Skip to content

Instantly share code, notes, and snippets.

@jordy-de-koning

jordy-de-koning/gist:d23367924786db54f2183e50ea0cb3e0

Created April 30, 2023 17:32
Show Gist options
  • Save jordy-de-koning/d23367924786db54f2183e50ea0cb3e0 to your computer and use it in GitHub Desktop.
Save jordy-de-koning/d23367924786db54f2183e50ea0cb3e0 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
gistfile1.txt
Microsoft (R) Windows Debugger Version 10.0.22621.755 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Windows\MEMORY.DMP]
Kernel Bitmap Dump File: Kernel address space is available, User address space may not be available.
Dump completed successfully, progress percentage: 100
Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 22000 MP (20 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Edition build lab: 22000.1.amd64fre.co_release.210604-1628
Machine Name:
Kernel base = 0xfffff800`49000000 PsLoadedModuleList = 0xfffff800`49c29b60
Debug session time: Sun Apr 30 18:11:50.544 2023 (UTC + 2:00)
System Uptime: 0 days 2:30:41.193
Loading Kernel Symbols
...............................................................
................................................................
................................................................
..........................
Loading User Symbols
Loading unloaded module list
..........................................
For analysis of this file, run !analyze -v
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
UNEXPECTED_KERNEL_MODE_TRAP (7f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault). The first number in the
BugCheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
use .trap on that value
Else
.trap on the appropriate frame will show where the trap was taken
(on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT
Arg2: ffffa70105717e70
Arg3: 0000000000001f80
Arg4: fffff8004941f23f
Debugging Details:
------------------
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 4859
Key : Analysis.DebugAnalysisManager
Value: Create
Key : Analysis.Elapsed.mSec
Value: 7052
Key : Analysis.Init.CPU.mSec
Value: 2218
Key : Analysis.Init.Elapsed.mSec
Value: 33037
Key : Analysis.Memory.CommitPeak.Mb
Value: 103
Key : WER.OS.Branch
Value: co_release
Key : WER.OS.Timestamp
Value: 2021-06-04T16:28:00Z
Key : WER.OS.Version
Value: 10.0.22000.1
FILE_IN_CAB: MEMORY.DMP
DUMP_FILE_ATTRIBUTES: 0x1800
BUGCHECK_CODE: 7f
BUGCHECK_P1: 8
BUGCHECK_P2: ffffa70105717e70
BUGCHECK_P3: 1f80
BUGCHECK_P4: fffff8004941f23f
TRAP_FRAME: ffffa70105717e70 -- (.trap 0xffffa70105717e70)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffa70105690180 rbx=0000000000000000 rcx=0000000000000006
rdx=fffffb8f2b62f9b0 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8004941f23f rsp=0000000000001f80 rbp=fffffb8f2b62fa30
r8=0000000000000000 r9=fffffb8f2b62f8b0 r10=fffff8004941f5d0
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up di pl zr na po nc
nt!KiInterruptSubDispatch+0x1f:
fffff800`4941f23f c18845a9c745a0 ror dword ptr [rax+45C7A945h],0A0h ds:ffffa701`4b30aac5=????????
Resetting default scope
PROCESS_NAME: System
MISALIGNED_IP:
nt!KiInterruptSubDispatch+1f
fffff800`4941f23f c18845a9c745a0 ror dword ptr [rax+45C7A945h],0A0h
STACK_TEXT:
ffffa701`05717d28 fffff800`49432769 : 00000000`0000007f 00000000`00000008 ffffa701`05717e70 00000000`00001f80 : nt!KeBugCheckEx
ffffa701`05717d30 fffff800`4942ca07 : 45720108`7a834b72 10528b40`7208423b 000000b8`e8ce8b48 8b4c3478`c085d88b : nt!KiBugCheckDispatch+0x69
ffffa701`05717e70 fffff800`4941f23f : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDoubleFaultAbort+0x307
00000000`00001f80 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiInterruptSubDispatch+0x1f
SYMBOL_NAME: nt!KiDoubleFaultAbort+307
IMAGE_NAME: hardware
STACK_COMMAND: .cxr; .ecxr ; kb
MODULE_NAME: hardware
FAILURE_BUCKET_ID: IP_MISALIGNED
OS_VERSION: 10.0.22000.1
BUILDLAB_STR: co_release
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {201b0e5d-db2a-63d2-77be-8ce8ff234750}
Followup: MachineOwner
---------
1: kd> .trap 0xffffa70105717e70
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffa70105690180 rbx=0000000000000000 rcx=0000000000000006
rdx=fffffb8f2b62f9b0 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8004941f23f rsp=0000000000001f80 rbp=fffffb8f2b62fa30
r8=0000000000000000 r9=fffffb8f2b62f8b0 r10=fffff8004941f5d0
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up di pl zr na po nc
nt!KiInterruptSubDispatch+0x1f:
fffff800`4941f23f c18845a9c745a0 ror dword ptr [rax+45C7A945h],0A0h ds:ffffa701`4b30aac5=????????
1: kd> lmvm hardware
Browse full module list
start end module name
1: kd> lmDv
start end module name
ffff903a`7be00000 ffff903a`7c13a000 win32kbase (deferred)
Image path: \SystemRoot\System32\win32kbase.sys
Image name: win32kbase.sys
Browse all global symbols functions data
Timestamp: ***** Invalid (FB934F82)
CheckSum: 00336B9E
ImageSize: 0033A000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
ffff903a`7c3d0000 ffff903a`7c47c000 win32k (deferred)
Image path: \SystemRoot\System32\win32k.sys
Image name: win32k.sys
Browse all global symbols functions data
Timestamp: Sun Oct 8 11:19:53 1989 (252F1139)
CheckSum: 000B62B7
ImageSize: 000AC000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
ffff903a`7c600000 ffff903a`7c643000 cdd (deferred)
Image path: \SystemRoot\System32\cdd.dll
Image name: cdd.dll
Browse all global symbols functions data
Timestamp: Tue Apr 10 03:02:17 1979 (11700599)
CheckSum: 000454C3
ImageSize: 00043000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
ffff903a`7d200000 ffff903a`7d5b2000 win32kfull (deferred)
Image path: \SystemRoot\System32\win32kfull.sys
Image name: win32kfull.sys
Browse all global symbols functions data
Timestamp: Sun Oct 15 14:41:05 2006 (45322C61)
CheckSum: 003B26E2
ImageSize: 003B2000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`448d0000 fffff800`448d6000 hal (deferred)
Image path: hal.dll
Image name: hal.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: EE778D5D (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000E0C2
ImageSize: 00006000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`448e0000 fffff800`448eb000 kd (deferred)
Image path: \SystemRoot\system32\kd.dll
Image name: kd.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 7E7BE7B4 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000DDF1
ImageSize: 0000B000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`448f0000 fffff800`44918000 tm (deferred)
Image path: \SystemRoot\System32\drivers\tm.sys
Image name: tm.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 516AD112 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002FC2F
ImageSize: 00028000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`44920000 fffff800`4498e000 CLFS (deferred)
Image path: \SystemRoot\System32\drivers\CLFS.SYS
Image name: CLFS.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 6DEE8AAE (This is a reproducible build file hash, not a timestamp)
CheckSum: 00076FFB
ImageSize: 0006E000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`44990000 fffff800`449aa000 PSHED (deferred)
Image path: \SystemRoot\system32\PSHED.dll
Image name: PSHED.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 0CC428E3 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00023717
ImageSize: 0001A000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`449b0000 fffff800`449bb000 BOOTVID (deferred)
Image path: \SystemRoot\system32\BOOTVID.dll
Image name: BOOTVID.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: E0A00A16 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00012D88
ImageSize: 0000B000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`449c0000 fffff800`44ace000 clipsp (deferred)
Image path: \SystemRoot\System32\drivers\clipsp.sys
Image name: clipsp.sys
Browse all global symbols functions data
Timestamp: Tue Mar 28 05:39:26 2023 (6422616E)
CheckSum: 0011043E
ImageSize: 0010E000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`44ad0000 fffff800`44b43000 FLTMGR (deferred)
Image path: \SystemRoot\System32\drivers\FLTMGR.SYS
Image name: FLTMGR.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: B6C3316A (This is a reproducible build file hash, not a timestamp)
CheckSum: 00074984
ImageSize: 00073000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`44b50000 fffff800`44b79000 ksecdd (deferred)
Image path: \SystemRoot\System32\drivers\ksecdd.sys
Image name: ksecdd.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 4307AF83 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00034576
ImageSize: 00029000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`44b80000 fffff800`44be5000 msrpc (deferred)
Image path: \SystemRoot\System32\drivers\msrpc.sys
Image name: msrpc.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: F58D8202 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0006BD79
ImageSize: 00065000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`44bf0000 fffff800`44bfe000 cmimcext (deferred)
Image path: \SystemRoot\System32\drivers\cmimcext.sys
Image name: cmimcext.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 0ACCAC36 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00010E7A
ImageSize: 0000E000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`44c00000 fffff800`44c14000 werkernel (deferred)
Image path: \SystemRoot\System32\drivers\werkernel.sys
Image name: werkernel.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: DEE2E3AB (This is a reproducible build file hash, not a timestamp)
CheckSum: 00019605
ImageSize: 00014000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`44c20000 fffff800`44c2c000 ntosext (deferred)
Image path: \SystemRoot\System32\drivers\ntosext.sys
Image name: ntosext.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: E8A42C19 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001798A
ImageSize: 0000C000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`44c30000 fffff800`44c44000 WDFLDR (deferred)
Image path: \SystemRoot\system32\drivers\WDFLDR.SYS
Image name: WDFLDR.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 4D17FFDC (This is a reproducible build file hash, not a timestamp)
CheckSum: 00024CFC
ImageSize: 00014000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`44c50000 fffff800`44c5d000 PRM (deferred)
