Вы находитесь на странице: 1из 65

Microsoft (R) Windows Debugger Version 10.0.10586.

567 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Windows\Minidump\122915-20872-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: srv*
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Machine Name:
Kernel base = 0xfffff800`02c11000 PsLoadedModuleList = 0xfffff800`02e56e90
Debug session time: Tue Dec 29 18:51:40.491 2015 (UTC + 7:00)
System Uptime: 0 days 20:18:23.818
Loading Kernel Symbols
.
Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that t
ake too long.
Run !sym noisy before .reload to track down problems loading symbols.
..............................................................
................................................................
....................................
Loading User Symbols
Loading unloaded module list
.........
*******************************************************************************
*
*
*
Bugcheck Analysis
*
*
*
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck C2, {7, 1097, 4090006, fffffa80076ea890}
GetPointerFromAddress: unable to read from fffff80002ec20e8
Unable to get MmSystemRangeStart
GetPointerFromAddress: unable to read from fffff80002ec20e8
Unable to get MmSystemRangeStart
Probably caused by : Unknown_Image ( ANALYSIS_INCONCLUSIVE )
Followup:
---------

MachineOwner

0: kd> !analyze -v
*******************************************************************************
*
*
*
Bugcheck Analysis
*
*
*
*******************************************************************************
BAD_POOL_CALLER (c2)
The current thread is making a bad pool request. Typically this is at a bad IRQ
L level or double freeing the same allocation, etc.
Arguments:

Arg1:
Arg2:
Arg3:
Arg4:

0000000000000007,
0000000000001097,
0000000004090006,
fffffa80076ea890,

Attempt to free pool which was already freed


(reserved)
Memory contents of the pool block
Address of the block of pool being deallocated

Debugging Details:
-----------------GetPointerFromAddress: unable to read from fffff80002ec20e8
Unable to get MmSystemRangeStart
GetPointerFromAddress: unable to read from fffff80002ec20e8
Unable to get MmSystemRangeStart
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
SYSTEM_MANUFACTURER: TOSHIBA
SYSTEM_PRODUCT_NAME: Satellite C40-A
SYSTEM_SKU: PSCD8Q
SYSTEM_VERSION: PSCD8Q-002001
BIOS_VENDOR: Insyde Corp.
BIOS_VERSION: 1.00
BIOS_DATE: 04/30/2013
BASEBOARD_MANUFACTURER: Type2 - Board Vendor Name1
BASEBOARD_PRODUCT: Type2 - Board Product Name1
BASEBOARD_VERSION: Type2 - Board Version
DUMP_TYPE: 2
BUGCHECK_P1: 7
BUGCHECK_P2: 1097
BUGCHECK_P3: 4090006
BUGCHECK_P4: fffffa80076ea890
POOL_ADDRESS: GetPointerFromAddress: unable to read from fffff80002ec20e8
Unable to get MmSystemRangeStart
fffffa80076ea890
BUGCHECK_STR: 0xc2_7
CPU_COUNT: 4
CPU_MHZ: 9be
CPU_VENDOR: GenuineIntel

CPU_FAMILY: 6
CPU_MODEL: 3a
CPU_STEPPING: 9
CPU_MICROCODE: 6,3a,9,0 (F,M,S,R) SIG: 17'00000000 (cache) 17'00000000 (init)
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: System
CURRENT_IRQL: 2
ANALYSIS_SESSION_HOST: ISTIQOMAHI7
ANALYSIS_SESSION_TIME: 12-29-2015 22:26:23.0956
ANALYSIS_VERSION: 10.0.10586.567 amd64fre
BAD_STACK_POINTER: 0000000000000000
IP_IN_FREE_BLOCK: 0
LAST_CONTROL_TRANSFER: from 0000000000000000 to 0000000000000000
STACK_TEXT:
00000000`00000000 00000000`00000000 : 00000000`00000000 00000000`00000000 000000
00`00000000 00000000`00000000 : 0x0
STACK_COMMAND: kb
SYMBOL_NAME: ANALYSIS_INCONCLUSIVE
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: Unknown_Module
IMAGE_NAME: Unknown_Image
DEBUG_FLR_IMAGE_TIMESTAMP: 0
IMAGE_VERSION:
BUCKET_ID: INVALID_KERNEL_CONTEXT_0xc2_7
DEFAULT_BUCKET_ID: INVALID_KERNEL_CONTEXT_0xc2_7
PRIMARY_PROBLEM_CLASS: INVALID_KERNEL_CONTEXT
FAILURE_BUCKET_ID: INVALID_KERNEL_CONTEXT_0xc2_7
TARGET_TIME: 2015-12-29T11:51:40.000Z
OSBUILD: 7601
OSSERVICEPACK: 1000

SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 272
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 7
OSEDITION: Windows 7 WinNt (Service Pack 1) TerminalServer SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 2010-11-20 16:30:02
BUILDDATESTAMP_STR: 101119-1850
BUILDLAB_STR: win7sp1_rtm
BUILDOSVER_STR: 6.1.7601.17514.amd64fre.win7sp1_rtm.101119-1850
ANALYSIS_SESSION_ELAPSED_TIME: 483
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:invalid_kernel_context_0xc2_7
FAILURE_ID_HASH: {74a6791c-293f-cb52-2363-2915348f73bd}
Followup:
---------

MachineOwner

0: kd> g
^ No runnable debuggees error in 'g'
0: kd> !analyze -v
*******************************************************************************
*
*
*
Bugcheck Analysis
*
*
*
*******************************************************************************
BAD_POOL_CALLER (c2)
The current thread is making a bad pool request. Typically this is at a bad IRQ
L level or double freeing the same allocation, etc.
Arguments:
Arg1: 0000000000000007, Attempt to free pool which was already freed
Arg2: 0000000000001097, (reserved)
Arg3: 0000000004090006, Memory contents of the pool block
Arg4: fffffa80076ea890, Address of the block of pool being deallocated
Debugging Details:
-----------------GetPointerFromAddress: unable to read from fffff80002ec20e8
Unable to get MmSystemRangeStart

GetPointerFromAddress: unable to read from fffff80002ec20e8


Unable to get MmSystemRangeStart
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
SYSTEM_MANUFACTURER: TOSHIBA
SYSTEM_PRODUCT_NAME: Satellite C40-A
SYSTEM_SKU: PSCD8Q
SYSTEM_VERSION: PSCD8Q-002001
BIOS_VENDOR: Insyde Corp.
BIOS_VERSION: 1.00
BIOS_DATE: 04/30/2013
BASEBOARD_MANUFACTURER: Type2 - Board Vendor Name1
BASEBOARD_PRODUCT: Type2 - Board Product Name1
BASEBOARD_VERSION: Type2 - Board Version
DUMP_TYPE: 2
BUGCHECK_P1: 7
BUGCHECK_P2: 1097
BUGCHECK_P3: 4090006
BUGCHECK_P4: fffffa80076ea890
POOL_ADDRESS: GetPointerFromAddress: unable to read from fffff80002ec20e8
Unable to get MmSystemRangeStart
fffffa80076ea890
BUGCHECK_STR: 0xc2_7
CPU_COUNT: 4
CPU_MHZ: 9be
CPU_VENDOR: GenuineIntel
CPU_FAMILY: 6
CPU_MODEL: 3a
CPU_STEPPING: 9
CPU_MICROCODE: 6,3a,9,0 (F,M,S,R) SIG: 17'00000000 (cache) 17'00000000 (init)
CUSTOMER_CRASH_COUNT: 1

PROCESS_NAME: System
CURRENT_IRQL: 2
ANALYSIS_SESSION_HOST: ISTIQOMAHI7
ANALYSIS_SESSION_TIME: 12-29-2015 22:28:42.0063
ANALYSIS_VERSION: 10.0.10586.567 amd64fre
BAD_STACK_POINTER: 0000000000000000
IP_IN_FREE_BLOCK: 0
LAST_CONTROL_TRANSFER: from 0000000000000000 to 0000000000000000
STACK_TEXT:
00000000`00000000 00000000`00000000 : 00000000`00000000 00000000`00000000 000000
00`00000000 00000000`00000000 : 0x0
STACK_COMMAND: kb
SYMBOL_NAME: ANALYSIS_INCONCLUSIVE
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: Unknown_Module
IMAGE_NAME: Unknown_Image
DEBUG_FLR_IMAGE_TIMESTAMP: 0
IMAGE_VERSION:
BUCKET_ID: INVALID_KERNEL_CONTEXT_0xc2_7
DEFAULT_BUCKET_ID: INVALID_KERNEL_CONTEXT_0xc2_7
PRIMARY_PROBLEM_CLASS: INVALID_KERNEL_CONTEXT
FAILURE_BUCKET_ID: INVALID_KERNEL_CONTEXT_0xc2_7
TARGET_TIME: 2015-12-29T11:51:40.000Z
OSBUILD: 7601
OSSERVICEPACK: 1000
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 272
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64

OSNAME: Windows 7
OSEDITION: Windows 7 WinNt (Service Pack 1) TerminalServer SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 2010-11-20 16:30:02
BUILDDATESTAMP_STR: 101119-1850
BUILDLAB_STR: win7sp1_rtm
BUILDOSVER_STR: 6.1.7601.17514.amd64fre.win7sp1_rtm.101119-1850
ANALYSIS_SESSION_ELAPSED_TIME: 418
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:invalid_kernel_context_0xc2_7
FAILURE_ID_HASH: {74a6791c-293f-cb52-2363-2915348f73bd}
Followup:
---------

MachineOwner

0: kd> lmvm Unknown_Module


Browse full module list
start
end
module name
0: kd> lmDv
start
end
module name
fffff800`00bb3000 fffff800`00bbd000 kdcom
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\kdcom.dll\4A5BDFDBa000\kdcom.dll
Image path: kdcom.dll
Image name: kdcom.dll
Browse all global symbols functions data
Timestamp:
Tue Jul 14 08:31:07 2009 (4A5BDFDB)
CheckSum:
00009363
ImageSize:
0000A000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.A Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
kdcom.dll
OriginalFilename: kdcom.dll
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: Serial Kernel Debugger
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff800`02c11000 fffff800`031fb000 nt
(pdb symbols)
C:\Progr
am Files (x86)\Windows Kits\10\Debuggers\x64\sym\ntkrnlmp.pdb\3844DBB920174967BE
7AA4A2C20430FA2\ntkrnlmp.pdb
Loaded symbol image file: ntkrnlmp.exe

Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x


64\sym\ntkrnlmp.exe\4CE7951A5ea000\ntkrnlmp.exe
Image path: ntkrnlmp.exe
Image name: ntkrnlmp.exe
Browse all global symbols functions data
Timestamp:
Sat Nov 20 16:30:02 2010 (4CE7951A)
CheckSum:
0055CE0C
ImageSize:
005EA000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
1.0 App
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
ntkrnlmp.exe
OriginalFilename: ntkrnlmp.exe
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: NT Kernel & System
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff800`031fb000 fffff800`03244000 hal
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\hal.dll\4CE7C66949000\hal.dll
Image path: hal.dll
Image name: hal.dll
Browse all global symbols functions data
Timestamp:
Sat Nov 20 20:00:25 2010 (4CE7C669)
CheckSum:
000404C3
ImageSize:
00049000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
2.0 Dll
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
hal.dll
OriginalFilename: hal.dll
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: Hardware Abstraction Layer DLL
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`00c00000 fffff880`00c10000 PCIIDEX
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\PCIIDEX.SYS\4A5BC11410000\PCIIDEX.SYS
Image path: PCIIDEX.SYS
Image name: PCIIDEX.SYS
Browse all global symbols functions data
Timestamp:
Tue Jul 14 06:19:48 2009 (4A5BC114)
CheckSum:
00019CC5
ImageSize:
00010000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32

File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0000.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
pciidex.sys
OriginalFilename: pciidex.sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: PCI IDE Bus Driver Extension
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`00c16000 fffff880`00c65000 mcupdate (deferred)
Image path: mcupdate.dll
Image name: mcupdate.dll
Browse all global symbols functions data
Timestamp:
Sat Nov 20 20:03:51 2010 (4CE7C737)
CheckSum:
0004F97E
ImageSize:
0004F000
Translations:
0000.04b0 0000.04e4 0409.04b0 0409.04e4
fffff880`00c65000 fffff880`00c79000 PSHED
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\PSHED.dll\4A5BE02714000\PSHED.dll
Image path: PSHED.dll
Image name: PSHED.dll
Browse all global symbols functions data
Timestamp:
Tue Jul 14 08:32:23 2009 (4A5BE027)
CheckSum:
0000F762
ImageSize:
00014000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
pshed.dll
OriginalFilename: pshed.dll
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: Platform Specific Hardware Error Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`00c79000 fffff880`00cd7000 CLFS
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\CLFS.SYS\4A5BC11D5e000\CLFS.SYS
Image path: CLFS.SYS
Image name: CLFS.SYS
Browse all global symbols functions data
Timestamp:
Tue Jul 14 06:19:57 2009 (4A5BC11D)
CheckSum:
00065C46
ImageSize:
0005E000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0000.04b0
CompanyName:
Microsoft Corporation

ProductName:
Microsoft Windows Operating System
InternalName:
clfs.sys
OriginalFilename: Clfs.Sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: Common Log File System Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`00cd7000 fffff880`00d97000 CI
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\CI.dll\4CE7C944c0000\CI.dll
Image path: CI.dll
Image name: CI.dll
Browse all global symbols functions data
Timestamp:
Sat Nov 20 20:12:36 2010 (4CE7C944)
CheckSum:
000CB0F6
ImageSize:
000C0000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
ci.dll
OriginalFilename: ci.dll
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: Code Integrity Module
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`00d97000 fffff880`00df3000 volmgrx
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\volmgrx.sys\4CE792EB5c000\volmgrx.sys
Image path: volmgrx.sys
Image name: volmgrx.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 16:20:43 2010 (4CE792EB)
CheckSum:
00065F6D
ImageSize:
0005C000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
volmgrx.sys
OriginalFilename: volmgrx.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: Volume Manager Extension Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`00df3000 fffff880`00dfe000 msahci
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\msahci.sys\4CE7A416b000\msahci.sys
Image path: msahci.sys
Image name: msahci.sys

Browse all global symbols functions data


Timestamp:
Sat Nov 20 17:33:58 2010 (4CE7A416)
CheckSum:
00017292
ImageSize:
0000B000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
msahci.sys
OriginalFilename: msahci.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: MS AHCI 1.0 Standard Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`00e00000 fffff880`00e0c000 BATTC
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\BATTC.SYS\4A5BC3B5c000\BATTC.SYS
Image path: BATTC.SYS
Image name: BATTC.SYS
Browse all global symbols functions data
Timestamp:
Tue Jul 14 06:31:01 2009 (4A5BC3B5)
CheckSum:
000083B1
ImageSize:
0000C000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0000.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
battc.sys
OriginalFilename: battc.sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: Battery Class Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`00e0c000 fffff880`00e21000 volmgr
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\volmgr.sys\4CE792A015000\volmgr.sys
Image path: volmgr.sys
Image name: volmgr.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 16:19:28 2010 (4CE792A0)
CheckSum:
00019F72
ImageSize:
00015000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation

ProductName:
Microsoft Windows Operating System
InternalName:
volmgr.sys
OriginalFilename: volmgr.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: Volume Manager Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`00e21000 fffff880`00e3b000 mountmgr (deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\mountmgr.sys\4CE792991a000\mountmgr.sys
Image path: mountmgr.sys
Image name: mountmgr.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 16:19:21 2010 (4CE79299)
CheckSum:
00022621
ImageSize:
0001A000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
mountmgr.sys
OriginalFilename: mountmgr.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: Mount Point Manager
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`00e3b000 fffff880`00e44000 atapi
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\atapi.sys\4A5BC1139000\atapi.sys
Image path: atapi.sys
Image name: atapi.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 06:19:47 2009 (4A5BC113)
CheckSum:
000065BB
ImageSize:
00009000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
atapi.sys
OriginalFilename: atapi.sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: ATAPI IDE Miniport Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`00e44000 fffff880`00e6e000 ataport
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\ataport.SYS\4CE792932a000\ataport.SYS
Image path: ataport.SYS
Image name: ataport.SYS

Browse all global symbols functions data


Timestamp:
Sat Nov 20 16:19:15 2010 (4CE79293)
CheckSum:
000287EF
ImageSize:
0002A000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0000.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
ataport.sys
OriginalFilename: ataport.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: ATAPI Driver Extension
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`00e75000 fffff880`00f19000 Wdf01000 (deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\Wdf01000.sys\4A5BC19Fa4000\Wdf01000.sys
Image path: Wdf01000.sys
Image name: Wdf01000.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 06:22:07 2009 (4A5BC19F)
CheckSum:
000A2E74
ImageSize:
000A4000
File version:
1.9.7600.16385
Product version: 1.9.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
wdf01000.sys
OriginalFilename: wdf01000.sys
ProductVersion: 1.9.7600.16385
FileVersion:
1.9.7600.16385 (win7_rtm.090713-1255)
FileDescription: Kernel Mode Driver Framework Runtime
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`00f19000 fffff880`00f28000 WDFLDR
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\WDFLDR.SYS\4A5BC11Af000\WDFLDR.SYS
Image path: WDFLDR.SYS
Image name: WDFLDR.SYS
Browse all global symbols functions data
Timestamp:
Tue Jul 14 06:19:54 2009 (4A5BC11A)
CheckSum:
00011010
ImageSize:
0000F000
File version:
1.9.7600.16385
Product version: 1.9.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0000.04b0
CompanyName:
Microsoft Corporation

ProductName:
Microsoft Windows Operating System
InternalName:
wdfldr.sys
OriginalFilename: wdfldr.sys
ProductVersion: 1.9.7600.16385
FileVersion:
1.9.7600.16385 (win7_rtm.090713-1255)
FileDescription: Kernel Mode Driver Framework Loader
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`00f28000 fffff880`00f7f000 ACPI
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\ACPI.sys\4CE7929457000\ACPI.sys
Image path: ACPI.sys
Image name: ACPI.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 16:19:16 2010 (4CE79294)
CheckSum:
0005ACF6
ImageSize:
00057000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
ACPI.sys
OriginalFilename: ACPI.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: ACPI Driver for NT
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`00f7f000 fffff880`00f88000 WMILIB
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\WMILIB.SYS\4A5BC1179000\WMILIB.SYS
Image path: WMILIB.SYS
Image name: WMILIB.SYS
Browse all global symbols functions data
Timestamp:
Tue Jul 14 06:19:51 2009 (4A5BC117)
CheckSum:
00005007
ImageSize:
00009000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
WmiLib.sys
OriginalFilename: WmiLib.sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: WMILIB WMI support library Dll
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`00f88000 fffff880`00f92000 msisadrv (deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\msisadrv.sys\4A5BC0FEa000\msisadrv.sys
Image path: msisadrv.sys
Image name: msisadrv.sys

Browse all global symbols functions data


Timestamp:
Tue Jul 14 06:19:26 2009 (4A5BC0FE)
CheckSum:
0001320D
ImageSize:
0000A000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
msisadrv.sys
OriginalFilename: msisadrv.sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: ISA Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`00f92000 fffff880`00fc5000 pci
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\pci.sys\4CE7928F33000\pci.sys
Image path: pci.sys
Image name: pci.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 16:19:11 2010 (4CE7928F)
CheckSum:
00033150
ImageSize:
00033000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
2.0 Dll
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
pci.sys
OriginalFilename: pci.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: NT Plug and Play PCI Enumerator
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`00fc5000 fffff880`00fd2000 vdrvroot (deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\vdrvroot.sys\4A5BCADBd000\vdrvroot.sys
Image path: vdrvroot.sys
Image name: vdrvroot.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 07:01:31 2009 (4A5BCADB)
CheckSum:
0000C04B
ImageSize:
0000D000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
2.0 Dll
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation

ProductName:
Microsoft Windows Operating System
InternalName:
vdrvroot.sys
OriginalFilename: vdrvroot.sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: Virtual Drive Root Enumerator
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`00fd2000 fffff880`00fdc000 iusb3hcs (deferred)
Image path: iusb3hcs.sys
Image name: iusb3hcs.sys
Browse all global symbols functions data
Timestamp:
Tue Dec 04 20:19:34 2012 (50BDF866)
CheckSum:
000093E4
ImageSize:
0000A000
Translations:
0000.04b0 0000.04e4 0409.04b0 0409.04e4
fffff880`00fdc000 fffff880`00ff1000 partmgr
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\partmgr.sys\4CE792C015000\partmgr.sys
Image path: partmgr.sys
Image name: partmgr.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 16:20:00 2010 (4CE792C0)
CheckSum:
000209B5
ImageSize:
00015000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0000.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
partmgr.sys
OriginalFilename: partmgr.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: Partition Management Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`00ff1000 fffff880`00ffa000 compbatt (deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\compbatt.sys\4A5BC3B69000\compbatt.sys
Image path: compbatt.sys
Image name: compbatt.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 06:31:02 2009 (4A5BC3B6)
CheckSum:
000080E2
ImageSize:
00009000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
compbatt.sys
OriginalFilename: compbatt.sys
ProductVersion: 6.1.7600.16385

FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: Composite Battery Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`01017000 fffff880`01022000 amdxata
(deferred)
Image path: amdxata.sys
Image name: amdxata.sys
Browse all global symbols functions data
Timestamp:
Fri Mar 19 23:18:18 2010 (4BA3A3CA)
CheckSum:
0000D0AE
ImageSize:
0000B000
Translations:
0000.04b0 0000.04e4 0409.04b0 0409.04e4
fffff880`01022000 fffff880`0106e000 fltmgr
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\fltmgr.sys\4CE7929C4c000\fltmgr.sys
Image path: fltmgr.sys
Image name: fltmgr.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 16:19:24 2010 (4CE7929C)
CheckSum:
0005452D
ImageSize:
0004C000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
fltMgr.sys
OriginalFilename: fltMgr.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: Microsoft Filesystem Filter Manager
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`0106e000 fffff880`01082000 fileinfo (deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\fileinfo.sys\4A5BC48114000\fileinfo.sys
Image path: fileinfo.sys
Image name: fileinfo.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 06:34:25 2009 (4A5BC481)
CheckSum:
00015644
ImageSize:
00014000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
FileInfo.sys
OriginalFilename: FileInfo.sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: FileInfo Filter Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`01082000 fffff880`010c6000 MpFilter (deferred)

Image path: MpFilter.sys


Image name: MpFilter.sys
Browse all global symbols functions data
Timestamp:
Fri Feb 27 07:21:20 2015 (54EFB880)
CheckSum:
00049605
ImageSize:
00044000
Translations:
0000.04b0 0000.04e4 0409.04b0 0409.04e4
fffff880`010c6000 fffff880`01124000 msrpc
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\msrpc.sys\4CE793345e000\msrpc.sys
Image path: msrpc.sys
Image name: msrpc.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 16:21:56 2010 (4CE79334)
CheckSum:
0005E9E7
ImageSize:
0005E000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
krpcdd.sys
OriginalFilename: krpcdd.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: Kernel Remote Procedure Call Provider
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`01124000 fffff880`01196000 cng
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\cng.sys\4CE79E2D72000\cng.sys
Image path: cng.sys
Image name: cng.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 17:08:45 2010 (4CE79E2D)
CheckSum:
00078106
ImageSize:
00072000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
cng.sys
OriginalFilename: cng.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: Kernel Cryptography, Next Generation
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`01196000 fffff880`011a7000 Npfs
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\Npfs.SYS\4A5BC11411000\Npfs.SYS
Image path: Npfs.SYS
Image name: Npfs.SYS

Browse all global symbols functions data


Timestamp:
Tue Jul 14 06:19:48 2009 (4A5BC114)
CheckSum:
00019AED
ImageSize:
00011000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
npfs.sys
OriginalFilename: npfs.sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: NPFS Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`011a7000 fffff880`011d4280 usbvideo (deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\usbvideo.sys\4CE7A6922d280\usbvideo.sys
Image path: usbvideo.sys
Image name: usbvideo.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 17:44:34 2010 (4CE7A692)
CheckSum:
0002F4A8
ImageSize:
0002D280
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.0 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
usbvideo.sys
OriginalFilename: usbvideo.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: USB Video Class Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`011d5000 fffff880`011f6000 WudfPf
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\WudfPf.sys\4CE7A62421000\WudfPf.sys
Image path: WudfPf.sys
Image name: WudfPf.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 17:42:44 2010 (4CE7A624)
CheckSum:
00021FC8
ImageSize:
00021000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0000.04b0
CompanyName:
Microsoft Corporation

ProductName:
Microsoft Windows Operating System
InternalName:
WUDFPf.sys
OriginalFilename: WUDFPf.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: Windows Driver Foundation - User-mode Driver Framework Pla
tform Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`01200000 fffff880`01211000 pcw
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\pcw.sys\4A5BC0FF11000\pcw.sys
Image path: pcw.sys
Image name: pcw.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 06:19:27 2009 (4A5BC0FF)
CheckSum:
00014B5E
ImageSize:
00011000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.8 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
pcw.sys
OriginalFilename: pcw.sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: Performance Counters for Windows Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`01211000 fffff880`0121b000 Fs_Rec
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\Fs_Rec.sys\4A5BC111a000\Fs_Rec.sys
Image path: Fs_Rec.sys
Image name: Fs_Rec.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 06:19:45 2009 (4A5BC111)
CheckSum:
0001398A
ImageSize:
0000A000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
fs_rec.sys
OriginalFilename: fs_rec.sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: File System Recognizer Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`0121b000 fffff880`01226000 Msfs
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\Msfs.SYS\4A5BC113b000\Msfs.SYS
Image path: Msfs.SYS

Image name: Msfs.SYS


Browse all global symbols functions data
Timestamp:
Tue Jul 14 06:19:47 2009 (4A5BC113)
CheckSum:
00007126
ImageSize:
0000B000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
MSFS.SYS
OriginalFilename: MSFS.SYS
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: Mailslot driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`01236000 fffff880`013d9000 Ntfs
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\Ntfs.sys\4CE792F91a3000\Ntfs.sys
Image path: Ntfs.sys
Image name: Ntfs.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 16:20:57 2010 (4CE792F9)
CheckSum:
001987CC
ImageSize:
001A3000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
ntfs.sys
OriginalFilename: ntfs.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: NT File System Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`013d9000 fffff880`013f4000 ksecdd
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\ksecdd.sys\4CE7930B1b000\ksecdd.sys
Image path: ksecdd.sys
Image name: ksecdd.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 16:21:15 2010 (4CE7930B)
CheckSum:
0001E184
ImageSize:
0001B000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0

CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
ksecdd.sys
OriginalFilename: ksecdd.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: Kernel Security Support Provider Interface
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`01400000 fffff880`01460000 NETIO
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\NETIO.SYS\4CE7938160000\NETIO.SYS
Image path: NETIO.SYS
Image name: NETIO.SYS
Browse all global symbols functions data
Timestamp:
Sat Nov 20 16:23:13 2010 (4CE79381)
CheckSum:
00066D17
ImageSize:
00060000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.6 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
netio.sys
OriginalFilename: netio.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: Network I/O Subsystem
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`01460000 fffff880`0148b000 ksecpkg
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\ksecpkg.sys\4CE79E9A2b000\ksecpkg.sys
Image path: ksecpkg.sys
Image name: ksecpkg.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 17:10:34 2010 (4CE79E9A)
CheckSum:
00030EDB
ImageSize:
0002B000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
ksecpkg.sys
OriginalFilename: ksecpkg.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: Kernel Security Support Provider Interface Packages
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`0148b000 fffff880`014b5000 cdrom
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\cdrom.sys\4CE792982a000\cdrom.sys
Image path: cdrom.sys

Image name: cdrom.sys


Browse all global symbols functions data
Timestamp:
Sat Nov 20 16:19:20 2010 (4CE79298)
CheckSum:
0002B742
ImageSize:
0002A000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0000.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
cdrom.sys
OriginalFilename: cdrom.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: SCSI CD-ROM Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`014b5000 fffff880`014be000 rdprefmp (deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\rdprefmp.sys\4A5BCE639000\rdprefmp.sys
Image path: rdprefmp.sys
Image name: rdprefmp.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 07:16:35 2009 (4A5BCE63)
CheckSum:
0000ABCD
ImageSize:
00009000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.4 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
RDPREFMP.SYS
OriginalFilename: RDPREFMP.SYS
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: RDP Reflector Driver Miniport
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`014c8000 fffff880`015bb000 ndis
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\ndis.sys\4CE79392f3000\ndis.sys
Image path: ndis.sys
Image name: ndis.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 16:23:30 2010 (4CE79392)
CheckSum:
000E8AC1
ImageSize:
000F3000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.6 Driver
File date:
00000000.00000000
Translations:
0409.04b0

CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
NDIS.SYS
OriginalFilename: NDIS.SYS
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: NDIS 6.20 driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`015bb000 fffff880`015e0000 VIDEOPRT (deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\VIDEOPRT.SYS\4A5BC58B25000\VIDEOPRT.SYS
Image path: VIDEOPRT.SYS
Image name: VIDEOPRT.SYS
Browse all global symbols functions data
Timestamp:
Tue Jul 14 06:38:51 2009 (4A5BC58B)
CheckSum:
00028FC7
ImageSize:
00025000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.4 Driver
File date:
00000000.00000000
Translations:
0000.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
videoprt.sys
OriginalFilename: videoprt.sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: Video Port Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`015e0000 fffff880`015f0000 watchdog (deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\watchdog.sys\4A5BC53F10000\watchdog.sys
Image path: watchdog.sys
Image name: watchdog.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 06:37:35 2009 (4A5BC53F)
CheckSum:
00019CBE
ImageSize:
00010000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
2.0 Dll
File date:
00000000.00000000
Translations:
0000.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
watchdog.sys
OriginalFilename: watchdog.sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: Watchdog Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`015f0000 fffff880`015f9000 rdpencdd (deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\rdpencdd.sys\4A5BCE629000\rdpencdd.sys
Image path: rdpencdd.sys

Image name: rdpencdd.sys


Browse all global symbols functions data
Timestamp:
Tue Jul 14 07:16:34 2009 (4A5BCE62)
CheckSum:
000074D5
ImageSize:
00009000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.4 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
RDPENCDD.SYS
OriginalFilename: RDPENCDD.SYS
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: RDP Encoder Miniport
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`01613000 fffff880`0161c000 Null
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\Null.SYS\4A5BC1099000\Null.SYS
Image path: Null.SYS
Image name: Null.SYS
Browse all global symbols functions data
Timestamp:
Tue Jul 14 06:19:37 2009 (4A5BC109)
CheckSum:
0000E9DB
ImageSize:
00009000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
null.sys
OriginalFilename: null.sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: NULL Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`0161c000 fffff880`01623000 Beep
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\Beep.SYS\4A5BCA8D7000\Beep.SYS
Image path: Beep.SYS
Image name: Beep.SYS
Browse all global symbols functions data
Timestamp:
Tue Jul 14 07:00:13 2009 (4A5BCA8D)
CheckSum:
000036EB
ImageSize:
00007000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0

CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
beep.sys
OriginalFilename: beep.sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: BEEP Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`01623000 fffff880`0162c000 RDPCDD
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\RDPCDD.sys\4A5BCE629000\RDPCDD.sys
Image path: RDPCDD.sys
Image name: RDPCDD.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 07:16:34 2009 (4A5BCE62)
CheckSum:
0000FFAC
ImageSize:
00009000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.4 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
RDPCDD.SYS
OriginalFilename: RDPCDD.SYS
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: RDP Miniport
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`0162d000 fffff880`01831000 tcpip
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\tcpip.sys\4CE79420204000\tcpip.sys
Image path: tcpip.sys
Image name: tcpip.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 16:25:52 2010 (4CE79420)
CheckSum:
001E58E5
ImageSize:
00204000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.6 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
tcpip.sys
OriginalFilename: tcpip.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: TCP/IP Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`01831000 fffff880`0187b000 fwpkclnt (deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\fwpkclnt.sys\4CE793214a000\fwpkclnt.sys
Image path: fwpkclnt.sys

Image name: fwpkclnt.sys


Browse all global symbols functions data
Timestamp:
Sat Nov 20 16:21:37 2010 (4CE79321)
CheckSum:
0004AB00
ImageSize:
0004A000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
2.0 Dll
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
fwpkclnt.sys
OriginalFilename: fwpkclnt.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: FWP/IPsec Kernel-Mode API
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`0187b000 fffff880`0188b000 vmstorfl (deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\vmstorfl.sys\4CE79B8A10000\vmstorfl.sys
Image path: vmstorfl.sys
Image name: vmstorfl.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 16:57:30 2010 (4CE79B8A)
CheckSum:
0000ED21
ImageSize:
00010000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
vmstorfl.sys
OriginalFilename: vmstorfl.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: Virtual Storage Filter Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`0188b000 fffff880`01893000 wd
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\wd.sys\4A5BC11B8000\wd.sys
Image path: wd.sys
Image name: wd.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 06:19:55 2009 (4A5BC11B)
CheckSum:
0000F36B
ImageSize:
00008000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0000.04b0

CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
wd.sys
OriginalFilename: wd.sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: Microsoft Watchdog Timer Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`01893000 fffff880`018df000 volsnap
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\volsnap.sys\4CE792C84c000\volsnap.sys
Image path: volsnap.sys
Image name: volsnap.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 16:20:08 2010 (4CE792C8)
CheckSum:
000527ED
ImageSize:
0004C000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
volsnap.sys
OriginalFilename: volsnap.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: Volume Shadow Copy Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`018df000 fffff880`018e3e00 TVALZ_O
(deferred)
Image path: TVALZ_O.SYS
Image name: TVALZ_O.SYS
Browse all global symbols functions data
Timestamp:
Tue Jul 14 09:19:26 2009 (4A5BEB2E)
CheckSum:
0000A8D5
ImageSize:
00004E00
Translations:
0000.04b0 0000.04e4 0409.04b0 0409.04e4
fffff880`018e4000 fffff880`018ec000 spldr
(deferred)
Image path: spldr.sys
Image name: spldr.sys
Browse all global symbols functions data
Timestamp:
Mon May 11 23:56:27 2009 (4A0858BB)
CheckSum:
0000E0E9
ImageSize:
00008000
Translations:
0000.04b0 0000.04e4 0409.04b0 0409.04e4
fffff880`018ec000 fffff880`01926000 rdyboost (deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\rdyboost.sys\4CE7982E3a000\rdyboost.sys
Image path: rdyboost.sys
Image name: rdyboost.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 16:43:10 2010 (4CE7982E)
CheckSum:
00037356
ImageSize:
0003A000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)

File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0000.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
rdyboost.sys
OriginalFilename: rdyboost.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: ReadyBoost Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`01926000 fffff880`01930000 nvpciflt (deferred)
Image path: nvpciflt.sys
Image name: nvpciflt.sys
Browse all global symbols functions data
Timestamp:
Thu Mar 07 16:01:32 2013 (5138576C)
CheckSum:
0000BB12
ImageSize:
0000A000
Translations:
0000.04b0 0000.04e4 0409.04b0 0409.04e4
fffff880`01930000 fffff880`01942000 mup
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\mup.sys\4A5BC20112000\mup.sys
Image path: mup.sys
Image name: mup.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 06:23:45 2009 (4A5BC201)
CheckSum:
00015DFD
ImageSize:
00012000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.6 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
MUP.SYS
OriginalFilename: MUP.SYS
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: Multiple UNC Provider Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`01942000 fffff880`0194b000 hwpolicy (deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\hwpolicy.sys\4CE7927E9000\hwpolicy.sys
Image path: hwpolicy.sys
Image name: hwpolicy.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 16:18:54 2010 (4CE7927E)
CheckSum:
0000D9F4
ImageSize:
00009000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
2.0 Dll
File date:
00000000.00000000
Translations:
0409.04b0

CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
hwpolicy.sys
OriginalFilename: hwpolicy.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: Hardware Policy Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`0194b000 fffff880`01985000 fvevol
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\fvevol.sys\4CE793B63a000\fvevol.sys
Image path: fvevol.sys
Image name: fvevol.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 16:24:06 2010 (4CE793B6)
CheckSum:
000389BC
ImageSize:
0003A000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0000.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
FVEVOL.SYS
OriginalFilename: FVEVOL.SYS
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: BitLocker Drive Encryption Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`01985000 fffff880`0199b000 disk
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\disk.sys\4A5BC11D16000\disk.sys
Image path: disk.sys
Image name: disk.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 06:19:57 2009 (4A5BC11D)
CheckSum:
0001FF1D
ImageSize:
00016000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0000.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
disk.sys
OriginalFilename: disk.sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: PnP Disk Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`0199b000 fffff880`019cb000 CLASSPNP (deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\CLASSPNP.SYS\4CE7929B30000\CLASSPNP.SYS
Image path: CLASSPNP.SYS

Image name: CLASSPNP.SYS


Browse all global symbols functions data
Timestamp:
Sat Nov 20 16:19:23 2010 (4CE7929B)
CheckSum:
000318BE
ImageSize:
00030000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0000.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
Classpnp.sys
OriginalFilename: Classpnp.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: SCSI Class System Dll
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`019cb000 fffff880`019ee000 luafv
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\luafv.sys\4A5BC29523000\luafv.sys
Image path: luafv.sys
Image name: luafv.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 06:26:13 2009 (4A5BC295)
CheckSum:
00027BF1
ImageSize:
00023000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
luafv.sys
OriginalFilename: luafv.sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: LUA File Virtualization Filter Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`019f0000 fffff880`019fe000 vga
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\vga.sys\4A5BC587e000\vga.sys
Image path: vga.sys
Image name: vga.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 06:38:47 2009 (4A5BC587)
CheckSum:
00013E6F
ImageSize:
0000E000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.4 Driver
File date:
00000000.00000000
Translations:
0000.04b0

CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
vga.sys
OriginalFilename: vga.sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: VGA/Super VGA Video Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`02c00000 fffff880`02c5d000 iusb3hub (deferred)
Image path: iusb3hub.sys
Image name: iusb3hub.sys
Browse all global symbols functions data
Timestamp:
Tue Dec 04 20:17:56 2012 (50BDF804)
CheckSum:
0005D3FD
ImageSize:
0005D000
Translations:
0000.04b0 0000.04e4 0409.04b0 0409.04e4
fffff880`02c5d000 fffff880`02cb3000 IntcDAud (deferred)
Image path: IntcDAud.sys
Image name: IntcDAud.sys
Browse all global symbols functions data
Timestamp:
Tue Dec 06 18:23:07 2011 (4EDDFB1B)
CheckSum:
00057CF8
ImageSize:
00056000
Translations:
0000.04b0 0000.04e4 0409.04b0 0409.04e4
fffff880`02cb3000 fffff880`02cc6000 dump_dumpfve (deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\dumpfve.sys\4A5BC18F13000\dumpfve.sys
Image path: dump_dumpfve.sys
Image name: dump_dumpfve.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 06:21:51 2009 (4A5BC18F)
CheckSum:
00010DEA
ImageSize:
00013000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0000.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
dumpfve.sys
OriginalFilename: dumpfve.sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: Bitlocker Drive Encryption Crashdump Filter
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`02cc7000 fffff880`02d4a000 csc
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\csc.sys\4CE7947083000\csc.sys
Image path: csc.sys
Image name: csc.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 16:27:12 2010 (4CE79470)
CheckSum:
0008519D
ImageSize:
00083000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)

File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
csc.sys
OriginalFilename: CSC.Sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: Windows Client Side Caching Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`02d4a000 fffff880`02d68000 dfsc
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\dfsc.sys\4CE794471e000\dfsc.sys
Image path: dfsc.sys
Image name: dfsc.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 16:26:31 2010 (4CE79447)
CheckSum:
0001D647
ImageSize:
0001E000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
dfsclient.sys
OriginalFilename: dfsclient.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: DFS Namespace Client Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`02d68000 fffff880`02d79000 blbdrive (deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\blbdrive.sys\4A5BC4DF11000\blbdrive.sys
Image path: blbdrive.sys
Image name: blbdrive.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 06:35:59 2009 (4A5BC4DF)
CheckSum:
00019567
ImageSize:
00011000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
blbdrive.sys
OriginalFilename: blbdrive.sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: BLB Drive Driver
LegalCopyright: Microsoft Corporation. All rights reserved.

fffff880`02d79000 fffff880`02d9f000 tunnel


(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\tunnel.sys\4CE7A84626000\tunnel.sys
Image path: tunnel.sys
Image name: tunnel.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 17:51:50 2010 (4CE7A846)
CheckSum:
0002CD96
ImageSize:
00026000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.6 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
tunnel.sys
OriginalFilename: tunnel.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: Microsoft Tunnel Interface Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`02d9f000 fffff880`02de7880 aksusb
(deferred)
Image path: aksusb.sys
Image name: aksusb.sys
Browse all global symbols functions data
Timestamp:
Thu Jun 20 16:43:54 2013 (51C2CEDA)
CheckSum:
0004FF70
ImageSize:
00048880
Translations:
0000.04b0 0000.04e4 0409.04b0 0409.04e4
fffff880`02de8000 fffff880`02df6000 monitor
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\monitor.sys\4A5BC58Ce000\monitor.sys
Image path: monitor.sys
Image name: monitor.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 06:38:52 2009 (4A5BC58C)
CheckSum:
000092BF
ImageSize:
0000E000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
monitor.sys
OriginalFilename: monitor.sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: Monitor Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`03a00000 fffff880`03a16000 vwififlt (deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\vwififlt.sys\4A5BCC3A16000\vwififlt.sys
Image path: vwififlt.sys

Image name: vwififlt.sys


Browse all global symbols functions data
Timestamp:
Tue Jul 14 07:07:22 2009 (4A5BCC3A)
CheckSum:
0001A7DC
ImageSize:
00016000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.6 Driver
File date:
00000000.00000000
Translations:
0000.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
vwififlt.sys
OriginalFilename: vwififlt.sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: Virtual WiFi Filter Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`03a16000 fffff880`03a25000 netbios
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\netbios.sys\4A5BCCB6f000\netbios.sys
Image path: netbios.sys
Image name: netbios.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 07:09:26 2009 (4A5BCCB6)
CheckSum:
00011668
ImageSize:
0000F000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.6 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
NETBIOS.SYS
OriginalFilename: NETBIOS.SYS
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: NetBIOS interface driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`03a25000 fffff880`03a40000 wanarp
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\wanarp.sys\4CE7A8741b000\wanarp.sys
Image path: wanarp.sys
Image name: wanarp.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 17:52:36 2010 (4CE7A874)
CheckSum:
00017CCC
ImageSize:
0001B000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.6 Driver
File date:
00000000.00000000
Translations:
0409.04b0

CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
WANARP.SYS
OriginalFilename: WANARP.SYS
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: MS Remote Access and Routing ARP Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`03a40000 fffff880`03a54000 termdd
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\termdd.sys\4CE7AB0C14000\termdd.sys
Image path: termdd.sys
Image name: termdd.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 18:03:40 2010 (4CE7AB0C)
CheckSum:
00019E15
ImageSize:
00014000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
termdd.sys
OriginalFilename: termdd.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: Remote Desktop Server Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`03a54000 fffff880`03aa5000 rdbss
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\rdbss.sys\4CE7949751000\rdbss.sys
Image path: rdbss.sys
Image name: rdbss.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 16:27:51 2010 (4CE79497)
CheckSum:
0004D76F
ImageSize:
00051000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
rdbss.sys
OriginalFilename: RDBSS.Sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: Redirected Drive Buffering SubSystem Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`03aa5000 fffff880`03ab1000 nsiproxy (deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\nsiproxy.sys\4A5BC15Ec000\nsiproxy.sys
Image path: nsiproxy.sys

Image name: nsiproxy.sys


Browse all global symbols functions data
Timestamp:
Tue Jul 14 06:21:02 2009 (4A5BC15E)
CheckSum:
00013ED5
ImageSize:
0000C000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.6 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
nsiproxy.sys
OriginalFilename: nsiproxy.sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: NSI Proxy
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`03ab1000 fffff880`03abc000 mssmbios (deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\mssmbios.sys\4A5BC3BEb000\mssmbios.sys
Image path: mssmbios.sys
Image name: mssmbios.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 06:31:10 2009 (4A5BC3BE)
CheckSum:
0000F474
ImageSize:
0000B000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
smbios.sys
OriginalFilename: smbios.sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: System Management BIOS Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`03abc000 fffff880`03acb000 discache (deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\discache.sys\4A5BC52Ef000\discache.sys
Image path: discache.sys
Image name: discache.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 06:37:18 2009 (4A5BC52E)
CheckSum:
00015F3F
ImageSize:
0000F000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
2.0 Dll
File date:
00000000.00000000
Translations:
0409.04b0

CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
syscache.sys
OriginalFilename: syscache.sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: System Indexer/Cache Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`03acb000 fffff880`03ae8000 usbccgp
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\usbccgp.sys\4CE7A6731d000\usbccgp.sys
Image path: usbccgp.sys
Image name: usbccgp.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 17:44:03 2010 (4CE7A673)
CheckSum:
00018A13
ImageSize:
0001D000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
2.0 Dll
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
USBCCGP.SYS
OriginalFilename: USBCCGP.SYS
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: USB Common Class Generic Parent Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`03aef000 fffff880`03b78000 afd
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\afd.sys\4CE7938F89000\afd.sys
Image path: afd.sys
Image name: afd.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 16:23:27 2010 (4CE7938F)
CheckSum:
00080AE9
ImageSize:
00089000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
afd.sys
OriginalFilename: afd.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: Ancillary Function Driver for WinSock
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`03b78000 fffff880`03b85000 TDI
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\TDI.SYS\4CE7933Ed000\TDI.SYS
Image path: TDI.SYS

Image name: TDI.SYS


Browse all global symbols functions data
Timestamp:
Sat Nov 20 16:22:06 2010 (4CE7933E)
CheckSum:
00016255
ImageSize:
0000D000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.6 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
tdi.sys
OriginalFilename: tdi.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: TDI Wrapper
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`03b85000 fffff880`03bca000 netbt
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\netbt.sys\4CE7938645000\netbt.sys
Image path: netbt.sys
Image name: netbt.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 16:23:18 2010 (4CE79386)
CheckSum:
00041134
ImageSize:
00045000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
netbt.sys
OriginalFilename: netbt.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: MBT Transport driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`03bca000 fffff880`03bd3000 wfplwf
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\wfplwf.sys\4A5BCCB69000\wfplwf.sys
Image path: wfplwf.sys
Image name: wfplwf.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 07:09:26 2009 (4A5BCCB6)
CheckSum:
0000B17B
ImageSize:
00009000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.6 Driver
File date:
00000000.00000000
Translations:
0000.04b0

CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
WFPLWF.SYS
OriginalFilename: WFPLWF.SYS
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: WFP NDIS 6.20 Lightweight Filter Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`03bd3000 fffff880`03bf9000 pacer
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\pacer.sys\4CE7A86226000\pacer.sys
Image path: pacer.sys
Image name: pacer.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 17:52:18 2010 (4CE7A862)
CheckSum:
00020DCF
ImageSize:
00026000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.6 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
pacer.sys
OriginalFilename: pacer.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: QoS Packet Scheduler
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`03c00000 fffff880`03c21000 raspptp
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\raspptp.sys\4CE7A86F21000\raspptp.sys
Image path: raspptp.sys
Image name: raspptp.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 17:52:31 2010 (4CE7A86F)
CheckSum:
000251CB
ImageSize:
00021000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.6 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
RASPPTP.SYS
OriginalFilename: RASPPTP.SYS
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: Peer-to-Peer Tunneling Protocol
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`03c21000 fffff880`03c3b000 rassstp
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\rassstp.sys\4A5BCCF11a000\rassstp.sys
Image path: rassstp.sys

Image name: rassstp.sys


Browse all global symbols functions data
Timestamp:
Tue Jul 14 07:10:25 2009 (4A5BCCF1)
CheckSum:
0002274B
ImageSize:
0001A000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.6 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
rassstp.sys
OriginalFilename: rassstp.sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: RAS SSTP Miniport Call Manager
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`03c3b000 fffff880`03c610c0 vnaap
(deferred)
Image path: vnaap.sys
Image name: vnaap.sys
Browse all global symbols functions data
Timestamp:
Mon Dec 29 19:10:44 2008 (4958BE44)
CheckSum:
0002E645
ImageSize:
000260C0
Translations:
0000.04b0 0000.04e4 0409.04b0 0409.04e4
fffff880`03c69000 fffff880`03d5d000 dxgkrnl
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\dxgkrnl.sys\4CE799FAf4000\dxgkrnl.sys
Image path: dxgkrnl.sys
Image name: dxgkrnl.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 16:50:50 2010 (4CE799FA)
CheckSum:
000FA948
ImageSize:
000F4000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
dxgkrnl.sys
OriginalFilename: dxgkrnl.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: DirectX Graphics Kernel
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`03d5d000 fffff880`03da3000 dxgmms1
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\dxgmms1.sys\4CE799C146000\dxgmms1.sys
Image path: dxgmms1.sys
Image name: dxgmms1.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 16:49:53 2010 (4CE799C1)
CheckSum:
00047A89

ImageSize:
00046000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
dxgmms1.sys
OriginalFilename: dxgmms1.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: DirectX Graphics MMS
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`03da3000 fffff880`03dd2000 ndiswan
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\ndiswan.sys\4CE7A8702f000\ndiswan.sys
Image path: ndiswan.sys
Image name: ndiswan.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 17:52:32 2010 (4CE7A870)
CheckSum:
0002BB81
ImageSize:
0002F000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.6 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
NDISWAN.SYS
OriginalFilename: NDISWAN.SYS
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: MS PPP Framing Driver (Strong Encryption)
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`03dd2000 fffff880`03ded000 raspppoe (deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\raspppoe.sys\4A5BCCE91b000\raspppoe.sys
Image path: raspppoe.sys
Image name: raspppoe.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 07:10:17 2009 (4A5BCCE9)
CheckSum:
00019A00
ImageSize:
0001B000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.6 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
raspppoe.sys
OriginalFilename: raspppoe.sys

ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: RAS PPPoE mini-port/call-manager driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`03ded000 fffff880`03dff000 umbus
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\umbus.sys\4CE7A69512000\umbus.sys
Image path: umbus.sys
Image name: umbus.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 17:44:37 2010 (4CE7A695)
CheckSum:
0001AF58
ImageSize:
00012000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
2.0 Dll
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
umbus.sys
OriginalFilename: umbus.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: User-Mode Bus Enumerator
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`04200000 fffff880`04220000 L1C62x64 (deferred)
Image path: L1C62x64.sys
Image name: L1C62x64.sys
Browse all global symbols functions data
Timestamp:
Fri Dec 14 15:24:46 2012 (50CAE24E)
CheckSum:
0001DAF8
ImageSize:
00020000
Translations:
0000.04b0 0000.04e4 0409.04b0 0409.04e4
fffff880`04220000 fffff880`0423e000 i8042prt (deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\i8042prt.sys\4A5BC11D1e000\i8042prt.sys
Image path: i8042prt.sys
Image name: i8042prt.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 06:19:57 2009 (4A5BC11D)
CheckSum:
00025E29
ImageSize:
0001E000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
i8042prt.sys
OriginalFilename: i8042prt.sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: i8042 Port Driver
LegalCopyright: Microsoft Corporation. All rights reserved.

fffff880`0423e000 fffff880`0424d000 kbdclass (deferred)


Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\kbdclass.sys\4A5BC116f000\kbdclass.sys
Image path: kbdclass.sys
Image name: kbdclass.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 06:19:50 2009 (4A5BC116)
CheckSum:
0001B4C5
ImageSize:
0000F000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
kbdclass.sys
OriginalFilename: kbdclass.sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: Keyboard Class Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`0424d000 fffff880`0425c000 mouclass (deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\mouclass.sys\4A5BC116f000\mouclass.sys
Image path: mouclass.sys
Image name: mouclass.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 06:19:50 2009 (4A5BC116)
CheckSum:
0000E5DE
ImageSize:
0000F000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
mouclass.sys
OriginalFilename: mouclass.sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: Mouse Class Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`04262000 fffff880`043e0000 rtwlane
(deferred)
Image path: rtwlane.sys
Image name: rtwlane.sys
Browse all global symbols functions data
Timestamp:
Thu Jan 31 18:17:55 2013 (510A52E3)
CheckSum:
00177D66
ImageSize:
0017E000
Translations:
0000.04b0 0000.04e4 0409.04b0 0409.04e4
fffff880`043e0000 fffff880`043ed000 vwifibus (deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\vwifibus.sys\4A5BCC39d000\vwifibus.sys
Image path: vwifibus.sys

Image name: vwifibus.sys


Browse all global symbols functions data
Timestamp:
Tue Jul 14 07:07:21 2009 (4A5BCC39)
CheckSum:
0000C5FA
ImageSize:
0000D000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
VWiFiBus.sys
OriginalFilename: VWiFiBus.sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: Virtual WiFi Bus Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`043ed000 fffff880`043f6000 wmiacpi
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\wmiacpi.sys\4A5BC3B69000\wmiacpi.sys
Image path: wmiacpi.sys
Image name: wmiacpi.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 06:31:02 2009 (4A5BC3B6)
CheckSum:
000042C0
ImageSize:
00009000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
wmiacpi.sys
OriginalFilename: wmiacpi.sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: Windows Management Interface for ACPI
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`043f6000 fffff880`043fa500 CmBatt
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\CmBatt.sys\4A5BC3B74500\CmBatt.sys
Image path: CmBatt.sys
Image name: CmBatt.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 06:31:03 2009 (4A5BC3B7)
CheckSum:
0000D93A
ImageSize:
00004500
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0

CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
cmbatt.sys
OriginalFilename: cmbatt.sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: Control Method Battery Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`043fb000 fffff880`043fc480 swenum
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\swenum.sys\4A5BCA921480\swenum.sys
Image path: swenum.sys
Image name: swenum.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 07:00:18 2009 (4A5BCA92)
CheckSum:
0000934E
ImageSize:
00001480
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.0 Driver
File date:
00000000.00000000
Translations:
0000.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
swenum.sys
OriginalFilename: swenum.sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: Plug and Play Software Device Enumerator
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`04800000 fffff880`04843000 ks
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\ks.sys\4CE7A3F343000\ks.sys
Image path: ks.sys
Image name: ks.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 17:33:23 2010 (4CE7A3F3)
CheckSum:
00045588
ImageSize:
00043000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.0 Driver
File date:
00000000.00000000
Translations:
0000.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
ks.sys
OriginalFilename: ks.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: Kernel CSA Library
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`04843000 fffff880`0489d000 usbhub
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\usbhub.sys\4CE7A68E5a000\usbhub.sys
Image path: usbhub.sys

Image name: usbhub.sys


Browse all global symbols functions data
Timestamp:
Sat Nov 20 17:44:30 2010 (4CE7A68E)
CheckSum:
000558C3
ImageSize:
0005A000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
2.0 Dll
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
usbhub.sys
OriginalFilename: usbhub.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: Default Hub Driver for USB
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`0489d000 fffff880`048b2000 NDProxy
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\NDProxy.SYS\4CE7A86415000\NDProxy.SYS
Image path: NDProxy.SYS
Image name: NDProxy.SYS
Browse all global symbols functions data
Timestamp:
Sat Nov 20 17:52:20 2010 (4CE7A864)
CheckSum:
00019428
ImageSize:
00015000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
ndproxy.sys
OriginalFilename: ndproxy.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: NDIS Proxy
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`048b2000 fffff880`048ef000 portcls
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\portcls.sys\4A5BCC033d000\portcls.sys
Image path: portcls.sys
Image name: portcls.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 07:06:27 2009 (4A5BCC03)
CheckSum:
00047A50
ImageSize:
0003D000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.9 Driver
File date:
00000000.00000000
Translations:
0409.04b0

CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
portcls.sys
OriginalFilename: portcls.sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: Port Class (Class Driver for Port/Miniport Devices)
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`048f1000 fffff880`053a1000 nvlddmkm (deferred)
Image path: nvlddmkm.sys
Image name: nvlddmkm.sys
Browse all global symbols functions data
Timestamp:
Thu Mar 07 16:01:05 2013 (51385751)
CheckSum:
00A9D34A
ImageSize:
00AB0000
Translations:
0000.04b0 0000.04e4 0409.04b0 0409.04e4
fffff880`053a1000 fffff880`053d6000 BazisVirtualCDBus (deferred)
Image path: BazisVirtualCDBus.sys
Image name: BazisVirtualCDBus.sys
Browse all global symbols functions data
Timestamp:
Tue Aug 09 01:11:12 2011 (4E4026C0)
CheckSum:
00037199
ImageSize:
00035000
Translations:
0000.04b0 0000.04e4 0409.04b0 0409.04e4
fffff880`053d6000 fffff880`053e4000 crashdmp (deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\crashdmp.sys\4A5BCABDe000\crashdmp.sys
Image path: crashdmp.sys
Image name: crashdmp.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 07:01:01 2009 (4A5BCABD)
CheckSum:
000178C7
ImageSize:
0000E000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
crashdmp.sys
OriginalFilename: crashdmp.sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: Crash Dump Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`053e4000 fffff880`053f0000 dump_pciidex (deferred)
Image path: dump_pciidex.sys
Image name: dump_pciidex.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 06:19:47 2009 (4A5BC113)
CheckSum:
0000DE50
ImageSize:
0000C000
Translations:
0000.04b0 0000.04e4 0409.04b0 0409.04e4
fffff880`053f0000 fffff880`053fb000 dump_msahci (deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\msahci.sys\4CE7A416b000\msahci.sys

Image path: dump_msahci.sys


Image name: dump_msahci.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 17:33:58 2010 (4CE7A416)
CheckSum:
00017292
ImageSize:
0000B000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
msahci.sys
OriginalFilename: msahci.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: MS AHCI 1.0 Standard Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`05400000 fffff880`054c9000 HTTP
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\HTTP.sys\4CE793CEc9000\HTTP.sys
Image path: HTTP.sys
Image name: HTTP.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 16:24:30 2010 (4CE793CE)
CheckSum:
000C56EE
ImageSize:
000C9000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
http.sys
OriginalFilename: http.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: HTTP Protocol Stack
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`054c9000 fffff880`054e7000 bowser
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\bowser.sys\4A5BC2061e000\bowser.sys
Image path: bowser.sys
Image name: bowser.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 06:23:50 2009 (4A5BC206)
CheckSum:
0001A2C3
ImageSize:
0001E000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000

Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
browser.sys
OriginalFilename: browser.sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: NT Lan Manager Datagram Receiver Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`054fc000 fffff880`0551e000 tdx
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\tdx.sys\4CE7933222000\tdx.sys
Image path: tdx.sys
Image name: tdx.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 16:21:54 2010 (4CE79332)
CheckSum:
000288B2
ImageSize:
00022000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.6 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
tdx.sys
OriginalFilename: tdx.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: TDI Translation Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`0551e000 fffff880`05533000 lltdio
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\lltdio.sys\4A5BCC9215000\lltdio.sys
Image path: lltdio.sys
Image name: lltdio.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 07:08:50 2009 (4A5BCC92)
CheckSum:
0001109D
ImageSize:
00015000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.6 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
LLTDIO.SYS
OriginalFilename: LLTDIO.SYS
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: Link-Layer Topology Mapper I/O Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`05533000 fffff880`05586000 nwifi
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\nwifi.sys\4A5BCC3B53000\nwifi.sys

Image path: nwifi.sys


Image name: nwifi.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 07:07:23 2009 (4A5BCC3B)
CheckSum:
00057B55
ImageSize:
00053000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.6 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
NWiFi.SYS
OriginalFilename: NWiFi.SYS
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: NativeWiFi Miniport Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`05586000 fffff880`05599000 ndisuio
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\ndisuio.sys\4CE7A7E013000\ndisuio.sys
Image path: ndisuio.sys
Image name: ndisuio.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 17:50:08 2010 (4CE7A7E0)
CheckSum:
0001D42D
ImageSize:
00013000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.6 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
NDISUIO.SYS
OriginalFilename: NDISUIO.SYS
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: NDIS User mode I/O driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`05599000 fffff880`055b1000 rspndr
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\rspndr.sys\4A5BCC9218000\rspndr.sys
Image path: rspndr.sys
Image name: rspndr.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 07:08:50 2009 (4A5BCC92)
CheckSum:
0001656B
ImageSize:
00018000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.6 Driver
File date:
00000000.00000000

Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
RSPNDR.SYS
OriginalFilename: RSPNDR.SYS
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: Link-Layer Topology Responder Driver for NDIS 6
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`055b1000 fffff880`055bb000 vwifimp
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\vwifimp.sys\4A5BCC40a000\vwifimp.sys
Image path: vwifimp.sys
Image name: vwifimp.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 07:07:28 2009 (4A5BCC40)
CheckSum:
0000B00E
ImageSize:
0000A000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.6 Driver
File date:
00000000.00000000
Translations:
0000.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
vwifimp.sys
OriginalFilename: vwifimp.sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: Virtual WiFi Miniport Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`055bb000 fffff880`055d3000 mpsdrv
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\mpsdrv.sys\4A5BCC7918000\mpsdrv.sys
Image path: mpsdrv.sys
Image name: mpsdrv.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 07:08:25 2009 (4A5BCC79)
CheckSum:
0001C76E
ImageSize:
00018000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
mpsdrv.sys
OriginalFilename: mpsdrv.sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: Microsoft Protection Service Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`055d3000 fffff880`05600000 mrxsmb
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\mrxsmb.sys\4CE7948D2d000\mrxsmb.sys

Image path: mrxsmb.sys


Image name: mrxsmb.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 16:27:41 2010 (4CE7948D)
CheckSum:
0002988B
ImageSize:
0002D000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
MRxSmb.sys
OriginalFilename: MRXSMB.Sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: Windows NT SMB Minirdr
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`05600000 fffff880`05603a00 AKSCLASS (deferred)
Image path: AKSCLASS.SYS
Image name: AKSCLASS.SYS
Browse all global symbols functions data
Timestamp:
Tue Dec 11 19:24:07 2012 (50C725E7)
CheckSum:
00009BAA
ImageSize:
00003A00
Translations:
0000.04b0 0000.04e4 0409.04b0 0409.04e4
fffff880`0560c000 fffff880`059ff000 vusbsrmhp3 (deferred)
Image path: vusbsrmhp3.sys
Image name: vusbsrmhp3.sys
Browse all global symbols functions data
Timestamp:
Tue Oct 14 01:44:21 2014 (543C1D85)
CheckSum:
0020CAF2
ImageSize:
003F3000
Translations:
0000.04b0 0000.04e4 0409.04b0 0409.04e4
fffff880`06800000 fffff880`06822000 drmk
(deferred)
Image path: drmk.sys
Image name: drmk.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 08:01:25 2009 (4A5BD8E5)
CheckSum:
0002966E
ImageSize:
00022000
Translations:
0000.04b0 0000.04e4 0409.04b0 0409.04e4
fffff880`06822000 fffff880`06827200 ksthunk
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\ksthunk.sys\4A5BCA935200\ksthunk.sys
Image path: ksthunk.sys
Image name: ksthunk.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 07:00:19 2009 (4A5BCA93)
CheckSum:
0000AF92
ImageSize:
00005200
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.0 Driver
File date:
00000000.00000000

Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
ksthunk.sys
OriginalFilename: ksthunk.sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: Kernel Streaming WOW Thunk Service
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`06828000 fffff880`06835280 akshasp
(deferred)
Image path: akshasp.sys
Image name: akshasp.sys
Browse all global symbols functions data
Timestamp:
Sat Dec 08 13:01:50 2012 (50C2D7CE)
CheckSum:
0001E7D2
ImageSize:
0000D280
Translations:
0000.04b0 0000.04e4 0409.04b0 0409.04e4
fffff880`06839000 fffff880`069e2000 CHDRT64
(deferred)
Image path: CHDRT64.sys
Image name: CHDRT64.sys
Browse all global symbols functions data
Timestamp:
Fri Mar 22 09:14:13 2013 (514BBE75)
CheckSum:
0019C27E
ImageSize:
001A9000
Translations:
0000.04b0 0000.04e4 0409.04b0 0409.04e4
fffff880`069e2000 fffff880`069f0000 akshhl
(deferred)
Image path: akshhl.sys
Image name: akshhl.sys
Browse all global symbols functions data
Timestamp:
Sat Dec 08 13:04:01 2012 (50C2D851)
CheckSum:
00011836
ImageSize:
0000E000
Translations:
0000.04b0 0000.04e4 0409.04b0 0409.04e4
fffff880`069f0000 fffff880`069fc000 Dxapi
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\Dxapi.sys\4A5BC574c000\Dxapi.sys
Image path: Dxapi.sys
Image name: Dxapi.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 06:38:28 2009 (4A5BC574)
CheckSum:
0001418E
ImageSize:
0000C000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
dxapi.sys
OriginalFilename: dxapi.sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: DirectX API Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`06e0d000 fffff880`06e5a000 mrxsmb10 (deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\mrxsmb10.sys\4CE7945D4d000\mrxsmb10.sys

Image path: mrxsmb10.sys


Image name: mrxsmb10.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 16:26:53 2010 (4CE7945D)
CheckSum:
000543B6
ImageSize:
0004D000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
MRxSmb0.sys
OriginalFilename: MRXSMB0.Sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: Longhorn SMB Downlevel SubRdr
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`06e5a000 fffff880`06e7e000 mrxsmb20 (deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\mrxsmb20.sys\4CE7945724000\mrxsmb20.sys
Image path: mrxsmb20.sys
Image name: mrxsmb20.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 16:26:47 2010 (4CE79457)
CheckSum:
0002437E
ImageSize:
00024000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
MRxSmb20.sys
OriginalFilename: MRXSMB20.Sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: Longhorn SMB 2.0 Redirector
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`06e7e000 fffff880`06e92d00 aksdf
(deferred)
Image path: aksdf.sys
Image name: aksdf.sys
Browse all global symbols functions data
Timestamp:
Thu Oct 17 15:47:38 2013 (525FA42A)
CheckSum:
0001E5E9
ImageSize:
00014D00
Translations:
0000.04b0 0000.04e4 0409.04b0 0409.04e4
fffff880`06e93000 fffff880`06ec9000 fastfat
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\fastfat.SYS\4A5BC1F036000\fastfat.SYS
Image path: fastfat.SYS
Image name: fastfat.SYS
Browse all global symbols functions data
Timestamp:
Tue Jul 14 06:23:28 2009 (4A5BC1F0)

CheckSum:
0003AE1E
ImageSize:
00036000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
fastfat.sys
OriginalFilename: FastFAT.Sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: Fast FAT File System Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`06ec9000 fffff880`06eef000 aksfridge (deferred)
Image path: aksfridge.sys
Image name: aksfridge.sys
Browse all global symbols functions data
Timestamp:
Tue Jun 24 16:44:36 2014 (53A94884)
CheckSum:
000281E9
ImageSize:
00026000
Translations:
0000.04b0 0000.04e4 0409.04b0 0409.04e4
fffff880`06eef000 fffff880`06f3e600 hardlock (deferred)
Image path: hardlock.sys
Image name: hardlock.sys
Browse all global symbols functions data
Timestamp:
Tue Apr 15 21:22:59 2014 (534D40C3)
CheckSum:
00054CEF
ImageSize:
0004F600
Translations:
0000.04b0 0000.04e4 0409.04b0 0409.04e4
fffff880`06f3f000 fffff880`06f71000 idmwfp
(deferred)
Image path: idmwfp.sys
Image name: idmwfp.sys
Browse all global symbols functions data
Timestamp:
Wed May 20 22:41:55 2015 (555CAB43)
CheckSum:
0003AB42
ImageSize:
00032000
Translations:
0000.04b0 0000.04e4 0409.04b0 0409.04e4
fffff880`06f71000 fffff880`06f8a000 IntelHaxm (deferred)
Image path: IntelHaxm.sys
Image name: IntelHaxm.sys
Browse all global symbols functions data
Timestamp:
Fri Jan 30 09:02:09 2015 (54CAE621)
CheckSum:
000236D3
ImageSize:
00019000
Translations:
0000.04b0 0000.04e4 0409.04b0 0409.04e4
fffff880`07684000 fffff880`0772a000 peauth
(deferred)
Image path: peauth.sys
Image name: peauth.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 08:01:19 2009 (4A5BD8DF)
CheckSum:
000AB7C9
ImageSize:
000A6000
Translations:
0000.04b0 0000.04e4 0409.04b0 0409.04e4
fffff880`0772a000 fffff880`07735000 secdrv
(deferred)
Image path: secdrv.SYS
Image name: secdrv.SYS

Browse all global symbols functions data


Timestamp:
Wed Sep 13 20:18:38 2006 (4508052E)
CheckSum:
00010B40
ImageSize:
0000B000
Translations:
0000.04b0 0000.04e4 0409.04b0 0409.04e4
fffff880`07735000 fffff880`07766000 srvnet
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\srvnet.sys\4CE7947831000\srvnet.sys
Image path: srvnet.sys
Image name: srvnet.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 16:27:20 2010 (4CE79478)
CheckSum:
00034967
ImageSize:
00031000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.6 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
SRVNET.SYS
OriginalFilename: SRVNET.SYS
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: Server Network driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`07766000 fffff880`07778000 tcpipreg (deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\tcpipreg.sys\4CE7A84412000\tcpipreg.sys
Image path: tcpipreg.sys
Image name: tcpipreg.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 17:51:48 2010 (4CE7A844)
CheckSum:
0000F328
ImageSize:
00012000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
1.0 App
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
tcpipreg.sys
OriginalFilename: tcpipreg.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: TCP/IP Registry Compatibility Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`07778000 fffff880`077e3000 srv2
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\srv2.sys\4CE7948F6b000\srv2.sys
Image path: srv2.sys
Image name: srv2.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 16:27:43 2010 (4CE7948F)

CheckSum:
000657DD
ImageSize:
0006B000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.6 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
SRV2.SYS
OriginalFilename: SRV2.SYS
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: Smb 2.0 Server driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`07a1f000 fffff880`07ab8000 srv
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\srv.sys\4CE794A599000\srv.sys
Image path: srv.sys
Image name: srv.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 16:28:05 2010 (4CE794A5)
CheckSum:
00079B5F
ImageSize:
00099000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.6 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
SRV.SYS
OriginalFilename: SRV.SYS
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: Server driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`07b29000 fffff880`07b34000 asyncmac (deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\asyncmac.sys\4A5BCCE5b000\asyncmac.sys
Image path: asyncmac.sys
Image name: asyncmac.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 07:10:13 2009 (4A5BCCE5)
CheckSum:
0000682A
ImageSize:
0000B000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.6 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
ASYNCMAC.SYS

OriginalFilename: ASYNCMAC.SYS
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: MS Remote Access serial network driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`0f000000 fffff880`0f056000 USBPORT
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\USBPORT.SYS\4CE7A67056000\USBPORT.SYS
Image path: USBPORT.SYS
Image name: USBPORT.SYS
Browse all global symbols functions data
Timestamp:
Sat Nov 20 17:44:00 2010 (4CE7A670)
CheckSum:
00059BC8
ImageSize:
00056000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
2.0 Dll
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
usbport.sys
OriginalFilename: usbport.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: USB 1.1 & 2.0 Port Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`0f056000 fffff880`0f07a000 HDAudBus (deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\HDAudBus.sys\4CE7A65E24000\HDAudBus.sys
Image path: HDAudBus.sys
Image name: HDAudBus.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 17:43:42 2010 (4CE7A65E)
CheckSum:
0002BFAB
ImageSize:
00024000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.9 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
hdaudbus.sys
OriginalFilename: hdaudbus.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: High Definition Audio Bus Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`0f07a000 fffff880`0f090000 intelppm (deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\intelppm.sys\4A5BC0FD16000\intelppm.sys
Image path: intelppm.sys
Image name: intelppm.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 06:19:25 2009 (4A5BC0FD)

CheckSum:
0000F4EC
ImageSize:
00016000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
intelppm.sys
OriginalFilename: intelppm.sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: Processor Device Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`0f090000 fffff880`0f0a0000 CompositeBus (deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\CompositeBus.sys\4CE7A3ED10000\CompositeBus.sys
Image path: CompositeBus.sys
Image name: CompositeBus.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 17:33:17 2010 (4CE7A3ED)
CheckSum:
0000983B
ImageSize:
00010000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
2.0 Dll
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
compositebus.sys
OriginalFilename: compositebus.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: Multi-Transport Composite Bus Enumerator
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`0f0a0000 fffff880`0f0b6000 AgileVpn (deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\AgileVpn.sys\4A5BCCF016000\AgileVpn.sys
Image path: AgileVpn.sys
Image name: AgileVpn.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 07:10:24 2009 (4A5BCCF0)
CheckSum:
000192BE
ImageSize:
00016000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.6 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
agilevpn.sys

OriginalFilename: agilevpn.sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: RAS Agile Vpn Miniport Call Manager
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`0f0c0000 fffff880`0fed3e40 igdkmd64 (deferred)
Image path: igdkmd64.sys
Image name: igdkmd64.sys
Browse all global symbols functions data
Timestamp:
Wed Oct 31 06:22:10 2012 (50906122)
CheckSum:
00E13F5C
ImageSize:
00E13E40
Translations:
0000.04b0 0000.04e4 0409.04b0 0409.04e4
fffff880`0fed4000 fffff880`0ff99000 iusb3xhc (deferred)
Image path: iusb3xhc.sys
Image name: iusb3xhc.sys
Browse all global symbols functions data
Timestamp:
Tue Dec 04 20:18:00 2012 (50BDF808)
CheckSum:
000C5326
ImageSize:
000C5000
Translations:
0000.04b0 0000.04e4 0409.04b0 0409.04e4
fffff880`0ff99000 fffff880`0ff9af00 USBD
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\USBD.SYS\4A5BCBFF1f00\USBD.SYS
Image path: USBD.SYS
Image name: USBD.SYS
Browse all global symbols functions data
Timestamp:
Tue Jul 14 07:06:23 2009 (4A5BCBFF)
CheckSum:
0000E842
ImageSize:
00001F00
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
2.0 Dll
File date:
00000000.00000000
Translations:
0000.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
usbd.sys
OriginalFilename: usbd.sys
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: Universal Serial Bus Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`0ff9b000 fffff880`0ffae000 HECIx64
(deferred)
Image path: HECIx64.sys
Image name: HECIx64.sys
Browse all global symbols functions data
Timestamp:
Tue Dec 18 02:32:21 2012 (50CF7345)
CheckSum:
0001803D
ImageSize:
00013000
Translations:
0000.04b0 0000.04e4 0409.04b0 0409.04e4
fffff880`0ffae000 fffff880`0ffbf000 usbehci
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\usbehci.sys\4CE7A66A11000\usbehci.sys
Image path: usbehci.sys
Image name: usbehci.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 17:43:54 2010 (4CE7A66A)

CheckSum:
0000E2BC
ImageSize:
00011000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
2.0 Dll
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
USBEHCI.sys
OriginalFilename: USBEHCI.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: EHCI eUSB Miniport Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`0ffbf000 fffff880`0ffe3000 rasl2tp
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\rasl2tp.sys\4CE7A87224000\rasl2tp.sys
Image path: rasl2tp.sys
Image name: rasl2tp.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 17:52:34 2010 (4CE7A872)
CheckSum:
0002CCA3
ImageSize:
00024000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.6 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
rasl2tp.sys
OriginalFilename: rasl2tp.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: RAS L2TP mini-port/call-manager driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`0ffe3000 fffff880`0ffef000 ndistapi (deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\ndistapi.sys\4A5BCCD8c000\ndistapi.sys
Image path: ndistapi.sys
Image name: ndistapi.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 07:10:00 2009 (4A5BCCD8)
CheckSum:
000063EA
ImageSize:
0000C000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.6 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
NDISTAPI.SYS

OriginalFilename: NDISTAPI.SYS
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: NDIS 3.0 connection wrapper driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff880`0ffef000 fffff880`0fffa000 rdpbus
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\rdpbus.sys\4A5BCEAAb000\rdpbus.sys
Image path: rdpbus.sys
Image name: rdpbus.sys
Browse all global symbols functions data
Timestamp:
Tue Jul 14 07:17:46 2009 (4A5BCEAA)
CheckSum:
0000C3AD
ImageSize:
0000B000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.0 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
RDPBUS.SYS
OriginalFilename: RDPBUS.SYS
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: Microsoft RDP Bus Device driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff960`00070000 fffff960`00380000 win32k
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\win32k.sys\4CE79A73310000\win32k.sys
Image path: win32k.sys
Image name: win32k.sys
Browse all global symbols functions data
Timestamp:
Sat Nov 20 16:52:51 2010 (4CE79A73)
CheckSum:
002FE2CF
ImageSize:
00310000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.7 Driver
File date:
00000000.00000000
Translations:
0409.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
win32k.sys
OriginalFilename: win32k.sys
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: Multi-User Win32 Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff960`004c0000 fffff960`004ca000 TSDDD
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\TSDDD.dll\4A5BCE62a000\TSDDD.dll
Image path: TSDDD.dll
Image name: TSDDD.dll
Browse all global symbols functions data
Timestamp:
Tue Jul 14 07:16:34 2009 (4A5BCE62)

CheckSum:
00009E96
ImageSize:
0000A000
File version:
6.1.7600.16385
Product version: 6.1.7600.16385
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.4 Driver
File date:
00000000.00000000
Translations:
0000.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
framebuf.dll
OriginalFilename: framebuf.dll
ProductVersion: 6.1.7600.16385
FileVersion:
6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: Framebuffer Display Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
fffff960`00750000 fffff960`00777000 cdd
(deferred)
Mapped memory image file: C:\Program Files (x86)\Windows Kits\10\Debuggers\x
64\sym\cdd.dll\4CE7C54627000\cdd.dll
Image path: cdd.dll
Image name: cdd.dll
Browse all global symbols functions data
Timestamp:
Sat Nov 20 19:55:34 2010 (4CE7C546)
CheckSum:
0002D4F0
ImageSize:
00027000
File version:
6.1.7601.17514
Product version: 6.1.7601.17514
File flags:
0 (Mask 3F)
File OS:
40004 NT Win32
File type:
3.4 Driver
File date:
00000000.00000000
Translations:
0000.04b0
CompanyName:
Microsoft Corporation
ProductName:
Microsoft Windows Operating System
InternalName:
cdd.dll
OriginalFilename: cdd.dll
ProductVersion: 6.1.7601.17514
FileVersion:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
FileDescription: Canonical Display Driver
LegalCopyright: Microsoft Corporation. All rights reserved.
Unloaded modules:
fffff880`07bb6000 fffff880`07be7000
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00031000
fffff880`07ba5000 fffff880`07bb6000
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00011000
fffff880`07b34000 fffff880`07ba5000
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00071000
fffff880`07ab8000 fffff880`07b29000
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00071000
fffff880`06f8a000 fffff880`06fa9000

WUDFRd.sys

WinUsb.sys

spsys.sys

spsys.sys

NisDrvWFP.sy

Timestamp: unavailable (00000000)


Checksum: 00000000
ImageSize: 0001F000
fffff880`019cb000 fffff880`019d9000
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000E000
fffff880`019d9000 fffff880`019e5000
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000C000
fffff880`019e5000 fffff880`019f0000
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000B000
fffff880`01600000 fffff880`01613000
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00013000

crashdmp.sys

dump_pciidex

dump_msahci.

dump_dumpfve