Opened log file 'C:\Users\user\AppData\Local\msdart_crashanalyzer_kd_ansi.log' Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64 Copyright (c) Microsoft Corporation. All rights reserved. Loading Dump File [C:\Windows\Minidump\011512-34491-01.dmp] Mini Kernel Dump File: Only registers and stack trace are available Symbol search path is: SRV*e:\localsymbols*http://msdl.microsoft.com/download/symbols Executable search path is: Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64 Product: WinNt, suite: TerminalServer SingleUserTS Built by: 7601.21866.amd64fre.win7sp1_ldr.111123-1509 Machine Name: Kernel base = 0xfffff800`03260000 PsLoadedModuleList = 0xfffff800`034a4650 Debug session time: Sun Jan 15 18:30:47.397 2012 (UTC - 8:00) System Uptime: 0 days 2:36:25.834 Loading Kernel Symbols ............................................................... ................................................................ ................................................................ ............................ Loading User Symbols Loading unloaded module list ....... ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck 3B, {c0000096, fffff8800caf5972, fffff8800d1d6e90, 0} Unable to load image VMMR0.r0, Win32 error 0n2 *** WARNING: Unable to verify timestamp for VMMR0.r0 *** ERROR: Module load completed but symbols could not be loaded for VMMR0.r0 Probably caused by : VMMR0.r0 ( VMMR0+172ff ) Followup: MachineOwner --------- 3: kd> .logclose Closing open log file C:\Users\user\AppData\Local\msdart_crashanalyzer_kd_ansi.log ’žOpened log file 'C:\Users\user\AppData\Local\msdart_crashanalyzer_kd_unicode.log' 3: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* SYSTEM_SERVICE_EXCEPTION (3b) An exception happened while executing a system service routine. Arguments: Arg1: 00000000c0000096, Exception code that caused the bugcheck Arg2: fffff8800caf5972, Address of the instruction which caused the bugcheck Arg3: fffff8800d1d6e90, Address of the context record for the exception that caused the bugcheck Arg4: 0000000000000000, zero. Debugging Details: ------------------ EXCEPTION_CODE: (NTSTATUS) 0xc0000096 - {EXCEPTION} Privileged instruction. FAULTING_IP: +172ff fffff880`0caf5972 ?? ??? CONTEXT: fffff8800d1d6e90 -- (.cxr 0xfffff8800d1d6e90) .cxr 0xfffff8800d1d6e90 rax=0000000000000274 rbx=fffff8800b710340 rcx=0000000000000000 rdx=fffff8800b710340 rsi=0000000000000000 rdi=fffff8800b710000 rip=fffff8800caf5972 rsp=fffff8800d1d7878 rbp=fffffa8013eba4c0 r8=000000000001ae80 r9=fffff8800b710000 r10=0000000000000012 r11=ffff800000000000 r12=fffffa800cf11dc0 r13=fffffa800db5ace0 r14=0000000000000000 r15=fffffa800db5ab90 iopl=0 nv up di pl nz na po nc cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010006 fffff880`0caf5972 ?? ??? .cxr Resetting default scope CUSTOMER_CRASH_COUNT: 1 DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT BUGCHECK_STR: 0x3B PROCESS_NAME: VirtualBox.exe CURRENT_IRQL: 0 LAST_CONTROL_TRANSFER: from fffff8800caf57f2 to fffff8800caf5972 STACK_TEXT: fffff880`0d1d7878 fffff880`0caf57f2 : 00000000`00000010 fffff880`0d8282ff 00000000`00000000 00000000`00000000 : 0xfffff880`0caf5972 fffff880`0d1d7880 00000000`00000010 : fffff880`0d8282ff 00000000`00000000 00000000`00000000 00000000`00000000 : 0xfffff880`0caf57f2 fffff880`0d1d7888 fffff880`0d8282ff : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`f8a00b8e : 0x10 fffff880`0d1d7890 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`f8a00b8e 00000000`00000000 : VMMR0+0x172ff FOLLOWUP_IP: VMMR0+172ff fffff880`0d8282ff ?? ??? SYMBOL_STACK_INDEX: 3 SYMBOL_NAME: VMMR0+172ff FOLLOWUP_NAME: MachineOwner MODULE_NAME: VMMR0 IMAGE_NAME: VMMR0.r0 DEBUG_FLR_IMAGE_TIMESTAMP: 4eef3185 STACK_COMMAND: .cxr 0xfffff8800d1d6e90 ; kb FAILURE_BUCKET_ID: X64_0x3B_VMMR0+172ff BUCKET_ID: X64_0x3B_VMMR0+172ff Followup: MachineOwner --------- 3: kd> !thread GetPointerFromAddress: unable to read from fffff8000350e000 THREAD fffffa8013ca9060 Cid 16a4.1de8 Teb: 000007ffffefe000 Win32Thread: fffff900c212ac20 RUNNING on processor 3 IRP List: Unable to read nt!_IRP @ fffffa8013eba3f0 Not impersonating GetUlongFromAddress: unable to read from fffff8000344dba4 Owning Process fffffa8013e0db30 Image: VirtualBox.exe Attached Process N/A Image: N/A fffff78000000000: Unable to get shared data Wait Start TickCount 601652 Context Switch Count 939 LargeStack ReadMemory error: Cannot get nt!KeMaximumIncrement value. UserTime 00:00:00.000 KernelTime 00:00:00.000 Win32 Start Address 0x00000000721b3810 Stack Init fffff8800d1d7d70 Current fffff8800d1d6ed0 Base fffff8800d1d8000 Limit fffff8800d1cf000 Call 0 Priority 12 BasePriority 8 UnusualBoost 0 ForegroundBoost 2 IoPriority 2 PagePriority 5 Child-SP RetAddr : Args to Child : Call Site fffff880`0d1d65c8 fffff800`032dc269 : 00000000`0000003b 00000000`c0000096 fffff880`0caf5972 fffff880`0d1d6e90 : nt!KeBugCheckEx fffff880`0d1d65d0 fffff800`032dbbbc : fffff880`0d1d7638 fffff880`0d1d6e90 00000000`00000000 fffff800`03307e20 : nt!KiBugCheckDispatch+0x69 fffff880`0d1d6710 fffff800`0330792d : fffff800`034fa758 fffff800`0341f768 fffff800`03260000 fffff880`0d1d7638 : nt!KiSystemServiceHandler+0x7c fffff880`0d1d6750 fffff800`03306705 : fffff800`03426634 fffff880`0d1d67c8 fffff880`0d1d7638 fffff800`03260000 : nt!RtlpExecuteHandlerForException+0xd fffff880`0d1d6780 fffff800`03317691 : fffff880`0d1d7638 fffff880`0d1d6e90 fffff880`00000000 fffff880`0b710000 : nt!RtlDispatchException+0x415 fffff880`0d1d6e60 fffff800`032dc342 : fffff880`0d1d7638 fffff880`0b710340 fffff880`0d1d76e0 00000000`00000000 : nt!KiDispatchException+0x135 fffff880`0d1d7500 fffff800`032dac4a : 00000000`00000000 00000000`0000489d fffffa80`13e13140 00000000`00000000 : nt!KiExceptionDispatch+0xc2 fffff880`0d1d76e0 fffff880`0caf5972 : fffff880`0caf57f2 00000000`00000010 fffff880`0d8282ff 00000000`00000000 : nt!KiGeneralProtectionFault+0x10a (TrapFrame @ fffff880`0d1d76e0) fffff880`0d1d7878 fffff880`0caf57f2 : 00000000`00000010 fffff880`0d8282ff 00000000`00000000 00000000`00000000 : 0xfffff880`0caf5972 fffff880`0d1d7880 00000000`00000010 : fffff880`0d8282ff 00000000`00000000 00000000`00000000 00000000`00000000 : 0xfffff880`0caf57f2 fffff880`0d1d7888 fffff880`0d8282ff : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`f8a00b8e : 0x10 fffff880`0d1d7890 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`f8a00b8e 00000000`00000000 : VMMR0+0x172ff 3: kd> lm kv start end module name fffff800`00bd0000 fffff800`00bda000 kdcom (deferred) Mapped memory image file: e:\localsymbols\kdcom.dll\4D4D40B0a000\kdcom.dll Image path: kdcom.dll Image name: kdcom.dll Timestamp: Sat Feb 05 04:21:04 2011 (4D4D40B0) CheckSum: 00013C04 ImageSize: 0000A000 File version: 6.1.7601.21655 Product version: 6.1.7601.21655 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.A Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: kdcom.dll OriginalFilename: kdcom.dll ProductVersion: 6.1.7601.21655 FileVersion: 6.1.7601.21655 (win7sp1_ldr.110204-1714) FileDescription: Serial Kernel Debugger LegalCopyright: © Microsoft Corporation. All rights reserved. fffff800`03217000 fffff800`03260000 hal (deferred) Mapped memory image file: e:\localsymbols\hal.dll\4EAB9BFE49000\hal.dll Image path: hal.dll Image name: hal.dll Timestamp: Fri Oct 28 23:23:58 2011 (4EAB9BFE) CheckSum: 0004493D ImageSize: 00049000 File version: 6.1.7601.21849 Product version: 6.1.7601.21849 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: hal.dll OriginalFilename: hal.dll ProductVersion: 6.1.7601.21849 FileVersion: 6.1.7601.21849 (win7sp1_ldr.111028-1502) FileDescription: Hardware Abstraction Layer DLL LegalCopyright: © Microsoft Corporation. All rights reserved. fffff800`03260000 fffff800`03849000 nt (pdb symbols) e:\localsymbols\ntkrnlmp.pdb\B66A45EC7F3F4E009ACE0F7E1B5AD1892\ntkrnlmp.pdb Loaded symbol image file: ntkrnlmp.exe Mapped memory image file: e:\localsymbols\ntoskrnl.exe\4ECDC9065e9000\ntoskrnl.exe Image path: ntkrnlmp.exe Image name: ntkrnlmp.exe Timestamp: Wed Nov 23 20:33:10 2011 (4ECDC906) CheckSum: 0055387E ImageSize: 005E9000 File version: 6.1.7601.21866 Product version: 6.1.7601.21866 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 1.0 App File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: ntkrnlmp.exe OriginalFilename: ntkrnlmp.exe ProductVersion: 6.1.7601.21866 FileVersion: 6.1.7601.21866 (win7sp1_ldr.111123-1509) FileDescription: NT Kernel & System LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`00c24000 fffff880`00c73000 mcupdate (deferred) Image path: mcupdate.dll Image name: mcupdate.dll Timestamp: Thu Feb 10 01:07:50 2011 (4D53AAE6) CheckSum: 00052778 ImageSize: 0004F000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`00c73000 fffff880`00c87000 PSHED (deferred) Mapped memory image file: e:\localsymbols\PSHED.dll\4A5BE02714000\PSHED.dll Image path: PSHED.dll Image name: PSHED.dll Timestamp: Mon Jul 13 18:32:23 2009 (4A5BE027) CheckSum: 0000F762 ImageSize: 00014000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: pshed.dll OriginalFilename: pshed.dll ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: Platform Specific Hardware Error Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`00c87000 fffff880`00ce5000 CLFS (deferred) Mapped memory image file: e:\localsymbols\CLFS.SYS\4A5BC11D5e000\CLFS.SYS Image path: CLFS.SYS Image name: CLFS.SYS Timestamp: Mon Jul 13 16:19:57 2009 (4A5BC11D) CheckSum: 00065C46 ImageSize: 0005E000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0000.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: clfs.sys OriginalFilename: Clfs.Sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: Common Log File System Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`00ce5000 fffff880`00da5000 CI (deferred) Mapped memory image file: e:\localsymbols\CI.dll\4CE7C944c0000\CI.dll Image path: CI.dll Image name: CI.dll Timestamp: Sat Nov 20 05:12:36 2010 (4CE7C944) CheckSum: 000CB0F6 ImageSize: 000C0000 File version: 6.1.7601.17514 Product version: 6.1.7601.17514 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: ci.dll OriginalFilename: ci.dll ProductVersion: 6.1.7601.17514 FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850) FileDescription: Code Integrity Module LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`00da5000 fffff880`00def000 fwpkclnt (deferred) Mapped memory image file: e:\localsymbols\fwpkclnt.sys\4EB4A31C4a000\fwpkclnt.sys Image path: fwpkclnt.sys Image name: fwpkclnt.sys Timestamp: Fri Nov 04 19:44:44 2011 (4EB4A31C) CheckSum: 0004A333 ImageSize: 0004A000 File version: 6.1.7601.21855 Product version: 6.1.7601.21855 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: fwpkclnt.sys OriginalFilename: fwpkclnt.sys ProductVersion: 6.1.7601.21855 FileVersion: 6.1.7601.21855 (win7sp1_ldr.111104-1514) FileDescription: FWP/IPsec Kernel-Mode API LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`00e00000 fffff880`00e15000 partmgr (deferred) Mapped memory image file: e:\localsymbols\partmgr.sys\4CE792C015000\partmgr.sys Image path: partmgr.sys Image name: partmgr.sys Timestamp: Sat Nov 20 01:20:00 2010 (4CE792C0) CheckSum: 000209B5 ImageSize: 00015000 File version: 6.1.7601.17514 Product version: 6.1.7601.17514 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0000.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: partmgr.sys OriginalFilename: partmgr.sys ProductVersion: 6.1.7601.17514 FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850) FileDescription: Partition Management Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`00e15000 fffff880`00e4e000 pcmcia (deferred) Mapped memory image file: e:\localsymbols\pcmcia.sys\4A5BC3BE39000\pcmcia.sys Image path: pcmcia.sys Image name: pcmcia.sys Timestamp: Mon Jul 13 16:31:10 2009 (4A5BC3BE) CheckSum: 0004139C ImageSize: 00039000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: pcmcia.sys OriginalFilename: pcmcia.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: PCMCIA Bus Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`00e4e000 fffff880`00e63000 volmgr (deferred) Mapped memory image file: e:\localsymbols\volmgr.sys\4E66E2C015000\volmgr.sys Image path: volmgr.sys Image name: volmgr.sys Timestamp: Tue Sep 06 20:19:28 2011 (4E66E2C0) CheckSum: 000190F0 ImageSize: 00015000 File version: 6.1.7601.21812 Product version: 6.1.7601.21812 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: volmgr.sys OriginalFilename: volmgr.sys ProductVersion: 6.1.7601.21812 FileVersion: 6.1.7601.21812 (win7sp1_ldr.110906-1504) FileDescription: Volume Manager Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`00e6c000 fffff880`00f10000 Wdf01000 (deferred) Mapped memory image file: e:\localsymbols\Wdf01000.sys\4A5BC19Fa4000\Wdf01000.sys Image path: Wdf01000.sys Image name: Wdf01000.sys Timestamp: Mon Jul 13 16:22:07 2009 (4A5BC19F) CheckSum: 000A2E74 ImageSize: 000A4000 File version: 1.9.7600.16385 Product version: 1.9.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: wdf01000.sys OriginalFilename: wdf01000.sys ProductVersion: 1.9.7600.16385 FileVersion: 1.9.7600.16385 (win7_rtm.090713-1255) FileDescription: Kernel Mode Driver Framework Runtime LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`00f10000 fffff880`00f1f000 WDFLDR (deferred) Mapped memory image file: e:\localsymbols\WDFLDR.SYS\4A5BC11Af000\WDFLDR.SYS Image path: WDFLDR.SYS Image name: WDFLDR.SYS Timestamp: Mon Jul 13 16:19:54 2009 (4A5BC11A) CheckSum: 00011010 ImageSize: 0000F000 File version: 1.9.7600.16385 Product version: 1.9.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0000.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: wdfldr.sys OriginalFilename: wdfldr.sys ProductVersion: 1.9.7600.16385 FileVersion: 1.9.7600.16385 (win7_rtm.090713-1255) FileDescription: Kernel Mode Driver Framework Loader LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`00f1f000 fffff880`00f76000 ACPI (deferred) Mapped memory image file: e:\localsymbols\ACPI.sys\4E66E2B157000\ACPI.sys Image path: ACPI.sys Image name: ACPI.sys Timestamp: Tue Sep 06 20:19:13 2011 (4E66E2B1) CheckSum: 0005A6D0 ImageSize: 00057000 File version: 6.1.7601.21812 Product version: 6.1.7601.21812 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: ACPI.sys OriginalFilename: ACPI.sys ProductVersion: 6.1.7601.21812 FileVersion: 6.1.7601.21812 (win7sp1_ldr.110906-1504) FileDescription: ACPI Driver for NT LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`00f76000 fffff880`00f7f000 WMILIB (deferred) Mapped memory image file: e:\localsymbols\WMILIB.SYS\4A5BC1179000\WMILIB.SYS Image path: WMILIB.SYS Image name: WMILIB.SYS Timestamp: Mon Jul 13 16:19:51 2009 (4A5BC117) CheckSum: 00005007 ImageSize: 00009000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: WmiLib.sys OriginalFilename: WmiLib.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: WMILIB WMI support library Dll LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`00f7f000 fffff880`00f89000 msisadrv (deferred) Mapped memory image file: e:\localsymbols\msisadrv.sys\4A5BC0FEa000\msisadrv.sys Image path: msisadrv.sys Image name: msisadrv.sys Timestamp: Mon Jul 13 16:19:26 2009 (4A5BC0FE) CheckSum: 0001320D ImageSize: 0000A000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: msisadrv.sys OriginalFilename: msisadrv.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: ISA Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`00f89000 fffff880`00f96000 vdrvroot (deferred) Mapped memory image file: e:\localsymbols\vdrvroot.sys\4A5BCADBd000\vdrvroot.sys Image path: vdrvroot.sys Image name: vdrvroot.sys Timestamp: Mon Jul 13 17:01:31 2009 (4A5BCADB) CheckSum: 0000C04B ImageSize: 0000D000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: vdrvroot.sys OriginalFilename: vdrvroot.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: Virtual Drive Root Enumerator LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`00f96000 fffff880`00fbb000 vsflt63 (deferred) Image path: vsflt63.sys Image name: vsflt63.sys Timestamp: Thu Oct 20 03:08:00 2011 (4E9FF300) CheckSum: 0002D6ED ImageSize: 00025000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`00fbb000 fffff880`00fee000 pci (deferred) Mapped memory image file: e:\localsymbols\pci.sys\4E66E2AD33000\pci.sys Image path: pci.sys Image name: pci.sys Timestamp: Tue Sep 06 20:19:09 2011 (4E66E2AD) CheckSum: 00033EF7 ImageSize: 00033000 File version: 6.1.7601.21812 Product version: 6.1.7601.21812 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: pci.sys OriginalFilename: pci.sys ProductVersion: 6.1.7601.21812 FileVersion: 6.1.7601.21812 (win7sp1_ldr.110906-1504) FileDescription: NT Plug and Play PCI Enumerator LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`01008000 fffff880`01064000 volmgrx (deferred) Mapped memory image file: e:\localsymbols\volmgrx.sys\4D8431775c000\volmgrx.sys Image path: volmgrx.sys Image name: volmgrx.sys Timestamp: Fri Mar 18 21:30:47 2011 (4D843177) CheckSum: 0005A93F ImageSize: 0005C000 File version: 6.1.7601.21687 Product version: 6.1.7601.21687 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: volmgrx.sys OriginalFilename: volmgrx.sys ProductVersion: 6.1.7601.21687 FileVersion: 6.1.7601.21687 (win7sp1_ldr.110318-1704) FileDescription: Volume Manager Extension Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`01064000 fffff880`0106d000 compbatt (deferred) Mapped memory image file: e:\localsymbols\compbatt.sys\4A5BC3B69000\compbatt.sys Image path: compbatt.sys Image name: compbatt.sys Timestamp: Mon Jul 13 16:31:02 2009 (4A5BC3B6) CheckSum: 000080E2 ImageSize: 00009000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: compbatt.sys OriginalFilename: compbatt.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: Composite Battery Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`0106d000 fffff880`01079000 BATTC (deferred) Mapped memory image file: e:\localsymbols\BATTC.SYS\4A5BC3B5c000\BATTC.SYS Image path: BATTC.SYS Image name: BATTC.SYS Timestamp: Mon Jul 13 16:31:01 2009 (4A5BC3B5) CheckSum: 000083B1 ImageSize: 0000C000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0000.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: battc.sys OriginalFilename: battc.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: Battery Class Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`01079000 fffff880`01099000 vmci (deferred) Image path: vmci.sys Image name: vmci.sys Timestamp: Tue Jul 26 19:42:09 2011 (4E2F7B01) CheckSum: 000212F9 ImageSize: 00020000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01099000 fffff880`010b3000 mountmgr (deferred) Mapped memory image file: e:\localsymbols\mountmgr.sys\4E61E73F1a000\mountmgr.sys Image path: mountmgr.sys Image name: mountmgr.sys Timestamp: Sat Sep 03 01:37:19 2011 (4E61E73F) CheckSum: 0001A7EE ImageSize: 0001A000 File version: 6.1.7601.21810 Product version: 6.1.7601.21810 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: mountmgr.sys OriginalFilename: mountmgr.sys ProductVersion: 6.1.7601.21810 FileVersion: 6.1.7601.21810 (win7sp1_ldr.110902-2012) FileDescription: Mount Point Manager LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`010b3000 fffff880`010ff000 fltmgr (deferred) Mapped memory image file: e:\localsymbols\fltmgr.sys\4E17BD594c000\fltmgr.sys Image path: fltmgr.sys Image name: fltmgr.sys Timestamp: Fri Jul 08 19:30:49 2011 (4E17BD59) CheckSum: 0004A5D2 ImageSize: 0004C000 File version: 6.1.7601.21767 Product version: 6.1.7601.21767 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: fltMgr.sys OriginalFilename: fltMgr.sys ProductVersion: 6.1.7601.21767 FileVersion: 6.1.7601.21767 (win7sp1_ldr.110708-1505) FileDescription: Microsoft Filesystem Filter Manager LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`010ff000 fffff880`01132000 MpFilter (deferred) Image path: MpFilter.sys Image name: MpFilter.sys Timestamp: Mon Nov 07 14:24:33 2011 (4EB85AA1) CheckSum: 0003ED7F ImageSize: 00033000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01132000 fffff880`01160000 symsnap (deferred) Image path: symsnap.sys Image name: symsnap.sys Timestamp: Mon Jun 21 08:42:15 2010 (4C1F8857) CheckSum: 0002D8C0 ImageSize: 0002E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01160000 fffff880`011be000 msrpc (deferred) Mapped memory image file: e:\localsymbols\msrpc.sys\4CE793345e000\msrpc.sys Image path: msrpc.sys Image name: msrpc.sys Timestamp: Sat Nov 20 01:21:56 2010 (4CE79334) CheckSum: 0005E9E7 ImageSize: 0005E000 File version: 6.1.7601.17514 Product version: 6.1.7601.17514 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: krpcdd.sys OriginalFilename: krpcdd.sys ProductVersion: 6.1.7601.17514 FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850) FileDescription: Kernel Remote Procedure Call Provider LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`011be000 fffff880`011f4000 vididr (deferred) Image path: vididr.sys Image name: vididr.sys Timestamp: Thu Oct 20 03:00:54 2011 (4E9FF156) CheckSum: 00035A22 ImageSize: 00036000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01200000 fffff880`0121cae0 DRVECDB (deferred) Image path: DRVECDB.SYS Image name: DRVECDB.SYS Timestamp: Mon Jul 23 14:55:21 2007 (46A523C9) CheckSum: 0001F027 ImageSize: 0001CAE0 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01223000 fffff880`015c5000 iaStor (deferred) Image path: iaStor.sys Image name: iaStor.sys Timestamp: Mon Oct 17 15:54:08 2011 (4E9CB210) CheckSum: 00096F1D ImageSize: 003A2000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`015c5000 fffff880`015d0000 amdxata (deferred) Image path: amdxata.sys Image name: amdxata.sys Timestamp: Fri Mar 19 09:18:18 2010 (4BA3A3CA) CheckSum: 000132DD ImageSize: 0000B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`015d0000 fffff880`015e4000 fileinfo (deferred) Mapped memory image file: e:\localsymbols\fileinfo.sys\4A5BC48114000\fileinfo.sys Image path: fileinfo.sys Image name: fileinfo.sys Timestamp: Mon Jul 13 16:34:25 2009 (4A5BC481) CheckSum: 00015644 ImageSize: 00014000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: FileInfo.sys OriginalFilename: FileInfo.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: FileInfo Filter Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`015e4000 fffff880`015e6b80 DLACDBHE (deferred) Image path: DLACDBHE.SYS Image name: DLACDBHE.SYS Timestamp: Mon Jul 23 14:49:28 2007 (46A52268) CheckSum: 0000A79C ImageSize: 00002B80 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`015e7000 fffff880`015f2d00 PxHlpa64 (deferred) Image path: PxHlpa64.sys Image name: PxHlpa64.sys Timestamp: Wed Mar 12 18:58:17 2008 (47D88A39) CheckSum: 0001D5EA ImageSize: 0000BD00 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01600000 fffff880`0161b000 ksecdd (deferred) Mapped memory image file: e:\localsymbols\ksecdd.sys\4EC480CA1b000\ksecdd.sys Image path: ksecdd.sys Image name: ksecdd.sys Timestamp: Wed Nov 16 19:34:34 2011 (4EC480CA) CheckSum: 0001FA99 ImageSize: 0001B000 File version: 6.1.7601.21861 Product version: 6.1.7601.21861 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: ksecdd.sys OriginalFilename: ksecdd.sys ProductVersion: 6.1.7601.21861 FileVersion: 6.1.7601.21861 (win7sp1_ldr.111116-1505) FileDescription: Kernel Security Support Provider Interface LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`0161b000 fffff880`01646000 ksecpkg (deferred) Mapped memory image file: e:\localsymbols\ksecpkg.sys\4EC4893B2b000\ksecpkg.sys Image path: ksecpkg.sys Image name: ksecpkg.sys Timestamp: Wed Nov 16 20:10:35 2011 (4EC4893B) CheckSum: 000290C5 ImageSize: 0002B000 File version: 6.1.7601.21861 Product version: 6.1.7601.21861 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: ksecpkg.sys OriginalFilename: ksecpkg.sys ProductVersion: 6.1.7601.21861 FileVersion: 6.1.7601.21861 (win7sp1_ldr.111116-1505) FileDescription: Kernel Security Support Provider Interface Packages LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`0164c000 fffff880`017ef000 Ntfs (deferred) Mapped memory image file: e:\localsymbols\Ntfs.sys\4E8E6B931a3000\Ntfs.sys Image path: Ntfs.sys Image name: Ntfs.sys Timestamp: Thu Oct 06 20:01:39 2011 (4E8E6B93) CheckSum: 0019FBF1 ImageSize: 001A3000 File version: 6.1.7601.21834 Product version: 6.1.7601.21834 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: ntfs.sys OriginalFilename: ntfs.sys ProductVersion: 6.1.7601.21834 FileVersion: 6.1.7601.21834 (win7sp1_ldr.111006-1506) FileDescription: NT File System Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`01800000 fffff880`01860000 NETIO (deferred) Mapped memory image file: e:\localsymbols\NETIO.SYS\4CE7938160000\NETIO.SYS Image path: NETIO.SYS Image name: NETIO.SYS Timestamp: Sat Nov 20 01:23:13 2010 (4CE79381) CheckSum: 00066D17 ImageSize: 00060000 File version: 6.1.7601.17514 Product version: 6.1.7601.17514 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.6 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: netio.sys OriginalFilename: netio.sys ProductVersion: 6.1.7601.17514 FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850) FileDescription: Network I/O Subsystem LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`0187f000 fffff880`018f1000 cng (deferred) Mapped memory image file: e:\localsymbols\cng.sys\4EC488F472000\cng.sys Image path: cng.sys Image name: cng.sys Timestamp: Wed Nov 16 20:09:24 2011 (4EC488F4) CheckSum: 0007D082 ImageSize: 00072000 File version: 6.1.7601.21861 Product version: 6.1.7601.21861 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: cng.sys OriginalFilename: cng.sys ProductVersion: 6.1.7601.21861 FileVersion: 6.1.7601.21861 (win7sp1_ldr.111116-1505) FileDescription: Kernel Cryptography, Next Generation LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`018f1000 fffff880`01902000 pcw (deferred) Mapped memory image file: e:\localsymbols\pcw.sys\4A5BC0FF11000\pcw.sys Image path: pcw.sys Image name: pcw.sys Timestamp: Mon Jul 13 16:19:27 2009 (4A5BC0FF) CheckSum: 00014B5E ImageSize: 00011000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.8 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: pcw.sys OriginalFilename: pcw.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: Performance Counters for Windows Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`01902000 fffff880`0190c000 Fs_Rec (deferred) Mapped memory image file: e:\localsymbols\Fs_Rec.sys\4A5BC111a000\Fs_Rec.sys Image path: Fs_Rec.sys Image name: Fs_Rec.sys Timestamp: Mon Jul 13 16:19:45 2009 (4A5BC111) CheckSum: 0001398A ImageSize: 0000A000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: fs_rec.sys OriginalFilename: fs_rec.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: File System Recognizer Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`0190c000 fffff880`019fe000 ndis (deferred) Mapped memory image file: e:\localsymbols\ndis.sys\4DACF48Ef2000\ndis.sys Image path: ndis.sys Image name: ndis.sys Timestamp: Mon Apr 18 19:33:50 2011 (4DACF48E) CheckSum: 000F2D78 ImageSize: 000F2000 File version: 6.1.7601.21707 Product version: 6.1.7601.21707 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.6 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: NDIS.SYS OriginalFilename: NDIS.SYS ProductVersion: 6.1.7601.21707 FileVersion: 6.1.7601.21707 (win7sp1_ldr.110418-1504) FileDescription: NDIS 6.20 driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`01a01000 fffff880`01c00000 tcpip (deferred) Mapped memory image file: e:\localsymbols\tcpip.sys\4EB4A3BF1ff000\tcpip.sys Image path: tcpip.sys Image name: tcpip.sys Timestamp: Fri Nov 04 19:47:27 2011 (4EB4A3BF) CheckSum: 001DD4B9 ImageSize: 001FF000 File version: 6.1.7601.21855 Product version: 6.1.7601.21855 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.6 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: tcpip.sys OriginalFilename: tcpip.sys ProductVersion: 6.1.7601.21855 FileVersion: 6.1.7601.21855 (win7sp1_ldr.111104-1514) FileDescription: TCP/IP Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`01c00000 fffff880`01c3a000 rdyboost (deferred) Mapped memory image file: e:\localsymbols\rdyboost.sys\4DD9C92E3a000\rdyboost.sys Image path: rdyboost.sys Image name: rdyboost.sys Timestamp: Sun May 22 19:40:46 2011 (4DD9C92E) CheckSum: 0003DB8F ImageSize: 0003A000 File version: 6.1.7601.21732 Product version: 6.1.7601.21732 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0000.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: rdyboost.sys OriginalFilename: rdyboost.sys ProductVersion: 6.1.7601.21732 FileVersion: 6.1.7601.21732 (win7sp1_ldr.110522-1503) FileDescription: ReadyBoost Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`01c3a000 fffff880`01c5d000 fltsrv (deferred) Image path: fltsrv.sys Image name: fltsrv.sys Timestamp: Thu Jul 14 02:50:57 2011 (4E1EBC01) CheckSum: 000268A6 ImageSize: 00023000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01c85000 fffff880`01d78000 timntr (deferred) Image path: timntr.sys Image name: timntr.sys Timestamp: Tue Jul 12 10:44:15 2011 (4E1C87EF) CheckSum: 000FC354 ImageSize: 000F3000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01d78000 fffff880`01d88000 vmstorfl (deferred) Mapped memory image file: e:\localsymbols\vmstorfl.sys\4CE79B8A10000\vmstorfl.sys Image path: vmstorfl.sys Image name: vmstorfl.sys Timestamp: Sat Nov 20 01:57:30 2010 (4CE79B8A) CheckSum: 0000ED21 ImageSize: 00010000 File version: 6.1.7601.17514 Product version: 6.1.7601.17514 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: vmstorfl.sys OriginalFilename: vmstorfl.sys ProductVersion: 6.1.7601.17514 FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850) FileDescription: Virtual Storage Filter Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`01d88000 fffff880`01dd4000 volsnap (deferred) Mapped memory image file: e:\localsymbols\volsnap.sys\4EB35EBC4c000\volsnap.sys Image path: volsnap.sys Image name: volsnap.sys Timestamp: Thu Nov 03 20:40:44 2011 (4EB35EBC) CheckSum: 0005685E ImageSize: 0004C000 File version: 6.1.7601.21854 Product version: 6.1.7601.21854 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: volsnap.sys OriginalFilename: volsnap.sys ProductVersion: 6.1.7601.21854 FileVersion: 6.1.7601.21854 (win7sp1_ldr.111103-1501) FileDescription: Volume Shadow Copy Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`01e00000 fffff880`01e1d000 sbp2port (deferred) Mapped memory image file: e:\localsymbols\sbp2port.sys\4CE792991d000\sbp2port.sys Image path: sbp2port.sys Image name: sbp2port.sys Timestamp: Sat Nov 20 01:19:21 2010 (4CE79299) CheckSum: 000228AA ImageSize: 0001D000 File version: 6.1.7601.17514 Product version: 6.1.7601.17514 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0000.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: sbp2port.sys OriginalFilename: sbp2port.sys ProductVersion: 6.1.7601.17514 FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850) FileDescription: SBP-2 Protocol Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`01e1d000 fffff880`01e29000 PBADRV (deferred) Image path: PBADRV.sys Image name: PBADRV.sys Timestamp: Mon Jan 07 11:12:13 2008 (4782798D) CheckSum: 000085EF ImageSize: 0000C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01e29000 fffff880`01e3b000 mup (deferred) Mapped memory image file: e:\localsymbols\mup.sys\4A5BC20112000\mup.sys Image path: mup.sys Image name: mup.sys Timestamp: Mon Jul 13 16:23:45 2009 (4A5BC201) CheckSum: 00015DFD ImageSize: 00012000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.6 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: MUP.SYS OriginalFilename: MUP.SYS ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: Multiple UNC Provider Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`01e3b000 fffff880`01e44000 hwpolicy (deferred) Mapped memory image file: e:\localsymbols\hwpolicy.sys\4CE7927E9000\hwpolicy.sys Image path: hwpolicy.sys Image name: hwpolicy.sys Timestamp: Sat Nov 20 01:18:54 2010 (4CE7927E) CheckSum: 0000D9F4 ImageSize: 00009000 File version: 6.1.7601.17514 Product version: 6.1.7601.17514 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: hwpolicy.sys OriginalFilename: hwpolicy.sys ProductVersion: 6.1.7601.17514 FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850) FileDescription: Hardware Policy Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`01e4b000 fffff880`01f87000 tdrpman (deferred) Image path: tdrpman.sys Image name: tdrpman.sys Timestamp: Wed Sep 28 07:23:04 2011 (4E832DC8) CheckSum: 00144070 ImageSize: 0013C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01f87000 fffff880`01f8f000 spldr (deferred) Image path: spldr.sys Image name: spldr.sys Timestamp: Mon May 11 09:56:27 2009 (4A0858BB) CheckSum: 0000E0E9 ImageSize: 00008000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01f8f000 fffff880`01f99000 speedfan (deferred) Image path: speedfan.sys Image name: speedfan.sys Timestamp: Sat Dec 18 03:03:51 2010 (4D0C9517) CheckSum: 0000E4AC ImageSize: 0000A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`01f99000 fffff880`01fe7000 snapman (deferred) Image path: snapman.sys Image name: snapman.sys Timestamp: Thu Sep 08 08:37:40 2011 (4E68E144) CheckSum: 00050005 ImageSize: 0004E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0200e000 fffff880`02048000 fvevol (deferred) Mapped memory image file: e:\localsymbols\fvevol.sys\4CE793B63a000\fvevol.sys Image path: fvevol.sys Image name: fvevol.sys Timestamp: Sat Nov 20 01:24:06 2010 (4CE793B6) CheckSum: 000389BC ImageSize: 0003A000 File version: 6.1.7601.17514 Product version: 6.1.7601.17514 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0000.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: FVEVOL.SYS OriginalFilename: FVEVOL.SYS ProductVersion: 6.1.7601.17514 FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850) FileDescription: BitLocker Drive Encryption Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`02048000 fffff880`0205e000 disk (deferred) Mapped memory image file: e:\localsymbols\disk.sys\4A5BC11D16000\disk.sys Image path: disk.sys Image name: disk.sys Timestamp: Mon Jul 13 16:19:57 2009 (4A5BC11D) CheckSum: 0001FF1D ImageSize: 00016000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0000.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: disk.sys OriginalFilename: disk.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: PnP Disk Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`0205e000 fffff880`0208e000 CLASSPNP (deferred) Mapped memory image file: e:\localsymbols\CLASSPNP.SYS\4CE7929B30000\CLASSPNP.SYS Image path: CLASSPNP.SYS Image name: CLASSPNP.SYS Timestamp: Sat Nov 20 01:19:23 2010 (4CE7929B) CheckSum: 000318BE ImageSize: 00030000 File version: 6.1.7601.17514 Product version: 6.1.7601.17514 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0000.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: Classpnp.sys OriginalFilename: Classpnp.sys ProductVersion: 6.1.7601.17514 FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850) FileDescription: SCSI Class System Dll LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`0209c000 fffff880`020aa000 vga (deferred) Mapped memory image file: e:\localsymbols\vga.sys\4A5BC587e000\vga.sys Image path: vga.sys Image name: vga.sys Timestamp: Mon Jul 13 16:38:47 2009 (4A5BC587) CheckSum: 00013E6F ImageSize: 0000E000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.4 Driver File date: 00000000.00000000 Translations: 0000.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: vga.sys OriginalFilename: vga.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: VGA/Super VGA Video Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`020aa000 fffff880`020cf000 VIDEOPRT (deferred) Mapped memory image file: e:\localsymbols\VIDEOPRT.SYS\4A5BC58B25000\VIDEOPRT.SYS Image path: VIDEOPRT.SYS Image name: VIDEOPRT.SYS Timestamp: Mon Jul 13 16:38:51 2009 (4A5BC58B) CheckSum: 00028FC7 ImageSize: 00025000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.4 Driver File date: 00000000.00000000 Translations: 0000.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: videoprt.sys OriginalFilename: videoprt.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: Video Port Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`020cf000 fffff880`020df000 watchdog (deferred) Mapped memory image file: e:\localsymbols\watchdog.sys\4A5BC53F10000\watchdog.sys Image path: watchdog.sys Image name: watchdog.sys Timestamp: Mon Jul 13 16:37:35 2009 (4A5BC53F) CheckSum: 00019CBE ImageSize: 00010000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0000.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: watchdog.sys OriginalFilename: watchdog.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: Watchdog Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`020df000 fffff880`020e8000 RDPCDD (deferred) Mapped memory image file: e:\localsymbols\RDPCDD.sys\4A5BCE629000\RDPCDD.sys Image path: RDPCDD.sys Image name: RDPCDD.sys Timestamp: Mon Jul 13 17:16:34 2009 (4A5BCE62) CheckSum: 0000FFAC ImageSize: 00009000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.4 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: RDPCDD.SYS OriginalFilename: RDPCDD.SYS ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: RDP Miniport LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`020e8000 fffff880`020f1000 rdpencdd (deferred) Mapped memory image file: e:\localsymbols\rdpencdd.sys\4A5BCE629000\rdpencdd.sys Image path: rdpencdd.sys Image name: rdpencdd.sys Timestamp: Mon Jul 13 17:16:34 2009 (4A5BCE62) CheckSum: 000074D5 ImageSize: 00009000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.4 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: RDPENCDD.SYS OriginalFilename: RDPENCDD.SYS ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: RDP Encoder Miniport LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`020f1000 fffff880`020fa000 rdprefmp (deferred) Mapped memory image file: e:\localsymbols\rdprefmp.sys\4A5BCE639000\rdprefmp.sys Image path: rdprefmp.sys Image name: rdprefmp.sys Timestamp: Mon Jul 13 17:16:35 2009 (4A5BCE63) CheckSum: 0000ABCD ImageSize: 00009000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.4 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: RDPREFMP.SYS OriginalFilename: RDPREFMP.SYS ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: RDP Reflector Driver Miniport LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`020fa000 fffff880`02105000 Msfs (deferred) Mapped memory image file: e:\localsymbols\Msfs.SYS\4A5BC113b000\Msfs.SYS Image path: Msfs.SYS Image name: Msfs.SYS Timestamp: Mon Jul 13 16:19:47 2009 (4A5BC113) CheckSum: 00007126 ImageSize: 0000B000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: MSFS.SYS OriginalFilename: MSFS.SYS ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: Mailslot driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`02105000 fffff880`02116000 Npfs (deferred) Mapped memory image file: e:\localsymbols\Npfs.SYS\4A5BC11411000\Npfs.SYS Image path: Npfs.SYS Image name: Npfs.SYS Timestamp: Mon Jul 13 16:19:48 2009 (4A5BC114) CheckSum: 00019AED ImageSize: 00011000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: npfs.sys OriginalFilename: npfs.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: NPFS Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`02116000 fffff880`02138000 tdx (deferred) Mapped memory image file: e:\localsymbols\tdx.sys\4CE7933222000\tdx.sys Image path: tdx.sys Image name: tdx.sys Timestamp: Sat Nov 20 01:21:54 2010 (4CE79332) CheckSum: 000288B2 ImageSize: 00022000 File version: 6.1.7601.17514 Product version: 6.1.7601.17514 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.6 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: tdx.sys OriginalFilename: tdx.sys ProductVersion: 6.1.7601.17514 FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850) FileDescription: TDI Translation Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`02138000 fffff880`02145000 TDI (deferred) Mapped memory image file: e:\localsymbols\TDI.SYS\4CE7933Ed000\TDI.SYS Image path: TDI.SYS Image name: TDI.SYS Timestamp: Sat Nov 20 01:22:06 2010 (4CE7933E) CheckSum: 00016255 ImageSize: 0000D000 File version: 6.1.7601.17514 Product version: 6.1.7601.17514 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.6 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: tdi.sys OriginalFilename: tdi.sys ProductVersion: 6.1.7601.17514 FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850) FileDescription: TDI Wrapper LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`02145000 fffff880`021ce000 afd (deferred) Mapped memory image file: e:\localsymbols\afd.sys\4E4B336A89000\afd.sys Image path: afd.sys Image name: afd.sys Timestamp: Tue Aug 16 20:20:10 2011 (4E4B336A) CheckSum: 0007B3EB ImageSize: 00089000 File version: 6.1.7601.21792 Product version: 6.1.7601.21792 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: afd.sys OriginalFilename: afd.sys ProductVersion: 6.1.7601.21792 FileVersion: 6.1.7601.21792 (win7sp1_ldr.110816-1504) FileDescription: Ancillary Function Driver for WinSock LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`021ce000 fffff880`021f8000 VBoxNetAdp (deferred) Image path: VBoxNetAdp.sys Image name: VBoxNetAdp.sys Timestamp: Mon Dec 19 04:43:53 2011 (4EEF3189) CheckSum: 000292E8 ImageSize: 0002A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04613000 fffff880`0463d000 cdrom (deferred) Mapped memory image file: e:\localsymbols\cdrom.sys\4CE792982a000\cdrom.sys Image path: cdrom.sys Image name: cdrom.sys Timestamp: Sat Nov 20 01:19:20 2010 (4CE79298) CheckSum: 0002B742 ImageSize: 0002A000 File version: 6.1.7601.17514 Product version: 6.1.7601.17514 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0000.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: cdrom.sys OriginalFilename: cdrom.sys ProductVersion: 6.1.7601.17514 FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850) FileDescription: SCSI CD-ROM Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`0463d000 fffff880`04646000 Null (deferred) Mapped memory image file: e:\localsymbols\Null.SYS\4A5BC1099000\Null.SYS Image path: Null.SYS Image name: Null.SYS Timestamp: Mon Jul 13 16:19:37 2009 (4A5BC109) CheckSum: 0000E9DB ImageSize: 00009000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: null.sys OriginalFilename: null.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: NULL Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`04646000 fffff880`0464d000 Beep (deferred) Mapped memory image file: e:\localsymbols\Beep.SYS\4A5BCA8D7000\Beep.SYS Image path: Beep.SYS Image name: Beep.SYS Timestamp: Mon Jul 13 17:00:13 2009 (4A5BCA8D) CheckSum: 000036EB ImageSize: 00007000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: beep.sys OriginalFilename: beep.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: BEEP Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`0464d000 fffff880`0466f300 DLAIFS_E (deferred) Image path: DLAIFS_E.SYS Image name: DLAIFS_E.SYS Timestamp: Mon Jul 23 15:01:13 2007 (46A52529) CheckSum: 0002B5A6 ImageSize: 00022300 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04670000 fffff880`04691000 WudfPf (deferred) Mapped memory image file: e:\localsymbols\WudfPf.sys\4CE7A62421000\WudfPf.sys Image path: WudfPf.sys Image name: WudfPf.sys Timestamp: Sat Nov 20 02:42:44 2010 (4CE7A624) CheckSum: 00021FC8 ImageSize: 00021000 File version: 6.1.7601.17514 Product version: 6.1.7601.17514 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0000.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: WUDFPf.sys OriginalFilename: WUDFPf.sys ProductVersion: 6.1.7601.17514 FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850) FileDescription: Windows Driver Foundation - User-mode Driver Framework Platform Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`04691000 fffff880`046b2900 DLAUDF_E (deferred) Image path: DLAUDF_E.SYS Image name: DLAUDF_E.SYS Timestamp: Mon Jul 23 15:02:09 2007 (46A52561) CheckSum: 0002B709 ImageSize: 00021900 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`046b3000 fffff880`046e4000 WUDFRd (deferred) Mapped memory image file: e:\localsymbols\WUDFRd.sys\4CE7A65431000\WUDFRd.sys Image path: WUDFRd.sys Image name: WUDFRd.sys Timestamp: Sat Nov 20 02:43:32 2010 (4CE7A654) CheckSum: 0002E568 ImageSize: 00031000 File version: 6.1.7601.17514 Product version: 6.1.7601.17514 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: WUDFRd.sys OriginalFilename: WUDFRd.sys ProductVersion: 6.1.7601.17514 FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850) FileDescription: Windows Driver Foundation - User-mode Driver Framework Reflector LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`046e4000 fffff880`04737000 nwifi (deferred) Mapped memory image file: e:\localsymbols\nwifi.sys\4A5BCC3B53000\nwifi.sys Image path: nwifi.sys Image name: nwifi.sys Timestamp: Mon Jul 13 17:07:23 2009 (4A5BCC3B) CheckSum: 00057B55 ImageSize: 00053000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.6 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: NWiFi.SYS OriginalFilename: NWiFi.SYS ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: NativeWiFi Miniport Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`04737000 fffff880`047ff000 HTTP (deferred) Mapped memory image file: e:\localsymbols\HTTP.sys\4ECDC633c8000\HTTP.sys Image path: HTTP.sys Image name: HTTP.sys Timestamp: Wed Nov 23 20:21:07 2011 (4ECDC633) CheckSum: 000BBE85 ImageSize: 000C8000 File version: 6.1.7601.21866 Product version: 6.1.7601.21866 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: http.sys OriginalFilename: http.sys ProductVersion: 6.1.7601.21866 FileVersion: 6.1.7601.21866 (win7sp1_ldr.111123-1509) FileDescription: HTTP Protocol Stack LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`047ff000 fffff880`0481d000 bowser (deferred) Mapped memory image file: e:\localsymbols\bowser.sys\4D647F771e000\bowser.sys Image path: bowser.sys Image name: bowser.sys Timestamp: Tue Feb 22 19:31:03 2011 (4D647F77) CheckSum: 00021DE3 ImageSize: 0001E000 File version: 6.1.7601.21666 Product version: 6.1.7601.21666 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: browser.sys OriginalFilename: browser.sys ProductVersion: 6.1.7601.21666 FileVersion: 6.1.7601.21666 (win7sp1_ldr.110222-1502) FileDescription: NT Lan Manager Datagram Receiver Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`0481d000 fffff880`0484a000 mrxsmb (deferred) Mapped memory image file: e:\localsymbols\mrxsmb.sys\4E4B34282d000\mrxsmb.sys Image path: mrxsmb.sys Image name: mrxsmb.sys Timestamp: Tue Aug 16 20:23:20 2011 (4E4B3428) CheckSum: 00032C1A ImageSize: 0002D000 File version: 6.1.7601.21792 Product version: 6.1.7601.21792 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: MRxSmb.sys OriginalFilename: MRXSMB.Sys ProductVersion: 6.1.7601.21792 FileVersion: 6.1.7601.21792 (win7sp1_ldr.110816-1504) FileDescription: Windows NT SMB Minirdr LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`0484a000 fffff880`04898000 mrxsmb10 (deferred) Mapped memory image file: e:\localsymbols\mrxsmb10.sys\4E3761D54e000\mrxsmb10.sys Image path: mrxsmb10.sys Image name: mrxsmb10.sys Timestamp: Mon Aug 01 19:32:53 2011 (4E3761D5) CheckSum: 0004E870 ImageSize: 0004E000 File version: 6.1.7601.21782 Product version: 6.1.7601.21782 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: MRxSmb0.sys OriginalFilename: MRXSMB0.Sys ProductVersion: 6.1.7601.21782 FileVersion: 6.1.7601.21782 (win7sp1_ldr.110801-1504) FileDescription: Longhorn SMB Downlevel SubRdr LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`04898000 fffff880`048bc000 mrxsmb20 (deferred) Mapped memory image file: e:\localsymbols\mrxsmb20.sys\4ECDC6B624000\mrxsmb20.sys Image path: mrxsmb20.sys Image name: mrxsmb20.sys Timestamp: Wed Nov 23 20:23:18 2011 (4ECDC6B6) CheckSum: 0002EFCA ImageSize: 00024000 File version: 6.1.7601.21866 Product version: 6.1.7601.21866 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: MRxSmb20.sys OriginalFilename: MRXSMB20.Sys ProductVersion: 6.1.7601.21866 FileVersion: 6.1.7601.21866 (win7sp1_ldr.111123-1509) FileDescription: Longhorn SMB 2.0 Redirector LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`048bc000 fffff880`048ce000 vmx86 (deferred) Image path: vmx86.sys Image name: vmx86.sys Timestamp: Sun Nov 13 23:18:14 2011 (4EC0C0B6) CheckSum: 0001BEA0 ImageSize: 00012000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`048ce000 fffff880`048d7000 cpuz134_x64 (deferred) Image path: cpuz134_x64.sys Image name: cpuz134_x64.sys Timestamp: Fri Jul 09 04:16:58 2010 (4C37052A) CheckSum: 000113E8 ImageSize: 00009000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`048d7000 fffff880`048e0000 FADA64 (deferred) Image path: FADA64.sys Image name: FADA64.sys Timestamp: Thu Apr 24 11:03:39 2003 (3EA826FB) CheckSum: 00014E66 ImageSize: 00009000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`048e0000 fffff880`04986000 peauth (deferred) Image path: peauth.sys Image name: peauth.sys Timestamp: Mon Jul 13 18:01:19 2009 (4A5BD8DF) CheckSum: 000AB7C9 ImageSize: 000A6000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04986000 fffff880`04991000 secdrv (deferred) Image path: secdrv.SYS Image name: secdrv.SYS Timestamp: Wed Sep 13 06:18:38 2006 (4508052E) CheckSum: 00010B40 ImageSize: 0000B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04991000 fffff880`0499b000 vwifimp (deferred) Mapped memory image file: e:\localsymbols\vwifimp.sys\4D3E5780a000\vwifimp.sys Image path: vwifimp.sys Image name: vwifimp.sys Timestamp: Mon Jan 24 20:54:24 2011 (4D3E5780) CheckSum: 0000EFF7 ImageSize: 0000A000 File version: 6.1.7601.21648 Product version: 6.1.7601.21648 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.6 Driver File date: 00000000.00000000 Translations: 0000.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: vwifimp.sys OriginalFilename: vwifimp.sys ProductVersion: 6.1.7601.21648 FileVersion: 6.1.7601.21648 (win7sp1_ldr.110124-1504) FileDescription: Virtual WiFi Miniport Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`0499b000 fffff880`049cc000 srvnet (deferred) Mapped memory image file: e:\localsymbols\srvnet.sys\4DBA281B31000\srvnet.sys Image path: srvnet.sys Image name: srvnet.sys Timestamp: Thu Apr 28 19:53:15 2011 (4DBA281B) CheckSum: 000300FA ImageSize: 00031000 File version: 6.1.7601.21717 Product version: 6.1.7601.21717 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.6 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: SRVNET.SYS OriginalFilename: SRVNET.SYS ProductVersion: 6.1.7601.21717 FileVersion: 6.1.7601.21717 (win7sp1_ldr.110428-1525) FileDescription: Server Network driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`049f2000 fffff880`049fa680 DLARTL_E (deferred) Image path: DLARTL_E.SYS Image name: DLARTL_E.SYS Timestamp: Mon Jul 23 14:48:39 2007 (46A52237) CheckSum: 000137B8 ImageSize: 00008680 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04a00000 fffff880`04a11000 blbdrive (deferred) Mapped memory image file: e:\localsymbols\blbdrive.sys\4A5BC4DF11000\blbdrive.sys Image path: blbdrive.sys Image name: blbdrive.sys Timestamp: Mon Jul 13 16:35:59 2009 (4A5BC4DF) CheckSum: 00019567 ImageSize: 00011000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: blbdrive.sys OriginalFilename: blbdrive.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: BLB Drive Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`04a11000 fffff880`04a37000 tunnel (deferred) Mapped memory image file: e:\localsymbols\tunnel.sys\4E702B9A26000\tunnel.sys Image path: tunnel.sys Image name: tunnel.sys Timestamp: Tue Sep 13 21:20:42 2011 (4E702B9A) CheckSum: 00020F97 ImageSize: 00026000 File version: 6.1.7601.21818 Product version: 6.1.7601.21818 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.6 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: tunnel.sys OriginalFilename: tunnel.sys ProductVersion: 6.1.7601.21818 FileVersion: 6.1.7601.21818 (win7sp1_ldr.110913-1504) FileDescription: Microsoft Tunnel Interface Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`04a37000 fffff880`04a9e000 b57nd60a (deferred) Image path: b57nd60a.sys Image name: b57nd60a.sys Timestamp: Mon Feb 14 19:58:31 2011 (4D59F9E7) CheckSum: 00072A2A ImageSize: 00067000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04a9e000 fffff880`04aac000 crashdmp (deferred) Mapped memory image file: e:\localsymbols\crashdmp.sys\4A5BCABDe000\crashdmp.sys Image path: crashdmp.sys Image name: crashdmp.sys Timestamp: Mon Jul 13 17:01:01 2009 (4A5BCABD) CheckSum: 000178C7 ImageSize: 0000E000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: crashdmp.sys OriginalFilename: crashdmp.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: Crash Dump Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`04ab0000 fffff880`04b01000 rdbss (deferred) Mapped memory image file: e:\localsymbols\rdbss.sys\4E867D0751000\rdbss.sys Image path: rdbss.sys Image name: rdbss.sys Timestamp: Fri Sep 30 19:37:59 2011 (4E867D07) CheckSum: 00051991 ImageSize: 00051000 File version: 6.1.7601.21830 Product version: 6.1.7601.21830 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: rdbss.sys OriginalFilename: RDBSS.Sys ProductVersion: 6.1.7601.21830 FileVersion: 6.1.7601.21830 (win7sp1_ldr.110930-1502) FileDescription: Redirected Drive Buffering SubSystem Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`04b01000 fffff880`04b0d000 nsiproxy (deferred) Mapped memory image file: e:\localsymbols\nsiproxy.sys\4E3B5736c000\nsiproxy.sys Image path: nsiproxy.sys Image name: nsiproxy.sys Timestamp: Thu Aug 04 19:36:38 2011 (4E3B5736) CheckSum: 0000E658 ImageSize: 0000C000 File version: 6.1.7601.21784 Product version: 6.1.7601.21784 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.6 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: nsiproxy.sys OriginalFilename: nsiproxy.sys ProductVersion: 6.1.7601.21784 FileVersion: 6.1.7601.21784 (win7sp1_ldr.110804-1504) FileDescription: NSI Proxy LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`04b0d000 fffff880`04b18000 mssmbios (deferred) Mapped memory image file: e:\localsymbols\mssmbios.sys\4A5BC3BEb000\mssmbios.sys Image path: mssmbios.sys Image name: mssmbios.sys Timestamp: Mon Jul 13 16:31:10 2009 (4A5BC3BE) CheckSum: 0000F474 ImageSize: 0000B000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: smbios.sys OriginalFilename: smbios.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: System Management BIOS Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`04b18000 fffff880`04b2e000 GenericMount (deferred) Image path: GenericMount.sys Image name: GenericMount.sys Timestamp: Mon Jan 18 05:50:40 2010 (4B546730) CheckSum: 0001E6D8 ImageSize: 00016000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04b2e000 fffff880`04b34b80 GEARAspiWDM (deferred) Image path: GEARAspiWDM.sys Image name: GEARAspiWDM.sys Timestamp: Mon May 16 13:56:05 2011 (4DD18F65) CheckSum: 00015B17 ImageSize: 00006B80 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04b35000 fffff880`04b41000 ElbyCDIO (deferred) Image path: ElbyCDIO.sys Image name: ElbyCDIO.sys Timestamp: Thu Dec 16 14:58:13 2010 (4D0A9985) CheckSum: 0000C8ED ImageSize: 0000C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`04b41000 fffff880`04b50000 discache (deferred) Mapped memory image file: e:\localsymbols\discache.sys\4A5BC52Ef000\discache.sys Image path: discache.sys Image name: discache.sys Timestamp: Mon Jul 13 16:37:18 2009 (4A5BC52E) CheckSum: 00015F3F ImageSize: 0000F000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: syscache.sys OriginalFilename: syscache.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: System Indexer/Cache Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`04b50000 fffff880`04bd3000 csc (deferred) Mapped memory image file: e:\localsymbols\csc.sys\4CE7947083000\csc.sys Image path: csc.sys Image name: csc.sys Timestamp: Sat Nov 20 01:27:12 2010 (4CE79470) CheckSum: 0008519D ImageSize: 00083000 File version: 6.1.7601.17514 Product version: 6.1.7601.17514 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: csc.sys OriginalFilename: CSC.Sys ProductVersion: 6.1.7601.17514 FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850) FileDescription: Windows Client Side Caching Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`04bd3000 fffff880`04bf1000 dfsc (deferred) Mapped memory image file: e:\localsymbols\dfsc.sys\4E0A8E751e000\dfsc.sys Image path: dfsc.sys Image name: dfsc.sys Timestamp: Tue Jun 28 19:31:17 2011 (4E0A8E75) CheckSum: 00027623 ImageSize: 0001E000 File version: 6.1.7601.21759 Product version: 6.1.7601.21759 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: dfsclient.sys OriginalFilename: dfsclient.sys ProductVersion: 6.1.7601.21759 FileVersion: 6.1.7601.21759 (win7sp1_ldr.110628-1502) FileDescription: DFS Namespace Client Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`04bf1000 fffff880`04bfa000 cpuz133_x64 (deferred) Image path: cpuz133_x64.sys Image name: cpuz133_x64.sys Timestamp: Tue Mar 30 14:34:16 2010 (4BB26E58) CheckSum: 00005E56 ImageSize: 00009000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05000000 fffff880`05056600 vpcvmm (deferred) Mapped memory image file: e:\localsymbols\vpcvmm.sys\4CE7B29456600\vpcvmm.sys Image path: vpcvmm.sys Image name: vpcvmm.sys Timestamp: Sat Nov 20 03:35:48 2010 (4CE7B294) CheckSum: 0005A84A ImageSize: 00056600 File version: 6.1.7601.17514 Product version: 6.1.7601.17514 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.0 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Virtual PC Virtual Machine Monitor InternalName: vpcvmm.sys OriginalFilename: vpcvmm.sys ProductVersion: 6.1.7601.17514 FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850) FileDescription: Virtual PC Virtual Machine Monitor LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`05057000 fffff880`0507d000 VBoxUSBMon (deferred) Image path: VBoxUSBMon.sys Image name: VBoxUSBMon.sys Timestamp: Mon Dec 19 04:43:53 2011 (4EEF3189) CheckSum: 0002A2EA ImageSize: 00026000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0507d000 fffff880`050b9000 VBoxDrv (deferred) Image path: VBoxDrv.sys Image name: VBoxDrv.sys Timestamp: Mon Dec 19 04:43:53 2011 (4EEF3189) CheckSum: 000387AC ImageSize: 0003C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`050bf000 fffff880`05104000 netbt (deferred) Mapped memory image file: e:\localsymbols\netbt.sys\4CE7938645000\netbt.sys Image path: netbt.sys Image name: netbt.sys Timestamp: Sat Nov 20 01:23:18 2010 (4CE79386) CheckSum: 00041134 ImageSize: 00045000 File version: 6.1.7601.17514 Product version: 6.1.7601.17514 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: netbt.sys OriginalFilename: netbt.sys ProductVersion: 6.1.7601.17514 FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850) FileDescription: MBT Transport driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`05104000 fffff880`0510f000 ws2ifsl (deferred) Mapped memory image file: e:\localsymbols\ws2ifsl.sys\4A5BCCF9b000\ws2ifsl.sys Image path: ws2ifsl.sys Image name: ws2ifsl.sys Timestamp: Mon Jul 13 17:10:33 2009 (4A5BCCF9) CheckSum: 0000B7A3 ImageSize: 0000B000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: ws2ifsl.sys OriginalFilename: ws2ifsl.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: Winsock2 IFS Layer LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`0510f000 fffff880`05118000 wfplwf (deferred) Mapped memory image file: e:\localsymbols\wfplwf.sys\4A5BCCB69000\wfplwf.sys Image path: wfplwf.sys Image name: wfplwf.sys Timestamp: Mon Jul 13 17:09:26 2009 (4A5BCCB6) CheckSum: 0000B17B ImageSize: 00009000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.6 Driver File date: 00000000.00000000 Translations: 0000.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: WFPLWF.SYS OriginalFilename: WFPLWF.SYS ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: WFP NDIS 6.20 Lightweight Filter Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`05118000 fffff880`0513e000 pacer (deferred) Mapped memory image file: e:\localsymbols\pacer.sys\4CE7A86226000\pacer.sys Image path: pacer.sys Image name: pacer.sys Timestamp: Sat Nov 20 02:52:18 2010 (4CE7A862) CheckSum: 00020DCF ImageSize: 00026000 File version: 6.1.7601.17514 Product version: 6.1.7601.17514 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.6 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: pacer.sys OriginalFilename: pacer.sys ProductVersion: 6.1.7601.17514 FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850) FileDescription: QoS Packet Scheduler LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`0513e000 fffff880`05154000 vwififlt (deferred) Mapped memory image file: e:\localsymbols\vwififlt.sys\4D3E577B16000\vwififlt.sys Image path: vwififlt.sys Image name: vwififlt.sys Timestamp: Mon Jan 24 20:54:19 2011 (4D3E577B) CheckSum: 0001D508 ImageSize: 00016000 File version: 6.1.7601.21648 Product version: 6.1.7601.21648 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.6 Driver File date: 00000000.00000000 Translations: 0000.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: vwififlt.sys OriginalFilename: vwififlt.sys ProductVersion: 6.1.7601.21648 FileVersion: 6.1.7601.21648 (win7sp1_ldr.110124-1504) FileDescription: Virtual WiFi Filter Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`05154000 fffff880`05168000 vpcnfltr (deferred) Mapped memory image file: e:\localsymbols\vpcnfltr.sys\4CE7B27814000\vpcnfltr.sys Image path: vpcnfltr.sys Image name: vpcnfltr.sys Timestamp: Sat Nov 20 03:35:20 2010 (4CE7B278) CheckSum: 00019248 ImageSize: 00014000 File version: 6.1.7601.17514 Product version: 6.1.7601.17514 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.6 Driver File date: 00000000.00000000 Translations: 0000.04b0 CompanyName: Microsoft Corporation ProductName: Virtual PC Network Filter Driver InternalName: vpcnfltr.sys OriginalFilename: vpcnfltr.sys ProductVersion: 6.1.7601.17514 FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850) FileDescription: Virtual PC Network Filter Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`05168000 fffff880`05177000 netbios (deferred) Mapped memory image file: e:\localsymbols\netbios.sys\4ECDD4B4f000\netbios.sys Image path: netbios.sys Image name: netbios.sys Timestamp: Wed Nov 23 21:23:00 2011 (4ECDD4B4) CheckSum: 00014F1A ImageSize: 0000F000 File version: 6.1.7601.21866 Product version: 6.1.7601.21866 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.6 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: NETBIOS.SYS OriginalFilename: NETBIOS.SYS ProductVersion: 6.1.7601.21866 FileVersion: 6.1.7601.21866 (win7sp1_ldr.111123-1509) FileDescription: NetBIOS interface driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`05177000 fffff880`05194000 serial (deferred) Mapped memory image file: e:\localsymbols\serial.sys\4A5BCAA81d000\serial.sys Image path: serial.sys Image name: serial.sys Timestamp: Mon Jul 13 17:00:40 2009 (4A5BCAA8) CheckSum: 0001D422 ImageSize: 0001D000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: serial.sys OriginalFilename: serial.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: Serial Device Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`05194000 fffff880`051af000 wanarp (deferred) Mapped memory image file: e:\localsymbols\wanarp.sys\4D7B45E01b000\wanarp.sys Image path: wanarp.sys Image name: wanarp.sys Timestamp: Sat Mar 12 02:07:28 2011 (4D7B45E0) CheckSum: 0001DF46 ImageSize: 0001B000 File version: 6.1.7601.21682 Product version: 6.1.7601.21682 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.6 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: WANARP.SYS OriginalFilename: WANARP.SYS ProductVersion: 6.1.7601.21682 FileVersion: 6.1.7601.21682 (win7sp1_ldr.110311-2052) FileDescription: MS Remote Access and Routing ARP Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`051af000 fffff880`051c3000 termdd (deferred) Mapped memory image file: e:\localsymbols\termdd.sys\4CE7AB0C14000\termdd.sys Image path: termdd.sys Image name: termdd.sys Timestamp: Sat Nov 20 03:03:40 2010 (4CE7AB0C) CheckSum: 00019E15 ImageSize: 00014000 File version: 6.1.7601.17514 Product version: 6.1.7601.17514 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: termdd.sys OriginalFilename: termdd.sys ProductVersion: 6.1.7601.17514 FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850) FileDescription: Remote Desktop Server Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`051c3000 fffff880`051e4000 raspptp (deferred) Mapped memory image file: e:\localsymbols\raspptp.sys\4CE7A86F21000\raspptp.sys Image path: raspptp.sys Image name: raspptp.sys Timestamp: Sat Nov 20 02:52:31 2010 (4CE7A86F) CheckSum: 000251CB ImageSize: 00021000 File version: 6.1.7601.17514 Product version: 6.1.7601.17514 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.6 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: RASPPTP.SYS OriginalFilename: RASPPTP.SYS ProductVersion: 6.1.7601.17514 FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850) FileDescription: Peer-to-Peer Tunneling Protocol LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`051e4000 fffff880`051fc000 mpsdrv (deferred) Mapped memory image file: e:\localsymbols\mpsdrv.sys\4A5BCC7918000\mpsdrv.sys Image path: mpsdrv.sys Image name: mpsdrv.sys Timestamp: Mon Jul 13 17:08:25 2009 (4A5BCC79) CheckSum: 0001C76E ImageSize: 00018000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: mpsdrv.sys OriginalFilename: mpsdrv.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: Microsoft Protection Service Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`05200000 fffff880`05256000 USBPORT (deferred) Mapped memory image file: e:\localsymbols\USBPORT.SYS\4E8BD4E956000\USBPORT.SYS Image path: USBPORT.SYS Image name: USBPORT.SYS Timestamp: Tue Oct 04 20:54:17 2011 (4E8BD4E9) CheckSum: 0005C8CE ImageSize: 00056000 File version: 6.1.7601.21832 Product version: 6.1.7601.21832 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: usbport.sys OriginalFilename: usbport.sys ProductVersion: 6.1.7601.21832 FileVersion: 6.1.7601.21832 (win7sp1_ldr.111004-1505) FileDescription: USB 1.1 & 2.0 Port Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`05256000 fffff880`05267000 usbehci (deferred) Mapped memory image file: e:\localsymbols\usbehci.sys\4E8BD4E511000\usbehci.sys Image path: usbehci.sys Image name: usbehci.sys Timestamp: Tue Oct 04 20:54:13 2011 (4E8BD4E5) CheckSum: 0001632A ImageSize: 00011000 File version: 6.1.7601.21832 Product version: 6.1.7601.21832 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: USBEHCI.sys OriginalFilename: USBEHCI.sys ProductVersion: 6.1.7601.21832 FileVersion: 6.1.7601.21832 (win7sp1_ldr.111004-1505) FileDescription: EHCI eUSB Miniport Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`05267000 fffff880`0528b000 HDAudBus (deferred) Mapped memory image file: e:\localsymbols\HDAudBus.sys\4CE7A65E24000\HDAudBus.sys Image path: HDAudBus.sys Image name: HDAudBus.sys Timestamp: Sat Nov 20 02:43:42 2010 (4CE7A65E) CheckSum: 0002BFAB ImageSize: 00024000 File version: 6.1.7601.17514 Product version: 6.1.7601.17514 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.9 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: hdaudbus.sys OriginalFilename: hdaudbus.sys ProductVersion: 6.1.7601.17514 FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850) FileDescription: High Definition Audio Bus Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`0528b000 fffff880`0529a000 VClone (deferred) Image path: VClone.sys Image name: VClone.sys Timestamp: Sat Jan 15 08:21:04 2011 (4D31C970) CheckSum: 0000CF5B ImageSize: 0000F000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0529c000 fffff880`05391000 dxgkrnl (deferred) Mapped memory image file: e:\localsymbols\dxgkrnl.sys\4E531653f5000\dxgkrnl.sys Image path: dxgkrnl.sys Image name: dxgkrnl.sys Timestamp: Mon Aug 22 19:54:11 2011 (4E531653) CheckSum: 000F5132 ImageSize: 000F5000 File version: 6.1.7601.21796 Product version: 6.1.7601.21796 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: dxgkrnl.sys OriginalFilename: dxgkrnl.sys ProductVersion: 6.1.7601.21796 FileVersion: 6.1.7601.21796 (win7sp1_ldr.110822-1505) FileDescription: DirectX Graphics Kernel LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`05391000 fffff880`053d7000 dxgmms1 (deferred) Mapped memory image file: e:\localsymbols\dxgmms1.sys\4E53161A46000\dxgmms1.sys Image path: dxgmms1.sys Image name: dxgmms1.sys Timestamp: Mon Aug 22 19:53:14 2011 (4E53161A) CheckSum: 0004D10B ImageSize: 00046000 File version: 6.1.7601.21796 Product version: 6.1.7601.21796 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: dxgmms1.sys OriginalFilename: dxgmms1.sys ProductVersion: 6.1.7601.21796 FileVersion: 6.1.7601.21796 (win7sp1_ldr.110822-1505) FileDescription: DirectX Graphics MMS LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`053d7000 fffff880`053e4000 usbuhci (deferred) Mapped memory image file: e:\localsymbols\usbuhci.sys\4E8BD4E4d000\usbuhci.sys Image path: usbuhci.sys Image name: usbuhci.sys Timestamp: Tue Oct 04 20:54:12 2011 (4E8BD4E4) CheckSum: 00009F81 ImageSize: 0000D000 File version: 6.1.7601.21832 Product version: 6.1.7601.21832 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: USBUHCI.sys OriginalFilename: USBUHCI.sys ProductVersion: 6.1.7601.21832 FileVersion: 6.1.7601.21832 (win7sp1_ldr.111004-1505) FileDescription: UHCI USB Miniport Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`053e4000 fffff880`053fa000 rimmpx64 (deferred) Image path: rimmpx64.sys Image name: rimmpx64.sys Timestamp: Thu Jun 25 01:04:18 2009 (4A432F82) CheckSum: 0001DC51 ImageSize: 00016000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05400000 fffff880`0540b000 rdpbus (deferred) Mapped memory image file: e:\localsymbols\rdpbus.sys\4A5BCEAAb000\rdpbus.sys Image path: rdpbus.sys Image name: rdpbus.sys Timestamp: Mon Jul 13 17:17:46 2009 (4A5BCEAA) CheckSum: 0000C3AD ImageSize: 0000B000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.0 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: RDPBUS.SYS OriginalFilename: RDPBUS.SYS ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: Microsoft RDP Bus Device driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`0540e000 fffff880`05bcf000 NETwNs64 (deferred) Image path: NETwNs64.sys Image name: NETwNs64.sys Timestamp: Wed Jan 19 02:28:52 2011 (4D36BCE4) CheckSum: 007BC000 ImageSize: 007C1000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`05bcf000 fffff880`05bdc000 vwifibus (deferred) Mapped memory image file: e:\localsymbols\vwifibus.sys\4A5BCC39d000\vwifibus.sys Image path: vwifibus.sys Image name: vwifibus.sys Timestamp: Mon Jul 13 17:07:21 2009 (4A5BCC39) CheckSum: 0000C5FA ImageSize: 0000D000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: VWiFiBus.sys OriginalFilename: VWiFiBus.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: Virtual WiFi Bus Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`05bdc000 fffff880`05bfc000 sdbus (deferred) Mapped memory image file: e:\localsymbols\sdbus.sys\4D0C520D20000\sdbus.sys Image path: sdbus.sys Image name: sdbus.sys Timestamp: Fri Dec 17 22:17:49 2010 (4D0C520D) CheckSum: 0001B783 ImageSize: 00020000 File version: 6.1.7601.21624 Product version: 6.1.7601.21624 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: sdbus.sys OriginalFilename: sdbus.sys ProductVersion: 6.1.7601.21624 FileVersion: 6.1.7601.21624 (win7sp1_ldr.101217-1734) FileDescription: SecureDigital Bus Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`06000000 fffff880`06016000 AgileVpn (deferred) Mapped memory image file: e:\localsymbols\AgileVpn.sys\4A5BCCF016000\AgileVpn.sys Image path: AgileVpn.sys Image name: AgileVpn.sys Timestamp: Mon Jul 13 17:10:24 2009 (4A5BCCF0) CheckSum: 000192BE ImageSize: 00016000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.6 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: agilevpn.sys OriginalFilename: agilevpn.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: RAS Agile Vpn Miniport Call Manager LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`06016000 fffff880`0603a000 rasl2tp (deferred) Mapped memory image file: e:\localsymbols\rasl2tp.sys\4CE7A87224000\rasl2tp.sys Image path: rasl2tp.sys Image name: rasl2tp.sys Timestamp: Sat Nov 20 02:52:34 2010 (4CE7A872) CheckSum: 0002CCA3 ImageSize: 00024000 File version: 6.1.7601.17514 Product version: 6.1.7601.17514 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.6 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: rasl2tp.sys OriginalFilename: rasl2tp.sys ProductVersion: 6.1.7601.17514 FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850) FileDescription: RAS L2TP mini-port/call-manager driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`0603a000 fffff880`06046000 ndistapi (deferred) Mapped memory image file: e:\localsymbols\ndistapi.sys\4A5BCCD8c000\ndistapi.sys Image path: ndistapi.sys Image name: ndistapi.sys Timestamp: Mon Jul 13 17:10:00 2009 (4A5BCCD8) CheckSum: 000063EA ImageSize: 0000C000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.6 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: NDISTAPI.SYS OriginalFilename: NDISTAPI.SYS ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: NDIS 3.0 connection wrapper driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`06046000 fffff880`06075000 ndiswan (deferred) Mapped memory image file: e:\localsymbols\ndiswan.sys\4CE7A8702f000\ndiswan.sys Image path: ndiswan.sys Image name: ndiswan.sys Timestamp: Sat Nov 20 02:52:32 2010 (4CE7A870) CheckSum: 0002BB81 ImageSize: 0002F000 File version: 6.1.7601.17514 Product version: 6.1.7601.17514 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.6 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: NDISWAN.SYS OriginalFilename: NDISWAN.SYS ProductVersion: 6.1.7601.17514 FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850) FileDescription: MS PPP Framing Driver (Strong Encryption) LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`06075000 fffff880`06090000 raspppoe (deferred) Mapped memory image file: e:\localsymbols\raspppoe.sys\4D2E81451b000\raspppoe.sys Image path: raspppoe.sys Image name: raspppoe.sys Timestamp: Wed Jan 12 20:36:21 2011 (4D2E8145) CheckSum: 0001B69E ImageSize: 0001B000 File version: 6.1.7601.21640 Product version: 6.1.7601.21640 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.6 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: raspppoe.sys OriginalFilename: raspppoe.sys ProductVersion: 6.1.7601.21640 FileVersion: 6.1.7601.21640 (win7sp1_ldr.110112-1503) FileDescription: RAS PPPoE mini-port/call-manager driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`06090000 fffff880`060aa000 rassstp (deferred) Mapped memory image file: e:\localsymbols\rassstp.sys\4A5BCCF11a000\rassstp.sys Image path: rassstp.sys Image name: rassstp.sys Timestamp: Mon Jul 13 17:10:25 2009 (4A5BCCF1) CheckSum: 0002274B ImageSize: 0001A000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.6 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: rassstp.sys OriginalFilename: rassstp.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: RAS SSTP Miniport Call Manager LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`060af000 fffff880`06106000 rixdpx64 (deferred) Image path: rixdpx64.sys Image name: rixdpx64.sys Timestamp: Thu Jun 25 00:38:50 2009 (4A43298A) CheckSum: 00019F7D ImageSize: 00057000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`06106000 fffff880`06124000 i8042prt (deferred) Mapped memory image file: e:\localsymbols\i8042prt.sys\4A5BC11D1e000\i8042prt.sys Image path: i8042prt.sys Image name: i8042prt.sys Timestamp: Mon Jul 13 16:19:57 2009 (4A5BC11D) CheckSum: 00025E29 ImageSize: 0001E000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: i8042prt.sys OriginalFilename: i8042prt.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: i8042 Port Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`06124000 fffff880`0616f000 SynTP (deferred) Image path: SynTP.sys Image name: SynTP.sys Timestamp: Thu Jul 30 17:40:03 2009 (4A723D63) CheckSum: 00050913 ImageSize: 0004B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0616f000 fffff880`06170f00 USBD (deferred) Mapped memory image file: e:\localsymbols\USBD.SYS\4E8BD4E01f00\USBD.SYS Image path: USBD.SYS Image name: USBD.SYS Timestamp: Tue Oct 04 20:54:08 2011 (4E8BD4E0) CheckSum: 0000587A ImageSize: 00001F00 File version: 6.1.7601.21832 Product version: 6.1.7601.21832 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0000.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: usbd.sys OriginalFilename: usbd.sys ProductVersion: 6.1.7601.21832 FileVersion: 6.1.7601.21832 (win7sp1_ldr.111004-1505) FileDescription: Universal Serial Bus Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`06171000 fffff880`06180000 mouclass (deferred) Mapped memory image file: e:\localsymbols\mouclass.sys\4A5BC116f000\mouclass.sys Image path: mouclass.sys Image name: mouclass.sys Timestamp: Mon Jul 13 16:19:50 2009 (4A5BC116) CheckSum: 0000E5DE ImageSize: 0000F000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: mouclass.sys OriginalFilename: mouclass.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: Mouse Class Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`06180000 fffff880`0618f000 kbdclass (deferred) Mapped memory image file: e:\localsymbols\kbdclass.sys\4A5BC116f000\kbdclass.sys Image path: kbdclass.sys Image name: kbdclass.sys Timestamp: Mon Jul 13 16:19:50 2009 (4A5BC116) CheckSum: 0001B4C5 ImageSize: 0000F000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: kbdclass.sys OriginalFilename: kbdclass.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: Keyboard Class Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`0618f000 fffff880`0619a000 VMkbd (deferred) Image path: VMkbd.sys Image name: VMkbd.sys Timestamp: Sun Nov 13 22:35:37 2011 (4EC0B6B9) CheckSum: 0000DCA3 ImageSize: 0000B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0619a000 fffff880`061a6000 serenum (deferred) Mapped memory image file: e:\localsymbols\serenum.sys\4A5BCAA1c000\serenum.sys Image path: serenum.sys Image name: serenum.sys Timestamp: Mon Jul 13 17:00:33 2009 (4A5BCAA1) CheckSum: 00013C2F ImageSize: 0000C000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: serenum.sys OriginalFilename: serenum.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: Serial Port Enumerator LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`061a6000 fffff880`061c3000 parport (deferred) Mapped memory image file: e:\localsymbols\parport.sys\4A5BCAA81d000\parport.sys Image path: parport.sys Image name: parport.sys Timestamp: Mon Jul 13 17:00:40 2009 (4A5BCAA8) CheckSum: 0001A431 ImageSize: 0001D000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: parport.sys OriginalFilename: parport.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: Parallel Port Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`061c3000 fffff880`061c7500 CmBatt (deferred) Mapped memory image file: e:\localsymbols\CmBatt.sys\4A5BC3B74500\CmBatt.sys Image path: CmBatt.sys Image name: CmBatt.sys Timestamp: Mon Jul 13 16:31:03 2009 (4A5BC3B7) CheckSum: 0000D93A ImageSize: 00004500 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: cmbatt.sys OriginalFilename: cmbatt.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: Control Method Battery Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`061c8000 fffff880`061d1000 wmiacpi (deferred) Mapped memory image file: e:\localsymbols\wmiacpi.sys\4A5BC3B69000\wmiacpi.sys Image path: wmiacpi.sys Image name: wmiacpi.sys Timestamp: Mon Jul 13 16:31:02 2009 (4A5BC3B6) CheckSum: 000042C0 ImageSize: 00009000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: wmiacpi.sys OriginalFilename: wmiacpi.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: Windows Management Interface for ACPI LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`061d1000 fffff880`061e7000 intelppm (deferred) Image path: intelppm.sys Image name: intelppm.sys Timestamp: Mon Jul 13 16:19:25 2009 (4A5BC0FD) CheckSum: 0000F4EC ImageSize: 00016000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`061e7000 fffff880`061f7000 CompositeBus (deferred) Mapped memory image file: e:\localsymbols\CompositeBus.sys\4CE7A3ED10000\CompositeBus.sys Image path: CompositeBus.sys Image name: CompositeBus.sys Timestamp: Sat Nov 20 02:33:17 2010 (4CE7A3ED) CheckSum: 0000983B ImageSize: 00010000 File version: 6.1.7601.17514 Product version: 6.1.7601.17514 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: compositebus.sys OriginalFilename: compositebus.sys ProductVersion: 6.1.7601.17514 FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850) FileDescription: Multi-Transport Composite Bus Enumerator LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`061f7000 fffff880`061fe000 BASFND (deferred) Image path: BASFND.sys Image name: BASFND.sys Timestamp: Thu Apr 24 16:17:12 2003 (3EA87078) CheckSum: 000042F6 ImageSize: 00007000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`06200000 fffff880`0621d000 vpcusb (deferred) Mapped memory image file: e:\localsymbols\vpcusb.sys\4CE7B2831d000\vpcusb.sys Image path: vpcusb.sys Image name: vpcusb.sys Timestamp: Sat Nov 20 03:35:31 2010 (4CE7B283) CheckSum: 0002071C ImageSize: 0001D000 File version: 6.1.7601.17514 Product version: 6.1.7601.17514 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Virtual USB Connector Driver InternalName: vpcusb.sys OriginalFilename: vpcusb.sys ProductVersion: 6.1.7601.17514 FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850) FileDescription: Virtual USB Connector Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`0621d000 fffff880`0622c000 usbrpm (deferred) Mapped memory image file: e:\localsymbols\usbrpm.sys\4D844BE1f000\usbrpm.sys Image path: usbrpm.sys Image name: usbrpm.sys Timestamp: Fri Mar 18 23:23:29 2011 (4D844BE1) CheckSum: 00012F35 ImageSize: 0000F000 File version: 6.1.7601.21687 Product version: 6.1.7601.21687 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: usbrpm.sys OriginalFilename: usbrpm.sys ProductVersion: 6.1.7601.21687 FileVersion: 6.1.7601.21687 (win7sp1_ldr.110318-1704) FileDescription: Windows USB Redirection Policy Manager LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`0622c000 fffff880`06234000 vmnetadapter (deferred) Image path: vmnetadapter.sys Image name: vmnetadapter.sys Timestamp: Fri Jul 08 00:43:56 2011 (4E16B53C) CheckSum: 00008503 ImageSize: 00008000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`06234000 fffff880`0623e000 VMNET (deferred) Image path: VMNET.SYS Image name: VMNET.SYS Timestamp: Fri Jul 08 00:43:55 2011 (4E16B53B) CheckSum: 0000CF8A ImageSize: 0000A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0623e000 fffff880`0627a000 vpchbus (deferred) Mapped memory image file: e:\localsymbols\vpchbus.sys\4CE7B28A3c000\vpchbus.sys Image path: vpchbus.sys Image name: vpchbus.sys Timestamp: Sat Nov 20 03:35:38 2010 (4CE7B28A) CheckSum: 0003D8CE ImageSize: 0003C000 File version: 6.1.7601.17514 Product version: 6.1.7601.17514 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Virtual PC Host Bus Driver InternalName: vpchbus.sys OriginalFilename: vpchbus.sys ProductVersion: 6.1.7601.17514 FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850) FileDescription: Virtual PC Host Bus Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`0627a000 fffff880`062d4000 usbhub (deferred) Mapped memory image file: e:\localsymbols\usbhub.sys\4E8BD4FE5a000\usbhub.sys Image path: usbhub.sys Image name: usbhub.sys Timestamp: Tue Oct 04 20:54:38 2011 (4E8BD4FE) CheckSum: 00062CD4 ImageSize: 0005A000 File version: 6.1.7601.21832 Product version: 6.1.7601.21832 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: usbhub.sys OriginalFilename: usbhub.sys ProductVersion: 6.1.7601.21832 FileVersion: 6.1.7601.21832 (win7sp1_ldr.111004-1505) FileDescription: Default Hub Driver for USB LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`062d4000 fffff880`062e9000 NDProxy (deferred) Mapped memory image file: e:\localsymbols\NDProxy.SYS\4CE7A86415000\NDProxy.SYS Image path: NDProxy.SYS Image name: NDProxy.SYS Timestamp: Sat Nov 20 02:52:20 2010 (4CE7A864) CheckSum: 00019428 ImageSize: 00015000 File version: 6.1.7601.17514 Product version: 6.1.7601.17514 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: ndproxy.sys OriginalFilename: ndproxy.sys ProductVersion: 6.1.7601.17514 FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850) FileDescription: NDIS Proxy LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`062e9000 fffff880`062fa000 WinUsb (deferred) Mapped memory image file: e:\localsymbols\WinUsb.sys\4CE7A66C11000\WinUsb.sys Image path: WinUsb.sys Image name: WinUsb.sys Timestamp: Sat Nov 20 02:43:56 2010 (4CE7A66C) CheckSum: 00017662 ImageSize: 00011000 File version: 6.1.7601.17514 Product version: 6.1.7601.17514 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: winusb.sys OriginalFilename: winusb.sys ProductVersion: 6.1.7601.17514 FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850) FileDescription: Windows USB Class Driver BETA LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`062fe000 fffff880`0632d000 SCSIPORT (deferred) Mapped memory image file: e:\localsymbols\SCSIPORT.SYS\4CE7A4192f000\SCSIPORT.SYS Image path: SCSIPORT.SYS Image name: SCSIPORT.SYS Timestamp: Sat Nov 20 02:34:01 2010 (4CE7A419) CheckSum: 000375EA ImageSize: 0002F000 File version: 6.1.7601.17514 Product version: 6.1.7601.17514 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: scsiport.sys OriginalFilename: scsiport.sys ProductVersion: 6.1.7601.17514 FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850) FileDescription: SCSI Port Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`0632d000 fffff880`06369880 mcdbus (deferred) Image path: mcdbus.sys Image name: mcdbus.sys Timestamp: Tue Feb 24 02:34:07 2009 (49A3CD1F) CheckSum: 00041E84 ImageSize: 0003C880 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0636a000 fffff880`06398000 VBoxNetFlt (deferred) Image path: VBoxNetFlt.sys Image name: VBoxNetFlt.sys Timestamp: Mon Dec 19 04:43:51 2011 (4EEF3187) CheckSum: 00035955 ImageSize: 0002E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`06398000 fffff880`06399480 swenum (deferred) Mapped memory image file: e:\localsymbols\swenum.sys\4A5BCA921480\swenum.sys Image path: swenum.sys Image name: swenum.sys Timestamp: Mon Jul 13 17:00:18 2009 (4A5BCA92) CheckSum: 0000934E ImageSize: 00001480 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.0 Driver File date: 00000000.00000000 Translations: 0000.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: swenum.sys OriginalFilename: swenum.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: Plug and Play Software Device Enumerator LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`0639a000 fffff880`063dd000 ks (deferred) Mapped memory image file: e:\localsymbols\ks.sys\4CE7A3F343000\ks.sys Image path: ks.sys Image name: ks.sys Timestamp: Sat Nov 20 02:33:23 2010 (4CE7A3F3) CheckSum: 00045588 ImageSize: 00043000 File version: 6.1.7601.17514 Product version: 6.1.7601.17514 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.0 Driver File date: 00000000.00000000 Translations: 0000.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: ks.sys OriginalFilename: ks.sys ProductVersion: 6.1.7601.17514 FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850) FileDescription: Kernel CSA Library LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`063dd000 fffff880`063ef000 umbus (deferred) Mapped memory image file: e:\localsymbols\umbus.sys\4CE7A69512000\umbus.sys Image path: umbus.sys Image name: umbus.sys Timestamp: Sat Nov 20 02:44:37 2010 (4CE7A695) CheckSum: 0001AF58 ImageSize: 00012000 File version: 6.1.7601.17514 Product version: 6.1.7601.17514 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: umbus.sys OriginalFilename: umbus.sys ProductVersion: 6.1.7601.17514 FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850) FileDescription: User-Mode Bus Enumerator LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`063ef000 fffff880`063fd000 scfilter (deferred) Mapped memory image file: e:\localsymbols\scfilter.sys\4D0C57A4e000\scfilter.sys Image path: scfilter.sys Image name: scfilter.sys Timestamp: Fri Dec 17 22:41:40 2010 (4D0C57A4) CheckSum: 000082C3 ImageSize: 0000E000 File version: 6.1.7601.21624 Product version: 6.1.7601.21624 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: scfilter OriginalFilename: scfilter.sys ProductVersion: 6.1.7601.21624 FileVersion: 6.1.7601.21624 (win7sp1_ldr.101217-1734) FileDescription: Microsoft Smart Card Reader Filter Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`08200000 fffff880`0820e000 DRVEDDM (deferred) Image path: DRVEDDM.SYS Image name: DRVEDDM.SYS Timestamp: Mon Jul 23 14:43:23 2007 (46A520FB) CheckSum: 0001CA88 ImageSize: 0000E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0820e000 fffff880`0820ed00 Unknown_Module_fffff880_0820e000 (deferred) Image path: Unknown_Module_fffff880`0820e000 Image name: Unknown_Module_fffff880`0820e000 Timestamp: Mon Jul 23 15:03:47 2007 (46A525C3) CheckSum: 00002FF9 ImageSize: 00000D00 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0820f000 fffff880`08215f00 DLAOPIOE (deferred) Image path: DLAOPIOE.SYS Image name: DLAOPIOE.SYS Timestamp: Mon Jul 23 15:03:15 2007 (46A525A3) CheckSum: 0000B1C7 ImageSize: 00006F00 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`08216000 fffff880`08219380 DLAPoolE (deferred) Image path: DLAPoolE.SYS Image name: DLAPoolE.SYS Timestamp: Mon Jul 23 15:01:44 2007 (46A52548) CheckSum: 0000781C ImageSize: 00003380 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0821a000 fffff880`08223b80 DLABMFSE (deferred) Image path: DLABMFSE.SYS Image name: DLABMFSE.SYS Timestamp: Mon Jul 23 15:02:40 2007 (46A52580) CheckSum: 00016B12 ImageSize: 00009B80 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`08224000 fffff880`0822cb80 DLABOIOE (deferred) Image path: DLABOIOE.SYS Image name: DLABOIOE.SYS Timestamp: Mon Jul 23 15:02:34 2007 (46A5257A) CheckSum: 00014411 ImageSize: 00008B80 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`08231000 fffff880`0823f000 hidusb (deferred) Mapped memory image file: e:\localsymbols\hidusb.sys\4CE7A665e000\hidusb.sys Image path: hidusb.sys Image name: hidusb.sys Timestamp: Sat Nov 20 02:43:49 2010 (4CE7A665) CheckSum: 00012706 ImageSize: 0000E000 File version: 6.1.7601.17514 Product version: 6.1.7601.17514 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: HIDUSB.SYS OriginalFilename: HIDUSB.SYS ProductVersion: 6.1.7601.17514 FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850) FileDescription: USB Miniport Driver for Input Devices LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`0823f000 fffff880`08258000 HIDCLASS (deferred) Mapped memory image file: e:\localsymbols\HIDCLASS.SYS\4ECDD3E619000\HIDCLASS.SYS Image path: HIDCLASS.SYS Image name: HIDCLASS.SYS Timestamp: Wed Nov 23 21:19:34 2011 (4ECDD3E6) CheckSum: 0001BD56 ImageSize: 00019000 File version: 6.1.7601.21866 Product version: 6.1.7601.21866 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: hidclass.sys OriginalFilename: hidclass.sys ProductVersion: 6.1.7601.21866 FileVersion: 6.1.7601.21866 (win7sp1_ldr.111123-1509) FileDescription: Hid Class Library LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`08258000 fffff880`08260080 HIDPARSE (deferred) Mapped memory image file: e:\localsymbols\HIDPARSE.SYS\4A5BCBF98080\HIDPARSE.SYS Image path: HIDPARSE.SYS Image name: HIDPARSE.SYS Timestamp: Mon Jul 13 17:06:17 2009 (4A5BCBF9) CheckSum: 0000D669 ImageSize: 00008080 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: hidparse.sys OriginalFilename: hidparse.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: Hid Parsing Library LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`08261000 fffff880`08277000 LHidFilt (deferred) Image path: LHidFilt.Sys Image name: LHidFilt.Sys Timestamp: Thu Sep 01 23:23:09 2011 (4E60764D) CheckSum: 0001071C ImageSize: 00016000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`08277000 fffff880`08284000 mouhid (deferred) Mapped memory image file: e:\localsymbols\mouhid.sys\4A5BCA94d000\mouhid.sys Image path: mouhid.sys Image name: mouhid.sys Timestamp: Mon Jul 13 17:00:20 2009 (4A5BCA94) CheckSum: 00009604 ImageSize: 0000D000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: mouhid.sys OriginalFilename: mouhid.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: HID Mouse Filter Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`08284000 fffff880`08298000 LMouFilt (deferred) Image path: LMouFilt.Sys Image name: LMouFilt.Sys Timestamp: Thu Sep 01 23:23:15 2011 (4E607653) CheckSum: 0001BEE5 ImageSize: 00014000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`08298000 fffff880`082a4000 Dxapi (deferred) Mapped memory image file: e:\localsymbols\Dxapi.sys\4A5BC574c000\Dxapi.sys Image path: Dxapi.sys Image name: Dxapi.sys Timestamp: Mon Jul 13 16:38:28 2009 (4A5BC574) CheckSum: 0001418E ImageSize: 0000C000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: dxapi.sys OriginalFilename: dxapi.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: DirectX API Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`082a4000 fffff880`082b2000 monitor (deferred) Mapped memory image file: e:\localsymbols\monitor.sys\4A5BC58Ce000\monitor.sys Image path: monitor.sys Image name: monitor.sys Timestamp: Mon Jul 13 16:38:52 2009 (4A5BC58C) CheckSum: 000092BF ImageSize: 0000E000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: monitor.sys OriginalFilename: monitor.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: Monitor Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`082b2000 fffff880`082d1600 DLAUDFAE (deferred) Image path: DLAUDFAE.SYS Image name: DLAUDFAE.SYS Timestamp: Mon Jul 23 15:02:32 2007 (46A52578) CheckSum: 0002127C ImageSize: 0001F600 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`082d2000 fffff880`0834d000 stwrt64 (deferred) Image path: stwrt64.sys Image name: stwrt64.sys Timestamp: Fri Jul 31 14:23:38 2009 (4A7360DA) CheckSum: 00081B0A ImageSize: 0007B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0834d000 fffff880`0838a000 portcls (deferred) Mapped memory image file: e:\localsymbols\portcls.sys\4A5BCC033d000\portcls.sys Image path: portcls.sys Image name: portcls.sys Timestamp: Mon Jul 13 17:06:27 2009 (4A5BCC03) CheckSum: 00047A50 ImageSize: 0003D000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.9 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: portcls.sys OriginalFilename: portcls.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: Port Class (Class Driver for Port/Miniport Devices) LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`0838a000 fffff880`083ac000 drmk (deferred) Image path: drmk.sys Image name: drmk.sys Timestamp: Mon Jul 13 18:01:25 2009 (4A5BD8E5) CheckSum: 0002966E ImageSize: 00022000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`083ac000 fffff880`083b1200 ksthunk (deferred) Mapped memory image file: e:\localsymbols\ksthunk.sys\4A5BCA935200\ksthunk.sys Image path: ksthunk.sys Image name: ksthunk.sys Timestamp: Mon Jul 13 17:00:19 2009 (4A5BCA93) CheckSum: 0000AF92 ImageSize: 00005200 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.0 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: ksthunk.sys OriginalFilename: ksthunk.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: Kernel Streaming WOW Thunk Service LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`083b2000 fffff880`083cf000 usbccgp (deferred) Mapped memory image file: e:\localsymbols\usbccgp.sys\4E8BD4EF1d000\usbccgp.sys Image path: usbccgp.sys Image name: usbccgp.sys Timestamp: Tue Oct 04 20:54:23 2011 (4E8BD4EF) CheckSum: 00022B9E ImageSize: 0001D000 File version: 6.1.7601.21832 Product version: 6.1.7601.21832 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: USBCCGP.SYS OriginalFilename: USBCCGP.SYS ProductVersion: 6.1.7601.21832 FileVersion: 6.1.7601.21832 (win7sp1_ldr.111004-1505) FileDescription: USB Common Class Generic Parent Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`083cf000 fffff880`083dd000 cvusbdrv (deferred) Image path: cvusbdrv.sys Image name: cvusbdrv.sys Timestamp: Thu Oct 29 11:37:38 2009 (4AE9E0F2) CheckSum: 00013FD6 ImageSize: 0000E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`083dd000 fffff880`08400000 luafv (deferred) Mapped memory image file: e:\localsymbols\luafv.sys\4A5BC29523000\luafv.sys Image path: luafv.sys Image name: luafv.sys Timestamp: Mon Jul 13 16:26:13 2009 (4A5BC295) CheckSum: 00027BF1 ImageSize: 00023000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: luafv.sys OriginalFilename: luafv.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: LUA File Virtualization Filter Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`09400000 fffff880`0940c000 hcmon (deferred) Image path: hcmon.sys Image name: hcmon.sys Timestamp: Mon Aug 29 23:05:35 2011 (4E5C7DAF) CheckSum: 0001380D ImageSize: 0000C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0940d000 fffff880`097af000 dump_iaStor (deferred) Image path: dump_iaStor.sys Image name: dump_iaStor.sys Timestamp: Mon Oct 17 15:54:08 2011 (4E9CB210) CheckSum: 00096F1D ImageSize: 003A2000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`097af000 fffff880`097c2000 dump_dumpfve (deferred) Mapped memory image file: e:\localsymbols\dumpfve.sys\4A5BC18F13000\dumpfve.sys Image path: dump_dumpfve.sys Image name: dump_dumpfve.sys Timestamp: Mon Jul 13 16:21:51 2009 (4A5BC18F) CheckSum: 00010DEA ImageSize: 00013000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0000.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: dumpfve.sys OriginalFilename: dumpfve.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: Bitlocker Drive Encryption Crashdump Filter LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`097c2000 fffff880`097ca000 psxdrv (deferred) Mapped memory image file: e:\localsymbols\psxdrv.sys\4A5BC4DB8000\psxdrv.sys Image path: psxdrv.sys Image name: psxdrv.sys Timestamp: Mon Jul 13 16:35:55 2009 (4A5BC4DB) CheckSum: 0000B53D ImageSize: 00008000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: psxdrv.sys OriginalFilename: psxdrv.sys ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: SUA Subsystem Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`097ca000 fffff880`097dd000 ndisuio (deferred) Mapped memory image file: e:\localsymbols\ndisuio.sys\4E868A7D13000\ndisuio.sys Image path: ndisuio.sys Image name: ndisuio.sys Timestamp: Fri Sep 30 20:35:25 2011 (4E868A7D) CheckSum: 0000EF1A ImageSize: 00013000 File version: 6.1.7601.21830 Product version: 6.1.7601.21830 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.6 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: NDISUIO.SYS OriginalFilename: NDISUIO.SYS ProductVersion: 6.1.7601.21830 FileVersion: 6.1.7601.21830 (win7sp1_ldr.110930-1502) FileDescription: NDIS User mode I/O driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`097dd000 fffff880`097f5000 rspndr (deferred) Mapped memory image file: e:\localsymbols\rspndr.sys\4A5BCC9218000\rspndr.sys Image path: rspndr.sys Image name: rspndr.sys Timestamp: Mon Jul 13 17:08:50 2009 (4A5BCC92) CheckSum: 0001656B ImageSize: 00018000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.6 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: RSPNDR.SYS OriginalFilename: RSPNDR.SYS ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: Link-Layer Topology Responder Driver for NDIS 6 LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`097f5000 fffff880`09800000 VMparport (deferred) Image path: VMparport.sys Image name: VMparport.sys Timestamp: Sun Nov 13 21:38:09 2011 (4EC0A941) CheckSum: 00014455 ImageSize: 0000B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0c67f000 fffff880`0c6db000 afcdp (deferred) Image path: afcdp.sys Image name: afcdp.sys Timestamp: Sat Jul 16 21:11:39 2011 (4E2260FB) CheckSum: 0006633C ImageSize: 0005C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0c6db000 fffff880`0c6ed000 tcpipreg (deferred) Mapped memory image file: e:\localsymbols\tcpipreg.sys\4CE7A84412000\tcpipreg.sys Image path: tcpipreg.sys Image name: tcpipreg.sys Timestamp: Sat Nov 20 02:51:48 2010 (4CE7A844) CheckSum: 0000F328 ImageSize: 00012000 File version: 6.1.7601.17514 Product version: 6.1.7601.17514 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 1.0 App File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: tcpipreg.sys OriginalFilename: tcpipreg.sys ProductVersion: 6.1.7601.17514 FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850) FileDescription: TCP/IP Registry Compatibility Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`0c6ed000 fffff880`0c6f7000 vmnetuserif (deferred) Image path: vmnetuserif.sys Image name: vmnetuserif.sys Timestamp: Sun Nov 13 21:56:43 2011 (4EC0AD9B) CheckSum: 000131D7 ImageSize: 0000A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0c6f7000 fffff880`0c703000 vstor2_mntapi10_shared (deferred) Image path: vstor2-mntapi10-shared.sys Image name: vstor2-mntapi10-shared.sys Timestamp: Fri Jul 08 15:31:49 2011 (4E178555) CheckSum: 0000E083 ImageSize: 0000C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0c703000 fffff880`0c76c000 srv2 (deferred) Mapped memory image file: e:\localsymbols\srv2.sys\4E8E6C3469000\srv2.sys Image path: srv2.sys Image name: srv2.sys Timestamp: Thu Oct 06 20:04:20 2011 (4E8E6C34) CheckSum: 00070F7A ImageSize: 00069000 File version: 6.1.7601.21834 Product version: 6.1.7601.21834 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.6 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: SRV2.SYS OriginalFilename: SRV2.SYS ProductVersion: 6.1.7601.21834 FileVersion: 6.1.7601.21834 (win7sp1_ldr.111006-1506) FileDescription: Smb 2.0 Server driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`0d811000 fffff880`0d8a0000 VMMR0 T (no symbols) Loaded symbol image file: VMMR0.r0 Image path: VMMR0.r0 Image name: VMMR0.r0 Timestamp: Mon Dec 19 04:43:49 2011 (4EEF3185) CheckSum: 0008D90E ImageSize: 0008F000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0d8a0000 fffff880`0d8c5000 VBoxDDR0 (deferred) Image path: VBoxDDR0.r0 Image name: VBoxDDR0.r0 Timestamp: Mon Dec 19 04:43:49 2011 (4EEF3185) CheckSum: 0002E19C ImageSize: 00025000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0d8c5000 fffff880`0d8ce000 VBoxDD2R0 (deferred) Image path: VBoxDD2R0.r0 Image name: VBoxDD2R0.r0 Timestamp: Mon Dec 19 04:43:49 2011 (4EEF3185) CheckSum: 00010823 ImageSize: 00009000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0d8ce000 fffff880`0d8d4000 VBoxEhciR0 (deferred) Image path: VBoxEhciR0.r0 Image name: VBoxEhciR0.r0 Timestamp: Mon Dec 19 05:17:58 2011 (4EEF3986) CheckSum: 00007537 ImageSize: 00006000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0d8d6000 fffff880`0d96e000 srv (deferred) Image path: srv.sys Image name: srv.sys Timestamp: Mon Nov 21 19:43:16 2011 (4ECB1A54) CheckSum: 0007233C ImageSize: 00098000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0d9df000 fffff880`0d9ea000 asyncmac (deferred) Mapped memory image file: e:\localsymbols\asyncmac.sys\4A5BCCE5b000\asyncmac.sys Image path: asyncmac.sys Image name: asyncmac.sys Timestamp: Mon Jul 13 17:10:13 2009 (4A5BCCE5) CheckSum: 0000682A ImageSize: 0000B000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.6 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: ASYNCMAC.SYS OriginalFilename: ASYNCMAC.SYS ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: MS Remote Access serial network driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`0d9ea000 fffff880`0d9f8000 DKRtWrt (deferred) Image path: DKRtWrt.sys Image name: DKRtWrt.sys Timestamp: Mon Feb 14 02:03:42 2011 (4D58FDFE) CheckSum: 0000EE35 ImageSize: 0000E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`0f800000 fffff880`0f815000 lltdio (deferred) Mapped memory image file: e:\localsymbols\lltdio.sys\4A5BCC9215000\lltdio.sys Image path: lltdio.sys Image name: lltdio.sys Timestamp: Mon Jul 13 17:08:50 2009 (4A5BCC92) CheckSum: 0001109D ImageSize: 00015000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.6 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: LLTDIO.SYS OriginalFilename: LLTDIO.SYS ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: Link-Layer Topology Mapper I/O Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`0f817000 fffff880`10591000 nvlddmkm (deferred) Image path: nvlddmkm.sys Image name: nvlddmkm.sys Timestamp: Sat Dec 17 11:05:56 2011 (4EECE814) CheckSum: 00D612A0 ImageSize: 00D7A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`10591000 fffff880`10596000 nvBridge (deferred) Image path: nvBridge.kmd Image name: nvBridge.kmd Timestamp: Wed Jun 15 01:38:14 2011 (4DF86F76) CheckSum: 00008AE9 ImageSize: 00005000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`10596000 fffff880`105d4000 1394ohci (deferred) Mapped memory image file: e:\localsymbols\1394ohci.sys\4E6EF1213e000\1394ohci.sys Image path: 1394ohci.sys Image name: 1394ohci.sys Timestamp: Mon Sep 12 22:58:57 2011 (4E6EF121) CheckSum: 000444F6 ImageSize: 0003E000 File version: 6.1.7601.21817 Product version: 6.1.7601.21817 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: 1394ohci.sys OriginalFilename: 1394ohci.sys ProductVersion: 6.1.7601.21817 FileVersion: 6.1.7601.21817 (win7sp1_ldr.110912-1505) FileDescription: 1394 OpenHCI Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff880`105d4000 fffff880`105eb000 rimspx64 (deferred) Image path: rimspx64.sys Image name: rimspx64.sys Timestamp: Thu Jun 25 00:13:43 2009 (4A4323A7) CheckSum: 00012B8A ImageSize: 00017000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff880`105eb000 fffff880`105fc000 vmnetbridge (deferred) Image path: vmnetbridge.sys Image name: vmnetbridge.sys Timestamp: Fri Jul 08 00:44:44 2011 (4E16B56C) CheckSum: 0001542B ImageSize: 00011000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 fffff960`000e0000 fffff960`003f5000 win32k (deferred) Mapped memory image file: e:\localsymbols\win32k.sys\4EF15832315000\win32k.sys Image path: win32k.sys Image name: win32k.sys Timestamp: Tue Dec 20 19:53:22 2011 (4EF15832) CheckSum: 003084ED ImageSize: 00315000 File version: 6.1.7601.21881 Product version: 6.1.7601.21881 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: win32k.sys OriginalFilename: win32k.sys ProductVersion: 6.1.7601.21881 FileVersion: 6.1.7601.21881 (win7sp1_ldr.111220-1502) FileDescription: Multi-User Win32 Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff960`004c0000 fffff960`004ca000 TSDDD (deferred) Mapped memory image file: e:\localsymbols\TSDDD.dll\4A5BCE62a000\TSDDD.dll Image path: TSDDD.dll Image name: TSDDD.dll Timestamp: Mon Jul 13 17:16:34 2009 (4A5BCE62) CheckSum: 00009E96 ImageSize: 0000A000 File version: 6.1.7600.16385 Product version: 6.1.7600.16385 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.4 Driver File date: 00000000.00000000 Translations: 0000.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: framebuf.dll OriginalFilename: framebuf.dll ProductVersion: 6.1.7600.16385 FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255) FileDescription: Framebuffer Display Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff960`00770000 fffff960`00797000 cdd (deferred) Mapped memory image file: e:\localsymbols\cdd.dll\4CE7C54627000\cdd.dll Image path: cdd.dll Image name: cdd.dll Timestamp: Sat Nov 20 04:55:34 2010 (4CE7C546) CheckSum: 0002D4F0 ImageSize: 00027000 File version: 6.1.7601.17514 Product version: 6.1.7601.17514 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.4 Driver File date: 00000000.00000000 Translations: 0000.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: cdd.dll OriginalFilename: cdd.dll ProductVersion: 6.1.7601.17514 FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850) FileDescription: Canonical Display Driver LegalCopyright: © Microsoft Corporation. All rights reserved. fffff960`00960000 fffff960`009c1000 ATMFD (deferred) Image path: ATMFD.DLL Image name: ATMFD.DLL Timestamp: Fri Feb 18 19:51:34 2011 (4D5F3E46) CheckSum: 00065AAC ImageSize: 00061000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Unloaded modules: fffff880`0d800000 fffff880`0d811000 usbaapl64.sy Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 00011000 fffff880`0d96e000 fffff880`0d9df000 spsys.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 00071000 fffff880`0208e000 fffff880`0209c000 crashdmp.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 0000E000 fffff880`04650000 fffff880`049f2000 dump_iaStor. Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 003A2000 fffff880`04600000 fffff880`04613000 dump_dumpfve Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 00013000 fffff880`083dd000 fffff880`083ee000 WinUsb.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 00011000 fffff880`08200000 fffff880`08231000 WUDFRd.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 00031000 3: kd> q quit: