Microsoft (R) Windows Debugger Version 6.3.9600.17029 AMD64 Copyright (c) Microsoft Corporation. All rights reserved. Loading Dump File [C:\Windows\MEMORY.DMP] Kernel Summary Dump File: Only kernel address space is available ************* Symbol Path validation summary ************** Response Time (ms) Location OK C:\Windows\System32 ************* Symbol Path validation summary ************** Response Time (ms) Location Deferred SRV*c:\dumps*http://msdl.microsoft.com/download/symbols Symbol search path is: SRV*c:\dumps*http://msdl.microsoft.com/download/symbols Executable search path is: C:\Windows\System32 Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64 Product: WinNt, suite: TerminalServer SingleUserTS Built by: 7601.18409.amd64fre.win7sp1_gdr.140303-2144 Machine Name: Kernel base = 0xfffff800`03050000 PsLoadedModuleList = 0xfffff800`03293890 Debug session time: Sun Jul 6 14:10:54.940 2014 (UTC + 2:00) System Uptime: 0 days 1:50:21.349 Loading Kernel Symbols ............................................................... ................................................................ .......................Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details ........................... Loading User Symbols PEB is paged out (Peb.Ldr = 00000000`7efdf018). Type ".hh dbgerr001" for details Loading unloaded module list ........ ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck A, {aa, 2, 0, fffff800030daa55} Probably caused by : dxgmms1.sys ( dxgmms1!VIDMM_PROCESS_HEAP::Rotate+148 ) Followup: MachineOwner --------- 3: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* IRQL_NOT_LESS_OR_EQUAL (a) An attempt was made to access a pageable (or completely invalid) address at an interrupt request level (IRQL) that is too high. This is usually caused by drivers using improper addresses. If a kernel debugger is available get the stack backtrace. Arguments: Arg1: 00000000000000aa, memory referenced Arg2: 0000000000000002, IRQL Arg3: 0000000000000000, bitfield : bit 0 : value 0 = read operation, 1 = write operation bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status) Arg4: fffff800030daa55, address which referenced memory Debugging Details: ------------------ READ_ADDRESS: 00000000000000aa CURRENT_IRQL: 2 FAULTING_IP: nt!IopCompleteRequest+ae5 fffff800`030daa55 488b09 mov rcx,qword ptr [rcx] DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT BUGCHECK_STR: 0xA PROCESS_NAME: IAStorUI.exe ANALYSIS_VERSION: 6.3.9600.17029 (debuggers(dbg).140219-1702) amd64fre IRP_ADDRESS: ffffffffffffff89 TRAP_FRAME: fffff88004406000 -- (.trap 0xfffff88004406000) NOTE: The trap frame does not contain all registers. Some register values may be zeroed or incorrect. rax=fffff880044055c8 rbx=0000000000000000 rcx=00000000000000aa rdx=00000000000000aa rsi=0000000000000000 rdi=0000000000000000 rip=fffff800030daa55 rsp=fffff88004406190 rbp=0000000000000000 r8=0000000000004740 r9=0000000000000180 r10=0000000000000002 r11=00000000000001c8 r12=0000000000000000 r13=0000000000000000 r14=0000000000000000 r15=0000000000000000 iopl=0 nv up ei pl nz na po cy nt!IopCompleteRequest+0xae5: fffff800`030daa55 488b09 mov rcx,qword ptr [rcx] ds:00000000`000000aa=???????????????? Resetting default scope LAST_CONTROL_TRANSFER: from fffff800030c5169 to fffff800030c5bc0 STACK_TEXT: fffff880`04405eb8 fffff800`030c5169 : 00000000`0000000a 00000000`000000aa 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx fffff880`04405ec0 fffff800`030c3de0 : 00000000`00000001 fffff880`04406020 fffffa80`00000000 fffffa80`091143d0 : nt!KiBugCheckDispatch+0x69 fffff880`04406000 fffff800`030daa55 : 00000000`00000001 fffff880`05023dad 00000000`20206f49 fffff800`0300eb7f : nt!KiPageFault+0x260 fffff880`04406190 fffff800`030b85f7 : 00000000`00000001 00000000`00000000 00000000`00000000 00000000`00000000 : nt!IopCompleteRequest+0xae5 fffff880`04406260 fffff800`03073ec9 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDeliverApc+0x1c7 fffff880`044062e0 fffff800`0353469b : fffffa80`04695cf0 ffffffff`ffffffff 00000000`00000000 00000000`00000000 : nt!KiCheckForKernelApcDelivery+0x25 fffff880`04406310 fffff880`05035ac8 : 00000000`07613000 fffff880`044065e8 00000000`00000000 fffff8a0`00000002 : nt!MmRotatePhysicalView+0x74b fffff880`04406550 fffff880`0502fffc : 00000000`00000000 00000000`00001000 00000000`00000000 00000000`00000000 : dxgmms1!VIDMM_PROCESS_HEAP::Rotate+0x148 fffff880`044065e0 fffff880`05025e2a : fffffa80`0852d930 fffff8a0`0cb5d280 fffffa80`08b38001 fffff880`05021700 : dxgmms1!VIDMM_MEMORY_SEGMENT::EvictResource+0x6fc fffff880`04406750 fffff880`05033013 : fffff8a0`0bfb06d8 fffff8a0`0b75d260 fffff8a0`0b75d201 fffffa80`0852d9d0 : dxgmms1!VIDMM_GLOBAL::PurgeAllocation+0x3a fffff880`044067a0 fffff880`0501f71f : 00000000`00000000 00000000`c0000001 fffff8a0`0bfb0540 00000000`00000000 : dxgmms1!VIDMM_SEGMENT::PurgeContent+0x133 fffff880`04406800 fffff880`0501f4d7 : fffff880`04406ac0 00000000`00000000 fffff880`04406a20 fffffa80`08b13000 : dxgmms1!VIDMM_GLOBAL::ProcessSystemCommand+0xc7 fffff880`04406890 fffff880`050393ad : 00000000`00000001 fffff880`0500b0e0 fffffa80`08b1ad50 fffffa80`08b1ad50 : dxgmms1!VidMmiProcessSystemCommand+0x47 fffff880`044068c0 fffff880`05038538 : fffff880`04406a20 00000000`00000000 fffffa80`08b1cd70 00000000`00000001 : dxgmms1!VidSchiSubmitSystemCommand+0x39 fffff880`044068f0 fffff880`0500a786 : 00000000`00000000 fffffa80`08b1ad50 fffffa80`08b1cd70 fffffa80`08b1cd70 : dxgmms1!VidSchiSubmitQueueCommand+0x74 fffff880`04406920 fffff880`0503aaa3 : fffffa80`08b08af0 fffffa80`08b13000 fffffa80`08b1cd70 00000000`00000000 : dxgmms1!VidSchiSubmitQueueCommandDirect+0x1e6 fffff880`044069b0 fffff880`0501f5dd : fffffa80`00000001 fffffa80`088e8410 fffffa80`08b38000 fffffa80`08b38000 : dxgmms1!VidSchiSubmitCommandPacketToQueue+0x15f fffff880`04406a20 fffff880`050015c6 : 00000000`00000001 fffff880`051305de fffffa80`08b09000 00000000`00000001 : dxgmms1!VIDMM_GLOBAL::QueueSystemCommandAndWait+0xf9 fffff880`04406a90 fffff880`051307a1 : fffffa80`08b09000 fffffa80`08b09000 00000000`00000001 00000000`00000000 : dxgmms1!VidMmPurgeAllSegments+0xe2 fffff880`04406b00 fffff880`0512c2d7 : 00000000`ffffeea7 fffffa80`08b09000 00000000`00000001 00000000`00000000 : dxgkrnl!DXGADAPTER::PurgeSegments+0x95 fffff880`04406b30 fffff880`0512410e : 00000000`00000003 fffffa80`0779f5d0 fffff880`009dc910 00000000`00000000 : dxgkrnl!DXGADAPTER::AcquireCoreSync+0x11b fffff880`04406b70 fffff880`0518ed4d : fffff880`00000000 fffffa80`00000001 fffff880`00000000 00000000`00000000 : dxgkrnl!DxgkAcquireAdapterCoreSync+0x56 fffff880`04406ba0 fffff800`0336173a : 00000000`01bba6d0 fffffa80`07854b50 00000000`00000080 fffffa80`042dc040 : dxgkrnl!DpiPowerArbiterThread+0x575 fffff880`04406c00 fffff800`030b68e6 : fffff880`033d7180 fffffa80`07854b50 fffff880`033e20c0 fffffa80`073c56f0 : nt!PspSystemThreadStartup+0x5a fffff880`04406c40 00000000`00000000 : fffff880`04407000 fffff880`04401000 fffff880`04405c30 00000000`00000000 : nt!KxStartSystemThread+0x16 STACK_COMMAND: kb FOLLOWUP_IP: dxgmms1!VIDMM_PROCESS_HEAP::Rotate+148 fffff880`05035ac8 8be8 mov ebp,eax SYMBOL_STACK_INDEX: 7 SYMBOL_NAME: dxgmms1!VIDMM_PROCESS_HEAP::Rotate+148 FOLLOWUP_NAME: MachineOwner MODULE_NAME: dxgmms1 IMAGE_NAME: dxgmms1.sys DEBUG_FLR_IMAGE_TIMESTAMP: 5164dc13 IMAGE_VERSION: 6.1.7601.18126 FAILURE_BUCKET_ID: X64_0xA_dxgmms1!VIDMM_PROCESS_HEAP::Rotate+148 BUCKET_ID: X64_0xA_dxgmms1!VIDMM_PROCESS_HEAP::Rotate+148 ANALYSIS_SOURCE: KM FAILURE_ID_HASH_STRING: km:x64_0xa_dxgmms1!vidmm_process_heap::rotate+148 FAILURE_ID_HASH: {e034a9e8-8350-fbe2-ea87-c21c8f0bfc78} Followup: MachineOwner --------- 3: kd> lmv start end module name fffff800`00bbb000 fffff800`00bc5000 kdcom (deferred) Image path: kdcom.dll Image name: kdcom.dll Timestamp: Sat Feb 05 17:52:49 2011 (4D4D8061) CheckSum: 0000F59B ImageSize: 0000A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff800`03007000 fffff800`03050000 hal (deferred) Image path: hal.dll Image name: hal.dll Timestamp: Sat Nov 20 14:00:25 2010 (4CE7C669) CheckSum: 000404C3 ImageSize: 00049000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff800`03050000 fffff800`03635000 nt (pdb symbols) c:\dumps\ntkrnlmp.pdb\BF9E190359784C2D8796CF5537B238B42\ntkrnlmp.pdb Loaded symbol image file: ntkrnlmp.exe Image path: ntkrnlmp.exe Image name: ntkrnlmp.exe Timestamp: Tue Mar 04 09:38:19 2014 (531590FB) CheckSum: 00554C03 ImageSize: 005E5000 File version: 6.1.7601.18409 Product version: 6.1.7601.18409 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 1.0 App File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: ntkrnlmp.exe OriginalFilename: ntkrnlmp.exe ProductVersion: 6.1.7601.18409 FileVersion: 6.1.7601.18409 (win7sp1_gdr.140303-2144) FileDescription: NT Kernel & System LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`00c00000 fffff880`00c5c000 volmgrx (deferred) Image path: \SystemRoot\System32\drivers\volmgrx.sys Image name: volmgrx.sys Timestamp: Sat Nov 20 10:20:43 2010 (4CE792EB) CheckSum: 00065F6D ImageSize: 0005C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`00c7b000 fffff880`00cca000 mcupdate_GenuineIntel (deferred) Image path: \SystemRoot\system32\mcupdate_GenuineIntel.dll Image name: mcupdate_GenuineIntel.dll Timestamp: Sat Nov 20 14:03:51 2010 (4CE7C737) CheckSum: 0004F97E ImageSize: 0004F000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`00cca000 fffff880`00cde000 PSHED (deferred) Image path: \SystemRoot\system32\PSHED.dll Image name: PSHED.dll Timestamp: Tue Jul 14 03:32:23 2009 (4A5BE027) CheckSum: 0000F762 ImageSize: 00014000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`00cde000 fffff880`00d3c000 CLFS (deferred) Image path: \SystemRoot\system32\CLFS.SYS Image name: CLFS.SYS Timestamp: Tue Jul 14 01:19:57 2009 (4A5BC11D) CheckSum: 00065C46 ImageSize: 0005E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`00d3c000 fffff880`00dfc000 CI (deferred) Image path: \SystemRoot\system32\CI.dll Image name: CI.dll Timestamp: Sat Nov 20 14:12:36 2010 (4CE7C944) CheckSum: 000CB0F6 ImageSize: 000C0000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`00e00000 fffff880`00e15000 volmgr (deferred) Image path: \SystemRoot\system32\drivers\volmgr.sys Image name: volmgr.sys Timestamp: Sat Nov 20 10:19:28 2010 (4CE792A0) CheckSum: 00019F72 ImageSize: 00015000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`00e15000 fffff880`00e2f000 mountmgr (deferred) Image path: \SystemRoot\System32\drivers\mountmgr.sys Image name: mountmgr.sys Timestamp: Sat Nov 20 10:19:21 2010 (4CE79299) CheckSum: 00022621 ImageSize: 0001A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`00e2f000 fffff880`00e38000 atapi (deferred) Image path: \SystemRoot\system32\drivers\atapi.sys Image name: atapi.sys Timestamp: Tue Jul 14 01:19:47 2009 (4A5BC113) CheckSum: 000065BB ImageSize: 00009000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`00e38000 fffff880`00e4c000 termdd (deferred) Image path: \SystemRoot\system32\DRIVERS\termdd.sys Image name: termdd.sys Timestamp: Sat Nov 20 12:03:40 2010 (4CE7AB0C) CheckSum: 00019E15 ImageSize: 00014000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`00e4d000 fffff880`00f0f000 Wdf01000 (deferred) Image path: \SystemRoot\system32\drivers\Wdf01000.sys Image name: Wdf01000.sys Timestamp: Sat Jun 22 05:13:05 2013 (51C51641) CheckSum: 000CC9CA ImageSize: 000C2000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`00f0f000 fffff880`00f1f000 WDFLDR (deferred) Image path: \SystemRoot\system32\drivers\WDFLDR.SYS Image name: WDFLDR.SYS Timestamp: Thu Jul 26 04:29:04 2012 (5010AB70) CheckSum: 00016A5F ImageSize: 00010000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`00f1f000 fffff880`00f76000 ACPI (deferred) Image path: \SystemRoot\system32\drivers\ACPI.sys Image name: ACPI.sys Timestamp: Sat Nov 20 10:19:16 2010 (4CE79294) CheckSum: 0005ACF6 ImageSize: 00057000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`00f76000 fffff880`00f7f000 WMILIB (deferred) Image path: \SystemRoot\system32\drivers\WMILIB.SYS Image name: WMILIB.SYS Timestamp: Tue Jul 14 01:19:51 2009 (4A5BC117) CheckSum: 00005007 ImageSize: 00009000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`00f7f000 fffff880`00f89000 msisadrv (deferred) Image path: \SystemRoot\system32\drivers\msisadrv.sys Image name: msisadrv.sys Timestamp: Tue Jul 14 01:19:26 2009 (4A5BC0FE) CheckSum: 0001320D ImageSize: 0000A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`00f89000 fffff880`00fbc000 pci (deferred) Image path: \SystemRoot\system32\drivers\pci.sys Image name: pci.sys Timestamp: Sat Nov 20 10:19:11 2010 (4CE7928F) CheckSum: 00033150 ImageSize: 00033000 File version: 6.1.7601.17514 Product version: 6.1.7601.17514 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: pci.sys OriginalFilename: pci.sys ProductVersion: 6.1.7601.17514 FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850) FileDescription: NT Plug and Play PCI Enumerator LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`00fbc000 fffff880`00fc9000 vdrvroot (deferred) Image path: \SystemRoot\system32\drivers\vdrvroot.sys Image name: vdrvroot.sys Timestamp: Tue Jul 14 02:01:31 2009 (4A5BCADB) CheckSum: 0000C04B ImageSize: 0000D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`00fc9000 fffff880`00fd3000 iusb3hcs (deferred) Image path: \SystemRoot\system32\DRIVERS\iusb3hcs.sys Image name: iusb3hcs.sys Timestamp: Fri Mar 29 13:37:59 2013 (51558B27) CheckSum: 0001076F ImageSize: 0000A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`00fd3000 fffff880`00fe8000 partmgr (deferred) Image path: \SystemRoot\System32\drivers\partmgr.sys Image name: partmgr.sys Timestamp: Sat Mar 17 06:06:09 2012 (4F641BC1) CheckSum: 0001DFC8 ImageSize: 00015000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`00fe8000 fffff880`00ff1000 compbatt (deferred) Image path: \SystemRoot\system32\DRIVERS\compbatt.sys Image name: compbatt.sys Timestamp: Tue Jul 14 01:31:02 2009 (4A5BC3B6) CheckSum: 000080E2 ImageSize: 00009000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`00ff1000 fffff880`00ffd000 BATTC (deferred) Image path: \SystemRoot\system32\DRIVERS\BATTC.SYS Image name: BATTC.SYS Timestamp: Tue Jul 14 01:31:01 2009 (4A5BC3B5) CheckSum: 000083B1 ImageSize: 0000C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01000000 fffff880`01072000 cng (deferred) Image path: \SystemRoot\System32\Drivers\cng.sys Image name: cng.sys Timestamp: Wed Aug 01 17:48:07 2012 (50194FB7) CheckSum: 00075E85 ImageSize: 00072000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01072000 fffff880`010ac000 rdyboost (deferred) Image path: \SystemRoot\System32\drivers\rdyboost.sys Image name: rdyboost.sys Timestamp: Sat Nov 20 10:43:10 2010 (4CE7982E) CheckSum: 00037356 ImageSize: 0003A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`010ac000 fffff880`010e6000 fvevol (deferred) Image path: \SystemRoot\System32\DRIVERS\fvevol.sys Image name: fvevol.sys Timestamp: Sat Nov 20 10:24:06 2010 (4CE793B6) CheckSum: 000389BC ImageSize: 0003A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`010f9000 fffff880`01123000 ataport (deferred) Image path: \SystemRoot\system32\drivers\ataport.SYS Image name: ataport.SYS Timestamp: Sat Nov 20 10:19:15 2010 (4CE79293) CheckSum: 000287EF ImageSize: 0002A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01123000 fffff880`0112e000 msahci (deferred) Image path: \SystemRoot\system32\drivers\msahci.sys Image name: msahci.sys Timestamp: Sat Nov 20 11:33:58 2010 (4CE7A416) CheckSum: 00017292 ImageSize: 0000B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0112e000 fffff880`0113e000 PCIIDEX (deferred) Image path: \SystemRoot\system32\drivers\PCIIDEX.SYS Image name: PCIIDEX.SYS Timestamp: Tue Jul 14 01:19:48 2009 (4A5BC114) CheckSum: 00019CC5 ImageSize: 00010000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0113e000 fffff880`0119c000 msrpc (deferred) Image path: \SystemRoot\System32\Drivers\msrpc.sys Image name: msrpc.sys Timestamp: unavailable (FFFFFFFE) CheckSum: missing ImageSize: 0005E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0119c000 fffff880`011b2000 disk (deferred) Image path: \SystemRoot\system32\drivers\disk.sys Image name: disk.sys Timestamp: Tue Jul 14 01:19:57 2009 (4A5BC11D) CheckSum: 0001FF1D ImageSize: 00016000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`011b2000 fffff880`011e2000 CLASSPNP (deferred) Image path: \SystemRoot\system32\drivers\CLASSPNP.SYS Image name: CLASSPNP.SYS Timestamp: Sat Nov 20 10:19:23 2010 (4CE7929B) CheckSum: 000318BE ImageSize: 00030000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`011e2000 fffff880`011fd000 wanarp (deferred) Image path: \SystemRoot\system32\DRIVERS\wanarp.sys Image name: wanarp.sys Timestamp: Sat Nov 20 11:52:36 2010 (4CE7A874) CheckSum: 00017CCC ImageSize: 0001B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01200000 fffff880`01214000 fileinfo (deferred) Image path: \SystemRoot\system32\drivers\fileinfo.sys Image name: fileinfo.sys Timestamp: Tue Jul 14 01:34:25 2009 (4A5BC481) CheckSum: 00015644 ImageSize: 00014000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01214000 fffff880`01260000 volsnap (deferred) Image path: \SystemRoot\system32\drivers\volsnap.sys Image name: volsnap.sys Timestamp: Sat Nov 20 10:20:08 2010 (4CE792C8) CheckSum: 000527ED ImageSize: 0004C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01269000 fffff880`01536000 iaStorA (deferred) Image path: \SystemRoot\system32\DRIVERS\iaStorA.sys Image name: iaStorA.sys Timestamp: Mon Jan 14 19:00:27 2013 (50F447BB) CheckSum: 000A2FE2 ImageSize: 002CD000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01536000 fffff880`01599000 storport (deferred) Image path: \SystemRoot\system32\DRIVERS\storport.sys Image name: storport.sys Timestamp: Sat Nov 20 11:35:02 2010 (4CE7A456) CheckSum: 00033EAF ImageSize: 00063000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01599000 fffff880`015a4000 amdxata (deferred) Image path: \SystemRoot\system32\drivers\amdxata.sys Image name: amdxata.sys Timestamp: Fri Mar 19 17:18:18 2010 (4BA3A3CA) CheckSum: 0000D0AE ImageSize: 0000B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`015a4000 fffff880`015f0000 fltmgr (deferred) Image path: \SystemRoot\system32\drivers\fltmgr.sys Image name: fltmgr.sys Timestamp: Sat Nov 20 10:19:24 2010 (4CE7929C) CheckSum: 0005452D ImageSize: 0004C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01600000 fffff880`01611000 pcw (deferred) Image path: \SystemRoot\System32\drivers\pcw.sys Image name: pcw.sys Timestamp: Tue Jul 14 01:19:27 2009 (4A5BC0FF) CheckSum: 00014B5E ImageSize: 00011000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01611000 fffff880`0161b000 Fs_Rec (deferred) Image path: \SystemRoot\System32\Drivers\Fs_Rec.sys Image name: Fs_Rec.sys Timestamp: unavailable (FFFFFFFE) CheckSum: missing ImageSize: 0000A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0161b000 fffff880`01629000 LhdX64 (deferred) Image path: \SystemRoot\System32\DRIVERS\LhdX64.sys Image name: LhdX64.sys Timestamp: Mon Jan 11 16:06:58 2010 (4B4B3E92) CheckSum: 0001784C ImageSize: 0000E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01629000 fffff880`01632000 hwpolicy (deferred) Image path: \SystemRoot\System32\drivers\hwpolicy.sys Image name: hwpolicy.sys Timestamp: Sat Nov 20 10:18:54 2010 (4CE7927E) CheckSum: 0000D9F4 ImageSize: 00009000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01635000 fffff880`017d7000 Ntfs (deferred) Image path: \SystemRoot\System32\Drivers\Ntfs.sys Image name: Ntfs.sys Timestamp: Fri Apr 12 13:54:36 2013 (5167F5FC) CheckSum: 001A27D8 ImageSize: 001A2000 File version: 6.1.7601.18127 Product version: 6.1.7601.18127 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: ntfs.sys OriginalFilename: ntfs.sys ProductVersion: 6.1.7601.18127 FileVersion: 6.1.7601.18127 (win7sp1_gdr.130412-0013) FileDescription: NT File System Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`017d7000 fffff880`017f2000 ksecdd (deferred) Image path: \SystemRoot\System32\Drivers\ksecdd.sys Image name: ksecdd.sys Timestamp: Sat Apr 12 03:08:30 2014 (5348920E) CheckSum: 0001F7A9 ImageSize: 0001B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01800000 fffff880`0182c000 ksecpkg (deferred) Image path: \SystemRoot\System32\Drivers\ksecpkg.sys Image name: ksecpkg.sys Timestamp: Sat Apr 12 03:24:10 2014 (534895BA) CheckSum: 00033736 ImageSize: 0002C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0182c000 fffff880`01875000 fwpkclnt (deferred) Image path: \SystemRoot\System32\drivers\fwpkclnt.sys Image name: fwpkclnt.sys Timestamp: Sat Apr 05 03:23:21 2014 (533F5B09) CheckSum: 000538B2 ImageSize: 00049000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01875000 fffff880`01885000 vmstorfl (deferred) Image path: \SystemRoot\system32\drivers\vmstorfl.sys Image name: vmstorfl.sys Timestamp: unavailable (FFFFFFFE) CheckSum: missing ImageSize: 00010000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01885000 fffff880`0188d000 spldr (deferred) Image path: \SystemRoot\System32\Drivers\spldr.sys Image name: spldr.sys Timestamp: Mon May 11 18:56:27 2009 (4A0858BB) CheckSum: 0000E0E9 ImageSize: 00008000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0188d000 fffff880`01898000 iaStorF (deferred) Image path: \SystemRoot\system32\DRIVERS\iaStorF.sys Image name: iaStorF.sys Timestamp: Mon Jan 14 19:00:29 2013 (50F447BD) CheckSum: 000105D0 ImageSize: 0000B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01898000 fffff880`0198b000 ndis (deferred) Image path: \SystemRoot\system32\drivers\ndis.sys Image name: ndis.sys Timestamp: Sat Nov 20 10:23:30 2010 (4CE79392) CheckSum: 000E8AC1 ImageSize: 000F3000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0198b000 fffff880`019eb000 NETIO (deferred) Image path: \SystemRoot\system32\drivers\NETIO.SYS Image name: NETIO.SYS Timestamp: Tue Nov 26 11:21:01 2013 (5294760D) CheckSum: 0006433E ImageSize: 00060000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`019eb000 fffff880`019fd000 mup (deferred) Image path: \SystemRoot\System32\Drivers\mup.sys Image name: mup.sys Timestamp: Tue Jul 14 01:23:45 2009 (4A5BC201) CheckSum: 00015DFD ImageSize: 00012000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01a00000 fffff880`01bff000 tcpip (deferred) Image path: \SystemRoot\System32\drivers\tcpip.sys Image name: tcpip.sys Timestamp: Sat Apr 05 03:26:44 2014 (533F5BD4) CheckSum: 001D5F45 ImageSize: 001FF000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01c00000 fffff880`01c45000 netbt (deferred) Image path: \SystemRoot\System32\DRIVERS\netbt.sys Image name: netbt.sys Timestamp: Sat Nov 20 10:23:18 2010 (4CE79386) CheckSum: 00041134 ImageSize: 00045000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01c45000 fffff880`01c6b000 pacer (deferred) Image path: \SystemRoot\system32\DRIVERS\pacer.sys Image name: pacer.sys Timestamp: Sat Nov 20 11:52:18 2010 (4CE7A862) CheckSum: 00020DCF ImageSize: 00026000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01c6b000 fffff880`01c88000 inspect (deferred) Image path: \SystemRoot\system32\DRIVERS\inspect.sys Image name: inspect.sys Timestamp: Wed Apr 16 22:32:08 2014 (534EE8C8) CheckSum: 00021BCD ImageSize: 0001D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01c88000 fffff880`01c9e000 vwififlt (deferred) Image path: \SystemRoot\system32\DRIVERS\vwififlt.sys Image name: vwififlt.sys Timestamp: Tue Jul 14 02:07:22 2009 (4A5BCC3A) CheckSum: 0001A7DC ImageSize: 00016000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01c9e000 fffff880`01cad000 netbios (deferred) Image path: \SystemRoot\system32\DRIVERS\netbios.sys Image name: netbios.sys Timestamp: Tue Jul 14 02:09:26 2009 (4A5BCCB6) CheckSum: 00011668 ImageSize: 0000F000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01cbc000 fffff880`01cf1000 aswVmm (deferred) Image path: \SystemRoot\System32\Drivers\aswVmm.sys Image name: aswVmm.sys Timestamp: Thu Apr 17 13:04:55 2014 (534FB557) CheckSum: 0003A2D0 ImageSize: 00035000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01cf1000 fffff880`01d04000 aswRvrt (deferred) Image path: \SystemRoot\System32\Drivers\aswRvrt.sys Image name: aswRvrt.sys Timestamp: unavailable (FFFFFFFE) CheckSum: missing ImageSize: 00013000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01d04000 fffff880`01d11000 amdkmpfd (deferred) Image path: \SystemRoot\system32\DRIVERS\amdkmpfd.sys Image name: amdkmpfd.sys Timestamp: Fri Dec 13 06:33:52 2013 (52AA9C40) CheckSum: 00012ADD ImageSize: 0000D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01d29000 fffff880`01d4b000 tdx (deferred) Image path: \SystemRoot\system32\DRIVERS\tdx.sys Image name: tdx.sys Timestamp: Sat Nov 20 10:21:54 2010 (4CE79332) CheckSum: 000288B2 ImageSize: 00022000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01d4b000 fffff880`01d58000 cmdhlp (deferred) Image path: \SystemRoot\System32\DRIVERS\cmdhlp.sys Image name: cmdhlp.sys Timestamp: Wed Apr 16 22:32:05 2014 (534EE8C5) CheckSum: 00010F5E ImageSize: 0000D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01d58000 fffff880`01de1000 afd (deferred) Image path: \SystemRoot\system32\drivers\afd.sys Image name: afd.sys Timestamp: Sat Sep 28 03:09:07 2013 (52462C33) CheckSum: 00081EFD ImageSize: 00089000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01de1000 fffff880`01dfb000 aswRdr2 (deferred) Image path: \SystemRoot\system32\drivers\aswRdr2.sys Image name: aswRdr2.sys Timestamp: Thu Apr 17 13:02:56 2014 (534FB4E0) CheckSum: 0001B123 ImageSize: 0001A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04600000 fffff880`0460d000 TDI (deferred) Image path: \SystemRoot\system32\DRIVERS\TDI.SYS Image name: TDI.SYS Timestamp: Sat Nov 20 10:22:06 2010 (4CE7933E) CheckSum: 00016255 ImageSize: 0000D000 File version: 6.1.7601.17514 Product version: 6.1.7601.17514 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.6 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: tdi.sys OriginalFilename: tdi.sys ProductVersion: 6.1.7601.17514 FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850) FileDescription: TDI Wrapper LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`0460d000 fffff880`04616000 wfplwf (deferred) Image path: \SystemRoot\system32\DRIVERS\wfplwf.sys Image name: wfplwf.sys Timestamp: Tue Jul 14 02:09:26 2009 (4A5BCCB6) CheckSum: 0000B17B ImageSize: 00009000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04616000 fffff880`048e3000 dump_iaStorA (deferred) Image path: \SystemRoot\System32\Drivers\dump_iaStorA.sys Image name: dump_iaStorA.sys Timestamp: Mon Jan 14 19:00:27 2013 (50F447BB) CheckSum: 000A2FE2 ImageSize: 002CD000 File version: 12.0.0.1082 Product version: 12.0.0.1082 File flags: 8 (Mask 3F) Private File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Intel Corporation ProductName: Intel Rapid Storage Technology driver InternalName: iaStorA.sys OriginalFilename: iaStorA.sys ProductVersion: 12.0.0.1082 FileVersion: 12.0.0.1082 PrivateBuild: 12.0.0.1082 SpecialBuild: 12.0.0.1082 FileDescription: Intel Rapid Storage Technology driver - x64 LegalCopyright: Copyright(C) Intel Corporation 1994-2013 LegalTrademarks: Copyright(C) Intel Corporation 1994-2013 Comments: -x64 fffff880`048f7000 fffff880`04900000 cmderd (deferred) Image path: \SystemRoot\System32\DRIVERS\cmderd.sys Image name: cmderd.sys Timestamp: Wed Apr 16 22:31:57 2014 (534EE8BD) CheckSum: 00010327 ImageSize: 00009000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04900000 fffff880`0492a000 cdrom (deferred) Image path: \SystemRoot\system32\DRIVERS\cdrom.sys Image name: cdrom.sys Timestamp: Sat Nov 20 10:19:20 2010 (4CE79298) CheckSum: 0002B742 ImageSize: 0002A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0492a000 fffff880`049e3000 cmdguard (deferred) Image path: \SystemRoot\system32\DRIVERS\cmdguard.sys Image name: cmdguard.sys Timestamp: Wed Apr 16 22:33:03 2014 (534EE8FF) CheckSum: 000B98B7 ImageSize: 000B9000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`049e3000 fffff880`049f4000 Npfs (deferred) Image path: \SystemRoot\System32\Drivers\Npfs.SYS Image name: Npfs.SYS Timestamp: Tue Jul 14 01:19:48 2009 (4A5BC114) CheckSum: 00019AED ImageSize: 00011000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04c00000 fffff880`04c6d000 aswSP (deferred) Image path: \SystemRoot\system32\drivers\aswSP.sys Image name: aswSP.sys Timestamp: Mon May 05 10:11:11 2014 (5367479F) CheckSum: 00075AAC ImageSize: 0006D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04c6d000 fffff880`04c76000 Null (deferred) Image path: \SystemRoot\System32\Drivers\Null.SYS Image name: Null.SYS Timestamp: unavailable (FFFFFFFE) CheckSum: missing ImageSize: 00009000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04c76000 fffff880`04c7d000 Beep (deferred) Image path: \SystemRoot\System32\Drivers\Beep.SYS Image name: Beep.SYS Timestamp: Tue Jul 14 02:00:13 2009 (4A5BCA8D) CheckSum: 000036EB ImageSize: 00007000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04c7d000 fffff880`04c8b000 vga (deferred) Image path: \SystemRoot\System32\drivers\vga.sys Image name: vga.sys Timestamp: Tue Jul 14 01:38:47 2009 (4A5BC587) CheckSum: 00013E6F ImageSize: 0000E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04c8b000 fffff880`04c96000 Msfs (deferred) Image path: \SystemRoot\System32\Drivers\Msfs.SYS Image name: Msfs.SYS Timestamp: unavailable (FFFFFFFE) CheckSum: missing ImageSize: 0000B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04c99000 fffff880`04d9a000 aswSnx (deferred) Image path: \SystemRoot\system32\drivers\aswSnx.sys Image name: aswSnx.sys Timestamp: Mon May 05 10:04:42 2014 (5367461A) CheckSum: 00101E65 ImageSize: 00101000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04d9a000 fffff880`04da8000 CFRMD (deferred) Image path: \SystemRoot\system32\DRIVERS\CFRMD.sys Image name: CFRMD.sys Timestamp: Tue Jul 17 07:05:37 2012 (5004F2A1) CheckSum: 00010B6B ImageSize: 0000E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04da8000 fffff880`04dcd000 VIDEOPRT (deferred) Image path: \SystemRoot\System32\drivers\VIDEOPRT.SYS Image name: VIDEOPRT.SYS Timestamp: Tue Jul 14 01:38:51 2009 (4A5BC58B) CheckSum: 00028FC7 ImageSize: 00025000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.4 Driver File date: 00000000.00000000 Translations: 0000.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: videoprt.sys OriginalFilename: videoprt.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: Video Port Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`04dcd000 fffff880`04ddd000 watchdog (deferred) Image path: \SystemRoot\System32\drivers\watchdog.sys Image name: watchdog.sys Timestamp: Tue Jul 14 01:37:35 2009 (4A5BC53F) CheckSum: 00019CBE ImageSize: 00010000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0000.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: watchdog.sys OriginalFilename: watchdog.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: Watchdog Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`04ddd000 fffff880`04de6000 RDPCDD (deferred) Image path: \SystemRoot\System32\DRIVERS\RDPCDD.sys Image name: RDPCDD.sys Timestamp: Tue Jul 14 02:16:34 2009 (4A5BCE62) CheckSum: 0000FFAC ImageSize: 00009000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04de6000 fffff880`04def000 rdpencdd (deferred) Image path: \SystemRoot\system32\drivers\rdpencdd.sys Image name: rdpencdd.sys Timestamp: Tue Jul 14 02:16:34 2009 (4A5BCE62) CheckSum: 000074D5 ImageSize: 00009000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04def000 fffff880`04df8000 rdprefmp (deferred) Image path: \SystemRoot\system32\drivers\rdprefmp.sys Image name: rdprefmp.sys Timestamp: Tue Jul 14 02:16:35 2009 (4A5BCE63) CheckSum: 0000ABCD ImageSize: 00009000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04e00000 fffff880`04e26000 tunnel (deferred) Image path: \SystemRoot\system32\DRIVERS\tunnel.sys Image name: tunnel.sys Timestamp: Sat Nov 20 11:51:50 2010 (4CE7A846) CheckSum: 0002CD96 ImageSize: 00026000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04e26000 fffff880`04e41000 raspppoe (deferred) Image path: \SystemRoot\system32\DRIVERS\raspppoe.sys Image name: raspppoe.sys Timestamp: Tue Jul 14 02:10:17 2009 (4A5BCCE9) CheckSum: 00019A00 ImageSize: 0001B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04e41000 fffff880`04e62000 raspptp (deferred) Image path: \SystemRoot\system32\DRIVERS\raspptp.sys Image name: raspptp.sys Timestamp: Sat Nov 20 11:52:31 2010 (4CE7A86F) CheckSum: 000251CB ImageSize: 00021000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04e62000 fffff880`04e7c000 rassstp (deferred) Image path: \SystemRoot\system32\DRIVERS\rassstp.sys Image name: rassstp.sys Timestamp: Tue Jul 14 02:10:25 2009 (4A5BCCF1) CheckSum: 0002274B ImageSize: 0001A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04ea3000 fffff880`04ef4000 rdbss (deferred) Image path: \SystemRoot\system32\DRIVERS\rdbss.sys Image name: rdbss.sys Timestamp: Sat Nov 20 10:27:51 2010 (4CE79497) CheckSum: 0004D76F ImageSize: 00051000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04ef4000 fffff880`04f00000 nsiproxy (deferred) Image path: \SystemRoot\system32\drivers\nsiproxy.sys Image name: nsiproxy.sys Timestamp: Tue Jul 14 01:21:02 2009 (4A5BC15E) CheckSum: 00013ED5 ImageSize: 0000C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04f00000 fffff880`04f0b000 mssmbios (deferred) Image path: \SystemRoot\system32\DRIVERS\mssmbios.sys Image name: mssmbios.sys Timestamp: Tue Jul 14 01:31:10 2009 (4A5BC3BE) CheckSum: 0000F474 ImageSize: 0000B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04f0b000 fffff880`04f11000 hmd (deferred) Image path: \SystemRoot\system32\DRIVERS\hmd.sys Image name: hmd.sys Timestamp: Tue Oct 01 13:04:28 2013 (524AAC3C) CheckSum: 00004178 ImageSize: 00006000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04f11000 fffff880`04f1d000 ElbyCDIO (deferred) Image path: \SystemRoot\System32\Drivers\ElbyCDIO.sys Image name: ElbyCDIO.sys Timestamp: Mon Mar 04 10:21:51 2013 (513467AF) CheckSum: 0001936A ImageSize: 0000C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04f1d000 fffff880`04f2c000 discache (deferred) Image path: \SystemRoot\System32\drivers\discache.sys Image name: discache.sys Timestamp: Tue Jul 14 01:37:18 2009 (4A5BC52E) CheckSum: 00015F3F ImageSize: 0000F000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04f2c000 fffff880`04faf000 csc (deferred) Image path: \SystemRoot\system32\drivers\csc.sys Image name: csc.sys Timestamp: Sat Nov 20 10:27:12 2010 (4CE79470) CheckSum: 0008519D ImageSize: 00083000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04faf000 fffff880`04fcd000 dfsc (deferred) Image path: \SystemRoot\System32\Drivers\dfsc.sys Image name: dfsc.sys Timestamp: Sat Nov 20 10:26:31 2010 (4CE79447) CheckSum: 0001D647 ImageSize: 0001E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04fcd000 fffff880`04fde000 blbdrive (deferred) Image path: \SystemRoot\system32\DRIVERS\blbdrive.sys Image name: blbdrive.sys Timestamp: Tue Jul 14 01:35:59 2009 (4A5BC4DF) CheckSum: 00019567 ImageSize: 00011000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05000000 fffff880`05046000 dxgmms1 (pdb symbols) c:\dumps\dxgmms1.pdb\93AB163000A844D5BF442A979FB6FF991\dxgmms1.pdb Loaded symbol image file: dxgmms1.sys Image path: \SystemRoot\System32\drivers\dxgmms1.sys Image name: dxgmms1.sys Timestamp: Wed Apr 10 05:27:15 2013 (5164DC13) CheckSum: 00043C9B ImageSize: 00046000 File version: 6.1.7601.18126 Product version: 6.1.7601.18126 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: dxgmms1.sys OriginalFilename: dxgmms1.sys ProductVersion: 6.1.7601.18126 FileVersion: 6.1.7601.18126 (win7sp1_gdr.130409-1534) FileDescription: DirectX Graphics MMS LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`0505c000 fffff880`050ff000 atikmpag (deferred) Image path: \SystemRoot\system32\DRIVERS\atikmpag.sys Image name: atikmpag.sys Timestamp: Fri Apr 18 03:07:07 2014 (53507ABB) CheckSum: 000A6939 ImageSize: 000A3000 File version: 8.14.1.6374 Product version: 8.14.1.6374 File flags: 8 (Mask 3F) Private File OS: 40004 NT Win32 File type: 3.4 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Advanced Micro Devices, Inc. ProductName: AMD driver InternalName: atikmpag.sys OriginalFilename: atikmpag.sys ProductVersion: 8.14.01.6374 FileVersion: 8.14.01.6374 FileDescription: AMD multi-vendor Miniport Driver LegalCopyright: Copyright (C) 2007 Advanced Micro Devices, Inc. fffff880`050ff000 fffff880`051f3000 dxgkrnl (pdb symbols) c:\dumps\dxgkrnl.pdb\EDB191B27E0A4AF39174371A540483B11\dxgkrnl.pdb Loaded symbol image file: dxgkrnl.sys Image path: \SystemRoot\System32\drivers\dxgkrnl.sys Image name: dxgkrnl.sys Timestamp: Thu Aug 01 09:58:53 2013 (51FA153D) CheckSum: 000F87F1 ImageSize: 000F4000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05410000 fffff880`05453000 ks (deferred) Image path: \SystemRoot\system32\DRIVERS\ks.sys Image name: ks.sys Timestamp: Sat Nov 20 11:33:23 2010 (4CE7A3F3) CheckSum: 00045588 ImageSize: 00043000 File version: 6.1.7601.17514 Product version: 6.1.7601.17514 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.0 Driver File date: 00000000.00000000 Translations: 0000.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: ks.sys OriginalFilename: ks.sys ProductVersion: 6.1.7601.17514 FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850) FileDescription: Kernel CSA Library LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`05453000 fffff880`05465000 umbus (deferred) Image path: \SystemRoot\system32\DRIVERS\umbus.sys Image name: umbus.sys Timestamp: Sat Nov 20 11:44:37 2010 (4CE7A695) CheckSum: 0001AF58 ImageSize: 00012000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05465000 fffff880`054bf000 usbhub (deferred) Image path: \SystemRoot\system32\DRIVERS\usbhub.sys Image name: usbhub.sys Timestamp: Wed Nov 27 02:41:36 2013 (52954DD0) CheckSum: 0005F52B ImageSize: 0005A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`054bf000 fffff880`054d4000 NDProxy (deferred) Image path: \SystemRoot\System32\Drivers\NDProxy.SYS Image name: NDProxy.SYS Timestamp: Sat Nov 20 11:52:20 2010 (4CE7A864) CheckSum: 00019428 ImageSize: 00015000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`054d4000 fffff880`05547000 IntcDAud (deferred) Image path: \SystemRoot\system32\DRIVERS\IntcDAud.sys Image name: IntcDAud.sys Timestamp: Fri Jan 11 14:55:16 2013 (50F019C4) CheckSum: 00072FC7 ImageSize: 00073000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05547000 fffff880`05584000 portcls (deferred) Image path: \SystemRoot\system32\DRIVERS\portcls.sys Image name: portcls.sys Timestamp: Fri Oct 04 03:36:02 2013 (524E1B82) CheckSum: 0003B7C6 ImageSize: 0003D000 File version: 6.1.7601.18276 Product version: 6.1.7601.18276 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.9 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: portcls.sys OriginalFilename: portcls.sys ProductVersion: 6.1.7601.18276 FileVersion: 6.1.7601.18276 (win7sp1_gdr.131003-1533) FileDescription: Port Class (Class Driver for Port/Miniport Devices) LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`05584000 fffff880`055a6000 drmk (deferred) Image path: \SystemRoot\system32\DRIVERS\drmk.sys Image name: drmk.sys Timestamp: Fri Oct 04 04:16:30 2013 (524E24FE) CheckSum: 0002674F ImageSize: 00022000 File version: 6.1.7601.18276 Product version: 6.1.7601.18276 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: drmk.sys OriginalFilename: drmk.sys ProductVersion: 6.1.7601.18276 FileVersion: 6.1.7601.18276 (win7sp1_gdr.131003-1533) FileDescription: Microsoft Trusted Audio Drivers LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`055a6000 fffff880`055ab200 ksthunk (deferred) Image path: \SystemRoot\system32\drivers\ksthunk.sys Image name: ksthunk.sys Timestamp: Tue Jul 14 02:00:19 2009 (4A5BCA93) CheckSum: 0000AF92 ImageSize: 00005200 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05a00000 fffff880`05ac3000 iusb3xhc (deferred) Image path: \SystemRoot\system32\DRIVERS\iusb3xhc.sys Image name: iusb3xhc.sys Timestamp: Fri Mar 29 13:36:19 2013 (51558AC3) CheckSum: 000C59AC ImageSize: 000C3000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05ac3000 fffff880`05ac4e80 USBD (deferred) Image path: \SystemRoot\system32\DRIVERS\USBD.SYS Image name: USBD.SYS Timestamp: Wed Nov 27 02:41:03 2013 (52954DAF) CheckSum: 00007946 ImageSize: 00001E80 File version: 6.1.7601.18328 Product version: 6.1.7601.18328 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0000.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: usbd.sys OriginalFilename: usbd.sys ProductVersion: 6.1.7601.18328 FileVersion: 6.1.7601.18328 (win7sp1_gdr.131126-1436) FileDescription: Universal Serial Bus Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`05ac5000 fffff880`05ad8000 HECIx64 (deferred) Image path: \SystemRoot\system32\DRIVERS\HECIx64.sys Image name: HECIx64.sys Timestamp: Mon Dec 17 20:32:21 2012 (50CF7345) CheckSum: 0001803D ImageSize: 00013000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05ae5000 fffff880`05f3ee20 igdkmd64 (deferred) Image path: \SystemRoot\system32\DRIVERS\igdkmd64.sys Image name: igdkmd64.sys Timestamp: Tue Apr 23 01:53:34 2013 (5175CD7E) CheckSum: 0045ABD6 ImageSize: 00459E20 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05f3f000 fffff880`05f63000 HDAudBus (deferred) Image path: \SystemRoot\system32\DRIVERS\HDAudBus.sys Image name: HDAudBus.sys Timestamp: Sat Nov 20 11:43:42 2010 (4CE7A65E) CheckSum: 0002BFAB ImageSize: 00024000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05f63000 fffff880`05f75000 usbehci (deferred) Image path: \SystemRoot\system32\drivers\usbehci.sys Image name: usbehci.sys Timestamp: Wed Nov 27 02:41:11 2013 (52954DB7) CheckSum: 0001468E ImageSize: 00012000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05f75000 fffff880`05fcb000 USBPORT (deferred) Image path: \SystemRoot\system32\drivers\USBPORT.SYS Image name: USBPORT.SYS Timestamp: Wed Nov 27 02:41:11 2013 (52954DB7) CheckSum: 0005402A ImageSize: 00056000 File version: 6.1.7601.18328 Product version: 6.1.7601.18328 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: usbport.sys OriginalFilename: usbport.sys ProductVersion: 6.1.7601.18328 FileVersion: 6.1.7601.18328 (win7sp1_gdr.131126-1436) FileDescription: USB 1.1 & 2.0 Port Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`05fcb000 fffff880`05fe1000 AgileVpn (deferred) Image path: \SystemRoot\system32\DRIVERS\AgileVpn.sys Image name: AgileVpn.sys Timestamp: Tue Jul 14 02:10:24 2009 (4A5BCCF0) CheckSum: 000192BE ImageSize: 00016000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05fe1000 fffff880`05fed000 ndistapi (deferred) Image path: \SystemRoot\system32\DRIVERS\ndistapi.sys Image name: ndistapi.sys Timestamp: Tue Jul 14 02:10:00 2009 (4A5BCCD8) CheckSum: 000063EA ImageSize: 0000C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05fed000 fffff880`05ff8000 rdpbus (deferred) Image path: \SystemRoot\system32\DRIVERS\rdpbus.sys Image name: rdpbus.sys Timestamp: Tue Jul 14 02:17:46 2009 (4A5BCEAA) CheckSum: 0000C3AD ImageSize: 0000B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`06000000 fffff880`06016000 AcpiVpc (deferred) Image path: \SystemRoot\system32\DRIVERS\AcpiVpc.sys Image name: AcpiVpc.sys Timestamp: Thu Dec 08 04:14:15 2011 (4EE02B87) CheckSum: 00009F02 ImageSize: 00016000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`06016000 fffff880`0601a500 CmBatt (deferred) Image path: \SystemRoot\system32\DRIVERS\CmBatt.sys Image name: CmBatt.sys Timestamp: Tue Jul 14 01:31:03 2009 (4A5BC3B7) CheckSum: 0000D93A ImageSize: 00004500 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0601b000 fffff880`06028000 Smb_driver_Intel (deferred) Image path: \SystemRoot\system32\DRIVERS\Smb_driver_Intel.sys Image name: Smb_driver_Intel.sys Timestamp: Fri Apr 05 06:36:59 2013 (515E54EB) CheckSum: 00008577 ImageSize: 0000D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`06028000 fffff880`0603e000 intelppm (deferred) Image path: \SystemRoot\system32\DRIVERS\intelppm.sys Image name: intelppm.sys Timestamp: Tue Jul 14 01:19:25 2009 (4A5BC0FD) CheckSum: 0000F4EC ImageSize: 00016000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0603e000 fffff880`0604e000 CompositeBus (deferred) Image path: \SystemRoot\system32\DRIVERS\CompositeBus.sys Image name: CompositeBus.sys Timestamp: Sat Nov 20 11:33:17 2010 (4CE7A3ED) CheckSum: 0000983B ImageSize: 00010000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0604e000 fffff880`0604f480 swenum (deferred) Image path: \SystemRoot\system32\DRIVERS\swenum.sys Image name: swenum.sys Timestamp: Tue Jul 14 02:00:18 2009 (4A5BCA92) CheckSum: 0000934E ImageSize: 00001480 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`06058000 fffff880`0658d000 bcmwl664 (deferred) Image path: \SystemRoot\system32\DRIVERS\bcmwl664.sys Image name: bcmwl664.sys Timestamp: Wed Mar 21 14:07:18 2012 (4F69D286) CheckSum: 0053C821 ImageSize: 00535000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0658d000 fffff880`0659a000 vwifibus (deferred) Image path: \SystemRoot\system32\DRIVERS\vwifibus.sys Image name: vwifibus.sys Timestamp: Tue Jul 14 02:07:21 2009 (4A5BCC39) CheckSum: 0000C5FA ImageSize: 0000D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0659a000 fffff880`065ba000 L1C62x64 (deferred) Image path: \SystemRoot\system32\DRIVERS\L1C62x64.sys Image name: L1C62x64.sys Timestamp: Fri Sep 21 08:35:28 2012 (505C0AB0) CheckSum: 0002408E ImageSize: 00020000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`065ba000 fffff880`065d8000 i8042prt (deferred) Image path: \SystemRoot\system32\DRIVERS\i8042prt.sys Image name: i8042prt.sys Timestamp: Tue Jul 14 01:19:57 2009 (4A5BC11D) CheckSum: 00025E29 ImageSize: 0001E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`065d8000 fffff880`065e7000 mouclass (deferred) Image path: \SystemRoot\system32\DRIVERS\mouclass.sys Image name: mouclass.sys Timestamp: Tue Jul 14 01:19:50 2009 (4A5BC116) CheckSum: 0000E5DE ImageSize: 0000F000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`065e7000 fffff880`065f6000 kbdclass (deferred) Image path: \SystemRoot\system32\DRIVERS\kbdclass.sys Image name: kbdclass.sys Timestamp: Tue Jul 14 01:19:50 2009 (4A5BC116) CheckSum: 0001B4C5 ImageSize: 0000F000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`06a00000 fffff880`06a53000 nwifi (deferred) Image path: \SystemRoot\system32\DRIVERS\nwifi.sys Image name: nwifi.sys Timestamp: Tue Jul 14 02:07:23 2009 (4A5BCC3B) CheckSum: 00057B55 ImageSize: 00053000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`06a53000 fffff880`06a66000 ndisuio (deferred) Image path: \SystemRoot\system32\DRIVERS\ndisuio.sys Image name: ndisuio.sys Timestamp: Sat Nov 20 11:50:08 2010 (4CE7A7E0) CheckSum: 0001D42D ImageSize: 00013000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`06a71000 fffff880`06ad0000 iusb3hub (deferred) Image path: \SystemRoot\system32\DRIVERS\iusb3hub.sys Image name: iusb3hub.sys Timestamp: Fri Mar 29 13:36:15 2013 (51558ABF) CheckSum: 00064C0C ImageSize: 0005F000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`06ad0000 fffff880`06ade000 kbdhid (deferred) Image path: \SystemRoot\system32\DRIVERS\kbdhid.sys Image name: kbdhid.sys Timestamp: Sat Nov 20 11:33:25 2010 (4CE7A3F5) CheckSum: 0000D561 ImageSize: 0000E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`06ade000 fffff880`06aeb000 mouhid (deferred) Image path: \SystemRoot\system32\DRIVERS\mouhid.sys Image name: mouhid.sys Timestamp: Tue Jul 14 02:00:20 2009 (4A5BCA94) CheckSum: 00009604 ImageSize: 0000D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`06aeb000 fffff880`06af9000 crashdmp (deferred) Image path: \SystemRoot\System32\Drivers\crashdmp.sys Image name: crashdmp.sys Timestamp: Tue Jul 14 02:01:01 2009 (4A5BCABD) CheckSum: 000178C7 ImageSize: 0000E000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: crashdmp.sys OriginalFilename: crashdmp.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: Crash Dump Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`06af9000 fffff880`06b03000 dump_diskdump (deferred) Image path: \SystemRoot\System32\Drivers\dump_diskdump.sys Image name: dump_diskdump.sys Timestamp: Sat Nov 20 11:33:56 2010 (4CE7A414) CheckSum: 00011A2D ImageSize: 0000A000 File version: 6.1.7601.17514 Product version: 6.1.7601.17514 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: diskdump.sys OriginalFilename: diskdump.sys ProductVersion: 6.1.7601.17514 FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850) FileDescription: Crash Dump Disk Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`06b03000 fffff880`06b16000 dump_dumpfve (deferred) Image path: \SystemRoot\System32\Drivers\dump_dumpfve.sys Image name: dump_dumpfve.sys Timestamp: Tue Jul 14 01:21:51 2009 (4A5BC18F) CheckSum: 00010DEA ImageSize: 00013000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0000.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: dumpfve.sys OriginalFilename: dumpfve.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: Bitlocker Drive Encryption Crashdump Filter LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`06b16000 fffff880`06b22000 Dxapi (deferred) Image path: \SystemRoot\System32\drivers\Dxapi.sys Image name: Dxapi.sys Timestamp: Tue Jul 14 01:38:28 2009 (4A5BC574) CheckSum: 0001418E ImageSize: 0000C000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: dxapi.sys OriginalFilename: dxapi.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: DirectX API Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`06b22000 fffff880`06b3a000 rspndr (deferred) Image path: \SystemRoot\system32\DRIVERS\rspndr.sys Image name: rspndr.sys Timestamp: Tue Jul 14 02:08:50 2009 (4A5BCC92) CheckSum: 0001656B ImageSize: 00018000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`06b74000 fffff880`06b82000 monitor (deferred) Image path: \SystemRoot\system32\DRIVERS\monitor.sys Image name: monitor.sys Timestamp: Tue Jul 14 01:38:52 2009 (4A5BC58C) CheckSum: 000092BF ImageSize: 0000E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`06b82000 fffff880`06ba4000 aswMonFlt (deferred) Image path: \SystemRoot\system32\drivers\aswMonFlt.sys Image name: aswMonFlt.sys Timestamp: Thu Apr 17 13:04:01 2014 (534FB521) CheckSum: 00019291 ImageSize: 00022000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`06ba4000 fffff880`06bc5000 WudfPf (deferred) Image path: \SystemRoot\system32\drivers\WudfPf.sys Image name: WudfPf.sys Timestamp: Sat Nov 20 11:42:44 2010 (4CE7A624) CheckSum: 00021FC8 ImageSize: 00021000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`06bc5000 fffff880`06bdd000 aswStm (deferred) Image path: \SystemRoot\system32\drivers\aswStm.sys Image name: aswStm.sys Timestamp: Mon May 05 10:11:48 2014 (536747C4) CheckSum: 0001BC97 ImageSize: 00018000 File version: 9.0.2018.394 Product version: 9.0.2018.394 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.0 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: AVAST Software ProductName: avast! Antivirus InternalName: aswStm OriginalFilename: aswStm.sys ProductVersion: 9.0.2018.394 FileVersion: 9.0.2018.394 FileDescription: Stream Filter LegalCopyright: Copyright (c) 2013 AVAST Software fffff880`06bdd000 fffff880`06bf2000 lltdio (deferred) Image path: \SystemRoot\system32\DRIVERS\lltdio.sys Image name: lltdio.sys Timestamp: Tue Jul 14 02:08:50 2009 (4A5BCC92) CheckSum: 0001109D ImageSize: 00015000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`06c00000 fffff880`06c1d000 usbccgp (deferred) Image path: \SystemRoot\system32\DRIVERS\usbccgp.sys Image name: usbccgp.sys Timestamp: Wed Nov 27 02:41:15 2013 (52954DBB) CheckSum: 000285F8 ImageSize: 0001D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`06c1d000 fffff880`06c2b000 hidusb (deferred) Image path: \SystemRoot\system32\DRIVERS\hidusb.sys Image name: hidusb.sys Timestamp: Sat Nov 20 11:43:49 2010 (4CE7A665) CheckSum: 00012706 ImageSize: 0000E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`06c2b000 fffff880`06c44000 HIDCLASS (deferred) Image path: \SystemRoot\system32\DRIVERS\HIDCLASS.SYS Image name: HIDCLASS.SYS Timestamp: Wed Jul 03 06:05:05 2013 (51D3A2F1) CheckSum: 00016FD9 ImageSize: 00019000 File version: 6.1.7601.18199 Product version: 6.1.7601.18199 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: hidclass.sys OriginalFilename: hidclass.sys ProductVersion: 6.1.7601.18199 FileVersion: 6.1.7601.18199 (win7sp1_gdr.130702-1534) FileDescription: Hid Class Library LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`06c4b000 fffff880`06df4000 CHDRT64 (deferred) Image path: \SystemRoot\system32\drivers\CHDRT64.sys Image name: CHDRT64.sys Timestamp: Tue Feb 26 06:08:22 2013 (512C4346) CheckSum: 001A0AEB ImageSize: 001A9000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`06df4000 fffff880`06dfc080 HIDPARSE (deferred) Image path: \SystemRoot\system32\DRIVERS\HIDPARSE.SYS Image name: HIDPARSE.SYS Timestamp: Wed Jul 03 06:05:04 2013 (51D3A2F0) CheckSum: 00017787 ImageSize: 00008080 File version: 6.1.7601.18199 Product version: 6.1.7601.18199 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: hidparse.sys OriginalFilename: hidparse.sys ProductVersion: 6.1.7601.18199 FileVersion: 6.1.7601.18199 (win7sp1_gdr.130702-1534) FileDescription: Hid Parsing Library LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`07a00000 fffff880`07a23000 luafv (deferred) Image path: \SystemRoot\system32\drivers\luafv.sys Image name: luafv.sys Timestamp: Tue Jul 14 01:26:13 2009 (4A5BC295) CheckSum: 00027BF1 ImageSize: 00023000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`07a23000 fffff880`081fdc00 rtsuvc (deferred) Image path: \SystemRoot\system32\DRIVERS\rtsuvc.sys Image name: rtsuvc.sys Timestamp: Wed Apr 10 12:43:21 2013 (51654249) CheckSum: 007E210D ImageSize: 007DAC00 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`08200000 fffff880`08224000 mrxsmb20 (deferred) Image path: \SystemRoot\system32\DRIVERS\mrxsmb20.sys Image name: mrxsmb20.sys Timestamp: Wed Apr 27 04:39:37 2011 (4DB781E9) CheckSum: 0002D8BD ImageSize: 00024000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`08224000 fffff880`0822e000 aswHwid (deferred) Image path: \SystemRoot\system32\drivers\aswHwid.sys Image name: aswHwid.sys Timestamp: Tue Apr 08 17:43:26 2014 (5344191E) CheckSum: 0000BA24 ImageSize: 0000A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`08273000 fffff880`0833c000 HTTP (deferred) Image path: \SystemRoot\system32\drivers\HTTP.sys Image name: HTTP.sys Timestamp: Sat Nov 20 10:24:30 2010 (4CE793CE) CheckSum: 000C56EE ImageSize: 000C9000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0833c000 fffff880`0835a000 bowser (deferred) Image path: \SystemRoot\system32\DRIVERS\bowser.sys Image name: bowser.sys Timestamp: Wed Feb 23 05:55:04 2011 (4D649328) CheckSum: 00022D38 ImageSize: 0001E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0835a000 fffff880`08372000 mpsdrv (deferred) Image path: \SystemRoot\System32\drivers\mpsdrv.sys Image name: mpsdrv.sys Timestamp: Tue Jul 14 02:08:25 2009 (4A5BCC79) CheckSum: 0001C76E ImageSize: 00018000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`08372000 fffff880`0839f000 mrxsmb (deferred) Image path: \SystemRoot\system32\DRIVERS\mrxsmb.sys Image name: mrxsmb.sys Timestamp: Wed Apr 27 04:40:38 2011 (4DB78226) CheckSum: 00030225 ImageSize: 0002D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0839f000 fffff880`083ed000 mrxsmb10 (deferred) Image path: \SystemRoot\system32\DRIVERS\mrxsmb10.sys Image name: mrxsmb10.sys Timestamp: Sat Jul 09 04:46:28 2011 (4E17C104) CheckSum: 000503C4 ImageSize: 0004E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`08866000 fffff880`0890c000 peauth (deferred) Image path: \SystemRoot\system32\drivers\peauth.sys Image name: peauth.sys Timestamp: Tue Jul 14 03:01:19 2009 (4A5BD8DF) CheckSum: 000AB7C9 ImageSize: 000A6000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: PEAuth.sys OriginalFilename: PEAuth.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: Protected Environment Authentication and Authorization Export Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`0890c000 fffff880`08917000 secdrv (deferred) Image path: \SystemRoot\System32\Drivers\secdrv.SYS Image name: secdrv.SYS Timestamp: Wed Sep 13 15:18:38 2006 (4508052E) CheckSum: 00010B40 ImageSize: 0000B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`08917000 fffff880`08948000 srvnet (deferred) Image path: \SystemRoot\System32\DRIVERS\srvnet.sys Image name: srvnet.sys Timestamp: Fri Apr 29 05:05:35 2011 (4DBA2AFF) CheckSum: 0003409F ImageSize: 00031000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`08948000 fffff880`0895a000 tcpipreg (deferred) Image path: \SystemRoot\System32\drivers\tcpipreg.sys Image name: tcpipreg.sys Timestamp: Sat Nov 20 11:51:48 2010 (4CE7A844) CheckSum: 0000F328 ImageSize: 00012000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0895a000 fffff880`089c3000 srv2 (deferred) Image path: \SystemRoot\System32\DRIVERS\srv2.sys Image name: srv2.sys Timestamp: Fri Apr 29 05:05:46 2011 (4DBA2B0A) CheckSum: 0006CA1E ImageSize: 00069000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`08a5e000 fffff880`08af6000 srv (deferred) Image path: \SystemRoot\System32\DRIVERS\srv.sys Image name: srv.sys Timestamp: Fri Apr 29 05:06:06 2011 (4DBA2B1E) CheckSum: 0007C839 ImageSize: 00098000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`08b67000 fffff880`08b72000 asyncmac (deferred) Image path: \SystemRoot\system32\DRIVERS\asyncmac.sys Image name: asyncmac.sys Timestamp: Tue Jul 14 02:10:13 2009 (4A5BCCE5) CheckSum: 0000682A ImageSize: 0000B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`08bee000 fffff880`08bf8000 hiber_diskdump (deferred) Image path: \SystemRoot\System32\Drivers\hiber_diskdump.sys Image name: hiber_diskdump.sys Timestamp: Sat Nov 20 11:33:56 2010 (4CE7A414) CheckSum: 00011A2D ImageSize: 0000A000 File version: 6.1.7601.17514 Product version: 6.1.7601.17514 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: diskdump.sys OriginalFilename: diskdump.sys ProductVersion: 6.1.7601.17514 FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850) FileDescription: Crash Dump Disk Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`0d051000 fffff880`0d31e000 hiber_iaStorA (deferred) Image path: \SystemRoot\System32\Drivers\hiber_iaStorA.sys Image name: hiber_iaStorA.sys Timestamp: Mon Jan 14 19:00:27 2013 (50F447BB) CheckSum: 000A2FE2 ImageSize: 002CD000 File version: 12.0.0.1082 Product version: 12.0.0.1082 File flags: 8 (Mask 3F) Private File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Intel Corporation ProductName: Intel Rapid Storage Technology driver InternalName: iaStorA.sys OriginalFilename: iaStorA.sys ProductVersion: 12.0.0.1082 FileVersion: 12.0.0.1082 PrivateBuild: 12.0.0.1082 SpecialBuild: 12.0.0.1082 FileDescription: Intel Rapid Storage Technology driver - x64 LegalCopyright: Copyright(C) Intel Corporation 1994-2013 LegalTrademarks: Copyright(C) Intel Corporation 1994-2013 Comments: -x64 fffff880`0d31e000 fffff880`0d331000 hiber_dumpfve (deferred) Image path: \SystemRoot\System32\Drivers\hiber_dumpfve.sys Image name: hiber_dumpfve.sys Timestamp: Tue Jul 14 01:21:51 2009 (4A5BC18F) CheckSum: 00010DEA ImageSize: 00013000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0000.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: dumpfve.sys OriginalFilename: dumpfve.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: Bitlocker Drive Encryption Crashdump Filter LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`0f400000 fffff880`0f42f000 ndiswan (deferred) Image path: \SystemRoot\system32\DRIVERS\ndiswan.sys Image name: ndiswan.sys Timestamp: Sat Nov 20 11:52:32 2010 (4CE7A870) CheckSum: 0002BB81 ImageSize: 0002F000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0f42f000 fffff880`0f43d000 VClone (deferred) Image path: \SystemRoot\system32\DRIVERS\VClone.sys Image name: VClone.sys Timestamp: Wed Jul 24 17:02:55 2013 (51EFEC9F) CheckSum: 0000C6CA ImageSize: 0000E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0f444000 fffff880`10354000 atikmdag (deferred) Image path: \SystemRoot\system32\DRIVERS\atikmdag.sys Image name: atikmdag.sys Timestamp: Fri Apr 18 04:13:16 2014 (53508A3C) CheckSum: 00EAEEE6 ImageSize: 00F10000 File version: 8.1.1.1390 Product version: 8.1.1.1390 File flags: 8 (Mask 3F) Private File OS: 40004 NT Win32 File type: 3.4 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Advanced Micro Devices, Inc. ProductName: ATI Radeon Family InternalName: atikmdag.sys OriginalFilename: atikmdag.sys ProductVersion: 8.01.01.1390 FileVersion: 8.01.01.1390 FileDescription: ATI Radeon Kernel Mode Driver LegalCopyright: Copyright (C) 1998-2012 Advanced Micro Devices, Inc. fffff880`10354000 fffff880`103d3000 SynTP (deferred) Image path: \SystemRoot\system32\DRIVERS\SynTP.sys Image name: SynTP.sys Timestamp: Fri Apr 05 06:35:02 2013 (515E5476) CheckSum: 00084F3B ImageSize: 0007F000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`103d3000 fffff880`103f7000 rasl2tp (deferred) Image path: \SystemRoot\system32\DRIVERS\rasl2tp.sys Image name: rasl2tp.sys Timestamp: Sat Nov 20 11:52:34 2010 (4CE7A872) CheckSum: 0002CCA3 ImageSize: 00024000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff960`00060000 fffff960`00377000 win32k (deferred) Image path: \SystemRoot\System32\win32k.sys Image name: win32k.sys Timestamp: Fri Feb 07 02:23:07 2014 (52F4357B) CheckSum: 0030300E ImageSize: 00317000 File version: 6.1.7601.18388 Product version: 6.1.7601.18388 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: win32k.sys OriginalFilename: win32k.sys ProductVersion: 6.1.7601.18388 FileVersion: 6.1.7601.18388 (win7sp1_gdr.140206-1432) FileDescription: Multi-User Win32 Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff960`00480000 fffff960`0048a000 TSDDD (deferred) Image path: \SystemRoot\System32\TSDDD.dll Image name: TSDDD.dll Timestamp: Tue Jul 14 02:16:34 2009 (4A5BCE62) CheckSum: 00009E96 ImageSize: 0000A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details fffff960`00670000 fffff960`00697000 cdd (deferred) Image path: \SystemRoot\System32\cdd.dll Image name: cdd.dll Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Timestamp: Thu Feb 03 12:25:25 2011 (4D4A90A5) CheckSum: 00025241 ImageSize: 00027000 Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Page 94f6a not present in the dump file. Type ".hh dbgerr004" for details Unloaded modules: fffff880`08be3000 fffff880`08bee000 atdcm64a.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 0000B000 fffff880`08b72000 fffff880`08be3000 spsys.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 00071000 fffff880`08af6000 fffff880`08b67000 spsys.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 00071000 fffff880`06b22000 fffff880`06b74000 RtsUVStor.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 00052000 fffff880`01d11000 fffff880`01d1f000 crashdmp.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 0000E000 fffff880`01d1f000 fffff880`01d29000 dump_storport.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 0000A000 fffff880`04617000 fffff880`048e4000 dump_iaStorA.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 002CD000 fffff880`048e4000 fffff880`048f7000 dump_dumpfve.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 00013000