Arch or Not
Hectopat
Daha fazla
- Cinsiyet
- Erkek
- Meslek
- Öğrenci, Beginner Web Programmer
Merhaba;
Sistemim şu şekilde;
@Bora Dere @Enes3078
Normalde kendim analiz ederdim ama maalesef sistemim ve internetim sayesin de çok yavaş debug ediyor.
RAM'den kaynaklı olarak expoler.exe çökmüş gibi gözüküyor.
Ayrıca hardware modülünün ayrıntıları şöyle:
Sistemim şu şekilde;
- 4 GB DDR3 RAM.
- i3-5005U İşlemci.
- Intel HD 5500 (onboard).
- Windows 10.
@Bora Dere @Enes3078
Normalde kendim analiz ederdim ama maalesef sistemim ve internetim sayesin de çok yavaş debug ediyor.
Kod:
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
MEMORY_MANAGEMENT (1a)
# Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 0000000000061941, The subtype of the bugcheck.
Arg2: 00007ff8a307a080
Arg3: 000000000000000d
Arg4: ffffde05d3cffac0
Debugging Details:
------------------
*** WARNING: Unable to verify checksum for win32k.sys
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 9453
Key : Analysis.DebugAnalysisManager
Value: Create
Key : Analysis.Elapsed.mSec
Value: 111718
Key : Analysis.Init.CPU.mSec
Value: 1234
Key : Analysis.Init.Elapsed.mSec
Value: 9908
Key : Analysis.Memory.CommitPeak.Mb
Value: 74
Key : WER.OS.Branch
Value: vb_release
Key : WER.OS.Timestamp
Value: 2019-12-06T14:06:00Z
Key : WER.OS.Version
Value: 10.0.19041.1
BUGCHECK_CODE: 1a
BUGCHECK_P1: 61941
BUGCHECK_P2: 7ff8a307a080
BUGCHECK_P3: d
BUGCHECK_P4: ffffde05d3cffac0
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: explorer.exe
STACK_TEXT:
ffffde05`d3cff918 fffff800`2d6189ca : 00000000`0000001a 00000000`00061941 00007ff8`a307a080 00000000`0000000d : nt!KeBugCheckEx
ffffde05`d3cff920 fffff800`2d603d5e : ffffdf8c`00000000 ffffdf8c`00000001 00000000`00000009 ffffde05`d3cffb40 : nt!MmAccessFault+0x20c46a
ffffde05`d3cffac0 00007ff8`a2f0c1d5 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x35e
00000000`04f7ede0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ff8`a2f0c1d5
MODULE_NAME: hardware
IMAGE_NAME: hardware_ram
STACK_COMMAND: .thread ; .cxr ; kb
FAILURE_BUCKET_ID: 0x1a_61941_PAGE_TABLE_RESERVED_BITS_SET_IMAGE_hardware_ram
OS_VERSION: 10.0.19041.1
BUILDLAB_STR: vb_release
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {c6e5c6cf-692e-7852-5dc5-b74944540fc0}
Followup: MachineOwnerAyrıca hardware modülünün ayrıntıları şöyle:
Kod:
0: kd> lmvm hardware
Browse full module list
start end module name
0: kd> lmDv
start end module name
ffffbb57`64c00000 ffffbb57`64ed9000 win32kbase (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\win32kbase.sys\6453F61A2d9000\win32kbase.sys
Image path: \SystemRoot\System32\win32kbase.sys
Image name: win32kbase.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 6453F61A (This is a reproducible build file hash, not a timestamp)
CheckSum: 002CACDE
ImageSize: 002D9000
File version: 10.0.19041.868
Product version: 10.0.19041.868
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: win32kbase.sys
OriginalFilename: win32kbase.sys
ProductVersion: 10.0.19041.868
FileVersion: 10.0.19041.868 (WinBuild.160101.0800)
FileDescription: Base Win32k Kernel Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
ffffbb57`64ee0000 ffffbb57`64f7a000 win32k C (pdb symbols) C:\ProgramData\Dbg\sym\win32k.pdb\ED706A38659240A066E6FB19B994BAAA1\win32k.pdb
Loaded symbol image file: win32k.sys
Mapped memory image file: C:\Windows\system32\win32k.sys
Image path: \SystemRoot\System32\win32k.sys
Image name: win32k.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 00000000 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00000000
ImageSize: 0009A000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: win32k.sys
OriginalFilename: win32k.sys
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: Multi-User Win32 Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
ffffbb57`652b0000 ffffbb57`65666000 win32kfull (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\win32kfull.sys\C38B91E23b6000\win32kfull.sys
Image path: \SystemRoot\System32\win32kfull.sys
Image name: win32kfull.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: C38B91E2 (This is a reproducible build file hash, not a timestamp)
CheckSum: 003B30D0
ImageSize: 003B6000
File version: 10.0.19041.870
Product version: 10.0.19041.870
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: win32kfull.sys
OriginalFilename: win32kfull.sys
ProductVersion: 10.0.19041.870
FileVersion: 10.0.19041.870 (WinBuild.160101.0800)
FileDescription: Full/Desktop Win32k Kernel Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
ffffbb57`65670000 ffffbb57`656ba000 cdd (deferred)
Mapped memory image file: C:\Windows\system32\cdd.dll
Image path: \SystemRoot\System32\cdd.dll
Image name: cdd.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 00000000 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00000000
ImageSize: 0004A000
File version: 10.0.19041.868
Product version: 10.0.19041.868
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.4 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: cdd.dll
OriginalFilename: cdd.dll
ProductVersion: 10.0.19041.868
FileVersion: 10.0.19041.868 (WinBuild.160101.0800)
FileDescription: Canonical Display Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`28cd0000 fffff800`2906d000 mcupdate_GenuineIntel (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mcupdate_GenuineIntel.dll\492FB48D39d000\mcupdate_GenuineIntel.dll
Image path: \SystemRoot\system32\mcupdate_GenuineIntel.dll
Image name: mcupdate_GenuineIntel.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 492FB48D (This is a reproducible build file hash, not a timestamp)
CheckSum: 003968B3
ImageSize: 0039D000
File version: 10.0.19041.870
Product version: 10.0.19041.870
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.A Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: mcupdate.dll
OriginalFilename: mcupdate_GenuineIntel.dll
ProductVersion: 10.0.19041.870
FileVersion: 10.0.19041.870 (WinBuild.160101.0800)
FileDescription: Intel Microcode Update Library
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`29070000 fffff800`29076000 hal (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\halaacpi.dll\1A7BE8E96000\halaacpi.dll
Image path: hal.dll
Image name: hal.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 1A7BE8E9 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000C0DD
ImageSize: 00006000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: hal.dll
OriginalFilename: hal.dll
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: Hardware Abstraction Layer DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`29080000 fffff800`2908b000 kd (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\kd.dll\FE185FA8b000\kd.dll
Image path: \SystemRoot\system32\kd.dll
Image name: kd.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: FE185FA8 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00004EF6
ImageSize: 0000B000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.A Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: kd.dll
OriginalFilename: kd.dll
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Local Kernel Debugger
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`29090000 fffff800`290b7000 tm (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\tm.sys\87A66D3027000\tm.sys
Image path: \SystemRoot\System32\drivers\tm.sys
Image name: tm.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 87A66D30 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000311ED
ImageSize: 00027000
File version: 10.0.19041.1140
Product version: 10.0.19041.1140
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: tm.sys
OriginalFilename: tm.sys
ProductVersion: 10.0.19041.1140
FileVersion: 10.0.19041.1140 (WinBuild.160101.0800)
FileDescription: Kernel Transaction Manager Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`290c0000 fffff800`290cb000 BOOTVID (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\BOOTVID.dll\D13EE5B6b000\BOOTVID.dll
Image path: \SystemRoot\system32\BOOTVID.dll
Image name: BOOTVID.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: D13EE5B6 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00013A3C
ImageSize: 0000B000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.4 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: bootvid.dll
OriginalFilename: bootvid.dll
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: VGA Boot Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`29200000 fffff800`29225000 bowser (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\bowser.sys\CC8E593D25000\bowser.sys
Image path: \SystemRoot\system32\DRIVERS\bowser.sys
Image name: bowser.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: CC8E593D (This is a reproducible build file hash, not a timestamp)
CheckSum: 000240A2
ImageSize: 00025000
File version: 10.0.19041.870
Product version: 10.0.19041.870
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: browser.sys
OriginalFilename: browser.sys
ProductVersion: 10.0.19041.870
FileVersion: 10.0.19041.870 (WinBuild.160101.0800)
FileDescription: NT Lan Manager Datagram Receiver Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`29230000 fffff800`2924a000 mpsdrv (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mpsdrv.sys\0EBF3D281a000\mpsdrv.sys
Image path: \SystemRoot\System32\drivers\mpsdrv.sys
Image name: mpsdrv.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 0EBF3D28 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00019727
ImageSize: 0001A000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: mpsdrv.sys
OriginalFilename: mpsdrv.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Microsoft Protection Service Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`29250000 fffff800`292e3000 mrxsmb (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mrxsmb.sys\6E817E0393000\mrxsmb.sys
Image path: \SystemRoot\system32\DRIVERS\mrxsmb.sys
Image name: mrxsmb.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 6E817E03 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0008CB9C
ImageSize: 00093000
File version: 10.0.19041.870
Product version: 10.0.19041.870
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: MRxSmb.sys
OriginalFilename: MRXSMB.Sys
ProductVersion: 10.0.19041.870
FileVersion: 10.0.19041.870 (WinBuild.160101.0800)
FileDescription: Windows NT SMB Minirdr
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`292f0000 fffff800`29335000 mrxsmb20 (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mrxsmb20.sys\C5AEA72C45000\mrxsmb20.sys
Image path: \SystemRoot\system32\DRIVERS\mrxsmb20.sys
Image name: mrxsmb20.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: C5AEA72C (This is a reproducible build file hash, not a timestamp)
CheckSum: 00042DDF
ImageSize: 00045000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: MRxSmb20.sys
OriginalFilename: MRXSMB20.Sys
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: Longhorn SMB 2.0 Redirector
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`29340000 fffff800`29375000 idmwfp (deferred)
Image path: \SystemRoot\system32\DRIVERS\idmwfp.sys
Image name: idmwfp.sys
Browse all global symbols functions data
Timestamp: Wed Dec 19 17:52:11 2018 (5C1A5B1B)
CheckSum: 00045840
ImageSize: 00035000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`29380000 fffff800`293d3000 srvnet (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\srvnet.sys\510E4F7F53000\srvnet.sys
Image path: \SystemRoot\System32\DRIVERS\srvnet.sys
Image name: srvnet.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 510E4F7F (This is a reproducible build file hash, not a timestamp)
CheckSum: 00050CAA
ImageSize: 00053000
File version: 10.0.19041.610
Product version: 10.0.19041.610
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: SRVNET.SYS
OriginalFilename: SRVNET.SYS
ProductVersion: 10.0.19041.610
FileVersion: 10.0.19041.610 (WinBuild.160101.0800)
FileDescription: Server Network driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`293e0000 fffff800`293f4000 mmcss (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mmcss.sys\07117A5A14000\mmcss.sys
Image path: \SystemRoot\system32\drivers\mmcss.sys
Image name: mmcss.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 07117A5A (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001B761
ImageSize: 00014000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: mmcss.sys
OriginalFilename: mmcss.sys
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: MMCSS Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`29400000 fffff800`29452000 mrxsmb10 (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mrxsmb10.sys\ABA1F2CF52000\mrxsmb10.sys
Image path: \SystemRoot\system32\DRIVERS\mrxsmb10.sys
Image name: mrxsmb10.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: ABA1F2CF (This is a reproducible build file hash, not a timestamp)
CheckSum: 0005A30C
ImageSize: 00052000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: MRxSmb0.sys
OriginalFilename: MRXSMB0.Sys
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: Longhorn SMB Downlevel SubRdr
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`29460000 fffff800`29487000 Ndu (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\Ndu.sys\ABC6C89427000\Ndu.sys
Image path: \SystemRoot\system32\drivers\Ndu.sys
Image name: Ndu.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: ABC6C894 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000213E1
ImageSize: 00027000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ndu.sys
OriginalFilename: ndu.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Windows Network Data Usage Monitoring Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`29490000 fffff800`29566000 peauth (deferred)
Image path: \SystemRoot\system32\drivers\peauth.sys
Image name: peauth.sys
Browse all global symbols functions data
Timestamp: Thu Jun 30 23:25:54 1977 (0E1978D2)
CheckSum: 000CAE00
ImageSize: 000D6000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`29570000 fffff800`29585000 tcpipreg (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\tcpipreg.sys\0651E2F315000\tcpipreg.sys
Image path: \SystemRoot\System32\drivers\tcpipreg.sys
Image name: tcpipreg.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 0651E2F3 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001BF67
ImageSize: 00015000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 1.0 App
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: tcpipreg.sys
OriginalFilename: tcpipreg.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: TCP/IP Registry Compatibility Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`29590000 fffff800`29657000 srv2 (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\srv2.sys\AFFE119Cc7000\srv2.sys
Image path: \SystemRoot\System32\DRIVERS\srv2.sys
Image name: srv2.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: AFFE119C (This is a reproducible build file hash, not a timestamp)
CheckSum: 000CED4A
ImageSize: 000C7000
File version: 10.0.19041.1140
Product version: 10.0.19041.1140
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: SRV2.SYS
OriginalFilename: SRV2.SYS
ProductVersion: 10.0.19041.1140
FileVersion: 10.0.19041.1140 (WinBuild.160101.0800)
FileDescription: Smb 2.0 Server driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`29660000 fffff800`2967c000 rassstp (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\rassstp.sys\3C5B7B7A1c000\rassstp.sys
Image path: \SystemRoot\System32\drivers\rassstp.sys
Image name: rassstp.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 3C5B7B7A (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001D4E6
ImageSize: 0001C000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: rassstp.sys
OriginalFilename: rassstp.sys
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: RAS SSTP Miniport Call Manager
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`29680000 fffff800`2969d000 NDProxy (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\NDProxy.sys\77FE11981d000\NDProxy.sys
Image path: \SystemRoot\System32\DRIVERS\NDProxy.sys
Image name: NDProxy.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 77FE1198 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00019B6D
ImageSize: 0001D000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ndproxy.sys
OriginalFilename: ndproxy.sys
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: NDIS Proxy
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`296a0000 fffff800`296b3000 vwifimp (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\vwifimp.sys\B98A06FC13000\vwifimp.sys
Image path: \SystemRoot\System32\drivers\vwifimp.sys
Image name: vwifimp.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: B98A06FC (This is a reproducible build file hash, not a timestamp)
CheckSum: 00018104
ImageSize: 00013000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: vwifimp.sys
OriginalFilename: vwifimp.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Virtual WiFi Miniport Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`296c0000 fffff800`296e8000 AgileVpn (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\AgileVpn.sys\68BE7A9F28000\AgileVpn.sys
Image path: \SystemRoot\System32\drivers\AgileVpn.sys
Image name: AgileVpn.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 68BE7A9F (This is a reproducible build file hash, not a timestamp)
CheckSum: 000221F0
ImageSize: 00028000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: agilevpn.sys
OriginalFilename: agilevpn.sys
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: RAS Agile Vpn Miniport Call Manager
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`296f0000 fffff800`29711000 rasl2tp (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\rasl2tp.sys\10E99A7521000\rasl2tp.sys
Image path: \SystemRoot\System32\drivers\rasl2tp.sys
Image name: rasl2tp.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 10E99A75 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000256A7
ImageSize: 00021000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: rasl2tp.sys
OriginalFilename: rasl2tp.sys
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: RAS L2TP mini-port/call-manager driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`29720000 fffff800`29741000 raspptp (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\raspptp.sys\DBF0767021000\raspptp.sys
Image path: \SystemRoot\System32\drivers\raspptp.sys
Image name: raspptp.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: DBF07670 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00026FC3
ImageSize: 00021000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: RASPPTP.SYS
OriginalFilename: RASPPTP.SYS
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: Peer-to-Peer Tunneling Protocol
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`29750000 fffff800`2976c000 raspppoe (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\raspppoe.sys\22793BEF1c000\raspppoe.sys
Image path: \SystemRoot\System32\drivers\raspppoe.sys
Image name: raspppoe.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 22793BEF (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001DF74
ImageSize: 0001C000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: raspppoe.sys
OriginalFilename: raspppoe.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: RAS PPPoE mini-port/call-manager driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`29770000 fffff800`2977f000 ndistapi (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ndistapi.sys\E2027389f000\ndistapi.sys
Image path: \SystemRoot\System32\DRIVERS\ndistapi.sys
Image name: ndistapi.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: E2027389 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000121D0
ImageSize: 0000F000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: NDISTAPI.SYS
OriginalFilename: NDISTAPI.SYS
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: NDIS 3.0 connection wrapper driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`29780000 fffff800`297ba000 ndiswan (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ndiswan.sys\88F100F43a000\ndiswan.sys
Image path: \SystemRoot\System32\drivers\ndiswan.sys
Image name: ndiswan.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 88F100F4 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0003FFCA
ImageSize: 0003A000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: NDISWAN.SYS
OriginalFilename: NDISWAN.SYS
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: MS PPP Framing Driver (Strong Encryption)
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`297c0000 fffff800`297d6000 WdNisDrv (deferred)
Image path: \SystemRoot\system32\drivers\wd\WdNisDrv.sys
Image name: WdNisDrv.sys
Browse all global symbols functions data
Timestamp: ***** Invalid (EB34A322)
CheckSum: 0001B877
ImageSize: 00016000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`29850000 fffff800`299d5000 HTTP (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\HTTP.sys\71C4A0F5185000\HTTP.sys
Image path: \SystemRoot\system32\drivers\HTTP.sys
Image name: HTTP.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 71C4A0F5 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0018C130
ImageSize: 00185000
File version: 10.0.19041.870
Product version: 10.0.19041.870
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: http.sys
OriginalFilename: http.sys
ProductVersion: 10.0.19041.870
FileVersion: 10.0.19041.870 (WinBuild.160101.0800)
FileDescription: HTTP Protocol Stack
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`299e0000 fffff800`299f3000 condrv (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\condrv.sys\1E81BEAD13000\condrv.sys
Image path: \SystemRoot\System32\drivers\condrv.sys
Image name: condrv.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 1E81BEAD (This is a reproducible build file hash, not a timestamp)
CheckSum: 00014E9F
ImageSize: 00013000
File version: 10.0.19041.870
Product version: 10.0.19041.870
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: condrv.sys
OriginalFilename: condrv.sys
ProductVersion: 10.0.19041.870
FileVersion: 10.0.19041.870 (WinBuild.160101.0800)
FileDescription: Console Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2c350000 fffff800`2c415000 tesrsdt (deferred)
Image path: \??\C:\Windows\system32\drivers\tesrsdt.sys
Image name: tesrsdt.sys
Browse all global symbols functions data
Timestamp: Tue Nov 5 14:21:00 2019 (5DC15B1C)
CheckSum: 000CF7ED
ImageSize: 000C5000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`2c420000 fffff800`2c503000 aow_drv_x64_ev (deferred)
Image path: \??\C:\Program Files\TxGameAssistant\UI\3.21.2051.100\aow_drv_x64_ev.sys
Image name: aow_drv_x64_ev.sys
Browse all global symbols functions data
Timestamp: Tue Dec 29 09:38:42 2020 (5FEACEF2)
CheckSum: 000EE160
ImageSize: 000E3000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`2d200000 fffff800`2e246000 nt (pdb symbols) C:\ProgramData\Dbg\sym\ntkrnlmp.pdb\F292B48169085BABDCB47A97421322391\ntkrnlmp.pdb
Loaded symbol image file: ntkrnlmp.exe
Mapped memory image file: C:\ProgramData\Dbg\sym\ntoskrnl.exe\DB4E41031046000\ntoskrnl.exe
Image path: ntkrnlmp.exe
Image name: ntkrnlmp.exe
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: DB4E4103 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00A62B56
ImageSize: 01046000
File version: 10.0.19041.868
Product version: 10.0.19041.868
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 1.0 App
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ntkrnlmp.exe
OriginalFilename: ntkrnlmp.exe
ProductVersion: 10.0.19041.868
FileVersion: 10.0.19041.868 (WinBuild.160101.0800)
FileDescription: NT Kernel & System
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2e600000 fffff800`2e669000 CLFS (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\CLFS.SYS\161C9B4169000\CLFS.SYS
Image path: \SystemRoot\System32\drivers\CLFS.SYS
Image name: CLFS.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 161C9B41 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00065F5E
ImageSize: 00069000
File version: 10.0.19041.870
Product version: 10.0.19041.870
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: clfs.sys
OriginalFilename: Clfs.Sys
ProductVersion: 10.0.19041.870
FileVersion: 10.0.19041.870 (WinBuild.160101.0800)
FileDescription: Common Log File System Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2e670000 fffff800`2e68a000 PSHED (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\PSHED.dll\4C55DC991a000\PSHED.dll
Image path: \SystemRoot\system32\PSHED.dll
Image name: PSHED.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 4C55DC99 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000201A9
ImageSize: 0001A000
File version: 10.0.19041.208
Product version: 10.0.19041.208
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: pshed.dll
OriginalFilename: pshed.dll
ProductVersion: 10.0.19041.208
FileVersion: 10.0.19041.208 (WinBuild.160101.0800)
FileDescription: Platform Specific Hardware Error Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2e690000 fffff800`2e7a3000 clipsp (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\clipsp.sys\5FB35784113000\clipsp.sys
Image path: \SystemRoot\System32\drivers\clipsp.sys
Image name: clipsp.sys
Browse all global symbols functions data
Timestamp: Tue Nov 17 07:54:28 2020 (5FB35784)
CheckSum: 0010BBDF
ImageSize: 00113000
File version: 10.0.19041.662
Product version: 10.0.19041.662
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: clipsp.dll
OriginalFilename: clipsp.dll
ProductVersion: 10.0.19041.662
FileVersion: 10.0.19041.662 (WinBuild.160101.0800)
FileDescription: CLIP Service
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2e7b0000 fffff800`2e81f000 FLTMGR (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\FLTMGR.SYS\02839B666f000\FLTMGR.SYS
Image path: \SystemRoot\System32\drivers\FLTMGR.SYS
Image name: FLTMGR.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 02839B66 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00072E12
ImageSize: 0006F000
File version: 10.0.19041.264
Product version: 10.0.19041.264
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: fltMgr.sys
OriginalFilename: fltMgr.sys
ProductVersion: 10.0.19041.264
FileVersion: 10.0.19041.264 (WinBuild.160101.0800)
FileDescription: Microsoft Filesystem Filter Manager
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2e820000 fffff800`2e849000 ksecdd (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ksecdd.sys\5F6E711429000\ksecdd.sys
Image path: \SystemRoot\System32\drivers\ksecdd.sys
Image name: ksecdd.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 5F6E7114 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002B32F
ImageSize: 00029000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ksecdd.sys
OriginalFilename: ksecdd.sys
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: Kernel Security Support Provider Interface
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2e850000 fffff800`2e8b2000 msrpc (deferred)
Image path: \SystemRoot\System32\drivers\msrpc.sys
Image name: msrpc.sys
Browse all global symbols functions data
Timestamp: unavailable (00000000)
CheckSum: 00000000
ImageSize: 00062000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`2e8c0000 fffff800`2e8ce000 cmimcext (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\cmimcext.sys\633C2FE0e000\cmimcext.sys
Image path: \SystemRoot\System32\drivers\cmimcext.sys
Image name: cmimcext.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 633C2FE0 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000BBEA
ImageSize: 0000E000
File version: 10.0.19041.870
Product version: 10.0.19041.870
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: cmimcext.sys
OriginalFilename: cmimcext.sys
ProductVersion: 10.0.19041.870
FileVersion: 10.0.19041.870 (WinBuild.160101.0800)
FileDescription: Kernel Configuration Manager Initial Configuration Extension Host Export Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2e8d0000 fffff800`2e8e1000 werkernel (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\werkernel.sys\1BD4610F11000\werkernel.sys
Image path: \SystemRoot\System32\drivers\werkernel.sys
Image name: werkernel.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 1BD4610F (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000F1D5
ImageSize: 00011000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: werkernel
OriginalFilename: werkernel.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Windows Error Reporting Kernel Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2e8f0000 fffff800`2e8fc000 ntosext (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ntosext.sys\71DD3C9Fc000\ntosext.sys
Image path: \SystemRoot\System32\drivers\ntosext.sys
Image name: ntosext.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 71DD3C9F (This is a reproducible build file hash, not a timestamp)
CheckSum: 00009677
ImageSize: 0000C000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ntosext.sys
OriginalFilename: ntosext.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: NTOS extension host driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2e900000 fffff800`2e9e3000 CI (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\CI.dll\CD35337Ee3000\CI.dll
Image path: \SystemRoot\system32\CI.dll
Image name: CI.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: CD35337E (This is a reproducible build file hash, not a timestamp)
CheckSum: 000E62DF
ImageSize: 000E3000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ci.dll
OriginalFilename: ci.dll
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: Code Integrity Module
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2e9f0000 fffff800`2eaa7000 cng (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\cng.sys\28B59E22b7000\cng.sys
Image path: \SystemRoot\System32\drivers\cng.sys
Image name: cng.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 28B59E22 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000B4B87
ImageSize: 000B7000
File version: 10.0.19041.870
Product version: 10.0.19041.870
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: cng.sys
OriginalFilename: cng.sys
ProductVersion: 10.0.19041.870
FileVersion: 10.0.19041.870 (WinBuild.160101.0800)
FileDescription: Kernel Cryptography, Next Generation
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2eab0000 fffff800`2eb81000 Wdf01000 (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\Wdf01000.sys\A9A9D36Ed1000\Wdf01000.sys
Image path: \SystemRoot\system32\drivers\Wdf01000.sys
Image name: Wdf01000.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: A9A9D36E (This is a reproducible build file hash, not a timestamp)
CheckSum: 000D3980
ImageSize: 000D1000
File version: 1.31.19041.423
Product version: 1.31.19041.423
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: wdf01000.sys
OriginalFilename: wdf01000.sys
ProductVersion: 1.31.19041.423
FileVersion: 1.31.19041.423 (WinBuild.160101.0800)
FileDescription: Kernel Mode Driver Framework Runtime
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2eb90000 fffff800`2eba3000 WDFLDR (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\WDFLDR.SYS\977C0BBB13000\WDFLDR.SYS
Image path: \SystemRoot\system32\drivers\WDFLDR.SYS
Image name: WDFLDR.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 977C0BBB (This is a reproducible build file hash, not a timestamp)
CheckSum: 00013DC3
ImageSize: 00013000
File version: 1.31.19041.423
Product version: 1.31.19041.423
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: wdfldr.sys
OriginalFilename: wdfldr.sys
ProductVersion: 1.31.19041.423
FileVersion: 1.31.19041.423 (WinBuild.160101.0800)
FileDescription: Kernel Mode Driver Framework Loader
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2ebb0000 fffff800`2ebbf000 SleepStudyHelper (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\SleepStudyHelper.sys\664F6ECBf000\SleepStudyHelper.sys
Image path: \SystemRoot\system32\drivers\SleepStudyHelper.sys
Image name: SleepStudyHelper.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 664F6ECB (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000FC58
ImageSize: 0000F000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: SleepStudyHelper.sys
OriginalFilename: SleepStudyHelper.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Sleep Study Helper
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2ebc0000 fffff800`2ebd1000 WppRecorder (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\WppRecorder.sys\15060D0011000\WppRecorder.sys
Image path: \SystemRoot\system32\drivers\WppRecorder.sys
Image name: WppRecorder.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 15060D00 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001415E
ImageSize: 00011000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: WppRecorder.sys
OriginalFilename: WppRecorder.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: WPP Trace Recorder
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2ebe0000 fffff800`2ec06000 acpiex (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\acpiex.sys\C8D60B4426000\acpiex.sys
Image path: \SystemRoot\System32\Drivers\acpiex.sys
Image name: acpiex.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: C8D60B44 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000302D2
ImageSize: 00026000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: acpiex.sys
OriginalFilename: acpiex.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: ACPIEx Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2ec10000 fffff800`2ec2a000 SgrmAgent (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\SgrmAgent.sys\A64747741a000\SgrmAgent.sys
Image path: \SystemRoot\system32\drivers\SgrmAgent.sys
Image name: SgrmAgent.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: A6474774 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001E4FC
ImageSize: 0001A000
File version: 10.0.19041.208
Product version: 10.0.19041.208
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.0 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: SgrmAgent
OriginalFilename: SgrmAgent.sys
ProductVersion: 10.0.19041.208
FileVersion: 10.0.19041.208 (WinBuild.160101.0800)
FileDescription: System Guard Runtime Monitor Agent Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2ec30000 fffff800`2ecfc000 ACPI (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ACPI.sys\2D5A8B5Dcc000\ACPI.sys
Image path: \SystemRoot\System32\drivers\ACPI.sys
Image name: ACPI.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 2D5A8B5D (This is a reproducible build file hash, not a timestamp)
CheckSum: 000D341C
ImageSize: 000CC000
File version: 10.0.19041.488
Product version: 10.0.19041.488
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ACPI.sys
OriginalFilename: ACPI.sys
ProductVersion: 10.0.19041.488
FileVersion: 10.0.19041.488 (WinBuild.160101.0800)
FileDescription: ACPI Driver for NT
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2ed00000 fffff800`2ed0c000 WMILIB (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\WMILIB.SYS\CD518505c000\WMILIB.SYS
Image path: \SystemRoot\System32\drivers\WMILIB.SYS
Image name: WMILIB.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: CD518505 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00009CB9
ImageSize: 0000C000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: WmiLib.sys
OriginalFilename: WmiLib.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: WMILIB WMI support library Dll
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2ed10000 fffff800`2ed1b000 msisadrv (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\msisadrv.sys\D84D625Eb000\msisadrv.sys
Image path: \SystemRoot\System32\drivers\msisadrv.sys
Image name: msisadrv.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: D84D625E (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000B688
ImageSize: 0000B000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: msisadrv.sys
OriginalFilename: msisadrv.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: ISA Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2ed20000 fffff800`2ed96000 pci (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\pci.sys\63FFE19976000\pci.sys
Image path: \SystemRoot\System32\drivers\pci.sys
Image name: pci.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 63FFE199 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00073A9C
ImageSize: 00076000
File version: 10.0.19041.870
Product version: 10.0.19041.870
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: pci.sys
OriginalFilename: pci.sys
ProductVersion: 10.0.19041.870
FileVersion: 10.0.19041.870 (WinBuild.160101.0800)
FileDescription: NT Plug and Play PCI Enumerator
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2eda0000 fffff800`2ede4000 tpm (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\tpm.sys\64E7EED744000\tpm.sys
Image path: \SystemRoot\System32\drivers\tpm.sys
Image name: tpm.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 64E7EED7 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00048D2F
ImageSize: 00044000
File version: 10.0.19041.870
Product version: 10.0.19041.870
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: tpm.sys
OriginalFilename: tpm.sys
ProductVersion: 10.0.19041.870
FileVersion: 10.0.19041.870 (WinBuild.160101.0800)
FileDescription: TPM Device Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2edf0000 fffff800`2edfb000 IntelTA (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\IntelTA.sys\9D7941CEb000\IntelTA.sys
Image path: \SystemRoot\System32\drivers\IntelTA.sys
Image name: IntelTA.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 9D7941CE (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000CC77
ImageSize: 0000B000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.A Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: IntelTA.sys
OriginalFilename: IntelTA.sys
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: Intel Telemetry Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2ee20000 fffff800`2ee8b000 intelpep (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\intelpep.sys\4F6AD80A6b000\intelpep.sys
Image path: \SystemRoot\System32\drivers\intelpep.sys
Image name: intelpep.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 4F6AD80A (This is a reproducible build file hash, not a timestamp)
CheckSum: 0006A8B7
ImageSize: 0006B000
File version: 10.0.19041.870
Product version: 10.0.19041.870
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.A Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: intelpep.sys
OriginalFilename: intelpep.sys
ProductVersion: 10.0.19041.870
FileVersion: 10.0.19041.870 (WinBuild.160101.0800)
FileDescription: Intel Power Engine Plugin
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2ee90000 fffff800`2eea7000 WindowsTrustedRT (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\WindowsTrustedRT.sys\7AF9978A17000\WindowsTrustedRT.sys
Image path: \SystemRoot\system32\drivers\WindowsTrustedRT.sys
Image name: WindowsTrustedRT.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 7AF9978A (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001BFFA
ImageSize: 00017000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: WindowsTrustedRT.sys
OriginalFilename: WindowsTrustedRT.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Windows Trusted Runtime Interface Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2eeb0000 fffff800`2eebb000 WindowsTrustedRTProxy (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\WindowsTrustedRTProxy.sys\AA5F5790b000\WindowsTrustedRTProxy.sys
Image path: \SystemRoot\System32\drivers\WindowsTrustedRTProxy.sys
Image name: WindowsTrustedRTProxy.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: AA5F5790 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00007869
ImageSize: 0000B000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: WindowsTrustedRTProxy.sys
OriginalFilename: WindowsTrustedRTProxy.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Windows Trusted Runtime Service Proxy Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2eec0000 fffff800`2eed4000 pcw (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\pcw.sys\D212A83E14000\pcw.sys
Image path: \SystemRoot\System32\drivers\pcw.sys
Image name: pcw.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: D212A83E (This is a reproducible build file hash, not a timestamp)
CheckSum: 000163F7
ImageSize: 00014000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.8 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: pcw.sys
OriginalFilename: pcw.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Performance Counters for Windows Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2eee0000 fffff800`2eef5000 vdrvroot (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\vdrvroot.sys\E613EBA715000\vdrvroot.sys
Image path: \SystemRoot\System32\drivers\vdrvroot.sys
Image name: vdrvroot.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: E613EBA7 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000184EC
ImageSize: 00015000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: vdrvroot.sys
OriginalFilename: vdrvroot.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Virtual Drive Root Enumerator
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2ef00000 fffff800`2ef2f000 pdc (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\pdc.sys\1B16F9E02f000\pdc.sys
Image path: \SystemRoot\system32\drivers\pdc.sys
Image name: pdc.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 1B16F9E0 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000324F1
ImageSize: 0002F000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: pdc.sys
OriginalFilename: pdc.sys
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: Power Dependency Coordinator Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2ef30000 fffff800`2ef49000 CEA (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\CEA.sys\75736B9119000\CEA.sys
Image path: \SystemRoot\system32\drivers\CEA.sys
Image name: CEA.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 75736B91 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00022BC5
ImageSize: 00019000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: EventAggregation.sys
OriginalFilename: EventAggregation.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Event Aggregation Kernel Mode Library
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2ef50000 fffff800`2ef81000 partmgr (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\partmgr.sys\160E871C31000\partmgr.sys
Image path: \SystemRoot\System32\drivers\partmgr.sys
Image name: partmgr.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 160E871C (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002EE2B
ImageSize: 00031000
File version: 10.0.19041.870
Product version: 10.0.19041.870
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: partmgr.sys
OriginalFilename: partmgr.sys
ProductVersion: 10.0.19041.870
FileVersion: 10.0.19041.870 (WinBuild.160101.0800)
FileDescription: Partition driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2ef90000 fffff800`2f03a000 spaceport (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\spaceport.sys\1C59DF13aa000\spaceport.sys
Image path: \SystemRoot\System32\drivers\spaceport.sys
Image name: spaceport.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 1C59DF13 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000A8E18
ImageSize: 000AA000
File version: 10.0.19041.870
Product version: 10.0.19041.870
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: spaceport.sys
OriginalFilename: spaceport.sys
ProductVersion: 10.0.19041.870
FileVersion: 10.0.19041.870 (WinBuild.160101.0800)
FileDescription: Storage Spaces Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2f040000 fffff800`2f059000 volmgr (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\volmgr.sys\BFD8F49419000\volmgr.sys
Image path: \SystemRoot\System32\drivers\volmgr.sys
Image name: volmgr.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: BFD8F494 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000189A9
ImageSize: 00019000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: volmgr.sys
OriginalFilename: volmgr.sys
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: Volume Manager Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2f060000 fffff800`2f0c3000 volmgrx (deferred)
Image path: \SystemRoot\System32\drivers\volmgrx.sys
Image name: volmgrx.sys
Browse all global symbols functions data
Timestamp: unavailable (00000000)
CheckSum: 00000000
ImageSize: 00063000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`2f0d0000 fffff800`2f0ee000 mountmgr (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mountmgr.sys\6FA7424A1e000\mountmgr.sys
Image path: \SystemRoot\System32\drivers\mountmgr.sys
Image name: mountmgr.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 6FA7424A (This is a reproducible build file hash, not a timestamp)
CheckSum: 00024BD0
ImageSize: 0001E000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: mountmgr.sys
OriginalFilename: mountmgr.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Mount Point Manager
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2f0f0000 fffff800`2f122000 storahci (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\storahci.sys\8528F23B32000\storahci.sys
Image path: \SystemRoot\System32\drivers\storahci.sys
Image name: storahci.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 8528F23B (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002E91D
ImageSize: 00032000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: storahci.sys
OriginalFilename: storahci.sys
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: MS AHCI Storport Miniport Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2f130000 fffff800`2f1e3000 storport (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\storport.sys\74A9C76Eb3000\storport.sys
Image path: \SystemRoot\System32\drivers\storport.sys
Image name: storport.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 74A9C76E (This is a reproducible build file hash, not a timestamp)
CheckSum: 000B0E0C
ImageSize: 000B3000
File version: 10.0.19041.868
Product version: 10.0.19041.868
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: storport.sys
OriginalFilename: storport.sys
ProductVersion: 10.0.19041.868
FileVersion: 10.0.19041.868 (WinBuild.160101.0800)
FileDescription: Microsoft Storage Port Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2f210000 fffff800`2f22a000 fileinfo (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\fileinfo.sys\AEE275C21a000\fileinfo.sys
Image path: \SystemRoot\System32\drivers\fileinfo.sys
Image name: fileinfo.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: AEE275C2 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002169B
ImageSize: 0001A000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: FileInfo.sys
OriginalFilename: FileInfo.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: FileInfo Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2f230000 fffff800`2f26f000 Wof (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\Wof.sys\6F60A68B3f000\Wof.sys
Image path: \SystemRoot\System32\Drivers\Wof.sys
Image name: Wof.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 6F60A68B (This is a reproducible build file hash, not a timestamp)
CheckSum: 0003AF00
ImageSize: 0003F000
File version: 10.0.19041.870
Product version: 10.0.19041.870
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: wof.sys
OriginalFilename: wof.sys
ProductVersion: 10.0.19041.870
FileVersion: 10.0.19041.870 (WinBuild.160101.0800)
FileDescription: Windows Overlay Filter
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2f270000 fffff800`2f2d9000 WdFilter (deferred)
Image path: \SystemRoot\system32\drivers\wd\WdFilter.sys
Image name: WdFilter.sys
Browse all global symbols functions data
Timestamp: Mon Jun 24 09:05:59 1996 (31CE3047)
CheckSum: 000704C6
ImageSize: 00069000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`2f2e0000 fffff800`2f5b9000 Ntfs (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\Ntfs.sys\B10681082d9000\Ntfs.sys
Image path: \SystemRoot\System32\Drivers\Ntfs.sys
Image name: Ntfs.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: B1068108 (This is a reproducible build file hash, not a timestamp)
CheckSum: 002C225D
ImageSize: 002D9000
File version: 10.0.19041.870
Product version: 10.0.19041.870
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ntfs.sys
OriginalFilename: ntfs.sys
ProductVersion: 10.0.19041.870
FileVersion: 10.0.19041.870 (WinBuild.160101.0800)
FileDescription: NT File System Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2f5c0000 fffff800`2f5cd000 Fs_Rec (deferred)
Image path: \SystemRoot\System32\Drivers\Fs_Rec.sys
Image name: Fs_Rec.sys
Browse all global symbols functions data
Timestamp: unavailable (00000000)
CheckSum: 00000000
ImageSize: 0000D000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`2f5d0000 fffff800`2f73f000 ndis (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ndis.sys\6A91EFD516f000\ndis.sys
Image path: \SystemRoot\system32\drivers\ndis.sys
Image name: ndis.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 6A91EFD5 (This is a reproducible build file hash, not a timestamp)
CheckSum: 001759F5
ImageSize: 0016F000
File version: 10.0.19041.630
Product version: 10.0.19041.630
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: NDIS.SYS
OriginalFilename: NDIS.SYS
ProductVersion: 10.0.19041.630
FileVersion: 10.0.19041.630 (WinBuild.160101.0800)
FileDescription: Network Driver Interface Specification (NDIS)
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2f740000 fffff800`2f7d8000 NETIO (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\NETIO.SYS\B358C89B98000\NETIO.SYS
Image path: \SystemRoot\system32\drivers\NETIO.SYS
Image name: NETIO.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: B358C89B (This is a reproducible build file hash, not a timestamp)
CheckSum: 00093D64
ImageSize: 00098000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: netio.sys
OriginalFilename: netio.sys
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: Network I/O Subsystem
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2f7e0000 fffff800`2f812000 ksecpkg (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ksecpkg.sys\EB0A833932000\ksecpkg.sys
Image path: \SystemRoot\System32\Drivers\ksecpkg.sys
Image name: ksecpkg.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: EB0A8339 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0003AAA0
ImageSize: 00032000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ksecpkg.sys
OriginalFilename: ksecpkg.sys
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: Kernel Security Support Provider Interface Packages
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2f820000 fffff800`2fb0b000 tcpip (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\tcpip.sys\886E0AF12eb000\tcpip.sys
Image path: \SystemRoot\System32\drivers\tcpip.sys
Image name: tcpip.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 886E0AF1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 002E5203
ImageSize: 002EB000
File version: 10.0.19041.870
Product version: 10.0.19041.870
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: tcpip.sys
OriginalFilename: tcpip.sys
ProductVersion: 10.0.19041.870
FileVersion: 10.0.19041.870 (WinBuild.160101.0800)
FileDescription: TCP/IP Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2fb10000 fffff800`2fb8f000 fwpkclnt (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\fwpkclnt.sys\1E076A7F7f000\fwpkclnt.sys
Image path: \SystemRoot\System32\drivers\fwpkclnt.sys
Image name: fwpkclnt.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 1E076A7F (This is a reproducible build file hash, not a timestamp)
CheckSum: 00088245
ImageSize: 0007F000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: fwpkclnt.sys
OriginalFilename: fwpkclnt.sys
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: FWP/IPsec Kernel-Mode API
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2fb90000 fffff800`2fbc0000 wfplwfs (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\wfplwfs.sys\3340819A30000\wfplwfs.sys
Image path: \SystemRoot\System32\drivers\wfplwfs.sys
Image name: wfplwfs.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 3340819A (This is a reproducible build file hash, not a timestamp)
CheckSum: 000352F4
ImageSize: 00030000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: WFPLWFS.SYS
OriginalFilename: WFPLWFS.SYS
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: WFP NDIS 6.30 Lightweight Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2fbd0000 fffff800`2fc98000 fvevol (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\fvevol.sys\3D283BDAc8000\fvevol.sys
Image path: \SystemRoot\System32\DRIVERS\fvevol.sys
Image name: fvevol.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 3D283BDA (This is a reproducible build file hash, not a timestamp)
CheckSum: 000D203D
ImageSize: 000C8000
File version: 10.0.19041.870
Product version: 10.0.19041.870
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: FVEVOL.SYS
OriginalFilename: FVEVOL.SYS
ProductVersion: 10.0.19041.870
FileVersion: 10.0.19041.870 (WinBuild.160101.0800)
FileDescription: BitLocker Drive Encryption Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2fca0000 fffff800`2fcab000 volume (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\volume.sys\83CF10C9b000\volume.sys
Image path: \SystemRoot\System32\drivers\volume.sys
Image name: volume.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 83CF10C9 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000083D7
ImageSize: 0000B000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: volume.sys
OriginalFilename: volume.sys
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: Volume driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2fcb0000 fffff800`2fd1d000 volsnap (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\volsnap.sys\8AFD80F66d000\volsnap.sys
Image path: \SystemRoot\System32\drivers\volsnap.sys
Image name: volsnap.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 8AFD80F6 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00077353
ImageSize: 0006D000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: volsnap.sys
OriginalFilename: volsnap.sys
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: Volume Shadow Copy driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2fd20000 fffff800`2fd70000 rdyboost (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\rdyboost.sys\76CA327050000\rdyboost.sys
Image path: \SystemRoot\System32\drivers\rdyboost.sys
Image name: rdyboost.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 76CA3270 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00048E48
ImageSize: 00050000
File version: 10.0.19041.208
Product version: 10.0.19041.208
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: rdyboost.sys
OriginalFilename: rdyboost.sys
ProductVersion: 10.0.19041.208
FileVersion: 10.0.19041.208 (WinBuild.160101.0800)
FileDescription: ReadyBoost Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2fd80000 fffff800`2fda6000 mup (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mup.sys\71933DBD26000\mup.sys
Image path: \SystemRoot\System32\Drivers\mup.sys
Image name: mup.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 71933DBD (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002162F
ImageSize: 00026000
File version: 10.0.19041.870
Product version: 10.0.19041.870
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: MUP.SYS
OriginalFilename: MUP.SYS
ProductVersion: 10.0.19041.870
FileVersion: 10.0.19041.870 (WinBuild.160101.0800)
FileDescription: Multiple UNC Provider Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2fdb0000 fffff800`2fdc2000 iorate (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\iorate.sys\94A693A612000\iorate.sys
Image path: \SystemRoot\system32\drivers\iorate.sys
Image name: iorate.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 94A693A6 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001BF87
ImageSize: 00012000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: iorate.sys
OriginalFilename: iorate.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: I/O rate control Filter
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2fdf0000 fffff800`2fe0c000 disk (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\disk.sys\3457FE4D1c000\disk.sys
Image path: \SystemRoot\System32\drivers\disk.sys
Image name: disk.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 3457FE4D (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001CD89
ImageSize: 0001C000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: disk.sys
OriginalFilename: disk.sys
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: PnP Disk Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`2fe10000 fffff800`2fe7c000 CLASSPNP (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\CLASSPNP.SYS\9A21D83D6c000\CLASSPNP.SYS
Image path: \SystemRoot\System32\drivers\CLASSPNP.SYS
Image name: CLASSPNP.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 9A21D83D (This is a reproducible build file hash, not a timestamp)
CheckSum: 0007143B
ImageSize: 0006C000
File version: 10.0.19041.870
Product version: 10.0.19041.870
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: Classpnp.sys
OriginalFilename: Classpnp.sys
ProductVersion: 10.0.19041.870
FileVersion: 10.0.19041.870 (WinBuild.160101.0800)
FileDescription: SCSI Class System Dll
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`41680000 fffff800`416b0000 cdrom (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\cdrom.sys\D4B3113130000\cdrom.sys
Image path: \SystemRoot\System32\drivers\cdrom.sys
Image name: cdrom.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: D4B31131 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000346A0
ImageSize: 00030000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: cdrom.sys
OriginalFilename: cdrom.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: SCSI CD-ROM Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`416c0000 fffff800`416d5000 filecrypt (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\filecrypt.sys\3C7F622A15000\filecrypt.sys
Image path: \SystemRoot\system32\drivers\filecrypt.sys
Image name: filecrypt.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 3C7F622A (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000FEC3
ImageSize: 00015000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: filecrypt.sys
OriginalFilename: filecrypt.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Windows sandboxing and encryption filter
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`416e0000 fffff800`416ee000 tbs (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\tbs.sys\D4CA1062e000\tbs.sys
Image path: \SystemRoot\system32\drivers\tbs.sys
Image name: tbs.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: D4CA1062 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00017331
ImageSize: 0000E000
File version: 10.0.19041.870
Product version: 10.0.19041.870
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: TBS.SYS
OriginalFilename: TBS.SYS
ProductVersion: 10.0.19041.870
FileVersion: 10.0.19041.870 (WinBuild.160101.0800)
FileDescription: Export driver for kernel mode TPM API
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`416f0000 fffff800`416fa000 Null (deferred)
Image path: \SystemRoot\System32\Drivers\Null.SYS
Image name: Null.SYS
Browse all global symbols functions data
Timestamp: unavailable (00000000)
CheckSum: 00000000
ImageSize: 0000A000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`41700000 fffff800`4170a000 Beep (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\Beep.SYS\E4AC8238a000\Beep.SYS
Image path: \SystemRoot\System32\Drivers\Beep.SYS
Image name: Beep.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: E4AC8238 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00008685
ImageSize: 0000A000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: beep.sys
OriginalFilename: beep.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: BEEP Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`41710000 fffff800`41ab4000 dxgkrnl (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\dxgkrnl.sys\1C3CAA2C3a4000\dxgkrnl.sys
Image path: \SystemRoot\System32\drivers\dxgkrnl.sys
Image name: dxgkrnl.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 1C3CAA2C (This is a reproducible build file hash, not a timestamp)
CheckSum: 003A20D3
ImageSize: 003A4000
File version: 10.0.19041.868
Product version: 10.0.19041.868
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: dxgkrnl.sys
OriginalFilename: dxgkrnl.sys
ProductVersion: 10.0.19041.868
FileVersion: 10.0.19041.868 (WinBuild.160101.0800)
FileDescription: DirectX Graphics Kernel
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`41ac0000 fffff800`41ad8000 watchdog (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\watchdog.sys\F13839AB18000\watchdog.sys
Image path: \SystemRoot\System32\drivers\watchdog.sys
Image name: watchdog.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: F13839AB (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001DF3F
ImageSize: 00018000
File version: 10.0.19041.870
Product version: 10.0.19041.870
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: watchdog.sys
OriginalFilename: watchdog.sys
ProductVersion: 10.0.19041.870
FileVersion: 10.0.19041.870 (WinBuild.160101.0800)
FileDescription: Watchdog Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`41ae0000 fffff800`41af6000 BasicDisplay (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\BasicDisplay.sys\A816CE2216000\BasicDisplay.sys
Image path: \SystemRoot\System32\DriverStore\FileRepository\basicdisplay.inf_amd64_65ab9a260dbf7467\BasicDisplay.sys
Image name: BasicDisplay.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: A816CE22 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000118B6
ImageSize: 00016000
File version: 10.0.19041.870
Product version: 10.0.19041.870
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.4 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: BasicDisplay.sys
OriginalFilename: BasicDisplay.sys
ProductVersion: 10.0.19041.870
FileVersion: 10.0.19041.870 (WinBuild.160101.0800)
FileDescription: Microsoft Basic Display Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`41b00000 fffff800`41b11000 BasicRender (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\BasicRender.sys\4A52C9B411000\BasicRender.sys
Image path: \SystemRoot\System32\DriverStore\FileRepository\basicrender.inf_amd64_df49c4daa6251397\BasicRender.sys
Image name: BasicRender.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 4A52C9B4 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000167E4
ImageSize: 00011000
File version: 10.0.19041.870
Product version: 10.0.19041.870
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.4 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: BasicRender.sys
OriginalFilename: BasicRender.sys
ProductVersion: 10.0.19041.870
FileVersion: 10.0.19041.870 (WinBuild.160101.0800)
FileDescription: Microsoft Basic Render Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`41b20000 fffff800`41b3c000 Npfs (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\Npfs.SYS\9E3E4C731c000\Npfs.SYS
Image path: \SystemRoot\System32\Drivers\Npfs.SYS
Image name: Npfs.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 9E3E4C73 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000192F7
ImageSize: 0001C000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: npfs.sys
OriginalFilename: npfs.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: NPFS Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`41b40000 fffff800`41b51000 Msfs (deferred)
Image path: \SystemRoot\System32\Drivers\Msfs.SYS
Image name: Msfs.SYS
Browse all global symbols functions data
Timestamp: unavailable (00000000)
CheckSum: 00000000
ImageSize: 00011000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`41b60000 fffff800`41b7b000 CimFS (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\CimFS.SYS\2FFADC8B1b000\CimFS.SYS
Image path: \SystemRoot\System32\Drivers\CimFS.SYS
Image name: CimFS.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 2FFADC8B (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001AB75
ImageSize: 0001B000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`41b80000 fffff800`41ba2000 tdx (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\tdx.sys\28EC0E8022000\tdx.sys
Image path: \SystemRoot\system32\DRIVERS\tdx.sys
Image name: tdx.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 28EC0E80 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000273F3
ImageSize: 00022000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: tdx.sys
OriginalFilename: tdx.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: TDI Translation Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`41bb0000 fffff800`41bc0000 TDI (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\TDI.SYS\D1AD2BD410000\TDI.SYS
Image path: \SystemRoot\system32\DRIVERS\TDI.SYS
Image name: TDI.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: D1AD2BD4 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000D19A
ImageSize: 00010000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: tdi.sys
OriginalFilename: tdi.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: TDI Wrapper
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`41bd0000 fffff800`41c2c000 netbt (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\netbt.sys\45CF76EF5c000\netbt.sys
Image path: \SystemRoot\System32\DRIVERS\netbt.sys
Image name: netbt.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 45CF76EF (This is a reproducible build file hash, not a timestamp)
CheckSum: 000561DD
ImageSize: 0005C000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: netbt.sys
OriginalFilename: netbt.sys
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: MBT Transport driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`41c30000 fffff800`41c43000 afunix (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\afunix.sys\9501F0D813000\afunix.sys
Image path: \SystemRoot\system32\drivers\afunix.sys
Image name: afunix.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 9501F0D8 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00018987
ImageSize: 00013000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: afunix.sys
OriginalFilename: afunix.sys
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: AF_UNIX socket provider
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`41c50000 fffff800`41cf3000 afd (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\afd.sys\CC0C9B73a3000\afd.sys
Image path: \SystemRoot\system32\drivers\afd.sys
Image name: afd.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: CC0C9B73 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000A334A
ImageSize: 000A3000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: afd.sys
OriginalFilename: afd.sys
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: Ancillary Function Driver for WinSock
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`41d00000 fffff800`41d1a000 vwififlt (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\vwififlt.sys\4B4588351a000\vwififlt.sys
Image path: \SystemRoot\System32\drivers\vwififlt.sys
Image name: vwififlt.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 4B458835 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001814D
ImageSize: 0001A000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: vwififlt.sys
OriginalFilename: vwififlt.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Virtual WiFi Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`41d20000 fffff800`41d4b000 pacer (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\pacer.sys\26BE44D42b000\pacer.sys
Image path: \SystemRoot\System32\drivers\pacer.sys
Image name: pacer.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 26BE44D4 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0003138E
ImageSize: 0002B000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: pacer.sys
OriginalFilename: pacer.sys
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: QoS Packet Scheduler
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`41d50000 fffff800`41d64000 ndiscap (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ndiscap.sys\DCEEC70E14000\ndiscap.sys
Image path: \SystemRoot\System32\drivers\ndiscap.sys
Image name: ndiscap.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: DCEEC70E (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001C38B
ImageSize: 00014000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: NDISCAP.SYS
OriginalFilename: NDISCAP.SYS
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Microsoft NDIS Packet Capture Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`41d70000 fffff800`41d84000 netbios (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\netbios.sys\618ED82E14000\netbios.sys
Image path: \SystemRoot\system32\drivers\netbios.sys
Image name: netbios.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 618ED82E (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001A9AF
ImageSize: 00014000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: NETBIOS.SYS
OriginalFilename: NETBIOS.SYS
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: NetBIOS interface driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`41d90000 fffff800`41e31000 Vid (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\Vid.sys\59F1C008a1000\Vid.sys
Image path: \SystemRoot\System32\drivers\Vid.sys
Image name: Vid.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 59F1C008 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000A5D7F
ImageSize: 000A1000
File version: 10.0.19041.870
Product version: 10.0.19041.870
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: vid.sys
OriginalFilename: vid.sys
ProductVersion: 10.0.19041.870
FileVersion: 10.0.19041.870 (WinBuild.160101.0800)
FileDescription: Microsoft Hyper-V Virtualization Infrastructure Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`41e40000 fffff800`41e61000 winhvr (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\winhvr.sys\C1F13DBD21000\winhvr.sys
Image path: \SystemRoot\System32\drivers\winhvr.sys
Image name: winhvr.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: C1F13DBD (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001EA8A
ImageSize: 00021000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: WinHvR.sys
OriginalFilename: WinHvR.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Windows Hypervisor Root Interface Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`41e70000 fffff800`41eec000 rdbss (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\rdbss.sys\D9F6263D7c000\rdbss.sys
Image path: \SystemRoot\system32\DRIVERS\rdbss.sys
Image name: rdbss.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: D9F6263D (This is a reproducible build file hash, not a timestamp)
CheckSum: 00075370
ImageSize: 0007C000
File version: 10.0.19041.870
Product version: 10.0.19041.870
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: rdbss.sys
OriginalFilename: RDBSS.Sys
ProductVersion: 10.0.19041.870
FileVersion: 10.0.19041.870 (WinBuild.160101.0800)
FileDescription: Redirected Drive Buffering SubSystem Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`41ef0000 fffff800`41f02000 nsiproxy (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\nsiproxy.sys\F6E3177912000\nsiproxy.sys
Image path: \SystemRoot\system32\drivers\nsiproxy.sys
Image name: nsiproxy.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: F6E31779 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00017615
ImageSize: 00012000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: nsiproxy.sys
OriginalFilename: nsiproxy.sys
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: NSI Proxy
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`41f10000 fffff800`41f1e000 npsvctrig (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\npsvctrig.sys\677B42C8e000\npsvctrig.sys
Image path: \SystemRoot\System32\drivers\npsvctrig.sys
Image name: npsvctrig.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 677B42C8 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000119D3
ImageSize: 0000E000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: npsvctrig.sys
OriginalFilename: npsvctrig.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Named pipe service triggers
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`41f20000 fffff800`41f30000 mssmbios (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mssmbios.sys\6233611A10000\mssmbios.sys
Image path: \SystemRoot\System32\drivers\mssmbios.sys
Image name: mssmbios.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 6233611A (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000DD1D
ImageSize: 00010000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: smbios.sys
OriginalFilename: smbios.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: System Management BIOS Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`41f40000 fffff800`41f4a000 gpuenergydrv (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\gpuenergydrv.sys\F10C03D8a000\gpuenergydrv.sys
Image path: \SystemRoot\System32\drivers\gpuenergydrv.sys
Image name: gpuenergydrv.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: F10C03D8 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00009EA6
ImageSize: 0000A000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: gpuenergydrv.sys
OriginalFilename: gpuenergydrv.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: GPU Energy Kernel Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`41f50000 fffff800`41f7c000 dfsc (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\dfsc.sys\5EDE3E452c000\dfsc.sys
Image path: \SystemRoot\System32\Drivers\dfsc.sys
Image name: dfsc.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 5EDE3E45 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002C1B8
ImageSize: 0002C000
File version: 10.0.19041.870
Product version: 10.0.19041.870
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: dfsclient.sys
OriginalFilename: dfsclient.sys
ProductVersion: 10.0.19041.870
FileVersion: 10.0.19041.870 (WinBuild.160101.0800)
FileDescription: DFS Namespace Client Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`41fa0000 fffff800`4200c000 fastfat (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\fastfat.SYS\ED0854E56c000\fastfat.SYS
Image path: \SystemRoot\System32\Drivers\fastfat.SYS
Image name: fastfat.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: ED0854E5 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00077386
ImageSize: 0006C000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: fastfat.sys
OriginalFilename: FastFAT.Sys
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: Fast FAT File System Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`42010000 fffff800`42027000 bam (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\bam.sys\4BADB6B817000\bam.sys
Image path: \SystemRoot\system32\drivers\bam.sys
Image name: bam.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 4BADB6B8 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00019328
ImageSize: 00017000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: bam.sys
OriginalFilename: bam.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: BAM Kernel Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`42030000 fffff800`4207e000 ahcache (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ahcache.sys\5C9A7E7B4e000\ahcache.sys
Image path: \SystemRoot\system32\DRIVERS\ahcache.sys
Image name: ahcache.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 5C9A7E7B (This is a reproducible build file hash, not a timestamp)
CheckSum: 00052E71
ImageSize: 0004E000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ahcache.sys
OriginalFilename: ahcache.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Application Compatibility Cache
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`42080000 fffff800`42092000 CompositeBus (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\CompositeBus.sys\6AE1B30212000\CompositeBus.sys
Image path: \SystemRoot\System32\DriverStore\FileRepository\compositebus.inf_amd64_7500cffa210c6946\CompositeBus.sys
Image name: CompositeBus.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 6AE1B302 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00015BD2
ImageSize: 00012000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: compositebus.sys
OriginalFilename: compositebus.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Multi-Transport Composite Bus Enumerator
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`420a0000 fffff800`420ad000 kdnic (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\kdnic.sys\9401D3B8d000\kdnic.sys
Image path: \SystemRoot\System32\drivers\kdnic.sys
Image name: kdnic.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 9401D3B8 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000178DD
ImageSize: 0000D000
File version: 6.1.0.0
Product version: 6.1.0.0
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft Kernel Debugger Network Adapter (NDIS 6.20 Miniport)
InternalName: kdnic.sys
OriginalFilename: kdnic.sys
ProductVersion: 6.01.00.0000
FileVersion: 6.01.00.0000 (WinBuild.160101.0800)
FileDescription: Microsoft Kernel Debugger Network Miniport
LegalCopyright: Copyright (C) Microsoft Corporation. All rights reserved.
fffff800`420b0000 fffff800`420c5000 umbus (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\umbus.sys\E7B4847E15000\umbus.sys
Image path: \SystemRoot\System32\DriverStore\FileRepository\umbus.inf_amd64_b78a9c5b6fd62c27\umbus.sys
Image name: umbus.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: E7B4847E (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001394F
ImageSize: 00015000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: umbus.sys
OriginalFilename: umbus.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: User-Mode Bus Enumerator
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`420d0000 fffff800`420e5000 CAD (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\CAD.sys\58C1ABCA15000\CAD.sys
Image path: \SystemRoot\System32\drivers\CAD.sys
Image name: CAD.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 58C1ABCA (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001EEC2
ImageSize: 00015000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: cad.sys
OriginalFilename: cad.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Charge Arbiration Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`42170000 fffff800`4218e000 crashdmp (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\crashdmp.sys\9A19AF811e000\crashdmp.sys
Image path: \SystemRoot\System32\Drivers\crashdmp.sys
Image name: crashdmp.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 9A19AF81 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002129E
ImageSize: 0001E000
File version: 10.0.19041.208
Product version: 10.0.19041.208
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: crashdmp.sys
OriginalFilename: crashdmp.sys
ProductVersion: 10.0.19041.208
FileVersion: 10.0.19041.208 (WinBuild.160101.0800)
FileDescription: Crash Dump Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`42200000 fffff800`42213000 HIDPARSE (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\HIDPARSE.SYS\3404D24613000\HIDPARSE.SYS
Image path: \SystemRoot\System32\drivers\HIDPARSE.SYS
Image name: HIDPARSE.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 3404D246 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00016B2D
ImageSize: 00013000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: hidparse.sys
OriginalFilename: hidparse.sys
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: Hid Parsing Library
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`42220000 fffff800`42234000 kbdclass (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\kbdclass.sys\3156654A14000\kbdclass.sys
Image path: \SystemRoot\System32\drivers\kbdclass.sys
Image name: kbdclass.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 3156654A (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001CE1A
ImageSize: 00014000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: kbdclass.sys
OriginalFilename: kbdclass.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Keyboard Class Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`42240000 fffff800`42253000 mouclass (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mouclass.sys\3E1AA9CC13000\mouclass.sys
Image path: \SystemRoot\System32\drivers\mouclass.sys
Image name: mouclass.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 3E1AA9CC (This is a reproducible build file hash, not a timestamp)
CheckSum: 00019679
ImageSize: 00013000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: mouclass.sys
OriginalFilename: mouclass.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Mouse Class Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`42260000 fffff800`4226f000 CmBatt (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\CmBatt.sys\770987ADf000\CmBatt.sys
Image path: \SystemRoot\System32\drivers\CmBatt.sys
Image name: CmBatt.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 770987AD (This is a reproducible build file hash, not a timestamp)
CheckSum: 00009C77
ImageSize: 0000F000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: cmbatt.sys
OriginalFilename: cmbatt.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Control Method Battery Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`42270000 fffff800`42280000 BATTC (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\BATTC.SYS\FF32259110000\BATTC.SYS
Image path: \SystemRoot\System32\drivers\BATTC.SYS
Image name: BATTC.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: FF322591 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000D94E
ImageSize: 00010000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: battc.sys
OriginalFilename: battc.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Battery Class Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`42290000 fffff800`4229f000 Smb_driver_Intel (deferred)
Image path: \SystemRoot\System32\drivers\Smb_driver_Intel.sys
Image name: Smb_driver_Intel.sys
Browse all global symbols functions data
Timestamp: Mon Feb 24 11:37:37 2020 (5E538B51)
CheckSum: 0000DCC5
ImageSize: 0000F000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`422a0000 fffff800`422b3000 dptf_pch (deferred)
Image path: \SystemRoot\System32\drivers\dptf_pch.sys
Image name: dptf_pch.sys
Browse all global symbols functions data
Timestamp: Tue Jan 10 20:52:34 2017 (58751F62)
CheckSum: 000199A4
ImageSize: 00013000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`422c0000 fffff800`42300000 intelppm (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\intelppm.sys\7EBD22FD40000\intelppm.sys
Image path: \SystemRoot\System32\drivers\intelppm.sys
Image name: intelppm.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 7EBD22FD (This is a reproducible build file hash, not a timestamp)
CheckSum: 0004204F
ImageSize: 00040000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: intelppm.sys
OriginalFilename: intelppm.sys
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: Processor Device Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`42310000 fffff800`4231b000 acpipagr (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\acpipagr.sys\092D0DD8b000\acpipagr.sys
Image path: \SystemRoot\System32\drivers\acpipagr.sys
Image name: acpipagr.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 092D0DD8 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001307F
ImageSize: 0000B000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: acpipagr.sys
OriginalFilename: acpipagr.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: ACPI Processor Aggregator Device Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`42320000 fffff800`4232a000 WirelessButtonDriver64 (deferred)
Image path: \SystemRoot\System32\drivers\WirelessButtonDriver64.sys
Image name: WirelessButtonDriver64.sys
Browse all global symbols functions data
Timestamp: Fri Jun 5 09:07:07 2020 (5ED9E10B)
CheckSum: 000107C7
ImageSize: 0000A000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`42330000 fffff800`4233b000 mshidkmdf (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mshidkmdf.sys\D7AA4B86b000\mshidkmdf.sys
Image path: \SystemRoot\System32\drivers\mshidkmdf.sys
Image name: mshidkmdf.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: D7AA4B86 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000C0D8
ImageSize: 0000B000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: MSHIDKMDF.SYS
OriginalFilename: MSHIDKMDF.SYS
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Pass-through HID to KMDF Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`42340000 fffff800`4237f000 HIDCLASS (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\HIDCLASS.SYS\021FDD4D3f000\HIDCLASS.SYS
Image path: \SystemRoot\System32\drivers\HIDCLASS.SYS
Image name: HIDCLASS.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 021FDD4D (This is a reproducible build file hash, not a timestamp)
CheckSum: 0003DADE
ImageSize: 0003F000
File version: 10.0.19041.870
Product version: 10.0.19041.870
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: hidclass.sys
OriginalFilename: hidclass.sys
ProductVersion: 10.0.19041.870
FileVersion: 10.0.19041.870 (WinBuild.160101.0800)
FileDescription: Hid Class Library
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`42380000 fffff800`4238c000 wmiacpi (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\wmiacpi.sys\4A8BFC2Cc000\wmiacpi.sys
Image path: \SystemRoot\System32\drivers\wmiacpi.sys
Image name: wmiacpi.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 4A8BFC2C (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000CC2F
ImageSize: 0000C000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: wmiacpi.sys
OriginalFilename: wmiacpi.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Windows Management Interface for ACPI
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`42390000 fffff800`423a3000 dptf_acpi (deferred)
Image path: \SystemRoot\System32\DriverStore\FileRepository\dptf_acpi.inf_amd64_5989fd2721678bab\dptf_acpi.sys
Image name: dptf_acpi.sys
Browse all global symbols functions data
Timestamp: Sat Jun 15 03:55:34 2019 (5D044206)
CheckSum: 0001D7EB
ImageSize: 00013000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`423b0000 fffff800`423b9000 hpcustomcapdriver (deferred)
Image path: \SystemRoot\System32\DriverStore\FileRepository\hpcustomcapdriver.inf_amd64_1f5602eb8a12ac4c\x64\hpcustomcapdriver.sys
Image name: hpcustomcapdriver.sys
Browse all global symbols functions data
Timestamp: Wed Sep 20 01:13:13 2017 (59C19679)
CheckSum: 0000A8D5
ImageSize: 00009000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`423c0000 fffff800`423ce000 UEFI (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\UEFI.sys\100A3FFEe000\UEFI.sys
Image path: \SystemRoot\System32\DriverStore\FileRepository\uefi.inf_amd64_c1628ffa62c8e54c\UEFI.sys
Image name: UEFI.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 100A3FFE (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000C8C7
ImageSize: 0000E000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: UEFI.sys
OriginalFilename: UEFI.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: UEFI Driver for NT
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`423d0000 fffff800`424c0000 wdiwifi (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\wdiwifi.sys\793813F4f0000\wdiwifi.sys
Image path: \SystemRoot\system32\DRIVERS\wdiwifi.sys
Image name: wdiwifi.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 793813F4 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000F5ACE
ImageSize: 000F0000
File version: 10.0.19041.870
Product version: 10.0.19041.870
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: wdiwifi.sys
OriginalFilename: wdiwifi.sys
ProductVersion: 10.0.19041.870
FileVersion: 10.0.19041.870 (WinBuild.160101.0800)
FileDescription: WDI Driver Framework Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`424d0000 fffff800`424de000 vwifibus (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\vwifibus.sys\8AF48D2Ce000\vwifibus.sys
Image path: \SystemRoot\System32\drivers\vwifibus.sys
Image name: vwifibus.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 8AF48D2C (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000E969
ImageSize: 0000E000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: VWiFiBus.sys
OriginalFilename: VWiFiBus.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Virtual Wireless Bus Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`424e0000 fffff800`42501000 i8042prt (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\i8042prt.sys\515D28B121000\i8042prt.sys
Image path: \SystemRoot\System32\drivers\i8042prt.sys
Image name: i8042prt.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 515D28B1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00022B0C
ImageSize: 00021000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: i8042prt.sys
OriginalFilename: i8042prt.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: i8042 Port Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`42510000 fffff800`425d3000 SynTP (deferred)
Image path: \SystemRoot\System32\drivers\SynTP.sys
Image name: SynTP.sys
Browse all global symbols functions data
Timestamp: Mon Feb 24 11:35:27 2020 (5E538ACF)
CheckSum: 000C59DB
ImageSize: 000C3000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`425e0000 fffff800`425ee000 USBD (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\USBD.SYS\76AC3507e000\USBD.SYS
Image path: \SystemRoot\System32\drivers\USBD.SYS
Image name: USBD.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 76AC3507 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000FFB7
ImageSize: 0000E000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: usbd.sys
OriginalFilename: usbd.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Universal Serial Bus Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`425f0000 fffff800`425fd000 NdisVirtualBus (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\NdisVirtualBus.sys\A7AE93D1d000\NdisVirtualBus.sys
Image path: \SystemRoot\System32\drivers\NdisVirtualBus.sys
Image name: NdisVirtualBus.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: A7AE93D1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00014F1D
ImageSize: 0000D000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: NdisVirtualBus.sys
OriginalFilename: NdisVirtualBus.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Microsoft Virtual Network Adapter Enumerator
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`42a60000 fffff800`42af8000 USBXHCI (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\USBXHCI.SYS\2E44F1B698000\USBXHCI.SYS
Image path: \SystemRoot\System32\drivers\USBXHCI.SYS
Image name: USBXHCI.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 2E44F1B6 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0009C21D
ImageSize: 00098000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: usbxhci.sys
OriginalFilename: usbxhci.sys
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: USB XHCI Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`42b00000 fffff800`42b44000 ucx01000 (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ucx01000.sys\11447CC944000\ucx01000.sys
Image path: \SystemRoot\system32\drivers\ucx01000.sys
Image name: ucx01000.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 11447CC9 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0004DFDA
ImageSize: 00044000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ucx01000.sys
OriginalFilename: ucx01000.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: USB Controller Extension
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`42b50000 fffff800`42b84000 TeeDriverW8x64 (deferred)
Image path: \SystemRoot\System32\drivers\TeeDriverW8x64.sys
Image name: TeeDriverW8x64.sys
Browse all global symbols functions data
Timestamp: Tue Jul 18 17:15:12 2017 (596E17F0)
CheckSum: 0003D478
ImageSize: 00034000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`42b90000 fffff800`42cac000 rt640x64 (deferred)
Image path: \SystemRoot\System32\drivers\rt640x64.sys
Image name: rt640x64.sys
Browse all global symbols functions data
Timestamp: Mon Jul 1 10:38:21 2019 (5D19B86D)
CheckSum: 00122F18
ImageSize: 0011C000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`42cb0000 fffff800`4380d000 rtwlane (deferred)
Image path: \SystemRoot\System32\drivers\rtwlane.sys
Image name: rtwlane.sys
Browse all global symbols functions data
Timestamp: Mon Oct 5 09:20:16 2020 (5F7ABB20)
CheckSum: 00B39743
ImageSize: 00B5D000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`43810000 fffff800`4381c000 swenum (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\swenum.sys\E117266Bc000\swenum.sys
Image path: \SystemRoot\System32\DriverStore\FileRepository\swenum.inf_amd64_16a14542b63c02af\swenum.sys
Image name: swenum.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: E117266B (This is a reproducible build file hash, not a timestamp)
CheckSum: 000082C9
ImageSize: 0000C000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.0 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: swenum.sys
OriginalFilename: swenum.sys
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: Plug and Play Software Device Enumerator
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`43820000 fffff800`4382e000 rdpbus (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\rdpbus.sys\84DFD52Ae000\rdpbus.sys
Image path: \SystemRoot\System32\drivers\rdpbus.sys
Image name: rdpbus.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 84DFD52A (This is a reproducible build file hash, not a timestamp)
CheckSum: 000106CE
ImageSize: 0000E000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.0 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: RDPBUS.SYS
OriginalFilename: RDPBUS.SYS
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Microsoft RDP Bus Device driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`43840000 fffff800`44004000 igdkmd64 (deferred)
Image path: \SystemRoot\system32\DRIVERS\igdkmd64.sys
Image name: igdkmd64.sys
Browse all global symbols functions data
Timestamp: Fri Dec 28 01:44:46 2018 (5C2555DE)
CheckSum: 0079F65A
ImageSize: 007C4000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`44010000 fffff800`44035000 HDAudBus (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\HDAudBus.sys\6195DFDC25000\HDAudBus.sys
Image path: \SystemRoot\System32\drivers\HDAudBus.sys
Image name: HDAudBus.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 6195DFDC (This is a reproducible build file hash, not a timestamp)
CheckSum: 000268EC
ImageSize: 00025000
File version: 10.0.19041.208
Product version: 10.0.19041.208
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.9 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: hdaudbus.sys
OriginalFilename: hdaudbus.sys
ProductVersion: 10.0.19041.208
FileVersion: 10.0.19041.208 (WinBuild.160101.0800)
FileDescription: High Definition Audio Bus Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`44040000 fffff800`440a6000 portcls (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\portcls.sys\5373C5A466000\portcls.sys
Image path: \SystemRoot\System32\drivers\portcls.sys
Image name: portcls.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 5373C5A4 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0006B646
ImageSize: 00066000
File version: 10.0.19041.870
Product version: 10.0.19041.870
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.9 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: portcls.sys
OriginalFilename: portcls.sys
ProductVersion: 10.0.19041.870
FileVersion: 10.0.19041.870 (WinBuild.160101.0800)
FileDescription: Port Class (Class Driver for Port/Miniport Devices)
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`440b0000 fffff800`440d1000 drmk (deferred)
Image path: \SystemRoot\System32\drivers\drmk.sys
Image name: drmk.sys
Browse all global symbols functions data
Timestamp: Wed Oct 13 10:43:12 1999 (38043810)
CheckSum: 0001AF92
ImageSize: 00021000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`440e0000 fffff800`44156000 ks (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ks.sys\365F95B976000\ks.sys
Image path: \SystemRoot\System32\drivers\ks.sys
Image name: ks.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 365F95B9 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00071A58
ImageSize: 00076000
File version: 10.0.19041.870
Product version: 10.0.19041.870
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.0 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ks.sys
OriginalFilename: ks.sys
ProductVersion: 10.0.19041.870
FileVersion: 10.0.19041.870 (WinBuild.160101.0800)
FileDescription: Kernel CSA Library
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`441e0000 fffff800`441ef000 ksthunk (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ksthunk.sys\2816E646f000\ksthunk.sys
Image path: \SystemRoot\system32\drivers\ksthunk.sys
Image name: ksthunk.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 2816E646 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00007961
ImageSize: 0000F000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.0 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ksthunk.sys
OriginalFilename: ksthunk.sys
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: Kernel Streaming WOW Thunk Service
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`44200000 fffff800`442e2000 dxgmms2 (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\dxgmms2.sys\234F2765e2000\dxgmms2.sys
Image path: \SystemRoot\System32\drivers\dxgmms2.sys
Image name: dxgmms2.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 234F2765 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000DFC54
ImageSize: 000E2000
File version: 10.0.19041.870
Product version: 10.0.19041.870
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: dxgmms2.sys
OriginalFilename: dxgmms2.sys
ProductVersion: 10.0.19041.870
FileVersion: 10.0.19041.870 (WinBuild.160101.0800)
FileDescription: DirectX Graphics MMS
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`442f0000 fffff800`4430b000 monitor (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\monitor.sys\1CD682D71b000\monitor.sys
Image path: \SystemRoot\System32\drivers\monitor.sys
Image name: monitor.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 1CD682D7 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001751B
ImageSize: 0001B000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: monitor.sys
OriginalFilename: monitor.sys
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: Monitor Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`44310000 fffff800`44322000 dptf_cpu (deferred)
Image path: \SystemRoot\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_4a3ae74cfa6c37d6\dptf_cpu.sys
Image name: dptf_cpu.sys
Browse all global symbols functions data
Timestamp: Sat Jun 15 03:55:38 2019 (5D04420A)
CheckSum: 000207A5
ImageSize: 00012000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`44330000 fffff800`44395000 esif_lf (deferred)
Image path: \SystemRoot\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_4a3ae74cfa6c37d6\esif_lf.sys
Image name: esif_lf.sys
Browse all global symbols functions data
Timestamp: Sat Jun 15 03:55:57 2019 (5D04421D)
CheckSum: 0006E1F6
ImageSize: 00065000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`443a0000 fffff800`443f4000 WUDFRd (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\WUDFRd.sys\8B909C0C54000\WUDFRd.sys
Image path: \SystemRoot\System32\drivers\WUDFRd.sys
Image name: WUDFRd.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 8B909C0C (This is a reproducible build file hash, not a timestamp)
CheckSum: 00051EBB
ImageSize: 00054000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: WUDFRd.sys
OriginalFilename: WUDFRd.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Windows Driver Foundation - User-mode Driver Framework Reflector
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`44400000 fffff800`44429000 luafv (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\luafv.sys\86E5647D29000\luafv.sys
Image path: \SystemRoot\system32\drivers\luafv.sys
Image name: luafv.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 86E5647D (This is a reproducible build file hash, not a timestamp)
CheckSum: 000296E7
ImageSize: 00029000
File version: 10.0.19041.870
Product version: 10.0.19041.870
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: luafv.sys
OriginalFilename: luafv.sys
ProductVersion: 10.0.19041.870
FileVersion: 10.0.19041.870 (WinBuild.160101.0800)
FileDescription: LUA File Virtualization Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`44430000 fffff800`44466000 wcifs (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\wcifs.sys\0305302A36000\wcifs.sys
Image path: \SystemRoot\system32\drivers\wcifs.sys
Image name: wcifs.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 0305302A (This is a reproducible build file hash, not a timestamp)
CheckSum: 00036497
ImageSize: 00036000
File version: 10.0.19041.870
Product version: 10.0.19041.870
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: wcifs.sys
OriginalFilename: wcifs.sys
ProductVersion: 10.0.19041.870
FileVersion: 10.0.19041.870 (WinBuild.160101.0800)
FileDescription: Windows Container Isolation FS Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`44470000 fffff800`444f1000 cldflt (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\cldflt.sys\3AFBA8E181000\cldflt.sys
Image path: \SystemRoot\system32\drivers\cldflt.sys
Image name: cldflt.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 3AFBA8E1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000832B9
ImageSize: 00081000
File version: 10.0.19041.870
Product version: 10.0.19041.870
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: cldflt.sys
OriginalFilename: cldflt.sys
ProductVersion: 10.0.19041.870
FileVersion: 10.0.19041.870 (WinBuild.160101.0800)
FileDescription: Cloud Files Mini Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`44500000 fffff800`4450e000 WpdUpFltr (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\WpdUpFltr.sys\0C54C5DEe000\WpdUpFltr.sys
Image path: \SystemRoot\System32\drivers\WpdUpFltr.sys
Image name: WpdUpFltr.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 0C54C5DE (This is a reproducible build file hash, not a timestamp)
CheckSum: 000147AE
ImageSize: 0000E000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.0 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: WpdUpFltr.sys
OriginalFilename: WpdUpFltr.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Windows Portable Device Upper Class Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`44510000 fffff800`4452a000 storqosflt (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\storqosflt.sys\461A811E1a000\storqosflt.sys
Image path: \SystemRoot\system32\drivers\storqosflt.sys
Image name: storqosflt.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 461A811E (This is a reproducible build file hash, not a timestamp)
CheckSum: 00025AFB
ImageSize: 0001A000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: storqosflt.sys
OriginalFilename: storqosflt.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Storage QoS Filter
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`44530000 fffff800`44558000 bindflt (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\bindflt.sys\1FAAC0FF28000\bindflt.sys
Image path: \SystemRoot\system32\drivers\bindflt.sys
Image name: bindflt.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 1FAAC0FF (This is a reproducible build file hash, not a timestamp)
CheckSum: 00029733
ImageSize: 00028000
File version: 10.0.19041.870
Product version: 10.0.19041.870
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: bindflt.sys
OriginalFilename: bindflt.sys
ProductVersion: 10.0.19041.870
FileVersion: 10.0.19041.870 (WinBuild.160101.0800)
FileDescription: Windows Bind Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`44560000 fffff800`44578000 lltdio (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\lltdio.sys\D4D91B5718000\lltdio.sys
Image path: \SystemRoot\system32\drivers\lltdio.sys
Image name: lltdio.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: D4D91B57 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00012B46
ImageSize: 00018000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: LLTDIO.SYS
OriginalFilename: LLTDIO.SYS
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Link-Layer Topology Mapper I/O Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`44580000 fffff800`44598000 mslldp (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mslldp.sys\71FCC6F418000\mslldp.sys
Image path: \SystemRoot\system32\drivers\mslldp.sys
Image name: mslldp.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 71FCC6F4 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00016923
ImageSize: 00018000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: MSLLDP.SYS
OriginalFilename: MSLLDP.SYS
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Microsoft Link-Layer Discovery Protocol Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`445a0000 fffff800`445bb000 rspndr (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\rspndr.sys\9E43BCCD1b000\rspndr.sys
Image path: \SystemRoot\system32\drivers\rspndr.sys
Image name: rspndr.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 9E43BCCD (This is a reproducible build file hash, not a timestamp)
CheckSum: 000194E8
ImageSize: 0001B000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: RSPNDR.SYS
OriginalFilename: RSPNDR.SYS
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Link-Layer Topology Responder Driver for NDIS 6
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`445c0000 fffff800`445dd000 wanarp (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\wanarp.sys\2A5176811d000\wanarp.sys
Image path: \SystemRoot\System32\DRIVERS\wanarp.sys
Image name: wanarp.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 2A517681 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000267C2
ImageSize: 0001D000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: WANARP.SYS
OriginalFilename: WANARP.SYS
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: MS Remote Access and Routing ARP Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`445e0000 fffff800`4469b000 nwifi (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\nwifi.sys\36E1E998bb000\nwifi.sys
Image path: \SystemRoot\system32\DRIVERS\nwifi.sys
Image name: nwifi.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 36E1E998 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000C3C7E
ImageSize: 000BB000
File version: 10.0.19041.870
Product version: 10.0.19041.870
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: NWiFi.SYS
OriginalFilename: NWiFi.SYS
ProductVersion: 10.0.19041.870
FileVersion: 10.0.19041.870 (WinBuild.160101.0800)
FileDescription: NativeWiFi Miniport Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`446a0000 fffff800`446b8000 ndisuio (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ndisuio.sys\4739676018000\ndisuio.sys
Image path: \SystemRoot\system32\drivers\ndisuio.sys
Image name: ndisuio.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 47396760 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00016611
ImageSize: 00018000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: NDISUIO.SYS
OriginalFilename: NDISUIO.SYS
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: NDIS User mode I/O driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`446c0000 fffff800`44716000 msquic (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\msquic.sys\DE68830356000\msquic.sys
Image path: \SystemRoot\system32\drivers\msquic.sys
Image name: msquic.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: DE688303 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0005615F
ImageSize: 00056000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: msquic.sys
OriginalFilename: msquic.sys
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: Windows QUIC Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`44720000 fffff800`44771000 usbvideo (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\usbvideo.sys\A883ED4E51000\usbvideo.sys
Image path: \SystemRoot\System32\Drivers\usbvideo.sys
Image name: usbvideo.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: A883ED4E (This is a reproducible build file hash, not a timestamp)
CheckSum: 0004E5FB
ImageSize: 00051000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.0 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: usbvideo.sys
OriginalFilename: usbvideo.sys
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: USB Video Class Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`447d0000 fffff800`44873000 UsbHub3 (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\UsbHub3.sys\FDA30E83a3000\UsbHub3.sys
Image path: \SystemRoot\System32\drivers\UsbHub3.sys
Image name: UsbHub3.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: FDA30E83 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000AC346
ImageSize: 000A3000
File version: 10.0.19041.264
Product version: 10.0.19041.264
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: usbhub3.sys
OriginalFilename: usbhub3.sys
ProductVersion: 10.0.19041.264
FileVersion: 10.0.19041.264 (WinBuild.160101.0800)
FileDescription: USB3 HUB Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`44880000 fffff800`448eb000 exfat (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\exfat.SYS\879694BE6b000\exfat.SYS
Image path: \SystemRoot\System32\Drivers\exfat.SYS
Image name: exfat.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 879694BE (This is a reproducible build file hash, not a timestamp)
CheckSum: 0006D09A
ImageSize: 0006B000
File version: 10.0.19041.208
Product version: 10.0.19041.208
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: exFAT.sys
OriginalFilename: exFAT.Sys
ProductVersion: 10.0.19041.208
FileVersion: 10.0.19041.208 (WinBuild.160101.0800)
FileDescription: Microsoft Extended FAT File System
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`448f0000 fffff800`44922000 dump_storahci (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\storahci.sys\8528F23B32000\storahci.sys
Image path: \SystemRoot\System32\drivers\dump_storahci.sys
Image name: dump_storahci.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 8528F23B (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002E91D
ImageSize: 00032000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: storahci.sys
OriginalFilename: storahci.sys
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: MS AHCI Storport Miniport Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`44930000 fffff800`4494d000 dump_dumpfve (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\dumpfve.sys\C53FE97F1d000\dumpfve.sys
Image path: \SystemRoot\System32\Drivers\dump_dumpfve.sys
Image name: dump_dumpfve.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: C53FE97F (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001C47E
ImageSize: 0001D000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: dumpfve.sys
OriginalFilename: dumpfve.sys
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: Bitlocker Drive Encryption Crashdump Filter
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`45200000 fffff800`45385000 BTHport (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\BTHport.sys\D87986E5185000\BTHport.sys
Image path: \SystemRoot\System32\drivers\BTHport.sys
Image name: BTHport.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: D87986E5 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00186723
ImageSize: 00185000
File version: 10.0.19041.868
Product version: 10.0.19041.868
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: bthport.sys
OriginalFilename: bthport.sys
ProductVersion: 10.0.19041.868
FileVersion: 10.0.19041.868 (WinBuild.160101.0800)
FileDescription: Bluetooth Bus Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`45390000 fffff800`453a2000 hidusb (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\hidusb.sys\1B0E634F12000\hidusb.sys
Image path: \SystemRoot\System32\drivers\hidusb.sys
Image name: hidusb.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 1B0E634F (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000F3FD
ImageSize: 00012000
File version: 10.0.19041.870
Product version: 10.0.19041.870
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: HIDUSB.SYS
OriginalFilename: HIDUSB.SYS
ProductVersion: 10.0.19041.870
FileVersion: 10.0.19041.870 (WinBuild.160101.0800)
FileDescription: USB Miniport Driver for Input Devices
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`453b0000 fffff800`453c0000 mouhid (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mouhid.sys\E502FBD910000\mouhid.sys
Image path: \SystemRoot\System32\drivers\mouhid.sys
Image name: mouhid.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: E502FBD9 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000173E5
ImageSize: 00010000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: mouhid.sys
OriginalFilename: mouhid.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: HID Mouse Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`453d0000 fffff800`453e1000 kbdhid (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\kbdhid.sys\DF2550C211000\kbdhid.sys
Image path: \SystemRoot\System32\drivers\kbdhid.sys
Image name: kbdhid.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: DF2550C2 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001A910
ImageSize: 00011000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: kbdhid.sys
OriginalFilename: kbdhid.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: HID Keyboard Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`453f0000 fffff800`4542d000 rfcomm (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\rfcomm.sys\F3616FE93d000\rfcomm.sys
Image path: \SystemRoot\System32\drivers\rfcomm.sys
Image name: rfcomm.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: F3616FE9 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0003783A
ImageSize: 0003D000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: rfcomm.sys
OriginalFilename: rfcomm.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Bluetooth RFCOMM Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`45430000 fffff800`45452000 BthEnum (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\BthEnum.sys\AE07C87322000\BthEnum.sys
Image path: \SystemRoot\System32\drivers\BthEnum.sys
Image name: BthEnum.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: AE07C873 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001D370
ImageSize: 00022000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: bthenum.SYS
OriginalFilename: bthenum.SYS
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: Bluetooth Bus Extender
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`45460000 fffff800`45486000 bthpan (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\bthpan.sys\DC7BFA3426000\bthpan.sys
Image path: \SystemRoot\System32\drivers\bthpan.sys
Image name: bthpan.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: DC7BFA34 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0003053B
ImageSize: 00026000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: bthpan.sys
OriginalFilename: bthpan.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Bluetooth Personal Area Networking
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`45490000 fffff800`454b1000 Microsoft_Bluetooth_Legacy_LEEnumerator (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\Microsoft.Bluetooth.Legacy.LEEnumerator.sys\EDE45F3721000\Microsoft.Bluetooth.Legacy.LEEnumerator.sys
Image path: \SystemRoot\System32\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys
Image name: Microsoft.Bluetooth.Legacy.LEEnumerator.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: EDE45F37 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001B407
ImageSize: 00021000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: Microsoft.Bluetooth.Legacy.LEEnumerator.SYS
OriginalFilename: Microsoft.Bluetooth.Legacy.LEEnumerator.SYS
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: Legacy Bluetooth LE Bus Enumerator
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`454d0000 fffff800`454de000 dump_diskdump (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\diskdump.sys\95F39C8Ae000\diskdump.sys
Image path: \SystemRoot\System32\Drivers\dump_diskdump.sys
Image name: dump_diskdump.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 95F39C8A (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000B16B
ImageSize: 0000E000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: diskdump.sys
OriginalFilename: diskdump.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Crash Dump Disk Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`454e0000 fffff800`45c12000 RTKVHD64 (deferred)
Image path: \SystemRoot\system32\drivers\RTKVHD64.sys
Image name: RTKVHD64.sys
Browse all global symbols functions data
Timestamp: Wed Apr 22 12:45:12 2020 (5EA01228)
CheckSum: 007034C3
ImageSize: 00732000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`45c20000 fffff800`45c45000 USBSTOR (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\USBSTOR.SYS\356F974B25000\USBSTOR.SYS
Image path: \SystemRoot\System32\drivers\USBSTOR.SYS
Image name: USBSTOR.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 356F974B (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002B01F
ImageSize: 00025000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: usbstor.sys
OriginalFilename: usbstor.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: USB Mass Storage Class Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`45c50000 fffff800`45c83000 usbccgp (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\usbccgp.sys\6ADA60BC33000\usbccgp.sys
Image path: \SystemRoot\System32\drivers\usbccgp.sys
Image name: usbccgp.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 6ADA60BC (This is a reproducible build file hash, not a timestamp)
CheckSum: 000363E2
ImageSize: 00033000
File version: 10.0.19041.488
Product version: 10.0.19041.488
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: USBCCGP.SYS
OriginalFilename: USBCCGP.SYS
ProductVersion: 10.0.19041.488
FileVersion: 10.0.19041.488 (WinBuild.160101.0800)
FileDescription: USB Common Class Generic Parent Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`45c90000 fffff800`45d60000 RtkBtfilter (deferred)
Image path: \SystemRoot\System32\drivers\RtkBtfilter.sys
Image name: RtkBtfilter.sys
Browse all global symbols functions data
Timestamp: Fri May 22 10:44:51 2020 (5EC782F3)
CheckSum: 000CC9B4
ImageSize: 000D0000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`45d70000 fffff800`45d91000 BTHUSB (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\BTHUSB.sys\BD0A8AB121000\BTHUSB.sys
Image path: \SystemRoot\System32\drivers\BTHUSB.sys
Image name: BTHUSB.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: BD0A8AB1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002A2FE
ImageSize: 00021000
File version: 10.0.19041.867
Product version: 10.0.19041.867
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: bthusb.sys
OriginalFilename: bthusb.sys
ProductVersion: 10.0.19041.867
FileVersion: 10.0.19041.867 (WinBuild.160101.0800)
FileDescription: Bluetooth Miniport Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
Unloaded modules:
fffff800`2bb50000 fffff800`2bb5d000 MSPQM.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000D000
fffff800`2bb30000 fffff800`2bb3d000 MSPQM.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000D000
fffff800`2bb40000 fffff800`2bb4d000 MSPCLOCK.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000D000
fffff800`2bb20000 fffff800`2bb2d000 MSPQM.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000D000
fffff800`2bad0000 fffff800`2badd000 MSPQM.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000D000
fffff800`2baf0000 fffff800`2bafd000 MSPCLOCK.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000D000
fffff800`2bb00000 fffff800`2bb11000 MSKSSRV.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00011000
fffff800`2bae0000 fffff800`2baed000 MSPCLOCK.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000D000
fffff800`2ba60000 fffff800`2ba6f000 hiber_storpo
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000F000
fffff800`2ba70000 fffff800`2baa3000 hiber_storah
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00033000
fffff800`2bab0000 fffff800`2bace000 hiber_dumpfv
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0001E000
fffff800`2c5e0000 fffff800`2c5ef000 hiber_storpo
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000F000
fffff800`2ba00000 fffff800`2ba33000 hiber_storah
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00033000
fffff800`2ba40000 fffff800`2ba5e000 hiber_dumpfv
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0001E000
fffff800`2c5c0000 fffff800`2c5d1000 MSKSSRV.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00011000
fffff800`297e0000 fffff800`297fd000 MpKslDrv.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0001D000
fffff800`2c5a0000 fffff800`2c5b1000 MSKSSRV.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00011000
fffff800`2c510000 fffff800`2c59c000 UniSafe.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0008C000
fffff800`44950000 fffff800`449dc000 UniSafe.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0008C000
fffff800`29800000 fffff800`29811000 MSKSSRV.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00011000
fffff800`29820000 fffff800`2982d000 MSPQM.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000D000
fffff800`29830000 fffff800`29841000 MSKSSRV.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00011000
fffff800`29810000 fffff800`2981d000 MSPCLOCK.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000D000
fffff800`29800000 fffff800`2980d000 MSPQM.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000D000
fffff800`29840000 fffff800`2984d000 MSPCLOCK.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000D000
fffff800`29830000 fffff800`2983d000 MSPQM.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000D000
fffff800`29810000 fffff800`29821000 MSKSSRV.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00011000
fffff800`29800000 fffff800`2980c000 WdmCompanion
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000C000
fffff800`44160000 fffff800`441d8000 IntcDAud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00078000
fffff800`421a0000 fffff800`421af000 dump_storpor
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000F000
fffff800`41600000 fffff800`41633000 dump_storahc
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00033000
fffff800`41660000 fffff800`4167e000 dump_dumpfve
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0001E000
fffff800`2f1f0000 fffff800`2f20d000 EhStorClass.
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0001D000
fffff800`44180000 fffff800`441e6000 esif_lf.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00066000
fffff800`44160000 fffff800`44173000 dptf_cpu.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00013000
fffff800`42a00000 fffff800`42a55000 WUDFRd.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00055000
fffff800`41f80000 fffff800`41f9c000 dam.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0001C000
fffff800`2ee00000 fffff800`2ee12000 WdBoot.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00012000
fffff800`2fdd0000 fffff800`2fde1000 hwpolicy.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00011000
