Opened log file 'C:\Windows\msdart_crashanalyzer_kd_ansi.log' Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64 Copyright (c) Microsoft Corporation. All rights reserved. Loading Dump File [C:\Windows\MEMORY.DMP] Kernel Summary Dump File: Only kernel address space is available Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols Executable search path is: *** ERROR: Symbol file could not be found. Defaulted to export symbols for ntkrnlmp.exe - Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64 Product: WinNt, suite: TerminalServer SingleUserTS Built by: 7601.23915.amd64fre.win7sp1_ldr.170913-0600 Machine Name: Kernel base = 0xfffff800`06050000 PsLoadedModuleList = 0xfffff800`06292750 Debug session time: Sun Dec 10 10:58:22.131 2017 (UTC - 8:00) System Uptime: 0 days 0:00:16.364 *** ERROR: Symbol file could not be found. Defaulted to export symbols for ntkrnlmp.exe - Loading Kernel Symbols ............................................................... ................................................................ ..................................... Loading User Symbols Loading unloaded module list .... ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck 74, {2, fffff880043149e0, 1, ffffffffc000015c} ***** Kernel symbols are WRONG. Please fix symbols to do analysis. ************************************************************************* *** *** *** *** *** Your debugger is not using the correct symbols *** *** *** *** In order for this command to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_KPRCB *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Your debugger is not using the correct symbols *** *** *** *** In order for this command to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!KPRCB *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Your debugger is not using the correct symbols *** *** *** *** In order for this command to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_KPRCB *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Your debugger is not using the correct symbols *** *** *** *** In order for this command to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!KPRCB *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Your debugger is not using the correct symbols *** *** *** *** In order for this command to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_KPRCB *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Your debugger is not using the correct symbols *** *** *** *** In order for this command to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_KPRCB *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Your debugger is not using the correct symbols *** *** *** *** In order for this command to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_KPRCB *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Your debugger is not using the correct symbols *** *** *** *** In order for this command to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_KPRCB *** *** *** ************************************************************************* Probably caused by : ntkrnlmp.exe ( nt!FsRtlDeleteExtraCreateParameterLookasideList+1f92 ) Followup: MachineOwner --------- 3: kd> .logclose Closing open log file C:\Windows\msdart_crashanalyzer_kd_ansi.log Opened log file 'C:\Windows\msdart_crashanalyzer_kd_unicode.log' 3: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* BAD_SYSTEM_CONFIG_INFO (74) Can indicate that the SYSTEM hive loaded by the osloader/NTLDR was corrupt. This is unlikely, since the osloader will check a hive to make sure it isn't corrupt after loading it. It can also indicate that some critical registry keys and values are not present. (i.e. somebody used regedt32 to delete something that they shouldn't have) Booting from LastKnownGood may fix the problem, but if someone is persistent enough in mucking with the registry they will need to reinstall or use the Emergency Repair Disk. Arguments: Arg1: 0000000000000002, (reserved) Arg2: fffff880043149e0, (reserved) Arg3: 0000000000000001, (reserved) Arg4: ffffffffc000015c, usually the NT status code. Debugging Details: ------------------ ***** Kernel symbols are WRONG. Please fix symbols to do analysis. ************************************************************************* *** *** *** *** *** Your debugger is not using the correct symbols *** *** *** *** In order for this command to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_KPRCB *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Your debugger is not using the correct symbols *** *** *** *** In order for this command to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!KPRCB *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Your debugger is not using the correct symbols *** *** *** *** In order for this command to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_KPRCB *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Your debugger is not using the correct symbols *** *** *** *** In order for this command to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!KPRCB *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Your debugger is not using the correct symbols *** *** *** *** In order for this command to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_KPRCB *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Your debugger is not using the correct symbols *** *** *** *** In order for this command to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_KPRCB *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Your debugger is not using the correct symbols *** *** *** *** In order for this command to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_KPRCB *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Your debugger is not using the correct symbols *** *** *** *** In order for this command to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_KPRCB *** *** *** ************************************************************************* ADDITIONAL_DEBUG_TEXT: Use '!findthebuild' command to search for the target build information.If the build information is available, run '!findthebuild -s ; .reload' to set symbol path and load symbols. MODULE_NAME: nt FAULTING_MODULE: fffff80006050000 nt DEBUG_FLR_IMAGE_TIMESTAMP: 59b946d1 DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT BUGCHECK_STR: 0x74 CURRENT_IRQL: 0 LAST_CONTROL_TRANSFER: from fffff80006547cd2 to fffff800060c0e00 STACK_TEXT: fffff880`04314908 fffff800`06547cd2 : 00000000`00000074 00000000`00000002 fffff880`043149e0 00000000`00000001 : nt!KeBugCheckEx fffff880`04314910 fffff800`0635b622 : 00000000`0125a860 fffffa80`111df310 00000000`00000080 fffffa80`0c9fd040 : nt!FsRtlDeleteExtraCreateParameterLookasideList+0x1f92 fffff880`04314c00 fffff800`060b2da6 : fffff800`0623ee80 fffffa80`111df310 fffff800`0624ccc0 fffffa80`10e82180 : nt!PsCreateSystemThread+0x1da fffff880`04314c40 00000000`00000000 : fffff880`04315000 fffff880`0430f000 fffff880`04313950 00000000`00000000 : nt!KeInitializeSemaphore+0x25a STACK_COMMAND: kb FOLLOWUP_IP: nt!FsRtlDeleteExtraCreateParameterLookasideList+1f92 fffff800`06547cd2 cc int 3 SYMBOL_STACK_INDEX: 1 SYMBOL_NAME: nt!FsRtlDeleteExtraCreateParameterLookasideList+1f92 FOLLOWUP_NAME: MachineOwner IMAGE_NAME: ntkrnlmp.exe BUCKET_ID: WRONG_SYMBOLS Followup: MachineOwner --------- 3: kd> !thread ************************************************************************* *** *** *** *** *** Your debugger is not using the correct symbols *** *** *** *** In order for this command to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_ETHREAD *** *** *** ************************************************************************* fffffa80111df310: Unable to get thread contents 3: kd> lm kv start end module name fffff800`00bc6000 fffff800`00bd0000 kdcom (deferred) Image path: kdcom.dll Image name: kdcom.dll Timestamp: Sat Feb 05 08:52:49 2011 (4D4D8061) CheckSum: 0000F59B ImageSize: 0000A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff800`06007000 fffff800`06050000 hal (deferred) Image path: hal.dll Image name: hal.dll Timestamp: Sat Nov 20 05:00:25 2010 (4CE7C669) CheckSum: 000404C3 ImageSize: 00049000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff800`06050000 fffff800`06636000 nt (export symbols) ntkrnlmp.exe Loaded symbol image file: ntkrnlmp.exe Image path: ntkrnlmp.exe Image name: ntkrnlmp.exe Timestamp: Wed Sep 13 06:55:13 2017 (59B946D1) CheckSum: 0054B316 ImageSize: 005E6000 File version: 6.1.7601.23915 Product version: 6.1.7601.23915 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 1.0 App File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: ntkrnlmp.exe OriginalFilename: ntkrnlmp.exe ProductVersion: 6.1.7601.23915 FileVersion: 6.1.7601.23915 (win7sp1_ldr.170913-0600) FileDescription: NT Kernel & System LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`00c10000 fffff880`00c8e000 mcupdate_GenuineIntel (deferred) Image path: \SystemRoot\system32\mcupdate_GenuineIntel.dll Image name: mcupdate_GenuineIntel.dll Timestamp: Sat May 09 10:16:12 2015 (554E4EEC) CheckSum: 000796C5 ImageSize: 0007E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`00c8e000 fffff880`00ca2000 PSHED (deferred) Image path: \SystemRoot\system32\PSHED.dll Image name: PSHED.dll Timestamp: Mon Jul 13 17:32:23 2009 (4A5BE027) CheckSum: 0000F762 ImageSize: 00014000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`00ca2000 fffff880`00d01000 CLFS (deferred) Image path: \SystemRoot\system32\CLFS.SYS Image name: CLFS.SYS Timestamp: Sat Jul 08 06:54:10 2017 (5960F212) CheckSum: 00067294 ImageSize: 0005F000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`00d01000 fffff880`00d76000 CI (deferred) Image path: \SystemRoot\system32\CI.dll Image name: CI.dll Timestamp: Thu Jun 26 18:08:21 2014 (53ACD215) CheckSum: 00079C60 ImageSize: 00075000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`00d76000 fffff880`00dd2000 volmgrx (deferred) Image path: \SystemRoot\System32\drivers\volmgrx.sys Image name: volmgrx.sys Timestamp: Fri Jul 07 06:53:40 2017 (595FA074) CheckSum: 0005B129 ImageSize: 0005C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`00e00000 fffff880`00e15000 volmgr (deferred) Image path: \SystemRoot\system32\drivers\volmgr.sys Image name: volmgr.sys Timestamp: Sat Nov 20 01:19:28 2010 (4CE792A0) CheckSum: 00019F72 ImageSize: 00015000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`00e15000 fffff880`00e2f000 mountmgr (deferred) Image path: \SystemRoot\System32\drivers\mountmgr.sys Image name: mountmgr.sys Timestamp: Sun May 07 06:52:08 2017 (590F3498) CheckSum: 00026AD8 ImageSize: 0001A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`00e56000 fffff880`00f18000 Wdf01000 (deferred) Image path: \SystemRoot\system32\drivers\Wdf01000.sys Image name: Wdf01000.sys Timestamp: Fri Jun 21 19:13:05 2013 (51C51641) CheckSum: 000CC9CA ImageSize: 000C2000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`00f18000 fffff880`00f28000 WDFLDR (deferred) Image path: \SystemRoot\system32\drivers\WDFLDR.SYS Image name: WDFLDR.SYS Timestamp: Wed Jul 25 18:29:04 2012 (5010AB70) CheckSum: 00016A5F ImageSize: 00010000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`00f28000 fffff880`00f7f000 ACPI (deferred) Image path: \SystemRoot\system32\drivers\ACPI.sys Image name: ACPI.sys Timestamp: Sat Nov 20 01:19:16 2010 (4CE79294) CheckSum: 0005ACF6 ImageSize: 00057000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`00f7f000 fffff880`00f88000 WMILIB (deferred) Image path: \SystemRoot\system32\drivers\WMILIB.SYS Image name: WMILIB.SYS Timestamp: Mon Jul 13 15:19:51 2009 (4A5BC117) CheckSum: 00005007 ImageSize: 00009000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`00f88000 fffff880`00f92000 msisadrv (deferred) Image path: \SystemRoot\system32\drivers\msisadrv.sys Image name: msisadrv.sys Timestamp: Mon Jul 13 15:19:26 2009 (4A5BC0FE) CheckSum: 0001320D ImageSize: 0000A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`00f92000 fffff880`00f9f000 vdrvroot (deferred) Image path: \SystemRoot\system32\drivers\vdrvroot.sys Image name: vdrvroot.sys Timestamp: Mon Jul 13 16:01:31 2009 (4A5BCADB) CheckSum: 0000C04B ImageSize: 0000D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`00f9f000 fffff880`00fd2000 pci (deferred) Image path: \SystemRoot\system32\drivers\pci.sys Image name: pci.sys Timestamp: Sat Nov 20 01:19:11 2010 (4CE7928F) CheckSum: 00033150 ImageSize: 00033000 File version: 6.1.7601.17514 Product version: 6.1.7601.17514 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: pci.sys OriginalFilename: pci.sys ProductVersion: 6.1.7601.17514 FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850) FileDescription: NT Plug and Play PCI Enumerator LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`00fd2000 fffff880`00fe7000 partmgr (deferred) Image path: \SystemRoot\System32\drivers\partmgr.sys Image name: partmgr.sys Timestamp: Fri Mar 16 21:06:09 2012 (4F641BC1) CheckSum: 0001DFC8 ImageSize: 00015000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`00fe7000 fffff880`00ff0000 compbatt (deferred) Image path: \SystemRoot\system32\DRIVERS\compbatt.sys Image name: compbatt.sys Timestamp: Mon Jul 13 15:31:02 2009 (4A5BC3B6) CheckSum: 000080E2 ImageSize: 00009000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`00ff0000 fffff880`00ffc000 BATTC (deferred) Image path: \SystemRoot\system32\DRIVERS\BATTC.SYS Image name: BATTC.SYS Timestamp: Mon Jul 13 15:31:01 2009 (4A5BC3B5) CheckSum: 000083B1 ImageSize: 0000C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01000000 fffff880`01059000 mfewfpk (deferred) Image path: \SystemRoot\system32\drivers\mfewfpk.sys Image name: mfewfpk.sys Timestamp: Tue Sep 12 20:43:52 2017 (59B8B788) CheckSum: 00048ED2 ImageSize: 00059000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0107d000 fffff880`011d1000 iaStor (deferred) Image path: \SystemRoot\system32\drivers\iaStor.sys Image name: iaStor.sys Timestamp: Fri Nov 05 23:44:52 2010 (4CD50774) CheckSum: 0007413F ImageSize: 00154000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01200000 fffff880`01264000 storport (deferred) Image path: \SystemRoot\system32\DRIVERS\storport.sys Image name: storport.sys Timestamp: Mon Feb 03 17:36:50 2014 (52F04432) CheckSum: 0003BE95 ImageSize: 00064000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01264000 fffff880`0126f000 amdxata (deferred) Image path: \SystemRoot\system32\drivers\amdxata.sys Image name: amdxata.sys Timestamp: Fri Mar 19 08:18:18 2010 (4BA3A3CA) CheckSum: 000092B7 ImageSize: 0000B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0126f000 fffff880`012bb000 fltmgr (deferred) Image path: \SystemRoot\system32\drivers\fltmgr.sys Image name: fltmgr.sys Timestamp: Sat Nov 20 01:19:24 2010 (4CE7929C) CheckSum: 0005452D ImageSize: 0004C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`012bb000 fffff880`012cf000 fileinfo (deferred) Image path: \SystemRoot\system32\drivers\fileinfo.sys Image name: fileinfo.sys Timestamp: Mon Jul 13 15:34:25 2009 (4A5BC481) CheckSum: 00015644 ImageSize: 00014000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`012fb000 fffff880`015b1000 iaStorA (deferred) Image path: \SystemRoot\system32\DRIVERS\iaStorA.sys Image name: iaStorA.sys Timestamp: Tue Nov 05 15:12:11 2013 (52797B4B) CheckSum: 000A8C50 ImageSize: 002B6000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`015b1000 fffff880`015fd000 volsnap (deferred) Image path: \SystemRoot\system32\drivers\volsnap.sys Image name: volsnap.sys Timestamp: Sat Nov 20 01:20:08 2010 (4CE792C8) CheckSum: 000527ED ImageSize: 0004C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01600000 fffff880`01675000 cng (deferred) Image path: \SystemRoot\System32\Drivers\cng.sys Image name: cng.sys Timestamp: Sat Nov 19 08:03:43 2016 (583077DF) CheckSum: 0007E3AB ImageSize: 00075000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01681000 fffff880`01770000 mfehidk (deferred) Image path: \SystemRoot\system32\drivers\mfehidk.sys Image name: mfehidk.sys Timestamp: Tue Sep 12 20:43:20 2017 (59B8B768) CheckSum: 000F191A ImageSize: 000EF000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01770000 fffff880`0177c040 PxHlpa64 (deferred) Image path: \SystemRoot\System32\Drivers\PxHlpa64.sys Image name: PxHlpa64.sys Timestamp: Tue Oct 20 10:08:42 2009 (4ADDFCAA) CheckSum: 0001CF75 ImageSize: 0000C040 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0177d000 fffff880`017db000 msrpc (deferred) Image path: \SystemRoot\System32\Drivers\msrpc.sys Image name: msrpc.sys Timestamp: Sat Nov 20 01:21:56 2010 (4CE79334) CheckSum: 0005E9E7 ImageSize: 0005E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01800000 fffff880`0181b000 ksecdd (deferred) Image path: \SystemRoot\System32\Drivers\ksecdd.sys Image name: ksecdd.sys Timestamp: Wed Sep 13 06:52:23 2017 (59B94627) CheckSum: 00025063 ImageSize: 0001B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0181b000 fffff880`0182c000 pcw (deferred) Image path: \SystemRoot\System32\drivers\pcw.sys Image name: pcw.sys Timestamp: Mon Jul 13 15:19:27 2009 (4A5BC0FF) CheckSum: 00014B5E ImageSize: 00011000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0182c000 fffff880`01836000 Fs_Rec (deferred) Image path: \SystemRoot\System32\Drivers\Fs_Rec.sys Image name: Fs_Rec.sys Timestamp: Wed Feb 29 19:41:06 2012 (4F4EEFD2) CheckSum: 00012F92 ImageSize: 0000A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0184c000 fffff880`019f3000 Ntfs (deferred) Image path: \SystemRoot\System32\Drivers\Ntfs.sys Image name: Ntfs.sys Timestamp: Mon Oct 16 14:28:30 2017 (59E5328E) CheckSum: 001A0BBF ImageSize: 001A7000 File version: 6.1.7601.23932 Product version: 6.1.7601.23932 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: ntfs.sys OriginalFilename: ntfs.sys ProductVersion: 6.1.7601.23932 FileVersion: 6.1.7601.23932 (win7sp1_ldr.171016-1335) FileDescription: NT File System Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`01a00000 fffff880`01a49000 fwpkclnt (deferred) Image path: \SystemRoot\System32\drivers\fwpkclnt.sys Image name: fwpkclnt.sys Timestamp: Mon May 29 20:16:49 2017 (592CF231) CheckSum: 00053C16 ImageSize: 00049000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01a49000 fffff880`01a59000 vmstorfl (deferred) Image path: \SystemRoot\system32\drivers\vmstorfl.sys Image name: vmstorfl.sys Timestamp: Sat Nov 20 01:57:30 2010 (4CE79B8A) CheckSum: 0000ED21 ImageSize: 00010000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01a59000 fffff880`01a62000 stdcfltn (deferred) Image path: \SystemRoot\system32\DRIVERS\stdcfltn.sys Image name: stdcfltn.sys Timestamp: Thu Jan 08 18:01:11 2015 (54AF3667) CheckSum: 0000E6D5 ImageSize: 00009000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01a62000 fffff880`01a6a000 spldr (deferred) Image path: \SystemRoot\System32\Drivers\spldr.sys Image name: spldr.sys Timestamp: Mon May 11 08:56:27 2009 (4A0858BB) CheckSum: 0000E0E9 ImageSize: 00008000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01a70000 fffff880`01b63000 ndis (deferred) Image path: \SystemRoot\system32\drivers\ndis.sys Image name: ndis.sys Timestamp: Mon Oct 12 19:30:31 2015 (561C7AD7) CheckSum: 000E9377 ImageSize: 000F3000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01b63000 fffff880`01bc4000 NETIO (deferred) Image path: \SystemRoot\system32\drivers\NETIO.SYS Image name: NETIO.SYS Timestamp: Mon May 29 20:17:00 2017 (592CF23C) CheckSum: 0005EBA7 ImageSize: 00061000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01bc4000 fffff880`01bef000 ksecpkg (deferred) Image path: \SystemRoot\System32\Drivers\ksecpkg.sys Image name: ksecpkg.sys Timestamp: Wed Sep 13 07:00:06 2017 (59B947F6) CheckSum: 00034F95 ImageSize: 0002B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01bef000 fffff880`01bf7000 SmartDefragDriver (deferred) Image path: \SystemRoot\System32\Drivers\SmartDefragDriver.sys Image name: SmartDefragDriver.sys Timestamp: Mon Dec 23 02:05:52 2013 (52B80B00) CheckSum: 00011924 ImageSize: 00008000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01c00000 fffff880`01dfc000 tcpip (deferred) Image path: \SystemRoot\System32\drivers\tcpip.sys Image name: tcpip.sys Timestamp: Mon May 29 20:17:34 2017 (592CF25E) CheckSum: 001CFB54 ImageSize: 001FC000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01e00000 fffff880`01e45000 netbt (deferred) Image path: \SystemRoot\System32\DRIVERS\netbt.sys Image name: netbt.sys Timestamp: Thu Aug 10 21:59:59 2017 (598D47DF) CheckSum: 0004B69D ImageSize: 00045000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01e45000 fffff880`01e7f000 rdyboost (deferred) Image path: \SystemRoot\System32\drivers\rdyboost.sys Image name: rdyboost.sys Timestamp: Sat Nov 20 01:43:10 2010 (4CE7982E) CheckSum: 00037356 ImageSize: 0003A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01e7f000 fffff880`01e8b000 PBADRV (deferred) Image path: \SystemRoot\system32\DRIVERS\PBADRV.sys Image name: PBADRV.sys Timestamp: Mon Jan 07 11:12:13 2008 (4782798D) CheckSum: 000085EF ImageSize: 0000C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01e8b000 fffff880`01e96000 nvpciflt (deferred) Image path: \SystemRoot\system32\DRIVERS\nvpciflt.sys Image name: nvpciflt.sys Timestamp: Mon Feb 08 20:40:20 2016 (56B96DB4) CheckSum: 00015175 ImageSize: 0000B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01e96000 fffff880`01ea8000 mup (deferred) Image path: \SystemRoot\System32\Drivers\mup.sys Image name: mup.sys Timestamp: Mon Jul 13 15:23:45 2009 (4A5BC201) CheckSum: 00015DFD ImageSize: 00012000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01ea8000 fffff880`01eb7000 MDPMGRNT (deferred) Image path: \SystemRoot\system32\DRIVERS\MDPMGRNT.SYS Image name: MDPMGRNT.SYS Timestamp: Mon Nov 04 08:02:21 2013 (5277C50D) CheckSum: 00015F53 ImageSize: 0000F000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01eb7000 fffff880`01f11000 MDFSYSNT (deferred) Image path: \SystemRoot\System32\Drivers\MDFSYSNT.sys Image name: MDFSYSNT.sys Timestamp: Thu Mar 20 08:20:23 2014 (532B1547) CheckSum: 000566E5 ImageSize: 0005A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01f11000 fffff880`01f1c000 iaStorF (deferred) Image path: \SystemRoot\system32\DRIVERS\iaStorF.sys Image name: iaStorF.sys Timestamp: Tue Nov 05 15:12:13 2013 (52797B4D) CheckSum: 0000DBF7 ImageSize: 0000B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01f1c000 fffff880`01f25000 hwpolicy (deferred) Image path: \SystemRoot\System32\drivers\hwpolicy.sys Image name: hwpolicy.sys Timestamp: Sat Nov 20 01:18:54 2010 (4CE7927E) CheckSum: 0000D9F4 ImageSize: 00009000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01f25000 fffff880`01f5f000 fvevol (deferred) Image path: \SystemRoot\System32\DRIVERS\fvevol.sys Image name: fvevol.sys Timestamp: Wed Jan 23 19:11:24 2013 (5100A65C) CheckSum: 00042141 ImageSize: 0003A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01f5f000 fffff880`01f74000 disk (deferred) Image path: \SystemRoot\system32\drivers\disk.sys Image name: disk.sys Timestamp: Tue Jan 19 18:12:06 2016 (569EECF6) CheckSum: 0001C950 ImageSize: 00015000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01f74000 fffff880`01fa4000 CLASSPNP (deferred) Image path: \SystemRoot\system32\drivers\CLASSPNP.SYS Image name: CLASSPNP.SYS Timestamp: Sat Nov 20 01:19:23 2010 (4CE7929B) CheckSum: 000318BE ImageSize: 00030000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01fbc000 fffff880`01fe7000 VBoxNetFlt (deferred) Image path: \SystemRoot\system32\DRIVERS\VBoxNetFlt.sys Image name: VBoxNetFlt.sys Timestamp: Wed Dec 18 08:13:29 2013 (52B1C9A9) CheckSum: 00032187 ImageSize: 0002B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01fe7000 fffff880`01ff9000 umbus (deferred) Image path: \SystemRoot\system32\DRIVERS\umbus.sys Image name: umbus.sys Timestamp: Sat Nov 20 02:44:37 2010 (4CE7A695) CheckSum: 0001AF58 ImageSize: 00012000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04400000 fffff880`0440b000 rdpbus (deferred) Image path: \SystemRoot\system32\DRIVERS\rdpbus.sys Image name: rdpbus.sys Timestamp: Mon Jul 13 16:17:46 2009 (4A5BCEAA) CheckSum: 0000C3AD ImageSize: 0000B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04412000 fffff880`044b0000 veracrypt (deferred) Image path: \SystemRoot\System32\drivers\veracrypt.sys Image name: veracrypt.sys Timestamp: Sat Jul 08 06:59:26 2017 (5960F34E) CheckSum: 000A3D96 ImageSize: 0009E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`044b0000 fffff880`044d6000 VBoxUSBMon (deferred) Image path: \SystemRoot\system32\DRIVERS\VBoxUSBMon.sys Image name: VBoxUSBMon.sys Timestamp: Wed Dec 18 08:13:29 2013 (52B1C9A9) CheckSum: 0002B3C1 ImageSize: 00026000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`044d6000 fffff880`04518000 VBoxDrv (deferred) Image path: \SystemRoot\system32\DRIVERS\VBoxDrv.sys Image name: VBoxDrv.sys Timestamp: Wed Dec 18 08:19:08 2013 (52B1CAFC) CheckSum: 00041455 ImageSize: 00042000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04518000 fffff880`0452c000 termdd (deferred) Image path: \SystemRoot\system32\DRIVERS\termdd.sys Image name: termdd.sys Timestamp: Sat Nov 20 03:03:40 2010 (4CE7AB0C) CheckSum: 00019E15 ImageSize: 00014000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0452c000 fffff880`0457d000 rdbss (deferred) Image path: \SystemRoot\system32\DRIVERS\rdbss.sys Image name: rdbss.sys Timestamp: Sat Nov 20 01:27:51 2010 (4CE79497) CheckSum: 0004D76F ImageSize: 00051000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0457d000 fffff880`045ca000 nvkflt (deferred) Image path: \SystemRoot\system32\DRIVERS\nvkflt.sys Image name: nvkflt.sys Timestamp: Mon Feb 08 20:38:16 2016 (56B96D38) CheckSum: 000579AB ImageSize: 0004D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`045ca000 fffff880`045d5000 Apowersoft_AudioDevice (deferred) Image path: \SystemRoot\system32\drivers\Apowersoft_AudioDevice.sys Image name: Apowersoft_AudioDevice.sys Timestamp: Thu Jul 23 04:04:10 2009 (4A6851BA) CheckSum: 0000A516 ImageSize: 0000B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`045d5000 fffff880`045eb000 AgileVpn (deferred) Image path: \SystemRoot\system32\DRIVERS\AgileVpn.sys Image name: AgileVpn.sys Timestamp: Mon Jul 13 16:10:24 2009 (4A5BCCF0) CheckSum: 000192BE ImageSize: 00016000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`045eb000 fffff880`045f7000 ndistapi (deferred) Image path: \SystemRoot\system32\DRIVERS\ndistapi.sys Image name: ndistapi.sys Timestamp: Mon Jul 13 16:10:00 2009 (4A5BCCD8) CheckSum: 000063EA ImageSize: 0000C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04800000 fffff880`0480b000 Msfs (deferred) Image path: \SystemRoot\System32\Drivers\Msfs.SYS Image name: Msfs.SYS Timestamp: Mon Jul 13 15:19:47 2009 (4A5BC113) CheckSum: 00007126 ImageSize: 0000B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0480b000 fffff880`0481c000 Npfs (deferred) Image path: \SystemRoot\System32\Drivers\Npfs.SYS Image name: Npfs.SYS Timestamp: Mon Jul 13 15:19:48 2009 (4A5BC114) CheckSum: 00019AED ImageSize: 00011000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0481c000 fffff880`0483e000 tdx (deferred) Image path: \SystemRoot\system32\DRIVERS\tdx.sys Image name: tdx.sys Timestamp: Sat Jul 29 06:56:29 2017 (597CA21D) CheckSum: 00025195 ImageSize: 00022000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0483e000 fffff880`0484b000 TDI (deferred) Image path: \SystemRoot\system32\DRIVERS\TDI.SYS Image name: TDI.SYS Timestamp: Sat Nov 20 01:22:06 2010 (4CE7933E) CheckSum: 00016255 ImageSize: 0000D000 File version: 6.1.7601.17514 Product version: 6.1.7601.17514 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.6 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: tdi.sys OriginalFilename: tdi.sys ProductVersion: 6.1.7601.17514 FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850) FileDescription: TDI Wrapper LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`0484b000 fffff880`04860000 tapnordvpn (deferred) Image path: \SystemRoot\system32\DRIVERS\tapnordvpn.sys Image name: tapnordvpn.sys Timestamp: Fri Mar 17 02:39:12 2017 (58CBBCD0) CheckSum: 0001E9E1 ImageSize: 00015000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04860000 fffff880`0486a000 DDDriver64Dcsa (deferred) Image path: \SystemRoot\system32\drivers\DDDriver64Dcsa.sys Image name: DDDriver64Dcsa.sys Timestamp: Wed Jan 11 07:28:26 2017 (58764F1A) CheckSum: 00010445 ImageSize: 0000A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0486a000 fffff880`04875000 DellProf (deferred) Image path: \SystemRoot\system32\drivers\DellProf.sys Image name: DellProf.sys Timestamp: Mon Apr 03 10:48:04 2017 (58E298E4) CheckSum: 00017305 ImageSize: 0000B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04875000 fffff880`04b2b000 dump_iaStorA (deferred) Image path: \SystemRoot\System32\Drivers\dump_iaStorA.sys Image name: dump_iaStorA.sys Timestamp: Tue Nov 05 15:12:11 2013 (52797B4B) CheckSum: 000A8C50 ImageSize: 002B6000 File version: 12.8.9.1000 Product version: 12.8.9.1000 File flags: 8 (Mask 3F) Private File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Intel Corporation ProductName: Intel Rapid Storage Technology driver InternalName: iaStorA.sys OriginalFilename: iaStorA.sys ProductVersion: 12.8.9.1000 FileVersion: 12.8.9.1000 PrivateBuild: 12.8.9.1000 SpecialBuild: 12.8.9.1000 FileDescription: Intel Rapid Storage Technology driver - x64 LegalCopyright: Copyright(C) Intel Corporation 1994-2013 LegalTrademarks: Copyright(C) Intel Corporation 1994-2013 Comments: -x64 fffff880`04b4b000 fffff880`04b75000 cdrom (deferred) Image path: \SystemRoot\system32\DRIVERS\cdrom.sys Image name: cdrom.sys Timestamp: Sat Nov 20 01:19:20 2010 (4CE79298) CheckSum: 0002B742 ImageSize: 0002A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04b75000 fffff880`04b8b000 MOBK (deferred) Image path: \SystemRoot\system32\DRIVERS\MOBK.sys Image name: MOBK.sys Timestamp: Thu Dec 31 19:20:07 2009 (4B3D69E7) CheckSum: 0001E694 ImageSize: 00016000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04b8b000 fffff880`04b94000 Null (deferred) Image path: \SystemRoot\System32\Drivers\Null.SYS Image name: Null.SYS Timestamp: Mon Jul 13 15:19:37 2009 (4A5BC109) CheckSum: 0000E9DB ImageSize: 00009000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04b94000 fffff880`04b9b000 Beep (deferred) Image path: \SystemRoot\System32\Drivers\Beep.SYS Image name: Beep.SYS Timestamp: Mon Jul 13 16:00:13 2009 (4A5BCA8D) CheckSum: 000036EB ImageSize: 00007000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04b9b000 fffff880`04ba9000 vga (deferred) Image path: \SystemRoot\System32\drivers\vga.sys Image name: vga.sys Timestamp: Mon Jul 13 15:38:47 2009 (4A5BC587) CheckSum: 00013E6F ImageSize: 0000E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04ba9000 fffff880`04bce000 VIDEOPRT (deferred) Image path: \SystemRoot\System32\drivers\VIDEOPRT.SYS Image name: VIDEOPRT.SYS Timestamp: Mon Jul 13 15:38:51 2009 (4A5BC58B) CheckSum: 00028FC7 ImageSize: 00025000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.4 Driver File date: 00000000.00000000 Translations: 0000.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: videoprt.sys OriginalFilename: videoprt.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: Video Port Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`04bce000 fffff880`04bde000 watchdog (deferred) Image path: \SystemRoot\System32\drivers\watchdog.sys Image name: watchdog.sys Timestamp: Mon Jul 13 15:37:35 2009 (4A5BC53F) CheckSum: 00019CBE ImageSize: 00010000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0000.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: watchdog.sys OriginalFilename: watchdog.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: Watchdog Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`04bde000 fffff880`04be7000 RDPCDD (deferred) Image path: \SystemRoot\System32\DRIVERS\RDPCDD.sys Image name: RDPCDD.sys Timestamp: Mon Jul 13 16:16:34 2009 (4A5BCE62) CheckSum: 0000FFAC ImageSize: 00009000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04be7000 fffff880`04bf0000 rdpencdd (deferred) Image path: \SystemRoot\system32\drivers\rdpencdd.sys Image name: rdpencdd.sys Timestamp: Mon Jul 13 16:16:34 2009 (4A5BCE62) CheckSum: 000074D5 ImageSize: 00009000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04bf0000 fffff880`04bf9000 rdprefmp (deferred) Image path: \SystemRoot\system32\drivers\rdprefmp.sys Image name: rdprefmp.sys Timestamp: Mon Jul 13 16:16:35 2009 (4A5BCE63) CheckSum: 0000ABCD ImageSize: 00009000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04e00000 fffff880`04e2f000 ndiswan (deferred) Image path: \SystemRoot\system32\DRIVERS\ndiswan.sys Image name: ndiswan.sys Timestamp: Sat Nov 20 02:52:32 2010 (4CE7A870) CheckSum: 0002BB81 ImageSize: 0002F000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04e2f000 fffff880`04e4a000 raspppoe (deferred) Image path: \SystemRoot\system32\DRIVERS\raspppoe.sys Image name: raspppoe.sys Timestamp: Mon Jul 13 16:10:17 2009 (4A5BCCE9) CheckSum: 00019A00 ImageSize: 0001B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04e4a000 fffff880`04e6b000 raspptp (deferred) Image path: \SystemRoot\system32\DRIVERS\raspptp.sys Image name: raspptp.sys Timestamp: Sat Nov 20 02:52:31 2010 (4CE7A86F) CheckSum: 000251CB ImageSize: 00021000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04e6b000 fffff880`04e78000 dcdbas64 (deferred) Image path: \SystemRoot\system32\DRIVERS\dcdbas64.sys Image name: dcdbas64.sys Timestamp: Mon Jun 01 22:51:04 2015 (556D5258) CheckSum: 000155C3 ImageSize: 0000D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04e7b000 fffff880`04f04000 afd (deferred) Image path: \SystemRoot\system32\drivers\afd.sys Image name: afd.sys Timestamp: Tue Apr 04 06:53:16 2017 (58E3B35C) CheckSum: 0007F7E7 ImageSize: 00089000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04f04000 fffff880`04f17000 HttpDebuggerSdk (deferred) Image path: \SystemRoot\system32\drivers\HttpDebuggerSdk.sys Image name: HttpDebuggerSdk.sys Timestamp: Wed Jan 18 08:55:25 2017 (587F9DFD) CheckSum: 000142A9 ImageSize: 00013000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04f17000 fffff880`04f22000 ws2ifsl (deferred) Image path: \SystemRoot\system32\drivers\ws2ifsl.sys Image name: ws2ifsl.sys Timestamp: Mon Jul 13 16:10:33 2009 (4A5BCCF9) CheckSum: 0000B7A3 ImageSize: 0000B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04f22000 fffff880`04f2b000 wfplwf (deferred) Image path: \SystemRoot\system32\DRIVERS\wfplwf.sys Image name: wfplwf.sys Timestamp: Mon Jul 13 16:09:26 2009 (4A5BCCB6) CheckSum: 0000B17B ImageSize: 00009000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04f2b000 fffff880`04f51000 pacer (deferred) Image path: \SystemRoot\system32\DRIVERS\pacer.sys Image name: pacer.sys Timestamp: Sat Nov 20 02:52:18 2010 (4CE7A862) CheckSum: 00020DCF ImageSize: 00026000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04f51000 fffff880`04f67000 vwififlt (deferred) Image path: \SystemRoot\system32\DRIVERS\vwififlt.sys Image name: vwififlt.sys Timestamp: Mon Jul 13 16:07:22 2009 (4A5BCC3A) CheckSum: 0001A7DC ImageSize: 00016000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04f67000 fffff880`04f74000 gwdrv (deferred) Image path: \SystemRoot\system32\DRIVERS\gwdrv.sys Image name: gwdrv.sys Timestamp: Thu May 28 20:15:25 2015 (5567E7DD) CheckSum: 0000B614 ImageSize: 0000D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04f74000 fffff880`04f83000 netbios (deferred) Image path: \SystemRoot\system32\DRIVERS\netbios.sys Image name: netbios.sys Timestamp: Mon Jul 13 16:09:26 2009 (4A5BCCB6) CheckSum: 00011668 ImageSize: 0000F000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04f83000 fffff880`04fa0000 serial (deferred) Image path: \SystemRoot\system32\DRIVERS\serial.sys Image name: serial.sys Timestamp: Mon Jul 13 16:00:40 2009 (4A5BCAA8) CheckSum: 0001D422 ImageSize: 0001D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04fa0000 fffff880`04fbb000 wanarp (deferred) Image path: \SystemRoot\system32\DRIVERS\wanarp.sys Image name: wanarp.sys Timestamp: Sat Nov 20 02:52:36 2010 (4CE7A874) CheckSum: 00017CCC ImageSize: 0001B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04fbb000 fffff880`04fdf000 rasl2tp (deferred) Image path: \SystemRoot\system32\DRIVERS\rasl2tp.sys Image name: rasl2tp.sys Timestamp: Sat Nov 20 02:52:34 2010 (4CE7A872) CheckSum: 0002CCA3 ImageSize: 00024000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04fdf000 fffff880`04ff9000 rassstp (deferred) Image path: \SystemRoot\system32\DRIVERS\rassstp.sys Image name: rassstp.sys Timestamp: Mon Jul 13 16:10:25 2009 (4A5BCCF1) CheckSum: 0002274B ImageSize: 0001A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05000000 fffff880`05022000 drmk (deferred) Image path: \SystemRoot\system32\drivers\drmk.sys Image name: drmk.sys Timestamp: Tue Dec 08 10:54:36 2015 (5667276C) CheckSum: 00021128 ImageSize: 00022000 File version: 6.1.7601.19091 Product version: 6.1.7601.19091 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: drmk.sys OriginalFilename: drmk.sys ProductVersion: 6.1.7601.19091 FileVersion: 6.1.7601.19091 (win7sp1_gdr.151208-0600) FileDescription: Microsoft Trusted Audio Drivers LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`05028000 fffff880`0511d000 dxgkrnl (deferred) Image path: \SystemRoot\System32\drivers\dxgkrnl.sys Image name: dxgkrnl.sys Timestamp: Tue May 16 06:57:51 2017 (591B136F) CheckSum: 0010048C ImageSize: 000F5000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0511d000 fffff880`05163000 dxgmms1 (deferred) Image path: \SystemRoot\System32\drivers\dxgmms1.sys Image name: dxgmms1.sys Timestamp: Tue May 16 06:57:34 2017 (591B135E) CheckSum: 0004A3D2 ImageSize: 00046000 File version: 6.1.7601.23809 Product version: 6.1.7601.23809 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: dxgmms1.sys OriginalFilename: dxgmms1.sys ProductVersion: 6.1.7601.23809 FileVersion: 6.1.7601.23809 (win7sp1_ldr.170516-0600) FileDescription: DirectX Graphics MMS LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`05163000 fffff880`0516f000 nsiproxy (deferred) Image path: \SystemRoot\system32\drivers\nsiproxy.sys Image name: nsiproxy.sys Timestamp: Thu Aug 10 21:58:55 2017 (598D479F) CheckSum: 0000A6A6 ImageSize: 0000C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0516f000 fffff880`0517a000 mssmbios (deferred) Image path: \SystemRoot\system32\DRIVERS\mssmbios.sys Image name: mssmbios.sys Timestamp: Mon Jul 13 15:31:10 2009 (4A5BC3BE) CheckSum: 0000F474 ImageSize: 0000B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0517a000 fffff880`05184000 HWiNFO64A (deferred) Image path: \??\C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS Image name: HWiNFO64A.SYS Timestamp: Sun Nov 23 08:24:07 2014 (54720A27) CheckSum: 00012944 ImageSize: 0000A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05184000 fffff880`05193000 discache (deferred) Image path: \SystemRoot\System32\drivers\discache.sys Image name: discache.sys Timestamp: Mon Jul 13 15:37:18 2009 (4A5BC52E) CheckSum: 00015F3F ImageSize: 0000F000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05193000 fffff880`051bdfe0 CtClsFlt (deferred) Image path: \SystemRoot\system32\DRIVERS\CtClsFlt.sys Image name: CtClsFlt.sys Timestamp: Fri Sep 10 01:22:16 2010 (4C89F8C8) CheckSum: 00031D15 ImageSize: 0002AFE0 File version: 2.0.21.0 Product version: 1.1.0.1 File flags: 0 (Mask 3F) File OS: 4 Unknown Win32 File type: 1.0 App File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Creative Technology Ltd. OriginalFilename: CtClsFlt.sys FileVersion: 2.00.21.00 FileDescription: Video Class Upper Filter Driver (64-bit) LegalCopyright: Copyright (c) Creative Technology Ltd., 2007-2010. All rights reserved. fffff880`051be000 fffff880`051fb000 portcls (deferred) Image path: \SystemRoot\system32\drivers\portcls.sys Image name: portcls.sys Timestamp: Tue Dec 08 10:12:06 2015 (56671D76) CheckSum: 00047290 ImageSize: 0003D000 File version: 6.1.7601.19091 Product version: 6.1.7601.19091 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.9 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: portcls.sys OriginalFilename: portcls.sys ProductVersion: 6.1.7601.19091 FileVersion: 6.1.7601.19091 (win7sp1_gdr.151208-0600) FileDescription: Port Class (Class Driver for Port/Miniport Devices) LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`05400000 fffff880`05443000 ks (deferred) Image path: \SystemRoot\system32\DRIVERS\ks.sys Image name: ks.sys Timestamp: Sat Nov 20 02:33:23 2010 (4CE7A3F3) CheckSum: 00045588 ImageSize: 00043000 File version: 6.1.7601.17514 Product version: 6.1.7601.17514 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.0 Driver File date: 00000000.00000000 Translations: 0000.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: ks.sys OriginalFilename: ks.sys ProductVersion: 6.1.7601.17514 FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850) FileDescription: Kernel CSA Library LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`05443000 fffff880`05451000 ScreamingBAudio64 (deferred) Image path: \SystemRoot\system32\drivers\ScreamingBAudio64.sys Image name: ScreamingBAudio64.sys Timestamp: Thu Jul 01 10:54:32 2010 (4C2CE468) CheckSum: 000112B4 ImageSize: 0000E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05451000 fffff880`0545d000 mcaudrv_x64 (deferred) Image path: \SystemRoot\system32\drivers\mcaudrv_x64.sys Image name: mcaudrv_x64.sys Timestamp: Tue Dec 03 23:12:31 2013 (529ED5DF) CheckSum: 0000BAE0 ImageSize: 0000C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05463000 fffff880`054e6000 csc (deferred) Image path: \SystemRoot\system32\drivers\csc.sys Image name: csc.sys Timestamp: Sat Nov 20 01:27:12 2010 (4CE79470) CheckSum: 0008519D ImageSize: 00083000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`054e6000 fffff880`05505000 dfsc (deferred) Image path: \SystemRoot\System32\Drivers\dfsc.sys Image name: dfsc.sys Timestamp: Thu Sep 08 06:55:13 2016 (57D17BD1) CheckSum: 00021474 ImageSize: 0001F000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05505000 fffff880`05519000 CBDisk (deferred) Image path: \??\C:\Windows\system32\drivers\CBDisk.sys Image name: CBDisk.sys Timestamp: Wed Jan 13 01:15:47 2010 (4B4D8F43) CheckSum: 0001250D ImageSize: 00014000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05519000 fffff880`0552a000 blbdrive (deferred) Image path: \SystemRoot\system32\DRIVERS\blbdrive.sys Image name: blbdrive.sys Timestamp: Mon Jul 13 15:35:59 2009 (4A5BC4DF) CheckSum: 00019567 ImageSize: 00011000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0552a000 fffff880`05550000 tunnel (deferred) Image path: \SystemRoot\system32\DRIVERS\tunnel.sys Image name: tunnel.sys Timestamp: Sat Nov 20 02:51:50 2010 (4CE7A846) CheckSum: 0002CD96 ImageSize: 00026000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05550000 fffff880`05574000 HDAudBus (deferred) Image path: \SystemRoot\system32\DRIVERS\HDAudBus.sys Image name: HDAudBus.sys Timestamp: Sat Nov 20 02:43:42 2010 (4CE7A65E) CheckSum: 0002BFAB ImageSize: 00024000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05574000 fffff880`055a2000 TeeDriverx64 (deferred) Image path: \SystemRoot\system32\DRIVERS\TeeDriverx64.sys Image name: TeeDriverx64.sys Timestamp: Wed Feb 03 14:40:35 2016 (56B281E3) CheckSum: 000396F7 ImageSize: 0002E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`055a2000 fffff880`055ae000 serenum (deferred) Image path: \SystemRoot\system32\DRIVERS\serenum.sys Image name: serenum.sys Timestamp: Mon Jul 13 16:00:33 2009 (4A5BCAA1) CheckSum: 00013C2F ImageSize: 0000C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`055ae000 fffff880`055c4000 intelppm (deferred) Image path: \SystemRoot\system32\DRIVERS\intelppm.sys Image name: intelppm.sys Timestamp: Mon Jul 13 15:19:25 2009 (4A5BC0FD) CheckSum: 0000F4EC ImageSize: 00016000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`055c4000 fffff880`055cd000 wmiacpi (deferred) Image path: \SystemRoot\system32\DRIVERS\wmiacpi.sys Image name: wmiacpi.sys Timestamp: Mon Jul 13 15:31:02 2009 (4A5BC3B6) CheckSum: 000042C0 ImageSize: 00009000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`055cd000 fffff880`055dd000 CompositeBus (deferred) Image path: \SystemRoot\system32\DRIVERS\CompositeBus.sys Image name: CompositeBus.sys Timestamp: Sat Nov 20 02:33:17 2010 (4CE7A3ED) CheckSum: 0000983B ImageSize: 00010000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`055dd000 fffff880`055ed000 mcvidrv (deferred) Image path: \SystemRoot\system32\DRIVERS\mcvidrv.sys Image name: mcvidrv.sys Timestamp: Wed Oct 22 23:26:34 2014 (5448ADAA) CheckSum: 0001615F ImageSize: 00010000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`055ed000 fffff880`055fe100 STREAM (deferred) Image path: \SystemRoot\system32\DRIVERS\STREAM.SYS Image name: STREAM.SYS Timestamp: Fri Apr 10 19:19:59 2015 (552892DF) CheckSum: 0001E653 ImageSize: 00011100 File version: 6.1.7601.18828 Product version: 6.1.7601.18828 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0000.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: stream.sys OriginalFilename: stream.sys ProductVersion: 6.1.7601.18828 FileVersion: 6.1.7601.18828 (win7sp1_gdr.150410-1550) FileDescription: WDM CODEC Class Device Driver 2.0 LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`05600000 fffff880`05605200 ksthunk (deferred) Image path: \SystemRoot\system32\drivers\ksthunk.sys Image name: ksthunk.sys Timestamp: Mon Jul 13 16:00:19 2009 (4A5BCA93) CheckSum: 0000AF92 ImageSize: 00005200 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05606000 fffff880`05682000 e1c62x64 (deferred) Image path: \SystemRoot\system32\DRIVERS\e1c62x64.sys Image name: e1c62x64.sys Timestamp: Mon Mar 28 23:45:26 2016 (56FA3296) CheckSum: 0007FA81 ImageSize: 0007C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05682000 fffff880`05694000 usbehci (deferred) Image path: \SystemRoot\system32\drivers\usbehci.sys Image name: usbehci.sys Timestamp: Tue Oct 17 18:06:40 2017 (59E6B730) CheckSum: 0001C803 ImageSize: 00012000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05694000 fffff880`056eb000 USBPORT (deferred) Image path: \SystemRoot\system32\drivers\USBPORT.SYS Image name: USBPORT.SYS Timestamp: Tue Oct 17 18:06:40 2017 (59E6B730) CheckSum: 00054D1F ImageSize: 00057000 File version: 6.1.7601.23933 Product version: 6.1.7601.23933 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: usbport.sys OriginalFilename: usbport.sys ProductVersion: 6.1.7601.23933 FileVersion: 6.1.7601.23933 (win7sp1_ldr.171017-1700) FileDescription: USB 1.1 & 2.0 Port Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`056eb000 fffff880`05709000 i8042prt (deferred) Image path: \SystemRoot\system32\DRIVERS\i8042prt.sys Image name: i8042prt.sys Timestamp: Mon Jul 13 15:19:57 2009 (4A5BC11D) CheckSum: 00025E29 ImageSize: 0001E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05709000 fffff880`05718000 kbdclass (deferred) Image path: \SystemRoot\system32\DRIVERS\kbdclass.sys Image name: kbdclass.sys Timestamp: Mon Jul 13 15:19:50 2009 (4A5BC116) CheckSum: 0001B4C5 ImageSize: 0000F000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05718000 fffff880`05735000 parport (deferred) Image path: \SystemRoot\system32\DRIVERS\parport.sys Image name: parport.sys Timestamp: Mon Jul 13 16:00:40 2009 (4A5BCAA8) CheckSum: 0001A431 ImageSize: 0001D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05735000 fffff880`057c5000 Apfiltr (deferred) Image path: \SystemRoot\system32\DRIVERS\Apfiltr.sys Image name: Apfiltr.sys Timestamp: Thu Apr 03 01:52:58 2014 (533D2F7A) CheckSum: 000891DB ImageSize: 00090000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`057c5000 fffff880`057d4000 mouclass (deferred) Image path: \SystemRoot\system32\DRIVERS\mouclass.sys Image name: mouclass.sys Timestamp: Mon Jul 13 15:19:50 2009 (4A5BC116) CheckSum: 0000E5DE ImageSize: 0000F000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`057d4000 fffff880`057dac00 GEARAspiWDM (deferred) Image path: \SystemRoot\system32\DRIVERS\GEARAspiWDM.sys Image name: GEARAspiWDM.sys Timestamp: Thu May 03 11:56:17 2012 (4FA2E2E1) CheckSum: 00008963 ImageSize: 00006C00 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`057db000 fffff880`057f7000 ST_Accel (deferred) Image path: \SystemRoot\system32\DRIVERS\ST_Accel.sys Image name: ST_Accel.sys Timestamp: Tue Feb 24 23:12:35 2015 (54ED75E3) CheckSum: 000227F6 ImageSize: 0001C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`057f7000 fffff880`057fb500 CmBatt (deferred) Image path: \SystemRoot\system32\DRIVERS\CmBatt.sys Image name: CmBatt.sys Timestamp: Mon Jul 13 15:31:03 2009 (4A5BC3B7) CheckSum: 0000D93A ImageSize: 00004500 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`057fc000 fffff880`057fd480 swenum (deferred) Image path: \SystemRoot\system32\DRIVERS\swenum.sys Image name: swenum.sys Timestamp: Mon Jul 13 16:00:18 2009 (4A5BCA92) CheckSum: 0000934E ImageSize: 00001480 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05c13000 fffff880`05c6d000 usbhub (deferred) Image path: \SystemRoot\system32\drivers\usbhub.sys Image name: usbhub.sys Timestamp: Tue Oct 17 18:06:56 2017 (59E6B740) CheckSum: 0005B1D5 ImageSize: 0005A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05c6d000 fffff880`05c82000 NDProxy (deferred) Image path: \SystemRoot\System32\Drivers\NDProxy.SYS Image name: NDProxy.SYS Timestamp: Sat Nov 20 02:52:20 2010 (4CE7A864) CheckSum: 00019428 ImageSize: 00015000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05c82000 fffff880`05d05000 stwrt64 (deferred) Image path: \SystemRoot\system32\DRIVERS\stwrt64.sys Image name: stwrt64.sys Timestamp: Thu Mar 17 00:21:47 2011 (4D81C49B) CheckSum: 00081748 ImageSize: 00083000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05d05000 fffff880`05d7e000 mfeaack (deferred) Image path: \SystemRoot\system32\drivers\mfeaack.sys Image name: mfeaack.sys Timestamp: Tue Sep 12 20:56:29 2017 (59B8BA7D) CheckSum: 0007BFB0 ImageSize: 00079000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05d7e000 fffff880`05d9d000 mfeplk (deferred) Image path: \SystemRoot\system32\drivers\mfeplk.sys Image name: mfeplk.sys Timestamp: Tue Sep 12 20:56:46 2017 (59B8BA8E) CheckSum: 00028007 ImageSize: 0001F000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05d9d000 fffff880`05df4000 mfeavfk (deferred) Image path: \SystemRoot\system32\drivers\mfeavfk.sys Image name: mfeavfk.sys Timestamp: Tue Sep 12 20:45:35 2017 (59B8B7EF) CheckSum: 000669A3 ImageSize: 00057000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05e00000 fffff880`05e13000 dump_dumpfve (deferred) Image path: \SystemRoot\System32\Drivers\dump_dumpfve.sys Image name: dump_dumpfve.sys Timestamp: Mon Jul 13 15:21:51 2009 (4A5BC18F) CheckSum: 00010DEA ImageSize: 00013000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0000.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: dumpfve.sys OriginalFilename: dumpfve.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: Bitlocker Drive Encryption Crashdump Filter LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`05e13000 fffff880`05e30000 usbccgp (deferred) Image path: \SystemRoot\system32\drivers\usbccgp.sys Image name: usbccgp.sys Timestamp: Tue Oct 17 18:06:46 2017 (59E6B736) CheckSum: 0001B0D9 ImageSize: 0001D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05e30000 fffff880`05e31e80 USBD (deferred) Image path: \SystemRoot\system32\drivers\USBD.SYS Image name: USBD.SYS Timestamp: Tue Nov 26 17:42:08 2013 (52954DF0) CheckSum: 0000E851 ImageSize: 00001E80 File version: 6.1.7601.22526 Product version: 6.1.7601.22526 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0000.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: usbd.sys OriginalFilename: usbd.sys ProductVersion: 6.1.7601.22526 FileVersion: 6.1.7601.22526 (win7sp1_ldr.131126-1435) FileDescription: Universal Serial Bus Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`05e32000 fffff880`05e5f400 usbvideo (deferred) Image path: \SystemRoot\System32\Drivers\usbvideo.sys Image name: usbvideo.sys Timestamp: Fri Jul 12 02:41:34 2013 (51DFDD5E) CheckSum: 0003B7F0 ImageSize: 0002D400 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05e60000 fffff880`05e6e000 hidusb (deferred) Image path: \SystemRoot\system32\DRIVERS\hidusb.sys Image name: hidusb.sys Timestamp: Sat Nov 20 02:43:49 2010 (4CE7A665) CheckSum: 00012706 ImageSize: 0000E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05e6e000 fffff880`05e87000 HIDCLASS (deferred) Image path: \SystemRoot\system32\DRIVERS\HIDCLASS.SYS Image name: HIDCLASS.SYS Timestamp: Tue Jul 02 20:05:05 2013 (51D3A2F1) CheckSum: 00016FD9 ImageSize: 00019000 File version: 6.1.7601.18199 Product version: 6.1.7601.18199 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: hidclass.sys OriginalFilename: hidclass.sys ProductVersion: 6.1.7601.18199 FileVersion: 6.1.7601.18199 (win7sp1_gdr.130702-1534) FileDescription: Hid Class Library LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`05e87000 fffff880`05e8f080 HIDPARSE (deferred) Image path: \SystemRoot\system32\DRIVERS\HIDPARSE.SYS Image name: HIDPARSE.SYS Timestamp: Tue Jul 02 20:05:04 2013 (51D3A2F0) CheckSum: 00017787 ImageSize: 00008080 File version: 6.1.7601.18199 Product version: 6.1.7601.18199 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: hidparse.sys OriginalFilename: hidparse.sys ProductVersion: 6.1.7601.18199 FileVersion: 6.1.7601.18199 (win7sp1_gdr.130702-1534) FileDescription: Hid Parsing Library LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`05e90000 fffff880`05ea1000 cvusbdrv (deferred) Image path: \SystemRoot\System32\Drivers\cvusbdrv.sys Image name: cvusbdrv.sys Timestamp: Wed Oct 08 12:02:14 2014 (54359846) CheckSum: 0000E511 ImageSize: 00011000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05ea1000 fffff880`05eaf000 kbdhid (deferred) Image path: \SystemRoot\system32\DRIVERS\kbdhid.sys Image name: kbdhid.sys Timestamp: Sat Nov 20 02:33:25 2010 (4CE7A3F5) CheckSum: 0000D561 ImageSize: 0000E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05ece000 fffff880`05f4b000 mfefirek (deferred) Image path: \SystemRoot\system32\drivers\mfefirek.sys Image name: mfefirek.sys Timestamp: Tue Sep 12 20:48:44 2017 (59B8B8AC) CheckSum: 000801F6 ImageSize: 0007D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05f4b000 fffff880`05fcb000 mfencbdc (deferred) Image path: \SystemRoot\system32\DRIVERS\mfencbdc.sys Image name: mfencbdc.sys Timestamp: Mon Nov 13 05:16:30 2017 (5A099B2E) CheckSum: 0007CD5A ImageSize: 00080000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05fcb000 fffff880`05fd7000 Dxapi (deferred) Image path: \SystemRoot\System32\drivers\Dxapi.sys Image name: Dxapi.sys Timestamp: Mon Jul 13 15:38:28 2009 (4A5BC574) CheckSum: 0001418E ImageSize: 0000C000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: dxapi.sys OriginalFilename: dxapi.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: DirectX API Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`05fd7000 fffff880`05fe5000 crashdmp (deferred) Image path: \SystemRoot\System32\Drivers\crashdmp.sys Image name: crashdmp.sys Timestamp: Mon Jul 13 16:01:01 2009 (4A5BCABD) CheckSum: 000178C7 ImageSize: 0000E000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: crashdmp.sys OriginalFilename: crashdmp.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: Crash Dump Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`05fe5000 fffff880`05fef000 dump_diskdump (deferred) Image path: \SystemRoot\System32\Drivers\dump_diskdump.sys Image name: dump_diskdump.sys Timestamp: Mon Feb 03 17:38:50 2014 (52F044AA) CheckSum: 0001291E ImageSize: 0000A000 File version: 6.1.7601.22589 Product version: 6.1.7601.22589 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: diskdump.sys OriginalFilename: diskdump.sys ProductVersion: 6.1.7601.22589 FileVersion: 6.1.7601.22589 (win7sp1_ldr.140203-1432) FileDescription: Crash Dump Disk Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff960`000c0000 fffff960`003e7000 win32k (deferred) Image path: \SystemRoot\System32\win32k.sys Image name: win32k.sys Timestamp: Thu Nov 16 20:23:11 2017 (5A0E642F) CheckSum: 00316D93 ImageSize: 00327000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff960`00430000 fffff960`0044e000 dxg (deferred) Image path: \SystemRoot\System32\drivers\dxg.sys Image name: dxg.sys Timestamp: Mon Jul 13 15:38:28 2009 (4A5BC574) CheckSum: 000205D4 ImageSize: 0001E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff960`00620000 fffff960`0062a000 TSDDD (deferred) Image path: \SystemRoot\System32\TSDDD.dll Image name: TSDDD.dll Timestamp: Mon Jul 13 16:16:34 2009 (4A5BCE62) CheckSum: 00009E96 ImageSize: 0000A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff960`00800000 fffff960`00809000 framebuf (deferred) Image path: \SystemRoot\System32\framebuf.dll Image name: framebuf.dll Timestamp: Mon Jul 13 15:38:47 2009 (4A5BC587) CheckSum: 00003B39 ImageSize: 00009000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Unloaded modules: fffff880`01fa4000 fffff880`01fb2000 crashdmp.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 0000E000 fffff880`01fb2000 fffff880`01fbc000 dump_storport.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 0000A000 fffff880`04882000 fffff880`04b38000 dump_iaStorA.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 002B6000 fffff880`04b38000 fffff880`04b4b000 dump_dumpfve.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 00013000 3: kd> q quit: