBEHCI.sys
OriginalFilename: USBEHCI.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: EHCI eUSB Miniport Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a97f0000 fffff808`a9813000 i8042prt (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\i8042prt.sys\E54F27F723000\i8042prt.sys
Image path: \SystemRoot\System32\drivers\i8042prt.sys
Image name: i8042prt.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: E54F27F7 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002AAEB
ImageSize: 00023000
File version: 10.0.18362.476
Product version: 10.0.18362.476
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: i8042prt.sys
OriginalFilename: i8042prt.sys
ProductVersion: 10.0.18362.476
FileVersion: 10.0.18362.476 (WinBuild.160101.0800)
FileDescription: i8042 Port Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a9820000 fffff808`a98bb000 SynTP (deferred)
Image path: \SystemRoot\system32\DRIVERS\SynTP.sys
Image name: SynTP.sys
Browse all global symbols functions data
Timestamp: Tue Jul 28 23:08:10 2015 (55B7E12A)
CheckSum: 000A3C80
ImageSize: 0009B000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff808`a98c0000 fffff808`a98ce000 USBD (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\USBD.SYS\CD63CE9De000\USBD.SYS
Image path: \SystemRoot\system32\DRIVERS\USBD.SYS
Image name: USBD.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: CD63CE9D (This is a reproducible build file hash, not a timestamp)
CheckSum: 00012D1D
ImageSize: 0000E000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: usbd.sys
OriginalFilename: usbd.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Universal Serial Bus Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a98d0000 fffff808`a98e4000 kbdclass (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\kbdclass.sys\0B47422614000\kbdclass.sys
Image path: \SystemRoot\System32\drivers\kbdclass.sys
Image name: kbdclass.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 0B474226 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00017E16
ImageSize: 00014000
File version: 10.0.18362.476
Product version: 10.0.18362.476
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: kbdclass.sys
OriginalFilename: kbdclass.sys
ProductVersion: 10.0.18362.476
FileVersion: 10.0.18362.476 (WinBuild.160101.0800)
FileDescription: Keyboard Class Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a98f0000 fffff808`a9903000 mouclass (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mouclass.sys\4A22FFB813000\mouclass.sys
Image path: \SystemRoot\System32\drivers\mouclass.sys
Image name: mouclass.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 4A22FFB8 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001F175
ImageSize: 00013000
File version: 10.0.18362.476
Product version: 10.0.18362.476
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: mouclass.sys
OriginalFilename: mouclass.sys
ProductVersion: 10.0.18362.476
FileVersion: 10.0.18362.476 (WinBuild.160101.0800)
FileDescription: Mouse Class Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a9910000 fffff808`a991f000 CmBatt (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\CmBatt.sys\15AECFEBf000\CmBatt.sys
Image path: \SystemRoot\System32\drivers\CmBatt.sys
Image name: CmBatt.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 15AECFEB (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000F88D
ImageSize: 0000F000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: cmbatt.sys
OriginalFilename: cmbatt.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Control Method Battery Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a9920000 fffff808`a9930000 BATTC (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\BATTC.SYS\23D7DB8510000\BATTC.SYS
Image path: \SystemRoot\System32\drivers\BATTC.SYS
Image name: BATTC.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 23D7DB85 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000DAE4
ImageSize: 00010000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: battc.sys
OriginalFilename: battc.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Battery Class Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a9940000 fffff808`a994c000 wmiacpi (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\wmiacpi.sys\AF7EFCE5c000\wmiacpi.sys
Image path: \SystemRoot\System32\drivers\wmiacpi.sys
Image name: wmiacpi.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: AF7EFCE5 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000AA73
ImageSize: 0000C000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: wmiacpi.sys
OriginalFilename: wmiacpi.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Windows Management Interface for ACPI
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a9950000 fffff808`a995d000 NdisVirtualBus (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\NdisVirtualBus.sys\D217410Ad000\NdisVirtualBus.sys
Image path: \SystemRoot\System32\drivers\NdisVirtualBus.sys
Image name: NdisVirtualBus.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: D217410A (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000D370
ImageSize: 0000D000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: NdisVirtualBus.sys
OriginalFilename: NdisVirtualBus.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Microsoft Virtual Network Adapter Enumerator
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a9960000 fffff808`a996c000 swenum (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\swenum.sys\C4D73525c000\swenum.sys
Image path: \SystemRoot\System32\DriverStore\FileRepository\swenum.inf_amd64_1c567926e5b29133\swenum.sys
Image name: swenum.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: C4D73525 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000CF15
ImageSize: 0000C000
File version: 10.0.18362.476
Product version: 10.0.18362.476
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.0 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: swenum.sys
OriginalFilename: swenum.sys
ProductVersion: 10.0.18362.476
FileVersion: 10.0.18362.476 (WinBuild.160101.0800)
FileDescription: Plug and Play Software Device Enumerator
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a9970000 fffff808`a997e000 rdpbus (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\rdpbus.sys\4E9899F8e000\rdpbus.sys
Image path: \SystemRoot\System32\drivers\rdpbus.sys
Image name: rdpbus.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 4E9899F8 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000122AB
ImageSize: 0000E000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.0 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: RDPBUS.SYS
OriginalFilename: RDPBUS.SYS
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Microsoft RDP Bus Device driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a9980000 fffff808`a9a0a000 usbhub (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\usbhub.sys\813B20B88a000\usbhub.sys
Image path: \SystemRoot\System32\drivers\usbhub.sys
Image name: usbhub.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 813B20B8 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00085F0F
ImageSize: 0008A000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: usbhub.sys
OriginalFilename: usbhub.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Default Hub Driver for USB
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a9a10000 fffff808`a9a7e000 HdAudio (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\HdAudio.sys\4A11F5B56e000\HdAudio.sys
Image path: \SystemRoot\System32\drivers\HdAudio.sys
Image name: HdAudio.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 4A11F5B5 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00071214
ImageSize: 0006E000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.9 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: HDAudio.sys
OriginalFilename: HDAudio.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: High Definition Audio Function Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a9a80000 fffff808`a9a8f000 ksthunk (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ksthunk.sys\15502221f000\ksthunk.sys
Image path: \SystemRoot\system32\drivers\ksthunk.sys
Image name: ksthunk.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 15502221 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001117A
ImageSize: 0000F000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.0 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ksthunk.sys
OriginalFilename: ksthunk.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Kernel Streaming WOW Thunk Service
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a9a90000 fffff808`a9b42000 nwifi (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\nwifi.sys\E0A20FEBb2000\nwifi.sys
Image path: \SystemRoot\system32\DRIVERS\nwifi.sys
Image name: nwifi.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: E0A20FEB (This is a reproducible build file hash, not a timestamp)
CheckSum: 000B8781
ImageSize: 000B2000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: NWiFi.SYS
OriginalFilename: NWiFi.SYS
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: NativeWiFi Miniport Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a9b50000 fffff808`a9c95000 HTTP (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\HTTP.sys\AAC6DF8E145000\HTTP.sys
Image path: \SystemRoot\system32\drivers\HTTP.sys
Image name: HTTP.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: AAC6DF8E (This is a reproducible build file hash, not a timestamp)
CheckSum: 00141CA0
ImageSize: 00145000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: http.sys
OriginalFilename: http.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: HTTP Protocol Stack
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a9ca0000 fffff808`a9cba000 mpsdrv (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mpsdrv.sys\7D5AF2F01a000\mpsdrv.sys
Image path: \SystemRoot\System32\drivers\mpsdrv.sys
Image name: mpsdrv.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 7D5AF2F0 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001A89B
ImageSize: 0001A000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: mpsdrv.sys
OriginalFilename: mpsdrv.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Microsoft Protection Service Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a9cc0000 fffff808`a9ce5000 bowser (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\bowser.sys\D37F2E3525000\bowser.sys
Image path: \SystemRoot\system32\DRIVERS\bowser.sys
Image name: bowser.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: D37F2E35 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001D2E1
ImageSize: 00025000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: browser.sys
OriginalFilename: browser.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: NT Lan Manager Datagram Receiver Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a9cf0000 fffff808`a9d7f000 mrxsmb (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mrxsmb.sys\1E559E998f000\mrxsmb.sys
Image path: \SystemRoot\system32\DRIVERS\mrxsmb.sys
Image name: mrxsmb.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 1E559E99 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00090FCE
ImageSize: 0008F000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: MRxSmb.sys
OriginalFilename: MRXSMB.Sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Windows NT SMB Minirdr
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a9d80000 fffff808`a9dc5000 mrxsmb20 (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mrxsmb20.sys\2A968ECC45000\mrxsmb20.sys
Image path: \SystemRoot\system32\DRIVERS\mrxsmb20.sys
Image name: mrxsmb20.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 2A968ECC (This is a reproducible build file hash, not a timestamp)
CheckSum: 000457E5
ImageSize: 00045000
File version: 10.0.18362.476
Product version: 10.0.18362.476
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: MRxSmb20.sys
OriginalFilename: MRXSMB20.Sys
ProductVersion: 10.0.18362.476
FileVersion: 10.0.18362.476 (WinBuild.160101.0800)
FileDescription: Longhorn SMB 2.0 Redirector
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a9dd0000 fffff808`a9e04000 idmwfp (deferred)
Image path: \SystemRoot\system32\DRIVERS\idmwfp.sys
Image name: idmwfp.sys
Browse all global symbols functions data
Timestamp: Sat Aug 5 11:37:59 2017 (598583E7)
CheckSum: 0003EE1D
ImageSize: 00034000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff808`a9e10000 fffff808`a9e37000 Ndu (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\Ndu.sys\2372590827000\Ndu.sys
Image path: \SystemRoot\system32\drivers\Ndu.sys
Image name: Ndu.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 23725908 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00021EF3
ImageSize: 00027000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ndu.sys
OriginalFilename: ndu.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Windows Network Data Usage Monitoring Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`a9e50000 fffff808`aa687000 atikmdag (deferred)
Image path: \SystemRoot\system32\DRIVERS\atikmdag.sys
Image name: atikmdag.sys
Browse all global symbols functions data
Timestamp: Fri Mar 4 18:43:48 2011 (4D7108B4)
CheckSum: 007F1C7D
ImageSize: 00837000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff808`aa690000 fffff808`aa6b2000 HDAudBus (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\HDAudBus.sys\AECD295822000\HDAudBus.sys
Image path: \SystemRoot\System32\drivers\HDAudBus.sys
Image name: HDAudBus.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: AECD2958 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000246D6
ImageSize: 00022000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.9 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: hdaudbus.sys
OriginalFilename: hdaudbus.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: High Definition Audio Bus Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`aa6c0000 fffff808`aa727000 portcls (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\portcls.sys\D4F15BF067000\portcls.sys
Image path: \SystemRoot\System32\drivers\portcls.sys
Image name: portcls.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: D4F15BF0 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00069B76
ImageSize: 00067000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.9 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: portcls.sys
OriginalFilename: portcls.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Port Class (Class Driver for Port/Miniport Devices)
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`aa730000 fffff808`aa751000 drmk (deferred)
Image path: \SystemRoot\System32\drivers\drmk.sys
Image name: drmk.sys
Browse all global symbols functions data
Timestamp: ***** Invalid (A3E06FB0)
CheckSum: 00019200
ImageSize: 00021000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff808`aa760000 fffff808`aa7d8000 ks (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ks.sys\1F5FE6FB78000\ks.sys
Image path: \SystemRoot\System32\drivers\ks.sys
Image name: ks.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 1F5FE6FB (This is a reproducible build file hash, not a timestamp)
CheckSum: 0007DCE5
ImageSize: 00078000
File version: 10.0.18362.476
Product version: 10.0.18362.476
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.0 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ks.sys
OriginalFilename: ks.sys
ProductVersion: 10.0.18362.476
FileVersion: 10.0.18362.476 (WinBuild.160101.0800)
FileDescription: Kernel CSA Library
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`aa7e0000 fffff808`aa7f4000 tcpipreg (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\tcpipreg.sys\3451B62914000\tcpipreg.sys
Image path: \SystemRoot\System32\drivers\tcpipreg.sys
Image name: tcpipreg.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 3451B629 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000FBEE
ImageSize: 00014000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 1.0 App
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: tcpipreg.sys
OriginalFilename: tcpipreg.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: TCP/IP Registry Compatibility Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`aa800000 fffff808`aa964000 bthport (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\bthport.sys\A3AC1419164000\bthport.sys
Image path: \SystemRoot\System32\drivers\bthport.sys
Image name: bthport.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: A3AC1419 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0016A300
ImageSize: 00164000
File version: 10.0.18362.449
Product version: 10.0.18362.449
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: bthport.sys
OriginalFilename: bthport.sys
ProductVersion: 10.0.18362.449
FileVersion: 10.0.18362.449 (WinBuild.160101.0800)
FileDescription: Bluetooth Bus Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`aa970000 fffff808`aa9aa000 rfcomm (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\rfcomm.sys\C18658F43a000\rfcomm.sys
Image path: \SystemRoot\System32\drivers\rfcomm.sys
Image name: rfcomm.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: C18658F4 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00033B21
ImageSize: 0003A000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: rfcomm.sys
OriginalFilename: rfcomm.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Bluetooth RFCOMM Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`aa9b0000 fffff808`aa9d2000 BthEnum (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\BthEnum.sys\1D20FC4822000\BthEnum.sys
Image path: \SystemRoot\System32\drivers\BthEnum.sys
Image name: BthEnum.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 1D20FC48 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00022D06
ImageSize: 00022000
File version: 10.0.18362.449
Product version: 10.0.18362.449
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: bthenum.SYS
OriginalFilename: bthenum.SYS
ProductVersion: 10.0.18362.449
FileVersion: 10.0.18362.449 (WinBuild.160101.0800)
FileDescription: Bluetooth Bus Extender
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`aa9e0000 fffff808`aaa06000 bthpan (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\bthpan.sys\20E20C9C26000\bthpan.sys
Image path: \SystemRoot\System32\drivers\bthpan.sys
Image name: bthpan.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 20E20C9C (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002EC52
ImageSize: 00026000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: bthpan.sys
OriginalFilename: bthpan.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Bluetooth Personal Area Networking
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`aaa10000 fffff808`aaa23000 HIDPARSE (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\HIDPARSE.SYS\0D56F93213000\HIDPARSE.SYS
Image path: \SystemRoot\System32\drivers\HIDPARSE.SYS
Image name: HIDPARSE.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 0D56F932 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000C614
ImageSize: 00013000
File version: 10.0.18362.476
Product version: 10.0.18362.476
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: hidparse.sys
OriginalFilename: hidparse.sys
ProductVersion: 10.0.18362.476
FileVersion: 10.0.18362.476 (WinBuild.160101.0800)
FileDescription: Hid Parsing Library
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`aaa30000 fffff808`aab0a000 dxgmms2 (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\dxgmms2.sys\B4AA8F54da000\dxgmms2.sys
Image path: \SystemRoot\System32\drivers\dxgmms2.sys
Image name: dxgmms2.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: B4AA8F54 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000DF485
ImageSize: 000DA000
File version: 10.0.18362.449
Product version: 10.0.18362.449
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: dxgmms2.sys
OriginalFilename: dxgmms2.sys
ProductVersion: 10.0.18362.449
FileVersion: 10.0.18362.449 (WinBuild.160101.0800)
FileDescription: DirectX Graphics MMS
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`aab10000 fffff808`aab24000 mmcss (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mmcss.sys\3EE4136D14000\mmcss.sys
Image path: \SystemRoot\system32\drivers\mmcss.sys
Image name: mmcss.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 3EE4136D (This is a reproducible build file hash, not a timestamp)
CheckSum: 000150FC
ImageSize: 00014000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: mmcss.sys
OriginalFilename: mmcss.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: MMCSS Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`aab30000 fffff808`aab5a000 luafv (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\luafv.sys\08A8E82A2a000\luafv.sys
Image path: \SystemRoot\system32\drivers\luafv.sys
Image name: luafv.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 08A8E82A (This is a reproducible build file hash, not a timestamp)
CheckSum: 00031EFE
ImageSize: 0002A000
File version: 10.0.18362.53
Product version: 10.0.18362.53
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: luafv.sys
OriginalFilename: luafv.sys
ProductVersion: 10.0.18362.53
FileVersion: 10.0.18362.53 (WinBuild.160101.0800)
FileDescription: LUA File Virtualization Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`aab60000 fffff808`aab97000 wcifs (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\wcifs.sys\6C454D3037000\wcifs.sys
Image path: \SystemRoot\system32\drivers\wcifs.sys
Image name: wcifs.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 6C454D30 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00031C1C
ImageSize: 00037000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: wcifs.sys
OriginalFilename: wcifs.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Windows Container Isolation FS Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`aaba0000 fffff808`aac17000 cldflt (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\cldflt.sys\A5A8679B77000\cldflt.sys
Image path: \SystemRoot\system32\drivers\cldflt.sys
Image name: cldflt.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: A5A8679B (This is a reproducible build file hash, not a timestamp)
CheckSum: 000761D2
ImageSize: 00077000
File version: 10.0.18362.535
Product version: 10.0.18362.535
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: cldflt.sys
OriginalFilename: cldflt.sys
ProductVersion: 10.0.18362.535
FileVersion: 10.0.18362.535 (WinBuild.160101.0800)
FileDescription: Cloud Files Mini Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`aac20000 fffff808`aac3a000 storqosflt (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\storqosflt.sys\D77C69C81a000\storqosflt.sys
Image path: \SystemRoot\system32\drivers\storqosflt.sys
Image name: storqosflt.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: D77C69C8 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001B0E5
ImageSize: 0001A000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: storqosflt.sys
OriginalFilename: storqosflt.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Storage QoS Filter
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`aac40000 fffff808`aac50000 MSKSSRV (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\MSKSSRV.sys\BFBB6D7A10000\MSKSSRV.sys
Image path: \SystemRoot\System32\drivers\MSKSSRV.sys
Image name: MSKSSRV.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: BFBB6D7A (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000E94C
ImageSize: 00010000
File version: 10.0.18362.476
Product version: 10.0.18362.476
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.9 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: mskssrv.sys
OriginalFilename: mskssrv.sys
ProductVersion: 10.0.18362.476
FileVersion: 10.0.18362.476 (WinBuild.160101.0800)
FileDescription: MS KS Server
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`aac60000 fffff808`aac78000 lltdio (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\lltdio.sys\707E930818000\lltdio.sys
Image path: \SystemRoot\system32\drivers\lltdio.sys
Image name: lltdio.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 707E9308 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001E9C8
ImageSize: 00018000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: LLTDIO.SYS
OriginalFilename: LLTDIO.SYS
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Link-Layer Topology Mapper I/O Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`aac80000 fffff808`aac99000 mslldp (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mslldp.sys\15C3108A19000\mslldp.sys
Image path: \SystemRoot\system32\drivers\mslldp.sys
Image name: mslldp.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 15C3108A (This is a reproducible build file hash, not a timestamp)
CheckSum: 00016785
ImageSize: 00019000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: MSLLDP.SYS
OriginalFilename: MSLLDP.SYS
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Microsoft Link-Layer Discovery Protocol Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`aaca0000 fffff808`aacbb000 rspndr (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\rspndr.sys\ED98D1EE1b000\rspndr.sys
Image path: \SystemRoot\system32\drivers\rspndr.sys
Image name: rspndr.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: ED98D1EE (This is a reproducible build file hash, not a timestamp)
CheckSum: 00024425
ImageSize: 0001B000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: RSPNDR.SYS
OriginalFilename: RSPNDR.SYS
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Link-Layer Topology Responder Driver for NDIS 6
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`aacc0000 fffff808`aacdd000 wanarp (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\wanarp.sys\1766D61C1d000\wanarp.sys
Image path: \SystemRoot\System32\DRIVERS\wanarp.sys
Image name: wanarp.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 1766D61C (This is a reproducible build file hash, not a timestamp)
CheckSum: 000214CB
ImageSize: 0001D000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: WANARP.SYS
OriginalFilename: WANARP.SYS
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: MS Remote Access and Routing ARP Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`aacf0000 fffff808`aacfe000 dump_diskdump (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\diskdump.sys\5CC3D020e000\diskdump.sys
Image path: \SystemRoot\System32\Drivers\dump_diskdump.sys
Image name: dump_diskdump.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 5CC3D020 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001336E
ImageSize: 0000E000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: diskdump.sys
OriginalFilename: diskdump.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Crash Dump Disk Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`aad30000 fffff808`aad5e000 dump_storahci (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\storahci.sys\381E77BB2e000\storahci.sys
Image path: \SystemRoot\System32\drivers\dump_storahci.sys
Image name: dump_storahci.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 381E77BB (This is a reproducible build file hash, not a timestamp)
CheckSum: 0003052D
ImageSize: 0002E000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: storahci.sys
OriginalFilename: storahci.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: MS AHCI Storport Miniport Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`aad90000 fffff808`ab215000 RTKVHD64 (deferred)
Image path: \SystemRoot\system32\drivers\RTKVHD64.sys
Image name: RTKVHD64.sys
Browse all global symbols functions data
Timestamp: Tue Jun 30 16:33:17 2015 (55929A9D)
CheckSum: 00454411
ImageSize: 00485000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff808`ab220000 fffff808`ab253000 usbccgp (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\usbccgp.sys\5D2AF1D133000\usbccgp.sys
Image path: \SystemRoot\System32\drivers\usbccgp.sys
Image name: usbccgp.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 5D2AF1D1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0003BC19
ImageSize: 00033000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: USBCCGP.SYS
OriginalFilename: USBCCGP.SYS
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: USB Common Class Generic Parent Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`ab270000 fffff808`ab2bf000 usbvideo (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\usbvideo.sys\2C554DD84f000\usbvideo.sys
Image path: \SystemRoot\System32\Drivers\usbvideo.sys
Image name: usbvideo.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 2C554DD8 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000528FE
ImageSize: 0004F000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.0 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: usbvideo.sys
OriginalFilename: usbvideo.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: USB Video Class Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`ab2c0000 fffff808`ab2df000 BTHUSB (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\BTHUSB.sys\D90BF1BF1f000\BTHUSB.sys
Image path: \SystemRoot\System32\drivers\BTHUSB.sys
Image name: BTHUSB.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: D90BF1BF (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001B3F5
ImageSize: 0001F000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: bthusb.sys
OriginalFilename: bthusb.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Bluetooth Miniport Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`ab2e0000 fffff808`ab2fd000 dump_dumpfve (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\dumpfve.sys\4BEDF38A1d000\dumpfve.sys
Image path: \SystemRoot\System32\Drivers\dump_dumpfve.sys
Image name: dump_dumpfve.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 4BEDF38A (This is a reproducible build file hash, not a timestamp)
CheckSum: 00022E00
ImageSize: 0001D000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: dumpfve.sys
OriginalFilename: dumpfve.sys
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: Bitlocker Drive Encryption Crashdump Filter
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`ab300000 fffff808`ab371000 dxgmms1 (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\dxgmms1.sys\382F2E2D71000\dxgmms1.sys
Image path: \SystemRoot\System32\drivers\dxgmms1.sys
Image name: dxgmms1.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 382F2E2D (This is a reproducible build file hash, not a timestamp)
CheckSum: 00078CBF
ImageSize: 00071000
File version: 10.0.18362.449
Product version: 10.0.18362.449
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: dxgmms1.sys
OriginalFilename: dxgmms1.sys
ProductVersion: 10.0.18362.449
FileVersion: 10.0.18362.449 (WinBuild.160101.0800)
FileDescription: DirectX Graphics MMS
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`ab380000 fffff808`ab398000 monitor (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\monitor.sys\93F54FB518000\monitor.sys
Image path: \SystemRoot\System32\drivers\monitor.sys
Image name: monitor.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 93F54FB5 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001E3D7
ImageSize: 00018000
File version: 10.0.18362.476
Product version: 10.0.18362.476
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: monitor.sys
OriginalFilename: monitor.sys
ProductVersion: 10.0.18362.476
FileVersion: 10.0.18362.476 (WinBuild.160101.0800)
FileDescription: Monitor Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`ab3a0000 fffff808`ab3b8000 ndisuio (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ndisuio.sys\38FD20EE18000\ndisuio.sys
Image path: \SystemRoot\system32\drivers\ndisuio.sys
Image name: ndisuio.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 38FD20EE (This is a reproducible build file hash, not a timestamp)
CheckSum: 00014B3C
ImageSize: 00018000
File version: 10.0.18362.592
Product version: 10.0.18362.592
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: NDISUIO.SYS
OriginalFilename: NDISUIO.SYS
ProductVersion: 10.0.18362.592
FileVersion: 10.0.18362.592 (WinBuild.160101.0800)
FileDescription: NDIS User mode I/O driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff808`ab3c0000 fffff808`ab3f8000 winquic (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\winquic.sys\D60F786338000\winquic.sys
Image path: \SystemRoot\system32\drivers\winquic.sys
Image name: winquic.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: D60F7863 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0003DA14
ImageSize: 00038000
File version: 10.0.18362.145
Product version: 10.0.18362.145
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: winquic.sys
OriginalFilename: winquic.sys
ProductVersion: 10.0.18362.145
FileVersion: 10.0.18362.145 (WinBuild.160101.0800)
FileDescription: Windows QUIC Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
Unloaded modules:
fffff808`a88c0000 fffff808`a88cf000 dump_storpor
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000F000
fffff808`a8900000 fffff808`a892f000 dump_storahc
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0002F000
fffff808`a8950000 fffff808`a896e000 dump_dumpfve
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0001E000
fffff808`ab260000 fffff808`ab26c000 WdmCompanion
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000C000
fffff808`a8320000 fffff808`a833e000 dam.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0001E000
fffff800`1db80000 fffff800`1db91000 WdBoot.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00011000
fffff800`1eb60000 fffff800`1eb70000 hwpolicy.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00010000
drive.google.com
Yardımlarınızı bekliyorum. Yardım eden herkese şimdiden teşekkür ederim.