Image path: \SystemRoot\System32\DriverStore\FileRepository\prm.inf_amd64_7fc9bb8ba2b73803\PRM.sys
Image name: PRM.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 635DFAED (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000F6C6
ImageSize: 0000D000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`44c60000 fffff800`44c86000 acpiex (deferred)
Image path: \SystemRoot\System32\Drivers\acpiex.sys
Image name: acpiex.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 6EA4C7B4 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00035A49
ImageSize: 00026000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`44c90000 fffff800`44ca2000 WppRecorder (deferred)
Image path: \SystemRoot\System32\Drivers\WppRecorder.sys
Image name: WppRecorder.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 040C9450 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00015F5D
ImageSize: 00012000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`450b0000 fffff800`45196000 CI (deferred)
Image path: \SystemRoot\system32\CI.dll
Image name: CI.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 1000DAD4 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000EB37F
ImageSize: 000E6000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`451a0000 fffff800`451ae000 msseccore (deferred)
Image path: \SystemRoot\system32\drivers\msseccore.sys
Image name: msseccore.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 8D62DF03 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00014AD4
ImageSize: 0000E000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`451b0000 fffff800`451cb000 SgrmAgent (deferred)
Image path: \SystemRoot\system32\drivers\SgrmAgent.sys
Image name: SgrmAgent.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 6A6260BA (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001D7C6
ImageSize: 0001B000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`451d0000 fffff800`451da000 lxss (deferred)
Image path: \SystemRoot\system32\drivers\lxss.sys
Image name: lxss.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: CCCB6FD2 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00014FB8
ImageSize: 0000A000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`451e0000 fffff800`451ec000 WMILIB (deferred)
Image path: \SystemRoot\System32\drivers\WMILIB.SYS
Image name: WMILIB.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 50EF2C8D (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000E800
ImageSize: 0000C000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`451f0000 fffff800`451fb000 WindowsTrustedRTProxy (deferred)
Image path: \SystemRoot\System32\drivers\WindowsTrustedRTProxy.sys
Image name: WindowsTrustedRTProxy.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 511A675B (This is a reproducible build file hash, not a timestamp)
CheckSum: 00011B88
ImageSize: 0000B000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`49000000 fffff800`4a047000 nt (pdb symbols) C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\sym\ntkrnlmp.pdb\4FFC77C863AFBD2261574A4F333247B41\ntkrnlmp.pdb
Loaded symbol image file: ntkrnlmp.exe
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\sym\ntkrnlmp.exe\D681FB3F1047000\ntkrnlmp.exe
Image path: ntkrnlmp.exe
Image name: ntkrnlmp.exe
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: D681FB3F (This is a reproducible build file hash, not a timestamp)
CheckSum: 00B37DF7
ImageSize: 01047000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4a600000 fffff800`4a6bd000 cng (deferred)
Image path: \SystemRoot\System32\drivers\cng.sys
Image name: cng.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 5041410B (This is a reproducible build file hash, not a timestamp)
CheckSum: 000CE83E
ImageSize: 000BD000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4a6c0000 fffff800`4a793000 Wdf01000 (deferred)
Image path: \SystemRoot\system32\drivers\Wdf01000.sys
Image name: Wdf01000.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 7E4827BC (This is a reproducible build file hash, not a timestamp)
CheckSum: 000D5665
ImageSize: 000D3000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4a7a0000 fffff800`4a8b1000 LXCORE (deferred)
Image path: \SystemRoot\system32\drivers\LXCORE.SYS
Image name: LXCORE.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 9E4850C4 (This is a reproducible build file hash, not a timestamp)
CheckSum: 001219A3
ImageSize: 00111000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4a8c0000 fffff800`4a98c000 ACPI (deferred)
Image path: \SystemRoot\System32\drivers\ACPI.sys
Image name: ACPI.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 725DE2B9 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000D35EC
ImageSize: 000CC000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4a9b0000 fffff800`4aa23000 intelpep (deferred)
Image path: \SystemRoot\System32\drivers\intelpep.sys
Image name: intelpep.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 2DF789AC (This is a reproducible build file hash, not a timestamp)
CheckSum: 0007B4D0
ImageSize: 00073000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4aa30000 fffff800`4aa47000 WindowsTrustedRT (deferred)
Image path: \SystemRoot\system32\drivers\WindowsTrustedRT.sys
Image name: WindowsTrustedRT.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 9F85F95E (This is a reproducible build file hash, not a timestamp)
CheckSum: 000268FE
ImageSize: 00017000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4aa50000 fffff800`4aa60000 IntelPMT (deferred)
Image path: \SystemRoot\System32\drivers\IntelPMT.sys
Image name: IntelPMT.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 8607F8F9 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000142EE
ImageSize: 00010000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4aa70000 fffff800`4aa85000 pcw (deferred)
Image path: \SystemRoot\System32\drivers\pcw.sys
Image name: pcw.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 197C3FA3 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00022BE7
ImageSize: 00015000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4aa90000 fffff800`4aa9b000 msisadrv (deferred)
Image path: \SystemRoot\System32\drivers\msisadrv.sys
Image name: msisadrv.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 39FC6652 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000163A7
ImageSize: 0000B000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4aaa0000 fffff800`4ab23000 pci (deferred)
Image path: \SystemRoot\System32\drivers\pci.sys
Image name: pci.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: E060DC9D (This is a reproducible build file hash, not a timestamp)
CheckSum: 000913FB
ImageSize: 00083000
File version: 10.0.22000.1641
Product version: 10.0.22000.1641
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: pci.sys
OriginalFilename: pci.sys
ProductVersion: 10.0.22000.1641
FileVersion: 10.0.22000.1641 (WinBuild.160101.0800)
FileDescription: NT Plug and Play PCI Enumerator
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`4ab30000 fffff800`4ab47000 vdrvroot (deferred)
Image path: \SystemRoot\System32\drivers\vdrvroot.sys
Image name: vdrvroot.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 1D57ABB7 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002582A
ImageSize: 00017000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4ab50000 fffff800`4ab7f000 pdc (deferred)
Image path: \SystemRoot\system32\drivers\pdc.sys
Image name: pdc.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 39A709CD (This is a reproducible build file hash, not a timestamp)
CheckSum: 00030EF3
ImageSize: 0002F000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4ab80000 fffff800`4ab97000 CEA (deferred)
Image path: \SystemRoot\system32\drivers\CEA.sys
Image name: CEA.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 5A932B7B (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001B454
ImageSize: 00017000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4aba0000 fffff800`4abd2000 partmgr (deferred)
Image path: \SystemRoot\System32\drivers\partmgr.sys
Image name: partmgr.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: A60EA42F (This is a reproducible build file hash, not a timestamp)
CheckSum: 00039B54
ImageSize: 00032000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4abe0000 fffff800`4acb0000 spaceport (deferred)
Image path: \SystemRoot\System32\drivers\spaceport.sys
Image name: spaceport.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 9DF14328 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000D3240
ImageSize: 000D0000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4acc0000 fffff800`4acdb000 volmgr (deferred)
Image path: \SystemRoot\System32\drivers\volmgr.sys
Image name: volmgr.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 8B6FDA0D (This is a reproducible build file hash, not a timestamp)
CheckSum: 00020DC7
ImageSize: 0001B000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4ace0000 fffff800`4ad43000 volmgrx (deferred)
Image path: \SystemRoot\System32\drivers\volmgrx.sys
Image name: volmgrx.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 0633EBBE (This is a reproducible build file hash, not a timestamp)
CheckSum: 0006B934
ImageSize: 00063000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4ad50000 fffff800`4ad6e000 mountmgr (deferred)
Image path: \SystemRoot\System32\drivers\mountmgr.sys
Image name: mountmgr.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: FA75996D (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002DDB0
ImageSize: 0001E000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4ad70000 fffff800`4af4e000 iaStorAC (deferred)
Image path: \SystemRoot\System32\drivers\iaStorAC.sys
Image name: iaStorAC.sys
Browse all global symbols functions data
Timestamp: Thu Aug 12 08:07:20 2021 (6114BA98)
CheckSum: 001830C4
ImageSize: 001DE000
File version: 18.36.3.1019
Product version: 18.36.3.1019
File flags: 8 (Mask 3F) Private
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Intel Corporation
ProductName: Intel(R) Rapid Storage Technology driver
InternalName: iaStorAC.sys
OriginalFilename: iaStorAC.sys
ProductVersion: 18.36.3.1019
FileVersion: 18.36.3.1019
PrivateBuild:
SpecialBuild:
FileDescription: Intel(R) Rapid Storage Technology driver - x64
LegalCopyright: Copyright (C), Intel Corporation. All rights reserved.
LegalTrademarks:
Comments: -x64
fffff800`4af50000 fffff800`4b032000 storport (deferred)
Image path: \SystemRoot\System32\drivers\storport.sys
Image name: storport.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 709A9DC0 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000E374A
ImageSize: 000E2000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4b040000 fffff800`4b063000 secnvme (deferred)
Image path: \SystemRoot\System32\drivers\secnvme.sys
Image name: secnvme.sys
Browse all global symbols functions data
Timestamp: Tue Jan 21 06:55:38 2020 (5E26925A)
CheckSum: 00026678
ImageSize: 00023000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4b070000 fffff800`4b092000 EhStorClass (deferred)
Image path: \SystemRoot\System32\drivers\EhStorClass.sys
Image name: EhStorClass.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 2CCA47B8 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000308E5
ImageSize: 00022000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4b0a0000 fffff800`4b0bb000 fileinfo (deferred)
Image path: \SystemRoot\System32\drivers\fileinfo.sys
Image name: fileinfo.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 0144422D (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002942B
ImageSize: 0001B000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4b0c0000 fffff800`4b103000 Wof (deferred)
Image path: \SystemRoot\System32\Drivers\Wof.sys
Image name: Wof.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 2DD9EB44 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0004BD9B
ImageSize: 00043000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4b110000 fffff800`4b18e000 WdFilter (deferred)
Image path: \SystemRoot\system32\drivers\wd\WdFilter.sys
Image name: WdFilter.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 51772FDD (This is a reproducible build file hash, not a timestamp)
CheckSum: 0007C9F8
ImageSize: 0007E000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4b190000 fffff800`4b4a1000 Ntfs (deferred)
Image path: \SystemRoot\System32\Drivers\Ntfs.sys
Image name: Ntfs.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: AE094659 (This is a reproducible build file hash, not a timestamp)
CheckSum: 003180D4
ImageSize: 00311000
File version: 10.0.22000.1761
Product version: 10.0.22000.1761
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ntfs.sys
OriginalFilename: ntfs.sys
ProductVersion: 10.0.22000.1761
FileVersion: 10.0.22000.1761 (WinBuild.160101.0800)
FileDescription: NT File System Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`4b4b0000 fffff800`4b4bd000 Fs_Rec (deferred)
Image path: \SystemRoot\System32\Drivers\Fs_Rec.sys
Image name: Fs_Rec.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: AE0F16E9 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00017CD0
ImageSize: 0000D000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4b4c0000 fffff800`4b641000 ndis (deferred)
Image path: \SystemRoot\system32\drivers\ndis.sys
Image name: ndis.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 1A34B4C2 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0018171A
ImageSize: 00181000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4b650000 fffff800`4b6eb000 NETIO (deferred)
Image path: \SystemRoot\system32\drivers\NETIO.SYS
Image name: NETIO.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 4F9F63DB (This is a reproducible build file hash, not a timestamp)
CheckSum: 000A2B0C
ImageSize: 0009B000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4b6f0000 fffff800`4b71d000 fse (deferred)
Image path: \SystemRoot\system32\drivers\fse.sys
Image name: fse.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: A3308FD1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0003C901
ImageSize: 0002D000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4b720000 fffff800`4b7a1000 fwpkclnt (deferred)
Image path: \SystemRoot\system32\drivers\fwpkclnt.sys
Image name: fwpkclnt.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 2B58321A (This is a reproducible build file hash, not a timestamp)
CheckSum: 000836B5
ImageSize: 00081000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4b7b0000 fffff800`4b7e3000 ksecpkg (deferred)
Image path: \SystemRoot\System32\Drivers\ksecpkg.sys
Image name: ksecpkg.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 53B62EF5 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0003CD7E
ImageSize: 00033000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4b7f0000 fffff800`4bb0a000 tcpip (deferred)
Image path: \SystemRoot\System32\drivers\tcpip.sys
Image name: tcpip.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 17C84458 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00319F93
ImageSize: 0031A000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4bb10000 fffff800`4bb40000 wfplwfs (deferred)
Image path: \SystemRoot\System32\drivers\wfplwfs.sys
Image name: wfplwfs.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 4E52EC9D (This is a reproducible build file hash, not a timestamp)
CheckSum: 00038B5D
ImageSize: 00030000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4bb50000 fffff800`4bb5e000 VmsProxy (deferred)
Image path: \SystemRoot\system32\drivers\VmsProxy.sys
Image name: VmsProxy.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 244CE42D (This is a reproducible build file hash, not a timestamp)
CheckSum: 00014C64
ImageSize: 0000E000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4bb60000 fffff800`4bb6f000 VmsProxyHNic (deferred)
Image path: \SystemRoot\system32\drivers\VmsProxyHNic.sys
Image name: VmsProxyHNic.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 07910E59 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00014376
ImageSize: 0000F000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4bb70000 fffff800`4bc41000 fvevol (deferred)
Image path: \SystemRoot\System32\DRIVERS\fvevol.sys
Image name: fvevol.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 60870BA0 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000DE67F
ImageSize: 000D1000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4bc50000 fffff800`4bc5b000 volume (deferred)
Image path: \SystemRoot\System32\drivers\volume.sys
Image name: volume.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: A21DB093 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00010FD0
ImageSize: 0000B000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4bc60000 fffff800`4bcd3000 volsnap (deferred)
Image path: \SystemRoot\System32\drivers\volsnap.sys
Image name: volsnap.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: F821B81C (This is a reproducible build file hash, not a timestamp)
CheckSum: 0007DC8E
ImageSize: 00073000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4bce0000 fffff800`4bd2f000 rdyboost (deferred)
Image path: \SystemRoot\System32\drivers\rdyboost.sys
Image name: rdyboost.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 679861A9 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00052307
ImageSize: 0004F000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4bd30000 fffff800`4bd56000 mup (deferred)
Image path: \SystemRoot\System32\Drivers\mup.sys
Image name: mup.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 27ABAFBF (This is a reproducible build file hash, not a timestamp)
CheckSum: 000335A9
ImageSize: 00026000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4bd60000 fffff800`4bd72000 iorate (deferred)
Image path: \SystemRoot\system32\drivers\iorate.sys
Image name: iorate.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 140F1AC8 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00022DCE
ImageSize: 00012000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4bda0000 fffff800`4bdbf000 disk (deferred)
Image path: \SystemRoot\System32\drivers\disk.sys
Image name: disk.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: A1EB73D5 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000257B3
ImageSize: 0001F000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4bdc0000 fffff800`4be35000 CLASSPNP (deferred)
Image path: \SystemRoot\System32\drivers\CLASSPNP.SYS
Image name: CLASSPNP.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: D377094C (This is a reproducible build file hash, not a timestamp)
CheckSum: 0007D69E
ImageSize: 00075000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4c800000 fffff800`4c830000 cdrom (deferred)
Image path: \SystemRoot\System32\drivers\cdrom.sys
Image name: cdrom.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 766B7F2D (This is a reproducible build file hash, not a timestamp)
CheckSum: 0003CA70
ImageSize: 00030000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4c840000 fffff800`4c855000 filecrypt (deferred)
Image path: \SystemRoot\system32\drivers\filecrypt.sys
Image name: filecrypt.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: F9D07A7A (This is a reproducible build file hash, not a timestamp)
CheckSum: 00016E14
ImageSize: 00015000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4c860000 fffff800`4c86e000 tbs (deferred)
Image path: \SystemRoot\system32\drivers\tbs.sys
Image name: tbs.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: B7E220C3 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001844D
ImageSize: 0000E000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4c870000 fffff800`4c87a000 Null (deferred)
Image path: \SystemRoot\System32\Drivers\Null.SYS
Image name: Null.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: A41489EF (This is a reproducible build file hash, not a timestamp)
CheckSum: 000186A2
ImageSize: 0000A000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4c880000 fffff800`4c88a000 Beep (deferred)
Image path: \SystemRoot\System32\Drivers\Beep.SYS
Image name: Beep.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 4D5648BF (This is a reproducible build file hash, not a timestamp)
CheckSum: 00018F44
ImageSize: 0000A000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4c890000 fffff800`4c964000 vhdmp (deferred)
Image path: \SystemRoot\System32\drivers\vhdmp.sys
Image name: vhdmp.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 4E2450B1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000D6FF9
ImageSize: 000D4000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4c970000 fffff800`4c999000 AgileVpn (deferred)
Image path: \SystemRoot\System32\drivers\AgileVpn.sys
Image name: AgileVpn.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 7B74772B (This is a reproducible build file hash, not a timestamp)
CheckSum: 00028377
ImageSize: 00029000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4c9a0000 fffff800`4c9c3000 rasl2tp (deferred)
Image path: \SystemRoot\System32\drivers\rasl2tp.sys
Image name: rasl2tp.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 7F5F51D5 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000263B2
ImageSize: 00023000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4c9d0000 fffff800`4c9f1000 raspptp (deferred)
Image path: \SystemRoot\System32\drivers\raspptp.sys
Image name: raspptp.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 526C407F (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002BF5F
ImageSize: 00021000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4ca00000 fffff800`4ca1d000 raspppoe (deferred)
Image path: \SystemRoot\System32\DRIVERS\raspppoe.sys
Image name: raspppoe.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 5E9C180A (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001F4E2
ImageSize: 0001D000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4ca20000 fffff800`4ca5a000 ndiswan (deferred)
Image path: \SystemRoot\System32\drivers\ndiswan.sys
Image name: ndiswan.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 96BE5553 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000437D8
ImageSize: 0003A000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`4cb40000 fffff800`4cb63000 crashdmp (deferred)
Image path: \SystemRoot\System32\Drivers\crashdmp.sys
Image name: crashdmp.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: AD186CE0 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00025120
ImageSize: 00023000
File version: 10.0.22000.918
Product version: 10.0.22000.918
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: crashdmp.sys
OriginalFilename: crashdmp.sys
ProductVersion: 10.0.22000.918
FileVersion: 10.0.22000.918 (WinBuild.160101.0800)
FileDescription: Crash Dump Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`61600000 fffff800`61611000 BasicRender (deferred)
Image path: \SystemRoot\System32\DriverStore\FileRepository\basicrender.inf_amd64_125ef86610247b72\BasicRender.sys
Image name: BasicRender.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: AC25D4F1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00015421
ImageSize: 00011000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`61620000 fffff800`6163c000 Npfs (deferred)
Image path: \SystemRoot\System32\Drivers\Npfs.SYS
Image name: Npfs.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: A16A46BC (This is a reproducible build file hash, not a timestamp)
CheckSum: 00021E1F
ImageSize: 0001C000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`61640000 fffff800`61651000 Msfs (deferred)
Image path: \SystemRoot\System32\Drivers\Msfs.SYS
Image name: Msfs.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 050BF92B (This is a reproducible build file hash, not a timestamp)
CheckSum: 000148A1
ImageSize: 00011000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`61660000 fffff800`61685000 CimFS (deferred)
Image path: \SystemRoot\System32\Drivers\CimFS.SYS
Image name: CimFS.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 8D3BF914 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002883B
ImageSize: 00025000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`61690000 fffff800`616b3000 tdx (deferred)
Image path: \SystemRoot\system32\DRIVERS\tdx.sys
Image name: tdx.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: F16ACCD1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00026225
ImageSize: 00023000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`616c0000 fffff800`616d0000 TDI (deferred)
Image path: \SystemRoot\system32\DRIVERS\TDI.SYS
Image name: TDI.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 0C29C965 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001BEFE
ImageSize: 00010000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`616e0000 fffff800`6173a000 netbt (deferred)
Image path: \SystemRoot\System32\DRIVERS\netbt.sys
Image name: netbt.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 7A93255D (This is a reproducible build file hash, not a timestamp)
CheckSum: 00067B2B
ImageSize: 0005A000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`61740000 fffff800`61754000 afunix (deferred)
Image path: \SystemRoot\system32\drivers\afunix.sys
Image name: afunix.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: CAFF8947 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00022B9B
ImageSize: 00014000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`61760000 fffff800`61806000 afd (deferred)
Image path: \SystemRoot\system32\drivers\afd.sys
Image name: afd.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 0E81CC6F (This is a reproducible build file hash, not a timestamp)
CheckSum: 000AC207
ImageSize: 000A6000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`61810000 fffff800`6181a000 nordlwf (deferred)
Image path: \SystemRoot\system32\DRIVERS\nordlwf.sys
Image name: nordlwf.sys
Browse all global symbols functions data
Timestamp: Wed Jul 8 08:53:44 2020 (5F056D78)
CheckSum: 0000D0B7
ImageSize: 0000A000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`61820000 fffff800`6183a000 vwififlt (deferred)
Image path: \SystemRoot\System32\drivers\vwififlt.sys
Image name: vwififlt.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: AE9945C8 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00026D46
ImageSize: 0001A000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`61840000 fffff800`6186b000 pacer (deferred)
Image path: \SystemRoot\System32\drivers\pacer.sys
Image name: pacer.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: D9D36A67 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000394D8
ImageSize: 0002B000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`61870000 fffff800`61883000 ndiscap (deferred)
Image path: \SystemRoot\System32\drivers\ndiscap.sys
Image name: ndiscap.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 80761AAD (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001ACA5
ImageSize: 00013000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`61890000 fffff800`618a4000 netbios (deferred)
Image path: \SystemRoot\system32\drivers\netbios.sys
Image name: netbios.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 6EEE9A65 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00024032
ImageSize: 00014000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`618b0000 fffff800`61965000 Vid (deferred)
Image path: \SystemRoot\System32\drivers\Vid.sys
Image name: Vid.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 5CA07748 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000C58FD
ImageSize: 000B5000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`61970000 fffff800`61995000 winhvr (deferred)
Image path: \SystemRoot\System32\drivers\winhvr.sys
Image name: winhvr.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: A0622C88 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002980F
ImageSize: 00025000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`619a0000 fffff800`61a1a000 rdbss (deferred)
Image path: \SystemRoot\system32\DRIVERS\rdbss.sys
Image name: rdbss.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 84641C29 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0007D658
ImageSize: 0007A000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`61a20000 fffff800`61ab6000 csc (deferred)
Image path: \SystemRoot\system32\drivers\csc.sys
Image name: csc.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 19B790C2 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000A1CED
ImageSize: 00096000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`61ac0000 fffff800`61b00000 ViGEmBus (deferred)
Image path: \SystemRoot\System32\drivers\ViGEmBus.sys
Image name: ViGEmBus.sys
Browse all global symbols functions data
Timestamp: Tue Aug 30 12:02:27 2022 (630DE033)
CheckSum: 0004800B
ImageSize: 00040000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`61b10000 fffff800`61b22000 nsiproxy (deferred)
Image path: \SystemRoot\system32\drivers\nsiproxy.sys
Image name: nsiproxy.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 5B7A4012 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001C73D
ImageSize: 00012000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`61b30000 fffff800`61b3f000 npsvctrig (deferred)
Image path: \SystemRoot\System32\drivers\npsvctrig.sys
Image name: npsvctrig.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: FCE748E0 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00011575
ImageSize: 0000F000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`61b40000 fffff800`61b50000 mssmbios # (pdb symbols) C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\sym\mssmbios.pdb\CD0F5323F716DA1DD0011FA40CFEC87B1\mssmbios.pdb
Loaded symbol image file: mssmbios.sys
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\sym\mssmbios.sys\E6EAE99D10000\mssmbios.sys
Image path: \SystemRoot\System32\drivers\mssmbios.sys
Image name: mssmbios.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: E6EAE99D (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001A44C
ImageSize: 00010000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`61b60000 fffff800`61b6a000 gpuenergydrv (deferred)
Image path: \SystemRoot\System32\drivers\gpuenergydrv.sys
Image name: gpuenergydrv.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 369BA49C (This is a reproducible build file hash, not a timestamp)
CheckSum: 00019170
ImageSize: 0000A000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`61b70000 fffff800`61b9c000 dfsc (deferred)
Image path: \SystemRoot\System32\Drivers\dfsc.sys
Image name: dfsc.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 86DEF6B4 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00032697
ImageSize: 0002C000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`61ba0000 fffff800`61bbd000 NDProxy (deferred)
Image path: \SystemRoot\System32\DRIVERS\NDProxy.sys
Image name: NDProxy.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 453A001E (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002CB06
ImageSize: 0001D000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`61bc0000 fffff800`61bcf000 ndistapi (deferred)
Image path: \SystemRoot\System32\DRIVERS\ndistapi.sys
Image name: ndistapi.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 80848C81 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00012F24
ImageSize: 0000F000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`61bd0000 fffff800`61c3c000 fastfat (deferred)
Image path: \SystemRoot\System32\Drivers\fastfat.SYS
Image name: fastfat.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: C27835D3 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00070ADD
ImageSize: 0006C000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`61c40000 fffff800`61c58000 bam (deferred)
Image path: \SystemRoot\system32\drivers\bam.sys
Image name: bam.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: A1451E1B (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001CC54
ImageSize: 00018000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`61c60000 fffff800`61cb3000 ahcache (deferred)
Image path: \SystemRoot\system32\DRIVERS\ahcache.sys
Image name: ahcache.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 34DD12CD (This is a reproducible build file hash, not a timestamp)
CheckSum: 000575EE
ImageSize: 00053000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`61cc0000 fffff800`61d09000 vmbusr (deferred)
Image path: \SystemRoot\System32\drivers\vmbusr.sys
Image name: vmbusr.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: BA666DEE (This is a reproducible build file hash, not a timestamp)
CheckSum: 0004BE23
ImageSize: 00049000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`61d10000 fffff800`61d3a000 hvsocket (deferred)
Image path: \SystemRoot\System32\drivers\hvsocket.sys
Image name: hvsocket.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 6B8E8359 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00036C32
ImageSize: 0002A000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`61d40000 fffff800`61d67000 vmbkmclr (deferred)
Image path: \SystemRoot\System32\drivers\vmbkmclr.sys
Image name: vmbkmclr.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 7B66CB25 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002BCAD
ImageSize: 00027000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`61d70000 fffff800`61d8e000 hvservice (deferred)
Image path: \SystemRoot\System32\drivers\hvservice.sys
Image name: hvservice.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 44E6A038 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002C30E
ImageSize: 0001E000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`61d90000 fffff800`62016000 vmswitch (deferred)
Image path: \SystemRoot\System32\drivers\vmswitch.sys
Image name: vmswitch.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: D463BFC6 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00275CF8
ImageSize: 00286000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`62020000 fffff800`6202c000 tapnordvpn (deferred)
Image path: \SystemRoot\System32\drivers\tapnordvpn.sys
Image name: tapnordvpn.sys
Browse all global symbols functions data
Timestamp: Thu May 31 11:50:28 2018 (5B0FC564)
CheckSum: 0000E63C
ImageSize: 0000C000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`62030000 fffff800`62043000 CompositeBus (deferred)
Image path: \SystemRoot\System32\DriverStore\FileRepository\compositebus.inf_amd64_6657edf28697c405\CompositeBus.sys
Image name: CompositeBus.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: EF3363B0 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00020291
ImageSize: 00013000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`62050000 fffff800`6205e000 kdnic (deferred)
Image path: \SystemRoot\System32\drivers\kdnic.sys
Image name: kdnic.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 6F4C908A (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001CC03
ImageSize: 0000E000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`62060000 fffff800`62076000 umbus (deferred)
Image path: \SystemRoot\System32\DriverStore\FileRepository\umbus.inf_amd64_0a89aff902a5c3a9\umbus.sys
Image name: umbus.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 7C36A743 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00017945
ImageSize: 00016000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`62080000 fffff800`620c8000 winnat (deferred)
Image path: \SystemRoot\system32\drivers\winnat.sys
Image name: winnat.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 92147CEC (This is a reproducible build file hash, not a timestamp)
CheckSum: 0005499E
ImageSize: 00048000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`620d0000 fffff800`620e6000 FsDepends (deferred)
Image path: \SystemRoot\System32\drivers\FsDepends.sys
Image name: FsDepends.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: E8B30BE1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001DA63
ImageSize: 00016000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`620f0000 fffff800`62119000 tunnel (deferred)
Image path: \SystemRoot\System32\drivers\tunnel.sys
Image name: tunnel.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: D19AF442 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002677F
ImageSize: 00029000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`62120000 fffff800`6213d000 rassstp (deferred)
Image path: \SystemRoot\System32\drivers\rassstp.sys
Image name: rassstp.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: A28FFFDF (This is a reproducible build file hash, not a timestamp)
CheckSum: 000279A4
ImageSize: 0001D000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`62150000 fffff800`625be000 dxgkrnl (deferred)
Image path: \SystemRoot\System32\drivers\dxgkrnl.sys
Image name: dxgkrnl.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 89C0707A (This is a reproducible build file hash, not a timestamp)
CheckSum: 00478279
ImageSize: 0046E000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`625c0000 fffff800`625de000 watchdog (deferred)
Image path: \SystemRoot\System32\drivers\watchdog.sys
Image name: watchdog.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: FB62A9E1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000234CB
ImageSize: 0001E000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`625e0000 fffff800`625f5000 BasicDisplay (deferred)
Image path: \SystemRoot\System32\DriverStore\FileRepository\basicdisplay.inf_amd64_a3f9d7c24b3377b3\BasicDisplay.sys
Image name: BasicDisplay.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 39B04BC4 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00024BB3
ImageSize: 00015000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`6dc00000 fffff800`6dc71000 portcls (deferred)
Image path: \SystemRoot\System32\drivers\portcls.sys
Image name: portcls.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 134DD5DD (This is a reproducible build file hash, not a timestamp)
CheckSum: 0007A493
ImageSize: 00071000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`6dc80000 fffff800`6dca1000 drmk (deferred)
Image path: \SystemRoot\System32\drivers\drmk.sys
Image name: drmk.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: E4167B9B (This is a reproducible build file hash, not a timestamp)
CheckSum: 00023F79
ImageSize: 00021000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`6dcb0000 fffff800`6dd31000 ks (deferred)
Image path: \SystemRoot\System32\drivers\ks.sys
Image name: ks.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 0F0A6A31 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0008EC95
ImageSize: 00081000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`6dd40000 fffff800`6ddde000 USBXHCI (deferred)
Image path: \SystemRoot\System32\drivers\USBXHCI.SYS
Image name: USBXHCI.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: CA1A1970 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000AF165
ImageSize: 0009E000
File version: 10.0.22000.1761
Product version: 10.0.22000.1761
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: usbxhci.sys
OriginalFilename: usbxhci.sys
ProductVersion: 10.0.22000.1761
FileVersion: 10.0.22000.1761 (WinBuild.160101.0800)
FileDescription: USB XHCI Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`6dde0000 fffff800`6de26000 ucx01000 (deferred)
Image path: \SystemRoot\system32\drivers\ucx01000.sys
Image name: ucx01000.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: BACB774A (This is a reproducible build file hash, not a timestamp)
CheckSum: 00047CF1
ImageSize: 00046000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`6de30000 fffff800`6de7c000 TeeDriverW10x64 (deferred)
Image path: \SystemRoot\System32\DriverStore\FileRepository\heci.inf_amd64_c22251d5ea82b3c3\x64\TeeDriverW10x64.sys
Image name: TeeDriverW10x64.sys
Browse all global symbols functions data
Timestamp: Tue Jul 27 07:43:44 2021 (60FF9D10)
CheckSum: 0004F98E
ImageSize: 0004C000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`6de80000 fffff800`6df20000 rt25cx21x64 (deferred)
Image path: \SystemRoot\System32\DriverStore\FileRepository\rt25cx21x64.inf_amd64_36f5efb51ed629a1\rt25cx21x64.sys
Image name: rt25cx21x64.sys
Browse all global symbols functions data
Timestamp: Mon May 16 14:56:23 2022 (628249F7)
CheckSum: 000AB1A6
ImageSize: 000A0000
File version: 1125.8.515.2022
Product version: 1125.8.515.2022
File flags: 8 (Mask 3F) Private
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Realtek
ProductName: Realtek PCIe Ethernet Controller
InternalName: rt25cx21x64.sys
OriginalFilename: rt25cx21x64.sys
ProductVersion: 1125.008.0515.2022
FileVersion: 1125.008.0515.2022
FileDescription: Realtek PCIe Ethernet Controller NetAdapterCx 2.2 Driver
LegalCopyright: Copyright (C) 2022 Realtek Semiconductor Corporation. All Rights Reserved.
fffff800`6df30000 fffff800`6df87000 NetAdapterCx (deferred)
Image path: \SystemRoot\system32\drivers\NetAdapterCx.sys
Image name: NetAdapterCx.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: F524992A (This is a reproducible build file hash, not a timestamp)
CheckSum: 00056920
ImageSize: 00057000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`6df90000 fffff800`6dfad000 serial (deferred)
Image path: \SystemRoot\System32\drivers\serial.sys
Image name: serial.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: B77D1C12 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002ABF7
ImageSize: 0001D000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`6dfb0000 fffff800`6dfbf000 serenum (deferred)
Image path: \SystemRoot\System32\drivers\serenum.sys
Image name: serenum.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 984CB330 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001A797
ImageSize: 0000F000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`6dfc0000 fffff800`6dfcb000 ICCWDT (deferred)
Image path: \SystemRoot\System32\drivers\ICCWDT.sys
Image name: ICCWDT.sys
Browse all global symbols functions data
Timestamp: Thu May 7 16:56:01 2020 (5EB42181)
CheckSum: 0000C392
ImageSize: 0000B000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`6dfd0000 fffff800`6dfdc000 wmiacpi (deferred)
Image path: \SystemRoot\System32\drivers\wmiacpi.sys
Image name: wmiacpi.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 19838768 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001B5F1
ImageSize: 0000C000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`6dfe0000 fffff800`6e02c000 intelppm (deferred)
Image path: \SystemRoot\System32\drivers\intelppm.sys
Image name: intelppm.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 4D6FD72D (This is a reproducible build file hash, not a timestamp)
CheckSum: 00051E57
ImageSize: 0004C000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`6e030000 fffff800`6e03b000 acpipagr (deferred)
Image path: \SystemRoot\System32\drivers\acpipagr.sys
Image name: acpipagr.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 09BEB88A (This is a reproducible build file hash, not a timestamp)
CheckSum: 00014980
ImageSize: 0000B000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`6e040000 fffff800`6e04c000 acpitime (deferred)
Image path: \SystemRoot\System32\drivers\acpitime.sys
Image name: acpitime.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: C54F56C6 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000172F3
ImageSize: 0000C000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`6e050000 fffff800`6e060000 UEFI (deferred)
Image path: \SystemRoot\System32\DriverStore\FileRepository\uefi.inf_amd64_6693f32a658a859a\UEFI.sys
Image name: UEFI.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 3188B491 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00018E18
ImageSize: 00010000
File version: 10.0.22000.653
Product version: 10.0.22000.653
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: UEFI.sys
OriginalFilename: UEFI.sys
ProductVersion: 10.0.22000.653
FileVersion: 10.0.22000.653 (WinBuild.160101.0800)
FileDescription: UEFI Driver for NT
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`6e070000 fffff800`6e0a7000 vpcivsp (deferred)
Image path: \SystemRoot\System32\drivers\vpcivsp.sys
Image name: vpcivsp.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 31596080 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00044E6D
ImageSize: 00037000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`6e0b0000 fffff800`6e0e7000 storvsp (deferred)
Image path: \SystemRoot\System32\drivers\storvsp.sys
Image name: storvsp.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: C2170F2A (This is a reproducible build file hash, not a timestamp)
CheckSum: 0003C633
ImageSize: 00037000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`6e0f0000 fffff800`6e0fd000 NdisVirtualBus (deferred)
Image path: \SystemRoot\System32\drivers\NdisVirtualBus.sys
Image name: NdisVirtualBus.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 7C5FA602 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001C03F
ImageSize: 0000D000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`6e100000 fffff800`6e10c000 swenum (deferred)
Image path: \SystemRoot\System32\DriverStore\FileRepository\swenum.inf_amd64_3bf6c0d173eb26c6\swenum.sys
Image name: swenum.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: F62F1994 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00015654
ImageSize: 0000C000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`6e110000 fffff800`6e121000 HidHide (deferred)
Image path: \SystemRoot\System32\drivers\HidHide.sys
Image name: HidHide.sys
Browse all global symbols functions data
Timestamp: Mon Jun 27 19:42:45 2022 (62B9EC15)
CheckSum: 00012310
ImageSize: 00011000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`6e130000 fffff800`6e13f000 rdpbus (deferred)
Image path: \SystemRoot\System32\drivers\rdpbus.sys
Image name: rdpbus.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: BD8B4E4D (This is a reproducible build file hash, not a timestamp)
CheckSum: 00010347
ImageSize: 0000F000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`6e140000 fffff800`6e1e8000 UsbHub3 (deferred)
Image path: \SystemRoot\System32\drivers\UsbHub3.sys
Image name: UsbHub3.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: DB099B14 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000B800C
ImageSize: 000A8000
File version: 10.0.22000.65
Product version: 10.0.22000.65
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: usbhub3.sys
OriginalFilename: usbhub3.sys
ProductVersion: 10.0.22000.65
FileVersion: 10.0.22000.65 (WinBuild.160101.0800)
FileDescription: USB3 HUB Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`6e1f0000 fffff800`6e1fe000 USBD (deferred)
Image path: \SystemRoot\System32\drivers\USBD.SYS
Image name: USBD.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: C51F48B2 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00014EB1
ImageSize: 0000E000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`6e200000 fffff800`6e21e000 nvhda64v (deferred)
Image path: \SystemRoot\system32\drivers\nvhda64v.sys
Image name: nvhda64v.sys
Browse all global symbols functions data
Timestamp: Fri Jan 20 11:48:10 2023 (63CA716A)
CheckSum: 0001EE26
ImageSize: 0001E000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`6e220000 fffff800`6e22f000 ksthunk (deferred)
Image path: \SystemRoot\system32\drivers\ksthunk.sys
Image name: ksthunk.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 106EA2B6 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001BF46
ImageSize: 0000F000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`6e230000 fffff800`6e2ca000 mrxsmb (deferred)
Image path: \SystemRoot\system32\DRIVERS\mrxsmb.sys
Image name: mrxsmb.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: DF77447F (This is a reproducible build file hash, not a timestamp)
CheckSum: 000A4C49
ImageSize: 0009A000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`6e2d0000 fffff800`6e329000 srvnet (deferred)
Image path: \SystemRoot\System32\DRIVERS\srvnet.sys
Image name: srvnet.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: EB1B8051 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0005DB2C
ImageSize: 00059000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`6e330000 fffff800`6e3fe000 peauth (deferred)
Image path: \SystemRoot\system32\drivers\peauth.sys
Image name: peauth.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: D1254FC9 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000CE512
ImageSize: 000CE000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`6e400000 fffff800`6e428000 Ndu (deferred)
Image path: \SystemRoot\system32\drivers\Ndu.sys
Image name: Ndu.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 24EB76BF (This is a reproducible build file hash, not a timestamp)
CheckSum: 00032E65
ImageSize: 00028000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`6e430000 fffff800`6e444000 tcpipreg (deferred)
Image path: \SystemRoot\System32\drivers\tcpipreg.sys
Image name: tcpipreg.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: EADDC8CD (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001B96D
ImageSize: 00014000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`6e450000 fffff800`6e51e000 srv2 (deferred)
Image path: \SystemRoot\System32\DRIVERS\srv2.sys
Image name: srv2.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 1C80AB47 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000DAC83
ImageSize: 000CE000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`6e520000 fffff800`6e533000 condrv (deferred)
Image path: \SystemRoot\System32\drivers\condrv.sys
Image name: condrv.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 9FEA0918 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000159F4
ImageSize: 00013000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`6e540000 fffff800`6e551000 vhdparser (deferred)
Image path: \SystemRoot\system32\drivers\vhdparser.sys
Image name: vhdparser.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 622FA55C (This is a reproducible build file hash, not a timestamp)
CheckSum: 00013FB5
ImageSize: 00011000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`6e560000 fffff800`6e653000 xvdd (deferred)
Image path: \SystemRoot\System32\DriverStore\FileRepository\xvdd.inf_amd64_6931cffa1f5f9fc9\xvdd.sys
Image name: xvdd.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 893F7491 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000B22A4
ImageSize: 000F3000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`6e660000 fffff800`6e680000 gameflt (deferred)
Image path: \SystemRoot\System32\DriverStore\FileRepository\gameflt.inf_amd64_5c797a55721a7394\gameflt.sys
Image name: gameflt.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: F8AE3A78 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000309A0
ImageSize: 00020000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`6e690000 fffff800`6e6cc000 MpKslDrv (deferred)
Image path: \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{5307D9BA-FE5D-4D67-9997-3F66386DF614}\MpKslDrv.sys
Image name: MpKslDrv.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 353D07DB (This is a reproducible build file hash, not a timestamp)
CheckSum: 00038F43
ImageSize: 0003C000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`6e6d0000 fffff800`6e6ec000 WdNisDrv (deferred)
Image path: \SystemRoot\system32\drivers\wd\WdNisDrv.sys
Image name: WdNisDrv.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 5E9F15DD (This is a reproducible build file hash, not a timestamp)
CheckSum: 00020004
ImageSize: 0001C000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`6e6f0000 fffff800`71f84000 nvlddmkm (deferred)
Image path: \SystemRoot\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_059948e396d205d5\nvlddmkm.sys
Image name: nvlddmkm.sys
Browse all global symbols functions data
Timestamp: Wed Mar 8 07:36:07 2023 (64082CD7)
CheckSum: 03794604
ImageSize: 03894000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`71f90000 fffff800`71fbd000 HDAudBus (deferred)
Image path: \SystemRoot\System32\drivers\HDAudBus.sys
Image name: HDAudBus.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: F2BD537B (This is a reproducible build file hash, not a timestamp)
CheckSum: 00032446
ImageSize: 0002D000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`71fc0000 fffff800`71fcd000 WSDScan (deferred)
