Samsung R522 - Обсуждение | [notebook]
возможно интересующие вас вопросы
выша ОС на Samsung R522
Windows XP [ 17 ] ** [9.71%]
Windows Vista [ 14 ] ** [8%]
Windows se7en [ 125 ] ** [71.43%]
Linux [ 15 ] ** [8.57%]
Mac OS [ 4 ] ** [2.29%]
др... [ 11 ] ** [6.29%]
планируете абгрейд Samsung R522
да, расширю ОЗУ [ 76 ] ** [43.43%]
да, поставлю хард большего объема [ 55 ] ** [31.43%]
Оснащу подставкой с доп. охлаждением [ 29 ] ** [16.57%]
нет, меня устраивают такие технические характеристики R522: [ 62 ] ** [35.43%]
были ли у вас проблемы с данной моделью
да, по своей неграмотности [ 19 ] ** [10.86%]
да, были с ОС (решил самостоятельно) [ 39 ] ** [22.29%]
да, были с ОС (пришлось просить помощи, обратиться в СЦ) [ 2 ] ** [1.14%]
да, были с железом (но решил самостоятельно) [ 18 ] ** [10.29%]
да, были с железом (пришлось просить помощи, обратиться в СЦ) [ 13 ] ** [7.43%]
нет, еще не сталкивался :) [ 83 ] ** [47.43%]
Всего голосов: 175
 



Реп: (141)
Samsung R522:

Компания Samsung представила ноутбук R522. R522 оснащен четырьмя USB-портами, от одного из которых можно заряжать мобильные устройства, даже когда ноутбук выключен. Еще один комбинированный порт поддерживает протоколы USB и eSATA, что позволяет передавать данные на скорости до 3 гигабайт в секунду. 15,6-дюймовый дисплей поддерживает соотношение сторон 16:9. Модель оснащена батареей, обеспечивающей до пяти часов автономной работы. Клавиатура ноутбука имеет антибактериальное покрытие, предотвращающее размножение бактерий.
Для обеспечения безопасности данных, внутренности компьютера защищены прочным корпусом Samsung Duracase, который препятствует повреждению комплектующих. В ноутбуке предусмотрен режим работы SuperSilent Mode, при котором уровень шума значительно уменьшается за счет снижения скорости вращения кулера.
Прикрепленное изображение
Прикрепленное изображение


Превосходный стиль
Благодаря великолепному дизайну этот ноутбук будет всегда выделяться из числа других. Стильная площадка для кисти руки, выполненная в стиле «под алюминий», а также необычная подсветка сенсорной панели обеспечивают эргономичность и удобство использования. Это помогает повысить эффективность работы и в то же время являет собой настоящий образец стиля.
Прикрепленное изображение

Долгий срок работы аккумулятора
Длительное время работы от аккумулятора(до 5 часов)обеспечивает максимальную свободу и мобильность. Столь существенное увеличение времени автономной работы достигается за счет передовых инженерных разработок компании Samsung.
Прикрепленное изображение

Устойчивость к воздействию влаги
Водонепроницаемый слой защищает корпус ноутбука от возможных повреждений вследствие случайного попадания жидкости.* Даже если вы прольете на ноутбук кофе, ничего страшного не произойдет. Дайте компьютеру высохнуть—и он вновь заработает как часы! *До 100мл жидкости—по данным испытаний, проведенных в компании Samsung.
Прикрепленное изображение

Больший размер изображения в формате HD
При быстрой смене изображений легко упустить важную деталь. Дисплей ноутбука R522 с диагональю 15,6 дюйма обеспечивает четкое и яркое изображение, а выверенное отношение сторон 16:9 обеспечивает наиболее точную передачу видео в кинофильмах и играх в высоком разрешении(формат HD). Теперь вы можете наслаждаться качественным изображением без раздражающих черных полос.
Прикрепленное изображение

Порт USB с возможностью подзарядки
Удобный USB-порт позволяет заряжать различные портативные устройства (например, мобильные телефоны и MP3-проигрыватели), даже если ноутбук выключен.
Прикрепленное изображение

Прочный корпус
Прочный корпус и крышка с защитой от царапин гарантируют исключительную прочность и надежность. Благодаря этому ноутбуки надежно защищены от возможных механических повреждений в ходе каждодневной работы.
Прикрепленное изображение

Высокая скорость передачи данных
Комбинированный порт поддерживает соединения USB и eSATA и позволяет обмениваться данными с внешними устройствами со скоростью до 3Гб в секунду(что более чем в 6 раз превышает скорость интерфейса USB 2.0).
Прикрепленное изображение

Бесшумная работа
Режим SuperSilent Mode© обеспечивает еще более тихую работу и оптимален для применения в библиотеке, во время совещания или в других условиях, где шум нежелателен. Кроме того, можно задать более низкую скорость вращения вентилятора, охлаждающего процессор,—это также помогает устранить шум.
Прикрепленное изображение


Технические характеристики R522:
Технология / Процессор: Процессорная технология Intel Centrino 2 /
Intel Core 2 Duo
Операционная система: Windows Vista Home Premium, Windows Vista Home Basic
Оперативная память: до 4 гигабайт
Дисплей: 15.6" HD, разрешение 1366 x 768 (опционально возможна LED подсветка)
Жесткий диск: 160/250/320/500 гигабайт (5400 об/мин SATA)
Оптический привод: Super Multi Dual Layer (SATA)
Графическая система: Intel GMA 4500MHD, ATI Mobility Radeon HD 4330 (512 мегабайт gDDR3), ATI Mobility Radeon HD 4650 (1 гигабайт gDDR3)
Беспроводные протоколы: Intel 802.11a/b/g/n,
Atheros 802.11 b/g, Bluetooth 2.0 + EDR
Камера: 1,3 мегапиксела
Габариты (Ш x Г x В ): 376 x 255,8 x 31,3~37,25 мм
Масса: 2,55 кг (с батареей)

тех. Поддержка Samsung (ОС: ХР, Vista, Se7en):

R522-FS07 , NP-R522-FS08 , NP-R522-FS09, NP-R522-FS0A, NP-R522-JS01, NP-R522-JS02 , NP-R522-JS03, NP-R522-XA02


для тех у кого проблемы после смены ОС и не получается восстановить систему:
используйте Samsung Recovery Solution III.
благодарим sia2704
Samsung Recovery Solution IV- спасибо Rvstrax

Интересные находки\замечения\примечания\наставления:


будут добавляться по мере поступления новых.
Ноутбук поступил в розничную продажу в мае 2009



при необходимости ссылки будут добавляться и обновляться


Сообщение отредактировал GaD_NV - 21.09.10, 05:38
Причина редактирования: обновил ссылки



Реп: (1355)
* user-friendly, у R520 такая же платформа, как и у R518. Устанавливаемый процессор мощнее стоящего селерона. Полагаю, что при повышении нагрузки какие-то элементы платы не вывозят её.
Вот схема от R519, более бедная платформа. Обратите внимание, что здесь чётко указано, что можно ставить

Как вариант, можете обратиться к форумчанину Maxinator500 и попросить его расковырять биос и посмотреть, какие процы зашиты в него; он вроде занимается таким.

Сообщение отредактировал peligroso - 23.12.21, 14:13



Реп: (0)
УВАЖАЕМЫЕ собратья по владению "данным чудом инженерии(у меня R519)"....
Подскажите или посоветуйте ПОЖАЛУЙСТА - какой можно в него ПРОЦ поставить( если можно указать два-три ТОПа)...???
Сейчас на данный момент стоит "intel Mobile Core 2 Duo t6500", перед ним стоял родной(какой-то на 1.8-1.9GHz)...
В куче "пустых" и "громких" слов были упомянуты модели:
- Intel® Core™2 Duo T9300;
- Intel® Core™2 Duo T9400;
- Intel® Core™2 Duo T9600...
Интересует Ваше мнение(только прошу БЕЗ ДОГАДОК), может кто-то(по опыту) знает ТОЧНО, или может подсказать КАКИЕ ТО "АЛЬТЕРНАТИВЫ"...

P.S. Заранее - огромная благодарность...!!!!!



Реп: (0)
R522 с материнской платой от R518. Изначально был Т6600.
Прикрепленное изображение



Реп: (0)
* ASK_RW, спасибки...!!!)))) а не подскажешь ещё: разница между 6600 и 9600 ОШУТИМА...???
Просто в моем случаи у меня видяхи 256метров - стоит ли заморачиваться с переходом на 9600???



Реп: (0)
* Montikor,, ну, греться и жрать батарею стал сильнее - это однозначно... Пиши, какие тесты прогнать, сделаю по-возможности. На 6600-м была 7-ка, пришлось ставить 10 из-за wifi модуля, заодно и процессор заменил, так что ощущения двойственные.



Реп: (0)
Подскажите пожалуйста, можно как-то наладить нормальное охлаждение на R520? Он и раньше быстро перегревался, но теперь вообще 30 минут нормальной работы, а потом тормоза и аварийное отключение. В комнате примерно 23-25 градусов. Убрал батарею и плашки для карт. Может кто подсказать рабочие схемы для поддержания работоспособности ноута?



Реп: (1355)
* tortl, т.е. также почистили от пыли и поменяли термоинтерфейс?



Реп: (0)
* peligroso, чистил, термо не менял. Там, сам корпус в районе диска, становится раскалённым...



Реп: (1355)
* tortl, ну так термуху нужно всегда менять.



Реп: (0)
У кого нибудь есть windows 7 home basic для ноутбука модели R530?



Реп: (2)
Всем привет! Проблема с клавой на ноуте Samsung R519. При нажатии на некоторые клавишы печатает два символа. Например, при нажатии на "1" печатает "й1", на "2" выдаёт "ц2" и т.д. Купил новую клавиатуру, ничего не поменялось. Переустановил винду, и снова ничего не поменялось, многое печатает двумя символами.
Куда копать???
Заранее благодарен.



Реп: (0)
Товарищи, время от времени появляется BSOD'ы(каждый день). Самые разнообразные: driver irql not less or equal, page fault is nonpaged area(win32kbase.sys), kmodeException not handled, Attempted write to readonly memory, system thread exception not handled. Ноутбук старенький, Samsung R410(R20). Установлена Windows 10 x86. Делал восстановление ОС через командную строку, исправление ошибок. Озу проверял, все хорошо. Скажите, дамп все время перезаписывается с момента окончания последнего аварийного завершения, или содержит все предыдущие данные аварийных завершений?
В общем, хочу вас попросить проанализировать дамп памяти, т.к. я пытался разобраться, но не смог.
************* Preparing the environment for Debugger Extensions Gallery repositories **************
ExtensionRepository : Implicit
UseExperimentalFeatureForNugetShare : false
AllowNugetExeUpdate : false
AllowNugetMSCredentialProviderInstall : false
AllowParallelInitializationOfLocalRepositories : true

-- Configuring repositories
----> Repository : LocalInstalled, Enabled: true
----> Repository : UserExtensions, Enabled: true

>>>>>>>>>>>>> Preparing the environment for Debugger Extensions Gallery repositories completed, duration 0.000 seconds

************* Waiting for Debugger Extensions Gallery to Initialize **************

>>>>>>>>>>>>> Waiting for Debugger Extensions Gallery to Initialize completed, duration 0.281 seconds
----> Repository : UserExtensions, Enabled: true, Packages count: 0
----> Repository : LocalInstalled, Enabled: true, Packages count: 36

Microsoft (R) Windows Debugger Version 10.0.25877.1004 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\MEMORY.DMP]
Kernel Bitmap Dump File: Kernel address space is available, User address space may not be available.


************* Path validation summary **************
Response Time (ms) Location
Deferred srv*c:\symbols*http://msdl.microsoft.com/download/symbols
Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Page 301c6 not present in the dump file. Type ".hh dbgerr004" for details
DBGHELP: Timeout to store: c:\symbols*http://msdl.microsoft.com/download/symbols
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_EPROCESS ***
*** ***
*************************************************************************
Windows 10 Kernel Version 19041 MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Edition build lab: 19041.1.x86fre.vb_release.191206-1406
Kernel base = 0x83c00000 PsLoadedModuleList = 0x83ec4db8
Debug session time: Tue Jan 9 20:30:02.942 2024 (UTC + 4:00)
System Uptime: 0 days 1:41:02.791
DBGHELP: Timeout to store: c:\symbols*http://msdl.microsoft.com/download/symbols
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_EPROCESS ***
*** ***
*************************************************************************
Loading Kernel Symbols
...............................................................
................................................................
................................................................
....
Loading User Symbols
PEB is paged out (Peb.Ldr = 0270200c). Type ".hh dbgerr001" for details
Loading unloaded module list
..........

************* Symbol Loading Error Summary **************
Module name Error
ntkrpamp The system cannot find the file specified

You can troubleshoot most symbol related issues by turning on symbol loading diagnostics (!sym noisy) and repeating the command that caused symbols to be loaded.
You should also verify that your symbol search path (.sympath) is correct.
For analysis of this file, run !analyze -v
eax=a633b6f4 ebx=00000000 ecx=83da11e1 edx=83da10a6 esi=00000000 edi=00000000
eip=83d7ef0c esp=a633b17c ebp=a633b194 iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246
nt!KeBugCheckEx:
83d7ef0c 55 push ebp
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common BugCheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: c0000006, The exception code that was not handled
Arg2: 8fb91316, The address that the exception occurred at
Arg3: 00000000, Parameter 0 of the exception
Arg4: 8ff6c5bc, Parameter 1 of the exception

Debugging Details:
------------------

Unable to load image \SystemRoot\system32\DRIVERS\K4W-21-15\klif.sys, Win32 error 0n2
***** Kernel symbols are WRONG. Please fix symbols to do analysis.

*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_IMAGE_DOS_HEADER ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_IMAGE_DOS_HEADER ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_IMAGE_DOS_HEADER ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_IMAGE_DOS_HEADER ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_IMAGE_DOS_HEADER ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_IMAGE_DOS_HEADER ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_IMAGE_DOS_HEADER ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_IMAGE_DOS_HEADER ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_IMAGE_DOS_HEADER ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_IMAGE_DOS_HEADER ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_EPROCESS ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_MMPTE ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************

KEY_VALUES_STRING: 1

Key : Analysis.CPU.mSec
Value: 1468

Key : Analysis.Elapsed.mSec
Value: 133916

Key : Analysis.IO.Other.Mb
Value: 22

Key : Analysis.IO.Read.Mb
Value: 0

Key : Analysis.IO.Write.Mb
Value: 31

Key : Analysis.Init.CPU.mSec
Value: 2984

Key : Analysis.Init.Elapsed.mSec
Value: 19682006

Key : Analysis.Memory.CommitPeak.Mb
Value: 67

Key : Bugcheck.Code.KiBugCheckData
Value: 0x1e

Key : Bugcheck.Code.LegacyAPI
Value: 0x1e

Key : Failure.Bucket
Value: WRONG_SYMBOLS_X86_19041.1.x86fre.vb_release.191206-1406_TIMESTAMP_780921-131213_CC80C6AD_nt_wrong_symbols!CC80C6AD776000

Key : Failure.Hash
Value: {42178236-0455-2056-0148-ce5698bf91dd}

Key : WER.OS.Branch
Value: vb_release

Key : WER.OS.Version
Value: 10.0.19041.1


BUGCHECK_CODE: 1e

BUGCHECK_P1: ffffffffc0000006

BUGCHECK_P2: ffffffff8fb91316

BUGCHECK_P3: 0

BUGCHECK_P4: ffffffff8ff6c5bc

FILE_IN_CAB: MEMORY.DMP

ADDITIONAL_DEBUG_TEXT:
You can run '.symfix; .reload' to try to fix the symbol path and load symbols.

WRONG_SYMBOLS_TIMESTAMP: cc80c6ad

WRONG_SYMBOLS_SIZE: 776000

FAULTING_MODULE: 83c00000 nt

EXCEPTION_PARAMETER1: 00000000

EXCEPTION_PARAMETER2: 8ff6c5bc

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXNTFS: 1 (!blackboxntfs)


BLACKBOXPNP: 1 (!blackboxpnp)


BLACKBOXWINLOGON: 1

STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
a633b178 83e16eaf 0000001e c0000006 8fb91316 nt!KeBugCheckEx
a633b194 83da1092 a633b6f4 83f0c5b8 a633b2a0 nt!KeRegisterNmiCallback+0x239
a633b1b8 83da1064 a633b6f4 83f0c5b8 a633b2a0 nt!ExRaiseStatus+0xce
a633b290 83ca54c8 a633b6f4 a633b2a0 00010037 nt!ExRaiseStatus+0xa0
a633b6d8 83d99ae1 a633b6f4 00000000 a633b7d8 nt!Ordinal7+0x1728
a633b744 83d9e617 c0000010 00000000 00000000 nt!Kei386EoiHelper+0x4f5
a633b7ec 8fb8b139 d2c17a44 a633b820 00000064 nt!Kei386EoiHelper+0x502b
a633b860 8fb91d92 1015f3b4 d8af2990 d8af2a80 klif+0x8b139
a633b8ac 86e03aac d8af2a24 a633b910 a633b8e4 klif+0x91d92
a633b928 86e0360d 8a741048 d8af2990 c2804290 FLTMGR!FltpPerformPreCallbacksWorker+0x2ec
a633b948 86e2210e c284ff10 8a741048 bc084800 FLTMGR!FltpPassThroughInternal+0xad
a633b9a0 83c40f68 8a741048 c2804290 c28044b0 FLTMGR!FltpCreate+0x34e
a633b9bc 83c40eff c284ff10 c2804290 a633b9e4 nt!IofCallDriver+0x48
a633b9e4 83f6d134 2ab09831 8a731298 83f6c3a0 nt!RtlCopyUnicodeString+0x43f
a633baa4 83f5eb10 8a731298 05166250 b7751c18 nt!ProbeForWrite+0x1974
a633bba4 83f66f77 00000840 86166250 00000001 nt!SeUnlockSubjectContext+0x1500
a633bc44 83f9e6de 056ff1cc 86166250 00000001 nt!ObOpenObjectByNameEx+0x1c7
a633bcf4 83f9d450 056ff1cc 056ff1e4 00000000 nt!NtOpenFile+0x12be
a633bd34 83d97ed0 056ff218 00100021 056ff1cc nt!NtOpenFile+0x30
a633bd54 77382990 badb0d00 02000000 00000000 nt!HviGetPartitionIsolationType+0x1e08
a633bd58 badb0d00 02000000 00000000 00000000 0x77382990
a633bd5c 02000000 00000000 00000000 00000000 0xbadb0d00
a633bd60 00000000 00000000 00000000 00000000 0x2000000


IMAGE_VERSION: 30.1486.0.1090

STACK_COMMAND: .cxr; .ecxr ; kb

EXCEPTION_CODE_STR: CC80C6AD

EXCEPTION_STR: WRONG_SYMBOLS

PROCESS_NAME: ntoskrnl.wrong.symbols.exe

IMAGE_NAME: ntoskrnl.wrong.symbols.exe

MODULE_NAME: nt_wrong_symbols

SYMBOL_NAME: nt_wrong_symbols!CC80C6AD776000

FAILURE_BUCKET_ID: WRONG_SYMBOLS_X86_19041.1.x86fre.vb_release.191206-1406_TIMESTAMP_780921-131213_CC80C6AD_nt_wrong_symbols!CC80C6AD776000

OS_VERSION: 10.0.19041.1

BUILDLAB_STR: vb_release

OSPLATFORM_TYPE: x86

OSNAME: Windows 10

FAILURE_ID_HASH: {42178236-0455-2056-0148-ce5698bf91dd}

Followup: MachineOwner
---------

0: kd> lmvm nt
Browse full module list
start end module name
83c00000 84376000 nt (export symbols) ntkrpamp.exe
Loaded symbol image file: ntkrpamp.exe
Mapped memory image file: c:\symbols\ntoskrnl.exe\CC80C6AD776000\ntoskrnl.exe
Image path: ntkrpamp.exe
Image name: ntkrpamp.exe
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: CC80C6AD (This is a reproducible build file hash, not a timestamp)
CheckSum: 006E408D
ImageSize: 00776000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
0: kd> lmDv
start end module name
81d52000 81fde000 mcupdate_GenuineIntel # (pdb symbols) c:\symbols\mcupdate_GenuineIntel.pdb\063D88884160C68F256511E170B35C121\mcupdate_GenuineIntel.pdb
Loaded symbol image file: mcupdate_GenuineIntel.dll
Mapped memory image file: c:\symbols\mcupdate_GenuineIntel.dll\68C92CA628c000\mcupdate_GenuineIntel.dll
Image path: \SystemRoot\system32\mcupdate_GenuineIntel.dll
Image name: mcupdate_GenuineIntel.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 68C92CA6 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0029509C
ImageSize: 0028C000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
81fde000 81fe6000 kd (deferred)
Image path: \SystemRoot\system32\kd.dll
Image name: kd.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: A1F757B6 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00005157
ImageSize: 00008000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
81fe6000 82002000 tm (deferred)
Image path: \SystemRoot\System32\drivers\tm.sys
Image name: tm.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 80EF45B9 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00019CD9
ImageSize: 0001C000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
82002000 8204e000 CLFS (deferred)
Image path: \SystemRoot\System32\drivers\CLFS.SYS
Image name: CLFS.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 8125CDBE (This is a reproducible build file hash, not a timestamp)
CheckSum: 00052DC0
ImageSize: 0004C000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
8204e000 82063000 PSHED (deferred)
Image path: \SystemRoot\system32\PSHED.dll
Image name: PSHED.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 9268EBD9 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00010641
ImageSize: 00015000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
82063000 8206d000 BOOTVID (deferred)
Image path: \SystemRoot\system32\BOOTVID.dll
Image name: BOOTVID.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: C73DA3C6 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000EAE0
ImageSize: 0000A000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
8206d000 8214d000 clipsp (deferred)
Image path: \SystemRoot\System32\drivers\clipsp.sys
Image name: clipsp.sys
Browse all global symbols functions data
Timestamp: Fri Oct 20 06:35:11 2023 (6531E75F)
CheckSum: 000DD24E
ImageSize: 000E0000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
83a00000 83a6e000 hal (deferred)
Image path: halmacpi.dll
Image name: halmacpi.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: FD9B9AC4 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0006C58D
ImageSize: 0006E000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
83c00000 84376000 nt (export symbols) ntkrpamp.exe
Loaded symbol image file: ntkrpamp.exe
Mapped memory image file: c:\symbols\ntoskrnl.exe\CC80C6AD776000\ntoskrnl.exe
Image path: ntkrpamp.exe
Image name: ntkrpamp.exe
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: CC80C6AD (This is a reproducible build file hash, not a timestamp)
CheckSum: 006E408D
ImageSize: 00776000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
86e00000 86e4d000 FLTMGR # (pdb symbols) c:\symbols\fltMgr.pdb\3D5BBA5D6899AA5ED513116AAF34EB3D1\fltMgr.pdb
Loaded symbol image file: FLTMGR.SYS
Mapped memory image file: c:\symbols\FLTMGR.SYS\BB9447164d000\FLTMGR.SYS
Image path: \SystemRoot\System32\drivers\FLTMGR.SYS
Image name: FLTMGR.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: BB944716 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0004C91A
ImageSize: 0004D000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
86e4d000 86e6a000 ksecdd (deferred)
Image path: \SystemRoot\System32\drivers\ksecdd.sys
Image name: ksecdd.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: C638CD19 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001D6B4
ImageSize: 0001D000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
86e6a000 86e9f000 msrpc (deferred)
Image path: \SystemRoot\System32\drivers\msrpc.sys
Image name: msrpc.sys
Browse all global symbols functions data
Timestamp: unavailable (FFFFFFFE)
CheckSum: missing
ImageSize: 00035000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
86e9f000 86eaa000 cmimcext (deferred)
Image path: \SystemRoot\System32\drivers\cmimcext.sys
Image name: cmimcext.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 0E9A327D (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000BC85
ImageSize: 0000B000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
86eaa000 86eb8000 werkernel (deferred)
Image path: \SystemRoot\System32\drivers\werkernel.sys
Image name: werkernel.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 27470E69 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00011515
ImageSize: 0000E000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
86eb8000 86ec1000 ntosext (deferred)
Image path: \SystemRoot\System32\drivers\ntosext.sys
Image name: ntosext.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 89076B67 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000E6FE
ImageSize: 00009000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
86ec1000 86f77000 CI (deferred)
Image path: \SystemRoot\system32\CI.dll
Image name: CI.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 1A419E54 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000BDD9B
ImageSize: 000B6000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
86f77000 87002000 cng (deferred)
Image path: \SystemRoot\System32\drivers\cng.sys
Image name: cng.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: B4D52043 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0008B4EB
ImageSize: 0008B000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
87002000 8709c000 Wdf01000 (deferred)
Image path: \SystemRoot\system32\drivers\Wdf01000.sys
Image name: Wdf01000.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 246AEF39 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000A3E4B
ImageSize: 0009A000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
8709c000 870ab000 WDFLDR (deferred)
Image path: \SystemRoot\system32\drivers\WDFLDR.SYS
Image name: WDFLDR.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 0563EA23 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001A3FC
ImageSize: 0000F000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
870ab000 870b6000 SleepStudyHelper (deferred)
Image path: \SystemRoot\system32\drivers\SleepStudyHelper.sys
Image name: SleepStudyHelper.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 4CF4121C (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000DFBE
ImageSize: 0000B000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
870b6000 870c3000 WppRecorder (deferred)
Image path: \SystemRoot\system32\drivers\WppRecorder.sys
Image name: WppRecorder.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 3409C730 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000C467
ImageSize: 0000D000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
870c3000 870dd000 acpiex (deferred)
Image path: \SystemRoot\System32\Drivers\acpiex.sys
Image name: acpiex.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: DF011218 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001D9D3
ImageSize: 0001A000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
870dd000 87176000 ACPI (deferred)
Image path: \SystemRoot\System32\drivers\ACPI.sys
Image name: ACPI.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: E251DDFE (This is a reproducible build file hash, not a timestamp)
CheckSum: 00095A23
ImageSize: 00099000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
87176000 8717f000 WMILIB (deferred)
Image path: \SystemRoot\System32\drivers\WMILIB.SYS
Image name: WMILIB.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 26857BE9 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00009E18
ImageSize: 00009000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
87189000 871e9000 intelpep (deferred)
Image path: \SystemRoot\System32\drivers\intelpep.sys
Image name: intelpep.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: FCC1CCF2 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00064A98
ImageSize: 00060000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
871e9000 871f9000 WindowsTrustedRT (deferred)
Image path: \SystemRoot\system32\drivers\WindowsTrustedRT.sys
Image name: WindowsTrustedRT.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: BE42CFC0 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001B481
ImageSize: 00010000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
871f9000 87200000 pciide (deferred)
Image path: \SystemRoot\System32\drivers\pciide.sys
Image name: pciide.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 0B0FADE8 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00012B36
ImageSize: 00007000
File version: 10.0.19041.3636
Product version: 10.0.19041.3636
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: pciide.sys
OriginalFilename: pciide.sys
ProductVersion: 10.0.19041.3636
FileVersion: 10.0.19041.3636 (WinBuild.160101.0800)
FileDescription: Generic PCI IDE Bus Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
87200000 87208000 IntelTA (deferred)
Image path: \SystemRoot\System32\drivers\IntelTA.sys
Image name: IntelTA.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: D23D6807 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000D9D8
ImageSize: 00008000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
87208000 87210000 WindowsTrustedRTProxy (deferred)
Image path: \SystemRoot\System32\drivers\WindowsTrustedRTProxy.sys
Image name: WindowsTrustedRTProxy.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 4E3ABE5E (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000C579
ImageSize: 00008000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
87210000 8721d000 pcw (deferred)
Image path: \SystemRoot\System32\drivers\pcw.sys
Image name: pcw.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 7E2766F3 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001ABCA
ImageSize: 0000D000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
8721d000 87269000 klupd_K4W_21_15_arkmon (deferred)
Image path: \SystemRoot\System32\Drivers\klupd_K4W-21-15_arkmon.sys
Image name: klupd_K4W-21-15_arkmon.sys
Browse all global symbols functions data
Timestamp: Tue Sep 19 13:20:27 2023 (650967DB)
CheckSum: 0004F74C
ImageSize: 0004C000
File version: 2.17.4.0
Product version: 2.17.4.0
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: AO Kaspersky Lab
ProductName: Kaspersky Bases
InternalName: arkmon
OriginalFilename: arkmon.sys
ProductVersion: 2.17.4.0
FileVersion: 2.17.4.0
FileDescription: Kaspersky Lab Anti-Rootkit Monitor Driver
LegalCopyright: © 2023 AO Kaspersky Lab. All Rights Reserved.
LegalTrademarks: Registered trademarks and service marks are the property of their respective owners
87269000 87271000 msisadrv (deferred)
Image path: \SystemRoot\System32\drivers\msisadrv.sys
Image name: msisadrv.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: E41FC7FF (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000C1A1
ImageSize: 00008000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
87271000 872cc000 pci (deferred)
Image path: \SystemRoot\System32\drivers\pci.sys
Image name: pci.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 9E66E352 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0006299B
ImageSize: 0005B000
File version: 10.0.19041.3636
Product version: 10.0.19041.3636
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: pci.sys
OriginalFilename: pci.sys
ProductVersion: 10.0.19041.3636
FileVersion: 10.0.19041.3636 (WinBuild.160101.0800)
FileDescription: NT Plug and Play PCI Enumerator
LegalCopyright: © Microsoft Corporation. All rights reserved.
872cc000 872de000 vdrvroot (deferred)
Image path: \SystemRoot\System32\drivers\vdrvroot.sys
Image name: vdrvroot.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: C89DFC1A (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000FCF9
ImageSize: 00012000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
872de000 87308000 cm_km (deferred)
Image path: \SystemRoot\system32\DRIVERS\cm_km.sys
Image name: cm_km.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 6A071323 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0003933A
ImageSize: 0002A000
File version: 30.1486.0.140
Product version: 30.1486.0.140
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: AO Kaspersky Lab
ProductName: Coretech Delivery
InternalName: cm_km
ProductVersion: 30.1486.0.140-1c7f04f5b63c94377b16ea367b316551e04bd871
FileVersion: 30.1486.0.140
FileDescription: Cryptographic Module x86 (56 bit)
LegalCopyright: © 2023 AO Kaspersky Lab. All Rights Reserved.
LegalTrademarks: Registered trademarks and service marks are the property of their respective owners
87308000 8732b000 pdc (deferred)
Image path: \SystemRoot\system32\drivers\pdc.sys
Image name: pdc.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 1A897B8B (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002299C
ImageSize: 00023000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
8732b000 8733d000 CEA (deferred)
Image path: \SystemRoot\system32\drivers\CEA.sys
Image name: CEA.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 0D201B4B (This is a reproducible build file hash, not a timestamp)
CheckSum: 00017132
ImageSize: 00012000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
8733d000 87361000 partmgr (deferred)
Image path: \SystemRoot\System32\drivers\partmgr.sys
Image name: partmgr.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 8BC1B083 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00025E6C
ImageSize: 00024000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
87361000 873e4000 spaceport (deferred)
Image path: \SystemRoot\System32\drivers\spaceport.sys
Image name: spaceport.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 0E234F68 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0008A395
ImageSize: 00083000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
873e4000 873f7000 volmgr (deferred)
Image path: \SystemRoot\System32\drivers\volmgr.sys
Image name: volmgr.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 92B3C833 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000117E2
ImageSize: 00013000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
873f7000 87446000 volmgrx (deferred)
Image path: \SystemRoot\System32\drivers\volmgrx.sys
Image name: volmgrx.sys
Browse all global symbols functions data
Timestamp: unavailable (FFFFFFFE)
CheckSum: missing
ImageSize: 0004F000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
87446000 87454000 PCIIDEX (deferred)
Image path: \SystemRoot\System32\drivers\PCIIDEX.SYS
Image name: PCIIDEX.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 81D329EA (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001021C
ImageSize: 0000E000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
87454000 8746a000 mountmgr (deferred)
Image path: \SystemRoot\System32\drivers\mountmgr.sys
Image name: mountmgr.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 67EE578C (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001A1E0
ImageSize: 00016000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
8746a000 87473000 atapi (deferred)
Image path: \SystemRoot\System32\drivers\atapi.sys
Image name: atapi.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: A0BB65F5 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000102E3
ImageSize: 00009000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
87473000 874a0000 ataport (deferred)
Image path: \SystemRoot\System32\drivers\ataport.SYS
Image name: ataport.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 776E0F98 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00038900
ImageSize: 0002D000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
874a0000 874b7000 EhStorClass (deferred)
Image path: \SystemRoot\System32\drivers\EhStorClass.sys
Image name: EhStorClass.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 712FE54C (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001AC35
ImageSize: 00017000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
874b7000 874c9000 fileinfo (deferred)
Image path: \SystemRoot\System32\drivers\fileinfo.sys
Image name: fileinfo.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 4BCB7443 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000153D2
ImageSize: 00012000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
874c9000 874fb000 Wof (deferred)
Image path: \SystemRoot\System32\Drivers\Wof.sys
Image name: Wof.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 2F441D25 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00035B57
ImageSize: 00032000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
874fb000 8774e000 Ntfs (deferred)
Image path: \SystemRoot\System32\Drivers\Ntfs.sys
Image name: Ntfs.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 7AB290C5 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00247079
ImageSize: 00253000
File version: 10.0.19041.3693
Product version: 10.0.19041.3693
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ntfs.sys
OriginalFilename: ntfs.sys
ProductVersion: 10.0.19041.3693
FileVersion: 10.0.19041.3693 (WinBuild.160101.0800)
FileDescription: NT File System Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
8774e000 87758000 Fs_Rec (deferred)
Image path: \SystemRoot\System32\Drivers\Fs_Rec.sys
Image name: Fs_Rec.sys
Browse all global symbols functions data
Timestamp: unavailable (FFFFFFFE)
CheckSum: missing
ImageSize: 0000A000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
87758000 87863000 ndis (deferred)
Image path: \SystemRoot\system32\drivers\ndis.sys
Image name: ndis.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: A69026D1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00107E62
ImageSize: 0010B000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
87863000 878cf000 NETIO (deferred)
Image path: \SystemRoot\system32\drivers\NETIO.SYS
Image name: NETIO.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 84F198CF (This is a reproducible build file hash, not a timestamp)
CheckSum: 0006B5ED
ImageSize: 0006C000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
878cf000 878f6000 ksecpkg (deferred)
Image path: \SystemRoot\System32\Drivers\ksecpkg.sys
Image name: ksecpkg.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 0BB642A9 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00024FA6
ImageSize: 00027000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
878f6000 87b43000 tcpip (deferred)
Image path: \SystemRoot\System32\drivers\tcpip.sys
Image name: tcpip.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 96E234E6 (This is a reproducible build file hash, not a timestamp)
CheckSum: 002496AC
ImageSize: 0024D000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
87b43000 87b9b000 fwpkclnt (deferred)
Image path: \SystemRoot\System32\drivers\fwpkclnt.sys
Image name: fwpkclnt.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 56443C86 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0005F214
ImageSize: 00058000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
87b9b000 87bb3000 wfplwfs (deferred)
Image path: \SystemRoot\System32\drivers\wfplwfs.sys
Image name: wfplwfs.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 5765F8C4 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002155E
ImageSize: 00018000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
87bb3000 87c58000 fvevol (deferred)
Image path: \SystemRoot\System32\DRIVERS\fvevol.sys
Image name: fvevol.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: E6738138 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000A2FC1
ImageSize: 000A5000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
87c58000 87c60000 volume (deferred)
Image path: \SystemRoot\System32\drivers\volume.sys
Image name: volume.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 931027B1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000B469
ImageSize: 00008000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
87c60000 87cbb000 volsnap (deferred)
Image path: \SystemRoot\System32\drivers\volsnap.sys
Image name: volsnap.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 3A57FAA5 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00065AC4
ImageSize: 0005B000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
87cbb000 87cf4000 rdyboost (deferred)
Image path: \SystemRoot\System32\drivers\rdyboost.sys
Image name: rdyboost.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: DA1C1B42 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000421C5
ImageSize: 00039000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
87cf4000 87d11000 mup (deferred)
Image path: \SystemRoot\System32\Drivers\mup.sys
Image name: mup.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 747D5B20 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001FEE3
ImageSize: 0001D000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
87d11000 87d37000 klupd_K4W_21_15_klbg (deferred)
Image path: \SystemRoot\System32\Drivers\klupd_K4W-21-15_klbg.sys
Image name: klupd_K4W-21-15_klbg.sys
Browse all global symbols functions data
Timestamp: Tue Sep 19 14:50:11 2023 (65097CE3)
CheckSum: 0002CBB4
ImageSize: 00026000
File version: 11.18.3.0
Product version: 11.18.3.0
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: AO Kaspersky Lab
ProductName: Kaspersky Bases
InternalName: klbg
OriginalFilename: klbg.sys
ProductVersion: 11.18.3.0
FileVersion: 11.18.3.0
FileDescription: Kaspersky Lab Boot Guard Driver
LegalCopyright: © 2023 AO Kaspersky Lab. All Rights Reserved.
LegalTrademarks: Registered trademarks and service marks are the property of their respective owners
87d37000 87d44000 iorate (deferred)
Image path: \SystemRoot\system32\drivers\iorate.sys
Image name: iorate.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 8E1B90EF (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001590E
ImageSize: 0000D000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
87d51000 87d68000 disk (deferred)
Image path: \SystemRoot\System32\drivers\disk.sys
Image name: disk.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: B8C39914 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00019A28
ImageSize: 00017000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
87d68000 87dc9000 CLASSPNP (deferred)
Image path: \SystemRoot\System32\drivers\CLASSPNP.SYS
Image name: CLASSPNP.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 1AD95A80 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000639A8
ImageSize: 00061000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
8fa00000 8fa7a000 klflt (deferred)
Image path: \SystemRoot\system32\DRIVERS\K4W-21-15\klflt.sys
Image name: klflt.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 44BEE6B9 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00076A18
ImageSize: 0007A000
File version: 30.1486.0.1090
Product version: 30.1486.0.1090
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: AO Kaspersky Lab
ProductName: Coretech Delivery
InternalName: klflt
ProductVersion: 30.1486.0.1090-a606f95d5af12a3b594c1db9260626dd8c974c31
FileVersion: 30.1486.0.1090
FileDescription: Filter Core [fre_win7_x86]
LegalCopyright: © 2023 AO Kaspersky Lab. All Rights Reserved.
LegalTrademarks: Registered trademarks and service marks are the property of their respective owners
8fa80000 8faa3000 cdrom (deferred)
Image path: \SystemRoot\System32\drivers\cdrom.sys
Image name: cdrom.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 7D8A66C8 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00023F34
ImageSize: 00023000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
8fab0000 8fada000 klbackupflt (deferred)
Image path: \SystemRoot\system32\DRIVERS\K4W-21-15\klbackupflt.sys
Image name: klbackupflt.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: B37E637F (This is a reproducible build file hash, not a timestamp)
CheckSum: 00037B3D
ImageSize: 0002A000
File version: 30.1486.0.730
Product version: 30.1486.0.730
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: AO Kaspersky Lab
ProductName: Coretech Delivery
InternalName: klbackupflt
ProductVersion: 30.1486.0.730-864dc4ae7764c63fbf2c841fa669211801d13bed
FileVersion: 30.1486.0.730
FileDescription: Backup File Filter [fre_win7_x86]
LegalCopyright: © 2023 AO Kaspersky Lab. All Rights Reserved.
LegalTrademarks: Registered trademarks and service marks are the property of their respective owners
8fae0000 8faf0000 filecrypt (deferred)
Image path: \SystemRoot\system32\drivers\filecrypt.sys
Image name: filecrypt.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: CCC09734 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00019A4F
ImageSize: 00010000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
8faf0000 8fafb000 tbs (deferred)
Image path: \SystemRoot\system32\drivers\tbs.sys
Image name: tbs.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: C716C909 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000A255
ImageSize: 0000B000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
8fb00000 8fbe2000 klif (no symbols)
Loaded symbol image file: klif.sys
Image path: \SystemRoot\system32\DRIVERS\K4W-21-15\klif.sys
Image name: klif.sys
Browse all global symbols functions data
Timestamp: Sat Sep 30 03:24:53 2023 (65175CC5)
CheckSum: 000E5083
ImageSize: 000E2000
File version: 30.1486.0.1090
Product version: 30.1486.0.1090
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: AO Kaspersky Lab
ProductName: Coretech Delivery
InternalName: klif
ProductVersion: 30.1486.0.1090-a606f95d5af12a3b594c1db9260626dd8c974c31
FileVersion: 30.1486.0.1090
FileDescription: Core System Interceptors [fre_win7_x86]
LegalCopyright: © 2023 AO Kaspersky Lab. All Rights Reserved.
LegalTrademarks: Registered trademarks and service marks are the property of their respective owners
8fbf0000 8fc42000 ks (deferred)
Image path: \SystemRoot\System32\drivers\ks.sys
Image name: ks.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: EFCCB2D4 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00055FA0
ImageSize: 00052000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
8fc50000 8fcb1000 USBPORT (deferred)
Image path: \SystemRoot\System32\drivers\USBPORT.SYS
Image name: USBPORT.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 7C0ACABE (This is a reproducible build file hash, not a timestamp)
CheckSum: 0006A58A
ImageSize: 00061000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
8fcc0000 8fcca000 NdisVirtualBus (deferred)
Image path: \SystemRoot\System32\drivers\NdisVirtualBus.sys
Image name: NdisVirtualBus.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 59C919EC (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000D49C
ImageSize: 0000A000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
8fcd0000 8fcd9000 swenum (deferred)
Image path: \SystemRoot\System32\DriverStore\FileRepository\swenum.inf_x86_e2235a64f6803b83\swenum.sys
Image name: swenum.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 8ECDA4D7 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00008E87
ImageSize: 00009000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
8fce0000 8fceb000 rdpbus (deferred)
Image path: \SystemRoot\System32\drivers\rdpbus.sys
Image name: rdpbus.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 7C7F8434 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00005B34
ImageSize: 0000B000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
8fd10000 8fd27000 crashdmp (deferred)
Image path: \SystemRoot\System32\Drivers\crashdmp.sys
Image name: crashdmp.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 4AE3DCD9 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001DB86
ImageSize: 00017000
File version: 10.0.19041.3636
Product version: 10.0.19041.3636
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: crashdmp.sys
OriginalFilename: crashdmp.sys
ProductVersion: 10.0.19041.3636
FileVersion: 10.0.19041.3636 (WinBuild.160101.0800)
FileDescription: Crash Dump Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
8fdb0000 8fdbf000 klbackupdisk (deferred)
Image path: \SystemRoot\system32\DRIVERS\K4W-21-15\klbackupdisk.sys
Image name: klbackupdisk.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 34A2757D (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001C696
ImageSize: 0000F000
File version: 30.1486.0.730
Product version: 30.1486.0.730
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: AO Kaspersky Lab
ProductName: Coretech Delivery
InternalName: klbackupdisk
ProductVersion: 30.1486.0.730-864dc4ae7764c63fbf2c841fa669211801d13bed
FileVersion: 30.1486.0.730
FileDescription: Backup Disk Filter [fre_win7_x86]
LegalCopyright: © 2023 AO Kaspersky Lab. All Rights Reserved.
LegalTrademarks: Registered trademarks and service marks are the property of their respective owners
90600000 90613000 kldisk (deferred)
Image path: \SystemRoot\system32\DRIVERS\K4W-21-15\kldisk.sys
Image name: kldisk.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 2834DA01 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001EC63
ImageSize: 00013000
File version: 30.1486.0.730
Product version: 30.1486.0.730
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: AO Kaspersky Lab
ProductName: Coretech Delivery
InternalName: kldisk
ProductVersion: 30.1486.0.730-864dc4ae7764c63fbf2c841fa669211801d13bed
FileVersion: 30.1486.0.730
FileDescription: Virtual Disk [fre_win7_x86]
LegalCopyright: © 2023 AO Kaspersky Lab. All Rights Reserved.
LegalTrademarks: Registered trademarks and service marks are the property of their respective owners
90620000 90627000 Null (deferred)
Image path: \SystemRoot\System32\Drivers\Null.SYS
Image name: Null.SYS
Browse all global symbols functions data
Timestamp: unavailable (FFFFFFFE)
CheckSum: missing
ImageSize: 00007000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
90630000 90637000 Beep (deferred)
Image path: \SystemRoot\System32\Drivers\Beep.SYS
Image name: Beep.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 60985CC0 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000B11B
ImageSize: 00007000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
90640000 906a3000 rdbss (deferred)
Image path: \SystemRoot\system32\DRIVERS\rdbss.sys
Image name: rdbss.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: B78459EE (This is a reproducible build file hash, not a timestamp)
CheckSum: 0005FADB
ImageSize: 00063000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
906b0000 906f1000 kneps (deferred)
Image path: \SystemRoot\system32\DRIVERS\K4W-21-15\kneps.sys
Image name: kneps.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 6092CF68 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0004AEC1
ImageSize: 00041000
File version: 30.1486.0.750
Product version: 30.1486.0.750
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: AO Kaspersky Lab
ProductName: Coretech Delivery
InternalName: kneps
ProductVersion: 30.1486.0.750-97b87f151a3e6aea2f8464f611e919a9ba36d5f4
FileVersion: 30.1486.0.750
FileDescription: Network Processor [fre_win7_x86]
LegalCopyright: © 2023 AO Kaspersky Lab. All Rights Reserved.
LegalTrademarks: Registered trademarks and service marks are the property of their respective owners
90700000 90720000 dfsc (deferred)
Image path: \SystemRoot\System32\Drivers\dfsc.sys
Image name: dfsc.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: DDD4FC9C (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002B9D1
ImageSize: 00020000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
90720000 9073c000 i8042prt (deferred)
Image path: \SystemRoot\System32\drivers\i8042prt.sys
Image name: i8042prt.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: E2786AF2 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00025224
ImageSize: 0001C000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
90740000 90753000 bam (deferred)
Image path: \SystemRoot\system32\drivers\bam.sys
Image name: bam.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 7DA024E3 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001DC0E
ImageSize: 00013000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
90760000 9079c000 ahcache (deferred)
Image path: \SystemRoot\system32\DRIVERS\ahcache.sys
Image name: ahcache.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: FDA3F9DB (This is a reproducible build file hash, not a timestamp)
CheckSum: 000423F7
ImageSize: 0003C000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
907a0000 907aa000 kdnic (deferred)
Image path: \SystemRoot\System32\drivers\kdnic.sys
Image name: kdnic.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 002DFC4A (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000B298
ImageSize: 0000A000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
907b0000 907c1000 umbus (deferred)
Image path: \SystemRoot\System32\DriverStore\FileRepository\umbus.inf_x86_8351669303b483f7\umbus.sys
Image name: umbus.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 4FA57C0B (This is a reproducible build file hash, not a timestamp)
CheckSum: 000146DA
ImageSize: 00011000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
907d0000 907e0000 CAD (deferred)
Image path: \SystemRoot\System32\drivers\CAD.sys
Image name: CAD.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 13B64ED4 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000F5D2
ImageSize: 00010000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
907e0000 9080f000 intelppm (deferred)
Image path: \SystemRoot\System32\drivers\intelppm.sys
Image name: intelppm.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: C3E16C4F (This is a reproducible build file hash, not a timestamp)
CheckSum: 0002CA88
ImageSize: 0002F000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
90810000 9081b000 CmBatt (deferred)
Image path: \SystemRoot\System32\drivers\CmBatt.sys
Image name: CmBatt.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 8A910AA3 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001237B
ImageSize: 0000B000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
90820000 9082c000 BATTC (deferred)
Image path: \SystemRoot\System32\drivers\BATTC.SYS
Image name: BATTC.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 08C9C536 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00015EEA
ImageSize: 0000C000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
90830000 90840000 klmouflt (deferred)
Image path: \SystemRoot\system32\DRIVERS\K4W-21-15\klmouflt.sys
Image name: klmouflt.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: A4152DBC (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001CDED
ImageSize: 00010000
File version: 30.1486.0.730
Product version: 30.1486.0.730
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: AO Kaspersky Lab
ProductName: Coretech Delivery
InternalName: klmouflt
ProductVersion: 30.1486.0.730-864dc4ae7764c63fbf2c841fa669211801d13bed
FileVersion: 30.1486.0.730
FileDescription: Mouse Device Filter [fre_win7_x86]
LegalCopyright: © 2023 AO Kaspersky Lab. All Rights Reserved.
LegalTrademarks: Registered trademarks and service marks are the property of their respective owners
90840000 90926000 klhk (deferred)
Image path: \SystemRoot\system32\DRIVERS\K4W-21-15\klhk.sys
Image name: klhk.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 6EF8B55C (This is a reproducible build file hash, not a timestamp)
CheckSum: 000EF811
ImageSize: 000E6000
File version: 58.0.11.0
Product version: 58.0.11.0
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: AO Kaspersky Lab
ProductName: Coretech Delivery
InternalName: klhk
ProductVersion: 58.0.11.0-2baaa8edbd408899d7719d5c926b925b5d5fb672
FileVersion: 58.0.11.0
FileDescription: klhk [fre_win7_x86]
LegalCopyright: © 2023 AO Kaspersky Lab. All Rights Reserved.
LegalTrademarks: Registered trademarks and service marks are the property of their respective owners
90930000 9093b000 klpd (deferred)
Image path: \SystemRoot\system32\DRIVERS\K4W-21-15\klpd.sys
Image name: klpd.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: C29CD8FC (This is a reproducible build file hash, not a timestamp)
CheckSum: 00015D9D
ImageSize: 0000B000
File version: 30.1486.0.730
Product version: 30.1486.0.730
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: AO Kaspersky Lab
ProductName: Coretech Delivery
InternalName: klpd
ProductVersion: 30.1486.0.730-864dc4ae7764c63fbf2c841fa669211801d13bed
FileVersion: 30.1486.0.730
FileDescription: Format Recognizer [fre_win7_x86]
LegalCopyright: © 2023 AO Kaspersky Lab. All Rights Reserved.
LegalTrademarks: Registered trademarks and service marks are the property of their respective owners
90940000 909e3000 klgse (deferred)
Image path: \SystemRoot\system32\DRIVERS\K4W-21-15\klgse.sys
Image name: klgse.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: AE024B25 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000B062F
ImageSize: 000A3000
File version: 58.0.12.0
Product version: 58.0.12.0
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: AO Kaspersky Lab
ProductName: Coretech Delivery
InternalName: klgse
ProductVersion: 58.0.12.0-4aad5372eda2431705d9e1be7947b1b32543e9bb
FileVersion: 58.0.12.0
FileDescription: Security Extender [fre_win7_x86]
LegalCopyright: © 2023 AO Kaspersky Lab. All Rights Reserved.
LegalTrademarks: Registered trademarks and service marks are the property of their respective owners
909f0000 909fe000 mouclass (deferred)
Image path: \SystemRoot\System32\drivers\mouclass.sys
Image name: mouclass.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 33EEBEF5 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001826F
ImageSize: 0000E000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
91400000 91448000 klwtp (deferred)
Image path: \SystemRoot\system32\DRIVERS\K4W-21-15\klwtp.sys
Image name: klwtp.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 309B85F8 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000524EA
ImageSize: 00048000
File version: 30.1486.0.1170
Product version: 30.1486.0.1170
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: AO Kaspersky Lab
ProductName: Coretech Delivery
InternalName: klwtp
ProductVersion: 30.1486.0.1170-9c5fcc752b96de8c93a3337fd6104e195dd494ae
FileVersion: 30.1486.0.1170
FileDescription: WFP Network Connection Filter Driver [fre_win7_x86]
LegalCopyright: © 2023 AO Kaspersky Lab. All Rights Reserved.
LegalTrademarks: Registered trademarks and service marks are the property of their respective owners
91450000 9145d000 klim6 (deferred)
Image path: \SystemRoot\system32\DRIVERS\klim6.sys
Image name: klim6.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 2BFEA0AD (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001D86D
ImageSize: 0000D000
File version: 30.1486.0.660
Product version: 30.1486.0.660
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: AO Kaspersky Lab
ProductName: Coretech Delivery
InternalName: klim6
ProductVersion: 30.1486.0.660-382849afeae89e54c7229d68c93985692d7bdd48
FileVersion: 30.1486.0.660
FileDescription: Packet Network Filter [fre_win7_x86]
LegalCopyright: © 2023 AO Kaspersky Lab. All Rights Reserved.
LegalTrademarks: Registered trademarks and service marks are the property of their respective owners
91460000 91475000 vwififlt (deferred)
Image path: \SystemRoot\System32\drivers\vwififlt.sys
Image name: vwififlt.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: E7DCCBE7 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001259B
ImageSize: 00015000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
91480000 914a3000 pacer (deferred)
Image path: \SystemRoot\System32\drivers\pacer.sys
Image name: pacer.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: D260C676 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000305F8
ImageSize: 00023000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
914b0000 914bd000 ndiscap (deferred)
Image path: \SystemRoot\System32\drivers\ndiscap.sys
Image name: ndiscap.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 0CB0577A (This is a reproducible build file hash, not a timestamp)
CheckSum: 00017B72
ImageSize: 0000D000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
914c0000 914ce000 netbios (deferred)
Image path: \SystemRoot\system32\drivers\netbios.sys
Image name: netbios.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 0B4E19D4 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000F168
ImageSize: 0000E000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
914d0000 914de000 klpnpflt (deferred)
Image path: \SystemRoot\system32\DRIVERS\K4W-21-15\klpnpflt.sys
Image name: klpnpflt.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: CE8978CF (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001489D
ImageSize: 0000E000
File version: 30.1486.0.730
Product version: 30.1486.0.730
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: AO Kaspersky Lab
ProductName: Coretech Delivery
InternalName: klpnpflt
ProductVersion: 30.1486.0.730-864dc4ae7764c63fbf2c841fa669211801d13bed
FileVersion: 30.1486.0.730
FileDescription: Generic PnP filter [fre_win7_x86]
LegalCopyright: © 2023 AO Kaspersky Lab. All Rights Reserved.
LegalTrademarks: Registered trademarks and service marks are the property of their respective owners
914e0000 914f2000 klkbdflt (deferred)
Image path: \SystemRoot\system32\DRIVERS\K4W-21-15\klkbdflt.sys
Image name: klkbdflt.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: AE338483 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00014BEA
ImageSize: 00012000
File version: 30.1486.0.730
Product version: 30.1486.0.730
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: AO Kaspersky Lab
ProductName: Coretech Delivery
InternalName: klkbdflt
ProductVersion: 30.1486.0.730-864dc4ae7764c63fbf2c841fa669211801d13bed
FileVersion: 30.1486.0.730
FileDescription: Keyboard Device Filter [fre_win7_x86]
LegalCopyright: © 2023 AO Kaspersky Lab. All Rights Reserved.
LegalTrademarks: Registered trademarks and service marks are the property of their respective owners
91500000 9150c000 nsiproxy (deferred)
Image path: \SystemRoot\system32\drivers\nsiproxy.sys
Image name: nsiproxy.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 73B2FF3A (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000E266
ImageSize: 0000C000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
91510000 91519000 npsvctrig (deferred)
Image path: \SystemRoot\System32\drivers\npsvctrig.sys
Image name: npsvctrig.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 0E79291C (This is a reproducible build file hash, not a timestamp)
CheckSum: 00006883
ImageSize: 00009000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
91520000 9152b000 mssmbios (deferred)
Image path: \SystemRoot\System32\drivers\mssmbios.sys
Image name: mssmbios.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 8BA53A5A (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001850D
ImageSize: 0000B000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
91530000 9153d000 CompositeBus (deferred)
Image path: \SystemRoot\System32\DriverStore\FileRepository\compositebus.inf_x86_c13139cc25036700\CompositeBus.sys
Image name: CompositeBus.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: FCB2607C (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000D685
ImageSize: 0000D000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
91540000 91813000 dxgkrnl (deferred)
Image path: \SystemRoot\System32\drivers\dxgkrnl.sys
Image name: dxgkrnl.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: EC874CE3 (This is a reproducible build file hash, not a timestamp)
CheckSum: 002DDF16
ImageSize: 002D3000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
91820000 91830000 watchdog (deferred)
Image path: \SystemRoot\System32\drivers\watchdog.sys
Image name: watchdog.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 23EE4DA1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000CB9F
ImageSize: 00010000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
91830000 91840000 BasicDisplay (deferred)
Image path: \SystemRoot\System32\DriverStore\FileRepository\basicdisplay.inf_x86_85566c5b60e2ea34\BasicDisplay.sys
Image name: BasicDisplay.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 3395C769 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000173BE
ImageSize: 00010000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
91840000 9184c000 BasicRender (deferred)
Image path: \SystemRoot\System32\DriverStore\FileRepository\basicrender.inf_x86_3f98dd7c09c114ef\BasicRender.sys
Image name: BasicRender.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: F2A827D7 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000084E3
ImageSize: 0000C000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
91850000 91865000 Npfs (deferred)
Image path: \SystemRoot\System32\Drivers\Npfs.SYS
Image name: Npfs.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 0D87B129 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000204C4
ImageSize: 00015000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
91870000 9187d000 Msfs (deferred)
Image path: \SystemRoot\System32\Drivers\Msfs.SYS
Image name: Msfs.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 63239004 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000AF29
ImageSize: 0000D000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
91880000 91895000 CimFS (deferred)
Image path: \SystemRoot\System32\Drivers\CimFS.SYS
Image name: CimFS.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 7B4B825F (This is a reproducible build file hash, not a timestamp)
CheckSum: 00013161
ImageSize: 00015000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
918a0000 918ba000 tdx (deferred)
Image path: \SystemRoot\system32\DRIVERS\tdx.sys
Image name: tdx.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 2EB5C7F9 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000266EA
ImageSize: 0001A000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
918c0000 918cc000 TDI (deferred)
Image path: \SystemRoot\system32\DRIVERS\TDI.SYS
Image name: TDI.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: C4DEDDBE (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000B17F
ImageSize: 0000C000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
918d0000 91911000 netbt (deferred)
Image path: \SystemRoot\System32\DRIVERS\netbt.sys
Image name: netbt.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 71F4DDFB (This is a reproducible build file hash, not a timestamp)
CheckSum: 00040E45
ImageSize: 00041000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
91920000 9192d000 afunix (deferred)
Image path: \SystemRoot\system32\drivers\afunix.sys
Image name: afunix.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: D7ECA89B (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001399A
ImageSize: 0000D000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
91930000 919b2000 afd (deferred)
Image path: \SystemRoot\system32\drivers\afd.sys
Image name: afd.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 7E733619 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0008CA45
ImageSize: 00082000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
919f0000 919f7000 gpuenergydrv (deferred)
Image path: \SystemRoot\System32\drivers\gpuenergydrv.sys
Image name: gpuenergydrv.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: CC2684A8 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000F604
ImageSize: 00007000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
92a00000 92a40000 yk63x86 (deferred)
Image path: \SystemRoot\System32\drivers\yk63x86.sys
Image name: yk63x86.sys
Browse all global symbols functions data
Timestamp: Tue Jan 8 16:43:58 2013 (50EC148E)
CheckSum: 0004543C
ImageSize: 00040000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
92a40000 92a58000 drmk (deferred)
Image path: \SystemRoot\System32\drivers\drmk.sys
Image name: drmk.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 50D677E8 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001170C
ImageSize: 00018000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
92a60000 92ff7000 atikmdag (deferred)
Image path: \SystemRoot\system32\DRIVERS\atikmdag.sys
Image name: atikmdag.sys
Browse all global symbols functions data
Timestamp: Fri Jul 4 07:51:14 2008 (486D9E32)
CheckSum: 003B1868
ImageSize: 00597000
File version: 7.1.1.798
Product version: 7.1.1.798
File flags: 8 (Mask 3F) Private
File OS: 40004 NT Win32
File type: 3.4 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: ATI Technologies Inc.
ProductName: ATI Radeon Family
InternalName: atikmdag.sys
OriginalFilename: atikmdag.sys
ProductVersion: 7.01.01.798
FileVersion: 7.01.01.798
FileDescription: ATI Radeon Kernel Mode Driver
LegalCopyright: Copyright (C) 1998-2006 ATI Technologies Inc.
93000000 93047000 portcls (deferred)
Image path: \SystemRoot\System32\drivers\portcls.sys
Image name: portcls.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 359F7106 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0004D316
ImageSize: 00047000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
93050000 93382000 athwn (deferred)
Image path: \SystemRoot\System32\drivers\athwn.sys
Image name: athwn.sys
Browse all global symbols functions data
Timestamp: Tue Mar 1 12:35:03 2016 (56D55437)
CheckSum: 00319E54
ImageSize: 00332000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
93390000 9339b000 vwifibus (deferred)
Image path: \SystemRoot\System32\drivers\vwifibus.sys
Image name: vwifibus.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 4F966B45 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00008384
ImageSize: 0000B000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
933a0000 933aa000 usbohci (deferred)
Image path: \SystemRoot\System32\drivers\usbohci.sys
Image name: usbohci.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 5864D7AC (This is a reproducible build file hash, not a timestamp)
CheckSum: 00011BDC
ImageSize: 0000A000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
933b0000 933c4000 usbehci (deferred)
Image path: \SystemRoot\System32\drivers\usbehci.sys
Image name: usbehci.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: F3C10027 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00014843
ImageSize: 00014000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
933d0000 933ee000 HDAudBus (deferred)
Image path: \SystemRoot\System32\drivers\HDAudBus.sys
Image name: HDAudBus.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 4CEE69BC (This is a reproducible build file hash, not a timestamp)
CheckSum: 000264C4
ImageSize: 0001E000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
933f0000 933fe000 kbdclass (deferred)
Image path: \SystemRoot\System32\drivers\kbdclass.sys
Image name: kbdclass.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: E6FD7DC8 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00011B0D
ImageSize: 0000E000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
93e00000 93f06000 AGRSM (deferred)
Image path: \SystemRoot\system32\DRIVERS\AGRSM.sys
Image name: AGRSM.sys
Browse all global symbols functions data
Timestamp: Mon Nov 10 18:56:37 2008 (49184BA5)
CheckSum: 0010B850
ImageSize: 00106000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
93f10000 93f1d000 modem (deferred)
Image path: \SystemRoot\system32\drivers\modem.sys
Image name: modem.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: E8247A1D (This is a reproducible build file hash, not a timestamp)
CheckSum: 000181AF
ImageSize: 0000D000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
93f20000 93f77000 HdAudio (deferred)
Image path: \SystemRoot\System32\drivers\HdAudio.sys
Image name: HdAudio.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: B058D08B (This is a reproducible build file hash, not a timestamp)
CheckSum: 00054960
ImageSize: 00057000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
93fa0000 93fab000 dump_dumpata (deferred)
Image path: \SystemRoot\System32\Drivers\dump_dumpata.sys
Image name: dump_dumpata.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 2DF19929 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000C558
ImageSize: 0000B000
File version: 10.0.19041.3636
Product version: 10.0.19041.3636
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: dumpata.sys
OriginalFilename: dumpata.sys
ProductVersion: 10.0.19041.3636
FileVersion: 10.0.19041.3636 (WinBuild.160101.0800)
FileDescription: ATAPI Dump Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
93fc0000 93fc9000 dump_atapi (deferred)
Image path: \SystemRoot\System32\Drivers\dump_atapi.sys
Image name: dump_atapi.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: A0BB65F5 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000102E3
ImageSize: 00009000
File version: 10.0.19041.3636
Product version: 10.0.19041.3636
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: atapi.sys
OriginalFilename: atapi.sys
ProductVersion: 10.0.19041.3636
FileVersion: 10.0.19041.3636 (WinBuild.160101.0800)
FileDescription: ATAPI IDE Miniport Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
93ff0000 94007000 dump_dumpfve (deferred)
Image path: \SystemRoot\System32\Drivers\dump_dumpfve.sys
Image name: dump_dumpfve.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 7B1A5C05 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000134DA
ImageSize: 00017000
File version: 10.0.19041.3636
Product version: 10.0.19041.3636
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0000.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: dumpfve.sys
OriginalFilename: dumpfve.sys
ProductVersion: 10.0.19041.3636
FileVersion: 10.0.19041.3636 (WinBuild.160101.0800)
FileDescription: Bitlocker Drive Encryption Crashdump Filter
LegalCopyright: © Microsoft Corporation. All rights reserved.
94010000 9401e000 hidparse (deferred)
Image path: \SystemRoot\System32\Drivers\hidparse.sys
Image name: hidparse.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 4CC1C8BA (This is a reproducible build file hash, not a timestamp)
CheckSum: 00016149
ImageSize: 0000E000
File version: 10.0.19041.3636
Product version: 10.0.19041.3636
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: hidparse.sys
OriginalFilename: hidparse.sys
ProductVersion: 10.0.19041.3636
FileVersion: 10.0.19041.3636 (WinBuild.160101.0800)
FileDescription: Hid Parsing Library
LegalCopyright: © Microsoft Corporation. All rights reserved.
94020000 94036000 BTHUSB (deferred)
Image path: \SystemRoot\System32\drivers\BTHUSB.sys
Image name: BTHUSB.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: BCBC6782 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00014B20
ImageSize: 00016000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
94040000 94054000 wanarp (deferred)
Image path: \SystemRoot\System32\DRIVERS\wanarp.sys
Image name: wanarp.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: DF1C956B (This is a reproducible build file hash, not a timestamp)
CheckSum: 00010083
ImageSize: 00014000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
94060000 94097000 klupd_K4W_21_15_mark (deferred)
Image path: \SystemRoot\System32\Drivers\klupd_K4W-21-15_mark.sys
Image name: klupd_K4W-21-15_mark.sys
Browse all global symbols functions data
Timestamp: Tue Sep 19 13:24:08 2023 (650968B8)
CheckSum: 00036D97
ImageSize: 00037000
File version: 6.16.4.0
Product version: 6.16.4.0
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: AO Kaspersky Lab
ProductName: Kaspersky Bases
InternalName: mark
OriginalFilename: mark.sys
ProductVersion: 6.16.4.0
FileVersion: 6.16.4.0
FileDescription: Kaspersky Lab Anti-Rootkit Memory Driver
LegalCopyright: © 2023 AO Kaspersky Lab. All Rights Reserved.
LegalTrademarks: Registered trademarks and service marks are the property of their respective owners
940a0000 94101000 usbhub (deferred)
Image path: \SystemRoot\System32\drivers\usbhub.sys
Image name: usbhub.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 7E479828 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0006B832
ImageSize: 00061000
File version: 10.0.19041.3636
Product version: 10.0.19041.3636
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: usbhub.sys
OriginalFilename: usbhub.sys
ProductVersion: 10.0.19041.3636
FileVersion: 10.0.19041.3636 (WinBuild.160101.0800)
FileDescription: Default Hub Driver for USB
LegalCopyright: © Microsoft Corporation. All rights reserved.
94110000 9411a000 USBD (deferred)
Image path: \SystemRoot\System32\drivers\USBD.SYS
Image name: USBD.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 0D1A5568 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000148BE
ImageSize: 0000A000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
94120000 941a9000 nwifi (deferred)
Image path: \SystemRoot\system32\DRIVERS\nwifi.sys
Image name: nwifi.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 64B0E858 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00087F2D
ImageSize: 00089000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
941b0000 941c0000 ndisuio (deferred)
Image path: \SystemRoot\system32\drivers\ndisuio.sys
Image name: ndisuio.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 184E2870 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000ECC7
ImageSize: 00010000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
941c0000 941ff000 msquic (deferred)
Image path: \SystemRoot\system32\drivers\msquic.sys
Image name: msquic.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: B3A30E13 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0003A5AF
ImageSize: 0003F000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
96c00000 96e18000 win32kbase (deferred)
Image path: \SystemRoot\System32\win32kbase.sys
Image name: win32kbase.sys
Browse all global symbols functions data
Timestamp: ***** Invalid (C2AC38A3)
CheckSum: 002106E9
ImageSize: 00218000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
96e70000 96ec7000 win32k (deferred)
Image path: \SystemRoot\System32\win32k.sys
Image name: win32k.sys
Browse all global symbols functions data
Timestamp: Mon Sep 18 05:30:58 2023 (6507A852)
CheckSum: 0005CE56
ImageSize: 00057000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
98800000 9894a680 StkCMini (deferred)
Image path: \SystemRoot\System32\Drivers\StkCMini.sys
Image name: StkCMini.sys
Browse all global symbols functions data
Timestamp: Wed Feb 20 13:51:33 2008 (47BBF825)
CheckSum: 001590C3
ImageSize: 0014A680
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
98950000 98978000 wcifs (deferred)
Image path: \SystemRoot\system32\drivers\wcifs.sys
Image name: wcifs.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 112BA42B (This is a reproducible build file hash, not a timestamp)
CheckSum: 00033FB8
ImageSize: 00028000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
98980000 989e4000 cldflt (deferred)
Image path: \SystemRoot\system32\drivers\cldflt.sys
Image name: cldflt.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 9CBBA42F (This is a reproducible build file hash, not a timestamp)
CheckSum: 0006315A
ImageSize: 00064000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
989f0000 98a04000 storqosflt (deferred)
Image path: \SystemRoot\system32\drivers\storqosflt.sys
Image name: storqosflt.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 3CE07077 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001D547
ImageSize: 00014000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
98a10000 98a2d000 bindflt (deferred)
Image path: \SystemRoot\system32\drivers\bindflt.sys
Image name: bindflt.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 35F47DF3 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000229A4
ImageSize: 0001D000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
98a30000 98a40000 lltdio (deferred)
Image path: \SystemRoot\system32\drivers\lltdio.sys
Image name: lltdio.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: DE54150D (This is a reproducible build file hash, not a timestamp)
CheckSum: 00017D09
ImageSize: 00010000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
98a40000 98a54000 mslldp (deferred)
Image path: \SystemRoot\system32\drivers\mslldp.sys
Image name: mslldp.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: C4110548 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000154E6
ImageSize: 00014000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
98a60000 98b86000 BTHport (deferred)
Image path: \SystemRoot\System32\drivers\BTHport.sys
Image name: BTHport.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: D3924F66 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0012DA15
ImageSize: 00126000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
98b90000 98b9c000 hidusb (deferred)
Image path: \SystemRoot\System32\drivers\hidusb.sys
Image name: hidusb.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 7DE439D5 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00013504
ImageSize: 0000C000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
98ba0000 98bcb000 HIDCLASS (deferred)
Image path: \SystemRoot\System32\drivers\HIDCLASS.SYS
Image name: HIDCLASS.SYS
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: CDD04AEA (This is a reproducible build file hash, not a timestamp)
CheckSum: 00027658
ImageSize: 0002B000
File version: 10.0.19041.3636
Product version: 10.0.19041.3636
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: hidclass.sys
OriginalFilename: hidclass.sys
ProductVersion: 10.0.19041.3636
FileVersion: 10.0.19041.3636 (WinBuild.160101.0800)
FileDescription: Hid Class Library
LegalCopyright: © Microsoft Corporation. All rights reserved.
98bd0000 98bda000 mouhid (deferred)
Image path: \SystemRoot\System32\drivers\mouhid.sys
Image name: mouhid.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 65D228B6 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00012213
ImageSize: 0000A000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
98be0000 98bf4000 rspndr (deferred)
Image path: \SystemRoot\system32\drivers\rspndr.sys
Image name: rspndr.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: C02EF31A (This is a reproducible build file hash, not a timestamp)
CheckSum: 00011BD9
ImageSize: 00014000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
99430000 996df000 win32kfull (deferred)
Image path: \SystemRoot\System32\win32kfull.sys
Image name: win32kfull.sys
Browse all global symbols functions data
Timestamp: Sun Feb 17 08:35:32 2036 (7C629614)
CheckSum: 002A026C
ImageSize: 002AF000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
996e0000 99717000 cdd (deferred)
Image path: \SystemRoot\System32\cdd.dll
Image name: cdd.dll
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 8CA5A4BC (This is a reproducible build file hash, not a timestamp)
CheckSum: 000326B1
ImageSize: 00037000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
9b400000 9b4ab000 dxgmms2 (deferred)
Image path: \SystemRoot\System32\drivers\dxgmms2.sys
Image name: dxgmms2.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 8514F757 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000B2993
ImageSize: 000AB000
File version: 10.0.19041.3636
Product version: 10.0.19041.3636
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: dxgmms2.sys
OriginalFilename: dxgmms2.sys
ProductVersion: 10.0.19041.3636
FileVersion: 10.0.19041.3636 (WinBuild.160101.0800)
FileDescription: DirectX Graphics MMS
LegalCopyright: © Microsoft Corporation. All rights reserved.
9b4b0000 9b4b8000 kmdfmemio (deferred)
Image path: \SystemRoot\system32\DRIVERS\kmdfmemio.sys
Image name: kmdfmemio.sys
Browse all global symbols functions data
Timestamp: Tue Nov 14 04:11:52 2006 (455909C8)
CheckSum: 000110FB
ImageSize: 00008000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
9b4c0000 9c115900 StkCPipe (deferred)
Image path: \SystemRoot\System32\Drivers\StkCPipe.sys
Image name: StkCPipe.sys
Browse all global symbols functions data
Timestamp: Thu Oct 4 20:44:14 2007 (4705185E)
CheckSum: 00C67022
ImageSize: 00C55900
File version: 1.0.0.2
Product version: 1.0.0.2
File flags: 8 (Mask 3F) Private
File OS: 40004 NT Win32
File type: 3.0 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Syntek America Inc.
ProductName: Syntek USB 2.0 Video Pipeline Driver
InternalName: StkCPipe.sys
OriginalFilename: StkCPipe.sys
ProductVersion: 1.0.0.2
FileVersion: 1.0.0.2
PrivateBuild:
SpecialBuild:
FileDescription: Syntek USB 2.0 Video Pipeline Driver
LegalCopyright: Copyright (C) Syntek America Inc. 2003-2006
LegalTrademarks: StkCPipe is a registered trademark of Syntek America Inc. StkPipe (TM) is a trademark of Syntek America Inc.
Comments:
9c120000 9c14ea00 StkCSF (deferred)
Image path: \SystemRoot\System32\Drivers\StkCSF.sys
Image name: StkCSF.sys
Browse all global symbols functions data
Timestamp: Wed Dec 12 17:02:46 2007 (475FDBF6)
CheckSum: 0003F47A
ImageSize: 0002EA00
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
9c150000 9c1ab000 dxgmms1 (deferred)
Image path: \SystemRoot\System32\drivers\dxgmms1.sys
Image name: dxgmms1.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: CCB01489 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000626F2
ImageSize: 0005B000
File version: 10.0.19041.3636
Product version: 10.0.19041.3636
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: dxgmms1.sys
OriginalFilename: dxgmms1.sys
ProductVersion: 10.0.19041.3636
FileVersion: 10.0.19041.3636 (WinBuild.160101.0800)
FileDescription: DirectX Graphics MMS
LegalCopyright: © Microsoft Corporation. All rights reserved.
9c1b0000 9c1c6000 monitor (deferred)
Image path: \SystemRoot\System32\drivers\monitor.sys
Image name: monitor.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: DDF76954 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00020062
ImageSize: 00016000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
9c1d0000 9c1df000 mmcss (deferred)
Image path: \SystemRoot\system32\drivers\mmcss.sys
Image name: mmcss.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: AC5CF7AC (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000C7C5
ImageSize: 0000F000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
9c1e0000 9c1fe000 luafv (deferred)
Image path: \SystemRoot\system32\drivers\luafv.sys
Image name: luafv.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 95CDC18F (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001F988
ImageSize: 0001E000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
a5c00000 a5c3e000 srvnet (deferred)
Image path: \SystemRoot\System32\DRIVERS\srvnet.sys
Image name: srvnet.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: F602B169 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0003F50B
ImageSize: 0003E000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
a5c40000 a5c7f000 mrxsmb10 (deferred)
Image path: \SystemRoot\system32\DRIVERS\mrxsmb10.sys
Image name: mrxsmb10.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: BF4845DC (This is a reproducible build file hash, not a timestamp)
CheckSum: 00044AF3
ImageSize: 0003F000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
a5c80000 a5c9e000 Ndu (deferred)
Image path: \SystemRoot\system32\drivers\Ndu.sys
Image name: Ndu.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 106AF0CA (This is a reproducible build file hash, not a timestamp)
CheckSum: 00028013
ImageSize: 0001E000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
a5ca0000 a5d49000 srv2 (deferred)
Image path: \SystemRoot\System32\DRIVERS\srv2.sys
Image name: srv2.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: CDD48435 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000A64E8
ImageSize: 000A9000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
a5d50000 a5d9a000 klupd_K4W_21_15_klark (deferred)
Image path: \SystemRoot\System32\Drivers\klupd_K4W-21-15_klark.sys
Image name: klupd_K4W-21-15_klark.sys
Browse all global symbols functions data
Timestamp: Tue Sep 19 14:50:12 2023 (65097CE4)
CheckSum: 0004D5B8
ImageSize: 0004A000
File version: 4.18.3.0
Product version: 4.18.3.0
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: AO Kaspersky Lab
ProductName: Kaspersky Bases
InternalName: klark
OriginalFilename: klark.sys
ProductVersion: 4.18.3.0
FileVersion: 4.18.3.0
FileDescription: Kaspersky Lab Anti-Rootkit
LegalCopyright: © 2023 AO Kaspersky Lab. All Rights Reserved.
LegalTrademarks: Registered trademarks and service marks are the property of their respective owners
a5da0000 a5ea9000 HTTP (deferred)
Image path: \SystemRoot\system32\drivers\HTTP.sys
Image name: HTTP.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: D6325F13 (This is a reproducible build file hash, not a timestamp)
CheckSum: 001075BC
ImageSize: 00109000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
a5eb0000 a5ec8000 bowser (deferred)
Image path: \SystemRoot\system32\DRIVERS\bowser.sys
Image name: bowser.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 4A19FEB9 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001C41F
ImageSize: 00018000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
a5ed0000 a5ee1000 mpsdrv (deferred)
Image path: \SystemRoot\System32\drivers\mpsdrv.sys
Image name: mpsdrv.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: B5575FD1 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00016D5A
ImageSize: 00011000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
a5ef0000 a5f6b000 mrxsmb (deferred)
Image path: \SystemRoot\system32\DRIVERS\mrxsmb.sys
Image name: mrxsmb.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 04F886E3 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000834D6
ImageSize: 0007B000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
a5f70000 a5fa6000 mrxsmb20 (deferred)
Image path: \SystemRoot\system32\DRIVERS\mrxsmb20.sys
Image name: mrxsmb20.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 184A9DE4 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0003863F
ImageSize: 00036000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
a5fb0000 a5fc8000 parport (deferred)
Image path: \SystemRoot\System32\drivers\parport.sys
Image name: parport.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: D827F000 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001C681
ImageSize: 00018000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
a5fd0000 a5ffc000 klids (deferred)
Image path: \??\C:\ProgramData\Kaspersky Lab\AVP21.15\Bases\klids.sys
Image name: klids.sys
Browse all global symbols functions data
Timestamp: Tue Mar 14 19:10:47 2023 (64108E77)
CheckSum: 0003E589
ImageSize: 0002C000
File version: 10.3.0.202
Product version: 10.3.0.202
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: AO Kaspersky Lab
ProductName: Coretech Delivery
InternalName: klids
ProductVersion: 10.3.0.202-dcad735722
FileVersion: 10.3.0.202
FileDescription: Network Processor [fre_win10_x86]
LegalCopyright: © 2023 AO Kaspersky Lab. All Rights Reserved.
LegalTrademarks: Registered trademarks and service marks are the property of their respective owners
a6e00000 a6e2d000 ndiswan (deferred)
Image path: \SystemRoot\System32\drivers\ndiswan.sys
Image name: ndiswan.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 6A9582A5 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000346DD
ImageSize: 0002D000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
a6e30000 a6e3a000 asyncmac (deferred)
Image path: \SystemRoot\System32\drivers\asyncmac.sys
Image name: asyncmac.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: C2607113 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000129D2
ImageSize: 0000A000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
a6e40000 a6e4d000 condrv (deferred)
Image path: \SystemRoot\System32\drivers\condrv.sys
Image name: condrv.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 099124BC (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001857E
ImageSize: 0000D000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
a6e50000 a6f07000 peauth (deferred)
Image path: \SystemRoot\system32\drivers\peauth.sys
Image name: peauth.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 9EDED029 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000B60F4
ImageSize: 000B7000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
a6f10000 a6f1e000 tcpipreg (deferred)
Image path: \SystemRoot\System32\drivers\tcpipreg.sys
Image name: tcpipreg.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 1C4C62E9 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000C69D
ImageSize: 0000E000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
a6f20000 a6f34000 rassstp (deferred)
Image path: \SystemRoot\System32\drivers\rassstp.sys
Image name: rassstp.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: EE30D09D (This is a reproducible build file hash, not a timestamp)
CheckSum: 00020346
ImageSize: 00014000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
a6f40000 a6f57000 NDProxy (deferred)
Image path: \SystemRoot\System32\DRIVERS\NDProxy.sys
Image name: NDProxy.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 412CDF83 (This is a reproducible build file hash, not a timestamp)
CheckSum: 000191F7
ImageSize: 00017000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
a6f60000 a6f7e000 AgileVpn (deferred)
Image path: \SystemRoot\System32\drivers\AgileVpn.sys
Image name: AgileVpn.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 52863FDA (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001AB7D
ImageSize: 0001E000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
a6f80000 a6f99000 rasl2tp (deferred)
Image path: \SystemRoot\System32\drivers\rasl2tp.sys
Image name: rasl2tp.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 9F4CDF72 (This is a reproducible build file hash, not a timestamp)
CheckSum: 00023884
ImageSize: 00019000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
a6fa0000 a6fb8000 raspptp (deferred)
Image path: \SystemRoot\System32\drivers\raspptp.sys
Image name: raspptp.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 798C5F0F (This is a reproducible build file hash, not a timestamp)
CheckSum: 000134C5
ImageSize: 00018000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
a6fc0000 a6fd6000 raspppoe (deferred)
Image path: \SystemRoot\System32\DRIVERS\raspppoe.sys
Image name: raspppoe.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: 6CC227FC (This is a reproducible build file hash, not a timestamp)
CheckSum: 0001D775
ImageSize: 00016000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
a6fe0000 a6feb000 ndistapi (deferred)
Image path: \SystemRoot\System32\DRIVERS\ndistapi.sys
Image name: ndistapi.sys
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: FFD0E008 (This is a reproducible build file hash, not a timestamp)
CheckSum: 0000823F
ImageSize: 0000B000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:

Unloaded modules:
a6ff0000 a6ffe000 MSKSSRV.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000E000
919c0000 919ec000 klids.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0002C000
93f80000 93f8e000 MSKSSRV.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000E000
a5fd0000 a5fd7000 parvdm.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00007000
8fd40000 8fd4b000 dump_ataport.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000B000
8fd60000 8fd69000 dump_atapi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00009000
8fd90000 8fda7000 dump_dumpfve.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00017000
90720000 90735000 dam.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00015000
8717f000 87189000 klelam.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000A000
87d44000 87d51000 hwpolicy.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000D000



Реп: (1355)
* SiliconPower, а с диском нормально? Дампы выкладывайте сюда в архиве. И такие большие не нужно, поставьте на минидампы: Пуск-Параметры-Система-О программе-Дополнительные параметры системы-Загрузка и восстановление:
Прикрепленное изображение


Малые дампы будут сохранятся в папке %SystemDisk%:\Windows\Minidump\



Реп: (0)
peligroso @ 18.01.24, 22:35 *
а с диском нормально?

Диск SSD новый. Изначально проверял Викторией из под Дос. Все нормально было. Правда работает в режиме IDE, т.к. мой ноутбук, как я понял, не поддерживает AHCI(в биосе нет такого пункта, даже в обновленной биос. Хотя южный мост должен поддерживать). Так вот, если сейчас проверить SSD(на котором Windows 10 сейчас) из под Дос, Виктория не испортит файлы?
P.S. Буду ждать очередного Bsoda, чтобы выложить уже минидамп. А если я приведу ошибки из Журнала в Просмотре событий(Пуск-Средства администрирования), вы сможете разобраться в ситуации, или дамп все же предпочтительнее журнала событий?

Сообщение отредактировал SiliconPower - 19.01.24, 15:34



Реп: (1355)
* SiliconPower, одно другому не мешает.



Реп: (0)
* peligroso,
В общем, вот случился синий экран.

Прикрепленные файлы

Прикрепленный файл011924-14734-01.zip ( 80.72 КБ )



Реп: (1355)
* SiliconPower, в дампе ничего примечательного. Что у вас за SSD? Дискретка в буке есть?



Реп: (0)
* peligroso,
SSD KingSpec P3-256(2.5").
Вот еще минидампы.Прикрепленный файлMinidump.7z ( 821.06 КБ )



Реп: (1355)
* SiliconPower, ошибки прям разнообразные. Я бы посоветовал вам поменять диск. Почему-то мне кажется, что это из-за него.



Реп: (0)
peligroso @ 21.01.24, 21:03 *
SiliconPower, ошибки прям разнообразные. Я бы посоветовал вам поменять диск. Почему-то мне кажется, что это из-за него.

Хз. Я прям отчаялся. Ну насчет жесткого, хорошо, я поменяю, только поменять на SSD или HDD?
Может ли все эти сбои быть следствием, скажем, устаревшей материнской платы/проца, и что они конфликтуют с ОС Win 10.
Были мысли даже Linux поставить, только я так думаю, если и ставить, то последнюю версию, но врятли я найду драйвера под L. на данный устаревший ноут.


Полная версия   Текстовая версия

Помощь   Правила

Сейчас: 29.03.24, 15:49