Microsoft (R) Windows Debugger Version 10.0.15063.468 AMD64 Copyright (c) Microsoft Corporation. All rights reserved. Loading Dump File [C:\Windows\MEMORY.DMP] Kernel Bitmap Dump File: Kernel address space is available, User address space may not be available. Symbol search path is: srv* Executable search path is: Windows 10 Kernel Version 15063 MP (8 procs) Free x64 Product: WinNt, suite: TerminalServer SingleUserTS Built by: 15063.0.amd64fre.rs2_release.170317-1834 Machine Name: Kernel base = 0xfffff801`8b214000 PsLoadedModuleList = 0xfffff801`8b5605a0 Debug session time: Wed Aug 2 17:07:13.530 2017 (UTC + 1:00) System Uptime: 0 days 19:47:28.257 Loading Kernel Symbols ............................................................... ................................................................ ............................................. Loading User Symbols PEB is paged out (Peb.Ldr = 00000009`0fbb2018). Type ".hh dbgerr001" for details Loading unloaded module list ............... ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck 3B, {c0000005, fffff8018b256db7, ffffa001544450e0, 0} Probably caused by : WdFilter.sys ( WdFilter!MpGetImageNormalizedName+45 ) Followup: MachineOwner --------- 5: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* SYSTEM_SERVICE_EXCEPTION (3b) An exception happened while executing a system service routine. Arguments: Arg1: 00000000c0000005, Exception code that caused the bugcheck Arg2: fffff8018b256db7, Address of the instruction which caused the bugcheck Arg3: ffffa001544450e0, Address of the context record for the exception that caused the bugcheck Arg4: 0000000000000000, zero. Debugging Details: ------------------ DUMP_CLASS: 1 DUMP_QUALIFIER: 401 BUILD_VERSION_STRING: 15063.0.amd64fre.rs2_release.170317-1834 SYSTEM_MANUFACTURER: Gigabyte Technology Co., Ltd. SYSTEM_PRODUCT_NAME: To be filled by O.E.M. SYSTEM_SKU: To be filled by O.E.M. SYSTEM_VERSION: To be filled by O.E.M. BIOS_VENDOR: American Megatrends Inc. BIOS_VERSION: FC BIOS_DATE: 06/01/2015 BASEBOARD_MANUFACTURER: Gigabyte Technology Co., Ltd. BASEBOARD_PRODUCT: 970A-DS3P BASEBOARD_VERSION: x.x DUMP_TYPE: 1 BUGCHECK_P1: c0000005 BUGCHECK_P2: fffff8018b256db7 BUGCHECK_P3: ffffa001544450e0 BUGCHECK_P4: 0 EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s. FAULTING_IP: nt!ExAcquireResourceSharedLite+17 fffff801`8b256db7 0fb7531a movzx edx,word ptr [rbx+1Ah] CONTEXT: ffffa001544450e0 -- (.cxr 0xffffa001544450e0) rax=ffffb00524601080 rbx=582bceea002407d0 rcx=582bceea00240701 rdx=ffffb00524601001 rsi=582bceea00240730 rdi=0000000000000001 rip=fffff8018b256db7 rsp=ffffa00154445ae0 rbp=0000000000000000 r8=ffffa00154445b00 r9=0000000000000000 r10=0000000000000000 r11=ffffa00154445b00 r12=582bceea002407d0 r13=0000000000000000 r14=0000000000000000 r15=0000000000000000 iopl=0 nv up ei pl nz na pe nc cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010202 nt!ExAcquireResourceSharedLite+0x17: fffff801`8b256db7 0fb7531a movzx edx,word ptr [rbx+1Ah] ds:002b:582bceea`002407ea=???? Resetting default scope CPU_COUNT: 8 CPU_MHZ: dbc CPU_VENDOR: AuthenticAMD CPU_FAMILY: 15 CPU_MODEL: 2 CPU_STEPPING: 0 DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT BUGCHECK_STR: 0x3B PROCESS_NAME: services.exe CURRENT_IRQL: 0 ANALYSIS_SESSION_HOST: AARON-PC ANALYSIS_SESSION_TIME: 08-06-2017 22:51:08.0862 ANALYSIS_VERSION: 10.0.15063.468 amd64fre LAST_CONTROL_TRANSFER: from fffff801ee666b93 to fffff8018b256db7 STACK_TEXT: ffffa001`54445ae0 fffff801`ee666b93 : ffffb005`21d1f7c0 ffffb005`264054e0 00000000`00000000 ffffb005`2158a002 : nt!ExAcquireResourceSharedLite+0x17 ffffa001`54445b20 fffff801`ee698181 : ffffb005`21780a60 00000000`00000000 00000000`00000000 ffffa001`54445d20 : FLTMGR!FltpGetFileNameInformation+0x73 ffffa001`54445bd0 fffff801`eeffab8d : ffffb005`264054e0 ffffb005`21780a60 ffffb005`21780a60 00000000`00000000 : FLTMGR!FltGetFileNameInformationUnsafe+0x71 ffffa001`54445c40 fffff801`eeffbd66 : ffffb005`21780a60 fffff801`eefef000 ffffa001`54446000 00000000`00000000 : WdFilter!MpGetImageNormalizedName+0x45 ffffa001`54445c90 fffff801`8b6cf329 : ffffa001`54445d20 ffffb005`2779f440 ffffa001`54446138 00000000`00000000 : WdFilter!MpCreateProcessNotifyRoutineEx+0x76 ffffa001`54445cf0 fffff801`8b6cbf36 : ffffffff`00000000 ffffa001`54446550 ffffa001`54446501 ffffb005`21780a60 : nt!PspCallProcessNotifyRoutines+0x1f1 ffffa001`54445db0 fffff801`8b6b38d3 : ffffb005`22f697c0 ffffb005`00000000 ffffa001`54446010 ffffa001`54445ef8 : nt!PspInsertThread+0x5da ffffa001`54445e70 fffff801`8b38ae13 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!NtCreateUserProcess+0x953 ffffa001`54446a90 00007ffb`34796ba4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 00000009`107fdf98 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffb`34796ba4 THREAD_SHA1_HASH_MOD_FUNC: 7b0aaebd0a485831f9d41f01b7c3ff1c52ae66d3 THREAD_SHA1_HASH_MOD_FUNC_OFFSET: eaa2270d4e4ea6d825a84457df0efe2f8a848038 THREAD_SHA1_HASH_MOD: 0680c9e52298ce69cdcca12968a32e7e6399760b FOLLOWUP_IP: WdFilter!MpGetImageNormalizedName+45 fffff801`eeffab8d 8bf8 mov edi,eax FAULT_INSTR_CODE: c085f88b SYMBOL_STACK_INDEX: 3 SYMBOL_NAME: WdFilter!MpGetImageNormalizedName+45 FOLLOWUP_NAME: MachineOwner MODULE_NAME: WdFilter IMAGE_NAME: WdFilter.sys DEBUG_FLR_IMAGE_TIMESTAMP: 0 STACK_COMMAND: .cxr 0xffffa001544450e0 ; kb BUCKET_ID_FUNC_OFFSET: 45 FAILURE_BUCKET_ID: 0x3B_WdFilter!MpGetImageNormalizedName BUCKET_ID: 0x3B_WdFilter!MpGetImageNormalizedName PRIMARY_PROBLEM_CLASS: 0x3B_WdFilter!MpGetImageNormalizedName TARGET_TIME: 2017-08-02T16:07:13.000Z OSBUILD: 15063 OSSERVICEPACK: 0 SERVICEPACK_NUMBER: 0 OS_REVISION: 0 SUITE_MASK: 272 PRODUCT_TYPE: 1 OSPLATFORM_TYPE: x64 OSNAME: Windows 10 OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS OS_LOCALE: USER_LCID: 0 OSBUILD_TIMESTAMP: 2017-04-01 00:44:54 BUILDDATESTAMP_STR: 170317-1834 BUILDLAB_STR: rs2_release BUILDOSVER_STR: 10.0.15063.0.amd64fre.rs2_release.170317-1834 ANALYSIS_SESSION_ELAPSED_TIME: 6ba ANALYSIS_SOURCE: KM FAILURE_ID_HASH_STRING: km:0x3b_wdfilter!mpgetimagenormalizedname FAILURE_ID_HASH: {9ae817c9-8870-65cf-ee69-4f7c5d79791a} Followup: MachineOwner --------- 5: kd> .cxr 0xffffa001544450e0 rax=ffffb00524601080 rbx=582bceea002407d0 rcx=582bceea00240701 rdx=ffffb00524601001 rsi=582bceea00240730 rdi=0000000000000001 rip=fffff8018b256db7 rsp=ffffa00154445ae0 rbp=0000000000000000 r8=ffffa00154445b00 r9=0000000000000000 r10=0000000000000000 r11=ffffa00154445b00 r12=582bceea002407d0 r13=0000000000000000 r14=0000000000000000 r15=0000000000000000 iopl=0 nv up ei pl nz na pe nc cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010202 nt!ExAcquireResourceSharedLite+0x17: fffff801`8b256db7 0fb7531a movzx edx,word ptr [rbx+1Ah] ds:002b:582bceea`002407ea=???? 5: kd> lmvm WdFilter Browse full module list start end module name fffff801`eefe0000 fffff801`ef02e000 WdFilter (pdb symbols) C:\ProgramData\dbg\sym\WdFilter.pdb\9565EDD1019C8D8E71835B3C2994DC8D1\WdFilter.pdb Loaded symbol image file: WdFilter.sys Image path: \SystemRoot\system32\drivers\WdFilter.sys Image name: WdFilter.sys Browse all global symbols functions data Timestamp: ***** Invalid (F9B582DD) CheckSum: 0004E39B ImageSize: 0004E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 5: kd> x /D /d WdFilter!a* A B C D E F G H I J K L M N O P Q R S T U V W X Y Z fffff801`eefeaa18 WdFilter!AMFilter_CacheHitId = fffff801`eefea9e8 WdFilter!AMFilter_SeqReadFlagId = fffff801`eefeaa38 WdFilter!AMFilter_ProcessContextEvent = fffff801`eefea9d8 WdFilter!AMFilter_CacheHitEvent = fffff801`eefea9b8 WdFilter!AMFilter_SeqReadFlagEvent = fffff801`eefea9f8 WdFilter!AMFilter_ProcessContextId = fffff801`eefea9c8 WdFilter!AMFilter_CacheFlushEvent = fffff801`eefeaa28 WdFilter!AMFilter_TrustedProcessEvent = fffff801`eefeaa48 WdFilter!AMFilter_CacheFlushId = fffff801`eefeaa08 WdFilter!AMFilter_TrustedProcessId = 5: kd> x /D /f WdFilter!a* A B C D E F G H I J K L M N O P Q R S T U V W X Y Z 5: kd> x /D WdFilter!a* A B C D E F G H I J K L M N O P Q R S T U V W X Y Z fffff801`eefeaa18 WdFilter!AMFilter_CacheHitId = fffff801`eefea9e8 WdFilter!AMFilter_SeqReadFlagId = fffff801`eefeaa38 WdFilter!AMFilter_ProcessContextEvent = fffff801`eefea9d8 WdFilter!AMFilter_CacheHitEvent = fffff801`eefea9b8 WdFilter!AMFilter_SeqReadFlagEvent = fffff801`eefea9f8 WdFilter!AMFilter_ProcessContextId = fffff801`eefea9c8 WdFilter!AMFilter_CacheFlushEvent = fffff801`eefeaa28 WdFilter!AMFilter_TrustedProcessEvent = fffff801`eefeaa48 WdFilter!AMFilter_CacheFlushId = fffff801`eefeaa08 WdFilter!AMFilter_TrustedProcessId = 5: kd> x /D /f WdFilter!b* A B C D E F G H I J K L M N O P Q R S T U V W X Y Z 5: kd> x /D /f WdFilter!a* A B C D E F G H I J K L M N O P Q R S T U V W X Y Z 5: kd> lmDv start end module name ffffd74a`03c00000 ffffd74a`03f93000 win32kfull (deferred) Image path: \SystemRoot\System32\win32kfull.sys Image name: win32kfull.sys Browse all global symbols functions data Timestamp: Thu Dec 20 20:33:04 2029 (70CD2780) CheckSum: 0038A1EF ImageSize: 00393000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 ffffd74a`03fa0000 ffffd74a`041a6000 win32kbase (deferred) Image path: \SystemRoot\System32\win32kbase.sys Image name: win32kbase.sys Browse all global symbols functions data Timestamp: Wed Dec 17 00:33:09 2008 (494848C5) CheckSum: 001FA2E4 ImageSize: 00206000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 ffffd74a`041c0000 ffffd74a`041ca000 TSDDD (deferred) Image path: \SystemRoot\System32\TSDDD.dll Image name: TSDDD.dll Browse all global symbols functions data Timestamp: ***** Invalid (F622DB7E) CheckSum: 000074F8 ImageSize: 0000A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 ffffd74a`04290000 ffffd74a`042d1000 cdd (deferred) Image path: \SystemRoot\System32\cdd.dll Image name: cdd.dll Browse all global symbols functions data Timestamp: ***** Invalid (9A421E1E) CheckSum: 00045DB4 ImageSize: 00041000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 ffffd74a`04470000 ffffd74a`044e4000 win32k (deferred) Image path: \SystemRoot\System32\win32k.sys Image name: win32k.sys Browse all global symbols functions data Timestamp: Sat Sep 29 00:46:23 2007 (46FD924F) CheckSum: 0007C4FE ImageSize: 00074000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`8b214000 fffff801`8ba9d000 nt (pdb symbols) C:\ProgramData\dbg\sym\ntkrnlmp.pdb\6EFC00DDC5A54F148CED4662F4A27F8D1\ntkrnlmp.pdb Loaded symbol image file: ntkrnlmp.exe Image path: ntkrnlmp.exe Image name: ntkrnlmp.exe Browse all global symbols functions data Timestamp: Sat Apr 1 00:44:54 2017 (58DEE9F6) CheckSum: 007F0FE7 ImageSize: 00889000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`8ba9d000 fffff801`8bb19000 hal (deferred) Image path: hal.dll Image name: hal.dll Browse all global symbols functions data Timestamp: ***** Invalid (CEA0A646) CheckSum: 000795FE ImageSize: 0007C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`8bc00000 fffff801`8bc0b000 kd (deferred) Image path: \SystemRoot\system32\kd.dll Image name: kd.dll Browse all global symbols functions data Timestamp: ***** Invalid (91688416) CheckSum: 0000C219 ImageSize: 0000B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`ee600000 fffff801`ee625000 tm (deferred) Image path: \SystemRoot\System32\drivers\tm.sys Image name: tm.sys Browse all global symbols functions data Timestamp: ***** Invalid (9CA3067B) CheckSum: 0002B3B5 ImageSize: 00025000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`ee630000 fffff801`ee647000 PSHED (deferred) Image path: \SystemRoot\system32\PSHED.dll Image name: PSHED.dll Browse all global symbols functions data Timestamp: Thu Nov 5 08:56:53 2026 (6AEC44D5) CheckSum: 00016449 ImageSize: 00017000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`ee650000 fffff801`ee65b000 BOOTVID (deferred) Image path: \SystemRoot\system32\BOOTVID.dll Image name: BOOTVID.dll Browse all global symbols functions data Timestamp: ***** Invalid (9EAF733C) CheckSum: 00016298 ImageSize: 0000B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`ee660000 fffff801`ee6c5000 FLTMGR (pdb symbols) C:\ProgramData\dbg\sym\fltMgr.pdb\48747304BDFF27A3560106C0807BD3F51\fltMgr.pdb Loaded symbol image file: FLTMGR.SYS Image path: \SystemRoot\System32\drivers\FLTMGR.SYS Image name: FLTMGR.SYS Browse all global symbols functions data Timestamp: ***** Invalid (90D626DF) CheckSum: 000656FA ImageSize: 00065000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`ee6d0000 fffff801`ee7b0000 clipsp (deferred) Image path: \SystemRoot\System32\drivers\clipsp.sys Image name: clipsp.sys Browse all global symbols functions data Timestamp: Sat Mar 18 04:54:13 2017 (58CCBD75) CheckSum: 000DC888 ImageSize: 000E0000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`ee7b0000 fffff801`ee7be000 cmimcext (deferred) Image path: \SystemRoot\System32\drivers\cmimcext.sys Image name: cmimcext.sys Browse all global symbols functions data Timestamp: ***** Invalid (FF4D5961) CheckSum: 00008775 ImageSize: 0000E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`ee7c0000 fffff801`ee7cc000 ntosext (deferred) Image path: \SystemRoot\System32\drivers\ntosext.sys Image name: ntosext.sys Browse all global symbols functions data Timestamp: ***** Invalid (CC2A33AD) CheckSum: 00012746 ImageSize: 0000C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`ee7d0000 fffff801`ee878000 CI (deferred) Image path: \SystemRoot\system32\CI.dll Image name: CI.dll Browse all global symbols functions data Timestamp: Sat Oct 16 02:44:48 2004 (41707D10) CheckSum: 000A6FF0 ImageSize: 000A8000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`ee880000 fffff801`ee922000 cng (deferred) Image path: \SystemRoot\System32\drivers\cng.sys Image name: cng.sys Browse all global symbols functions data Timestamp: ***** Invalid (F2E91F26) CheckSum: 000A8550 ImageSize: 000A2000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`ee930000 fffff801`eea0e000 Wdf01000 (deferred) Image path: \SystemRoot\system32\drivers\Wdf01000.sys Image name: Wdf01000.sys Browse all global symbols functions data Timestamp: Thu Sep 13 02:32:07 1990 (26EEE197) CheckSum: 000E46B7 ImageSize: 000DE000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`eea10000 fffff801`eea23000 WDFLDR (deferred) Image path: \SystemRoot\system32\drivers\WDFLDR.SYS Image name: WDFLDR.SYS Browse all global symbols functions data Timestamp: Thu Sep 29 14:06:05 1977 (0E910A3D) CheckSum: 00018953 ImageSize: 00013000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`eea30000 fffff801`eea3e000 SleepStudyHelper (deferred) Image path: \SystemRoot\system32\drivers\SleepStudyHelper.sys Image name: SleepStudyHelper.sys Browse all global symbols functions data Timestamp: ***** Invalid (EFF776F3) CheckSum: 00010075 ImageSize: 0000E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`eea40000 fffff801`eea63000 acpiex (deferred) Image path: \SystemRoot\System32\Drivers\acpiex.sys Image name: acpiex.sys Browse all global symbols functions data Timestamp: ***** Invalid (DC6150EE) CheckSum: 00028B4D ImageSize: 00023000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`eea70000 fffff801`eea7e000 WppRecorder (deferred) Image path: \SystemRoot\System32\Drivers\WppRecorder.sys Image name: WppRecorder.sys Browse all global symbols functions data Timestamp: Mon Feb 10 08:02:55 1986 (1E4DAB2F) CheckSum: 0000C53D ImageSize: 0000E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`eea80000 fffff801`eeb37000 ACPI (deferred) Image path: \SystemRoot\System32\drivers\ACPI.sys Image name: ACPI.sys Browse all global symbols functions data Timestamp: Tue Dec 9 11:17:08 1975 (0B2AD2B4) CheckSum: 000B1260 ImageSize: 000B7000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`eeb40000 fffff801`eeb4c000 WMILIB (deferred) Image path: \SystemRoot\System32\drivers\WMILIB.SYS Image name: WMILIB.SYS Browse all global symbols functions data Timestamp: Fri Sep 28 17:44:04 2018 (5BAE5A54) CheckSum: 0000E2FE ImageSize: 0000C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`eeb60000 fffff801`eeb76000 WindowsTrustedRT (deferred) Image path: \SystemRoot\system32\drivers\WindowsTrustedRT.sys Image name: WindowsTrustedRT.sys Browse all global symbols functions data Timestamp: ***** Invalid (E3FF4AF6) CheckSum: 0001FED5 ImageSize: 00016000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`eeb80000 fffff801`eeb97000 intelpep (deferred) Image path: \SystemRoot\System32\drivers\intelpep.sys Image name: intelpep.sys Browse all global symbols functions data Timestamp: Thu Apr 19 09:53:10 2007 (46272DF6) CheckSum: 00022020 ImageSize: 00017000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`eeba0000 fffff801`eebab000 WindowsTrustedRTProxy (deferred) Image path: \SystemRoot\System32\drivers\WindowsTrustedRTProxy.sys Image name: WindowsTrustedRTProxy.sys Browse all global symbols functions data Timestamp: Fri Jul 28 14:32:40 2006 (44CA11F8) CheckSum: 0000A552 ImageSize: 0000B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`eebb0000 fffff801`eebc3000 pcw (deferred) Image path: \SystemRoot\System32\drivers\pcw.sys Image name: pcw.sys Browse all global symbols functions data Timestamp: Sat Jan 10 19:29:41 1970 (000CEFA5) CheckSum: 000188B9 ImageSize: 00013000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`eebd0000 fffff801`eebe2000 vdrvroot (deferred) Image path: \SystemRoot\System32\drivers\vdrvroot.sys Image name: vdrvroot.sys Browse all global symbols functions data Timestamp: ***** Invalid (C0C6BED0) CheckSum: 0001558D ImageSize: 00012000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`eebf0000 fffff801`eebfb000 msisadrv (deferred) Image path: \SystemRoot\System32\drivers\msisadrv.sys Image name: msisadrv.sys Browse all global symbols functions data Timestamp: ***** Invalid (BAF553EF) CheckSum: 0000CAA1 ImageSize: 0000B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`eec00000 fffff801`eec5b000 pci (deferred) Image path: \SystemRoot\System32\drivers\pci.sys Image name: pci.sys Browse all global symbols functions data Timestamp: Sat Aug 2 10:15:37 2025 (688DD739) CheckSum: 00063A5B ImageSize: 0005B000 File version: 10.0.15063.0 Product version: 10.0.15063.0 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: pci.sys OriginalFilename: pci.sys ProductVersion: 10.0.15063.0 FileVersion: 10.0.15063.0 (WinBuild.160101.0800) FileDescription: NT Plug and Play PCI Enumerator LegalCopyright: © Microsoft Corporation. All rights reserved. fffff801`eec60000 fffff801`eec83000 pdc (deferred) Image path: \SystemRoot\system32\drivers\pdc.sys Image name: pdc.sys Browse all global symbols functions data Timestamp: Sun Mar 12 12:41:46 2034 (78BEF38A) CheckSum: 0001EBB1 ImageSize: 00023000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`eec90000 fffff801`eeca8000 CEA (deferred) Image path: \SystemRoot\system32\drivers\CEA.sys Image name: CEA.sys Browse all global symbols functions data Timestamp: Thu Dec 17 04:50:10 1970 (01CDB102) CheckSum: 0001DBD0 ImageSize: 00018000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`eecb0000 fffff801`eecdb000 partmgr (deferred) Image path: \SystemRoot\System32\drivers\partmgr.sys Image name: partmgr.sys Browse all global symbols functions data Timestamp: Tue Dec 23 13:10:05 2025 (694A94AD) CheckSum: 0003332D ImageSize: 0002B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`eece0000 fffff801`eed74000 spaceport (deferred) Image path: \SystemRoot\System32\drivers\spaceport.sys Image name: spaceport.sys Browse all global symbols functions data Timestamp: Wed Apr 25 06:38:08 2035 (7AD9C5C0) CheckSum: 000914F1 ImageSize: 00094000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`eed80000 fffff801`eed99000 volmgr (deferred) Image path: \SystemRoot\System32\drivers\volmgr.sys Image name: volmgr.sys Browse all global symbols functions data Timestamp: ***** Invalid (D7133847) CheckSum: 00020990 ImageSize: 00019000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`eeda0000 fffff801`eedfe000 volmgrx (deferred) Image path: \SystemRoot\System32\drivers\volmgrx.sys Image name: volmgrx.sys Browse all global symbols functions data Timestamp: unavailable (FFFFFFFE) CheckSum: missing ImageSize: 0005E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`eee00000 fffff801`eee07000 amdide64 (deferred) Image path: \SystemRoot\System32\drivers\amdide64.sys Image name: amdide64.sys Browse all global symbols functions data Timestamp: Tue Dec 4 09:49:28 2012 (50BDC728) CheckSum: 00009B91 ImageSize: 00007000 File version: 5.2.2.179 Product version: 5.2.2.179 File flags: 8 (Mask 3F) Private File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Advanced Micro Devices Inc. ProductName: AMD miniIDE Driver InternalName: amdide64.sys OriginalFilename: amdide64.sys ProductVersion: 5.2.2.0179 FileVersion: 5.2.2.0179 built by: WinDDK FileDescription: AMD miniIDE Driver LegalCopyright: Copyright© AMD Inc. 2006-2012 fffff801`eee10000 fffff801`eee21000 PCIIDEX (deferred) Image path: \SystemRoot\System32\drivers\PCIIDEX.SYS Image name: PCIIDEX.SYS Browse all global symbols functions data Timestamp: Sun Mar 18 09:36:39 2012 (4F65ACA7) CheckSum: 0001BE80 ImageSize: 00011000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`eee30000 fffff801`eee4e000 mountmgr (deferred) Image path: \SystemRoot\System32\drivers\mountmgr.sys Image name: mountmgr.sys Browse all global symbols functions data Timestamp: ***** Invalid (EA4F8C7B) CheckSum: 00022641 ImageSize: 0001E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`eee50000 fffff801`eee5c000 atapi (deferred) Image path: \SystemRoot\System32\drivers\atapi.sys Image name: atapi.sys Browse all global symbols functions data Timestamp: Mon Nov 27 23:57:51 2000 (3A22F4FF) CheckSum: 00016C34 ImageSize: 0000C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`eee60000 fffff801`eee95000 ataport (deferred) Image path: \SystemRoot\System32\drivers\ataport.SYS Image name: ataport.SYS Browse all global symbols functions data Timestamp: ***** Invalid (CC903857) CheckSum: 00035094 ImageSize: 00035000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`eeea0000 fffff801`eeebd000 amd_sata (deferred) Image path: \SystemRoot\System32\drivers\amd_sata.sys Image name: amd_sata.sys Browse all global symbols functions data Timestamp: Thu Mar 19 06:43:08 2015 (550A6FFC) CheckSum: 00021C22 ImageSize: 0001D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`eeec0000 fffff801`eef4a000 storport (deferred) Image path: \SystemRoot\System32\drivers\storport.sys Image name: storport.sys Browse all global symbols functions data Timestamp: ***** Invalid (B80B8943) CheckSum: 0008948B ImageSize: 0008A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`eef50000 fffff801`eef5a000 amd_xata (deferred) Image path: \SystemRoot\System32\drivers\amd_xata.sys Image name: amd_xata.sys Browse all global symbols functions data Timestamp: Thu Mar 19 06:43:10 2015 (550A6FFE) CheckSum: 00013FAC ImageSize: 0000A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`eef80000 fffff801`eef9a000 fileinfo (deferred) Image path: \SystemRoot\System32\drivers\fileinfo.sys Image name: fileinfo.sys Browse all global symbols functions data Timestamp: ***** Invalid (885C5414) CheckSum: 000235B2 ImageSize: 0001A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`eefa0000 fffff801`eefdb000 Wof (deferred) Image path: \SystemRoot\System32\Drivers\Wof.sys Image name: Wof.sys Browse all global symbols functions data Timestamp: Mon Mar 11 22:47:45 1974 (07E25791) CheckSum: 00038B80 ImageSize: 0003B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`eefe0000 fffff801`ef02e000 WdFilter (pdb symbols) C:\ProgramData\dbg\sym\WdFilter.pdb\9565EDD1019C8D8E71835B3C2994DC8D1\WdFilter.pdb Loaded symbol image file: WdFilter.sys Image path: \SystemRoot\system32\drivers\WdFilter.sys Image name: WdFilter.sys Browse all global symbols functions data Timestamp: ***** Invalid (F9B582DD) CheckSum: 0004E39B ImageSize: 0004E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`ef030000 fffff801`ef273000 NTFS (deferred) Image path: \SystemRoot\System32\Drivers\NTFS.sys Image name: NTFS.sys Browse all global symbols functions data Timestamp: Wed Jul 6 05:59:02 1994 (2E1A3A16) CheckSum: 00243D6F ImageSize: 00243000 File version: 10.0.15063.0 Product version: 10.0.15063.0 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: ntfs.sys OriginalFilename: ntfs.sys ProductVersion: 10.0.15063.0 FileVersion: 10.0.15063.0 (WinBuild.160101.0800) FileDescription: NT File System Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff801`ef280000 fffff801`ef28d000 Fs_Rec (deferred) Image path: \SystemRoot\System32\Drivers\Fs_Rec.sys Image name: Fs_Rec.sys Browse all global symbols functions data Timestamp: ***** Invalid (9836443C) CheckSum: 00012F34 ImageSize: 0000D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`ef290000 fffff801`ef3c6000 ndis (deferred) Image path: \SystemRoot\system32\drivers\ndis.sys Image name: ndis.sys Browse all global symbols functions data Timestamp: Tue Dec 15 05:19:38 1981 (167C3FEA) CheckSum: 00132261 ImageSize: 00136000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`ef3d0000 fffff801`ef455000 NETIO (deferred) Image path: \SystemRoot\system32\drivers\NETIO.SYS Image name: NETIO.SYS Browse all global symbols functions data Timestamp: ***** Invalid (8CC6BF38) CheckSum: 00087D1E ImageSize: 00085000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`ef460000 fffff801`ef490000 ksecpkg (deferred) Image path: \SystemRoot\System32\Drivers\ksecpkg.sys Image name: ksecpkg.sys Browse all global symbols functions data Timestamp: ***** Invalid (AC6D7E9B) CheckSum: 0002A48F ImageSize: 00030000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`ef4b0000 fffff801`ef4cc000 mcupdate_AuthenticAMD (deferred) Image path: \SystemRoot\system32\mcupdate_AuthenticAMD.dll Image name: mcupdate_AuthenticAMD.dll Browse all global symbols functions data Timestamp: Tue Jan 31 11:16:29 1978 (0F346A8D) CheckSum: 00015091 ImageSize: 0001C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`ef4d0000 fffff801`ef52f000 msrpc (deferred) Image path: \SystemRoot\System32\drivers\msrpc.sys Image name: msrpc.sys Browse all global symbols functions data Timestamp: Sun Jan 17 12:05:49 1982 (16A8209D) CheckSum: 0006343C ImageSize: 0005F000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`ef530000 fffff801`ef559000 ksecdd (deferred) Image path: \SystemRoot\System32\drivers\ksecdd.sys Image name: ksecdd.sys Browse all global symbols functions data Timestamp: ***** Invalid (85DBC708) CheckSum: 000289CA ImageSize: 00029000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`ef560000 fffff801`ef571000 werkernel (deferred) Image path: \SystemRoot\System32\drivers\werkernel.sys Image name: werkernel.sys Browse all global symbols functions data Timestamp: ***** Invalid (C3403C42) CheckSum: 000160E2 ImageSize: 00011000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`ef580000 fffff801`ef5e5000 CLFS (deferred) Image path: \SystemRoot\System32\drivers\CLFS.SYS Image name: CLFS.SYS Browse all global symbols functions data Timestamp: ***** Invalid (B5B5D3D6) CheckSum: 0006BB58 ImageSize: 00065000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`ef600000 fffff801`ef6b6000 fvevol (deferred) Image path: \SystemRoot\System32\DRIVERS\fvevol.sys Image name: fvevol.sys Browse all global symbols functions data Timestamp: Wed Feb 3 07:04:49 1999 (36B7F511) CheckSum: 000B8351 ImageSize: 000B6000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`ef6c0000 fffff801`ef6cb000 volume (deferred) Image path: \SystemRoot\System32\drivers\volume.sys Image name: volume.sys Browse all global symbols functions data Timestamp: ***** Invalid (9CBEE8B7) CheckSum: 00012BB5 ImageSize: 0000B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`ef6d0000 fffff801`ef734000 volsnap (deferred) Image path: \SystemRoot\System32\drivers\volsnap.sys Image name: volsnap.sys Browse all global symbols functions data Timestamp: ***** Invalid (DC1CFF91) CheckSum: 0006B682 ImageSize: 00064000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`ef740000 fffff801`ef78c000 rdyboost (deferred) Image path: \SystemRoot\System32\drivers\rdyboost.sys Image name: rdyboost.sys Browse all global symbols functions data Timestamp: ***** Invalid (CA830C4C) CheckSum: 0004E490 ImageSize: 0004C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`ef790000 fffff801`ef7b4000 mup (deferred) Image path: \SystemRoot\System32\Drivers\mup.sys Image name: mup.sys Browse all global symbols functions data Timestamp: ***** Invalid (98323F4C) CheckSum: 0002CA2F ImageSize: 00024000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`ef7c0000 fffff801`ef7d1000 iorate (deferred) Image path: \SystemRoot\system32\drivers\iorate.sys Image name: iorate.sys Browse all global symbols functions data Timestamp: Fri Feb 1 23:15:43 2013 (510C4C9F) CheckSum: 00019E81 ImageSize: 00011000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`ef7f0000 fffff801`ef80e000 disk (deferred) Image path: \SystemRoot\System32\drivers\disk.sys Image name: disk.sys Browse all global symbols functions data Timestamp: Sat Mar 28 18:37:28 2009 (49CE6E68) CheckSum: 0001E637 ImageSize: 0001E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`ef810000 fffff801`ef875000 CLASSPNP (deferred) Image path: \SystemRoot\System32\drivers\CLASSPNP.SYS Image name: CLASSPNP.SYS Browse all global symbols functions data Timestamp: Mon May 4 17:41:45 1992 (2A056949) CheckSum: 0006CAEA ImageSize: 00065000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`ef8a0000 fffff801`ef8bb000 crashdmp (deferred) Image path: \SystemRoot\System32\Drivers\crashdmp.sys Image name: crashdmp.sys Browse all global symbols functions data Timestamp: Tue Jun 8 03:16:33 1993 (2C13F681) CheckSum: 0001EF18 ImageSize: 0001B000 File version: 10.0.15063.0 Product version: 10.0.15063.0 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: crashdmp.sys OriginalFilename: crashdmp.sys ProductVersion: 10.0.15063.0 FileVersion: 10.0.15063.0 (WinBuild.160101.0800) FileDescription: Crash Dump Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff801`ef940000 fffff801`ef96e000 cdrom (deferred) Image path: \SystemRoot\System32\drivers\cdrom.sys Image name: cdrom.sys Browse all global symbols functions data Timestamp: Thu Jul 20 23:39:41 1972 (04CCA32D) CheckSum: 00036ABC ImageSize: 0002E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`ef970000 fffff801`ef984000 filecrypt (deferred) Image path: \SystemRoot\system32\drivers\filecrypt.sys Image name: filecrypt.sys Browse all global symbols functions data Timestamp: Tue May 28 09:10:59 2030 (719E1813) CheckSum: 0001B03D ImageSize: 00014000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`ef990000 fffff801`ef99d000 tbs (deferred) Image path: \SystemRoot\system32\drivers\tbs.sys Image name: tbs.sys Browse all global symbols functions data Timestamp: Sat Jul 24 08:49:47 2027 (6C444C9B) CheckSum: 00007016 ImageSize: 0000D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`ef9a0000 fffff801`ef9aa000 Null (deferred) Image path: \SystemRoot\System32\Drivers\Null.SYS Image name: Null.SYS Browse all global symbols functions data Timestamp: ***** Invalid (D1CBAAAB) CheckSum: 00011868 ImageSize: 0000A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`ef9b0000 fffff801`ef9ba000 Beep (deferred) Image path: \SystemRoot\System32\Drivers\Beep.SYS Image name: Beep.SYS Browse all global symbols functions data Timestamp: ***** Invalid (A94A035E) CheckSum: 0000B8DE ImageSize: 0000A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`ef9c0000 fffff801`ef9d5000 BasicDisplay (deferred) Image path: \SystemRoot\System32\drivers\BasicDisplay.sys Image name: BasicDisplay.sys Browse all global symbols functions data Timestamp: ***** Invalid (E7A205B4) CheckSum: 000178AD ImageSize: 00015000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`ef9e0000 fffff801`ef9f4000 watchdog (deferred) Image path: \SystemRoot\System32\drivers\watchdog.sys Image name: watchdog.sys Browse all global symbols functions data Timestamp: ***** Invalid (DFC4C1CD) CheckSum: 0001BE1C ImageSize: 00014000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`efa50000 fffff801`efcec000 tcpip (deferred) Image path: \SystemRoot\System32\drivers\tcpip.sys Image name: tcpip.sys Browse all global symbols functions data Timestamp: ***** Invalid (E5E1EC2C) CheckSum: 0029E904 ImageSize: 0029C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`efcf0000 fffff801`efd5a000 fwpkclnt (deferred) Image path: \SystemRoot\System32\drivers\fwpkclnt.sys Image name: fwpkclnt.sys Browse all global symbols functions data Timestamp: Thu Jan 28 06:39:38 1999 (36B0062A) CheckSum: 0006ABB4 ImageSize: 0006A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`efd60000 fffff801`efd8c000 wfplwfs (deferred) Image path: \SystemRoot\System32\drivers\wfplwfs.sys Image name: wfplwfs.sys Browse all global symbols functions data Timestamp: Mon Apr 5 20:35:50 2010 (4BBA3B96) CheckSum: 00033C97 ImageSize: 0002C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f0400000 fffff801`f041a000 vwififlt (deferred) Image path: \SystemRoot\System32\drivers\vwififlt.sys Image name: vwififlt.sys Browse all global symbols functions data Timestamp: Sat Jun 12 13:15:16 2032 (7575D054) CheckSum: 000177F5 ImageSize: 0001A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f0420000 fffff801`f0449000 pacer (deferred) Image path: \SystemRoot\System32\drivers\pacer.sys Image name: pacer.sys Browse all global symbols functions data Timestamp: ***** Invalid (C07DAF10) CheckSum: 0002B1A2 ImageSize: 00029000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f0450000 fffff801`f0462000 netbios (deferred) Image path: \SystemRoot\system32\drivers\netbios.sys Image name: netbios.sys Browse all global symbols functions data Timestamp: ***** Invalid (93C21EE7) CheckSum: 0001A8FF ImageSize: 00012000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f0470000 fffff801`f04e5000 rdbss (deferred) Image path: \SystemRoot\system32\DRIVERS\rdbss.sys Image name: rdbss.sys Browse all global symbols functions data Timestamp: ***** Invalid (E291A5CA) CheckSum: 000792B0 ImageSize: 00075000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f04f0000 fffff801`f057f000 csc (deferred) Image path: \SystemRoot\system32\drivers\csc.sys Image name: csc.sys Browse all global symbols functions data Timestamp: Sat Jul 4 21:47:41 2037 (7EFA9C6D) CheckSum: 0008D9D8 ImageSize: 0008F000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f0580000 fffff801`f0591000 nsiproxy (deferred) Image path: \SystemRoot\system32\drivers\nsiproxy.sys Image name: nsiproxy.sys Browse all global symbols functions data Timestamp: ***** Invalid (E796A4DD) CheckSum: 0001247A ImageSize: 00011000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f05a0000 fffff801`f05af000 npsvctrig (deferred) Image path: \SystemRoot\System32\drivers\npsvctrig.sys Image name: npsvctrig.sys Browse all global symbols functions data Timestamp: ***** Invalid (EFF190DD) CheckSum: 00009E31 ImageSize: 0000F000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f05b0000 fffff801`f05c0000 mssmbios (deferred) Image path: \SystemRoot\System32\drivers\mssmbios.sys Image name: mssmbios.sys Browse all global symbols functions data Timestamp: ***** Invalid (BC4E1F4C) CheckSum: 0000F528 ImageSize: 00010000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f05c0000 fffff801`f05ce000 MpKsl737fc609 (deferred) Image path: \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{7B80792C-2588-410B-8BA3-98047DCF099C}\MpKsl737fc609.sys Image name: MpKsl737fc609.sys Browse all global symbols functions data Timestamp: Wed May 20 02:50:37 2015 (555BE86D) CheckSum: 0000D1AA ImageSize: 0000E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f05d0000 fffff801`f05de000 MpKsl037efe3d (deferred) Image path: \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{7B80792C-2588-410B-8BA3-98047DCF099C}\MpKsl037efe3d.sys Image name: MpKsl037efe3d.sys Browse all global symbols functions data Timestamp: Wed May 20 02:50:37 2015 (555BE86D) CheckSum: 0000D1AA ImageSize: 0000E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f05e0000 fffff801`f05ea000 gpuenergydrv (deferred) Image path: \SystemRoot\System32\drivers\gpuenergydrv.sys Image name: gpuenergydrv.sys Browse all global symbols functions data Timestamp: Sat Nov 11 08:01:57 1972 (05622075) CheckSum: 0000429A ImageSize: 0000A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f05f0000 fffff801`f061b000 dfsc (deferred) Image path: \SystemRoot\System32\Drivers\dfsc.sys Image name: dfsc.sys Browse all global symbols functions data Timestamp: Sat Mar 4 10:04:07 2023 (64031797) CheckSum: 00032C04 ImageSize: 0002B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f0640000 fffff801`f0681000 ahcache (deferred) Image path: \SystemRoot\system32\DRIVERS\ahcache.sys Image name: ahcache.sys Browse all global symbols functions data Timestamp: Thu Jul 29 05:52:50 2004 (410882A2) CheckSum: 00045EB6 ImageSize: 00041000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f0690000 fffff801`f069e000 Hamdrv (deferred) Image path: \SystemRoot\system32\DRIVERS\Hamdrv.sys Image name: Hamdrv.sys Browse all global symbols functions data Timestamp: Mon Mar 30 14:28:42 2015 (55194F8A) CheckSum: 0000E45B ImageSize: 0000E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f06a0000 fffff801`f06b1000 CompositeBus (deferred) Image path: \SystemRoot\System32\DriverStore\FileRepository\compositebus.inf_amd64_de4c68ea4fb1be53\CompositeBus.sys Image name: CompositeBus.sys Browse all global symbols functions data Timestamp: ***** Invalid (A29FEBD9) CheckSum: 0000BFAF ImageSize: 00011000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f06c0000 fffff801`f06cd000 kdnic (deferred) Image path: \SystemRoot\System32\drivers\kdnic.sys Image name: kdnic.sys Browse all global symbols functions data Timestamp: ***** Invalid (E88EF29A) CheckSum: 00012EF1 ImageSize: 0000D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f06d0000 fffff801`f06e5000 umbus (deferred) Image path: \SystemRoot\System32\drivers\umbus.sys Image name: umbus.sys Browse all global symbols functions data Timestamp: Tue Jul 1 15:26:17 2025 (6863F009) CheckSum: 0001604F ImageSize: 00015000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f0a00000 fffff801`f0c5a000 dxgkrnl (deferred) Image path: \SystemRoot\System32\drivers\dxgkrnl.sys Image name: dxgkrnl.sys Browse all global symbols functions data Timestamp: ***** Invalid (E86E41C4) CheckSum: 0025F6EC ImageSize: 0025A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f0c60000 fffff801`f0c7a000 vmbkmclr (deferred) Image path: \SystemRoot\System32\drivers\vmbkmclr.sys Image name: vmbkmclr.sys Browse all global symbols functions data Timestamp: Sat Oct 30 03:55:38 1993 (2CD1D7AA) CheckSum: 0001B34D ImageSize: 0001A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f0c80000 fffff801`f0c90000 BasicRender (deferred) Image path: \SystemRoot\System32\drivers\BasicRender.sys Image name: BasicRender.sys Browse all global symbols functions data Timestamp: Wed Jun 1 18:04:19 2011 (4DE67113) CheckSum: 00010267 ImageSize: 00010000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f0c90000 fffff801`f0ca9000 Npfs (deferred) Image path: \SystemRoot\System32\Drivers\Npfs.SYS Image name: Npfs.SYS Browse all global symbols functions data Timestamp: Sun Jul 14 23:34:01 2030 (71DCD8D9) CheckSum: 00012322 ImageSize: 00019000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f0cb0000 fffff801`f0cc0000 Msfs (deferred) Image path: \SystemRoot\System32\Drivers\Msfs.SYS Image name: Msfs.SYS Browse all global symbols functions data Timestamp: Tue Oct 24 12:07:15 2000 (39F56D63) CheckSum: 0000C5C3 ImageSize: 00010000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f0cc0000 fffff801`f0ce2000 tdx (deferred) Image path: \SystemRoot\system32\DRIVERS\tdx.sys Image name: tdx.sys Browse all global symbols functions data Timestamp: ***** Invalid (E5F26246) CheckSum: 000233EE ImageSize: 00022000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f0cf0000 fffff801`f0d00000 TDI (deferred) Image path: \SystemRoot\system32\DRIVERS\TDI.SYS Image name: TDI.SYS Browse all global symbols functions data Timestamp: ***** Invalid (D2C3B059) CheckSum: 0000FA4A ImageSize: 00010000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f0d00000 fffff801`f0d52000 netbt (deferred) Image path: \SystemRoot\System32\DRIVERS\netbt.sys Image name: netbt.sys Browse all global symbols functions data Timestamp: ***** Invalid (B2AD25BE) CheckSum: 00055B39 ImageSize: 00052000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f0d60000 fffff801`f0dfb000 afd (deferred) Image path: \SystemRoot\system32\drivers\afd.sys Image name: afd.sys Browse all global symbols functions data Timestamp: ***** Invalid (ED6FDF1B) CheckSum: 0009BF2E ImageSize: 0009B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f1e00000 fffff801`f1e64000 USBXHCI (deferred) Image path: \SystemRoot\System32\drivers\USBXHCI.SYS Image name: USBXHCI.SYS Browse all global symbols functions data Timestamp: Mon Jul 18 04:39:46 2005 (42DB2482) CheckSum: 00060274 ImageSize: 00064000 File version: 10.0.15063.11 Product version: 10.0.15063.11 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: usbxhci.sys OriginalFilename: usbxhci.sys ProductVersion: 10.0.15063.11 FileVersion: 10.0.15063.11 (WinBuild.160101.0800) FileDescription: USB XHCI Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff801`f1e70000 fffff801`f1ea9000 ucx01000 (deferred) Image path: \SystemRoot\system32\drivers\ucx01000.sys Image name: ucx01000.sys Browse all global symbols functions data Timestamp: Tue Feb 22 14:51:48 1994 (2D6A1C04) CheckSum: 0003CD1A ImageSize: 00039000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f1eb0000 fffff801`f1f9b000 Rt630x64 (deferred) Image path: \SystemRoot\System32\drivers\Rt630x64.sys Image name: Rt630x64.sys Browse all global symbols functions data Timestamp: Fri May 26 08:04:00 2017 (5927D360) CheckSum: 000F904F ImageSize: 000EB000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f1fa0000 fffff801`f1faf000 usbohci (deferred) Image path: \SystemRoot\System32\drivers\usbohci.sys Image name: usbohci.sys Browse all global symbols functions data Timestamp: ***** Invalid (90EB6493) CheckSum: 00014BC4 ImageSize: 0000F000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f1fb0000 fffff801`f2027000 USBPORT (deferred) Image path: \SystemRoot\System32\drivers\USBPORT.SYS Image name: USBPORT.SYS Browse all global symbols functions data Timestamp: ***** Invalid (CE983203) CheckSum: 0007E3BD ImageSize: 00077000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f2030000 fffff801`f204c000 usbehci (deferred) Image path: \SystemRoot\System32\drivers\usbehci.sys Image name: usbehci.sys Browse all global symbols functions data Timestamp: ***** Invalid (B53499C2) CheckSum: 0001A61F ImageSize: 0001C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f2050000 fffff801`f2083000 amdppm (deferred) Image path: \SystemRoot\System32\drivers\amdppm.sys Image name: amdppm.sys Browse all global symbols functions data Timestamp: ***** Invalid (CB1AA79A) CheckSum: 0002CEA7 ImageSize: 00033000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f2090000 fffff801`f209e000 nvvad64v (deferred) Image path: \SystemRoot\system32\drivers\nvvad64v.sys Image name: nvvad64v.sys Browse all global symbols functions data Timestamp: Wed Apr 12 09:06:41 2017 (58EDE011) CheckSum: 0000CF7B ImageSize: 0000E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f20a0000 fffff801`f20ae000 ksthunk (deferred) Image path: \SystemRoot\system32\drivers\ksthunk.sys Image name: ksthunk.sys Browse all global symbols functions data Timestamp: Sat Jun 13 00:29:26 2020 (5EE40FD6) CheckSum: 0000E03A ImageSize: 0000E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f20b0000 fffff801`f20bf000 nvvhci (deferred) Image path: \SystemRoot\System32\drivers\nvvhci.sys Image name: nvvhci.sys Browse all global symbols functions data Timestamp: Wed Dec 28 01:44:00 2016 (586318E0) CheckSum: 0000EEC6 ImageSize: 0000F000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f20c0000 fffff801`f20cd000 NdisVirtualBus (deferred) Image path: \SystemRoot\System32\drivers\NdisVirtualBus.sys Image name: NdisVirtualBus.sys Browse all global symbols functions data Timestamp: ***** Invalid (B2B82E4C) CheckSum: 0000767E ImageSize: 0000D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f20d0000 fffff801`f20dc000 swenum (deferred) Image path: \SystemRoot\System32\drivers\swenum.sys Image name: swenum.sys Browse all global symbols functions data Timestamp: ***** Invalid (B9D78944) CheckSum: 00010256 ImageSize: 0000C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f20e0000 fffff801`f20ed000 rdpbus (deferred) Image path: \SystemRoot\System32\drivers\rdpbus.sys Image name: rdpbus.sys Browse all global symbols functions data Timestamp: Sun Feb 1 21:17:30 2004 (401D6CEA) CheckSum: 0000F0A9 ImageSize: 0000D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f20f0000 fffff801`f2172000 usbhub (deferred) Image path: \SystemRoot\System32\drivers\usbhub.sys Image name: usbhub.sys Browse all global symbols functions data Timestamp: Tue Jan 22 06:58:50 1980 (12EAB7AA) CheckSum: 0007D922 ImageSize: 00082000 File version: 10.0.15063.0 Product version: 10.0.15063.0 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: usbhub.sys OriginalFilename: usbhub.sys ProductVersion: 10.0.15063.0 FileVersion: 10.0.15063.0 (WinBuild.160101.0800) FileDescription: Default Hub Driver for USB LegalCopyright: © Microsoft Corporation. All rights reserved. fffff801`f2180000 fffff801`f218e000 USBD (deferred) Image path: \SystemRoot\System32\drivers\USBD.SYS Image name: USBD.SYS Browse all global symbols functions data Timestamp: Mon Jun 14 05:32:36 1971 (02B9A964) CheckSum: 00013619 ImageSize: 0000E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f2190000 fffff801`f21c5000 nvhda64v (deferred) Image path: \SystemRoot\system32\drivers\nvhda64v.sys Image name: nvhda64v.sys Browse all global symbols functions data Timestamp: Tue May 16 14:02:27 2017 (591AF863) CheckSum: 0004663F ImageSize: 00035000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f21d0000 fffff801`f225c000 UsbHub3 (deferred) Image path: \SystemRoot\System32\drivers\UsbHub3.sys Image name: UsbHub3.sys Browse all global symbols functions data Timestamp: ***** Invalid (B99F418D) CheckSum: 0008F625 ImageSize: 0008C000 File version: 10.0.15063.0 Product version: 10.0.15063.0 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: usbhub3.sys OriginalFilename: usbhub3.sys ProductVersion: 10.0.15063.0 FileVersion: 10.0.15063.0 (WinBuild.160101.0800) FileDescription: USB3 HUB Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff801`f2550000 fffff801`f348b000 nvlddmkm (deferred) Image path: \SystemRoot\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_2386fda73b467ac8\nvlddmkm.sys Image name: nvlddmkm.sys Browse all global symbols functions data Timestamp: Tue Jun 27 21:02:17 2017 (5952B9C9) CheckSum: 00EF68E7 ImageSize: 00F3B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f3490000 fffff801`f34ad000 HDAudBus (deferred) Image path: \SystemRoot\System32\drivers\HDAudBus.sys Image name: HDAudBus.sys Browse all global symbols functions data Timestamp: Wed Jan 27 06:21:45 1988 (21FD8579) CheckSum: 0001E09D ImageSize: 0001D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f34b0000 fffff801`f3513000 portcls (deferred) Image path: \SystemRoot\System32\drivers\portcls.sys Image name: portcls.sys Browse all global symbols functions data Timestamp: ***** Invalid (ABE570C2) CheckSum: 0005DD44 ImageSize: 00063000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f3520000 fffff801`f3541000 drmk (deferred) Image path: \SystemRoot\System32\drivers\drmk.sys Image name: drmk.sys Browse all global symbols functions data Timestamp: ***** Invalid (A01C1986) CheckSum: 000244D4 ImageSize: 00021000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f3550000 fffff801`f35b7000 ks (deferred) Image path: \SystemRoot\System32\drivers\ks.sys Image name: ks.sys Browse all global symbols functions data Timestamp: Fri Nov 30 03:12:24 1979 (12A4A318) CheckSum: 00068D97 ImageSize: 00067000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f3600000 fffff801`f3618000 uaspstor (deferred) Image path: \SystemRoot\System32\drivers\uaspstor.sys Image name: uaspstor.sys Browse all global symbols functions data Timestamp: ***** Invalid (80BECD8D) CheckSum: 0001B292 ImageSize: 00018000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f3620000 fffff801`f3632000 hidusb (deferred) Image path: \SystemRoot\System32\drivers\hidusb.sys Image name: hidusb.sys Browse all global symbols functions data Timestamp: Tue May 3 08:23:27 2016 (572851EF) CheckSum: 00016E3E ImageSize: 00012000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f3640000 fffff801`f3673000 HIDCLASS (deferred) Image path: \SystemRoot\System32\drivers\HIDCLASS.SYS Image name: HIDCLASS.SYS Browse all global symbols functions data Timestamp: Wed Aug 14 09:52:13 1991 (28A8EF3D) CheckSum: 000367E8 ImageSize: 00033000 File version: 10.0.15063.0 Product version: 10.0.15063.0 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: hidclass.sys OriginalFilename: hidclass.sys ProductVersion: 10.0.15063.0 FileVersion: 10.0.15063.0 (WinBuild.160101.0800) FileDescription: Hid Class Library LegalCopyright: © Microsoft Corporation. All rights reserved. fffff801`f3680000 fffff801`f3692000 HIDPARSE (deferred) Image path: \SystemRoot\System32\drivers\HIDPARSE.SYS Image name: HIDPARSE.SYS Browse all global symbols functions data Timestamp: ***** Invalid (CCA57185) CheckSum: 0001506A ImageSize: 00012000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f36a0000 fffff801`f36b0000 kbdhid (deferred) Image path: \SystemRoot\System32\drivers\kbdhid.sys Image name: kbdhid.sys Browse all global symbols functions data Timestamp: Sun Apr 24 05:10:44 2022 (6264CDC4) CheckSum: 00010564 ImageSize: 00010000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f36b0000 fffff801`f36bc000 pikbd (deferred) Image path: \SystemRoot\System32\drivers\pikbd.sys Image name: pikbd.sys Browse all global symbols functions data Timestamp: Thu Sep 22 23:09:01 2016 (57E4567D) CheckSum: 000109BD ImageSize: 0000C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f36c0000 fffff801`f36d3000 kbdclass (deferred) Image path: \SystemRoot\System32\drivers\kbdclass.sys Image name: kbdclass.sys Browse all global symbols functions data Timestamp: ***** Invalid (D67B605D) CheckSum: 00019BCB ImageSize: 00013000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f36e0000 fffff801`f36ef000 mouhid (deferred) Image path: \SystemRoot\System32\drivers\mouhid.sys Image name: mouhid.sys Browse all global symbols functions data Timestamp: ***** Invalid (E277736F) CheckSum: 000145D4 ImageSize: 0000F000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f36f0000 fffff801`f3703000 mouclass (deferred) Image path: \SystemRoot\System32\drivers\mouclass.sys Image name: mouclass.sys Browse all global symbols functions data Timestamp: Tue Oct 23 15:38:45 2035 (7BC8E3F5) CheckSum: 000154AD ImageSize: 00013000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f3710000 fffff801`f37d6000 peauth (deferred) Image path: \SystemRoot\system32\drivers\peauth.sys Image name: peauth.sys Browse all global symbols functions data Timestamp: Sun Dec 10 02:03:08 1989 (2581B95C) CheckSum: 000C12D5 ImageSize: 000C6000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f37e0000 fffff801`f37f3000 tcpipreg (deferred) Image path: \SystemRoot\System32\drivers\tcpipreg.sys Image name: tcpipreg.sys Browse all global symbols functions data Timestamp: ***** Invalid (F09C8E9F) CheckSum: 0001B5C9 ImageSize: 00013000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f3800000 fffff801`f382d000 AppvVemgr (deferred) Image path: \SystemRoot\system32\drivers\AppvVemgr.sys Image name: AppvVemgr.sys Browse all global symbols functions data Timestamp: ***** Invalid (82655E91) CheckSum: 0002DCEE ImageSize: 0002D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f3830000 fffff801`f38e8000 srv2 (deferred) Image path: \SystemRoot\System32\DRIVERS\srv2.sys Image name: srv2.sys Browse all global symbols functions data Timestamp: ***** Invalid (A2446563) CheckSum: 000BC302 ImageSize: 000B8000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f38f0000 fffff801`f3917000 AppvVfs (deferred) Image path: \SystemRoot\system32\drivers\AppvVfs.sys Image name: AppvVfs.sys Browse all global symbols functions data Timestamp: ***** Invalid (A61624D6) CheckSum: 00029C56 ImageSize: 00027000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f3920000 fffff801`f39ad000 srv (deferred) Image path: \SystemRoot\System32\DRIVERS\srv.sys Image name: srv.sys Browse all global symbols functions data Timestamp: ***** Invalid (8750B6D8) CheckSum: 0006A65F ImageSize: 0008D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f39e0000 fffff801`f3a03000 WdNisDrv (deferred) Image path: \SystemRoot\system32\Drivers\WdNisDrv.sys Image name: WdNisDrv.sys Browse all global symbols functions data Timestamp: Tue Nov 17 06:07:50 1981 (16576136) CheckSum: 0002B98C ImageSize: 00023000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f3a10000 fffff801`f3a22000 condrv (deferred) Image path: \SystemRoot\System32\drivers\condrv.sys Image name: condrv.sys Browse all global symbols functions data Timestamp: Thu Jun 26 02:27:43 2031 (73A5288F) CheckSum: 00014797 ImageSize: 00012000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f3a40000 fffff801`f3a4d000 rdpvideominiport (deferred) Image path: \SystemRoot\System32\drivers\rdpvideominiport.sys Image name: rdpvideominiport.sys Browse all global symbols functions data Timestamp: Thu Feb 22 04:39:13 2001 (3A9497F1) CheckSum: 0000D84B ImageSize: 0000D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f3aa0000 fffff801`f3ab3000 qwavedrv (deferred) Image path: \SystemRoot\system32\drivers\qwavedrv.sys Image name: qwavedrv.sys Browse all global symbols functions data Timestamp: ***** Invalid (F52C11F3) CheckSum: 00014D9C ImageSize: 00013000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f3cd0000 fffff801`f3cdf000 dump_dumpata (deferred) Image path: \SystemRoot\System32\Drivers\dump_dumpata.sys Image name: dump_dumpata.sys Browse all global symbols functions data Timestamp: ***** Invalid (A1EA4AF6) CheckSum: 00011ED8 ImageSize: 0000F000 File version: 10.0.15063.0 Product version: 10.0.15063.0 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0000.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: dumpata.sys OriginalFilename: dumpata.sys ProductVersion: 10.0.15063.0 FileVersion: 10.0.15063.0 (WinBuild.160101.0800) FileDescription: ATAPI Dump Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff801`f3cf0000 fffff801`f3cfc000 dump_atapi (deferred) Image path: \SystemRoot\System32\Drivers\dump_atapi.sys Image name: dump_atapi.sys Browse all global symbols functions data Timestamp: Mon Nov 27 23:57:51 2000 (3A22F4FF) CheckSum: 00016C34 ImageSize: 0000C000 File version: 10.0.15063.0 Product version: 10.0.15063.0 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: atapi.sys OriginalFilename: atapi.sys ProductVersion: 10.0.15063.0 FileVersion: 10.0.15063.0 (WinBuild.160101.0800) FileDescription: ATAPI IDE Miniport Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff801`f3d20000 fffff801`f3d3d000 dump_dumpfve (deferred) Image path: \SystemRoot\System32\Drivers\dump_dumpfve.sys Image name: dump_dumpfve.sys Browse all global symbols functions data Timestamp: ***** Invalid (B65817D6) CheckSum: 0001EA4A ImageSize: 0001D000 File version: 10.0.15063.0 Product version: 10.0.15063.0 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0000.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: dumpfve.sys OriginalFilename: dumpfve.sys ProductVersion: 10.0.15063.0 FileVersion: 10.0.15063.0 (WinBuild.160101.0800) FileDescription: Bitlocker Drive Encryption Crashdump Filter LegalCopyright: © Microsoft Corporation. All rights reserved. fffff801`f3d40000 fffff801`f3df3000 dxgmms2 (deferred) Image path: \SystemRoot\System32\drivers\dxgmms2.sys Image name: dxgmms2.sys Browse all global symbols functions data Timestamp: Thu Oct 16 03:31:23 1975 (0AE3267B) CheckSum: 000BD351 ImageSize: 000B3000 File version: 10.0.15063.0 Product version: 10.0.15063.0 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: dxgmms2.sys OriginalFilename: dxgmms2.sys ProductVersion: 10.0.15063.0 FileVersion: 10.0.15063.0 (WinBuild.160101.0800) FileDescription: DirectX Graphics MMS LegalCopyright: © Microsoft Corporation. All rights reserved. fffff801`f3e00000 fffff801`f3e11000 monitor (deferred) Image path: \SystemRoot\System32\drivers\monitor.sys Image name: monitor.sys Browse all global symbols functions data Timestamp: Tue Nov 18 01:45:15 2014 (546AA4AB) CheckSum: 0000E236 ImageSize: 00011000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f3e20000 fffff801`f3e46000 luafv (deferred) Image path: \SystemRoot\system32\drivers\luafv.sys Image name: luafv.sys Browse all global symbols functions data Timestamp: Mon Jun 8 10:55:59 2037 (7ED7BCAF) CheckSum: 00027EE2 ImageSize: 00026000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f3e50000 fffff801`f3e76000 wcifs (deferred) Image path: \SystemRoot\system32\drivers\wcifs.sys Image name: wcifs.sys Browse all global symbols functions data Timestamp: Wed Feb 14 03:10:20 2001 (3A89F71C) CheckSum: 000280CF ImageSize: 00026000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f3ec0000 fffff801`f3ede000 WudfPf (deferred) Image path: \SystemRoot\system32\drivers\WudfPf.sys Image name: WudfPf.sys Browse all global symbols functions data Timestamp: Thu Jun 19 04:58:15 1986 (1EF78357) CheckSum: 0001EDC7 ImageSize: 0001E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f3ee0000 fffff801`f3f1d000 WUDFRd (deferred) Image path: \SystemRoot\system32\DRIVERS\WUDFRd.sys Image name: WUDFRd.sys Browse all global symbols functions data Timestamp: ***** Invalid (8D745926) CheckSum: 000411B6 ImageSize: 0003D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f3f20000 fffff801`f3f2d000 WpdUpFltr (deferred) Image path: \SystemRoot\System32\drivers\WpdUpFltr.sys Image name: WpdUpFltr.sys Browse all global symbols functions data Timestamp: ***** Invalid (F8C94358) CheckSum: 00012AB8 ImageSize: 0000D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f3f40000 fffff801`f3f59000 storqosflt (deferred) Image path: \SystemRoot\system32\drivers\storqosflt.sys Image name: storqosflt.sys Browse all global symbols functions data Timestamp: Fri Dec 18 03:36:27 2015 (56737F3B) CheckSum: 00016F44 ImageSize: 00019000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f3f60000 fffff801`f3f6b000 registry (deferred) Image path: \SystemRoot\System32\drivers\registry.sys Image name: registry.sys Browse all global symbols functions data Timestamp: ***** Invalid (A10D8E26) CheckSum: 000113F7 ImageSize: 0000B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f3f70000 fffff801`f3f8a000 mslldp (deferred) Image path: \SystemRoot\system32\drivers\mslldp.sys Image name: mslldp.sys Browse all global symbols functions data Timestamp: ***** Invalid (C33AB00E) CheckSum: 00016E1F ImageSize: 0001A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f3f90000 fffff801`f3fa6000 lltdio (deferred) Image path: \SystemRoot\system32\drivers\lltdio.sys Image name: lltdio.sys Browse all global symbols functions data Timestamp: ***** Invalid (DD624815) CheckSum: 000188CA ImageSize: 00016000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f3fb0000 fffff801`f3fca000 rspndr (deferred) Image path: \SystemRoot\system32\drivers\rspndr.sys Image name: rspndr.sys Browse all global symbols functions data Timestamp: Mon May 20 03:37:53 1991 (28373681) CheckSum: 00017DD9 ImageSize: 0001A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f3fd0000 fffff801`f3feb000 wanarp (deferred) Image path: \SystemRoot\System32\DRIVERS\wanarp.sys Image name: wanarp.sys Browse all global symbols functions data Timestamp: Fri May 28 08:51:08 1982 (1754996C) CheckSum: 00019288 ImageSize: 0001B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f3ff0000 fffff801`f4104000 HTTP (deferred) Image path: \SystemRoot\system32\drivers\HTTP.sys Image name: HTTP.sys Browse all global symbols functions data Timestamp: ***** Invalid (C93DA7E1) CheckSum: 0011B0DC ImageSize: 00114000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f4110000 fffff801`f4131000 bowser (deferred) Image path: \SystemRoot\system32\DRIVERS\bowser.sys Image name: bowser.sys Browse all global symbols functions data Timestamp: ***** Invalid (B0913486) CheckSum: 00021EC6 ImageSize: 00021000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f4140000 fffff801`f415a000 mpsdrv (deferred) Image path: \SystemRoot\System32\drivers\mpsdrv.sys Image name: mpsdrv.sys Browse all global symbols functions data Timestamp: Thu Nov 27 02:16:18 1980 (14832672) CheckSum: 0001A5AB ImageSize: 0001A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f4160000 fffff801`f41db000 mrxsmb (deferred) Image path: \SystemRoot\system32\DRIVERS\mrxsmb.sys Image name: mrxsmb.sys Browse all global symbols functions data Timestamp: Sat Oct 16 02:47:34 2004 (41707DB6) CheckSum: 000761DC ImageSize: 0007B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f41e0000 fffff801`f421d000 mrxsmb20 (deferred) Image path: \SystemRoot\system32\DRIVERS\mrxsmb20.sys Image name: mrxsmb20.sys Browse all global symbols functions data Timestamp: ***** Invalid (D0396718) CheckSum: 0003DE27 ImageSize: 0003D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f4220000 fffff801`f4244000 AppvStrm (deferred) Image path: \SystemRoot\system32\drivers\AppvStrm.sys Image name: AppvStrm.sys Browse all global symbols functions data Timestamp: ***** Invalid (CCDCDE25) CheckSum: 000241A4 ImageSize: 00024000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f4250000 fffff801`f4296000 srvnet (deferred) Image path: \SystemRoot\System32\DRIVERS\srvnet.sys Image name: srvnet.sys Browse all global symbols functions data Timestamp: Wed Oct 16 16:29:36 2013 (525EB0E0) CheckSum: 0004A0FD ImageSize: 00046000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f42a0000 fffff801`f42ee000 mrxsmb10 (deferred) Image path: \SystemRoot\system32\DRIVERS\mrxsmb10.sys Image name: mrxsmb10.sys Browse all global symbols functions data Timestamp: ***** Invalid (9D6730FF) CheckSum: 0004813E ImageSize: 0004E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f42f0000 fffff801`f4316000 Ndu (deferred) Image path: \SystemRoot\system32\drivers\Ndu.sys Image name: Ndu.sys Browse all global symbols functions data Timestamp: ***** Invalid (84A42893) CheckSum: 000290F8 ImageSize: 00026000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f4320000 fffff801`f4334000 mmcss (deferred) Image path: \SystemRoot\system32\drivers\mmcss.sys Image name: mmcss.sys Browse all global symbols functions data Timestamp: ***** Invalid (95EC281D) CheckSum: 000165DE ImageSize: 00014000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f43d0000 fffff801`f499f000 RTKVHD64 (deferred) Image path: \SystemRoot\system32\drivers\RTKVHD64.sys Image name: RTKVHD64.sys Browse all global symbols functions data Timestamp: Tue Jul 11 11:59:54 2017 (5964AFAA) CheckSum: 0059DF67 ImageSize: 005CF000 File version: 6.0.1.8210 Product version: 6.0.1.8210 File flags: 8 (Mask 3F) Private File OS: 40004 NT Win32 File type: 3.9 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Realtek Semiconductor Corp. ProductName: Realtek(r) High Definition Audio Function Driver InternalName: RTKVHD64.sys 8210 OriginalFilename: RTKVHD64.sys ProductVersion: 6.0.1.8210 FileVersion: 6.0.1.8210 built by: WinDDK FileDescription: Realtek(r) High Definition Audio Function Driver LegalCopyright: Copyright (c) Realtek Semiconductor Corp.1998-2013 fffff801`f49a0000 fffff801`f49c0000 xusb22 (deferred) Image path: \SystemRoot\system32\DRIVERS\xusb22.sys Image name: xusb22.sys Browse all global symbols functions data Timestamp: ***** Invalid (F32725D6) CheckSum: 00020DCD ImageSize: 00020000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff801`f49c0000 fffff801`f49f1000 usbccgp (deferred) Image path: \SystemRoot\System32\drivers\usbccgp.sys Image name: usbccgp.sys Browse all global symbols functions data Timestamp: Sat Jul 21 11:16:10 2018 (5B5307EA) CheckSum: 0002DC32 ImageSize: 00031000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Unloaded modules: fffff801`f3a90000 fffff801`f3a96000 RTCore64.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 00006000 fffff801`f3a50000 fffff801`f3a5f000 hiber_ataport.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 0000F000 fffff801`f3a60000 fffff801`f3a6c000 hiber_atapi.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 0000C000 fffff801`f3a70000 fffff801`f3a8d000 hiber_dumpfve.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 0001D000 fffff801`f39b0000 fffff801`f39e0000 tunnel.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 00030000 fffff801`f3a30000 fffff801`f3a36000 RTCore64.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 00006000 fffff801`f3f30000 fffff801`f3f3b000 cldflt.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 0000B000 fffff801`f3e80000 fffff801`f3ebd000 WUDFRd.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 0003D000 fffff801`ef8d0000 fffff801`ef8df000 dump_ataport.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 0000F000 fffff801`ef8f0000 fffff801`ef8fc000 dump_atapi.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 0000C000 fffff801`ef920000 fffff801`ef93d000 dump_dumpfve.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 0001D000 fffff801`eef60000 fffff801`eef7c000 EhStorClass.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 0001C000 fffff801`f0620000 fffff801`f0640000 dam.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 00020000 fffff801`eeb50000 fffff801`eeb5f000 WdBoot.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 0000F000 fffff801`ef7e0000 fffff801`ef7ef000 hwpolicy.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 0000F000