Image path: \SystemRoot\System32\drivers\WSDScan.sys
Image name: WSDScan.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 81C223FA (This is a reproducible build file hash, not a timestamp)
CheckSum: 00017D98
ImageSize: 0000D000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`71fd0000 fffff800`71fef000 p9rdr (deferred)
Image path: \SystemRoot\System32\drivers\p9rdr.sys
Image name: p9rdr.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: ABD12BA4 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00027440
ImageSize: 0001F000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`71ff0000 fffff800`71ffd000 hvsocketcontrol (deferred)
Image path: \SystemRoot\system32\drivers\hvsocketcontrol.sys
Image name: hvsocketcontrol.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 9126997D (This is a reproducible build file hash, not a timestamp)
CheckSum: 000190BC
ImageSize: 0000D000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`7c400000 fffff800`7c5d7000 BTHport (deferred)
Image path: \SystemRoot\System32\drivers\BTHport.sys
Image name: BTHport.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: E631DF71 (This is a reproducible build file hash, not a timestamp)
CheckSum: 001D7445
ImageSize: 001D7000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`7c5e0000 fffff800`7c614000 usbccgp (deferred)
Image path: \SystemRoot\System32\drivers\usbccgp.sys
Image name: usbccgp.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 54C51E3E (This is a reproducible build file hash, not a timestamp)
CheckSum: 00042D37
ImageSize: 00034000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`7c620000 fffff800`7c632000 hidusb (deferred)
Image path: \SystemRoot\System32\drivers\hidusb.sys
Image name: hidusb.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: B0F01A09 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001A128
ImageSize: 00012000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`7c640000 fffff800`7c683000 HIDCLASS (deferred)
Image path: \SystemRoot\System32\drivers\HIDCLASS.SYS
Image name: HIDCLASS.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 601D8760 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000477DC
ImageSize: 00043000
File version: 10.0.22000.1455
Product version: 10.0.22000.1455
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: hidclass.sys
OriginalFilename: hidclass.sys
ProductVersion: 10.0.22000.1455
FileVersion: 10.0.22000.1455 (WinBuild.160101.0800)
FileDescription: Hid Class Library
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`7c690000 fffff800`7c6a3000 HIDPARSE (deferred)
Image path: \SystemRoot\System32\drivers\HIDPARSE.SYS
Image name: HIDPARSE.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: DFD5985A (This is a reproducible build file hash, not a timestamp)
CheckSum: 000133D4
ImageSize: 00013000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`7c6b0000 fffff800`7c6ec000 rfcomm (deferred)
Image path: \SystemRoot\System32\drivers\rfcomm.sys
Image name: rfcomm.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: B28C51A8 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00040548
ImageSize: 0003C000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`7c6f0000 fffff800`7c712000 BthEnum (deferred)
Image path: \SystemRoot\System32\drivers\BthEnum.sys
Image name: BthEnum.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: B98A14BC (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002E8FA
ImageSize: 00022000
File version: 10.0.22000.1696
Product version: 10.0.22000.1696
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: bthenum.SYS
OriginalFilename: bthenum.SYS
ProductVersion: 10.0.22000.1696
FileVersion: 10.0.22000.1696 (WinBuild.160101.0800)
FileDescription: Bluetooth Bus Extender
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`7c720000 fffff800`7c746000 bthpan (deferred)
Image path: \SystemRoot\System32\drivers\bthpan.sys
Image name: bthpan.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 8848C97A (This is a reproducible build file hash, not a timestamp)
CheckSum: 00029830
ImageSize: 00026000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`7c750000 fffff800`7c771000 Microsoft_Bluetooth_Legacy_LEEnumerator (deferred)
Image path: \SystemRoot\System32\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys
Image name: Microsoft.Bluetooth.Legacy.LEEnumerator.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 796DA03A (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002698D
ImageSize: 00021000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`7c780000 fffff800`7c798000 bthmodem (deferred)
Image path: \SystemRoot\System32\drivers\bthmodem.sys
Image name: bthmodem.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 35485911 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001830E
ImageSize: 00018000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`7c7a0000 fffff800`7c81c000 BthA2dp (deferred)
Image path: \SystemRoot\System32\drivers\BthA2dp.sys
Image name: BthA2dp.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 1EF77129 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0007DCA4
ImageSize: 0007C000
File version: 10.0.22000.1516
Product version: 10.0.22000.1516
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: btha2dp.sys
OriginalFilename: btha2dp.sys
ProductVersion: 10.0.22000.1516
FileVersion: 10.0.22000.1516 (WinBuild.160101.0800)
FileDescription: Bluetooth A2DP Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`7c820000 fffff800`7c831000 btampm (deferred)
Image path: \SystemRoot\System32\drivers\btampm.sys
Image name: btampm.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: F1475B8F (This is a reproducible build file hash, not a timestamp)
CheckSum: 00016914
ImageSize: 00011000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`7c840000 fffff800`7c857000 Microsoft_Bluetooth_AvrcpTransport (deferred)
Image path: \SystemRoot\System32\drivers\Microsoft.Bluetooth.AvrcpTransport.sys
Image name: Microsoft.Bluetooth.AvrcpTransport.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 14122984 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001FD8E
ImageSize: 00017000
File version: 10.0.22000.653
Product version: 10.0.22000.653
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: Microsoft.Bluetooth.AvrcpTransport.SYS
OriginalFilename: Microsoft.Bluetooth.AvrcpTransport.SYS
ProductVersion: 10.0.22000.653
FileVersion: 10.0.22000.653 (WinBuild.160101.0800)
FileDescription: Microsoft Bluetooth Avrcp Transport Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`7c860000 fffff800`7c88c000 bthhfenum (deferred)
Image path: \SystemRoot\System32\drivers\bthhfenum.sys
Image name: bthhfenum.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 5CB67D51 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00039502
ImageSize: 0002C000
File version: 10.0.22000.1042
Product version: 10.0.22000.1042
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: BthHFEnum.sys
OriginalFilename: BthHFEnum.sys
ProductVersion: 10.0.22000.1042
FileVersion: 10.0.22000.1042 (WinBuild.160101.0800)
FileDescription: Bluetooth Hands-Free Audio and Call Control HID Enumerator
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`7c890000 fffff800`7c8a1000 kbdhid (deferred)
Image path: \SystemRoot\System32\drivers\kbdhid.sys
Image name: kbdhid.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: CFA06DE3 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00013257
ImageSize: 00011000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`7c8b0000 fffff800`7c8c4000 kbdclass (deferred)
Image path: \SystemRoot\System32\drivers\kbdclass.sys
Image name: kbdclass.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 6F7B4A29 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000232F8
ImageSize: 00014000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`7c8d0000 fffff800`7c8e0000 mouhid (deferred)
Image path: \SystemRoot\System32\drivers\mouhid.sys
Image name: mouhid.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 1571EF43 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001D7B8
ImageSize: 00010000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`7c8f0000 fffff800`7c904000 mouclass (deferred)
Image path: \SystemRoot\System32\drivers\mouclass.sys
Image name: mouclass.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 02AB7880 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001DBE9
ImageSize: 00014000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`7c910000 fffff800`7c92a000 BthHfAud (deferred)
Image path: \SystemRoot\System32\drivers\BthHfAud.sys
Image name: BthHfAud.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: C430CF3C (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002330C
ImageSize: 0001A000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`7c950000 fffff800`7c960000 dump_diskdump (deferred)
Image path: \SystemRoot\System32\Drivers\dump_diskdump.sys
Image name: dump_diskdump.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 442D85C4 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001788D
ImageSize: 00010000
File version: 10.0.22000.918
Product version: 10.0.22000.918
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: diskdump.sys
OriginalFilename: diskdump.sys
ProductVersion: 10.0.22000.918
FileVersion: 10.0.22000.918 (WinBuild.160101.0800)
FileDescription: Crash Dump Disk Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`7cb50000 fffff800`7cd2e000 dump_iaStorAC (deferred)
Image path: \SystemRoot\System32\drivers\dump_iaStorAC.sys
Image name: dump_iaStorAC.sys
Browse all global symbols functions data
Timestamp: Thu Aug 12 08:07:20 2021 (6114BA98)
CheckSum: 001830C4
ImageSize: 001DE000
File version: 18.36.3.1019
Product version: 18.36.3.1019
File flags: 8 (Mask 3F) Private
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Intel Corporation
ProductName: Intel(R) Rapid Storage Technology driver
InternalName: iaStorAC.sys
OriginalFilename: iaStorAC.sys
ProductVersion: 18.36.3.1019
FileVersion: 18.36.3.1019
PrivateBuild:
SpecialBuild:
FileDescription: Intel(R) Rapid Storage Technology driver - x64
LegalCopyright: Copyright (C), Intel Corporation. All rights reserved.
LegalTrademarks:
Comments: -x64
fffff800`7cd50000 fffff800`7cd6d000 dump_dumpfve (deferred)
Image path: \SystemRoot\System32\Drivers\dump_dumpfve.sys
Image name: dump_dumpfve.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: C4E5330C (This is a reproducible build file hash, not a timestamp)
CheckSum: 00025C1F
ImageSize: 0001D000
File version: 10.0.22000.918
Product version: 10.0.22000.918
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: dumpfve.sys
OriginalFilename: dumpfve.sys
ProductVersion: 10.0.22000.918
FileVersion: 10.0.22000.918 (WinBuild.160101.0800)
FileDescription: Bitlocker Drive Encryption Crashdump Filter
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`7cd70000 fffff800`7ce73000 dxgmms2 (deferred)
Image path: \SystemRoot\System32\drivers\dxgmms2.sys
Image name: dxgmms2.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: E68B56CF (This is a reproducible build file hash, not a timestamp)
CheckSum: 0011106C
ImageSize: 00103000
File version: 10.0.22000.1761
Product version: 10.0.22000.1761
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: dxgmms2.sys
OriginalFilename: dxgmms2.sys
ProductVersion: 10.0.22000.1761
FileVersion: 10.0.22000.1761 (WinBuild.160101.0800)
FileDescription: DirectX Graphics MMS
LegalCopyright: © Microsoft Corporation. All rights reserved.
fffff800`7ce80000 fffff800`7ce9c000 monitor (deferred)
Image path: \SystemRoot\System32\drivers\monitor.sys
Image name: monitor.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 06FAE730 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000213D7
ImageSize: 0001C000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`7cea0000 fffff800`7cecc000 luafv (deferred)
Image path: \SystemRoot\system32\drivers\luafv.sys
Image name: luafv.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 3058FDDC (This is a reproducible build file hash, not a timestamp)
CheckSum: 00033547
ImageSize: 0002C000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`7ced0000 fffff800`7cf08000 wcifs (deferred)
Image path: \SystemRoot\system32\drivers\wcifs.sys
Image name: wcifs.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 669B7705 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00046A88
ImageSize: 00038000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`7cf10000 fffff800`7cf95000 cldflt (deferred)
Image path: \SystemRoot\system32\drivers\cldflt.sys
Image name: cldflt.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 9B6ECA3C (This is a reproducible build file hash, not a timestamp)
CheckSum: 000856F2
ImageSize: 00085000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`7cfa0000 fffff800`7cfba000 storqosflt (deferred)
Image path: \SystemRoot\system32\drivers\storqosflt.sys
Image name: storqosflt.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 25F123C9 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000260D6
ImageSize: 0001A000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`7cfc0000 fffff800`7cfe9000 bindflt (deferred)
Image path: \SystemRoot\system32\drivers\bindflt.sys
Image name: bindflt.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: C1781578 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00035DE7
ImageSize: 00029000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`7cff0000 fffff800`7cffb000 umpass (deferred)
Image path: \SystemRoot\System32\drivers\umpass.sys
Image name: umpass.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 413224A3 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00015C45
ImageSize: 0000B000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`7d000000 fffff800`7d018000 mslldp (deferred)
Image path: \SystemRoot\system32\drivers\mslldp.sys
Image name: mslldp.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: F7A73DC1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00022C25
ImageSize: 00018000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`7d020000 fffff800`7d075000 WUDFRd (deferred)
Image path: \SystemRoot\System32\drivers\WUDFRd.sys
Image name: WUDFRd.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 0C26F559 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000585E1
ImageSize: 00055000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`7d080000 fffff800`7d08b000 mshidumdf (deferred)
Image path: \SystemRoot\System32\drivers\mshidumdf.sys
Image name: mshidumdf.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: D3979F8E (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000CE61
ImageSize: 0000B000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`7d090000 fffff800`7d0ab000 mpsdrv (deferred)
Image path: \SystemRoot\System32\drivers\mpsdrv.sys
Image name: mpsdrv.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 340730AF (This is a reproducible build file hash, not a timestamp)
CheckSum: 00024B39
ImageSize: 0001B000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`7d0b0000 fffff800`7d0c8000 lltdio (deferred)
Image path: \SystemRoot\system32\drivers\lltdio.sys
Image name: lltdio.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 281A4957 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00021191
ImageSize: 00018000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`7d0d0000 fffff800`7d0ee000 NDivert (deferred)
Image path: \??\C:\Program Files\NordVPN\6.44.5.0\Drivers\NDivert.sys
Image name: NDivert.sys
Browse all global symbols functions data
Timestamp: Thu Jan 27 11:35:17 2022 (61F27565)
CheckSum: 0002BCF3
ImageSize: 0001E000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`7d0f0000 fffff800`7d10d000 wanarp (deferred)
Image path: \SystemRoot\System32\DRIVERS\wanarp.sys
Image name: wanarp.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 19E3B2D4 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000214B2
ImageSize: 0001D000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`7d110000 fffff800`7d12b000 rspndr (deferred)
Image path: \SystemRoot\system32\drivers\rspndr.sys
Image name: rspndr.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 37CA927E (This is a reproducible build file hash, not a timestamp)
CheckSum: 00021884
ImageSize: 0001B000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`7d130000 fffff800`7d19d000 msquic (deferred)
Image path: \SystemRoot\system32\drivers\msquic.sys
Image name: msquic.sys
Browse all global symbols functions data
Timestamp: Thu Dec 1 01:42:53 2022 (6387F88D)
CheckSum: 0007116D
ImageSize: 0006D000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`7d1a0000 fffff800`7d1c6000 bowser (deferred)
Image path: \SystemRoot\system32\DRIVERS\bowser.sys
Image name: bowser.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: D0F5A9D4 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002DC87
ImageSize: 00026000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`7d1d0000 fffff800`7d219000 mrxsmb20 (deferred)
Image path: \SystemRoot\system32\DRIVERS\mrxsmb20.sys
Image name: mrxsmb20.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 416EFC75 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0004F4A6
ImageSize: 00049000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`7d220000 fffff800`7d22d000 WSDPrint (deferred)
Image path: \SystemRoot\System32\drivers\WSDPrint.sys
Image name: WSDPrint.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 27B72F9F (This is a reproducible build file hash, not a timestamp)
CheckSum: 000130D9
ImageSize: 0000D000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`7d230000 fffff800`7d815000 RTKVHD64 (deferred)
Image path: \SystemRoot\system32\drivers\RTKVHD64.sys
Image name: RTKVHD64.sys
Browse all global symbols functions data
Timestamp: Fri Apr 8 06:44:41 2022 (624FBDB9)
CheckSum: 005F2FA7
ImageSize: 005E5000
File version: 6.0.9336.1
Product version: 6.0.9336.1
File flags: 8 (Mask 3F) Private
File OS: 40004 NT Win32
File type: 3.9 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Realtek Semiconductor Corp.
ProductName: Realtek(r) High Definition Audio Function Driver
InternalName: RTKVHD64.sys 9336
OriginalFilename: RTKVHD64.sys
ProductVersion: 6.0.9336.1
FileVersion: 6.0.9336.1 built by: WinDDK
FileDescription: Realtek(r) High Definition Audio Function Driver
LegalCopyright: Copyright (c) Realtek Semiconductor Corp.1998-2013
fffff800`7d820000 fffff800`7d83d000 BTHUSB (deferred)
Image path: \SystemRoot\System32\drivers\BTHUSB.sys
Image name: BTHUSB.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 20B25F12 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002A88A
ImageSize: 0001D000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`7d840000 fffff800`7d9de000 HTTP (deferred)
Image path: \SystemRoot\system32\drivers\HTTP.sys
Image name: HTTP.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 77816301 (This is a reproducible build file hash, not a timestamp)
CheckSum: 001A8496
ImageSize: 0019E000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
fffff800`7d9e0000 fffff800`7d9f4000 mmcss (deferred)
Image path: \SystemRoot\system32\drivers\mmcss.sys
Image name: mmcss.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: CC6D32B1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00015D2C
ImageSize: 00014000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
Unloaded modules:
fffff800`7c6f0000 fffff800`7c713000 BthEnum.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00023000
fffff800`7c860000 fffff800`7c88d000 bthhfenum.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0002D000
fffff800`7c820000 fffff800`7c832000 btampm.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00012000
fffff800`7c910000 fffff800`7c92b000 BthHfAud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0001B000
fffff800`7c840000 fffff800`7c858000 Microsoft.Bluetooth.AvrcpTransport.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00018000
fffff800`7c7a0000 fffff800`7c81d000 BthA2dp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0007D000
fffff800`7c750000 fffff800`7c772000 Microsoft.Bluetooth.Legacy.LEEnumerator.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00022000
fffff800`7cff0000 fffff800`7cffc000 umpass.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000C000
fffff800`7d080000 fffff800`7d08c000 mshidumdf.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000C000
fffff800`7d020000 fffff800`7d076000 WUDFRd.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00056000
fffff800`7c720000 fffff800`7c747000 bthpan.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00027000
fffff800`7c6b0000 fffff800`7c6ed000 rfcomm.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0003D000
fffff800`7c780000 fffff800`7c799000 bthmodem.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00019000
fffff800`71fc0000 fffff800`71fce000 WSDScan.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000E000
fffff800`7d220000 fffff800`7d22e000 WSDPrint.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000E000
fffff800`71fc0000 fffff800`71fce000 WSDScan.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000E000
fffff800`7d220000 fffff800`7d22e000 WSDPrint.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000E000
fffff800`7c6f0000 fffff800`7c713000 BthEnum.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00023000
fffff800`7c860000 fffff800`7c88d000 bthhfenum.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0002D000
fffff800`7c820000 fffff800`7c832000 btampm.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00012000
fffff800`7c910000 fffff800`7c92b000 BthHfAud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0001B000
fffff800`7c840000 fffff800`7c858000 Microsoft.Bluetooth.AvrcpTransport.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00018000
fffff800`7c7a0000 fffff800`7c81d000 BthA2dp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0007D000
fffff800`7c750000 fffff800`7c772000 Microsoft.Bluetooth.Legacy.LEEnumerator.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00022000
fffff800`7cff0000 fffff800`7cffc000 umpass.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000C000
fffff800`7c720000 fffff800`7c747000 bthpan.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00027000
fffff800`7c6b0000 fffff800`7c6ed000 rfcomm.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0003D000
fffff800`7c780000 fffff800`7c799000 bthmodem.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00019000
fffff800`7d080000 fffff800`7d08c000 mshidumdf.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000C000
fffff800`7d020000 fffff800`7d076000 WUDFRd.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00056000
fffff800`6e550000 fffff800`6e55e000 WSDScan.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000E000
fffff800`7d220000 fffff800`7d22e000 WSDPrint.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000E000
fffff800`6e540000 fffff800`6e54e000 WSDScan.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000E000
fffff800`7d220000 fffff800`7d22e000 WSDPrint.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000E000
fffff800`4cb90000 fffff800`4cba1000 dump_storport.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00011000
fffff800`4c5e0000 fffff800`4c7bf000 dump_iaStorAC.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 001DF000
fffff800`4c7e0000 fffff800`4c7fe000 dump_dumpfve.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0001E000
fffff800`61ba0000 fffff800`61bbf000 dam.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0001F000
fffff800`61bc0000 fffff800`61bcf000 KMPDC.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000F000
fffff800`4a990000 fffff800`4a9a1000 WdBoot.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00011000
fffff800`4bd80000 fffff800`4bd92000 hwpolicy.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00012000
fffff800`44520000 fffff800`448a4000 mcupdate.dll
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00384000
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment