suatözer
Zeptopat
- Katılım
- 8 Nisan 2025
- Mesajlar
- 1
Daha fazla
- Cinsiyet
- Erkek
- RAM
- 6GB (2x8GB) DDR4 1.2V 2933MHz SODIMM
- SSD veya HDD modeli
- 512GB SAMSUNG PM981a M.2 SSD PCIe 3.0 x4 (Okuma: 3
- Ekran kartı
- nVIDIA® GeForce® GTX1650 Ti 4GB GDDR6 128-Bit DX12
- İşlemci
- Intel® Comet Lake Core™ i7-10750H 6C/12T; 12MB L3;
Format atmama rağmen sıklığı birazcık azalsa da hala devam ediyor. Elimde maalesef bir tane minidump dosyası var. Diğer mavi ekranlarda %100 olmadan ya direkt geçiyor ya da %0 da kalıyordu. Aldığım hata genellikle critical process died hatası. Bilgisayarım laptop.
************* Preparing the environment for Debugger Extensions Gallery repositories **************
ExtensionRepository : Implicit
UseExperimentalFeatureForNugetShare : true
AllowNugetExeUpdate : true
NonInteractiveNuget : true
AllowNugetMSCredentialProviderInstall : true
AllowParallelInitializationOfLocalRepositories : true
EnableRedirectToChakraJsProvider : false
-- Configuring repositories
----> Repository : LocalInstalled, Enabled: true
----> Repository : UserExtensions, Enabled: true
************* Waiting for Debugger Extensions Gallery to Initialize **************
----> Repository : LocalInstalled, Enabled: true, Packages count: 43
Microsoft (R) Windows Debugger Version 10.0.27793.1000 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Windows\Minidumps\040825-6875-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 19041 MP (12 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Kernel base = 0xfffff805`76a00000 PsLoadedModuleList = 0xfffff805`7762a350
Debug session time: Tue Apr 8 23:36:08.883 2025 (UTC + 3:00)
System Uptime: 0 days 1:31:09.685
Loading Kernel Symbols
...............................................................
................................................................
................................................................
.............
Loading User Symbols
Loading unloaded module list
.............
For analysis of this file, run !analyze -v
nt!KeBugCheckEx:
fffff805`76dfdf30 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:ffffd603`b9a07840=00000000000000ef
8: kd> !analyze -v
*******************************************************************************
CRITICAL_PROCESS_DIED (ef)
A critical system process died
Arguments:
Arg1: ffffb10c40b87140, Process object or thread object
Arg2: 0000000000000000, If this is 0, a process died. If this is 1, a thread died.
Arg3: 0000000000000000, The process object that initiated the termination.
Arg4: 0000000000000000
Debugging Details:
------------------
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 2093
Key : Analysis.Elapsed.mSec
Value: 7365
Key : Analysis.IO.Other.Mb
Value: 18
Key : Analysis.IO.Read.Mb
Value: 1
Key : Analysis.IO.Write.Mb
Value: 22
Key : Analysis.Init.CPU.mSec
Value: 375
Key : Analysis.Init.Elapsed.mSec
Value: 14933
Key : Analysis.Memory.CommitPeak.Mb
Value: 89
Key : Analysis.Version.DbgEng
Value: 10.0.27793.1000
Key : Analysis.Version.Description
Value: 10.2410.02.02 amd64fre
Key : Analysis.Version.Ext
Value: 1.2410.2.2
Key : Bugcheck.Code.LegacyAPI
Value: 0xef
Key : Bugcheck.Code.TargetModel
Value: 0xef
Key : CriticalProcessDied.ExceptionCode
Value: 0x403ac080
Key : CriticalProcessDied.ImageName
Value: ntdll.dll
Key : CriticalProcessDied.ImageOffset
Value: 0xa144a
Key : CriticalProcessDied.ImageSize
Value: 0x1f8000
Key : CriticalProcessDied.ImageTimestamp
Value: 0xab0dece3
Key : CriticalProcessDied.Process
Value: csrss.exe
Key : CriticalProcessDied.Symbol
Value: ntdll.dll!KiRaiseUserExceptionDispatcher
Key : CriticalProcessDied.WERReportId
Value: d88c0314-ec8f-47b2-95f0-c745012ef165
Key : Dump.Attributes.AsUlong
Value: 0x8
Key : Dump.Attributes.KernelGeneratedTriageDump
Value: 1
Key : Failure.Bucket
Value: 0xEF_csrss.exe_BUGCHECK_CRITICAL_PROCESS_403ac080_ntdll.dll!KiRaiseUserExceptionDispatcher_IMAGE_ntdll.dll
Key : Failure.Hash
Value: {0e0805cc-5ba1-010b-f72a-2afd8a83c2b1}
BUGCHECK_CODE: ef
BUGCHECK_P1: ffffb10c40b87140
BUGCHECK_P2: 0
BUGCHECK_P3: 0
BUGCHECK_P4: 0
FILE_IN_CAB: 040825-6875-01.dmp
DUMP_FILE_ATTRIBUTES: 0x8
Kernel Generated Triage Dump
FAULTING_THREAD: ffffb10c403ac080
PROCESS_NAME: csrss.exe
CRITICAL_PROCESS: csrss.exe
ERROR_CODE: (NTSTATUS) 0x403ac080 - <Unable to get error code text>
CRITICAL_PROCESS_REPORTGUID: {d88c0314-ec8f-47b2-95f0-c745012ef165}
IMAGE_NAME: ntdll.dll
MODULE_NAME: ntdll
FAULTING_MODULE: 0000000000000000
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
STACK_TEXT:
ffffd603`b9a07838 fffff805`7730bd52 : 00000000`000000ef ffffb10c`40b87140 00000000`00000000 00000000`00000000 : nt!KeBugCheckEx
ffffd603`b9a07840 fffff805`77248fb1 : ffffb10c`40b87140 00000000`00000000 00000000`00000002 fffff805`76d5e62f : nt!PspCatchCriticalBreak+0x10e
ffffd603`b9a078e0 fffff805`7710a0f0 : ffffb10c`00000000 00000000`00000000 ffffb10c`40b87140 ffffb10c`40b87578 : nt!PspTerminateAllThreads+0x13ec21
ffffd603`b9a07950 fffff805`77109eec : ffffb10c`40b87140 00000000`00000000 00000000`00000000 ffffb10c`43c16080 : nt!PspTerminateProcess+0xe0
ffffd603`b9a07990 fffff805`76e11f05 : ffffb10c`40b87140 ffffb10c`403ac080 ffffd603`b9a07a80 ffffffff`ee1e5d00 : nt!NtTerminateProcess+0x9c
ffffd603`b9a07a00 00007ffe`f83cda74 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x25
000000ce`539be398 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffe`f83cda74
STACK_COMMAND: .process /r /p 0xffffb10c40b87140; .thread 0xffffb10c403ac080 ; kb
FAILURE_BUCKET_ID: 0xEF_csrss.exe_BUGCHECK_CRITICAL_PROCESS_403ac080_ntdll.dll!KiRaiseUserExceptionDispatcher_IMAGE_ntdll.dll
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {0e0805cc-5ba1-010b-f72a-2afd8a83c2b1}
Followup: MachineOwner
---------
8: kd> lmvm ntdll
Browse full module list
start end module name
8: kd> lmvm ntdll
Browse full module list
start end module name
8: kd> lmvm ntdll
Browse full module list
start end module name
8: kd> lmDv
start end module name
fffff640`f8c00000 fffff640`f8ed7000 win32kbase (export symbols) win32kbase.sys
Loaded symbol image file: win32kbase.sys
Mapped memory image file: C:\Windows\system32\win32kbase.sys
Image path: win32kbase.sys
Image name: win32kbase.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: B5BF63EA (This is a reproducible build file hash, not a timestamp)
CheckSum: 002CF6CB
ImageSize: 002D7000
File version: 10.0.19041.5737
Product version: 10.0.19041.5737
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: win32kbase.sys
OriginalFilename: win32kbase.sys
ProductVersion: 10.0.19041.5737
FileVersion: 10.0.19041.5737 (WinBuild.160101.0800)
FileDescription: Base Win32k Kernel Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff640`f8ee0000 fffff640`f9294000 win32kfull (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\win32kfull.sys\9E98247F3b4000\win32kfull.sys
Image path: win32kfull.sys
Image name: win32kfull.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 9E98247F (This is a reproducible build file hash, not a timestamp)
CheckSum: 003A9F42
ImageSize: 003B4000
File version: 10.0.19041.5737
Product version: 10.0.19041.5737
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: win32kfull.sys
OriginalFilename: win32kfull.sys
ProductVersion: 10.0.19041.5737
FileVersion: 10.0.19041.5737 (WinBuild.160101.0800)
FileDescription: Full/Desktop Win32k Kernel Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff640`f92a0000 fffff640`f92e9000 cdd (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\cdd.dll\24CC8D6A49000\cdd.dll
Image path: cdd.dll
Image name: cdd.dll
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 24CC8D6A (This is a reproducible build file hash, not a timestamp)
CheckSum: 00042CFB
ImageSize: 00049000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.4 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: cdd.dll
OriginalFilename: cdd.dll
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: Canonical Display Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff640`f96e0000 fffff640`f977b000 win32k (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\win32k.sys\5FE1BAE19b000\win32k.sys
Image path: win32k.sys
Image name: win32k.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 5FE1BAE1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000A0191
ImageSize: 0009B000
File version: 10.0.19041.5728
Product version: 10.0.19041.5728
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: win32k.sys
OriginalFilename: win32k.sys
ProductVersion: 10.0.19041.5728
FileVersion: 10.0.19041.5728 (WinBuild.160101.0800)
FileDescription: Multi-User Win32 Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`75400000 fffff805`75437000 wcifs (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\wcifs.sys\920F9C1237000\wcifs.sys
Image path: wcifs.sys
Image name: wcifs.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 920F9C12 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00035059
ImageSize: 00037000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: wcifs.sys
OriginalFilename: wcifs.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: Windows Container Isolation FS Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`75440000 fffff805`75454000 mmcss (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mmcss.sys\F38AC30C14000\mmcss.sys
Image path: mmcss.sys
Image name: mmcss.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: F38AC30C (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001084B
ImageSize: 00014000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: mmcss.sys
OriginalFilename: mmcss.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: MMCSS Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`75460000 fffff805`754e2000 cldflt (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\cldflt.sys\860AC2D282000\cldflt.sys
Image path: cldflt.sys
Image name: cldflt.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 860AC2D2 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000845F5
ImageSize: 00082000
File version: 10.0.19041.5723
Product version: 10.0.19041.5723
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: cldflt.sys
OriginalFilename: cldflt.sys
ProductVersion: 10.0.19041.5723
FileVersion: 10.0.19041.5723 (WinBuild.160101.0800)
FileDescription: Cloud Files Mini Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`754f0000 fffff805`7550a000 storqosflt (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\storqosflt.sys\4C7271B11a000\storqosflt.sys
Image path: storqosflt.sys
Image name: storqosflt.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 4C7271B1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00018711
ImageSize: 0001A000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: storqosflt.sys
OriginalFilename: storqosflt.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: Storage QoS Filter
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`75510000 fffff805`75537000 bindflt (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\bindflt.sys\E42350D727000\bindflt.sys
Image path: bindflt.sys
Image name: bindflt.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: E42350D7 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00030B16
ImageSize: 00027000
File version: 10.0.19041.5723
Product version: 10.0.19041.5723
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: bindflt.sys
OriginalFilename: bindflt.sys
ProductVersion: 10.0.19041.5723
FileVersion: 10.0.19041.5723 (WinBuild.160101.0800)
FileDescription: Windows Bind Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`75540000 fffff805`75558000 mslldp (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mslldp.sys\71FCC6F418000\mslldp.sys
Image path: mslldp.sys
Image name: mslldp.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 71FCC6F4 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00016923
ImageSize: 00018000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: MSLLDP.SYS
OriginalFilename: MSLLDP.SYS
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Microsoft Link-Layer Discovery Protocol Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`75560000 fffff805`75571000 MSKSSRV (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\MSKSSRV.sys\FB3FAFF911000\MSKSSRV.sys
Image path: MSKSSRV.sys
Image name: MSKSSRV.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: FB3FAFF9 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000C96D
ImageSize: 00011000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.9 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: mskssrv.sys
OriginalFilename: mskssrv.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: MS KS Server
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`75580000 fffff805`75598000 lltdio (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\lltdio.sys\D4D91B5718000\lltdio.sys
Image path: lltdio.sys
Image name: lltdio.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: D4D91B57 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00012B46
ImageSize: 00018000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: LLTDIO.SYS
OriginalFilename: LLTDIO.SYS
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Link-Layer Topology Mapper I/O Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`755a0000 fffff805`755bb000 rspndr (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\rspndr.sys\9E43BCCD1b000\rspndr.sys
Image path: rspndr.sys
Image name: rspndr.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 9E43BCCD (This is a reproducible build file hash, not a timestamp)
CheckSum: 000194E8
ImageSize: 0001B000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: RSPNDR.SYS
OriginalFilename: RSPNDR.SYS
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Link-Layer Topology Responder Driver for NDIS 6
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`755c0000 fffff805`755dd000 wanarp (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\wanarp.sys\1DB2DF211d000\wanarp.sys
Image path: wanarp.sys
Image name: wanarp.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 1DB2DF21 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00022120
ImageSize: 0001D000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: WANARP.SYS
OriginalFilename: WANARP.SYS
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: MS Remote Access and Routing ARP Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`755e0000 fffff805`7569f000 nwifi (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\nwifi.sys\26907978bf000\nwifi.sys
Image path: nwifi.sys
Image name: nwifi.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 26907978 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000C1948
ImageSize: 000BF000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: NWiFi.SYS
OriginalFilename: NWiFi.SYS
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: NativeWiFi Miniport Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`756a0000 fffff805`756b8000 ndisuio (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ndisuio.sys\4739676018000\ndisuio.sys
Image path: ndisuio.sys
Image name: ndisuio.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 47396760 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00016611
ImageSize: 00018000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: NDISUIO.SYS
OriginalFilename: NDISUIO.SYS
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: NDIS User mode I/O driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`756c0000 fffff805`75716000 msquic (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\msquic.sys\D21F4FFE56000\msquic.sys
Image path: msquic.sys
Image name: msquic.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: D21F4FFE (This is a reproducible build file hash, not a timestamp)
CheckSum: 0005B4D8
ImageSize: 00056000
File version: 10.0.19041.4046
Product version: 10.0.19041.4046
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: msquic.sys
OriginalFilename: msquic.sys
ProductVersion: 10.0.19041.4046
FileVersion: 10.0.19041.4046 (WinBuild.160101.0800)
FileDescription: Windows QUIC Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`75720000 fffff805`75732000 condrv (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\condrv.sys\232C8BF312000\condrv.sys
Image path: condrv.sys
Image name: condrv.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 232C8BF3 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00015AFE
ImageSize: 00012000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: condrv.sys
OriginalFilename: condrv.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: Console Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`75740000 fffff805`758c8000 HTTP (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\HTTP.sys\24432657188000\HTTP.sys
Image path: HTTP.sys
Image name: HTTP.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 24432657 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0019171E
ImageSize: 00188000
File version: 10.0.19041.5737
Product version: 10.0.19041.5737
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: http.sys
OriginalFilename: http.sys
ProductVersion: 10.0.19041.5737
FileVersion: 10.0.19041.5737 (WinBuild.160101.0800)
FileDescription: HTTP Protocol Stack
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`758d0000 fffff805`758f5000 bowser (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\bowser.sys\0C166E2525000\bowser.sys
Image path: bowser.sys
Image name: bowser.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 0C166E25 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002436D
ImageSize: 00025000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: browser.sys
OriginalFilename: browser.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: NT Lan Manager Datagram Receiver Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`75900000 fffff805`7591a000 mpsdrv (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mpsdrv.sys\0EBF3D281a000\mpsdrv.sys
Image path: mpsdrv.sys
Image name: mpsdrv.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 0EBF3D28 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00019727
ImageSize: 0001A000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: mpsdrv.sys
OriginalFilename: mpsdrv.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Microsoft Protection Service Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`75920000 fffff805`759b4000 mrxsmb (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mrxsmb.sys\F605F1C894000\mrxsmb.sys
Image path: mrxsmb.sys
Image name: mrxsmb.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: F605F1C8 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0009C73E
ImageSize: 00094000
File version: 10.0.19041.5723
Product version: 10.0.19041.5723
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: MRxSmb.sys
OriginalFilename: MRXSMB.Sys
ProductVersion: 10.0.19041.5723
FileVersion: 10.0.19041.5723 (WinBuild.160101.0800)
FileDescription: Windows NT SMB Minirdr
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`759c0000 fffff805`75a05000 mrxsmb20 (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mrxsmb20.sys\4E62B46145000\mrxsmb20.sys
Image path: mrxsmb20.sys
Image name: mrxsmb20.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 4E62B461 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000474D8
ImageSize: 00045000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: MRxSmb20.sys
OriginalFilename: MRXSMB20.Sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: Longhorn SMB 2.0 Redirector
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`75a10000 fffff805`75a17000 inpoutx64 (deferred)
Image path: inpoutx64.sys
Image name: inpoutx64.sys
Browse all global symbols functions data Symbol Reload
Timestamp: Sat Oct 18 02:01:16 2008 (48F9193C)
CheckSum: 00009319
ImageSize: 00007000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`75a20000 fffff805`75a76000 srvnet (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\srvnet.sys\80E74C4E56000\srvnet.sys
Image path: srvnet.sys
Image name: srvnet.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 80E74C4E (This is a reproducible build file hash, not a timestamp)
CheckSum: 000533E3
ImageSize: 00056000
File version: 10.0.19041.5737
Product version: 10.0.19041.5737
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: SRVNET.SYS
OriginalFilename: SRVNET.SYS
ProductVersion: 10.0.19041.5737
FileVersion: 10.0.19041.5737 (WinBuild.160101.0800)
FileDescription: Server Network driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`75a80000 fffff805`75aa7000 Ndu (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\Ndu.sys\ABC6C89427000\Ndu.sys
Image path: Ndu.sys
Image name: Ndu.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: ABC6C894 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000213E1
ImageSize: 00027000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ndu.sys
OriginalFilename: ndu.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Windows Network Data Usage Monitoring Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`75ab0000 fffff805`75b86000 peauth (deferred)
Image path: peauth.sys
Image name: peauth.sys
Browse all global symbols functions data Symbol Reload
Timestamp: ***** Invalid (9B507B6B)
CheckSum: 000D5394
ImageSize: 000D6000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`75b90000 fffff805`75ba5000 tcpipreg (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\tcpipreg.sys\1215789E15000\tcpipreg.sys
Image path: tcpipreg.sys
Image name: tcpipreg.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 1215789E (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001C618
ImageSize: 00015000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 1.0 App
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: tcpipreg.sys
OriginalFilename: tcpipreg.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: TCP/IP Registry Compatibility Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`75bb0000 fffff805`75bc3000 vwifimp (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\vwifimp.sys\B98A06FC13000\vwifimp.sys
Image path: vwifimp.sys
Image name: vwifimp.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: B98A06FC (This is a reproducible build file hash, not a timestamp)
CheckSum: 00018104
ImageSize: 00013000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: vwifimp.sys
OriginalFilename: vwifimp.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Virtual WiFi Miniport Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`75bd0000 fffff805`75c97000 srv2 (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\srv2.sys\A48B2EF5c7000\srv2.sys
Image path: srv2.sys
Image name: srv2.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: A48B2EF5 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000C537F
ImageSize: 000C7000
File version: 10.0.19041.5737
Product version: 10.0.19041.5737
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: SRV2.SYS
OriginalFilename: SRV2.SYS
ProductVersion: 10.0.19041.5737
FileVersion: 10.0.19041.5737 (WinBuild.160101.0800)
FileDescription: Smb 2.0 Server driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`75ca0000 fffff805`75cbd000 rassstp (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\rassstp.sys\F5AA47161d000\rassstp.sys
Image path: rassstp.sys
Image name: rassstp.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: F5AA4716 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001CE3C
ImageSize: 0001D000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: rassstp.sys
OriginalFilename: rassstp.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: RAS SSTP Miniport Call Manager
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`75cc0000 fffff805`75d9f000 dxgmms2 (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\dxgmms2.sys\A030B22Ddf000\dxgmms2.sys
Image path: dxgmms2.sys
Image name: dxgmms2.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: A030B22D (This is a reproducible build file hash, not a timestamp)
CheckSum: 000E19AA
ImageSize: 000DF000
File version: 10.0.19041.5723
Product version: 10.0.19041.5723
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: dxgmms2.sys
OriginalFilename: dxgmms2.sys
ProductVersion: 10.0.19041.5723
FileVersion: 10.0.19041.5723 (WinBuild.160101.0800)
FileDescription: DirectX Graphics MMS
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`75da0000 fffff805`75dbb000 monitor (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\monitor.sys\1F4DB7E61b000\monitor.sys
Image path: monitor.sys
Image name: monitor.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 1F4DB7E6 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000212F5
ImageSize: 0001B000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: monitor.sys
OriginalFilename: monitor.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: Monitor Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`75dc0000 fffff805`75deb000 luafv (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\luafv.sys\E4D257442b000\luafv.sys
Image path: luafv.sys
Image name: luafv.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: E4D25744 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00029401
ImageSize: 0002B000
File version: 10.0.19041.5737
Product version: 10.0.19041.5737
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: luafv.sys
OriginalFilename: luafv.sys
ProductVersion: 10.0.19041.5737
FileVersion: 10.0.19041.5737 (WinBuild.160101.0800)
FileDescription: LUA File Virtualization Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`75df0000 fffff805`75dff000 ndistapi (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ndistapi.sys\43660954f000\ndistapi.sys
Image path: ndistapi.sys
Image name: ndistapi.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 43660954 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001625B
ImageSize: 0000F000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: NDISTAPI.SYS
OriginalFilename: NDISTAPI.SYS
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: NDIS 3.0 connection wrapper driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`76280000 fffff805`7650f000 mcupdate (deferred)
Image path: mcupdate.dll
Image name: mcupdate.dll
Browse all global symbols functions data Symbol Reload
Timestamp: ***** Invalid (9FB1DE46)
CheckSum: 0028C60B
ImageSize: 0028F000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`76510000 fffff805`76516000 hal (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\hal.dll\1A7BE8E96000\hal.dll
Image path: hal.dll
Image name: hal.dll
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 1A7BE8E9 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000F67D
ImageSize: 00006000
File version: 10.0.19041.5000
Product version: 10.0.19041.5000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: hal.dll
OriginalFilename: hal.dll
ProductVersion: 10.0.19041.5000
FileVersion: 10.0.19041.5000 (WinBuild.160101.0800)
FileDescription: Hardware Abstraction Layer DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`76520000 fffff805`7652b000 kdcom (deferred)
Image path: kdcom.dll
Image name: kdcom.dll
Browse all global symbols functions data Symbol Reload
Timestamp: ***** Invalid (FE185FA8)
CheckSum: 00004EF6
ImageSize: 0000B000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`76530000 fffff805`76558000 tm (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\tm.sys\7B64427D28000\tm.sys
Image path: tm.sys
Image name: tm.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 7B64427D (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002FB51
ImageSize: 00028000
File version: 10.0.19041.5723
Product version: 10.0.19041.5723
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: tm.sys
OriginalFilename: tm.sys
ProductVersion: 10.0.19041.5723
FileVersion: 10.0.19041.5723 (WinBuild.160101.0800)
FileDescription: Kernel Transaction Manager Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`76560000 fffff805`765ce000 CLFS (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\CLFS.SYS\29D6C2FE6e000\CLFS.SYS
Image path: CLFS.SYS
Image name: CLFS.SYS
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 29D6C2FE (This is a reproducible build file hash, not a timestamp)
CheckSum: 0007027A
ImageSize: 0006E000
File version: 10.0.19041.5737
Product version: 10.0.19041.5737
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: clfs.sys
OriginalFilename: Clfs.Sys
ProductVersion: 10.0.19041.5737
FileVersion: 10.0.19041.5737 (WinBuild.160101.0800)
FileDescription: Common Log File System Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`765d0000 fffff805`765ea000 PSHED (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\PSHED.dll\4C55DC991a000\PSHED.dll
Image path: PSHED.dll
Image name: PSHED.dll
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 4C55DC99 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000201A9
ImageSize: 0001A000
File version: 10.0.19041.208
Product version: 10.0.19041.208
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: pshed.dll
OriginalFilename: pshed.dll
ProductVersion: 10.0.19041.208
FileVersion: 10.0.19041.208 (WinBuild.160101.0800)
FileDescription: Platform Specific Hardware Error Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`765f0000 fffff805`765fb000 BOOTVID (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\BOOTVID.dll\D13EE5B6b000\BOOTVID.dll
Image path: BOOTVID.dll
Image name: BOOTVID.dll
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: D13EE5B6 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00013A3C
ImageSize: 0000B000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.4 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: bootvid.dll
OriginalFilename: bootvid.dll
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: VGA Boot Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`76600000 fffff805`7666d000 FLTMGR (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\FLTMGR.SYS\FDF7A1166d000\FLTMGR.SYS
Image path: FLTMGR.SYS
Image name: FLTMGR.SYS
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: FDF7A116 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0006BAE7
ImageSize: 0006D000
File version: 10.0.19041.5723
Product version: 10.0.19041.5723
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: fltMgr.sys
OriginalFilename: fltMgr.sys
ProductVersion: 10.0.19041.5723
FileVersion: 10.0.19041.5723 (WinBuild.160101.0800)
FileDescription: Microsoft Filesystem Filter Manager
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`76670000 fffff805`7667c000 ntosext (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ntosext.sys\71DD3C9Fc000\ntosext.sys
Image path: ntosext.sys
Image name: ntosext.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 71DD3C9F (This is a reproducible build file hash, not a timestamp)
CheckSum: 00009677
ImageSize: 0000C000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ntosext.sys
OriginalFilename: ntosext.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: NTOS extension host driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`76a00000 fffff805`77a46000 nt (pdb symbols) C:\ProgramData\Dbg\sym\ntkrnlmp.pdb\1026DAEBB5D73E191F375C43DF91B3191\ntkrnlmp.pdb
Loaded symbol image file: ntkrnlmp.exe
Mapped memory image file: C:\ProgramData\Dbg\sym\ntkrnlmp.exe\7E6928801046000\ntkrnlmp.exe
Image path: ntkrnlmp.exe
Image name: ntkrnlmp.exe
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 7E692880 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00A5D289
ImageSize: 01046000
File version: 10.0.19041.5737
Product version: 10.0.19041.5737
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 1.0 App
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ntkrnlmp.exe
OriginalFilename: ntkrnlmp.exe
ProductVersion: 10.0.19041.5737
FileVersion: 10.0.19041.5737 (WinBuild.160101.0800)
FileDescription: NT Kernel & System
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7bc00000 fffff805`7bd17000 clipsp (deferred)
Image path: clipsp.sys
Image name: clipsp.sys
Browse all global symbols functions data Symbol Reload
Timestamp: Sun Apr 6 23:35:58 2025 (67F2E5AE)
CheckSum: 001143D8
ImageSize: 00117000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`7bd20000 fffff805`7bd4b000 ksecdd (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ksecdd.sys\894362472b000\ksecdd.sys
Image path: ksecdd.sys
Image name: ksecdd.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 89436247 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000274C7
ImageSize: 0002B000
File version: 10.0.19041.5723
Product version: 10.0.19041.5723
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ksecdd.sys
OriginalFilename: ksecdd.sys
ProductVersion: 10.0.19041.5723
FileVersion: 10.0.19041.5723 (WinBuild.160101.0800)
FileDescription: Kernel Security Support Provider Interface
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7bd50000 fffff805`7bdb2000 msrpc (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\msrpc.sys\D0523BB162000\msrpc.sys
Image path: msrpc.sys
Image name: msrpc.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: D0523BB1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000619EF
ImageSize: 00062000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: krpcdd.sys
OriginalFilename: krpcdd.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: Kernel Remote Procedure Call Provider
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7bdc0000 fffff805`7bdd1000 cmimcext (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\cmimcext.sys\B0D7A04211000\cmimcext.sys
Image path: cmimcext.sys
Image name: cmimcext.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: B0D7A042 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000BD57
ImageSize: 00011000
File version: 10.0.19041.5723
Product version: 10.0.19041.5723
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: cmimcext.sys
OriginalFilename: cmimcext.sys
ProductVersion: 10.0.19041.5723
FileVersion: 10.0.19041.5723 (WinBuild.160101.0800)
FileDescription: Kernel Configuration Manager Initial Configuration Extension Host Export Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7bde0000 fffff805`7bdf1000 werkernel (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\werkernel.sys\79433C0711000\werkernel.sys
Image path: werkernel.sys
Image name: werkernel.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 79433C07 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00017196
ImageSize: 00011000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: werkernel
OriginalFilename: werkernel.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: Windows Error Reporting Kernel Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7be00000 fffff805`7beec000 CI (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\CI.dll\BEE04F72ec000\CI.dll
Image path: CI.dll
Image name: CI.dll
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: BEE04F72 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000F3B19
ImageSize: 000EC000
File version: 10.0.19041.5723
Product version: 10.0.19041.5723
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ci.dll
OriginalFilename: ci.dll
ProductVersion: 10.0.19041.5723
FileVersion: 10.0.19041.5723 (WinBuild.160101.0800)
FileDescription: Code Integrity Module
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7bef0000 fffff805`7bfab000 cng (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\cng.sys\8AF25707bb000\cng.sys
Image path: cng.sys
Image name: cng.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 8AF25707 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000B8A74
ImageSize: 000BB000
File version: 10.0.19041.5737
Product version: 10.0.19041.5737
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: cng.sys
OriginalFilename: cng.sys
ProductVersion: 10.0.19041.5737
FileVersion: 10.0.19041.5737 (WinBuild.160101.0800)
FileDescription: Kernel Cryptography, Next Generation
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7bfb0000 fffff805`7c081000 Wdf01000 (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\Wdf01000.sys\0CAD54FFd1000\Wdf01000.sys
Image path: Wdf01000.sys
Image name: Wdf01000.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 0CAD54FF (This is a reproducible build file hash, not a timestamp)
CheckSum: 000D4544
ImageSize: 000D1000
File version: 1.31.19041.5678
Product version: 1.31.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: wdf01000.sys
OriginalFilename: wdf01000.sys
ProductVersion: 1.31.19041.5678
FileVersion: 1.31.19041.5678 (WinBuild.160101.0800)
FileDescription: Kernel Mode Driver Framework Runtime
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c090000 fffff805`7c0a3000 WDFLDR (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\WDFLDR.SYS\71C4355B13000\WDFLDR.SYS
Image path: WDFLDR.SYS
Image name: WDFLDR.SYS
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 71C4355B (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000F3D6
ImageSize: 00013000
File version: 1.31.19041.5607
Product version: 1.31.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: wdfldr.sys
OriginalFilename: wdfldr.sys
ProductVersion: 1.31.19041.5607
FileVersion: 1.31.19041.5607 (WinBuild.160101.0800)
FileDescription: Kernel Mode Driver Framework Loader
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c0b0000 fffff805`7c0bf000 SleepStudyHelper (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\SleepStudyHelper.sys\664F6ECBf000\SleepStudyHelper.sys
Image path: SleepStudyHelper.sys
Image name: SleepStudyHelper.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 664F6ECB (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000FC58
ImageSize: 0000F000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: SleepStudyHelper.sys
OriginalFilename: SleepStudyHelper.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Sleep Study Helper
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c0c0000 fffff805`7c0d1000 WppRecorder (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\WppRecorder.sys\15060D0011000\WppRecorder.sys
Image path: WppRecorder.sys
Image name: WppRecorder.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 15060D00 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001415E
ImageSize: 00011000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: WppRecorder.sys
OriginalFilename: WppRecorder.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: WPP Trace Recorder
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c0e0000 fffff805`7c106000 acpiex (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\acpiex.sys\C8D60B4426000\acpiex.sys
Image path: acpiex.sys
Image name: acpiex.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: C8D60B44 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000302D2
ImageSize: 00026000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: acpiex.sys
OriginalFilename: acpiex.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: ACPIEx Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c110000 fffff805`7c11e000 msseccore (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\msseccore.sys\C121C54Be000\msseccore.sys
Image path: msseccore.sys
Image name: msseccore.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: C121C54B (This is a reproducible build file hash, not a timestamp)
CheckSum: 000149BE
ImageSize: 0000E000
File version: 10.8792.19041.5678
Product version: 10.8792.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.0 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: msseccore
OriginalFilename: msseccore.sys
ProductVersion: 10.8792.19041.5678
FileVersion: 10.8792.19041.5678 (WinBuild.160101.0800)
FileDescription: Microsoft Security Core Boot Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c120000 fffff805`7c13a000 SgrmAgent (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\SgrmAgent.sys\A64747741a000\SgrmAgent.sys
Image path: SgrmAgent.sys
Image name: SgrmAgent.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: A6474774 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001E4FC
ImageSize: 0001A000
File version: 10.0.19041.208
Product version: 10.0.19041.208
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.0 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: SgrmAgent
OriginalFilename: SgrmAgent.sys
ProductVersion: 10.0.19041.208
FileVersion: 10.0.19041.208 (WinBuild.160101.0800)
FileDescription: System Guard Runtime Monitor Agent Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c140000 fffff805`7c20d000 ACPI (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ACPI.sys\A2E37420cd000\ACPI.sys
Image path: ACPI.sys
Image name: ACPI.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: A2E37420 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000C8746
ImageSize: 000CD000
File version: 10.0.19041.5723
Product version: 10.0.19041.5723
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ACPI.sys
OriginalFilename: ACPI.sys
ProductVersion: 10.0.19041.5723
FileVersion: 10.0.19041.5723 (WinBuild.160101.0800)
FileDescription: ACPI Driver for NT
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c210000 fffff805`7c21c000 WMILIB (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\WMILIB.SYS\CD518505c000\WMILIB.SYS
Image path: WMILIB.SYS
Image name: WMILIB.SYS
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: CD518505 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00009CB9
ImageSize: 0000C000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: WmiLib.sys
OriginalFilename: WmiLib.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: WMILIB WMI support library Dll
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c220000 fffff805`7c22b000 msisadrv (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\msisadrv.sys\BCF8C61Bb000\msisadrv.sys
Image path: msisadrv.sys
Image name: msisadrv.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: BCF8C61B (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000EA47
ImageSize: 0000B000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: msisadrv.sys
OriginalFilename: msisadrv.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: ISA Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c230000 fffff805`7c2a7000 pci (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\pci.sys\9477466177000\pci.sys
Image path: pci.sys
Image name: pci.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 94774661 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0007E626
ImageSize: 00077000
File version: 10.0.19041.5723
Product version: 10.0.19041.5723
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: pci.sys
OriginalFilename: pci.sys
ProductVersion: 10.0.19041.5723
FileVersion: 10.0.19041.5723 (WinBuild.160101.0800)
FileDescription: NT Plug and Play PCI Enumerator
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c2b0000 fffff805`7c2f5000 tpm (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\tpm.sys\F9E6ADB145000\tpm.sys
Image path: tpm.sys
Image name: tpm.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: F9E6ADB1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00043C9D
ImageSize: 00045000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: tpm.sys
OriginalFilename: tpm.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: TPM Device Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c310000 fffff805`7c37b000 intelpep (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\intelpep.sys\2F8E972D6b000\intelpep.sys
Image path: intelpep.sys
Image name: intelpep.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 2F8E972D (This is a reproducible build file hash, not a timestamp)
CheckSum: 00075850
ImageSize: 0006B000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.A Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: intelpep.sys
OriginalFilename: intelpep.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: Intel Power Engine Plugin
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c380000 fffff805`7c397000 WindowsTrustedRT (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\WindowsTrustedRT.sys\86ECAD9617000\WindowsTrustedRT.sys
Image path: WindowsTrustedRT.sys
Image name: WindowsTrustedRT.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 86ECAD96 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002232A
ImageSize: 00017000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: WindowsTrustedRT.sys
OriginalFilename: WindowsTrustedRT.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: Windows Trusted Runtime Interface Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c3a0000 fffff805`7c3ab000 IntelTA (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\IntelTA.sys\AAE76087b000\IntelTA.sys
Image path: IntelTA.sys
Image name: IntelTA.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: AAE76087 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001277C
ImageSize: 0000B000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.A Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: IntelTA.sys
OriginalFilename: IntelTA.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: Intel Telemetry Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c3b0000 fffff805`7c3bb000 WindowsTrustedRTProxy (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\WindowsTrustedRTProxy.sys\AA5F5790b000\WindowsTrustedRTProxy.sys
Image path: WindowsTrustedRTProxy.sys
Image name: WindowsTrustedRTProxy.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: AA5F5790 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00007869
ImageSize: 0000B000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: WindowsTrustedRTProxy.sys
OriginalFilename: WindowsTrustedRTProxy.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Windows Trusted Runtime Service Proxy Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c3c0000 fffff805`7c3d4000 pcw (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\pcw.sys\18BA8F2C14000\pcw.sys
Image path: pcw.sys
Image name: pcw.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 18BA8F2C (This is a reproducible build file hash, not a timestamp)
CheckSum: 00015BF3
ImageSize: 00014000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.8 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: pcw.sys
OriginalFilename: pcw.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: Performance Counters for Windows Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c3e0000 fffff805`7c3f5000 vdrvroot (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\vdrvroot.sys\E613EBA715000\vdrvroot.sys
Image path: vdrvroot.sys
Image name: vdrvroot.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: E613EBA7 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000184EC
ImageSize: 00015000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: vdrvroot.sys
OriginalFilename: vdrvroot.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Virtual Drive Root Enumerator
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c400000 fffff805`7c430000 pdc (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\pdc.sys\873338D730000\pdc.sys
Image path: pdc.sys
Image name: pdc.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 873338D7 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002FC5B
ImageSize: 00030000
File version: 10.0.19041.5737
Product version: 10.0.19041.5737
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: pdc.sys
OriginalFilename: pdc.sys
ProductVersion: 10.0.19041.5737
FileVersion: 10.0.19041.5737 (WinBuild.160101.0800)
FileDescription: Power Dependency Coordinator Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c440000 fffff805`7c459000 CEA (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\CEA.sys\1E985ACF19000\CEA.sys
Image path: CEA.sys
Image name: CEA.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 1E985ACF (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001CC15
ImageSize: 00019000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: EventAggregation.sys
OriginalFilename: EventAggregation.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: Event Aggregation Kernel Mode Library
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c460000 fffff805`7c491000 partmgr (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\partmgr.sys\00D367A931000\partmgr.sys
Image path: partmgr.sys
Image name: partmgr.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 00D367A9 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002F6C6
ImageSize: 00031000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: partmgr.sys
OriginalFilename: partmgr.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: Partition driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c4a0000 fffff805`7c54b000 spaceport (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\spaceport.sys\C2BC06AEab000\spaceport.sys
Image path: spaceport.sys
Image name: spaceport.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: C2BC06AE (This is a reproducible build file hash, not a timestamp)
CheckSum: 000A919A
ImageSize: 000AB000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: spaceport.sys
OriginalFilename: spaceport.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: Storage Spaces Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c550000 fffff805`7c569000 volmgr (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\volmgr.sys\59E4DD6619000\volmgr.sys
Image path: volmgr.sys
Image name: volmgr.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 59E4DD66 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001C845
ImageSize: 00019000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: volmgr.sys
OriginalFilename: volmgr.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: Volume Manager Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c570000 fffff805`7c5d3000 volmgrx (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\volmgrx.sys\5298D71763000\volmgrx.sys
Image path: volmgrx.sys
Image name: volmgrx.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 5298D717 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0006AB53
ImageSize: 00063000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: volmgrx.sys
OriginalFilename: volmgrx.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Volume Manager Extension Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c5e0000 fffff805`7c5fe000 mountmgr (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mountmgr.sys\6FA7424A1e000\mountmgr.sys
Image path: mountmgr.sys
Image name: mountmgr.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 6FA7424A (This is a reproducible build file hash, not a timestamp)
CheckSum: 00024BD0
ImageSize: 0001E000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: mountmgr.sys
OriginalFilename: mountmgr.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Mount Point Manager
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c600000 fffff805`7c632000 storahci (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\storahci.sys\6A1B92AB32000\storahci.sys
Image path: storahci.sys
Image name: storahci.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 6A1B92AB (This is a reproducible build file hash, not a timestamp)
CheckSum: 0003A8EE
ImageSize: 00032000
File version: 10.0.19041.5000
Product version: 10.0.19041.5000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: storahci.sys
OriginalFilename: storahci.sys
ProductVersion: 10.0.19041.5000
FileVersion: 10.0.19041.5000 (WinBuild.160101.0800)
FileDescription: MS AHCI Storport Miniport Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c640000 fffff805`7c6f5000 storport (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\storport.sys\FA8F65C0b5000\storport.sys
Image path: storport.sys
Image name: storport.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: FA8F65C0 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000BAF39
ImageSize: 000B5000
File version: 10.0.19041.5728
Product version: 10.0.19041.5728
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: storport.sys
OriginalFilename: storport.sys
ProductVersion: 10.0.19041.5728
FileVersion: 10.0.19041.5728 (WinBuild.160101.0800)
FileDescription: Microsoft Storage Port Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c700000 fffff805`7c72f000 stornvme (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\stornvme.sys\DC5977C32f000\stornvme.sys
Image path: stornvme.sys
Image name: stornvme.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: DC5977C3 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002A2BE
ImageSize: 0002F000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: stornvme.sys
OriginalFilename: stornvme.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: Microsoft NVM Express Storport Miniport Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c730000 fffff805`7c74c000 EhStorClass (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\EhStorClass.sys\A82A14A61c000\EhStorClass.sys
Image path: EhStorClass.sys
Image name: EhStorClass.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: A82A14A6 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00023B23
ImageSize: 0001C000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: EhStorClass.sys
OriginalFilename: EhStorClass.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: Enhanced Storage Class driver for IEEE 1667 devices
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c750000 fffff805`7c76a000 fileinfo (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\fileinfo.sys\AEE275C21a000\fileinfo.sys
Image path: fileinfo.sys
Image name: fileinfo.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: AEE275C2 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002169B
ImageSize: 0001A000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: FileInfo.sys
OriginalFilename: FileInfo.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: FileInfo Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c770000 fffff805`7c7b0000 Wof (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\Wof.sys\E21A4A5140000\Wof.sys
Image path: Wof.sys
Image name: Wof.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: E21A4A51 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00044059
ImageSize: 00040000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: wof.sys
OriginalFilename: wof.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: Windows Overlay Filter
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c7c0000 fffff805`7c854000 WdFilter (deferred)
Image path: WdFilter.sys
Image name: WdFilter.sys
Browse all global symbols functions data Symbol Reload
Timestamp: Wed Jun 16 02:49:27 1976 (0C24AE87)
CheckSum: 0009CB12
ImageSize: 00094000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`7c860000 fffff805`7cb37000 Ntfs (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\Ntfs.sys\6E374F792d7000\Ntfs.sys
Image path: Ntfs.sys
Image name: Ntfs.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 6E374F79 (This is a reproducible build file hash, not a timestamp)
CheckSum: 002BFB66
ImageSize: 002D7000
File version: 10.0.19041.5723
Product version: 10.0.19041.5723
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ntfs.sys
OriginalFilename: ntfs.sys
ProductVersion: 10.0.19041.5723
FileVersion: 10.0.19041.5723 (WinBuild.160101.0800)
FileDescription: NT File System Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7cb40000 fffff805`7cb4d000 Fs_Rec (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\Fs_Rec.sys\B9E5C55Cd000\Fs_Rec.sys
Image path: Fs_Rec.sys
Image name: Fs_Rec.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: B9E5C55C (This is a reproducible build file hash, not a timestamp)
CheckSum: 00017B4B
ImageSize: 0000D000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: fs_rec.sys
OriginalFilename: fs_rec.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: File System Recognizer Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7cb50000 fffff805`7ccbf000 ndis (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ndis.sys\0609217416f000\ndis.sys
Image path: ndis.sys
Image name: ndis.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 06092174 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0017372D
ImageSize: 0016F000
File version: 10.0.19041.5723
Product version: 10.0.19041.5723
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: NDIS.SYS
OriginalFilename: NDIS.SYS
ProductVersion: 10.0.19041.5723
FileVersion: 10.0.19041.5723 (WinBuild.160101.0800)
FileDescription: Network Driver Interface Specification (NDIS)
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7ccc0000 fffff805`7cd5c000 NETIO (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\NETIO.SYS\031E98DD9c000\NETIO.SYS
Image path: NETIO.SYS
Image name: NETIO.SYS
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 031E98DD (This is a reproducible build file hash, not a timestamp)
CheckSum: 0009DB8F
ImageSize: 0009C000
File version: 10.0.19041.5737
Product version: 10.0.19041.5737
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: netio.sys
OriginalFilename: netio.sys
ProductVersion: 10.0.19041.5737
FileVersion: 10.0.19041.5737 (WinBuild.160101.0800)
FileDescription: Network I/O Subsystem
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7cd60000 fffff805`7cd93000 ksecpkg (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ksecpkg.sys\20921FD133000\ksecpkg.sys
Image path: ksecpkg.sys
Image name: ksecpkg.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 20921FD1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00032116
ImageSize: 00033000
File version: 10.0.19041.5737
Product version: 10.0.19041.5737
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ksecpkg.sys
OriginalFilename: ksecpkg.sys
ProductVersion: 10.0.19041.5737
FileVersion: 10.0.19041.5737 (WinBuild.160101.0800)
FileDescription: Kernel Security Support Provider Interface Packages
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7cda0000 fffff805`7d08c000 tcpip (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\tcpip.sys\8B8953292ec000\tcpip.sys
Image path: tcpip.sys
Image name: tcpip.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 8B895329 (This is a reproducible build file hash, not a timestamp)
CheckSum: 002E478E
ImageSize: 002EC000
File version: 10.0.19041.5737
Product version: 10.0.19041.5737
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: tcpip.sys
OriginalFilename: tcpip.sys
ProductVersion: 10.0.19041.5737
FileVersion: 10.0.19041.5737 (WinBuild.160101.0800)
FileDescription: TCP/IP Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7d090000 fffff805`7d10f000 fwpkclnt (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\fwpkclnt.sys\9804843B7f000\fwpkclnt.sys
Image path: fwpkclnt.sys
Image name: fwpkclnt.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 9804843B (This is a reproducible build file hash, not a timestamp)
CheckSum: 0008A718
ImageSize: 0007F000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: fwpkclnt.sys
OriginalFilename: fwpkclnt.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: FWP/IPsec Kernel-Mode API
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7d110000 fffff805`7d140000 wfplwfs (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\wfplwfs.sys\D3E6445A30000\wfplwfs.sys
Image path: wfplwfs.sys
Image name: wfplwfs.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: D3E6445A (This is a reproducible build file hash, not a timestamp)
CheckSum: 0003A530
ImageSize: 00030000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: WFPLWFS.SYS
OriginalFilename: WFPLWFS.SYS
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: WFP NDIS 6.30 Lightweight Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7d150000 fffff805`7d21b000 fvevol (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\fvevol.sys\970452CFcb000\fvevol.sys
Image path: fvevol.sys
Image name: fvevol.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 970452CF (This is a reproducible build file hash, not a timestamp)
CheckSum: 000CB6CB
ImageSize: 000CB000
File version: 10.0.19041.5728
Product version: 10.0.19041.5728
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: FVEVOL.SYS
OriginalFilename: FVEVOL.SYS
ProductVersion: 10.0.19041.5728
FileVersion: 10.0.19041.5728 (WinBuild.160101.0800)
FileDescription: BitLocker Drive Encryption Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7d220000 fffff805`7d22b000 volume (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\volume.sys\83CF10C9b000\volume.sys
Image path: volume.sys
Image name: volume.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 83CF10C9 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000083D7
ImageSize: 0000B000
File version: 10.0.19041.1348
Product version: 10.0.19041.1348
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: volume.sys
OriginalFilename: volume.sys
ProductVersion: 10.0.19041.1348
FileVersion: 10.0.19041.1348 (WinBuild.160101.0800)
FileDescription: Volume driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7d230000 fffff805`7d29d000 volsnap (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\volsnap.sys\161F2CA46d000\volsnap.sys
Image path: volsnap.sys
Image name: volsnap.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 161F2CA4 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00076A66
ImageSize: 0006D000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: volsnap.sys
OriginalFilename: volsnap.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: Volume Shadow Copy driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7d2a0000 fffff805`7d2f0000 rdyboost (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\rdyboost.sys\76CA327050000\rdyboost.sys
Image path: rdyboost.sys
Image name: rdyboost.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 76CA3270 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00048E48
ImageSize: 00050000
File version: 10.0.19041.208
Product version: 10.0.19041.208
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: rdyboost.sys
OriginalFilename: rdyboost.sys
ProductVersion: 10.0.19041.208
FileVersion: 10.0.19041.208 (WinBuild.160101.0800)
FileDescription: ReadyBoost Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7d300000 fffff805`7d326000 mup (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mup.sys\47232DD926000\mup.sys
Image path: mup.sys
Image name: mup.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 47232DD9 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002504B
ImageSize: 00026000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: MUP.SYS
OriginalFilename: MUP.SYS
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: Multiple UNC Provider Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7d330000 fffff805`7d342000 iorate (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\iorate.sys\F9E9E49E12000\iorate.sys
Image path: iorate.sys
Image name: iorate.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: F9E9E49E (This is a reproducible build file hash, not a timestamp)
CheckSum: 00016E5E
ImageSize: 00012000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: iorate.sys
OriginalFilename: iorate.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: I/O rate control Filter
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7d370000 fffff805`7d38d000 disk (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\disk.sys\BA6040571d000\disk.sys
Image path: disk.sys
Image name: disk.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: BA604057 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00023F46
ImageSize: 0001D000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: disk.sys
OriginalFilename: disk.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: PnP Disk Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7d390000 fffff805`7d402000 CLASSPNP (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\CLASSPNP.SYS\DA8B418A72000\CLASSPNP.SYS
Image path: CLASSPNP.SYS
Image name: CLASSPNP.SYS
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: DA8B418A (This is a reproducible build file hash, not a timestamp)
CheckSum: 0007C50D
ImageSize: 00072000
File version: 10.0.19041.5728
Product version: 10.0.19041.5728
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: Classpnp.sys
OriginalFilename: Classpnp.sys
ProductVersion: 10.0.19041.5728
FileVersion: 10.0.19041.5728 (WinBuild.160101.0800)
FileDescription: SCSI Class System Dll
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8f800000 fffff805`8f830000 cdrom (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\cdrom.sys\C4E5C98630000\cdrom.sys
Image path: cdrom.sys
Image name: cdrom.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: C4E5C986 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00032EFF
ImageSize: 00030000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: cdrom.sys
OriginalFilename: cdrom.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: SCSI CD-ROM Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8f840000 fffff805`8f855000 filecrypt (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\filecrypt.sys\3C7F622A15000\filecrypt.sys
Image path: filecrypt.sys
Image name: filecrypt.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 3C7F622A (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000FEC3
ImageSize: 00015000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: filecrypt.sys
OriginalFilename: filecrypt.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Windows sandboxing and encryption filter
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8f860000 fffff805`8f86e000 tbs (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\tbs.sys\B1A6DFBAe000\tbs.sys
Image path: tbs.sys
Image name: tbs.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: B1A6DFBA (This is a reproducible build file hash, not a timestamp)
CheckSum: 00008E2F
ImageSize: 0000E000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: TBS.SYS
OriginalFilename: TBS.SYS
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: Export driver for kernel mode TPM API
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8f870000 fffff805`8f889000 UCPD (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\UCPD.sys\9FDEC72719000\UCPD.sys
Image path: UCPD.sys
Image name: UCPD.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 9FDEC727 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001E15B
ImageSize: 00019000
File version: 4.0.1.0
Product version: 4.0.1.0
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: UCPD.sys
OriginalFilename: UCPD.sys
ProductVersion: 4.0.1.557282+50dea765
FileVersion: 4.0.1.557282
FileDescription: User Choice Protection Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8f890000 fffff805`8f89a000 Null (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\Null.SYS\01FE6381a000\Null.SYS
Image path: Null.SYS
Image name: Null.SYS
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 01FE6381 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00010308
ImageSize: 0000A000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: null.sys
OriginalFilename: null.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: NULL Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8f8a0000 fffff805`8f8aa000 Beep (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\Beep.SYS\E4AC8238a000\Beep.SYS
Image path: Beep.SYS
Image name: Beep.SYS
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: E4AC8238 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00008685
ImageSize: 0000A000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: beep.sys
OriginalFilename: beep.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: BEEP Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8f8b0000 fffff805`8fc5a000 dxgkrnl (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\dxgkrnl.sys\691CDBCB3aa000\dxgkrnl.sys
Image path: dxgkrnl.sys
Image name: dxgkrnl.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 691CDBCB (This is a reproducible build file hash, not a timestamp)
CheckSum: 003B1156
ImageSize: 003AA000
File version: 10.0.19041.5737
Product version: 10.0.19041.5737
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: dxgkrnl.sys
OriginalFilename: dxgkrnl.sys
ProductVersion: 10.0.19041.5737
FileVersion: 10.0.19041.5737 (WinBuild.160101.0800)
FileDescription: DirectX Graphics Kernel
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8fc60000 fffff805`8fc78000 watchdog (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\watchdog.sys\28AF795D18000\watchdog.sys
Image path: watchdog.sys
Image name: watchdog.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 28AF795D (This is a reproducible build file hash, not a timestamp)
CheckSum: 00015D0A
ImageSize: 00018000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: watchdog.sys
OriginalFilename: watchdog.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: Watchdog Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8fc80000 fffff805`8fc96000 BasicDisplay (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\BasicDisplay.sys\DEBFAE8616000\BasicDisplay.sys
Image path: BasicDisplay.sys
Image name: BasicDisplay.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: DEBFAE86 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001F68B
ImageSize: 00016000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.4 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: BasicDisplay.sys
OriginalFilename: BasicDisplay.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: Microsoft Basic Display Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8fca0000 fffff805`8fcb1000 BasicRender (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\BasicRender.sys\6690072711000\BasicRender.sys
Image path: BasicRender.sys
Image name: BasicRender.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 66900727 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000A438
ImageSize: 00011000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.4 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: BasicRender.sys
OriginalFilename: BasicRender.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: Microsoft Basic Render Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8fcc0000 fffff805`8fcdc000 Npfs (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\Npfs.SYS\91382EDF1c000\Npfs.SYS
Image path: Npfs.SYS
Image name: Npfs.SYS
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 91382EDF (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001C318
ImageSize: 0001C000
File version: 10.0.19041.5723
Product version: 10.0.19041.5723
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: npfs.sys
OriginalFilename: npfs.sys
ProductVersion: 10.0.19041.5723
FileVersion: 10.0.19041.5723 (WinBuild.160101.0800)
FileDescription: NPFS Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8fce0000 fffff805`8fcf1000 Msfs (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\Msfs.SYS\95155DF111000\Msfs.SYS
Image path: Msfs.SYS
Image name: Msfs.SYS
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 95155DF1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001A9B5
ImageSize: 00011000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: MSFS.SYS
OriginalFilename: MSFS.SYS
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Mailslot driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8fd00000 fffff805`8fd1e000 CimFS (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\CimFS.SYS\784140C01e000\CimFS.SYS
Image path: CimFS.SYS
Image name: CimFS.SYS
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 784140C0 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001CD54
ImageSize: 0001E000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`8fd20000 fffff805`8fd42000 tdx (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\tdx.sys\661372DF22000\tdx.sys
Image path: tdx.sys
Image name: tdx.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 661372DF (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002753F
ImageSize: 00022000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: tdx.sys
OriginalFilename: tdx.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: TDI Translation Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8fd50000 fffff805`8fd60000 TDI (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\TDI.SYS\D1AD2BD410000\TDI.SYS
Image path: TDI.SYS
Image name: TDI.SYS
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: D1AD2BD4 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000D19A
ImageSize: 00010000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: tdi.sys
OriginalFilename: tdi.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: TDI Wrapper
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8fd70000 fffff805`8fdcc000 netbt (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\netbt.sys\E069A7C65c000\netbt.sys
Image path: netbt.sys
Image name: netbt.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: E069A7C6 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0005CC10
ImageSize: 0005C000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: netbt.sys
OriginalFilename: netbt.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: MBT Transport driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8fdd0000 fffff805`8fde4000 afunix (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\afunix.sys\952DFCB814000\afunix.sys
Image path: afunix.sys
Image name: afunix.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 952DFCB8 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00010BB1
ImageSize: 00014000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: afunix.sys
OriginalFilename: afunix.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: AF_UNIX socket provider
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8fdf0000 fffff805`8fe97000 afd (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\afd.sys\2C48A9D0a7000\afd.sys
Image path: afd.sys
Image name: afd.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 2C48A9D0 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000AD77A
ImageSize: 000A7000
File version: 10.0.19041.5723
Product version: 10.0.19041.5723
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: afd.sys
OriginalFilename: afd.sys
ProductVersion: 10.0.19041.5723
FileVersion: 10.0.19041.5723 (WinBuild.160101.0800)
FileDescription: Ancillary Function Driver for WinSock
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8fea0000 fffff805`8feba000 vwififlt (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\vwififlt.sys\16DBFD181a000\vwififlt.sys
Image path: vwififlt.sys
Image name: vwififlt.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 16DBFD18 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00018B49
ImageSize: 0001A000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: vwififlt.sys
OriginalFilename: vwififlt.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: Virtual WiFi Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8fec0000 fffff805`8feeb000 pacer (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\pacer.sys\36689BDC2b000\pacer.sys
Image path: pacer.sys
Image name: pacer.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 36689BDC (This is a reproducible build file hash, not a timestamp)
CheckSum: 00037974
ImageSize: 0002B000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: pacer.sys
OriginalFilename: pacer.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: QoS Packet Scheduler
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8fef0000 fffff805`8ff04000 ndiscap (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ndiscap.sys\DCEEC70E14000\ndiscap.sys
Image path: ndiscap.sys
Image name: ndiscap.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: DCEEC70E (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001C38B
ImageSize: 00014000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: NDISCAP.SYS
OriginalFilename: NDISCAP.SYS
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Microsoft NDIS Packet Capture Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8ff10000 fffff805`8ff24000 netbios (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\netbios.sys\618ED82E14000\netbios.sys
Image path: netbios.sys
Image name: netbios.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 618ED82E (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001A9AF
ImageSize: 00014000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: NETBIOS.SYS
OriginalFilename: NETBIOS.SYS
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: NetBIOS interface driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8ff30000 fffff805`8ffd1000 Vid (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\Vid.sys\A11FBCDCa1000\Vid.sys
Image path: Vid.sys
Image name: Vid.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: A11FBCDC (This is a reproducible build file hash, not a timestamp)
CheckSum: 0009DEA0
ImageSize: 000A1000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: vid.sys
OriginalFilename: vid.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: Microsoft Hyper-V Virtualization Infrastructure Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8ffe0000 fffff805`90002000 winhvr (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\winhvr.sys\9A281EB222000\winhvr.sys
Image path: winhvr.sys
Image name: winhvr.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 9A281EB2 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00028559
ImageSize: 00022000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: WinHvR.sys
OriginalFilename: WinHvR.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: Windows Hypervisor Root Interface Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`90010000 fffff805`9008b000 rdbss (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\rdbss.sys\D46BF9EB7b000\rdbss.sys
Image path: rdbss.sys
Image name: rdbss.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: D46BF9EB (This is a reproducible build file hash, not a timestamp)
CheckSum: 00074D4D
ImageSize: 0007B000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: rdbss.sys
OriginalFilename: RDBSS.Sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: Redirected Drive Buffering SubSystem Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`90090000 fffff805`90125000 csc (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\csc.sys\D0D7C32D95000\csc.sys
Image path: csc.sys
Image name: csc.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: D0D7C32D (This is a reproducible build file hash, not a timestamp)
CheckSum: 00099511
ImageSize: 00095000
File version: 10.0.19041.5723
Product version: 10.0.19041.5723
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: csc.sys
OriginalFilename: CSC.Sys
ProductVersion: 10.0.19041.5723
FileVersion: 10.0.19041.5723 (WinBuild.160101.0800)
FileDescription: Windows Client Side Caching Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`90130000 fffff805`90142000 nsiproxy (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\nsiproxy.sys\7126B05512000\nsiproxy.sys
Image path: nsiproxy.sys
Image name: nsiproxy.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 7126B055 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000F439
ImageSize: 00012000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: nsiproxy.sys
OriginalFilename: nsiproxy.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: NSI Proxy
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`90150000 fffff805`9015e000 npsvctrig (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\npsvctrig.sys\677B42C8e000\npsvctrig.sys
Image path: npsvctrig.sys
Image name: npsvctrig.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 677B42C8 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000119D3
ImageSize: 0000E000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: npsvctrig.sys
OriginalFilename: npsvctrig.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Named pipe service triggers
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`90160000 fffff805`90170000 mssmbios (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mssmbios.sys\6233611A10000\mssmbios.sys
Image path: mssmbios.sys
Image name: mssmbios.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 6233611A (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000DD1D
ImageSize: 00010000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: smbios.sys
OriginalFilename: smbios.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: System Management BIOS Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`90180000 fffff805`9018a000 gpuenergydrv (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\gpuenergydrv.sys\F10C03D8a000\gpuenergydrv.sys
Image path: gpuenergydrv.sys
Image name: gpuenergydrv.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: F10C03D8 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00009EA6
ImageSize: 0000A000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: gpuenergydrv.sys
OriginalFilename: gpuenergydrv.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: GPU Energy Kernel Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`90190000 fffff805`901bc000 dfsc (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\dfsc.sys\17F96AB12c000\dfsc.sys
Image path: dfsc.sys
Image name: dfsc.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 17F96AB1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002D430
ImageSize: 0002C000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: dfsclient.sys
OriginalFilename: dfsclient.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: DFS Namespace Client Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`901e0000 fffff805`9024d000 fastfat (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\fastfat.SYS\ED3D752A6d000\fastfat.SYS
Image path: fastfat.SYS
Image name: fastfat.SYS
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: ED3D752A (This is a reproducible build file hash, not a timestamp)
CheckSum: 00074B93
ImageSize: 0006D000
File version: 10.0.19041.5728
Product version: 10.0.19041.5728
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: fastfat.sys
OriginalFilename: FastFAT.Sys
ProductVersion: 10.0.19041.5728
FileVersion: 10.0.19041.5728 (WinBuild.160101.0800)
FileDescription: Fast FAT File System Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`90250000 fffff805`90267000 bam (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\bam.sys\4BADB6B817000\bam.sys
Image path: bam.sys
Image name: bam.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 4BADB6B8 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00019328
ImageSize: 00017000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: bam.sys
OriginalFilename: bam.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: BAM Kernel Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`90270000 fffff805`902c2000 ahcache (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ahcache.sys\EFB2DF5E52000\ahcache.sys
Image path: ahcache.sys
Image name: ahcache.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: EFB2DF5E (This is a reproducible build file hash, not a timestamp)
CheckSum: 0004DBB1
ImageSize: 00052000
File version: 10.0.19041.5723
Product version: 10.0.19041.5723
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ahcache.sys
OriginalFilename: ahcache.sys
ProductVersion: 10.0.19041.5723
FileVersion: 10.0.19041.5723 (WinBuild.160101.0800)
FileDescription: Application Compatibility Cache
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`902d0000 fffff805`902e2000 CompositeBus (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\CompositeBus.sys\6AE1B30212000\CompositeBus.sys
Image path: CompositeBus.sys
Image name: CompositeBus.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 6AE1B302 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00015BD2
ImageSize: 00012000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: compositebus.sys
OriginalFilename: compositebus.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Multi-Transport Composite Bus Enumerator
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`902f0000 fffff805`902fd000 kdnic (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\kdnic.sys\9401D3B8d000\kdnic.sys
Image path: kdnic.sys
Image name: kdnic.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 9401D3B8 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000178DD
ImageSize: 0000D000
File version: 6.1.0.0
Product version: 6.1.0.0
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft Kernel Debugger Network Adapter (NDIS 6.20 Miniport)
InternalName: kdnic.sys
OriginalFilename: kdnic.sys
ProductVersion: 6.01.00.0000
FileVersion: 6.01.00.0000 (WinBuild.160101.0800)
FileDescription: Microsoft Kernel Debugger Network Miniport
LegalCopyright: Copyright (C) Microsoft Corporation. All rights reserved.
fffff805`90300000 fffff805`90315000 umbus (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\umbus.sys\E7B4847E15000\umbus.sys
Image path: umbus.sys
Image name: umbus.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: E7B4847E (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001394F
ImageSize: 00015000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: umbus.sys
OriginalFilename: umbus.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: User-Mode Bus Enumerator
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`90320000 fffff805`90335000 CAD (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\CAD.sys\58C1ABCA15000\CAD.sys
Image path: CAD.sys
Image name: CAD.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 58C1ABCA (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001EEC2
ImageSize: 00015000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: cad.sys
OriginalFilename: cad.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Charge Arbiration Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`90340000 fffff805`903a6000 portcls (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\portcls.sys\EA9B28EE66000\portcls.sys
Image path: portcls.sys
Image name: portcls.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: EA9B28EE (This is a reproducible build file hash, not a timestamp)
CheckSum: 000677BD
ImageSize: 00066000
File version: 10.0.19041.5723
Product version: 10.0.19041.5723
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.9 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: portcls.sys
OriginalFilename: portcls.sys
ProductVersion: 10.0.19041.5723
FileVersion: 10.0.19041.5723 (WinBuild.160101.0800)
FileDescription: Port Class (Class Driver for Port/Miniport Devices)
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`903b0000 fffff805`90428000 ks (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ks.sys\0C993C5F78000\ks.sys
Image path: ks.sys
Image name: ks.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 0C993C5F (This is a reproducible build file hash, not a timestamp)
CheckSum: 0007C3E2
ImageSize: 00078000
File version: 10.0.19041.5728
Product version: 10.0.19041.5728
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.0 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ks.sys
OriginalFilename: ks.sys
ProductVersion: 10.0.19041.5728
FileVersion: 10.0.19041.5728 (WinBuild.160101.0800)
FileDescription: Kernel CSA Library
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`90520000 fffff805`9053e000 crashdmp (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\crashdmp.sys\F69BF9371e000\crashdmp.sys
Image path: crashdmp.sys
Image name: crashdmp.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: F69BF937 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00023298
ImageSize: 0001E000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: crashdmp.sys
OriginalFilename: crashdmp.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: Crash Dump Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`a8410000 fffff805`ae176000 nvlddmkm (deferred)
Image path: nvlddmkm.sys
Image name: nvlddmkm.sys
Browse all global symbols functions data Symbol Reload
Timestamp: Fri Mar 14 20:40:17 2025 (67D46A01)
CheckSum: 05B76F27
ImageSize: 05D66000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`ae180000 fffff805`ae1a7000 HDAudBus (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\HDAudBus.sys\BBEA00D627000\HDAudBus.sys
Image path: HDAudBus.sys
Image name: HDAudBus.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: BBEA00D6 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000277B4
ImageSize: 00027000
File version: 10.0.19041.5723
Product version: 10.0.19041.5723
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.9 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: hdaudbus.sys
OriginalFilename: hdaudbus.sys
ProductVersion: 10.0.19041.5723
FileVersion: 10.0.19041.5723 (WinBuild.160101.0800)
FileDescription: High Definition Audio Bus Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`ae1b0000 fffff805`ae1d1000 drmk (deferred)
Image path: drmk.sys
Image name: drmk.sys
Browse all global symbols functions data Symbol Reload
Timestamp: Mon Nov 8 22:23:36 2004 (418FC7B8)
CheckSum: 0001F525
ImageSize: 00021000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`bc4c0000 fffff805`beeeb000 igdkmd64 (deferred)
Image path: igdkmd64.sys
Image name: igdkmd64.sys
Browse all global symbols functions data Symbol Reload
Timestamp: Wed Jun 1 00:27:36 2022 (62968848)
CheckSum: 02A310A5
ImageSize: 02A2B000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`beef0000 fffff805`bef8d000 USBXHCI (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\USBXHCI.SYS\99F1C8689d000\USBXHCI.SYS
Image path: USBXHCI.SYS
Image name: USBXHCI.SYS
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 99F1C868 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000A5E14
ImageSize: 0009D000
File version: 10.0.19041.4355
Product version: 10.0.19041.4355
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: usbxhci.sys
OriginalFilename: usbxhci.sys
ProductVersion: 10.0.19041.4355
FileVersion: 10.0.19041.4355 (WinBuild.160101.0800)
FileDescription: USB XHCI Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`bef90000 fffff805`befd4000 ucx01000 (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ucx01000.sys\11447CC944000\ucx01000.sys
Image path: ucx01000.sys
Image name: ucx01000.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 11447CC9 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0004DFDA
ImageSize: 00044000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ucx01000.sys
OriginalFilename: ucx01000.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: USB Controller Extension
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c2e00000 fffff805`c2ef2000 wdiwifi (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\wdiwifi.sys\75D10A95f2000\wdiwifi.sys
Image path: wdiwifi.sys
Image name: wdiwifi.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 75D10A95 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000F8112
ImageSize: 000F2000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: wdiwifi.sys
OriginalFilename: wdiwifi.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: WDI Driver Framework Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c2f00000 fffff805`c2f0e000 vwifibus (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\vwifibus.sys\8AF48D2Ce000\vwifibus.sys
Image path: vwifibus.sys
Image name: vwifibus.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 8AF48D2C (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000E969
ImageSize: 0000E000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: VWiFiBus.sys
OriginalFilename: VWiFiBus.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Virtual Wireless Bus Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c2f10000 fffff805`c2f41000 iaLPSS2i_I2C_CNL (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\iaLPSS2i_I2C_CNL.sys\5D2C0B2C31000\iaLPSS2i_I2C_CNL.sys
Image path: iaLPSS2i_I2C_CNL.sys
Image name: iaLPSS2i_I2C_CNL.sys
Browse all global symbols functions data Symbol Reload
Timestamp: Mon Jul 15 08:12:12 2019 (5D2C0B2C)
CheckSum: 00033387
ImageSize: 00031000
File version: 30.100.1929.1
Product version: 30.100.1929.1
File flags: 8 (Mask 3F) Private
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Intel Corporation
ProductName: Intel(R) Serial IO Driver
InternalName: iaLPSS2i_I2C_CNL.sys
OriginalFilename: iaLPSS2i_I2C_CNL.sys
ProductVersion: 30.100.1929.1
FileVersion: 30.100.1929.1
FileDescription: Intel(R) Serial IO I2C Driver v2
LegalCopyright: Copyright © 2015, Intel Corporation.
fffff805`c2f50000 fffff805`c2f6a000 SpbCx (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\SpbCx.sys\CFA815031a000\SpbCx.sys
Image path: SpbCx.sys
Image name: SpbCx.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: CFA81503 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000168C6
ImageSize: 0001A000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: SPBCx.sys
OriginalFilename: SPBCx.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: SPB Class Extension
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c2f70000 fffff805`c2fbf000 TeeDriverW10x64 (deferred)
Image path: TeeDriverW10x64.sys
Image name: TeeDriverW10x64.sys
Browse all global symbols functions data Symbol Reload
Timestamp: Fri Feb 9 00:23:54 2024 (65C5466A)
CheckSum: 0005A247
ImageSize: 0004F000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`c2fc0000 fffff805`c306d000 rt640x64 (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\rt640x64.sys\5CE7AF86ad000\rt640x64.sys
Image path: rt640x64.sys
Image name: rt640x64.sys
Browse all global symbols functions data Symbol Reload
Timestamp: Fri May 24 11:47:02 2019 (5CE7AF86)
CheckSum: 000B965B
ImageSize: 000AD000
File version: 9.1.410.2015
Product version: 9.1.410.2015
File flags: 8 (Mask 3F) Private
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Realtek
ProductName: Realtek 8125/8136/8168/8169 PCI/PCIe Adapters
InternalName: rt640x64.sys
OriginalFilename: rt640x64.sys
ProductVersion: 9.001.0410.2015
FileVersion: 9.001.0410.2015
FileDescription: Realtek 8125/8136/8168/8169 NDIS 6.40 64-bit Driver
LegalCopyright: Copyright (C) 2019 Realtek Semiconductor Corporation. All Right Reserved.
fffff805`c3070000 fffff805`c3091000 i8042prt (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\i8042prt.sys\515D28B121000\i8042prt.sys
Image path: i8042prt.sys
Image name: i8042prt.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 515D28B1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00022B0C
ImageSize: 00021000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: i8042prt.sys
OriginalFilename: i8042prt.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: i8042 Port Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c30a0000 fffff805`c30b4000 kbdclass (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\kbdclass.sys\3156654A14000\kbdclass.sys
Image path: kbdclass.sys
Image name: kbdclass.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 3156654A (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001CE1A
ImageSize: 00014000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: kbdclass.sys
OriginalFilename: kbdclass.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Keyboard Class Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c30c0000 fffff805`c30e1000 iaLPSS2_GPIO2 (deferred)
Image path: iaLPSS2_GPIO2.sys
Image name: iaLPSS2_GPIO2.sys
Browse all global symbols functions data Symbol Reload
Timestamp: Mon Oct 8 09:10:53 2018 (5BBAF4ED)
CheckSum: 00023153
ImageSize: 00021000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`c30f0000 fffff805`c3122000 msgpioclx (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\msgpioclx.sys\9883DDF032000\msgpioclx.sys
Image path: msgpioclx.sys
Image name: msgpioclx.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 9883DDF0 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00030C03
ImageSize: 00032000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: msgpioclx.sys
OriginalFilename: msgpioclx.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: GPIO Class Extension Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c3130000 fffff805`c313c000 wmiacpi (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\wmiacpi.sys\4A8BFC2Cc000\wmiacpi.sys
Image path: wmiacpi.sys
Image name: wmiacpi.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 4A8BFC2C (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000CC2F
ImageSize: 0000C000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: wmiacpi.sys
OriginalFilename: wmiacpi.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Windows Management Interface for ACPI
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c3140000 fffff805`c3181000 intelppm (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\intelppm.sys\3E03C5E841000\intelppm.sys
Image path: intelppm.sys
Image name: intelppm.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 3E03C5E8 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0003F5B5
ImageSize: 00041000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: intelppm.sys
OriginalFilename: intelppm.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: Processor Device Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c3190000 fffff805`c319b000 acpipagr (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\acpipagr.sys\092D0DD8b000\acpipagr.sys
Image path: acpipagr.sys
Image name: acpipagr.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 092D0DD8 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001307F
ImageSize: 0000B000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: acpipagr.sys
OriginalFilename: acpipagr.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: ACPI Processor Aggregator Device Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c31a0000 fffff805`c31ac000 acpitime (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\acpitime.sys\BB606674c000\acpitime.sys
Image path: acpitime.sys
Image name: acpitime.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: BB606674 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000AB5B
ImageSize: 0000C000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: acpitime.sys
OriginalFilename: acpitime.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: ACPI Wake Alarm
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c31b0000 fffff805`c31bf000 CmBatt (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\CmBatt.sys\770987ADf000\CmBatt.sys
Image path: CmBatt.sys
Image name: CmBatt.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 770987AD (This is a reproducible build file hash, not a timestamp)
CheckSum: 00009C77
ImageSize: 0000F000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: cmbatt.sys
OriginalFilename: cmbatt.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Control Method Battery Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c31c0000 fffff805`c31d0000 BATTC (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\BATTC.SYS\FF32259110000\BATTC.SYS
Image path: BATTC.SYS
Image name: BATTC.SYS
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: FF322591 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000D94E
ImageSize: 00010000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: battc.sys
OriginalFilename: battc.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Battery Class Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c31e0000 fffff805`c31f0000 XtuAcpiDriver (deferred)
Image path: XtuAcpiDriver.sys
Image name: XtuAcpiDriver.sys
Browse all global symbols functions data Symbol Reload
Timestamp: Wed Apr 12 11:58:50 2017 (58EDEC4A)
CheckSum: 00015FD4
ImageSize: 00010000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`c3200000 fffff805`c320e000 UEFI (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\UEFI.sys\100A3FFEe000\UEFI.sys
Image path: UEFI.sys
Image name: UEFI.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 100A3FFE (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000C8C7
ImageSize: 0000E000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: UEFI.sys
OriginalFilename: UEFI.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: UEFI Driver for NT
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c3210000 fffff805`c321a000 vhidmini (deferred)
Image path: vhidmini.sys
Image name: vhidmini.sys
Browse all global symbols functions data Symbol Reload
Timestamp: Wed Jun 3 10:30:32 2020 (5ED75198)
CheckSum: 0000F2BC
ImageSize: 0000A000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`c3220000 fffff805`c322b000 mshidkmdf (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mshidkmdf.sys\D7AA4B86b000\mshidkmdf.sys
Image path: mshidkmdf.sys
Image name: mshidkmdf.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: D7AA4B86 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000C0D8
ImageSize: 0000B000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: MSHIDKMDF.SYS
OriginalFilename: MSHIDKMDF.SYS
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Pass-through HID to KMDF Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c3230000 fffff805`c3271000 HIDCLASS (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\HIDCLASS.SYS\F7BA80B141000\HIDCLASS.SYS
Image path: HIDCLASS.SYS
Image name: HIDCLASS.SYS
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: F7BA80B1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0003AD53
ImageSize: 00041000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: hidclass.sys
OriginalFilename: hidclass.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: Hid Class Library
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c3280000 fffff805`c3293000 HIDPARSE (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\HIDPARSE.SYS\3404D24613000\HIDPARSE.SYS
Image path: HIDPARSE.SYS
Image name: HIDPARSE.SYS
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 3404D246 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001813B
ImageSize: 00013000
File version: 10.0.19041.5000
Product version: 10.0.19041.5000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: hidparse.sys
OriginalFilename: hidparse.sys
ProductVersion: 10.0.19041.5000
FileVersion: 10.0.19041.5000 (WinBuild.160101.0800)
FileDescription: Hid Parsing Library
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c32a0000 fffff805`c32af000 nvvad64v (deferred)
Image path: nvvad64v.sys
Image name: nvvad64v.sys
Browse all global symbols functions data Symbol Reload
Timestamp: Wed Feb 28 15:30:52 2024 (65DF277C)
CheckSum: 0001B55F
ImageSize: 0000F000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`c32b0000 fffff805`c32c1000 ksthunk (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ksthunk.sys\545C986E11000\ksthunk.sys
Image path: ksthunk.sys
Image name: ksthunk.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 545C986E (This is a reproducible build file hash, not a timestamp)
CheckSum: 00013A5A
ImageSize: 00011000
File version: 10.0.19041.5723
Product version: 10.0.19041.5723
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.0 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ksthunk.sys
OriginalFilename: ksthunk.sys
ProductVersion: 10.0.19041.5723
FileVersion: 10.0.19041.5723 (WinBuild.160101.0800)
FileDescription: Kernel Streaming WOW Thunk Service
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c32d0000 fffff805`c32dd000 NdisVirtualBus (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\NdisVirtualBus.sys\A7AE93D1d000\NdisVirtualBus.sys
Image path: NdisVirtualBus.sys
Image name: NdisVirtualBus.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: A7AE93D1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00014F1D
ImageSize: 0000D000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: NdisVirtualBus.sys
OriginalFilename: NdisVirtualBus.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Microsoft Virtual Network Adapter Enumerator
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c32e0000 fffff805`c32ec000 swenum (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\swenum.sys\E117266Bc000\swenum.sys
Image path: swenum.sys
Image name: swenum.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: E117266B (This is a reproducible build file hash, not a timestamp)
CheckSum: 000082C9
ImageSize: 0000C000
File version: 10.0.19041.5000
Product version: 10.0.19041.5000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.0 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: swenum.sys
OriginalFilename: swenum.sys
ProductVersion: 10.0.19041.5000
FileVersion: 10.0.19041.5000 (WinBuild.160101.0800)
FileDescription: Plug and Play Software Device Enumerator
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c32f0000 fffff805`c32fe000 rdpbus (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\rdpbus.sys\84DFD52Ae000\rdpbus.sys
Image path: rdpbus.sys
Image name: rdpbus.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 84DFD52A (This is a reproducible build file hash, not a timestamp)
CheckSum: 000106CE
ImageSize: 0000E000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.0 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: RDPBUS.SYS
OriginalFilename: RDPBUS.SYS
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Microsoft RDP Bus Device driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c3300000 fffff805`c33a3000 UsbHub3 (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\UsbHub3.sys\F9318133a3000\UsbHub3.sys
Image path: UsbHub3.sys
Image name: UsbHub3.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: F9318133 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000A5D90
ImageSize: 000A3000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: usbhub3.sys
OriginalFilename: usbhub3.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: USB3 HUB Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c33b0000 fffff805`c33be000 USBD (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\USBD.SYS\E915B4FCe000\USBD.SYS
Image path: USBD.SYS
Image name: USBD.SYS
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: E915B4FC (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000FC58
ImageSize: 0000E000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: usbd.sys
OriginalFilename: usbd.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: Universal Serial Bus Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c33c0000 fffff805`c33d5000 hidi2c (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\hidi2c.sys\785C504F15000\hidi2c.sys
Image path: hidi2c.sys
Image name: hidi2c.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 785C504F (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001444A
ImageSize: 00015000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: hidi2c.sys
OriginalFilename: hidi2c.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: I2C HID Miniport Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c33e0000 fffff805`c33ff000 nvhda64v (deferred)
Image path: nvhda64v.sys
Image name: nvhda64v.sys
Browse all global symbols functions data Symbol Reload
Timestamp: Mon Sep 30 08:37:46 2024 (66FA392A)
CheckSum: 0001FA63
ImageSize: 0001F000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`c3400000 fffff805`c346f000 HdAudio (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\HdAudio.sys\7A851A0E6f000\HdAudio.sys
Image path: HdAudio.sys
Image name: HdAudio.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 7A851A0E (This is a reproducible build file hash, not a timestamp)
CheckSum: 000756B9
ImageSize: 0006F000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.9 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: HDAudio.sys
OriginalFilename: HDAudio.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: High Definition Audio Function Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c3470000 fffff805`c34c5000 IntcDAud (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\IntcDAud.sys\619B2C2555000\IntcDAud.sys
Image path: IntcDAud.sys
Image name: IntcDAud.sys
Browse all global symbols functions data Symbol Reload
Timestamp: Mon Nov 22 08:35:33 2021 (619B2C25)
CheckSum: 000595AC
ImageSize: 00055000
File version: 10.27.0.12
Product version: 10.27.0.12
File flags: 8 (Mask 3F) Private
File OS: 40004 NT Win32
File type: 3.9 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Intel(R) Corporation
ProductName: Intel(R) Display Audio
InternalName: IntcDAud.sys
OriginalFilename: IntcDAud.sys
ProductVersion: 10.27.0.12
FileVersion: 10.27.0.12
FileDescription: Intel(R) Display Audio Driver
LegalCopyright: Intel(R) Corporation. All rights reserved.
fffff805`c34d0000 fffff805`c34e0000 mouhid (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mouhid.sys\E502FBD910000\mouhid.sys
Image path: mouhid.sys
Image name: mouhid.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: E502FBD9 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000173E5
ImageSize: 00010000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: mouhid.sys
OriginalFilename: mouhid.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: HID Mouse Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c34f0000 fffff805`c3503000 mouclass (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mouclass.sys\3E1AA9CC13000\mouclass.sys
Image path: mouclass.sys
Image name: mouclass.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 3E1AA9CC (This is a reproducible build file hash, not a timestamp)
CheckSum: 00019679
ImageSize: 00013000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: mouclass.sys
OriginalFilename: mouclass.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Mouse Class Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c3510000 fffff805`c351c000 MTConfig (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\MTConfig.sys\D2AEB078c000\MTConfig.sys
Image path: MTConfig.sys
Image name: MTConfig.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: D2AEB078 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00014339
ImageSize: 0000C000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: MTConfig.sys
OriginalFilename: MTConfig.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Microsoft Multi-Touch HID Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c3520000 fffff805`c3554000 usbccgp (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\usbccgp.sys\6A26A84834000\usbccgp.sys
Image path: usbccgp.sys
Image name: usbccgp.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 6A26A848 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00037117
ImageSize: 00034000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: USBCCGP.SYS
OriginalFilename: USBCCGP.SYS
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: USB Common Class Generic Parent Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c3560000 fffff805`c356d000 sshid (deferred)
Image path: sshid.sys
Image name: sshid.sys
Browse all global symbols functions data Symbol Reload
Timestamp: Thu Feb 24 06:09:08 2022 (6216F6D4)
CheckSum: 00018401
ImageSize: 0000D000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`c3570000 fffff805`c3582000 hidusb (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\hidusb.sys\E73E950812000\hidusb.sys
Image path: hidusb.sys
Image name: hidusb.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: E73E9508 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000D8D4
ImageSize: 00012000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: HIDUSB.SYS
OriginalFilename: HIDUSB.SYS
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: USB Miniport Driver for Input Devices
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c3590000 fffff805`c35a1000 kbdhid (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\kbdhid.sys\DF2550C211000\kbdhid.sys
Image path: kbdhid.sys
Image name: kbdhid.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: DF2550C2 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001A910
ImageSize: 00011000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: kbdhid.sys
OriginalFilename: kbdhid.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: HID Keyboard Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c35b0000 fffff805`c35ca000 WdNisDrv (deferred)
Image path: WdNisDrv.sys
Image name: WdNisDrv.sys
Browse all global symbols functions data Symbol Reload
Timestamp: ***** Invalid (9DE1DF47)
CheckSum: 000261CE
ImageSize: 0001A000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`c3640000 fffff805`c3bad000 Netwtw10 (deferred)
Image path: Netwtw10.sys
Image name: Netwtw10.sys
Browse all global symbols functions data Symbol Reload
Timestamp: Sat Dec 28 23:15:24 2024 (67705C5C)
CheckSum: 004FF8F3
ImageSize: 0056D000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`c5a00000 fffff805`c5b87000 BTHport (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\BTHport.sys\87CDBE15187000\BTHport.sys
Image path: BTHport.sys
Image name: BTHport.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 87CDBE15 (This is a reproducible build file hash, not a timestamp)
CheckSum: 001856ED
ImageSize: 00187000
File version: 10.0.19041.4597
Product version: 10.0.19041.4597
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: bthport.sys
OriginalFilename: bthport.sys
ProductVersion: 10.0.19041.4597
FileVersion: 10.0.19041.4597 (WinBuild.160101.0800)
FileDescription: Bluetooth Bus Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c5b90000 fffff805`c5bfa000 RtsUer (deferred)
Image path: RtsUer.sys
Image name: RtsUer.sys
Browse all global symbols functions data Symbol Reload
Timestamp: Wed Jul 25 12:21:27 2018 (5B584117)
CheckSum: 00073533
ImageSize: 0006A000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`c5c00000 fffff805`c5c09000 SparkIO (deferred)
Mapped memory image file: C:\Windows\system32\SparkIO.sys
Image path: SparkIO.sys
Image name: SparkIO.sys
Browse all global symbols functions data Symbol Reload
Timestamp: Mon Nov 26 12:59:29 2018 (5BFBC401)
CheckSum: 0000D2AA
ImageSize: 00009000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`c5c10000 fffff805`c5c67000 usbvideo (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\usbvideo.sys\12721FE057000\usbvideo.sys
Image path: usbvideo.sys
Image name: usbvideo.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 12721FE0 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00059ABA
ImageSize: 00057000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.0 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: usbvideo.sys
OriginalFilename: usbvideo.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: USB Video Class Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c5c80000 fffff805`c5c8f000 dump_storport (deferred)
Image path: dump_storport.sys
Image name: dump_storport.sys
Browse all global symbols functions data Symbol Reload
Timestamp: ***** Invalid (F14E49FE)
CheckSum: 00017FCA
ImageSize: 0000F000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`c5cc0000 fffff805`c5cef000 dump_stornvme (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\stornvme.sys\DC5977C32f000\stornvme.sys
Image path: dump_stornvme.sys
Image name: dump_stornvme.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: DC5977C3 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002A2BE
ImageSize: 0002F000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: stornvme.sys
OriginalFilename: stornvme.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: Microsoft NVM Express Storport Miniport Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c5d10000 fffff805`c5d2d000 dump_dumpfve (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\dumpfve.sys\ADA5C92E1d000\dumpfve.sys
Image path: dump_dumpfve.sys
Image name: dump_dumpfve.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: ADA5C92E (This is a reproducible build file hash, not a timestamp)
CheckSum: 000245B4
ImageSize: 0001D000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: dumpfve.sys
OriginalFilename: dumpfve.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: Bitlocker Drive Encryption Crashdump Filter
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c5d30000 fffff805`c5d4d000 NDProxy (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\NDProxy.sys\7A451D301d000\NDProxy.sys
Image path: NDProxy.sys
Image name: NDProxy.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 7A451D30 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00021F82
ImageSize: 0001D000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ndproxy.sys
OriginalFilename: ndproxy.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: NDIS Proxy
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c5d50000 fffff805`c5d78000 AgileVpn (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\AgileVpn.sys\6C08629B28000\AgileVpn.sys
Image path: AgileVpn.sys
Image name: AgileVpn.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 6C08629B (This is a reproducible build file hash, not a timestamp)
CheckSum: 00021271
ImageSize: 00028000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: agilevpn.sys
OriginalFilename: agilevpn.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: RAS Agile Vpn Miniport Call Manager
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c5d80000 fffff805`c5da1000 rasl2tp (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\rasl2tp.sys\2438149621000\rasl2tp.sys
Image path: rasl2tp.sys
Image name: rasl2tp.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 24381496 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001D4E4
ImageSize: 00021000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: rasl2tp.sys
OriginalFilename: rasl2tp.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: RAS L2TP mini-port/call-manager driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c5db0000 fffff805`c5dd1000 raspptp (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\raspptp.sys\13B1F23A21000\raspptp.sys
Image path: raspptp.sys
Image name: raspptp.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 13B1F23A (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001C706
ImageSize: 00021000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: RASPPTP.SYS
OriginalFilename: RASPPTP.SYS
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: Peer-to-Peer Tunneling Protocol
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c5df0000 fffff805`c6713000 ibtusb (deferred)
Image path: ibtusb.sys
Image name: ibtusb.sys
Browse all global symbols functions data Symbol Reload
Timestamp: Mon Feb 10 15:08:45 2025 (67A9EC4D)
CheckSum: 0092C268
ImageSize: 00923000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`c6720000 fffff805`c6741000 BTHUSB (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\BTHUSB.sys\1F5DA42F21000\BTHUSB.sys
Image path: BTHUSB.sys
Image name: BTHUSB.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 1F5DA42F (This is a reproducible build file hash, not a timestamp)
CheckSum: 00023F60
ImageSize: 00021000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: bthusb.sys
OriginalFilename: bthusb.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: Bluetooth Miniport Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c6750000 fffff805`c676c000 raspppoe (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\raspppoe.sys\585069991c000\raspppoe.sys
Image path: raspppoe.sys
Image name: raspppoe.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 58506999 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001B0EA
ImageSize: 0001C000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: raspppoe.sys
OriginalFilename: raspppoe.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: RAS PPPoE mini-port/call-manager driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c6770000 fffff805`c67aa000 ndiswan (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ndiswan.sys\A5C540663a000\ndiswan.sys
Image path: ndiswan.sys
Image name: ndiswan.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: A5C54066 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00040B01
ImageSize: 0003A000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: NDISWAN.SYS
OriginalFilename: NDISWAN.SYS
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: MS PPP Framing Driver (Strong Encryption)
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c67b0000 fffff805`c67f8000 KslD (deferred)
Image path: KslD.sys
Image name: KslD.sys
Browse all global symbols functions data Symbol Reload
Timestamp: Fri Jul 9 10:46:16 2021 (60E7FEC8)
CheckSum: 00051A94
ImageSize: 00048000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
Unloaded modules:
fffff805`c3bb0000 fffff805`c3be1000 xhunter1.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00031000
fffff805`c35d0000 fffff805`c3601000 xhunter1.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00031000
fffff805`75560000 fffff805`75572000 MSKSSRV.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00012000
fffff809`9f020000 fffff809`a1e23000 eaanticheat.
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 02E03000
fffff805`75560000 fffff805`75572000 MSKSSRV.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00012000
fffff805`75560000 fffff805`75572000 MSKSSRV.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00012000
fffff805`90550000 fffff805`90560000 dump_storpor
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00010000
fffff805`90590000 fffff805`905c0000 dump_stornvm
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00030000
fffff805`905e0000 fffff805`905fe000 dump_dumpfve
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0001E000
fffff805`c5c00000 fffff805`c5c0c000 WdmCompanion
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000C000
fffff805`901c0000 fffff805`901dd000 dam.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0001D000
fffff805`7c300000 fffff805`7c30a000 WdBoot.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000A000
fffff805`7d350000 fffff805`7d361000 hwpolicy.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00011000
8: kd> .f+
01 ffffd603`b9a07840 fffff805`77248fb1 nt!PspCatchCriticalBreak+0x10e
ExtensionRepository : Implicit
UseExperimentalFeatureForNugetShare : true
AllowNugetExeUpdate : true
NonInteractiveNuget : true
AllowNugetMSCredentialProviderInstall : true
AllowParallelInitializationOfLocalRepositories : true
EnableRedirectToChakraJsProvider : false
-- Configuring repositories
----> Repository : LocalInstalled, Enabled: true
----> Repository : UserExtensions, Enabled: true
>>>>>>>>>> Preparing the environment for Debugger Extensions Gallery repositories completed, duration 0.000 seconds
************* Waiting for Debugger Extensions Gallery to Initialize **************
----> Repository : UserExtensions, Enabled: true, Packages count: 0>>>>>>>>>> Waiting for Debugger Extensions Gallery to Initialize completed, duration 0.031 seconds
----> Repository : LocalInstalled, Enabled: true, Packages count: 43
Microsoft (R) Windows Debugger Version 10.0.27793.1000 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Windows\Minidumps\040825-6875-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 19041 MP (12 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Kernel base = 0xfffff805`76a00000 PsLoadedModuleList = 0xfffff805`7762a350
Debug session time: Tue Apr 8 23:36:08.883 2025 (UTC + 3:00)
System Uptime: 0 days 1:31:09.685
Loading Kernel Symbols
...............................................................
................................................................
................................................................
.............
Loading User Symbols
Loading unloaded module list
.............
For analysis of this file, run !analyze -v
nt!KeBugCheckEx:
fffff805`76dfdf30 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:ffffd603`b9a07840=00000000000000ef
8: kd> !analyze -v
*******************************************************************************
- *
- Bugcheck Analysis *
- *
CRITICAL_PROCESS_DIED (ef)
A critical system process died
Arguments:
Arg1: ffffb10c40b87140, Process object or thread object
Arg2: 0000000000000000, If this is 0, a process died. If this is 1, a thread died.
Arg3: 0000000000000000, The process object that initiated the termination.
Arg4: 0000000000000000
Debugging Details:
------------------
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 2093
Key : Analysis.Elapsed.mSec
Value: 7365
Key : Analysis.IO.Other.Mb
Value: 18
Key : Analysis.IO.Read.Mb
Value: 1
Key : Analysis.IO.Write.Mb
Value: 22
Key : Analysis.Init.CPU.mSec
Value: 375
Key : Analysis.Init.Elapsed.mSec
Value: 14933
Key : Analysis.Memory.CommitPeak.Mb
Value: 89
Key : Analysis.Version.DbgEng
Value: 10.0.27793.1000
Key : Analysis.Version.Description
Value: 10.2410.02.02 amd64fre
Key : Analysis.Version.Ext
Value: 1.2410.2.2
Key : Bugcheck.Code.LegacyAPI
Value: 0xef
Key : Bugcheck.Code.TargetModel
Value: 0xef
Key : CriticalProcessDied.ExceptionCode
Value: 0x403ac080
Key : CriticalProcessDied.ImageName
Value: ntdll.dll
Key : CriticalProcessDied.ImageOffset
Value: 0xa144a
Key : CriticalProcessDied.ImageSize
Value: 0x1f8000
Key : CriticalProcessDied.ImageTimestamp
Value: 0xab0dece3
Key : CriticalProcessDied.Process
Value: csrss.exe
Key : CriticalProcessDied.Symbol
Value: ntdll.dll!KiRaiseUserExceptionDispatcher
Key : CriticalProcessDied.WERReportId
Value: d88c0314-ec8f-47b2-95f0-c745012ef165
Key : Dump.Attributes.AsUlong
Value: 0x8
Key : Dump.Attributes.KernelGeneratedTriageDump
Value: 1
Key : Failure.Bucket
Value: 0xEF_csrss.exe_BUGCHECK_CRITICAL_PROCESS_403ac080_ntdll.dll!KiRaiseUserExceptionDispatcher_IMAGE_ntdll.dll
Key : Failure.Hash
Value: {0e0805cc-5ba1-010b-f72a-2afd8a83c2b1}
BUGCHECK_CODE: ef
BUGCHECK_P1: ffffb10c40b87140
BUGCHECK_P2: 0
BUGCHECK_P3: 0
BUGCHECK_P4: 0
FILE_IN_CAB: 040825-6875-01.dmp
DUMP_FILE_ATTRIBUTES: 0x8
Kernel Generated Triage Dump
FAULTING_THREAD: ffffb10c403ac080
PROCESS_NAME: csrss.exe
CRITICAL_PROCESS: csrss.exe
ERROR_CODE: (NTSTATUS) 0x403ac080 - <Unable to get error code text>
CRITICAL_PROCESS_REPORTGUID: {d88c0314-ec8f-47b2-95f0-c745012ef165}
IMAGE_NAME: ntdll.dll
MODULE_NAME: ntdll
FAULTING_MODULE: 0000000000000000
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
STACK_TEXT:
ffffd603`b9a07838 fffff805`7730bd52 : 00000000`000000ef ffffb10c`40b87140 00000000`00000000 00000000`00000000 : nt!KeBugCheckEx
ffffd603`b9a07840 fffff805`77248fb1 : ffffb10c`40b87140 00000000`00000000 00000000`00000002 fffff805`76d5e62f : nt!PspCatchCriticalBreak+0x10e
ffffd603`b9a078e0 fffff805`7710a0f0 : ffffb10c`00000000 00000000`00000000 ffffb10c`40b87140 ffffb10c`40b87578 : nt!PspTerminateAllThreads+0x13ec21
ffffd603`b9a07950 fffff805`77109eec : ffffb10c`40b87140 00000000`00000000 00000000`00000000 ffffb10c`43c16080 : nt!PspTerminateProcess+0xe0
ffffd603`b9a07990 fffff805`76e11f05 : ffffb10c`40b87140 ffffb10c`403ac080 ffffd603`b9a07a80 ffffffff`ee1e5d00 : nt!NtTerminateProcess+0x9c
ffffd603`b9a07a00 00007ffe`f83cda74 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x25
000000ce`539be398 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffe`f83cda74
STACK_COMMAND: .process /r /p 0xffffb10c40b87140; .thread 0xffffb10c403ac080 ; kb
FAILURE_BUCKET_ID: 0xEF_csrss.exe_BUGCHECK_CRITICAL_PROCESS_403ac080_ntdll.dll!KiRaiseUserExceptionDispatcher_IMAGE_ntdll.dll
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {0e0805cc-5ba1-010b-f72a-2afd8a83c2b1}
Followup: MachineOwner
---------
8: kd> lmvm ntdll
Browse full module list
start end module name
8: kd> lmvm ntdll
Browse full module list
start end module name
8: kd> lmvm ntdll
Browse full module list
start end module name
8: kd> lmDv
start end module name
fffff640`f8c00000 fffff640`f8ed7000 win32kbase (export symbols) win32kbase.sys
Loaded symbol image file: win32kbase.sys
Mapped memory image file: C:\Windows\system32\win32kbase.sys
Image path: win32kbase.sys
Image name: win32kbase.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: B5BF63EA (This is a reproducible build file hash, not a timestamp)
CheckSum: 002CF6CB
ImageSize: 002D7000
File version: 10.0.19041.5737
Product version: 10.0.19041.5737
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: win32kbase.sys
OriginalFilename: win32kbase.sys
ProductVersion: 10.0.19041.5737
FileVersion: 10.0.19041.5737 (WinBuild.160101.0800)
FileDescription: Base Win32k Kernel Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff640`f8ee0000 fffff640`f9294000 win32kfull (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\win32kfull.sys\9E98247F3b4000\win32kfull.sys
Image path: win32kfull.sys
Image name: win32kfull.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 9E98247F (This is a reproducible build file hash, not a timestamp)
CheckSum: 003A9F42
ImageSize: 003B4000
File version: 10.0.19041.5737
Product version: 10.0.19041.5737
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: win32kfull.sys
OriginalFilename: win32kfull.sys
ProductVersion: 10.0.19041.5737
FileVersion: 10.0.19041.5737 (WinBuild.160101.0800)
FileDescription: Full/Desktop Win32k Kernel Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff640`f92a0000 fffff640`f92e9000 cdd (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\cdd.dll\24CC8D6A49000\cdd.dll
Image path: cdd.dll
Image name: cdd.dll
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 24CC8D6A (This is a reproducible build file hash, not a timestamp)
CheckSum: 00042CFB
ImageSize: 00049000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.4 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: cdd.dll
OriginalFilename: cdd.dll
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: Canonical Display Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff640`f96e0000 fffff640`f977b000 win32k (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\win32k.sys\5FE1BAE19b000\win32k.sys
Image path: win32k.sys
Image name: win32k.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 5FE1BAE1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000A0191
ImageSize: 0009B000
File version: 10.0.19041.5728
Product version: 10.0.19041.5728
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: win32k.sys
OriginalFilename: win32k.sys
ProductVersion: 10.0.19041.5728
FileVersion: 10.0.19041.5728 (WinBuild.160101.0800)
FileDescription: Multi-User Win32 Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`75400000 fffff805`75437000 wcifs (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\wcifs.sys\920F9C1237000\wcifs.sys
Image path: wcifs.sys
Image name: wcifs.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 920F9C12 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00035059
ImageSize: 00037000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: wcifs.sys
OriginalFilename: wcifs.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: Windows Container Isolation FS Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`75440000 fffff805`75454000 mmcss (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mmcss.sys\F38AC30C14000\mmcss.sys
Image path: mmcss.sys
Image name: mmcss.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: F38AC30C (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001084B
ImageSize: 00014000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: mmcss.sys
OriginalFilename: mmcss.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: MMCSS Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`75460000 fffff805`754e2000 cldflt (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\cldflt.sys\860AC2D282000\cldflt.sys
Image path: cldflt.sys
Image name: cldflt.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 860AC2D2 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000845F5
ImageSize: 00082000
File version: 10.0.19041.5723
Product version: 10.0.19041.5723
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: cldflt.sys
OriginalFilename: cldflt.sys
ProductVersion: 10.0.19041.5723
FileVersion: 10.0.19041.5723 (WinBuild.160101.0800)
FileDescription: Cloud Files Mini Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`754f0000 fffff805`7550a000 storqosflt (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\storqosflt.sys\4C7271B11a000\storqosflt.sys
Image path: storqosflt.sys
Image name: storqosflt.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 4C7271B1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00018711
ImageSize: 0001A000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: storqosflt.sys
OriginalFilename: storqosflt.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: Storage QoS Filter
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`75510000 fffff805`75537000 bindflt (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\bindflt.sys\E42350D727000\bindflt.sys
Image path: bindflt.sys
Image name: bindflt.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: E42350D7 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00030B16
ImageSize: 00027000
File version: 10.0.19041.5723
Product version: 10.0.19041.5723
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: bindflt.sys
OriginalFilename: bindflt.sys
ProductVersion: 10.0.19041.5723
FileVersion: 10.0.19041.5723 (WinBuild.160101.0800)
FileDescription: Windows Bind Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`75540000 fffff805`75558000 mslldp (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mslldp.sys\71FCC6F418000\mslldp.sys
Image path: mslldp.sys
Image name: mslldp.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 71FCC6F4 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00016923
ImageSize: 00018000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: MSLLDP.SYS
OriginalFilename: MSLLDP.SYS
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Microsoft Link-Layer Discovery Protocol Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`75560000 fffff805`75571000 MSKSSRV (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\MSKSSRV.sys\FB3FAFF911000\MSKSSRV.sys
Image path: MSKSSRV.sys
Image name: MSKSSRV.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: FB3FAFF9 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000C96D
ImageSize: 00011000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.9 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: mskssrv.sys
OriginalFilename: mskssrv.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: MS KS Server
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`75580000 fffff805`75598000 lltdio (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\lltdio.sys\D4D91B5718000\lltdio.sys
Image path: lltdio.sys
Image name: lltdio.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: D4D91B57 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00012B46
ImageSize: 00018000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: LLTDIO.SYS
OriginalFilename: LLTDIO.SYS
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Link-Layer Topology Mapper I/O Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`755a0000 fffff805`755bb000 rspndr (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\rspndr.sys\9E43BCCD1b000\rspndr.sys
Image path: rspndr.sys
Image name: rspndr.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 9E43BCCD (This is a reproducible build file hash, not a timestamp)
CheckSum: 000194E8
ImageSize: 0001B000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: RSPNDR.SYS
OriginalFilename: RSPNDR.SYS
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Link-Layer Topology Responder Driver for NDIS 6
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`755c0000 fffff805`755dd000 wanarp (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\wanarp.sys\1DB2DF211d000\wanarp.sys
Image path: wanarp.sys
Image name: wanarp.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 1DB2DF21 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00022120
ImageSize: 0001D000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: WANARP.SYS
OriginalFilename: WANARP.SYS
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: MS Remote Access and Routing ARP Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`755e0000 fffff805`7569f000 nwifi (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\nwifi.sys\26907978bf000\nwifi.sys
Image path: nwifi.sys
Image name: nwifi.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 26907978 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000C1948
ImageSize: 000BF000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: NWiFi.SYS
OriginalFilename: NWiFi.SYS
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: NativeWiFi Miniport Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`756a0000 fffff805`756b8000 ndisuio (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ndisuio.sys\4739676018000\ndisuio.sys
Image path: ndisuio.sys
Image name: ndisuio.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 47396760 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00016611
ImageSize: 00018000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: NDISUIO.SYS
OriginalFilename: NDISUIO.SYS
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: NDIS User mode I/O driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`756c0000 fffff805`75716000 msquic (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\msquic.sys\D21F4FFE56000\msquic.sys
Image path: msquic.sys
Image name: msquic.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: D21F4FFE (This is a reproducible build file hash, not a timestamp)
CheckSum: 0005B4D8
ImageSize: 00056000
File version: 10.0.19041.4046
Product version: 10.0.19041.4046
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: msquic.sys
OriginalFilename: msquic.sys
ProductVersion: 10.0.19041.4046
FileVersion: 10.0.19041.4046 (WinBuild.160101.0800)
FileDescription: Windows QUIC Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`75720000 fffff805`75732000 condrv (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\condrv.sys\232C8BF312000\condrv.sys
Image path: condrv.sys
Image name: condrv.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 232C8BF3 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00015AFE
ImageSize: 00012000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: condrv.sys
OriginalFilename: condrv.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: Console Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`75740000 fffff805`758c8000 HTTP (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\HTTP.sys\24432657188000\HTTP.sys
Image path: HTTP.sys
Image name: HTTP.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 24432657 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0019171E
ImageSize: 00188000
File version: 10.0.19041.5737
Product version: 10.0.19041.5737
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: http.sys
OriginalFilename: http.sys
ProductVersion: 10.0.19041.5737
FileVersion: 10.0.19041.5737 (WinBuild.160101.0800)
FileDescription: HTTP Protocol Stack
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`758d0000 fffff805`758f5000 bowser (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\bowser.sys\0C166E2525000\bowser.sys
Image path: bowser.sys
Image name: bowser.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 0C166E25 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002436D
ImageSize: 00025000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: browser.sys
OriginalFilename: browser.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: NT Lan Manager Datagram Receiver Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`75900000 fffff805`7591a000 mpsdrv (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mpsdrv.sys\0EBF3D281a000\mpsdrv.sys
Image path: mpsdrv.sys
Image name: mpsdrv.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 0EBF3D28 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00019727
ImageSize: 0001A000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: mpsdrv.sys
OriginalFilename: mpsdrv.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Microsoft Protection Service Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`75920000 fffff805`759b4000 mrxsmb (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mrxsmb.sys\F605F1C894000\mrxsmb.sys
Image path: mrxsmb.sys
Image name: mrxsmb.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: F605F1C8 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0009C73E
ImageSize: 00094000
File version: 10.0.19041.5723
Product version: 10.0.19041.5723
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: MRxSmb.sys
OriginalFilename: MRXSMB.Sys
ProductVersion: 10.0.19041.5723
FileVersion: 10.0.19041.5723 (WinBuild.160101.0800)
FileDescription: Windows NT SMB Minirdr
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`759c0000 fffff805`75a05000 mrxsmb20 (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mrxsmb20.sys\4E62B46145000\mrxsmb20.sys
Image path: mrxsmb20.sys
Image name: mrxsmb20.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 4E62B461 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000474D8
ImageSize: 00045000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: MRxSmb20.sys
OriginalFilename: MRXSMB20.Sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: Longhorn SMB 2.0 Redirector
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`75a10000 fffff805`75a17000 inpoutx64 (deferred)
Image path: inpoutx64.sys
Image name: inpoutx64.sys
Browse all global symbols functions data Symbol Reload
Timestamp: Sat Oct 18 02:01:16 2008 (48F9193C)
CheckSum: 00009319
ImageSize: 00007000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`75a20000 fffff805`75a76000 srvnet (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\srvnet.sys\80E74C4E56000\srvnet.sys
Image path: srvnet.sys
Image name: srvnet.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 80E74C4E (This is a reproducible build file hash, not a timestamp)
CheckSum: 000533E3
ImageSize: 00056000
File version: 10.0.19041.5737
Product version: 10.0.19041.5737
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: SRVNET.SYS
OriginalFilename: SRVNET.SYS
ProductVersion: 10.0.19041.5737
FileVersion: 10.0.19041.5737 (WinBuild.160101.0800)
FileDescription: Server Network driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`75a80000 fffff805`75aa7000 Ndu (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\Ndu.sys\ABC6C89427000\Ndu.sys
Image path: Ndu.sys
Image name: Ndu.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: ABC6C894 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000213E1
ImageSize: 00027000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ndu.sys
OriginalFilename: ndu.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Windows Network Data Usage Monitoring Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`75ab0000 fffff805`75b86000 peauth (deferred)
Image path: peauth.sys
Image name: peauth.sys
Browse all global symbols functions data Symbol Reload
Timestamp: ***** Invalid (9B507B6B)
CheckSum: 000D5394
ImageSize: 000D6000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`75b90000 fffff805`75ba5000 tcpipreg (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\tcpipreg.sys\1215789E15000\tcpipreg.sys
Image path: tcpipreg.sys
Image name: tcpipreg.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 1215789E (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001C618
ImageSize: 00015000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 1.0 App
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: tcpipreg.sys
OriginalFilename: tcpipreg.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: TCP/IP Registry Compatibility Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`75bb0000 fffff805`75bc3000 vwifimp (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\vwifimp.sys\B98A06FC13000\vwifimp.sys
Image path: vwifimp.sys
Image name: vwifimp.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: B98A06FC (This is a reproducible build file hash, not a timestamp)
CheckSum: 00018104
ImageSize: 00013000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: vwifimp.sys
OriginalFilename: vwifimp.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Virtual WiFi Miniport Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`75bd0000 fffff805`75c97000 srv2 (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\srv2.sys\A48B2EF5c7000\srv2.sys
Image path: srv2.sys
Image name: srv2.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: A48B2EF5 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000C537F
ImageSize: 000C7000
File version: 10.0.19041.5737
Product version: 10.0.19041.5737
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: SRV2.SYS
OriginalFilename: SRV2.SYS
ProductVersion: 10.0.19041.5737
FileVersion: 10.0.19041.5737 (WinBuild.160101.0800)
FileDescription: Smb 2.0 Server driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`75ca0000 fffff805`75cbd000 rassstp (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\rassstp.sys\F5AA47161d000\rassstp.sys
Image path: rassstp.sys
Image name: rassstp.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: F5AA4716 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001CE3C
ImageSize: 0001D000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: rassstp.sys
OriginalFilename: rassstp.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: RAS SSTP Miniport Call Manager
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`75cc0000 fffff805`75d9f000 dxgmms2 (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\dxgmms2.sys\A030B22Ddf000\dxgmms2.sys
Image path: dxgmms2.sys
Image name: dxgmms2.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: A030B22D (This is a reproducible build file hash, not a timestamp)
CheckSum: 000E19AA
ImageSize: 000DF000
File version: 10.0.19041.5723
Product version: 10.0.19041.5723
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: dxgmms2.sys
OriginalFilename: dxgmms2.sys
ProductVersion: 10.0.19041.5723
FileVersion: 10.0.19041.5723 (WinBuild.160101.0800)
FileDescription: DirectX Graphics MMS
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`75da0000 fffff805`75dbb000 monitor (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\monitor.sys\1F4DB7E61b000\monitor.sys
Image path: monitor.sys
Image name: monitor.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 1F4DB7E6 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000212F5
ImageSize: 0001B000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: monitor.sys
OriginalFilename: monitor.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: Monitor Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`75dc0000 fffff805`75deb000 luafv (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\luafv.sys\E4D257442b000\luafv.sys
Image path: luafv.sys
Image name: luafv.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: E4D25744 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00029401
ImageSize: 0002B000
File version: 10.0.19041.5737
Product version: 10.0.19041.5737
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: luafv.sys
OriginalFilename: luafv.sys
ProductVersion: 10.0.19041.5737
FileVersion: 10.0.19041.5737 (WinBuild.160101.0800)
FileDescription: LUA File Virtualization Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`75df0000 fffff805`75dff000 ndistapi (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ndistapi.sys\43660954f000\ndistapi.sys
Image path: ndistapi.sys
Image name: ndistapi.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 43660954 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001625B
ImageSize: 0000F000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: NDISTAPI.SYS
OriginalFilename: NDISTAPI.SYS
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: NDIS 3.0 connection wrapper driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`76280000 fffff805`7650f000 mcupdate (deferred)
Image path: mcupdate.dll
Image name: mcupdate.dll
Browse all global symbols functions data Symbol Reload
Timestamp: ***** Invalid (9FB1DE46)
CheckSum: 0028C60B
ImageSize: 0028F000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`76510000 fffff805`76516000 hal (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\hal.dll\1A7BE8E96000\hal.dll
Image path: hal.dll
Image name: hal.dll
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 1A7BE8E9 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000F67D
ImageSize: 00006000
File version: 10.0.19041.5000
Product version: 10.0.19041.5000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: hal.dll
OriginalFilename: hal.dll
ProductVersion: 10.0.19041.5000
FileVersion: 10.0.19041.5000 (WinBuild.160101.0800)
FileDescription: Hardware Abstraction Layer DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`76520000 fffff805`7652b000 kdcom (deferred)
Image path: kdcom.dll
Image name: kdcom.dll
Browse all global symbols functions data Symbol Reload
Timestamp: ***** Invalid (FE185FA8)
CheckSum: 00004EF6
ImageSize: 0000B000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`76530000 fffff805`76558000 tm (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\tm.sys\7B64427D28000\tm.sys
Image path: tm.sys
Image name: tm.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 7B64427D (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002FB51
ImageSize: 00028000
File version: 10.0.19041.5723
Product version: 10.0.19041.5723
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: tm.sys
OriginalFilename: tm.sys
ProductVersion: 10.0.19041.5723
FileVersion: 10.0.19041.5723 (WinBuild.160101.0800)
FileDescription: Kernel Transaction Manager Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`76560000 fffff805`765ce000 CLFS (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\CLFS.SYS\29D6C2FE6e000\CLFS.SYS
Image path: CLFS.SYS
Image name: CLFS.SYS
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 29D6C2FE (This is a reproducible build file hash, not a timestamp)
CheckSum: 0007027A
ImageSize: 0006E000
File version: 10.0.19041.5737
Product version: 10.0.19041.5737
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: clfs.sys
OriginalFilename: Clfs.Sys
ProductVersion: 10.0.19041.5737
FileVersion: 10.0.19041.5737 (WinBuild.160101.0800)
FileDescription: Common Log File System Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`765d0000 fffff805`765ea000 PSHED (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\PSHED.dll\4C55DC991a000\PSHED.dll
Image path: PSHED.dll
Image name: PSHED.dll
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 4C55DC99 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000201A9
ImageSize: 0001A000
File version: 10.0.19041.208
Product version: 10.0.19041.208
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: pshed.dll
OriginalFilename: pshed.dll
ProductVersion: 10.0.19041.208
FileVersion: 10.0.19041.208 (WinBuild.160101.0800)
FileDescription: Platform Specific Hardware Error Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`765f0000 fffff805`765fb000 BOOTVID (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\BOOTVID.dll\D13EE5B6b000\BOOTVID.dll
Image path: BOOTVID.dll
Image name: BOOTVID.dll
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: D13EE5B6 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00013A3C
ImageSize: 0000B000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.4 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: bootvid.dll
OriginalFilename: bootvid.dll
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: VGA Boot Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`76600000 fffff805`7666d000 FLTMGR (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\FLTMGR.SYS\FDF7A1166d000\FLTMGR.SYS
Image path: FLTMGR.SYS
Image name: FLTMGR.SYS
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: FDF7A116 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0006BAE7
ImageSize: 0006D000
File version: 10.0.19041.5723
Product version: 10.0.19041.5723
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: fltMgr.sys
OriginalFilename: fltMgr.sys
ProductVersion: 10.0.19041.5723
FileVersion: 10.0.19041.5723 (WinBuild.160101.0800)
FileDescription: Microsoft Filesystem Filter Manager
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`76670000 fffff805`7667c000 ntosext (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ntosext.sys\71DD3C9Fc000\ntosext.sys
Image path: ntosext.sys
Image name: ntosext.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 71DD3C9F (This is a reproducible build file hash, not a timestamp)
CheckSum: 00009677
ImageSize: 0000C000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ntosext.sys
OriginalFilename: ntosext.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: NTOS extension host driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`76a00000 fffff805`77a46000 nt (pdb symbols) C:\ProgramData\Dbg\sym\ntkrnlmp.pdb\1026DAEBB5D73E191F375C43DF91B3191\ntkrnlmp.pdb
Loaded symbol image file: ntkrnlmp.exe
Mapped memory image file: C:\ProgramData\Dbg\sym\ntkrnlmp.exe\7E6928801046000\ntkrnlmp.exe
Image path: ntkrnlmp.exe
Image name: ntkrnlmp.exe
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 7E692880 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00A5D289
ImageSize: 01046000
File version: 10.0.19041.5737
Product version: 10.0.19041.5737
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 1.0 App
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ntkrnlmp.exe
OriginalFilename: ntkrnlmp.exe
ProductVersion: 10.0.19041.5737
FileVersion: 10.0.19041.5737 (WinBuild.160101.0800)
FileDescription: NT Kernel & System
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7bc00000 fffff805`7bd17000 clipsp (deferred)
Image path: clipsp.sys
Image name: clipsp.sys
Browse all global symbols functions data Symbol Reload
Timestamp: Sun Apr 6 23:35:58 2025 (67F2E5AE)
CheckSum: 001143D8
ImageSize: 00117000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`7bd20000 fffff805`7bd4b000 ksecdd (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ksecdd.sys\894362472b000\ksecdd.sys
Image path: ksecdd.sys
Image name: ksecdd.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 89436247 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000274C7
ImageSize: 0002B000
File version: 10.0.19041.5723
Product version: 10.0.19041.5723
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ksecdd.sys
OriginalFilename: ksecdd.sys
ProductVersion: 10.0.19041.5723
FileVersion: 10.0.19041.5723 (WinBuild.160101.0800)
FileDescription: Kernel Security Support Provider Interface
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7bd50000 fffff805`7bdb2000 msrpc (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\msrpc.sys\D0523BB162000\msrpc.sys
Image path: msrpc.sys
Image name: msrpc.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: D0523BB1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000619EF
ImageSize: 00062000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: krpcdd.sys
OriginalFilename: krpcdd.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: Kernel Remote Procedure Call Provider
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7bdc0000 fffff805`7bdd1000 cmimcext (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\cmimcext.sys\B0D7A04211000\cmimcext.sys
Image path: cmimcext.sys
Image name: cmimcext.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: B0D7A042 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000BD57
ImageSize: 00011000
File version: 10.0.19041.5723
Product version: 10.0.19041.5723
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: cmimcext.sys
OriginalFilename: cmimcext.sys
ProductVersion: 10.0.19041.5723
FileVersion: 10.0.19041.5723 (WinBuild.160101.0800)
FileDescription: Kernel Configuration Manager Initial Configuration Extension Host Export Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7bde0000 fffff805`7bdf1000 werkernel (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\werkernel.sys\79433C0711000\werkernel.sys
Image path: werkernel.sys
Image name: werkernel.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 79433C07 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00017196
ImageSize: 00011000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: werkernel
OriginalFilename: werkernel.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: Windows Error Reporting Kernel Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7be00000 fffff805`7beec000 CI (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\CI.dll\BEE04F72ec000\CI.dll
Image path: CI.dll
Image name: CI.dll
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: BEE04F72 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000F3B19
ImageSize: 000EC000
File version: 10.0.19041.5723
Product version: 10.0.19041.5723
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ci.dll
OriginalFilename: ci.dll
ProductVersion: 10.0.19041.5723
FileVersion: 10.0.19041.5723 (WinBuild.160101.0800)
FileDescription: Code Integrity Module
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7bef0000 fffff805`7bfab000 cng (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\cng.sys\8AF25707bb000\cng.sys
Image path: cng.sys
Image name: cng.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 8AF25707 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000B8A74
ImageSize: 000BB000
File version: 10.0.19041.5737
Product version: 10.0.19041.5737
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: cng.sys
OriginalFilename: cng.sys
ProductVersion: 10.0.19041.5737
FileVersion: 10.0.19041.5737 (WinBuild.160101.0800)
FileDescription: Kernel Cryptography, Next Generation
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7bfb0000 fffff805`7c081000 Wdf01000 (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\Wdf01000.sys\0CAD54FFd1000\Wdf01000.sys
Image path: Wdf01000.sys
Image name: Wdf01000.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 0CAD54FF (This is a reproducible build file hash, not a timestamp)
CheckSum: 000D4544
ImageSize: 000D1000
File version: 1.31.19041.5678
Product version: 1.31.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: wdf01000.sys
OriginalFilename: wdf01000.sys
ProductVersion: 1.31.19041.5678
FileVersion: 1.31.19041.5678 (WinBuild.160101.0800)
FileDescription: Kernel Mode Driver Framework Runtime
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c090000 fffff805`7c0a3000 WDFLDR (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\WDFLDR.SYS\71C4355B13000\WDFLDR.SYS
Image path: WDFLDR.SYS
Image name: WDFLDR.SYS
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 71C4355B (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000F3D6
ImageSize: 00013000
File version: 1.31.19041.5607
Product version: 1.31.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: wdfldr.sys
OriginalFilename: wdfldr.sys
ProductVersion: 1.31.19041.5607
FileVersion: 1.31.19041.5607 (WinBuild.160101.0800)
FileDescription: Kernel Mode Driver Framework Loader
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c0b0000 fffff805`7c0bf000 SleepStudyHelper (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\SleepStudyHelper.sys\664F6ECBf000\SleepStudyHelper.sys
Image path: SleepStudyHelper.sys
Image name: SleepStudyHelper.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 664F6ECB (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000FC58
ImageSize: 0000F000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: SleepStudyHelper.sys
OriginalFilename: SleepStudyHelper.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Sleep Study Helper
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c0c0000 fffff805`7c0d1000 WppRecorder (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\WppRecorder.sys\15060D0011000\WppRecorder.sys
Image path: WppRecorder.sys
Image name: WppRecorder.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 15060D00 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001415E
ImageSize: 00011000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: WppRecorder.sys
OriginalFilename: WppRecorder.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: WPP Trace Recorder
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c0e0000 fffff805`7c106000 acpiex (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\acpiex.sys\C8D60B4426000\acpiex.sys
Image path: acpiex.sys
Image name: acpiex.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: C8D60B44 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000302D2
ImageSize: 00026000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: acpiex.sys
OriginalFilename: acpiex.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: ACPIEx Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c110000 fffff805`7c11e000 msseccore (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\msseccore.sys\C121C54Be000\msseccore.sys
Image path: msseccore.sys
Image name: msseccore.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: C121C54B (This is a reproducible build file hash, not a timestamp)
CheckSum: 000149BE
ImageSize: 0000E000
File version: 10.8792.19041.5678
Product version: 10.8792.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.0 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: msseccore
OriginalFilename: msseccore.sys
ProductVersion: 10.8792.19041.5678
FileVersion: 10.8792.19041.5678 (WinBuild.160101.0800)
FileDescription: Microsoft Security Core Boot Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c120000 fffff805`7c13a000 SgrmAgent (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\SgrmAgent.sys\A64747741a000\SgrmAgent.sys
Image path: SgrmAgent.sys
Image name: SgrmAgent.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: A6474774 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001E4FC
ImageSize: 0001A000
File version: 10.0.19041.208
Product version: 10.0.19041.208
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.0 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: SgrmAgent
OriginalFilename: SgrmAgent.sys
ProductVersion: 10.0.19041.208
FileVersion: 10.0.19041.208 (WinBuild.160101.0800)
FileDescription: System Guard Runtime Monitor Agent Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c140000 fffff805`7c20d000 ACPI (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ACPI.sys\A2E37420cd000\ACPI.sys
Image path: ACPI.sys
Image name: ACPI.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: A2E37420 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000C8746
ImageSize: 000CD000
File version: 10.0.19041.5723
Product version: 10.0.19041.5723
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ACPI.sys
OriginalFilename: ACPI.sys
ProductVersion: 10.0.19041.5723
FileVersion: 10.0.19041.5723 (WinBuild.160101.0800)
FileDescription: ACPI Driver for NT
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c210000 fffff805`7c21c000 WMILIB (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\WMILIB.SYS\CD518505c000\WMILIB.SYS
Image path: WMILIB.SYS
Image name: WMILIB.SYS
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: CD518505 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00009CB9
ImageSize: 0000C000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: WmiLib.sys
OriginalFilename: WmiLib.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: WMILIB WMI support library Dll
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c220000 fffff805`7c22b000 msisadrv (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\msisadrv.sys\BCF8C61Bb000\msisadrv.sys
Image path: msisadrv.sys
Image name: msisadrv.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: BCF8C61B (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000EA47
ImageSize: 0000B000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: msisadrv.sys
OriginalFilename: msisadrv.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: ISA Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c230000 fffff805`7c2a7000 pci (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\pci.sys\9477466177000\pci.sys
Image path: pci.sys
Image name: pci.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 94774661 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0007E626
ImageSize: 00077000
File version: 10.0.19041.5723
Product version: 10.0.19041.5723
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: pci.sys
OriginalFilename: pci.sys
ProductVersion: 10.0.19041.5723
FileVersion: 10.0.19041.5723 (WinBuild.160101.0800)
FileDescription: NT Plug and Play PCI Enumerator
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c2b0000 fffff805`7c2f5000 tpm (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\tpm.sys\F9E6ADB145000\tpm.sys
Image path: tpm.sys
Image name: tpm.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: F9E6ADB1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00043C9D
ImageSize: 00045000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: tpm.sys
OriginalFilename: tpm.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: TPM Device Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c310000 fffff805`7c37b000 intelpep (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\intelpep.sys\2F8E972D6b000\intelpep.sys
Image path: intelpep.sys
Image name: intelpep.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 2F8E972D (This is a reproducible build file hash, not a timestamp)
CheckSum: 00075850
ImageSize: 0006B000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.A Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: intelpep.sys
OriginalFilename: intelpep.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: Intel Power Engine Plugin
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c380000 fffff805`7c397000 WindowsTrustedRT (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\WindowsTrustedRT.sys\86ECAD9617000\WindowsTrustedRT.sys
Image path: WindowsTrustedRT.sys
Image name: WindowsTrustedRT.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 86ECAD96 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002232A
ImageSize: 00017000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: WindowsTrustedRT.sys
OriginalFilename: WindowsTrustedRT.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: Windows Trusted Runtime Interface Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c3a0000 fffff805`7c3ab000 IntelTA (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\IntelTA.sys\AAE76087b000\IntelTA.sys
Image path: IntelTA.sys
Image name: IntelTA.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: AAE76087 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001277C
ImageSize: 0000B000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.A Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: IntelTA.sys
OriginalFilename: IntelTA.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: Intel Telemetry Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c3b0000 fffff805`7c3bb000 WindowsTrustedRTProxy (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\WindowsTrustedRTProxy.sys\AA5F5790b000\WindowsTrustedRTProxy.sys
Image path: WindowsTrustedRTProxy.sys
Image name: WindowsTrustedRTProxy.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: AA5F5790 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00007869
ImageSize: 0000B000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: WindowsTrustedRTProxy.sys
OriginalFilename: WindowsTrustedRTProxy.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Windows Trusted Runtime Service Proxy Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c3c0000 fffff805`7c3d4000 pcw (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\pcw.sys\18BA8F2C14000\pcw.sys
Image path: pcw.sys
Image name: pcw.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 18BA8F2C (This is a reproducible build file hash, not a timestamp)
CheckSum: 00015BF3
ImageSize: 00014000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.8 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: pcw.sys
OriginalFilename: pcw.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: Performance Counters for Windows Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c3e0000 fffff805`7c3f5000 vdrvroot (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\vdrvroot.sys\E613EBA715000\vdrvroot.sys
Image path: vdrvroot.sys
Image name: vdrvroot.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: E613EBA7 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000184EC
ImageSize: 00015000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: vdrvroot.sys
OriginalFilename: vdrvroot.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Virtual Drive Root Enumerator
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c400000 fffff805`7c430000 pdc (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\pdc.sys\873338D730000\pdc.sys
Image path: pdc.sys
Image name: pdc.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 873338D7 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002FC5B
ImageSize: 00030000
File version: 10.0.19041.5737
Product version: 10.0.19041.5737
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: pdc.sys
OriginalFilename: pdc.sys
ProductVersion: 10.0.19041.5737
FileVersion: 10.0.19041.5737 (WinBuild.160101.0800)
FileDescription: Power Dependency Coordinator Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c440000 fffff805`7c459000 CEA (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\CEA.sys\1E985ACF19000\CEA.sys
Image path: CEA.sys
Image name: CEA.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 1E985ACF (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001CC15
ImageSize: 00019000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: EventAggregation.sys
OriginalFilename: EventAggregation.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: Event Aggregation Kernel Mode Library
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c460000 fffff805`7c491000 partmgr (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\partmgr.sys\00D367A931000\partmgr.sys
Image path: partmgr.sys
Image name: partmgr.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 00D367A9 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002F6C6
ImageSize: 00031000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: partmgr.sys
OriginalFilename: partmgr.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: Partition driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c4a0000 fffff805`7c54b000 spaceport (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\spaceport.sys\C2BC06AEab000\spaceport.sys
Image path: spaceport.sys
Image name: spaceport.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: C2BC06AE (This is a reproducible build file hash, not a timestamp)
CheckSum: 000A919A
ImageSize: 000AB000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: spaceport.sys
OriginalFilename: spaceport.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: Storage Spaces Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c550000 fffff805`7c569000 volmgr (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\volmgr.sys\59E4DD6619000\volmgr.sys
Image path: volmgr.sys
Image name: volmgr.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 59E4DD66 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001C845
ImageSize: 00019000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: volmgr.sys
OriginalFilename: volmgr.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: Volume Manager Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c570000 fffff805`7c5d3000 volmgrx (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\volmgrx.sys\5298D71763000\volmgrx.sys
Image path: volmgrx.sys
Image name: volmgrx.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 5298D717 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0006AB53
ImageSize: 00063000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: volmgrx.sys
OriginalFilename: volmgrx.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Volume Manager Extension Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c5e0000 fffff805`7c5fe000 mountmgr (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mountmgr.sys\6FA7424A1e000\mountmgr.sys
Image path: mountmgr.sys
Image name: mountmgr.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 6FA7424A (This is a reproducible build file hash, not a timestamp)
CheckSum: 00024BD0
ImageSize: 0001E000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: mountmgr.sys
OriginalFilename: mountmgr.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Mount Point Manager
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c600000 fffff805`7c632000 storahci (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\storahci.sys\6A1B92AB32000\storahci.sys
Image path: storahci.sys
Image name: storahci.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 6A1B92AB (This is a reproducible build file hash, not a timestamp)
CheckSum: 0003A8EE
ImageSize: 00032000
File version: 10.0.19041.5000
Product version: 10.0.19041.5000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: storahci.sys
OriginalFilename: storahci.sys
ProductVersion: 10.0.19041.5000
FileVersion: 10.0.19041.5000 (WinBuild.160101.0800)
FileDescription: MS AHCI Storport Miniport Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c640000 fffff805`7c6f5000 storport (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\storport.sys\FA8F65C0b5000\storport.sys
Image path: storport.sys
Image name: storport.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: FA8F65C0 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000BAF39
ImageSize: 000B5000
File version: 10.0.19041.5728
Product version: 10.0.19041.5728
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: storport.sys
OriginalFilename: storport.sys
ProductVersion: 10.0.19041.5728
FileVersion: 10.0.19041.5728 (WinBuild.160101.0800)
FileDescription: Microsoft Storage Port Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c700000 fffff805`7c72f000 stornvme (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\stornvme.sys\DC5977C32f000\stornvme.sys
Image path: stornvme.sys
Image name: stornvme.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: DC5977C3 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002A2BE
ImageSize: 0002F000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: stornvme.sys
OriginalFilename: stornvme.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: Microsoft NVM Express Storport Miniport Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c730000 fffff805`7c74c000 EhStorClass (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\EhStorClass.sys\A82A14A61c000\EhStorClass.sys
Image path: EhStorClass.sys
Image name: EhStorClass.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: A82A14A6 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00023B23
ImageSize: 0001C000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: EhStorClass.sys
OriginalFilename: EhStorClass.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: Enhanced Storage Class driver for IEEE 1667 devices
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c750000 fffff805`7c76a000 fileinfo (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\fileinfo.sys\AEE275C21a000\fileinfo.sys
Image path: fileinfo.sys
Image name: fileinfo.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: AEE275C2 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002169B
ImageSize: 0001A000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: FileInfo.sys
OriginalFilename: FileInfo.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: FileInfo Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c770000 fffff805`7c7b0000 Wof (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\Wof.sys\E21A4A5140000\Wof.sys
Image path: Wof.sys
Image name: Wof.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: E21A4A51 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00044059
ImageSize: 00040000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: wof.sys
OriginalFilename: wof.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: Windows Overlay Filter
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7c7c0000 fffff805`7c854000 WdFilter (deferred)
Image path: WdFilter.sys
Image name: WdFilter.sys
Browse all global symbols functions data Symbol Reload
Timestamp: Wed Jun 16 02:49:27 1976 (0C24AE87)
CheckSum: 0009CB12
ImageSize: 00094000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`7c860000 fffff805`7cb37000 Ntfs (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\Ntfs.sys\6E374F792d7000\Ntfs.sys
Image path: Ntfs.sys
Image name: Ntfs.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 6E374F79 (This is a reproducible build file hash, not a timestamp)
CheckSum: 002BFB66
ImageSize: 002D7000
File version: 10.0.19041.5723
Product version: 10.0.19041.5723
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ntfs.sys
OriginalFilename: ntfs.sys
ProductVersion: 10.0.19041.5723
FileVersion: 10.0.19041.5723 (WinBuild.160101.0800)
FileDescription: NT File System Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7cb40000 fffff805`7cb4d000 Fs_Rec (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\Fs_Rec.sys\B9E5C55Cd000\Fs_Rec.sys
Image path: Fs_Rec.sys
Image name: Fs_Rec.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: B9E5C55C (This is a reproducible build file hash, not a timestamp)
CheckSum: 00017B4B
ImageSize: 0000D000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: fs_rec.sys
OriginalFilename: fs_rec.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: File System Recognizer Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7cb50000 fffff805`7ccbf000 ndis (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ndis.sys\0609217416f000\ndis.sys
Image path: ndis.sys
Image name: ndis.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 06092174 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0017372D
ImageSize: 0016F000
File version: 10.0.19041.5723
Product version: 10.0.19041.5723
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: NDIS.SYS
OriginalFilename: NDIS.SYS
ProductVersion: 10.0.19041.5723
FileVersion: 10.0.19041.5723 (WinBuild.160101.0800)
FileDescription: Network Driver Interface Specification (NDIS)
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7ccc0000 fffff805`7cd5c000 NETIO (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\NETIO.SYS\031E98DD9c000\NETIO.SYS
Image path: NETIO.SYS
Image name: NETIO.SYS
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 031E98DD (This is a reproducible build file hash, not a timestamp)
CheckSum: 0009DB8F
ImageSize: 0009C000
File version: 10.0.19041.5737
Product version: 10.0.19041.5737
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: netio.sys
OriginalFilename: netio.sys
ProductVersion: 10.0.19041.5737
FileVersion: 10.0.19041.5737 (WinBuild.160101.0800)
FileDescription: Network I/O Subsystem
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7cd60000 fffff805`7cd93000 ksecpkg (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ksecpkg.sys\20921FD133000\ksecpkg.sys
Image path: ksecpkg.sys
Image name: ksecpkg.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 20921FD1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00032116
ImageSize: 00033000
File version: 10.0.19041.5737
Product version: 10.0.19041.5737
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ksecpkg.sys
OriginalFilename: ksecpkg.sys
ProductVersion: 10.0.19041.5737
FileVersion: 10.0.19041.5737 (WinBuild.160101.0800)
FileDescription: Kernel Security Support Provider Interface Packages
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7cda0000 fffff805`7d08c000 tcpip (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\tcpip.sys\8B8953292ec000\tcpip.sys
Image path: tcpip.sys
Image name: tcpip.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 8B895329 (This is a reproducible build file hash, not a timestamp)
CheckSum: 002E478E
ImageSize: 002EC000
File version: 10.0.19041.5737
Product version: 10.0.19041.5737
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: tcpip.sys
OriginalFilename: tcpip.sys
ProductVersion: 10.0.19041.5737
FileVersion: 10.0.19041.5737 (WinBuild.160101.0800)
FileDescription: TCP/IP Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7d090000 fffff805`7d10f000 fwpkclnt (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\fwpkclnt.sys\9804843B7f000\fwpkclnt.sys
Image path: fwpkclnt.sys
Image name: fwpkclnt.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 9804843B (This is a reproducible build file hash, not a timestamp)
CheckSum: 0008A718
ImageSize: 0007F000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: fwpkclnt.sys
OriginalFilename: fwpkclnt.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: FWP/IPsec Kernel-Mode API
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7d110000 fffff805`7d140000 wfplwfs (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\wfplwfs.sys\D3E6445A30000\wfplwfs.sys
Image path: wfplwfs.sys
Image name: wfplwfs.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: D3E6445A (This is a reproducible build file hash, not a timestamp)
CheckSum: 0003A530
ImageSize: 00030000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: WFPLWFS.SYS
OriginalFilename: WFPLWFS.SYS
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: WFP NDIS 6.30 Lightweight Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7d150000 fffff805`7d21b000 fvevol (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\fvevol.sys\970452CFcb000\fvevol.sys
Image path: fvevol.sys
Image name: fvevol.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 970452CF (This is a reproducible build file hash, not a timestamp)
CheckSum: 000CB6CB
ImageSize: 000CB000
File version: 10.0.19041.5728
Product version: 10.0.19041.5728
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: FVEVOL.SYS
OriginalFilename: FVEVOL.SYS
ProductVersion: 10.0.19041.5728
FileVersion: 10.0.19041.5728 (WinBuild.160101.0800)
FileDescription: BitLocker Drive Encryption Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7d220000 fffff805`7d22b000 volume (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\volume.sys\83CF10C9b000\volume.sys
Image path: volume.sys
Image name: volume.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 83CF10C9 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000083D7
ImageSize: 0000B000
File version: 10.0.19041.1348
Product version: 10.0.19041.1348
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: volume.sys
OriginalFilename: volume.sys
ProductVersion: 10.0.19041.1348
FileVersion: 10.0.19041.1348 (WinBuild.160101.0800)
FileDescription: Volume driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7d230000 fffff805`7d29d000 volsnap (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\volsnap.sys\161F2CA46d000\volsnap.sys
Image path: volsnap.sys
Image name: volsnap.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 161F2CA4 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00076A66
ImageSize: 0006D000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: volsnap.sys
OriginalFilename: volsnap.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: Volume Shadow Copy driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7d2a0000 fffff805`7d2f0000 rdyboost (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\rdyboost.sys\76CA327050000\rdyboost.sys
Image path: rdyboost.sys
Image name: rdyboost.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 76CA3270 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00048E48
ImageSize: 00050000
File version: 10.0.19041.208
Product version: 10.0.19041.208
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: rdyboost.sys
OriginalFilename: rdyboost.sys
ProductVersion: 10.0.19041.208
FileVersion: 10.0.19041.208 (WinBuild.160101.0800)
FileDescription: ReadyBoost Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7d300000 fffff805`7d326000 mup (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mup.sys\47232DD926000\mup.sys
Image path: mup.sys
Image name: mup.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 47232DD9 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002504B
ImageSize: 00026000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: MUP.SYS
OriginalFilename: MUP.SYS
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: Multiple UNC Provider Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7d330000 fffff805`7d342000 iorate (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\iorate.sys\F9E9E49E12000\iorate.sys
Image path: iorate.sys
Image name: iorate.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: F9E9E49E (This is a reproducible build file hash, not a timestamp)
CheckSum: 00016E5E
ImageSize: 00012000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: iorate.sys
OriginalFilename: iorate.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: I/O rate control Filter
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7d370000 fffff805`7d38d000 disk (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\disk.sys\BA6040571d000\disk.sys
Image path: disk.sys
Image name: disk.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: BA604057 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00023F46
ImageSize: 0001D000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: disk.sys
OriginalFilename: disk.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: PnP Disk Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`7d390000 fffff805`7d402000 CLASSPNP (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\CLASSPNP.SYS\DA8B418A72000\CLASSPNP.SYS
Image path: CLASSPNP.SYS
Image name: CLASSPNP.SYS
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: DA8B418A (This is a reproducible build file hash, not a timestamp)
CheckSum: 0007C50D
ImageSize: 00072000
File version: 10.0.19041.5728
Product version: 10.0.19041.5728
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: Classpnp.sys
OriginalFilename: Classpnp.sys
ProductVersion: 10.0.19041.5728
FileVersion: 10.0.19041.5728 (WinBuild.160101.0800)
FileDescription: SCSI Class System Dll
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8f800000 fffff805`8f830000 cdrom (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\cdrom.sys\C4E5C98630000\cdrom.sys
Image path: cdrom.sys
Image name: cdrom.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: C4E5C986 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00032EFF
ImageSize: 00030000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: cdrom.sys
OriginalFilename: cdrom.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: SCSI CD-ROM Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8f840000 fffff805`8f855000 filecrypt (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\filecrypt.sys\3C7F622A15000\filecrypt.sys
Image path: filecrypt.sys
Image name: filecrypt.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 3C7F622A (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000FEC3
ImageSize: 00015000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: filecrypt.sys
OriginalFilename: filecrypt.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Windows sandboxing and encryption filter
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8f860000 fffff805`8f86e000 tbs (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\tbs.sys\B1A6DFBAe000\tbs.sys
Image path: tbs.sys
Image name: tbs.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: B1A6DFBA (This is a reproducible build file hash, not a timestamp)
CheckSum: 00008E2F
ImageSize: 0000E000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: TBS.SYS
OriginalFilename: TBS.SYS
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: Export driver for kernel mode TPM API
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8f870000 fffff805`8f889000 UCPD (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\UCPD.sys\9FDEC72719000\UCPD.sys
Image path: UCPD.sys
Image name: UCPD.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 9FDEC727 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001E15B
ImageSize: 00019000
File version: 4.0.1.0
Product version: 4.0.1.0
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: UCPD.sys
OriginalFilename: UCPD.sys
ProductVersion: 4.0.1.557282+50dea765
FileVersion: 4.0.1.557282
FileDescription: User Choice Protection Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8f890000 fffff805`8f89a000 Null (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\Null.SYS\01FE6381a000\Null.SYS
Image path: Null.SYS
Image name: Null.SYS
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 01FE6381 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00010308
ImageSize: 0000A000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: null.sys
OriginalFilename: null.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: NULL Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8f8a0000 fffff805`8f8aa000 Beep (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\Beep.SYS\E4AC8238a000\Beep.SYS
Image path: Beep.SYS
Image name: Beep.SYS
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: E4AC8238 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00008685
ImageSize: 0000A000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: beep.sys
OriginalFilename: beep.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: BEEP Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8f8b0000 fffff805`8fc5a000 dxgkrnl (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\dxgkrnl.sys\691CDBCB3aa000\dxgkrnl.sys
Image path: dxgkrnl.sys
Image name: dxgkrnl.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 691CDBCB (This is a reproducible build file hash, not a timestamp)
CheckSum: 003B1156
ImageSize: 003AA000
File version: 10.0.19041.5737
Product version: 10.0.19041.5737
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: dxgkrnl.sys
OriginalFilename: dxgkrnl.sys
ProductVersion: 10.0.19041.5737
FileVersion: 10.0.19041.5737 (WinBuild.160101.0800)
FileDescription: DirectX Graphics Kernel
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8fc60000 fffff805`8fc78000 watchdog (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\watchdog.sys\28AF795D18000\watchdog.sys
Image path: watchdog.sys
Image name: watchdog.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 28AF795D (This is a reproducible build file hash, not a timestamp)
CheckSum: 00015D0A
ImageSize: 00018000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: watchdog.sys
OriginalFilename: watchdog.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: Watchdog Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8fc80000 fffff805`8fc96000 BasicDisplay (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\BasicDisplay.sys\DEBFAE8616000\BasicDisplay.sys
Image path: BasicDisplay.sys
Image name: BasicDisplay.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: DEBFAE86 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001F68B
ImageSize: 00016000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.4 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: BasicDisplay.sys
OriginalFilename: BasicDisplay.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: Microsoft Basic Display Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8fca0000 fffff805`8fcb1000 BasicRender (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\BasicRender.sys\6690072711000\BasicRender.sys
Image path: BasicRender.sys
Image name: BasicRender.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 66900727 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000A438
ImageSize: 00011000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.4 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: BasicRender.sys
OriginalFilename: BasicRender.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: Microsoft Basic Render Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8fcc0000 fffff805`8fcdc000 Npfs (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\Npfs.SYS\91382EDF1c000\Npfs.SYS
Image path: Npfs.SYS
Image name: Npfs.SYS
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 91382EDF (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001C318
ImageSize: 0001C000
File version: 10.0.19041.5723
Product version: 10.0.19041.5723
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: npfs.sys
OriginalFilename: npfs.sys
ProductVersion: 10.0.19041.5723
FileVersion: 10.0.19041.5723 (WinBuild.160101.0800)
FileDescription: NPFS Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8fce0000 fffff805`8fcf1000 Msfs (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\Msfs.SYS\95155DF111000\Msfs.SYS
Image path: Msfs.SYS
Image name: Msfs.SYS
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 95155DF1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001A9B5
ImageSize: 00011000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: MSFS.SYS
OriginalFilename: MSFS.SYS
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Mailslot driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8fd00000 fffff805`8fd1e000 CimFS (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\CimFS.SYS\784140C01e000\CimFS.SYS
Image path: CimFS.SYS
Image name: CimFS.SYS
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 784140C0 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001CD54
ImageSize: 0001E000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`8fd20000 fffff805`8fd42000 tdx (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\tdx.sys\661372DF22000\tdx.sys
Image path: tdx.sys
Image name: tdx.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 661372DF (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002753F
ImageSize: 00022000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: tdx.sys
OriginalFilename: tdx.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: TDI Translation Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8fd50000 fffff805`8fd60000 TDI (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\TDI.SYS\D1AD2BD410000\TDI.SYS
Image path: TDI.SYS
Image name: TDI.SYS
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: D1AD2BD4 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000D19A
ImageSize: 00010000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: tdi.sys
OriginalFilename: tdi.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: TDI Wrapper
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8fd70000 fffff805`8fdcc000 netbt (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\netbt.sys\E069A7C65c000\netbt.sys
Image path: netbt.sys
Image name: netbt.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: E069A7C6 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0005CC10
ImageSize: 0005C000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: netbt.sys
OriginalFilename: netbt.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: MBT Transport driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8fdd0000 fffff805`8fde4000 afunix (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\afunix.sys\952DFCB814000\afunix.sys
Image path: afunix.sys
Image name: afunix.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 952DFCB8 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00010BB1
ImageSize: 00014000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: afunix.sys
OriginalFilename: afunix.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: AF_UNIX socket provider
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8fdf0000 fffff805`8fe97000 afd (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\afd.sys\2C48A9D0a7000\afd.sys
Image path: afd.sys
Image name: afd.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 2C48A9D0 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000AD77A
ImageSize: 000A7000
File version: 10.0.19041.5723
Product version: 10.0.19041.5723
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: afd.sys
OriginalFilename: afd.sys
ProductVersion: 10.0.19041.5723
FileVersion: 10.0.19041.5723 (WinBuild.160101.0800)
FileDescription: Ancillary Function Driver for WinSock
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8fea0000 fffff805`8feba000 vwififlt (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\vwififlt.sys\16DBFD181a000\vwififlt.sys
Image path: vwififlt.sys
Image name: vwififlt.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 16DBFD18 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00018B49
ImageSize: 0001A000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: vwififlt.sys
OriginalFilename: vwififlt.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: Virtual WiFi Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8fec0000 fffff805`8feeb000 pacer (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\pacer.sys\36689BDC2b000\pacer.sys
Image path: pacer.sys
Image name: pacer.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 36689BDC (This is a reproducible build file hash, not a timestamp)
CheckSum: 00037974
ImageSize: 0002B000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: pacer.sys
OriginalFilename: pacer.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: QoS Packet Scheduler
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8fef0000 fffff805`8ff04000 ndiscap (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ndiscap.sys\DCEEC70E14000\ndiscap.sys
Image path: ndiscap.sys
Image name: ndiscap.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: DCEEC70E (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001C38B
ImageSize: 00014000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: NDISCAP.SYS
OriginalFilename: NDISCAP.SYS
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Microsoft NDIS Packet Capture Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8ff10000 fffff805`8ff24000 netbios (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\netbios.sys\618ED82E14000\netbios.sys
Image path: netbios.sys
Image name: netbios.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 618ED82E (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001A9AF
ImageSize: 00014000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: NETBIOS.SYS
OriginalFilename: NETBIOS.SYS
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: NetBIOS interface driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8ff30000 fffff805`8ffd1000 Vid (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\Vid.sys\A11FBCDCa1000\Vid.sys
Image path: Vid.sys
Image name: Vid.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: A11FBCDC (This is a reproducible build file hash, not a timestamp)
CheckSum: 0009DEA0
ImageSize: 000A1000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: vid.sys
OriginalFilename: vid.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: Microsoft Hyper-V Virtualization Infrastructure Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`8ffe0000 fffff805`90002000 winhvr (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\winhvr.sys\9A281EB222000\winhvr.sys
Image path: winhvr.sys
Image name: winhvr.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 9A281EB2 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00028559
ImageSize: 00022000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: WinHvR.sys
OriginalFilename: WinHvR.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: Windows Hypervisor Root Interface Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`90010000 fffff805`9008b000 rdbss (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\rdbss.sys\D46BF9EB7b000\rdbss.sys
Image path: rdbss.sys
Image name: rdbss.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: D46BF9EB (This is a reproducible build file hash, not a timestamp)
CheckSum: 00074D4D
ImageSize: 0007B000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: rdbss.sys
OriginalFilename: RDBSS.Sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: Redirected Drive Buffering SubSystem Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`90090000 fffff805`90125000 csc (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\csc.sys\D0D7C32D95000\csc.sys
Image path: csc.sys
Image name: csc.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: D0D7C32D (This is a reproducible build file hash, not a timestamp)
CheckSum: 00099511
ImageSize: 00095000
File version: 10.0.19041.5723
Product version: 10.0.19041.5723
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: csc.sys
OriginalFilename: CSC.Sys
ProductVersion: 10.0.19041.5723
FileVersion: 10.0.19041.5723 (WinBuild.160101.0800)
FileDescription: Windows Client Side Caching Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`90130000 fffff805`90142000 nsiproxy (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\nsiproxy.sys\7126B05512000\nsiproxy.sys
Image path: nsiproxy.sys
Image name: nsiproxy.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 7126B055 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000F439
ImageSize: 00012000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: nsiproxy.sys
OriginalFilename: nsiproxy.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: NSI Proxy
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`90150000 fffff805`9015e000 npsvctrig (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\npsvctrig.sys\677B42C8e000\npsvctrig.sys
Image path: npsvctrig.sys
Image name: npsvctrig.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 677B42C8 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000119D3
ImageSize: 0000E000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: npsvctrig.sys
OriginalFilename: npsvctrig.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Named pipe service triggers
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`90160000 fffff805`90170000 mssmbios (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mssmbios.sys\6233611A10000\mssmbios.sys
Image path: mssmbios.sys
Image name: mssmbios.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 6233611A (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000DD1D
ImageSize: 00010000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: smbios.sys
OriginalFilename: smbios.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: System Management BIOS Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`90180000 fffff805`9018a000 gpuenergydrv (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\gpuenergydrv.sys\F10C03D8a000\gpuenergydrv.sys
Image path: gpuenergydrv.sys
Image name: gpuenergydrv.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: F10C03D8 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00009EA6
ImageSize: 0000A000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: gpuenergydrv.sys
OriginalFilename: gpuenergydrv.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: GPU Energy Kernel Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`90190000 fffff805`901bc000 dfsc (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\dfsc.sys\17F96AB12c000\dfsc.sys
Image path: dfsc.sys
Image name: dfsc.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 17F96AB1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002D430
ImageSize: 0002C000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: dfsclient.sys
OriginalFilename: dfsclient.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: DFS Namespace Client Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`901e0000 fffff805`9024d000 fastfat (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\fastfat.SYS\ED3D752A6d000\fastfat.SYS
Image path: fastfat.SYS
Image name: fastfat.SYS
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: ED3D752A (This is a reproducible build file hash, not a timestamp)
CheckSum: 00074B93
ImageSize: 0006D000
File version: 10.0.19041.5728
Product version: 10.0.19041.5728
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: fastfat.sys
OriginalFilename: FastFAT.Sys
ProductVersion: 10.0.19041.5728
FileVersion: 10.0.19041.5728 (WinBuild.160101.0800)
FileDescription: Fast FAT File System Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`90250000 fffff805`90267000 bam (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\bam.sys\4BADB6B817000\bam.sys
Image path: bam.sys
Image name: bam.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 4BADB6B8 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00019328
ImageSize: 00017000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: bam.sys
OriginalFilename: bam.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: BAM Kernel Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`90270000 fffff805`902c2000 ahcache (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ahcache.sys\EFB2DF5E52000\ahcache.sys
Image path: ahcache.sys
Image name: ahcache.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: EFB2DF5E (This is a reproducible build file hash, not a timestamp)
CheckSum: 0004DBB1
ImageSize: 00052000
File version: 10.0.19041.5723
Product version: 10.0.19041.5723
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ahcache.sys
OriginalFilename: ahcache.sys
ProductVersion: 10.0.19041.5723
FileVersion: 10.0.19041.5723 (WinBuild.160101.0800)
FileDescription: Application Compatibility Cache
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`902d0000 fffff805`902e2000 CompositeBus (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\CompositeBus.sys\6AE1B30212000\CompositeBus.sys
Image path: CompositeBus.sys
Image name: CompositeBus.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 6AE1B302 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00015BD2
ImageSize: 00012000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: compositebus.sys
OriginalFilename: compositebus.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Multi-Transport Composite Bus Enumerator
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`902f0000 fffff805`902fd000 kdnic (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\kdnic.sys\9401D3B8d000\kdnic.sys
Image path: kdnic.sys
Image name: kdnic.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 9401D3B8 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000178DD
ImageSize: 0000D000
File version: 6.1.0.0
Product version: 6.1.0.0
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft Kernel Debugger Network Adapter (NDIS 6.20 Miniport)
InternalName: kdnic.sys
OriginalFilename: kdnic.sys
ProductVersion: 6.01.00.0000
FileVersion: 6.01.00.0000 (WinBuild.160101.0800)
FileDescription: Microsoft Kernel Debugger Network Miniport
LegalCopyright: Copyright (C) Microsoft Corporation. All rights reserved.
fffff805`90300000 fffff805`90315000 umbus (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\umbus.sys\E7B4847E15000\umbus.sys
Image path: umbus.sys
Image name: umbus.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: E7B4847E (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001394F
ImageSize: 00015000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: umbus.sys
OriginalFilename: umbus.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: User-Mode Bus Enumerator
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`90320000 fffff805`90335000 CAD (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\CAD.sys\58C1ABCA15000\CAD.sys
Image path: CAD.sys
Image name: CAD.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 58C1ABCA (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001EEC2
ImageSize: 00015000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: cad.sys
OriginalFilename: cad.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Charge Arbiration Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`90340000 fffff805`903a6000 portcls (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\portcls.sys\EA9B28EE66000\portcls.sys
Image path: portcls.sys
Image name: portcls.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: EA9B28EE (This is a reproducible build file hash, not a timestamp)
CheckSum: 000677BD
ImageSize: 00066000
File version: 10.0.19041.5723
Product version: 10.0.19041.5723
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.9 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: portcls.sys
OriginalFilename: portcls.sys
ProductVersion: 10.0.19041.5723
FileVersion: 10.0.19041.5723 (WinBuild.160101.0800)
FileDescription: Port Class (Class Driver for Port/Miniport Devices)
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`903b0000 fffff805`90428000 ks (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ks.sys\0C993C5F78000\ks.sys
Image path: ks.sys
Image name: ks.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 0C993C5F (This is a reproducible build file hash, not a timestamp)
CheckSum: 0007C3E2
ImageSize: 00078000
File version: 10.0.19041.5728
Product version: 10.0.19041.5728
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.0 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ks.sys
OriginalFilename: ks.sys
ProductVersion: 10.0.19041.5728
FileVersion: 10.0.19041.5728 (WinBuild.160101.0800)
FileDescription: Kernel CSA Library
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`90520000 fffff805`9053e000 crashdmp (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\crashdmp.sys\F69BF9371e000\crashdmp.sys
Image path: crashdmp.sys
Image name: crashdmp.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: F69BF937 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00023298
ImageSize: 0001E000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: crashdmp.sys
OriginalFilename: crashdmp.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: Crash Dump Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`a8410000 fffff805`ae176000 nvlddmkm (deferred)
Image path: nvlddmkm.sys
Image name: nvlddmkm.sys
Browse all global symbols functions data Symbol Reload
Timestamp: Fri Mar 14 20:40:17 2025 (67D46A01)
CheckSum: 05B76F27
ImageSize: 05D66000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`ae180000 fffff805`ae1a7000 HDAudBus (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\HDAudBus.sys\BBEA00D627000\HDAudBus.sys
Image path: HDAudBus.sys
Image name: HDAudBus.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: BBEA00D6 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000277B4
ImageSize: 00027000
File version: 10.0.19041.5723
Product version: 10.0.19041.5723
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.9 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: hdaudbus.sys
OriginalFilename: hdaudbus.sys
ProductVersion: 10.0.19041.5723
FileVersion: 10.0.19041.5723 (WinBuild.160101.0800)
FileDescription: High Definition Audio Bus Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`ae1b0000 fffff805`ae1d1000 drmk (deferred)
Image path: drmk.sys
Image name: drmk.sys
Browse all global symbols functions data Symbol Reload
Timestamp: Mon Nov 8 22:23:36 2004 (418FC7B8)
CheckSum: 0001F525
ImageSize: 00021000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`bc4c0000 fffff805`beeeb000 igdkmd64 (deferred)
Image path: igdkmd64.sys
Image name: igdkmd64.sys
Browse all global symbols functions data Symbol Reload
Timestamp: Wed Jun 1 00:27:36 2022 (62968848)
CheckSum: 02A310A5
ImageSize: 02A2B000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`beef0000 fffff805`bef8d000 USBXHCI (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\USBXHCI.SYS\99F1C8689d000\USBXHCI.SYS
Image path: USBXHCI.SYS
Image name: USBXHCI.SYS
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 99F1C868 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000A5E14
ImageSize: 0009D000
File version: 10.0.19041.4355
Product version: 10.0.19041.4355
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: usbxhci.sys
OriginalFilename: usbxhci.sys
ProductVersion: 10.0.19041.4355
FileVersion: 10.0.19041.4355 (WinBuild.160101.0800)
FileDescription: USB XHCI Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`bef90000 fffff805`befd4000 ucx01000 (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ucx01000.sys\11447CC944000\ucx01000.sys
Image path: ucx01000.sys
Image name: ucx01000.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 11447CC9 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0004DFDA
ImageSize: 00044000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ucx01000.sys
OriginalFilename: ucx01000.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: USB Controller Extension
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c2e00000 fffff805`c2ef2000 wdiwifi (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\wdiwifi.sys\75D10A95f2000\wdiwifi.sys
Image path: wdiwifi.sys
Image name: wdiwifi.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 75D10A95 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000F8112
ImageSize: 000F2000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: wdiwifi.sys
OriginalFilename: wdiwifi.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: WDI Driver Framework Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c2f00000 fffff805`c2f0e000 vwifibus (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\vwifibus.sys\8AF48D2Ce000\vwifibus.sys
Image path: vwifibus.sys
Image name: vwifibus.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 8AF48D2C (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000E969
ImageSize: 0000E000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: VWiFiBus.sys
OriginalFilename: VWiFiBus.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Virtual Wireless Bus Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c2f10000 fffff805`c2f41000 iaLPSS2i_I2C_CNL (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\iaLPSS2i_I2C_CNL.sys\5D2C0B2C31000\iaLPSS2i_I2C_CNL.sys
Image path: iaLPSS2i_I2C_CNL.sys
Image name: iaLPSS2i_I2C_CNL.sys
Browse all global symbols functions data Symbol Reload
Timestamp: Mon Jul 15 08:12:12 2019 (5D2C0B2C)
CheckSum: 00033387
ImageSize: 00031000
File version: 30.100.1929.1
Product version: 30.100.1929.1
File flags: 8 (Mask 3F) Private
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Intel Corporation
ProductName: Intel(R) Serial IO Driver
InternalName: iaLPSS2i_I2C_CNL.sys
OriginalFilename: iaLPSS2i_I2C_CNL.sys
ProductVersion: 30.100.1929.1
FileVersion: 30.100.1929.1
FileDescription: Intel(R) Serial IO I2C Driver v2
LegalCopyright: Copyright © 2015, Intel Corporation.
fffff805`c2f50000 fffff805`c2f6a000 SpbCx (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\SpbCx.sys\CFA815031a000\SpbCx.sys
Image path: SpbCx.sys
Image name: SpbCx.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: CFA81503 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000168C6
ImageSize: 0001A000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: SPBCx.sys
OriginalFilename: SPBCx.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: SPB Class Extension
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c2f70000 fffff805`c2fbf000 TeeDriverW10x64 (deferred)
Image path: TeeDriverW10x64.sys
Image name: TeeDriverW10x64.sys
Browse all global symbols functions data Symbol Reload
Timestamp: Fri Feb 9 00:23:54 2024 (65C5466A)
CheckSum: 0005A247
ImageSize: 0004F000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`c2fc0000 fffff805`c306d000 rt640x64 (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\rt640x64.sys\5CE7AF86ad000\rt640x64.sys
Image path: rt640x64.sys
Image name: rt640x64.sys
Browse all global symbols functions data Symbol Reload
Timestamp: Fri May 24 11:47:02 2019 (5CE7AF86)
CheckSum: 000B965B
ImageSize: 000AD000
File version: 9.1.410.2015
Product version: 9.1.410.2015
File flags: 8 (Mask 3F) Private
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Realtek
ProductName: Realtek 8125/8136/8168/8169 PCI/PCIe Adapters
InternalName: rt640x64.sys
OriginalFilename: rt640x64.sys
ProductVersion: 9.001.0410.2015
FileVersion: 9.001.0410.2015
FileDescription: Realtek 8125/8136/8168/8169 NDIS 6.40 64-bit Driver
LegalCopyright: Copyright (C) 2019 Realtek Semiconductor Corporation. All Right Reserved.
fffff805`c3070000 fffff805`c3091000 i8042prt (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\i8042prt.sys\515D28B121000\i8042prt.sys
Image path: i8042prt.sys
Image name: i8042prt.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 515D28B1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00022B0C
ImageSize: 00021000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: i8042prt.sys
OriginalFilename: i8042prt.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: i8042 Port Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c30a0000 fffff805`c30b4000 kbdclass (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\kbdclass.sys\3156654A14000\kbdclass.sys
Image path: kbdclass.sys
Image name: kbdclass.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 3156654A (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001CE1A
ImageSize: 00014000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: kbdclass.sys
OriginalFilename: kbdclass.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Keyboard Class Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c30c0000 fffff805`c30e1000 iaLPSS2_GPIO2 (deferred)
Image path: iaLPSS2_GPIO2.sys
Image name: iaLPSS2_GPIO2.sys
Browse all global symbols functions data Symbol Reload
Timestamp: Mon Oct 8 09:10:53 2018 (5BBAF4ED)
CheckSum: 00023153
ImageSize: 00021000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`c30f0000 fffff805`c3122000 msgpioclx (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\msgpioclx.sys\9883DDF032000\msgpioclx.sys
Image path: msgpioclx.sys
Image name: msgpioclx.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 9883DDF0 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00030C03
ImageSize: 00032000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: msgpioclx.sys
OriginalFilename: msgpioclx.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: GPIO Class Extension Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c3130000 fffff805`c313c000 wmiacpi (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\wmiacpi.sys\4A8BFC2Cc000\wmiacpi.sys
Image path: wmiacpi.sys
Image name: wmiacpi.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 4A8BFC2C (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000CC2F
ImageSize: 0000C000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: wmiacpi.sys
OriginalFilename: wmiacpi.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Windows Management Interface for ACPI
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c3140000 fffff805`c3181000 intelppm (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\intelppm.sys\3E03C5E841000\intelppm.sys
Image path: intelppm.sys
Image name: intelppm.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 3E03C5E8 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0003F5B5
ImageSize: 00041000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: intelppm.sys
OriginalFilename: intelppm.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: Processor Device Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c3190000 fffff805`c319b000 acpipagr (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\acpipagr.sys\092D0DD8b000\acpipagr.sys
Image path: acpipagr.sys
Image name: acpipagr.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 092D0DD8 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001307F
ImageSize: 0000B000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: acpipagr.sys
OriginalFilename: acpipagr.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: ACPI Processor Aggregator Device Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c31a0000 fffff805`c31ac000 acpitime (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\acpitime.sys\BB606674c000\acpitime.sys
Image path: acpitime.sys
Image name: acpitime.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: BB606674 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000AB5B
ImageSize: 0000C000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: acpitime.sys
OriginalFilename: acpitime.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: ACPI Wake Alarm
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c31b0000 fffff805`c31bf000 CmBatt (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\CmBatt.sys\770987ADf000\CmBatt.sys
Image path: CmBatt.sys
Image name: CmBatt.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 770987AD (This is a reproducible build file hash, not a timestamp)
CheckSum: 00009C77
ImageSize: 0000F000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: cmbatt.sys
OriginalFilename: cmbatt.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Control Method Battery Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c31c0000 fffff805`c31d0000 BATTC (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\BATTC.SYS\FF32259110000\BATTC.SYS
Image path: BATTC.SYS
Image name: BATTC.SYS
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: FF322591 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000D94E
ImageSize: 00010000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: battc.sys
OriginalFilename: battc.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Battery Class Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c31e0000 fffff805`c31f0000 XtuAcpiDriver (deferred)
Image path: XtuAcpiDriver.sys
Image name: XtuAcpiDriver.sys
Browse all global symbols functions data Symbol Reload
Timestamp: Wed Apr 12 11:58:50 2017 (58EDEC4A)
CheckSum: 00015FD4
ImageSize: 00010000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`c3200000 fffff805`c320e000 UEFI (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\UEFI.sys\100A3FFEe000\UEFI.sys
Image path: UEFI.sys
Image name: UEFI.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 100A3FFE (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000C8C7
ImageSize: 0000E000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: UEFI.sys
OriginalFilename: UEFI.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: UEFI Driver for NT
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c3210000 fffff805`c321a000 vhidmini (deferred)
Image path: vhidmini.sys
Image name: vhidmini.sys
Browse all global symbols functions data Symbol Reload
Timestamp: Wed Jun 3 10:30:32 2020 (5ED75198)
CheckSum: 0000F2BC
ImageSize: 0000A000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`c3220000 fffff805`c322b000 mshidkmdf (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mshidkmdf.sys\D7AA4B86b000\mshidkmdf.sys
Image path: mshidkmdf.sys
Image name: mshidkmdf.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: D7AA4B86 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000C0D8
ImageSize: 0000B000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: MSHIDKMDF.SYS
OriginalFilename: MSHIDKMDF.SYS
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Pass-through HID to KMDF Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c3230000 fffff805`c3271000 HIDCLASS (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\HIDCLASS.SYS\F7BA80B141000\HIDCLASS.SYS
Image path: HIDCLASS.SYS
Image name: HIDCLASS.SYS
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: F7BA80B1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0003AD53
ImageSize: 00041000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: hidclass.sys
OriginalFilename: hidclass.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: Hid Class Library
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c3280000 fffff805`c3293000 HIDPARSE (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\HIDPARSE.SYS\3404D24613000\HIDPARSE.SYS
Image path: HIDPARSE.SYS
Image name: HIDPARSE.SYS
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 3404D246 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001813B
ImageSize: 00013000
File version: 10.0.19041.5000
Product version: 10.0.19041.5000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: hidparse.sys
OriginalFilename: hidparse.sys
ProductVersion: 10.0.19041.5000
FileVersion: 10.0.19041.5000 (WinBuild.160101.0800)
FileDescription: Hid Parsing Library
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c32a0000 fffff805`c32af000 nvvad64v (deferred)
Image path: nvvad64v.sys
Image name: nvvad64v.sys
Browse all global symbols functions data Symbol Reload
Timestamp: Wed Feb 28 15:30:52 2024 (65DF277C)
CheckSum: 0001B55F
ImageSize: 0000F000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`c32b0000 fffff805`c32c1000 ksthunk (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ksthunk.sys\545C986E11000\ksthunk.sys
Image path: ksthunk.sys
Image name: ksthunk.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 545C986E (This is a reproducible build file hash, not a timestamp)
CheckSum: 00013A5A
ImageSize: 00011000
File version: 10.0.19041.5723
Product version: 10.0.19041.5723
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.0 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ksthunk.sys
OriginalFilename: ksthunk.sys
ProductVersion: 10.0.19041.5723
FileVersion: 10.0.19041.5723 (WinBuild.160101.0800)
FileDescription: Kernel Streaming WOW Thunk Service
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c32d0000 fffff805`c32dd000 NdisVirtualBus (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\NdisVirtualBus.sys\A7AE93D1d000\NdisVirtualBus.sys
Image path: NdisVirtualBus.sys
Image name: NdisVirtualBus.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: A7AE93D1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00014F1D
ImageSize: 0000D000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: NdisVirtualBus.sys
OriginalFilename: NdisVirtualBus.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Microsoft Virtual Network Adapter Enumerator
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c32e0000 fffff805`c32ec000 swenum (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\swenum.sys\E117266Bc000\swenum.sys
Image path: swenum.sys
Image name: swenum.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: E117266B (This is a reproducible build file hash, not a timestamp)
CheckSum: 000082C9
ImageSize: 0000C000
File version: 10.0.19041.5000
Product version: 10.0.19041.5000
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.0 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: swenum.sys
OriginalFilename: swenum.sys
ProductVersion: 10.0.19041.5000
FileVersion: 10.0.19041.5000 (WinBuild.160101.0800)
FileDescription: Plug and Play Software Device Enumerator
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c32f0000 fffff805`c32fe000 rdpbus (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\rdpbus.sys\84DFD52Ae000\rdpbus.sys
Image path: rdpbus.sys
Image name: rdpbus.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 84DFD52A (This is a reproducible build file hash, not a timestamp)
CheckSum: 000106CE
ImageSize: 0000E000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.0 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: RDPBUS.SYS
OriginalFilename: RDPBUS.SYS
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Microsoft RDP Bus Device driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c3300000 fffff805`c33a3000 UsbHub3 (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\UsbHub3.sys\F9318133a3000\UsbHub3.sys
Image path: UsbHub3.sys
Image name: UsbHub3.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: F9318133 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000A5D90
ImageSize: 000A3000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: usbhub3.sys
OriginalFilename: usbhub3.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: USB3 HUB Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c33b0000 fffff805`c33be000 USBD (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\USBD.SYS\E915B4FCe000\USBD.SYS
Image path: USBD.SYS
Image name: USBD.SYS
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: E915B4FC (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000FC58
ImageSize: 0000E000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: usbd.sys
OriginalFilename: usbd.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: Universal Serial Bus Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c33c0000 fffff805`c33d5000 hidi2c (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\hidi2c.sys\785C504F15000\hidi2c.sys
Image path: hidi2c.sys
Image name: hidi2c.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 785C504F (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001444A
ImageSize: 00015000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: hidi2c.sys
OriginalFilename: hidi2c.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: I2C HID Miniport Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c33e0000 fffff805`c33ff000 nvhda64v (deferred)
Image path: nvhda64v.sys
Image name: nvhda64v.sys
Browse all global symbols functions data Symbol Reload
Timestamp: Mon Sep 30 08:37:46 2024 (66FA392A)
CheckSum: 0001FA63
ImageSize: 0001F000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`c3400000 fffff805`c346f000 HdAudio (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\HdAudio.sys\7A851A0E6f000\HdAudio.sys
Image path: HdAudio.sys
Image name: HdAudio.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 7A851A0E (This is a reproducible build file hash, not a timestamp)
CheckSum: 000756B9
ImageSize: 0006F000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.9 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: HDAudio.sys
OriginalFilename: HDAudio.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: High Definition Audio Function Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c3470000 fffff805`c34c5000 IntcDAud (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\IntcDAud.sys\619B2C2555000\IntcDAud.sys
Image path: IntcDAud.sys
Image name: IntcDAud.sys
Browse all global symbols functions data Symbol Reload
Timestamp: Mon Nov 22 08:35:33 2021 (619B2C25)
CheckSum: 000595AC
ImageSize: 00055000
File version: 10.27.0.12
Product version: 10.27.0.12
File flags: 8 (Mask 3F) Private
File OS: 40004 NT Win32
File type: 3.9 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Intel(R) Corporation
ProductName: Intel(R) Display Audio
InternalName: IntcDAud.sys
OriginalFilename: IntcDAud.sys
ProductVersion: 10.27.0.12
FileVersion: 10.27.0.12
FileDescription: Intel(R) Display Audio Driver
LegalCopyright: Intel(R) Corporation. All rights reserved.
fffff805`c34d0000 fffff805`c34e0000 mouhid (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mouhid.sys\E502FBD910000\mouhid.sys
Image path: mouhid.sys
Image name: mouhid.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: E502FBD9 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000173E5
ImageSize: 00010000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: mouhid.sys
OriginalFilename: mouhid.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: HID Mouse Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c34f0000 fffff805`c3503000 mouclass (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\mouclass.sys\3E1AA9CC13000\mouclass.sys
Image path: mouclass.sys
Image name: mouclass.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 3E1AA9CC (This is a reproducible build file hash, not a timestamp)
CheckSum: 00019679
ImageSize: 00013000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: mouclass.sys
OriginalFilename: mouclass.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Mouse Class Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c3510000 fffff805`c351c000 MTConfig (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\MTConfig.sys\D2AEB078c000\MTConfig.sys
Image path: MTConfig.sys
Image name: MTConfig.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: D2AEB078 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00014339
ImageSize: 0000C000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: MTConfig.sys
OriginalFilename: MTConfig.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: Microsoft Multi-Touch HID Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c3520000 fffff805`c3554000 usbccgp (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\usbccgp.sys\6A26A84834000\usbccgp.sys
Image path: usbccgp.sys
Image name: usbccgp.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 6A26A848 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00037117
ImageSize: 00034000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: USBCCGP.SYS
OriginalFilename: USBCCGP.SYS
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: USB Common Class Generic Parent Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c3560000 fffff805`c356d000 sshid (deferred)
Image path: sshid.sys
Image name: sshid.sys
Browse all global symbols functions data Symbol Reload
Timestamp: Thu Feb 24 06:09:08 2022 (6216F6D4)
CheckSum: 00018401
ImageSize: 0000D000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`c3570000 fffff805`c3582000 hidusb (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\hidusb.sys\E73E950812000\hidusb.sys
Image path: hidusb.sys
Image name: hidusb.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: E73E9508 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000D8D4
ImageSize: 00012000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: HIDUSB.SYS
OriginalFilename: HIDUSB.SYS
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: USB Miniport Driver for Input Devices
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c3590000 fffff805`c35a1000 kbdhid (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\kbdhid.sys\DF2550C211000\kbdhid.sys
Image path: kbdhid.sys
Image name: kbdhid.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: DF2550C2 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001A910
ImageSize: 00011000
File version: 10.0.19041.1030
Product version: 10.0.19041.1030
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: kbdhid.sys
OriginalFilename: kbdhid.sys
ProductVersion: 10.0.19041.1030
FileVersion: 10.0.19041.1030 (WinBuild.160101.0800)
FileDescription: HID Keyboard Filter Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c35b0000 fffff805`c35ca000 WdNisDrv (deferred)
Image path: WdNisDrv.sys
Image name: WdNisDrv.sys
Browse all global symbols functions data Symbol Reload
Timestamp: ***** Invalid (9DE1DF47)
CheckSum: 000261CE
ImageSize: 0001A000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`c3640000 fffff805`c3bad000 Netwtw10 (deferred)
Image path: Netwtw10.sys
Image name: Netwtw10.sys
Browse all global symbols functions data Symbol Reload
Timestamp: Sat Dec 28 23:15:24 2024 (67705C5C)
CheckSum: 004FF8F3
ImageSize: 0056D000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`c5a00000 fffff805`c5b87000 BTHport (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\BTHport.sys\87CDBE15187000\BTHport.sys
Image path: BTHport.sys
Image name: BTHport.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 87CDBE15 (This is a reproducible build file hash, not a timestamp)
CheckSum: 001856ED
ImageSize: 00187000
File version: 10.0.19041.4597
Product version: 10.0.19041.4597
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: bthport.sys
OriginalFilename: bthport.sys
ProductVersion: 10.0.19041.4597
FileVersion: 10.0.19041.4597 (WinBuild.160101.0800)
FileDescription: Bluetooth Bus Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c5b90000 fffff805`c5bfa000 RtsUer (deferred)
Image path: RtsUer.sys
Image name: RtsUer.sys
Browse all global symbols functions data Symbol Reload
Timestamp: Wed Jul 25 12:21:27 2018 (5B584117)
CheckSum: 00073533
ImageSize: 0006A000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`c5c00000 fffff805`c5c09000 SparkIO (deferred)
Mapped memory image file: C:\Windows\system32\SparkIO.sys
Image path: SparkIO.sys
Image name: SparkIO.sys
Browse all global symbols functions data Symbol Reload
Timestamp: Mon Nov 26 12:59:29 2018 (5BFBC401)
CheckSum: 0000D2AA
ImageSize: 00009000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`c5c10000 fffff805`c5c67000 usbvideo (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\usbvideo.sys\12721FE057000\usbvideo.sys
Image path: usbvideo.sys
Image name: usbvideo.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 12721FE0 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00059ABA
ImageSize: 00057000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.0 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: usbvideo.sys
OriginalFilename: usbvideo.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: USB Video Class Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c5c80000 fffff805`c5c8f000 dump_storport (deferred)
Image path: dump_storport.sys
Image name: dump_storport.sys
Browse all global symbols functions data Symbol Reload
Timestamp: ***** Invalid (F14E49FE)
CheckSum: 00017FCA
ImageSize: 0000F000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`c5cc0000 fffff805`c5cef000 dump_stornvme (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\stornvme.sys\DC5977C32f000\stornvme.sys
Image path: dump_stornvme.sys
Image name: dump_stornvme.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: DC5977C3 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002A2BE
ImageSize: 0002F000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: stornvme.sys
OriginalFilename: stornvme.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: Microsoft NVM Express Storport Miniport Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c5d10000 fffff805`c5d2d000 dump_dumpfve (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\dumpfve.sys\ADA5C92E1d000\dumpfve.sys
Image path: dump_dumpfve.sys
Image name: dump_dumpfve.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: ADA5C92E (This is a reproducible build file hash, not a timestamp)
CheckSum: 000245B4
ImageSize: 0001D000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: dumpfve.sys
OriginalFilename: dumpfve.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: Bitlocker Drive Encryption Crashdump Filter
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c5d30000 fffff805`c5d4d000 NDProxy (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\NDProxy.sys\7A451D301d000\NDProxy.sys
Image path: NDProxy.sys
Image name: NDProxy.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 7A451D30 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00021F82
ImageSize: 0001D000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ndproxy.sys
OriginalFilename: ndproxy.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: NDIS Proxy
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c5d50000 fffff805`c5d78000 AgileVpn (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\AgileVpn.sys\6C08629B28000\AgileVpn.sys
Image path: AgileVpn.sys
Image name: AgileVpn.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 6C08629B (This is a reproducible build file hash, not a timestamp)
CheckSum: 00021271
ImageSize: 00028000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: agilevpn.sys
OriginalFilename: agilevpn.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: RAS Agile Vpn Miniport Call Manager
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c5d80000 fffff805`c5da1000 rasl2tp (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\rasl2tp.sys\2438149621000\rasl2tp.sys
Image path: rasl2tp.sys
Image name: rasl2tp.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 24381496 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001D4E4
ImageSize: 00021000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: rasl2tp.sys
OriginalFilename: rasl2tp.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: RAS L2TP mini-port/call-manager driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c5db0000 fffff805`c5dd1000 raspptp (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\raspptp.sys\13B1F23A21000\raspptp.sys
Image path: raspptp.sys
Image name: raspptp.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 13B1F23A (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001C706
ImageSize: 00021000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: RASPPTP.SYS
OriginalFilename: RASPPTP.SYS
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: Peer-to-Peer Tunneling Protocol
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c5df0000 fffff805`c6713000 ibtusb (deferred)
Image path: ibtusb.sys
Image name: ibtusb.sys
Browse all global symbols functions data Symbol Reload
Timestamp: Mon Feb 10 15:08:45 2025 (67A9EC4D)
CheckSum: 0092C268
ImageSize: 00923000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff805`c6720000 fffff805`c6741000 BTHUSB (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\BTHUSB.sys\1F5DA42F21000\BTHUSB.sys
Image path: BTHUSB.sys
Image name: BTHUSB.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 1F5DA42F (This is a reproducible build file hash, not a timestamp)
CheckSum: 00023F60
ImageSize: 00021000
File version: 10.0.19041.5607
Product version: 10.0.19041.5607
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: bthusb.sys
OriginalFilename: bthusb.sys
ProductVersion: 10.0.19041.5607
FileVersion: 10.0.19041.5607 (WinBuild.160101.0800)
FileDescription: Bluetooth Miniport Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c6750000 fffff805`c676c000 raspppoe (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\raspppoe.sys\585069991c000\raspppoe.sys
Image path: raspppoe.sys
Image name: raspppoe.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: 58506999 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001B0EA
ImageSize: 0001C000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: raspppoe.sys
OriginalFilename: raspppoe.sys
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: RAS PPPoE mini-port/call-manager driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c6770000 fffff805`c67aa000 ndiswan (deferred)
Mapped memory image file: C:\ProgramData\Dbg\sym\ndiswan.sys\A5C540663a000\ndiswan.sys
Image path: ndiswan.sys
Image name: ndiswan.sys
Browse all global symbols functions data Symbol Reload
Image was built with /Brepro flag.
Timestamp: A5C54066 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00040B01
ImageSize: 0003A000
File version: 10.0.19041.5678
Product version: 10.0.19041.5678
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: NDISWAN.SYS
OriginalFilename: NDISWAN.SYS
ProductVersion: 10.0.19041.5678
FileVersion: 10.0.19041.5678 (WinBuild.160101.0800)
FileDescription: MS PPP Framing Driver (Strong Encryption)
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff805`c67b0000 fffff805`c67f8000 KslD (deferred)
Image path: KslD.sys
Image name: KslD.sys
Browse all global symbols functions data Symbol Reload
Timestamp: Fri Jul 9 10:46:16 2021 (60E7FEC8)
CheckSum: 00051A94
ImageSize: 00048000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
Unloaded modules:
fffff805`c3bb0000 fffff805`c3be1000 xhunter1.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00031000
fffff805`c35d0000 fffff805`c3601000 xhunter1.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00031000
fffff805`75560000 fffff805`75572000 MSKSSRV.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00012000
fffff809`9f020000 fffff809`a1e23000 eaanticheat.
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 02E03000
fffff805`75560000 fffff805`75572000 MSKSSRV.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00012000
fffff805`75560000 fffff805`75572000 MSKSSRV.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00012000
fffff805`90550000 fffff805`90560000 dump_storpor
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00010000
fffff805`90590000 fffff805`905c0000 dump_stornvm
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00030000
fffff805`905e0000 fffff805`905fe000 dump_dumpfve
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0001E000
fffff805`c5c00000 fffff805`c5c0c000 WdmCompanion
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000C000
fffff805`901c0000 fffff805`901dd000 dam.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0001D000
fffff805`7c300000 fffff805`7c30a000 WdBoot.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000A000
fffff805`7d350000 fffff805`7d361000 hwpolicy.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00011000
8: kd> .f+
01 ffffd603`b9a07840 fffff805`77248fb1 nt!PspCatchCriticalBreak+0x10e