|
Текущее время: 20 июн 2024, 05:02
|
Сообщения без ответов | Активные темы
Правила форума
Счетчик сообщений в этом форуме выключен.
|
Страница 1 из 1 [ Сообщений: 20 ] |
|
|
|
|
|
Norman_Beits
[ТС]
|
Заголовок сообщения: Re: Нет режима AHCI в биосе Samsung R410(R20) Добавлено: 24 ноя 2023, 19:31 |
Я тут случайно |
|
|
Зарегистрирован: 07 окт 2023, 16:09 Наличности на руках: 11.01
Сообщения: 4 Откуда: Астрахань
|
felix2604 писал(а): просто устанавливаете ссд, в реестре ничего править не надо. Установил Win 10 на SSD. В диспетчере устройств-режим IDE. Дальше что делать? SSD не загнется из за отсутствия TRIM?
|
|
|
|
|
BMA
|
Заголовок сообщения: Re: Нет режима AHCI в биосе Samsung R410(R20) Добавлено: 24 ноя 2023, 21:11 |
Продвинутый форумчанин |
|
|
Зарегистрирован: 08 окт 2013, 00:56 Наличности на руках: 698.76
Сообщения: 1235 Откуда: Kohma
|
Norman_Beits писал(а): SSD не загнется из за отсутствия TRIM? И с чего оно отсутствовать будет ? ATA команда .
_________________ "Анархия -мать порядка " - вольная трактовка "Теории хаоса "
|
|
|
|
|
Norman_Beits
[ТС]
|
Заголовок сообщения: Расшифровка дампа памяти Добавлено: 10 янв 2024, 22:23 |
Я тут случайно |
|
|
Зарегистрирован: 07 окт 2023, 16:09 Наличности на руках: 11.01
Сообщения: 4 Откуда: Астрахань
|
Товарищи, время от времени появляется BSOD'ы(каждый день). Самые разнообразные: driver irql not less or equal, page fault is nonpaged area(win32kbase.sys), kmodeException not handled, Attempted write to readonly memory, system thread exception not handled. Ноутбук старенький, Samsung R410(R20). Установлена Windows 10 x86. Делал восстановление ОС через командную строку, исправление ошибок. Озу проверял, все хорошо. Скажите, дамп все время перезаписывается с момента окончания последнего аварийного завершения, или содержит все предыдущие данные аварийных завершений? В общем, хочу вас попросить проанализировать дамп памяти, т.к. я пытался разобраться, но не смог.
Содержимое файла д.п.
************* Preparing the environment for Debugger Extensions Gallery repositories ************** ExtensionRepository : Implicit UseExperimentalFeatureForNugetShare : false AllowNugetExeUpdate : false AllowNugetMSCredentialProviderInstall : false AllowParallelInitializationOfLocalRepositories : true
-- Configuring repositories ----> Repository : LocalInstalled, Enabled: true ----> Repository : UserExtensions, Enabled: true
>>>>>>>>>>>>> Preparing the environment for Debugger Extensions Gallery repositories completed, duration 0.000 seconds
************* Waiting for Debugger Extensions Gallery to Initialize **************
>>>>>>>>>>>>> Waiting for Debugger Extensions Gallery to Initialize completed, duration 0.281 seconds ----> Repository : UserExtensions, Enabled: true, Packages count: 0 ----> Repository : LocalInstalled, Enabled: true, Packages count: 36
Microsoft (R) Windows Debugger Version 10.0.25877.1004 X86 Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Windows\MEMORY.DMP] Kernel Bitmap Dump File: Kernel address space is available, User address space may not be available.
************* Path validation summary ************** Response Time (ms) Location Deferred srv*c:\symbols*http://msdl.microsoft.com/download/symbols Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols Executable search path is: Page 301c6 not present in the dump file. Type ".hh dbgerr004" for details DBGHELP: Timeout to store: c:\symbols*http://msdl.microsoft.com/download/symbols ************************************************************************* *** *** *** *** *** Either you specified an unqualified symbol, or your debugger *** *** doesn't have full symbol information. Unqualified symbol *** *** resolution is turned off by default. Please either specify a *** *** fully qualified symbol module!symbolname, or enable resolution *** *** of unqualified symbols by typing ".symopt- 100". Note that *** *** enabling unqualified symbol resolution with network symbol *** *** server shares in the symbol path may cause the debugger to *** *** appear to hang for long periods of time when an incorrect *** *** symbol name is typed or the network symbol server is down. *** *** *** *** For some commands to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_EPROCESS *** *** *** ************************************************************************* Windows 10 Kernel Version 19041 MP (2 procs) Free x86 compatible Product: WinNt, suite: TerminalServer SingleUserTS Personal Edition build lab: 19041.1.x86fre.vb_release.191206-1406 Kernel base = 0x83c00000 PsLoadedModuleList = 0x83ec4db8 Debug session time: Tue Jan 9 20:30:02.942 2024 (UTC + 4:00) System Uptime: 0 days 1:41:02.791 DBGHELP: Timeout to store: c:\symbols*http://msdl.microsoft.com/download/symbols ************************************************************************* *** *** *** *** *** Either you specified an unqualified symbol, or your debugger *** *** doesn't have full symbol information. Unqualified symbol *** *** resolution is turned off by default. Please either specify a *** *** fully qualified symbol module!symbolname, or enable resolution *** *** of unqualified symbols by typing ".symopt- 100". Note that *** *** enabling unqualified symbol resolution with network symbol *** *** server shares in the symbol path may cause the debugger to *** *** appear to hang for long periods of time when an incorrect *** *** symbol name is typed or the network symbol server is down. *** *** *** *** For some commands to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_EPROCESS *** *** *** ************************************************************************* Loading Kernel Symbols ............................................................... ................................................................ ................................................................ .... Loading User Symbols PEB is paged out (Peb.Ldr = 0270200c). Type ".hh dbgerr001" for details Loading unloaded module list ..........
************* Symbol Loading Error Summary ************** Module name Error ntkrpamp The system cannot find the file specified
You can troubleshoot most symbol related issues by turning on symbol loading diagnostics (!sym noisy) and repeating the command that caused symbols to be loaded. You should also verify that your symbol search path (.sympath) is correct. For analysis of this file, run !analyze -v eax=a633b6f4 ebx=00000000 ecx=83da11e1 edx=83da10a6 esi=00000000 edi=00000000 eip=83d7ef0c esp=a633b17c ebp=a633b194 iopl=0 nv up ei pl zr na pe nc cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000246 nt!KeBugCheckEx: 83d7ef0c 55 push ebp 0: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * *******************************************************************************
KMODE_EXCEPTION_NOT_HANDLED (1e) This is a very common BugCheck. Usually the exception address pinpoints the driver/function that caused the problem. Always note this address as well as the link date of the driver/image that contains this address. Arguments: Arg1: c0000006, The exception code that was not handled Arg2: 8fb91316, The address that the exception occurred at Arg3: 00000000, Parameter 0 of the exception Arg4: 8ff6c5bc, Parameter 1 of the exception
Debugging Details: ------------------
Unable to load image \SystemRoot\system32\DRIVERS\K4W-21-15\klif.sys, Win32 error 0n2 ***** Kernel symbols are WRONG. Please fix symbols to do analysis.
************************************************************************* *** *** *** *** *** Either you specified an unqualified symbol, or your debugger *** *** doesn't have full symbol information. Unqualified symbol *** *** resolution is turned off by default. Please either specify a *** *** fully qualified symbol module!symbolname, or enable resolution *** *** of unqualified symbols by typing ".symopt- 100". Note that *** *** enabling unqualified symbol resolution with network symbol *** *** server shares in the symbol path may cause the debugger to *** *** appear to hang for long periods of time when an incorrect *** *** symbol name is typed or the network symbol server is down. *** *** *** *** For some commands to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_IMAGE_DOS_HEADER *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Either you specified an unqualified symbol, or your debugger *** *** doesn't have full symbol information. Unqualified symbol *** *** resolution is turned off by default. Please either specify a *** *** fully qualified symbol module!symbolname, or enable resolution *** *** of unqualified symbols by typing ".symopt- 100". Note that *** *** enabling unqualified symbol resolution with network symbol *** *** server shares in the symbol path may cause the debugger to *** *** appear to hang for long periods of time when an incorrect *** *** symbol name is typed or the network symbol server is down. *** *** *** *** For some commands to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_IMAGE_DOS_HEADER *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Either you specified an unqualified symbol, or your debugger *** *** doesn't have full symbol information. Unqualified symbol *** *** resolution is turned off by default. Please either specify a *** *** fully qualified symbol module!symbolname, or enable resolution *** *** of unqualified symbols by typing ".symopt- 100". Note that *** *** enabling unqualified symbol resolution with network symbol *** *** server shares in the symbol path may cause the debugger to *** *** appear to hang for long periods of time when an incorrect *** *** symbol name is typed or the network symbol server is down. *** *** *** *** For some commands to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_IMAGE_DOS_HEADER *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Either you specified an unqualified symbol, or your debugger *** *** doesn't have full symbol information. Unqualified symbol *** *** resolution is turned off by default. Please either specify a *** *** fully qualified symbol module!symbolname, or enable resolution *** *** of unqualified symbols by typing ".symopt- 100". Note that *** *** enabling unqualified symbol resolution with network symbol *** *** server shares in the symbol path may cause the debugger to *** *** appear to hang for long periods of time when an incorrect *** *** symbol name is typed or the network symbol server is down. *** *** *** *** For some commands to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_IMAGE_DOS_HEADER *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Either you specified an unqualified symbol, or your debugger *** *** doesn't have full symbol information. Unqualified symbol *** *** resolution is turned off by default. Please either specify a *** *** fully qualified symbol module!symbolname, or enable resolution *** *** of unqualified symbols by typing ".symopt- 100". Note that *** *** enabling unqualified symbol resolution with network symbol *** *** server shares in the symbol path may cause the debugger to *** *** appear to hang for long periods of time when an incorrect *** *** symbol name is typed or the network symbol server is down. *** *** *** *** For some commands to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_IMAGE_DOS_HEADER *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Either you specified an unqualified symbol, or your debugger *** *** doesn't have full symbol information. Unqualified symbol *** *** resolution is turned off by default. Please either specify a *** *** fully qualified symbol module!symbolname, or enable resolution *** *** of unqualified symbols by typing ".symopt- 100". Note that *** *** enabling unqualified symbol resolution with network symbol *** *** server shares in the symbol path may cause the debugger to *** *** appear to hang for long periods of time when an incorrect *** *** symbol name is typed or the network symbol server is down. *** *** *** *** For some commands to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_IMAGE_DOS_HEADER *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Either you specified an unqualified symbol, or your debugger *** *** doesn't have full symbol information. Unqualified symbol *** *** resolution is turned off by default. Please either specify a *** *** fully qualified symbol module!symbolname, or enable resolution *** *** of unqualified symbols by typing ".symopt- 100". Note that *** *** enabling unqualified symbol resolution with network symbol *** *** server shares in the symbol path may cause the debugger to *** *** appear to hang for long periods of time when an incorrect *** *** symbol name is typed or the network symbol server is down. *** *** *** *** For some commands to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_IMAGE_DOS_HEADER *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Either you specified an unqualified symbol, or your debugger *** *** doesn't have full symbol information. Unqualified symbol *** *** resolution is turned off by default. Please either specify a *** *** fully qualified symbol module!symbolname, or enable resolution *** *** of unqualified symbols by typing ".symopt- 100". Note that *** *** enabling unqualified symbol resolution with network symbol *** *** server shares in the symbol path may cause the debugger to *** *** appear to hang for long periods of time when an incorrect *** *** symbol name is typed or the network symbol server is down. *** *** *** *** For some commands to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_IMAGE_DOS_HEADER *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Either you specified an unqualified symbol, or your debugger *** *** doesn't have full symbol information. Unqualified symbol *** *** resolution is turned off by default. Please either specify a *** *** fully qualified symbol module!symbolname, or enable resolution *** *** of unqualified symbols by typing ".symopt- 100". Note that *** *** enabling unqualified symbol resolution with network symbol *** *** server shares in the symbol path may cause the debugger to *** *** appear to hang for long periods of time when an incorrect *** *** symbol name is typed or the network symbol server is down. *** *** *** *** For some commands to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_IMAGE_DOS_HEADER *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Either you specified an unqualified symbol, or your debugger *** *** doesn't have full symbol information. Unqualified symbol *** *** resolution is turned off by default. Please either specify a *** *** fully qualified symbol module!symbolname, or enable resolution *** *** of unqualified symbols by typing ".symopt- 100". Note that *** *** enabling unqualified symbol resolution with network symbol *** *** server shares in the symbol path may cause the debugger to *** *** appear to hang for long periods of time when an incorrect *** *** symbol name is typed or the network symbol server is down. *** *** *** *** For some commands to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_IMAGE_DOS_HEADER *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Either you specified an unqualified symbol, or your debugger *** *** doesn't have full symbol information. Unqualified symbol *** *** resolution is turned off by default. Please either specify a *** *** fully qualified symbol module!symbolname, or enable resolution *** *** of unqualified symbols by typing ".symopt- 100". Note that *** *** enabling unqualified symbol resolution with network symbol *** *** server shares in the symbol path may cause the debugger to *** *** appear to hang for long periods of time when an incorrect *** *** symbol name is typed or the network symbol server is down. *** *** *** *** For some commands to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_KPRCB *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Either you specified an unqualified symbol, or your debugger *** *** doesn't have full symbol information. Unqualified symbol *** *** resolution is turned off by default. Please either specify a *** *** fully qualified symbol module!symbolname, or enable resolution *** *** of unqualified symbols by typing ".symopt- 100". Note that *** *** enabling unqualified symbol resolution with network symbol *** *** server shares in the symbol path may cause the debugger to *** *** appear to hang for long periods of time when an incorrect *** *** symbol name is typed or the network symbol server is down. *** *** *** *** For some commands to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!KPRCB *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Either you specified an unqualified symbol, or your debugger *** *** doesn't have full symbol information. Unqualified symbol *** *** resolution is turned off by default. Please either specify a *** *** fully qualified symbol module!symbolname, or enable resolution *** *** of unqualified symbols by typing ".symopt- 100". Note that *** *** enabling unqualified symbol resolution with network symbol *** *** server shares in the symbol path may cause the debugger to *** *** appear to hang for long periods of time when an incorrect *** *** symbol name is typed or the network symbol server is down. *** *** *** *** For some commands to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_KPRCB *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Either you specified an unqualified symbol, or your debugger *** *** doesn't have full symbol information. Unqualified symbol *** *** resolution is turned off by default. Please either specify a *** *** fully qualified symbol module!symbolname, or enable resolution *** *** of unqualified symbols by typing ".symopt- 100". Note that *** *** enabling unqualified symbol resolution with network symbol *** *** server shares in the symbol path may cause the debugger to *** *** appear to hang for long periods of time when an incorrect *** *** symbol name is typed or the network symbol server is down. *** *** *** *** For some commands to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!KPRCB *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Either you specified an unqualified symbol, or your debugger *** *** doesn't have full symbol information. Unqualified symbol *** *** resolution is turned off by default. Please either specify a *** *** fully qualified symbol module!symbolname, or enable resolution *** *** of unqualified symbols by typing ".symopt- 100". Note that *** *** enabling unqualified symbol resolution with network symbol *** *** server shares in the symbol path may cause the debugger to *** *** appear to hang for long periods of time when an incorrect *** *** symbol name is typed or the network symbol server is down. *** *** *** *** For some commands to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_KPRCB *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Either you specified an unqualified symbol, or your debugger *** *** doesn't have full symbol information. Unqualified symbol *** *** resolution is turned off by default. Please either specify a *** *** fully qualified symbol module!symbolname, or enable resolution *** *** of unqualified symbols by typing ".symopt- 100". Note that *** *** enabling unqualified symbol resolution with network symbol *** *** server shares in the symbol path may cause the debugger to *** *** appear to hang for long periods of time when an incorrect *** *** symbol name is typed or the network symbol server is down. *** *** *** *** For some commands to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_EPROCESS *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Either you specified an unqualified symbol, or your debugger *** *** doesn't have full symbol information. Unqualified symbol *** *** resolution is turned off by default. Please either specify a *** *** fully qualified symbol module!symbolname, or enable resolution *** *** of unqualified symbols by typing ".symopt- 100". Note that *** *** enabling unqualified symbol resolution with network symbol *** *** server shares in the symbol path may cause the debugger to *** *** appear to hang for long periods of time when an incorrect *** *** symbol name is typed or the network symbol server is down. *** *** *** *** For some commands to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_KPRCB *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Either you specified an unqualified symbol, or your debugger *** *** doesn't have full symbol information. Unqualified symbol *** *** resolution is turned off by default. Please either specify a *** *** fully qualified symbol module!symbolname, or enable resolution *** *** of unqualified symbols by typing ".symopt- 100". Note that *** *** enabling unqualified symbol resolution with network symbol *** *** server shares in the symbol path may cause the debugger to *** *** appear to hang for long periods of time when an incorrect *** *** symbol name is typed or the network symbol server is down. *** *** *** *** For some commands to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_KPRCB *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Either you specified an unqualified symbol, or your debugger *** *** doesn't have full symbol information. Unqualified symbol *** *** resolution is turned off by default. Please either specify a *** *** fully qualified symbol module!symbolname, or enable resolution *** *** of unqualified symbols by typing ".symopt- 100". Note that *** *** enabling unqualified symbol resolution with network symbol *** *** server shares in the symbol path may cause the debugger to *** *** appear to hang for long periods of time when an incorrect *** *** symbol name is typed or the network symbol server is down. *** *** *** *** For some commands to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_MMPTE *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Either you specified an unqualified symbol, or your debugger *** *** doesn't have full symbol information. Unqualified symbol *** *** resolution is turned off by default. Please either specify a *** *** fully qualified symbol module!symbolname, or enable resolution *** *** of unqualified symbols by typing ".symopt- 100". Note that *** *** enabling unqualified symbol resolution with network symbol *** *** server shares in the symbol path may cause the debugger to *** *** appear to hang for long periods of time when an incorrect *** *** symbol name is typed or the network symbol server is down. *** *** *** *** For some commands to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_KPRCB *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Either you specified an unqualified symbol, or your debugger *** *** doesn't have full symbol information. Unqualified symbol *** *** resolution is turned off by default. Please either specify a *** *** fully qualified symbol module!symbolname, or enable resolution *** *** of unqualified symbols by typing ".symopt- 100". Note that *** *** enabling unqualified symbol resolution with network symbol *** *** server shares in the symbol path may cause the debugger to *** *** appear to hang for long periods of time when an incorrect *** *** symbol name is typed or the network symbol server is down. *** *** *** *** For some commands to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_KPRCB *** *** *** *************************************************************************
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec Value: 1468
Key : Analysis.Elapsed.mSec Value: 133916
Key : Analysis.IO.Other.Mb Value: 22
Key : Analysis.IO.Read.Mb Value: 0
Key : Analysis.IO.Write.Mb Value: 31
Key : Analysis.Init.CPU.mSec Value: 2984
Key : Analysis.Init.Elapsed.mSec Value: 19682006
Key : Analysis.Memory.CommitPeak.Mb Value: 67
Key : Bugcheck.Code.KiBugCheckData Value: 0x1e
Key : Bugcheck.Code.LegacyAPI Value: 0x1e
Key : Failure.Bucket Value: WRONG_SYMBOLS_X86_19041.1.x86fre.vb_release.191206-1406_TIMESTAMP_780921-131213_CC80C6AD_nt_wrong_symbols!CC80C6AD776000
Key : Failure.Hash Value: {42178236-0455-2056-0148-ce5698bf91dd}
Key : WER.OS.Branch Value: vb_release
Key : WER.OS.Version Value: 10.0.19041.1
BUGCHECK_CODE: 1e
BUGCHECK_P1: ffffffffc0000006
BUGCHECK_P2: ffffffff8fb91316
BUGCHECK_P3: 0
BUGCHECK_P4: ffffffff8ff6c5bc
FILE_IN_CAB: MEMORY.DMP
ADDITIONAL_DEBUG_TEXT: You can run '.symfix; .reload' to try to fix the symbol path and load symbols.
WRONG_SYMBOLS_TIMESTAMP: cc80c6ad
WRONG_SYMBOLS_SIZE: 776000
FAULTING_MODULE: 83c00000 nt
EXCEPTION_PARAMETER1: 00000000
EXCEPTION_PARAMETER2: 8ff6c5bc
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
STACK_TEXT: WARNING: Stack unwind information not available. Following frames may be wrong. a633b178 83e16eaf 0000001e c0000006 8fb91316 nt!KeBugCheckEx a633b194 83da1092 a633b6f4 83f0c5b8 a633b2a0 nt!KeRegisterNmiCallback+0x239 a633b1b8 83da1064 a633b6f4 83f0c5b8 a633b2a0 nt!ExRaiseStatus+0xce a633b290 83ca54c8 a633b6f4 a633b2a0 00010037 nt!ExRaiseStatus+0xa0 a633b6d8 83d99ae1 a633b6f4 00000000 a633b7d8 nt!Ordinal7+0x1728 a633b744 83d9e617 c0000010 00000000 00000000 nt!Kei386EoiHelper+0x4f5 a633b7ec 8fb8b139 d2c17a44 a633b820 00000064 nt!Kei386EoiHelper+0x502b a633b860 8fb91d92 1015f3b4 d8af2990 d8af2a80 klif+0x8b139 a633b8ac 86e03aac d8af2a24 a633b910 a633b8e4 klif+0x91d92 a633b928 86e0360d 8a741048 d8af2990 c2804290 FLTMGR!FltpPerformPreCallbacksWorker+0x2ec a633b948 86e2210e c284ff10 8a741048 bc084800 FLTMGR!FltpPassThroughInternal+0xad a633b9a0 83c40f68 8a741048 c2804290 c28044b0 FLTMGR!FltpCreate+0x34e a633b9bc 83c40eff c284ff10 c2804290 a633b9e4 nt!IofCallDriver+0x48 a633b9e4 83f6d134 2ab09831 8a731298 83f6c3a0 nt!RtlCopyUnicodeString+0x43f a633baa4 83f5eb10 8a731298 05166250 b7751c18 nt!ProbeForWrite+0x1974 a633bba4 83f66f77 00000840 86166250 00000001 nt!SeUnlockSubjectContext+0x1500 a633bc44 83f9e6de 056ff1cc 86166250 00000001 nt!ObOpenObjectByNameEx+0x1c7 a633bcf4 83f9d450 056ff1cc 056ff1e4 00000000 nt!NtOpenFile+0x12be a633bd34 83d97ed0 056ff218 00100021 056ff1cc nt!NtOpenFile+0x30 a633bd54 77382990 badb0d00 02000000 00000000 nt!HviGetPartitionIsolationType+0x1e08 a633bd58 badb0d00 02000000 00000000 00000000 0x77382990 a633bd5c 02000000 00000000 00000000 00000000 0xbadb0d00 a633bd60 00000000 00000000 00000000 00000000 0x2000000
IMAGE_VERSION: 30.1486.0.1090
STACK_COMMAND: .cxr; .ecxr ; kb
EXCEPTION_CODE_STR: CC80C6AD
EXCEPTION_STR: WRONG_SYMBOLS
PROCESS_NAME: ntoskrnl.wrong.symbols.exe
IMAGE_NAME: ntoskrnl.wrong.symbols.exe
MODULE_NAME: nt_wrong_symbols
SYMBOL_NAME: nt_wrong_symbols!CC80C6AD776000
FAILURE_BUCKET_ID: WRONG_SYMBOLS_X86_19041.1.x86fre.vb_release.191206-1406_TIMESTAMP_780921-131213_CC80C6AD_nt_wrong_symbols!CC80C6AD776000
OS_VERSION: 10.0.19041.1
BUILDLAB_STR: vb_release
OSPLATFORM_TYPE: x86
OSNAME: Windows 10
FAILURE_ID_HASH: {42178236-0455-2056-0148-ce5698bf91dd}
Followup: MachineOwner ---------
0: kd> lmvm nt Browse full module list start end module name 83c00000 84376000 nt (export symbols) ntkrpamp.exe Loaded symbol image file: ntkrpamp.exe Mapped memory image file: c:\symbols\ntoskrnl.exe\CC80C6AD776000\ntoskrnl.exe Image path: ntkrpamp.exe Image name: ntkrpamp.exe Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: CC80C6AD (This is a reproducible build file hash, not a timestamp) CheckSum: 006E408D ImageSize: 00776000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 0: kd> lmDv start end module name 81d52000 81fde000 mcupdate_GenuineIntel # (pdb symbols) c:\symbols\mcupdate_GenuineIntel.pdb\063D88884160C68F256511E170B35C121\mcupdate_GenuineIntel.pdb Loaded symbol image file: mcupdate_GenuineIntel.dll Mapped memory image file: c:\symbols\mcupdate_GenuineIntel.dll\68C92CA628c000\mcupdate_GenuineIntel.dll Image path: \SystemRoot\system32\mcupdate_GenuineIntel.dll Image name: mcupdate_GenuineIntel.dll Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 68C92CA6 (This is a reproducible build file hash, not a timestamp) CheckSum: 0029509C ImageSize: 0028C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 81fde000 81fe6000 kd (deferred) Image path: \SystemRoot\system32\kd.dll Image name: kd.dll Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: A1F757B6 (This is a reproducible build file hash, not a timestamp) CheckSum: 00005157 ImageSize: 00008000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 81fe6000 82002000 tm (deferred) Image path: \SystemRoot\System32\drivers\tm.sys Image name: tm.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 80EF45B9 (This is a reproducible build file hash, not a timestamp) CheckSum: 00019CD9 ImageSize: 0001C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 82002000 8204e000 CLFS (deferred) Image path: \SystemRoot\System32\drivers\CLFS.SYS Image name: CLFS.SYS Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 8125CDBE (This is a reproducible build file hash, not a timestamp) CheckSum: 00052DC0 ImageSize: 0004C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 8204e000 82063000 PSHED (deferred) Image path: \SystemRoot\system32\PSHED.dll Image name: PSHED.dll Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 9268EBD9 (This is a reproducible build file hash, not a timestamp) CheckSum: 00010641 ImageSize: 00015000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 82063000 8206d000 BOOTVID (deferred) Image path: \SystemRoot\system32\BOOTVID.dll Image name: BOOTVID.dll Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: C73DA3C6 (This is a reproducible build file hash, not a timestamp) CheckSum: 0000EAE0 ImageSize: 0000A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 8206d000 8214d000 clipsp (deferred) Image path: \SystemRoot\System32\drivers\clipsp.sys Image name: clipsp.sys Browse all global symbols functions data Timestamp: Fri Oct 20 06:35:11 2023 (6531E75F) CheckSum: 000DD24E ImageSize: 000E0000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 83a00000 83a6e000 hal (deferred) Image path: halmacpi.dll Image name: halmacpi.dll Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: FD9B9AC4 (This is a reproducible build file hash, not a timestamp) CheckSum: 0006C58D ImageSize: 0006E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 83c00000 84376000 nt (export symbols) ntkrpamp.exe Loaded symbol image file: ntkrpamp.exe Mapped memory image file: c:\symbols\ntoskrnl.exe\CC80C6AD776000\ntoskrnl.exe Image path: ntkrpamp.exe Image name: ntkrpamp.exe Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: CC80C6AD (This is a reproducible build file hash, not a timestamp) CheckSum: 006E408D ImageSize: 00776000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 86e00000 86e4d000 FLTMGR # (pdb symbols) c:\symbols\fltMgr.pdb\3D5BBA5D6899AA5ED513116AAF34EB3D1\fltMgr.pdb Loaded symbol image file: FLTMGR.SYS Mapped memory image file: c:\symbols\FLTMGR.SYS\BB9447164d000\FLTMGR.SYS Image path: \SystemRoot\System32\drivers\FLTMGR.SYS Image name: FLTMGR.SYS Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: BB944716 (This is a reproducible build file hash, not a timestamp) CheckSum: 0004C91A ImageSize: 0004D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 86e4d000 86e6a000 ksecdd (deferred) Image path: \SystemRoot\System32\drivers\ksecdd.sys Image name: ksecdd.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: C638CD19 (This is a reproducible build file hash, not a timestamp) CheckSum: 0001D6B4 ImageSize: 0001D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 86e6a000 86e9f000 msrpc (deferred) Image path: \SystemRoot\System32\drivers\msrpc.sys Image name: msrpc.sys Browse all global symbols functions data Timestamp: unavailable (FFFFFFFE) CheckSum: missing ImageSize: 00035000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 86e9f000 86eaa000 cmimcext (deferred) Image path: \SystemRoot\System32\drivers\cmimcext.sys Image name: cmimcext.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 0E9A327D (This is a reproducible build file hash, not a timestamp) CheckSum: 0000BC85 ImageSize: 0000B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 86eaa000 86eb8000 werkernel (deferred) Image path: \SystemRoot\System32\drivers\werkernel.sys Image name: werkernel.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 27470E69 (This is a reproducible build file hash, not a timestamp) CheckSum: 00011515 ImageSize: 0000E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 86eb8000 86ec1000 ntosext (deferred) Image path: \SystemRoot\System32\drivers\ntosext.sys Image name: ntosext.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 89076B67 (This is a reproducible build file hash, not a timestamp) CheckSum: 0000E6FE ImageSize: 00009000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 86ec1000 86f77000 CI (deferred) Image path: \SystemRoot\system32\CI.dll Image name: CI.dll Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 1A419E54 (This is a reproducible build file hash, not a timestamp) CheckSum: 000BDD9B ImageSize: 000B6000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 86f77000 87002000 cng (deferred) Image path: \SystemRoot\System32\drivers\cng.sys Image name: cng.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: B4D52043 (This is a reproducible build file hash, not a timestamp) CheckSum: 0008B4EB ImageSize: 0008B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 87002000 8709c000 Wdf01000 (deferred) Image path: \SystemRoot\system32\drivers\Wdf01000.sys Image name: Wdf01000.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 246AEF39 (This is a reproducible build file hash, not a timestamp) CheckSum: 000A3E4B ImageSize: 0009A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 8709c000 870ab000 WDFLDR (deferred) Image path: \SystemRoot\system32\drivers\WDFLDR.SYS Image name: WDFLDR.SYS Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 0563EA23 (This is a reproducible build file hash, not a timestamp) CheckSum: 0001A3FC ImageSize: 0000F000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 870ab000 870b6000 SleepStudyHelper (deferred) Image path: \SystemRoot\system32\drivers\SleepStudyHelper.sys Image name: SleepStudyHelper.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 4CF4121C (This is a reproducible build file hash, not a timestamp) CheckSum: 0000DFBE ImageSize: 0000B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 870b6000 870c3000 WppRecorder (deferred) Image path: \SystemRoot\system32\drivers\WppRecorder.sys Image name: WppRecorder.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 3409C730 (This is a reproducible build file hash, not a timestamp) CheckSum: 0000C467 ImageSize: 0000D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 870c3000 870dd000 acpiex (deferred) Image path: \SystemRoot\System32\Drivers\acpiex.sys Image name: acpiex.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: DF011218 (This is a reproducible build file hash, not a timestamp) CheckSum: 0001D9D3 ImageSize: 0001A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 870dd000 87176000 ACPI (deferred) Image path: \SystemRoot\System32\drivers\ACPI.sys Image name: ACPI.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: E251DDFE (This is a reproducible build file hash, not a timestamp) CheckSum: 00095A23 ImageSize: 00099000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 87176000 8717f000 WMILIB (deferred) Image path: \SystemRoot\System32\drivers\WMILIB.SYS Image name: WMILIB.SYS Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 26857BE9 (This is a reproducible build file hash, not a timestamp) CheckSum: 00009E18 ImageSize: 00009000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 87189000 871e9000 intelpep (deferred) Image path: \SystemRoot\System32\drivers\intelpep.sys Image name: intelpep.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: FCC1CCF2 (This is a reproducible build file hash, not a timestamp) CheckSum: 00064A98 ImageSize: 00060000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 871e9000 871f9000 WindowsTrustedRT (deferred) Image path: \SystemRoot\system32\drivers\WindowsTrustedRT.sys Image name: WindowsTrustedRT.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: BE42CFC0 (This is a reproducible build file hash, not a timestamp) CheckSum: 0001B481 ImageSize: 00010000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 871f9000 87200000 pciide (deferred) Image path: \SystemRoot\System32\drivers\pciide.sys Image name: pciide.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 0B0FADE8 (This is a reproducible build file hash, not a timestamp) CheckSum: 00012B36 ImageSize: 00007000 File version: 10.0.19041.3636 Product version: 10.0.19041.3636 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 Information from resource tables: CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: pciide.sys OriginalFilename: pciide.sys ProductVersion: 10.0.19041.3636 FileVersion: 10.0.19041.3636 (WinBuild.160101.0800) FileDescription: Generic PCI IDE Bus Driver LegalCopyright: © Microsoft Corporation. All rights reserved. 87200000 87208000 IntelTA (deferred) Image path: \SystemRoot\System32\drivers\IntelTA.sys Image name: IntelTA.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: D23D6807 (This is a reproducible build file hash, not a timestamp) CheckSum: 0000D9D8 ImageSize: 00008000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 87208000 87210000 WindowsTrustedRTProxy (deferred) Image path: \SystemRoot\System32\drivers\WindowsTrustedRTProxy.sys Image name: WindowsTrustedRTProxy.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 4E3ABE5E (This is a reproducible build file hash, not a timestamp) CheckSum: 0000C579 ImageSize: 00008000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 87210000 8721d000 pcw (deferred) Image path: \SystemRoot\System32\drivers\pcw.sys Image name: pcw.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 7E2766F3 (This is a reproducible build file hash, not a timestamp) CheckSum: 0001ABCA ImageSize: 0000D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 8721d000 87269000 klupd_K4W_21_15_arkmon (deferred) Image path: \SystemRoot\System32\Drivers\klupd_K4W-21-15_arkmon.sys Image name: klupd_K4W-21-15_arkmon.sys Browse all global symbols functions data Timestamp: Tue Sep 19 13:20:27 2023 (650967DB) CheckSum: 0004F74C ImageSize: 0004C000 File version: 2.17.4.0 Product version: 2.17.4.0 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 Information from resource tables: CompanyName: AO Kaspersky Lab ProductName: Kaspersky Bases InternalName: arkmon OriginalFilename: arkmon.sys ProductVersion: 2.17.4.0 FileVersion: 2.17.4.0 FileDescription: Kaspersky Lab Anti-Rootkit Monitor Driver LegalCopyright: © 2023 AO Kaspersky Lab. All Rights Reserved. LegalTrademarks: Registered trademarks and service marks are the property of their respective owners 87269000 87271000 msisadrv (deferred) Image path: \SystemRoot\System32\drivers\msisadrv.sys Image name: msisadrv.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: E41FC7FF (This is a reproducible build file hash, not a timestamp) CheckSum: 0000C1A1 ImageSize: 00008000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 87271000 872cc000 pci (deferred) Image path: \SystemRoot\System32\drivers\pci.sys Image name: pci.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 9E66E352 (This is a reproducible build file hash, not a timestamp) CheckSum: 0006299B ImageSize: 0005B000 File version: 10.0.19041.3636 Product version: 10.0.19041.3636 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 Information from resource tables: CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: pci.sys OriginalFilename: pci.sys ProductVersion: 10.0.19041.3636 FileVersion: 10.0.19041.3636 (WinBuild.160101.0800) FileDescription: NT Plug and Play PCI Enumerator LegalCopyright: © Microsoft Corporation. All rights reserved. 872cc000 872de000 vdrvroot (deferred) Image path: \SystemRoot\System32\drivers\vdrvroot.sys Image name: vdrvroot.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: C89DFC1A (This is a reproducible build file hash, not a timestamp) CheckSum: 0000FCF9 ImageSize: 00012000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 872de000 87308000 cm_km (deferred) Image path: \SystemRoot\system32\DRIVERS\cm_km.sys Image name: cm_km.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 6A071323 (This is a reproducible build file hash, not a timestamp) CheckSum: 0003933A ImageSize: 0002A000 File version: 30.1486.0.140 Product version: 30.1486.0.140 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 Information from resource tables: CompanyName: AO Kaspersky Lab ProductName: Coretech Delivery InternalName: cm_km ProductVersion: 30.1486.0.140-1c7f04f5b63c94377b16ea367b316551e04bd871 FileVersion: 30.1486.0.140 FileDescription: Cryptographic Module x86 (56 bit) LegalCopyright: © 2023 AO Kaspersky Lab. All Rights Reserved. LegalTrademarks: Registered trademarks and service marks are the property of their respective owners 87308000 8732b000 pdc (deferred) Image path: \SystemRoot\system32\drivers\pdc.sys Image name: pdc.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 1A897B8B (This is a reproducible build file hash, not a timestamp) CheckSum: 0002299C ImageSize: 00023000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 8732b000 8733d000 CEA (deferred) Image path: \SystemRoot\system32\drivers\CEA.sys Image name: CEA.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 0D201B4B (This is a reproducible build file hash, not a timestamp) CheckSum: 00017132 ImageSize: 00012000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 8733d000 87361000 partmgr (deferred) Image path: \SystemRoot\System32\drivers\partmgr.sys Image name: partmgr.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 8BC1B083 (This is a reproducible build file hash, not a timestamp) CheckSum: 00025E6C ImageSize: 00024000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 87361000 873e4000 spaceport (deferred) Image path: \SystemRoot\System32\drivers\spaceport.sys Image name: spaceport.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 0E234F68 (This is a reproducible build file hash, not a timestamp) CheckSum: 0008A395 ImageSize: 00083000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 873e4000 873f7000 volmgr (deferred) Image path: \SystemRoot\System32\drivers\volmgr.sys Image name: volmgr.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 92B3C833 (This is a reproducible build file hash, not a timestamp) CheckSum: 000117E2 ImageSize: 00013000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 873f7000 87446000 volmgrx (deferred) Image path: \SystemRoot\System32\drivers\volmgrx.sys Image name: volmgrx.sys Browse all global symbols functions data Timestamp: unavailable (FFFFFFFE) CheckSum: missing ImageSize: 0004F000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 87446000 87454000 PCIIDEX (deferred) Image path: \SystemRoot\System32\drivers\PCIIDEX.SYS Image name: PCIIDEX.SYS Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 81D329EA (This is a reproducible build file hash, not a timestamp) CheckSum: 0001021C ImageSize: 0000E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 87454000 8746a000 mountmgr (deferred) Image path: \SystemRoot\System32\drivers\mountmgr.sys Image name: mountmgr.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 67EE578C (This is a reproducible build file hash, not a timestamp) CheckSum: 0001A1E0 ImageSize: 00016000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 8746a000 87473000 atapi (deferred) Image path: \SystemRoot\System32\drivers\atapi.sys Image name: atapi.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: A0BB65F5 (This is a reproducible build file hash, not a timestamp) CheckSum: 000102E3 ImageSize: 00009000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 87473000 874a0000 ataport (deferred) Image path: \SystemRoot\System32\drivers\ataport.SYS Image name: ataport.SYS Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 776E0F98 (This is a reproducible build file hash, not a timestamp) CheckSum: 00038900 ImageSize: 0002D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 874a0000 874b7000 EhStorClass (deferred) Image path: \SystemRoot\System32\drivers\EhStorClass.sys Image name: EhStorClass.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 712FE54C (This is a reproducible build file hash, not a timestamp) CheckSum: 0001AC35 ImageSize: 00017000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 874b7000 874c9000 fileinfo (deferred) Image path: \SystemRoot\System32\drivers\fileinfo.sys Image name: fileinfo.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 4BCB7443 (This is a reproducible build file hash, not a timestamp) CheckSum: 000153D2 ImageSize: 00012000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 874c9000 874fb000 Wof (deferred) Image path: \SystemRoot\System32\Drivers\Wof.sys Image name: Wof.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 2F441D25 (This is a reproducible build file hash, not a timestamp) CheckSum: 00035B57 ImageSize: 00032000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 874fb000 8774e000 Ntfs (deferred) Image path: \SystemRoot\System32\Drivers\Ntfs.sys Image name: Ntfs.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 7AB290C5 (This is a reproducible build file hash, not a timestamp) CheckSum: 00247079 ImageSize: 00253000 File version: 10.0.19041.3693 Product version: 10.0.19041.3693 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 Information from resource tables: CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: ntfs.sys OriginalFilename: ntfs.sys ProductVersion: 10.0.19041.3693 FileVersion: 10.0.19041.3693 (WinBuild.160101.0800) FileDescription: NT File System Driver LegalCopyright: © Microsoft Corporation. All rights reserved. 8774e000 87758000 Fs_Rec (deferred) Image path: \SystemRoot\System32\Drivers\Fs_Rec.sys Image name: Fs_Rec.sys Browse all global symbols functions data Timestamp: unavailable (FFFFFFFE) CheckSum: missing ImageSize: 0000A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 87758000 87863000 ndis (deferred) Image path: \SystemRoot\system32\drivers\ndis.sys Image name: ndis.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: A69026D1 (This is a reproducible build file hash, not a timestamp) CheckSum: 00107E62 ImageSize: 0010B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 87863000 878cf000 NETIO (deferred) Image path: \SystemRoot\system32\drivers\NETIO.SYS Image name: NETIO.SYS Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 84F198CF (This is a reproducible build file hash, not a timestamp) CheckSum: 0006B5ED ImageSize: 0006C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 878cf000 878f6000 ksecpkg (deferred) Image path: \SystemRoot\System32\Drivers\ksecpkg.sys Image name: ksecpkg.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 0BB642A9 (This is a reproducible build file hash, not a timestamp) CheckSum: 00024FA6 ImageSize: 00027000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 878f6000 87b43000 tcpip (deferred) Image path: \SystemRoot\System32\drivers\tcpip.sys Image name: tcpip.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 96E234E6 (This is a reproducible build file hash, not a timestamp) CheckSum: 002496AC ImageSize: 0024D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 87b43000 87b9b000 fwpkclnt (deferred) Image path: \SystemRoot\System32\drivers\fwpkclnt.sys Image name: fwpkclnt.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 56443C86 (This is a reproducible build file hash, not a timestamp) CheckSum: 0005F214 ImageSize: 00058000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 87b9b000 87bb3000 wfplwfs (deferred) Image path: \SystemRoot\System32\drivers\wfplwfs.sys Image name: wfplwfs.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 5765F8C4 (This is a reproducible build file hash, not a timestamp) CheckSum: 0002155E ImageSize: 00018000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 87bb3000 87c58000 fvevol (deferred) Image path: \SystemRoot\System32\DRIVERS\fvevol.sys Image name: fvevol.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: E6738138 (This is a reproducible build file hash, not a timestamp) CheckSum: 000A2FC1 ImageSize: 000A5000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 87c58000 87c60000 volume (deferred) Image path: \SystemRoot\System32\drivers\volume.sys Image name: volume.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 931027B1 (This is a reproducible build file hash, not a timestamp) CheckSum: 0000B469 ImageSize: 00008000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 87c60000 87cbb000 volsnap (deferred) Image path: \SystemRoot\System32\drivers\volsnap.sys Image name: volsnap.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 3A57FAA5 (This is a reproducible build file hash, not a timestamp) CheckSum: 00065AC4 ImageSize: 0005B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 87cbb000 87cf4000 rdyboost (deferred) Image path: \SystemRoot\System32\drivers\rdyboost.sys Image name: rdyboost.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: DA1C1B42 (This is a reproducible build file hash, not a timestamp) CheckSum: 000421C5 ImageSize: 00039000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 87cf4000 87d11000 mup (deferred) Image path: \SystemRoot\System32\Drivers\mup.sys Image name: mup.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 747D5B20 (This is a reproducible build file hash, not a timestamp) CheckSum: 0001FEE3 ImageSize: 0001D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 87d11000 87d37000 klupd_K4W_21_15_klbg (deferred) Image path: \SystemRoot\System32\Drivers\klupd_K4W-21-15_klbg.sys Image name: klupd_K4W-21-15_klbg.sys Browse all global symbols functions data Timestamp: Tue Sep 19 14:50:11 2023 (65097CE3) CheckSum: 0002CBB4 ImageSize: 00026000 File version: 11.18.3.0 Product version: 11.18.3.0 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 Information from resource tables: CompanyName: AO Kaspersky Lab ProductName: Kaspersky Bases InternalName: klbg OriginalFilename: klbg.sys ProductVersion: 11.18.3.0 FileVersion: 11.18.3.0 FileDescription: Kaspersky Lab Boot Guard Driver LegalCopyright: © 2023 AO Kaspersky Lab. All Rights Reserved. LegalTrademarks: Registered trademarks and service marks are the property of their respective owners 87d37000 87d44000 iorate (deferred) Image path: \SystemRoot\system32\drivers\iorate.sys Image name: iorate.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 8E1B90EF (This is a reproducible build file hash, not a timestamp) CheckSum: 0001590E ImageSize: 0000D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 87d51000 87d68000 disk (deferred) Image path: \SystemRoot\System32\drivers\disk.sys Image name: disk.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: B8C39914 (This is a reproducible build file hash, not a timestamp) CheckSum: 00019A28 ImageSize: 00017000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 87d68000 87dc9000 CLASSPNP (deferred) Image path: \SystemRoot\System32\drivers\CLASSPNP.SYS Image name: CLASSPNP.SYS Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 1AD95A80 (This is a reproducible build file hash, not a timestamp) CheckSum: 000639A8 ImageSize: 00061000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 8fa00000 8fa7a000 klflt (deferred) Image path: \SystemRoot\system32\DRIVERS\K4W-21-15\klflt.sys Image name: klflt.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 44BEE6B9 (This is a reproducible build file hash, not a timestamp) CheckSum: 00076A18 ImageSize: 0007A000 File version: 30.1486.0.1090 Product version: 30.1486.0.1090 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 Information from resource tables: CompanyName: AO Kaspersky Lab ProductName: Coretech Delivery InternalName: klflt ProductVersion: 30.1486.0.1090-a606f95d5af12a3b594c1db9260626dd8c974c31 FileVersion: 30.1486.0.1090 FileDescription: Filter Core [fre_win7_x86] LegalCopyright: © 2023 AO Kaspersky Lab. All Rights Reserved. LegalTrademarks: Registered trademarks and service marks are the property of their respective owners 8fa80000 8faa3000 cdrom (deferred) Image path: \SystemRoot\System32\drivers\cdrom.sys Image name: cdrom.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 7D8A66C8 (This is a reproducible build file hash, not a timestamp) CheckSum: 00023F34 ImageSize: 00023000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 8fab0000 8fada000 klbackupflt (deferred) Image path: \SystemRoot\system32\DRIVERS\K4W-21-15\klbackupflt.sys Image name: klbackupflt.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: B37E637F (This is a reproducible build file hash, not a timestamp) CheckSum: 00037B3D ImageSize: 0002A000 File version: 30.1486.0.730 Product version: 30.1486.0.730 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 Information from resource tables: CompanyName: AO Kaspersky Lab ProductName: Coretech Delivery InternalName: klbackupflt ProductVersion: 30.1486.0.730-864dc4ae7764c63fbf2c841fa669211801d13bed FileVersion: 30.1486.0.730 FileDescription: Backup File Filter [fre_win7_x86] LegalCopyright: © 2023 AO Kaspersky Lab. All Rights Reserved. LegalTrademarks: Registered trademarks and service marks are the property of their respective owners 8fae0000 8faf0000 filecrypt (deferred) Image path: \SystemRoot\system32\drivers\filecrypt.sys Image name: filecrypt.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: CCC09734 (This is a reproducible build file hash, not a timestamp) CheckSum: 00019A4F ImageSize: 00010000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 8faf0000 8fafb000 tbs (deferred) Image path: \SystemRoot\system32\drivers\tbs.sys Image name: tbs.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: C716C909 (This is a reproducible build file hash, not a timestamp) CheckSum: 0000A255 ImageSize: 0000B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 8fb00000 8fbe2000 klif (no symbols) Loaded symbol image file: klif.sys Image path: \SystemRoot\system32\DRIVERS\K4W-21-15\klif.sys Image name: klif.sys Browse all global symbols functions data Timestamp: Sat Sep 30 03:24:53 2023 (65175CC5) CheckSum: 000E5083 ImageSize: 000E2000 File version: 30.1486.0.1090 Product version: 30.1486.0.1090 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 Information from resource tables: CompanyName: AO Kaspersky Lab ProductName: Coretech Delivery InternalName: klif ProductVersion: 30.1486.0.1090-a606f95d5af12a3b594c1db9260626dd8c974c31 FileVersion: 30.1486.0.1090 FileDescription: Core System Interceptors [fre_win7_x86] LegalCopyright: © 2023 AO Kaspersky Lab. All Rights Reserved. LegalTrademarks: Registered trademarks and service marks are the property of their respective owners 8fbf0000 8fc42000 ks (deferred) Image path: \SystemRoot\System32\drivers\ks.sys Image name: ks.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: EFCCB2D4 (This is a reproducible build file hash, not a timestamp) CheckSum: 00055FA0 ImageSize: 00052000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 8fc50000 8fcb1000 USBPORT (deferred) Image path: \SystemRoot\System32\drivers\USBPORT.SYS Image name: USBPORT.SYS Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 7C0ACABE (This is a reproducible build file hash, not a timestamp) CheckSum: 0006A58A ImageSize: 00061000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 8fcc0000 8fcca000 NdisVirtualBus (deferred) Image path: \SystemRoot\System32\drivers\NdisVirtualBus.sys Image name: NdisVirtualBus.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 59C919EC (This is a reproducible build file hash, not a timestamp) CheckSum: 0000D49C ImageSize: 0000A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 8fcd0000 8fcd9000 swenum (deferred) Image path: \SystemRoot\System32\DriverStore\FileRepository\swenum.inf_x86_e2235a64f6803b83\swenum.sys Image name: swenum.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 8ECDA4D7 (This is a reproducible build file hash, not a timestamp) CheckSum: 00008E87 ImageSize: 00009000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 8fce0000 8fceb000 rdpbus (deferred) Image path: \SystemRoot\System32\drivers\rdpbus.sys Image name: rdpbus.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 7C7F8434 (This is a reproducible build file hash, not a timestamp) CheckSum: 00005B34 ImageSize: 0000B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 8fd10000 8fd27000 crashdmp (deferred) Image path: \SystemRoot\System32\Drivers\crashdmp.sys Image name: crashdmp.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 4AE3DCD9 (This is a reproducible build file hash, not a timestamp) CheckSum: 0001DB86 ImageSize: 00017000 File version: 10.0.19041.3636 Product version: 10.0.19041.3636 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 Information from resource tables: CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: crashdmp.sys OriginalFilename: crashdmp.sys ProductVersion: 10.0.19041.3636 FileVersion: 10.0.19041.3636 (WinBuild.160101.0800) FileDescription: Crash Dump Driver LegalCopyright: © Microsoft Corporation. All rights reserved. 8fdb0000 8fdbf000 klbackupdisk (deferred) Image path: \SystemRoot\system32\DRIVERS\K4W-21-15\klbackupdisk.sys Image name: klbackupdisk.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 34A2757D (This is a reproducible build file hash, not a timestamp) CheckSum: 0001C696 ImageSize: 0000F000 File version: 30.1486.0.730 Product version: 30.1486.0.730 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 Information from resource tables: CompanyName: AO Kaspersky Lab ProductName: Coretech Delivery InternalName: klbackupdisk ProductVersion: 30.1486.0.730-864dc4ae7764c63fbf2c841fa669211801d13bed FileVersion: 30.1486.0.730 FileDescription: Backup Disk Filter [fre_win7_x86] LegalCopyright: © 2023 AO Kaspersky Lab. All Rights Reserved. LegalTrademarks: Registered trademarks and service marks are the property of their respective owners 90600000 90613000 kldisk (deferred) Image path: \SystemRoot\system32\DRIVERS\K4W-21-15\kldisk.sys Image name: kldisk.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 2834DA01 (This is a reproducible build file hash, not a timestamp) CheckSum: 0001EC63 ImageSize: 00013000 File version: 30.1486.0.730 Product version: 30.1486.0.730 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 Information from resource tables: CompanyName: AO Kaspersky Lab ProductName: Coretech Delivery InternalName: kldisk ProductVersion: 30.1486.0.730-864dc4ae7764c63fbf2c841fa669211801d13bed FileVersion: 30.1486.0.730 FileDescription: Virtual Disk [fre_win7_x86] LegalCopyright: © 2023 AO Kaspersky Lab. All Rights Reserved. LegalTrademarks: Registered trademarks and service marks are the property of their respective owners 90620000 90627000 Null (deferred) Image path: \SystemRoot\System32\Drivers\Null.SYS Image name: Null.SYS Browse all global symbols functions data Timestamp: unavailable (FFFFFFFE) CheckSum: missing ImageSize: 00007000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 90630000 90637000 Beep (deferred) Image path: \SystemRoot\System32\Drivers\Beep.SYS Image name: Beep.SYS Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 60985CC0 (This is a reproducible build file hash, not a timestamp) CheckSum: 0000B11B ImageSize: 00007000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 90640000 906a3000 rdbss (deferred) Image path: \SystemRoot\system32\DRIVERS\rdbss.sys Image name: rdbss.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: B78459EE (This is a reproducible build file hash, not a timestamp) CheckSum: 0005FADB ImageSize: 00063000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 906b0000 906f1000 kneps (deferred) Image path: \SystemRoot\system32\DRIVERS\K4W-21-15\kneps.sys Image name: kneps.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 6092CF68 (This is a reproducible build file hash, not a timestamp) CheckSum: 0004AEC1 ImageSize: 00041000 File version: 30.1486.0.750 Product version: 30.1486.0.750 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 Information from resource tables: CompanyName: AO Kaspersky Lab ProductName: Coretech Delivery InternalName: kneps ProductVersion: 30.1486.0.750-97b87f151a3e6aea2f8464f611e919a9ba36d5f4 FileVersion: 30.1486.0.750 FileDescription: Network Processor [fre_win7_x86] LegalCopyright: © 2023 AO Kaspersky Lab. All Rights Reserved. LegalTrademarks: Registered trademarks and service marks are the property of their respective owners 90700000 90720000 dfsc (deferred) Image path: \SystemRoot\System32\Drivers\dfsc.sys Image name: dfsc.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: DDD4FC9C (This is a reproducible build file hash, not a timestamp) CheckSum: 0002B9D1 ImageSize: 00020000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 90720000 9073c000 i8042prt (deferred) Image path: \SystemRoot\System32\drivers\i8042prt.sys Image name: i8042prt.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: E2786AF2 (This is a reproducible build file hash, not a timestamp) CheckSum: 00025224 ImageSize: 0001C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 90740000 90753000 bam (deferred) Image path: \SystemRoot\system32\drivers\bam.sys Image name: bam.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 7DA024E3 (This is a reproducible build file hash, not a timestamp) CheckSum: 0001DC0E ImageSize: 00013000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 90760000 9079c000 ahcache (deferred) Image path: \SystemRoot\system32\DRIVERS\ahcache.sys Image name: ahcache.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: FDA3F9DB (This is a reproducible build file hash, not a timestamp) CheckSum: 000423F7 ImageSize: 0003C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 907a0000 907aa000 kdnic (deferred) Image path: \SystemRoot\System32\drivers\kdnic.sys Image name: kdnic.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 002DFC4A (This is a reproducible build file hash, not a timestamp) CheckSum: 0000B298 ImageSize: 0000A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 907b0000 907c1000 umbus (deferred) Image path: \SystemRoot\System32\DriverStore\FileRepository\umbus.inf_x86_8351669303b483f7\umbus.sys Image name: umbus.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 4FA57C0B (This is a reproducible build file hash, not a timestamp) CheckSum: 000146DA ImageSize: 00011000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 907d0000 907e0000 CAD (deferred) Image path: \SystemRoot\System32\drivers\CAD.sys Image name: CAD.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 13B64ED4 (This is a reproducible build file hash, not a timestamp) CheckSum: 0000F5D2 ImageSize: 00010000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 907e0000 9080f000 intelppm (deferred) Image path: \SystemRoot\System32\drivers\intelppm.sys Image name: intelppm.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: C3E16C4F (This is a reproducible build file hash, not a timestamp) CheckSum: 0002CA88 ImageSize: 0002F000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 90810000 9081b000 CmBatt (deferred) Image path: \SystemRoot\System32\drivers\CmBatt.sys Image name: CmBatt.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 8A910AA3 (This is a reproducible build file hash, not a timestamp) CheckSum: 0001237B ImageSize: 0000B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 90820000 9082c000 BATTC (deferred) Image path: \SystemRoot\System32\drivers\BATTC.SYS Image name: BATTC.SYS Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 08C9C536 (This is a reproducible build file hash, not a timestamp) CheckSum: 00015EEA ImageSize: 0000C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 90830000 90840000 klmouflt (deferred) Image path: \SystemRoot\system32\DRIVERS\K4W-21-15\klmouflt.sys Image name: klmouflt.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: A4152DBC (This is a reproducible build file hash, not a timestamp) CheckSum: 0001CDED ImageSize: 00010000 File version: 30.1486.0.730 Product version: 30.1486.0.730 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 Information from resource tables: CompanyName: AO Kaspersky Lab ProductName: Coretech Delivery InternalName: klmouflt ProductVersion: 30.1486.0.730-864dc4ae7764c63fbf2c841fa669211801d13bed FileVersion: 30.1486.0.730 FileDescription: Mouse Device Filter [fre_win7_x86] LegalCopyright: © 2023 AO Kaspersky Lab. All Rights Reserved. LegalTrademarks: Registered trademarks and service marks are the property of their respective owners 90840000 90926000 klhk (deferred) Image path: \SystemRoot\system32\DRIVERS\K4W-21-15\klhk.sys Image name: klhk.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 6EF8B55C (This is a reproducible build file hash, not a timestamp) CheckSum: 000EF811 ImageSize: 000E6000 File version: 58.0.11.0 Product version: 58.0.11.0 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 Information from resource tables: CompanyName: AO Kaspersky Lab ProductName: Coretech Delivery InternalName: klhk ProductVersion: 58.0.11.0-2baaa8edbd408899d7719d5c926b925b5d5fb672 FileVersion: 58.0.11.0 FileDescription: klhk [fre_win7_x86] LegalCopyright: © 2023 AO Kaspersky Lab. All Rights Reserved. LegalTrademarks: Registered trademarks and service marks are the property of their respective owners 90930000 9093b000 klpd (deferred) Image path: \SystemRoot\system32\DRIVERS\K4W-21-15\klpd.sys Image name: klpd.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: C29CD8FC (This is a reproducible build file hash, not a timestamp) CheckSum: 00015D9D ImageSize: 0000B000 File version: 30.1486.0.730 Product version: 30.1486.0.730 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 Information from resource tables: CompanyName: AO Kaspersky Lab ProductName: Coretech Delivery InternalName: klpd ProductVersion: 30.1486.0.730-864dc4ae7764c63fbf2c841fa669211801d13bed FileVersion: 30.1486.0.730 FileDescription: Format Recognizer [fre_win7_x86] LegalCopyright: © 2023 AO Kaspersky Lab. All Rights Reserved. LegalTrademarks: Registered trademarks and service marks are the property of their respective owners 90940000 909e3000 klgse (deferred) Image path: \SystemRoot\system32\DRIVERS\K4W-21-15\klgse.sys Image name: klgse.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: AE024B25 (This is a reproducible build file hash, not a timestamp) CheckSum: 000B062F ImageSize: 000A3000 File version: 58.0.12.0 Product version: 58.0.12.0 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 Information from resource tables: CompanyName: AO Kaspersky Lab ProductName: Coretech Delivery InternalName: klgse ProductVersion: 58.0.12.0-4aad5372eda2431705d9e1be7947b1b32543e9bb FileVersion: 58.0.12.0 FileDescription: Security Extender [fre_win7_x86] LegalCopyright: © 2023 AO Kaspersky Lab. All Rights Reserved. LegalTrademarks: Registered trademarks and service marks are the property of their respective owners 909f0000 909fe000 mouclass (deferred) Image path: \SystemRoot\System32\drivers\mouclass.sys Image name: mouclass.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 33EEBEF5 (This is a reproducible build file hash, not a timestamp) CheckSum: 0001826F ImageSize: 0000E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 91400000 91448000 klwtp (deferred) Image path: \SystemRoot\system32\DRIVERS\K4W-21-15\klwtp.sys Image name: klwtp.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 309B85F8 (This is a reproducible build file hash, not a timestamp) CheckSum: 000524EA ImageSize: 00048000 File version: 30.1486.0.1170 Product version: 30.1486.0.1170 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 Information from resource tables: CompanyName: AO Kaspersky Lab ProductName: Coretech Delivery InternalName: klwtp ProductVersion: 30.1486.0.1170-9c5fcc752b96de8c93a3337fd6104e195dd494ae FileVersion: 30.1486.0.1170 FileDescription: WFP Network Connection Filter Driver [fre_win7_x86] LegalCopyright: © 2023 AO Kaspersky Lab. All Rights Reserved. LegalTrademarks: Registered trademarks and service marks are the property of their respective owners 91450000 9145d000 klim6 (deferred) Image path: \SystemRoot\system32\DRIVERS\klim6.sys Image name: klim6.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 2BFEA0AD (This is a reproducible build file hash, not a timestamp) CheckSum: 0001D86D ImageSize: 0000D000 File version: 30.1486.0.660 Product version: 30.1486.0.660 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 Information from resource tables: CompanyName: AO Kaspersky Lab ProductName: Coretech Delivery InternalName: klim6 ProductVersion: 30.1486.0.660-382849afeae89e54c7229d68c93985692d7bdd48 FileVersion: 30.1486.0.660 FileDescription: Packet Network Filter [fre_win7_x86] LegalCopyright: © 2023 AO Kaspersky Lab. All Rights Reserved. LegalTrademarks: Registered trademarks and service marks are the property of their respective owners 91460000 91475000 vwififlt (deferred) Image path: \SystemRoot\System32\drivers\vwififlt.sys Image name: vwififlt.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: E7DCCBE7 (This is a reproducible build file hash, not a timestamp) CheckSum: 0001259B ImageSize: 00015000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 91480000 914a3000 pacer (deferred) Image path: \SystemRoot\System32\drivers\pacer.sys Image name: pacer.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: D260C676 (This is a reproducible build file hash, not a timestamp) CheckSum: 000305F8 ImageSize: 00023000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 914b0000 914bd000 ndiscap (deferred) Image path: \SystemRoot\System32\drivers\ndiscap.sys Image name: ndiscap.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 0CB0577A (This is a reproducible build file hash, not a timestamp) CheckSum: 00017B72 ImageSize: 0000D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 914c0000 914ce000 netbios (deferred) Image path: \SystemRoot\system32\drivers\netbios.sys Image name: netbios.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 0B4E19D4 (This is a reproducible build file hash, not a timestamp) CheckSum: 0000F168 ImageSize: 0000E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 914d0000 914de000 klpnpflt (deferred) Image path: \SystemRoot\system32\DRIVERS\K4W-21-15\klpnpflt.sys Image name: klpnpflt.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: CE8978CF (This is a reproducible build file hash, not a timestamp) CheckSum: 0001489D ImageSize: 0000E000 File version: 30.1486.0.730 Product version: 30.1486.0.730 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 Information from resource tables: CompanyName: AO Kaspersky Lab ProductName: Coretech Delivery InternalName: klpnpflt ProductVersion: 30.1486.0.730-864dc4ae7764c63fbf2c841fa669211801d13bed FileVersion: 30.1486.0.730 FileDescription: Generic PnP filter [fre_win7_x86] LegalCopyright: © 2023 AO Kaspersky Lab. All Rights Reserved. LegalTrademarks: Registered trademarks and service marks are the property of their respective owners 914e0000 914f2000 klkbdflt (deferred) Image path: \SystemRoot\system32\DRIVERS\K4W-21-15\klkbdflt.sys Image name: klkbdflt.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: AE338483 (This is a reproducible build file hash, not a timestamp) CheckSum: 00014BEA ImageSize: 00012000 File version: 30.1486.0.730 Product version: 30.1486.0.730 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 Information from resource tables: CompanyName: AO Kaspersky Lab ProductName: Coretech Delivery InternalName: klkbdflt ProductVersion: 30.1486.0.730-864dc4ae7764c63fbf2c841fa669211801d13bed FileVersion: 30.1486.0.730 FileDescription: Keyboard Device Filter [fre_win7_x86] LegalCopyright: © 2023 AO Kaspersky Lab. All Rights Reserved. LegalTrademarks: Registered trademarks and service marks are the property of their respective owners 91500000 9150c000 nsiproxy (deferred) Image path: \SystemRoot\system32\drivers\nsiproxy.sys Image name: nsiproxy.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 73B2FF3A (This is a reproducible build file hash, not a timestamp) CheckSum: 0000E266 ImageSize: 0000C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 91510000 91519000 npsvctrig (deferred) Image path: \SystemRoot\System32\drivers\npsvctrig.sys Image name: npsvctrig.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 0E79291C (This is a reproducible build file hash, not a timestamp) CheckSum: 00006883 ImageSize: 00009000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 91520000 9152b000 mssmbios (deferred) Image path: \SystemRoot\System32\drivers\mssmbios.sys Image name: mssmbios.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 8BA53A5A (This is a reproducible build file hash, not a timestamp) CheckSum: 0001850D ImageSize: 0000B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 91530000 9153d000 CompositeBus (deferred) Image path: \SystemRoot\System32\DriverStore\FileRepository\compositebus.inf_x86_c13139cc25036700\CompositeBus.sys Image name: CompositeBus.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: FCB2607C (This is a reproducible build file hash, not a timestamp) CheckSum: 0000D685 ImageSize: 0000D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 91540000 91813000 dxgkrnl (deferred) Image path: \SystemRoot\System32\drivers\dxgkrnl.sys Image name: dxgkrnl.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: EC874CE3 (This is a reproducible build file hash, not a timestamp) CheckSum: 002DDF16 ImageSize: 002D3000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 91820000 91830000 watchdog (deferred) Image path: \SystemRoot\System32\drivers\watchdog.sys Image name: watchdog.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 23EE4DA1 (This is a reproducible build file hash, not a timestamp) CheckSum: 0000CB9F ImageSize: 00010000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 91830000 91840000 BasicDisplay (deferred) Image path: \SystemRoot\System32\DriverStore\FileRepository\basicdisplay.inf_x86_85566c5b60e2ea34\BasicDisplay.sys Image name: BasicDisplay.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 3395C769 (This is a reproducible build file hash, not a timestamp) CheckSum: 000173BE ImageSize: 00010000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 91840000 9184c000 BasicRender (deferred) Image path: \SystemRoot\System32\DriverStore\FileRepository\basicrender.inf_x86_3f98dd7c09c114ef\BasicRender.sys Image name: BasicRender.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: F2A827D7 (This is a reproducible build file hash, not a timestamp) CheckSum: 000084E3 ImageSize: 0000C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 91850000 91865000 Npfs (deferred) Image path: \SystemRoot\System32\Drivers\Npfs.SYS Image name: Npfs.SYS Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 0D87B129 (This is a reproducible build file hash, not a timestamp) CheckSum: 000204C4 ImageSize: 00015000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 91870000 9187d000 Msfs (deferred) Image path: \SystemRoot\System32\Drivers\Msfs.SYS Image name: Msfs.SYS Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 63239004 (This is a reproducible build file hash, not a timestamp) CheckSum: 0000AF29 ImageSize: 0000D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 91880000 91895000 CimFS (deferred) Image path: \SystemRoot\System32\Drivers\CimFS.SYS Image name: CimFS.SYS Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 7B4B825F (This is a reproducible build file hash, not a timestamp) CheckSum: 00013161 ImageSize: 00015000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 918a0000 918ba000 tdx (deferred) Image path: \SystemRoot\system32\DRIVERS\tdx.sys Image name: tdx.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 2EB5C7F9 (This is a reproducible build file hash, not a timestamp) CheckSum: 000266EA ImageSize: 0001A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 918c0000 918cc000 TDI (deferred) Image path: \SystemRoot\system32\DRIVERS\TDI.SYS Image name: TDI.SYS Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: C4DEDDBE (This is a reproducible build file hash, not a timestamp) CheckSum: 0000B17F ImageSize: 0000C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 918d0000 91911000 netbt (deferred) Image path: \SystemRoot\System32\DRIVERS\netbt.sys Image name: netbt.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 71F4DDFB (This is a reproducible build file hash, not a timestamp) CheckSum: 00040E45 ImageSize: 00041000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 91920000 9192d000 afunix (deferred) Image path: \SystemRoot\system32\drivers\afunix.sys Image name: afunix.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: D7ECA89B (This is a reproducible build file hash, not a timestamp) CheckSum: 0001399A ImageSize: 0000D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 91930000 919b2000 afd (deferred) Image path: \SystemRoot\system32\drivers\afd.sys Image name: afd.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 7E733619 (This is a reproducible build file hash, not a timestamp) CheckSum: 0008CA45 ImageSize: 00082000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 919f0000 919f7000 gpuenergydrv (deferred) Image path: \SystemRoot\System32\drivers\gpuenergydrv.sys Image name: gpuenergydrv.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: CC2684A8 (This is a reproducible build file hash, not a timestamp) CheckSum: 0000F604 ImageSize: 00007000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 92a00000 92a40000 yk63x86 (deferred) Image path: \SystemRoot\System32\drivers\yk63x86.sys Image name: yk63x86.sys Browse all global symbols functions data Timestamp: Tue Jan 8 16:43:58 2013 (50EC148E) CheckSum: 0004543C ImageSize: 00040000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 92a40000 92a58000 drmk (deferred) Image path: \SystemRoot\System32\drivers\drmk.sys Image name: drmk.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 50D677E8 (This is a reproducible build file hash, not a timestamp) CheckSum: 0001170C ImageSize: 00018000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 92a60000 92ff7000 atikmdag (deferred) Image path: \SystemRoot\system32\DRIVERS\atikmdag.sys Image name: atikmdag.sys Browse all global symbols functions data Timestamp: Fri Jul 4 07:51:14 2008 (486D9E32) CheckSum: 003B1868 ImageSize: 00597000 File version: 7.1.1.798 Product version: 7.1.1.798 File flags: 8 (Mask 3F) Private File OS: 40004 NT Win32 File type: 3.4 Driver File date: 00000000.00000000 Translations: 0409.04b0 Information from resource tables: CompanyName: ATI Technologies Inc. ProductName: ATI Radeon Family InternalName: atikmdag.sys OriginalFilename: atikmdag.sys ProductVersion: 7.01.01.798 FileVersion: 7.01.01.798 FileDescription: ATI Radeon Kernel Mode Driver LegalCopyright: Copyright (C) 1998-2006 ATI Technologies Inc. 93000000 93047000 portcls (deferred) Image path: \SystemRoot\System32\drivers\portcls.sys Image name: portcls.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 359F7106 (This is a reproducible build file hash, not a timestamp) CheckSum: 0004D316 ImageSize: 00047000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 93050000 93382000 athwn (deferred) Image path: \SystemRoot\System32\drivers\athwn.sys Image name: athwn.sys Browse all global symbols functions data Timestamp: Tue Mar 1 12:35:03 2016 (56D55437) CheckSum: 00319E54 ImageSize: 00332000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 93390000 9339b000 vwifibus (deferred) Image path: \SystemRoot\System32\drivers\vwifibus.sys Image name: vwifibus.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 4F966B45 (This is a reproducible build file hash, not a timestamp) CheckSum: 00008384 ImageSize: 0000B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 933a0000 933aa000 usbohci (deferred) Image path: \SystemRoot\System32\drivers\usbohci.sys Image name: usbohci.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 5864D7AC (This is a reproducible build file hash, not a timestamp) CheckSum: 00011BDC ImageSize: 0000A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 933b0000 933c4000 usbehci (deferred) Image path: \SystemRoot\System32\drivers\usbehci.sys Image name: usbehci.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: F3C10027 (This is a reproducible build file hash, not a timestamp) CheckSum: 00014843 ImageSize: 00014000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 933d0000 933ee000 HDAudBus (deferred) Image path: \SystemRoot\System32\drivers\HDAudBus.sys Image name: HDAudBus.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 4CEE69BC (This is a reproducible build file hash, not a timestamp) CheckSum: 000264C4 ImageSize: 0001E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 933f0000 933fe000 kbdclass (deferred) Image path: \SystemRoot\System32\drivers\kbdclass.sys Image name: kbdclass.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: E6FD7DC8 (This is a reproducible build file hash, not a timestamp) CheckSum: 00011B0D ImageSize: 0000E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 93e00000 93f06000 AGRSM (deferred) Image path: \SystemRoot\system32\DRIVERS\AGRSM.sys Image name: AGRSM.sys Browse all global symbols functions data Timestamp: Mon Nov 10 18:56:37 2008 (49184BA5) CheckSum: 0010B850 ImageSize: 00106000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 93f10000 93f1d000 modem (deferred) Image path: \SystemRoot\system32\drivers\modem.sys Image name: modem.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: E8247A1D (This is a reproducible build file hash, not a timestamp) CheckSum: 000181AF ImageSize: 0000D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 93f20000 93f77000 HdAudio (deferred) Image path: \SystemRoot\System32\drivers\HdAudio.sys Image name: HdAudio.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: B058D08B (This is a reproducible build file hash, not a timestamp) CheckSum: 00054960 ImageSize: 00057000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 93fa0000 93fab000 dump_dumpata (deferred) Image path: \SystemRoot\System32\Drivers\dump_dumpata.sys Image name: dump_dumpata.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 2DF19929 (This is a reproducible build file hash, not a timestamp) CheckSum: 0000C558 ImageSize: 0000B000 File version: 10.0.19041.3636 Product version: 10.0.19041.3636 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0000.04b0 Information from resource tables: CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: dumpata.sys OriginalFilename: dumpata.sys ProductVersion: 10.0.19041.3636 FileVersion: 10.0.19041.3636 (WinBuild.160101.0800) FileDescription: ATAPI Dump Driver LegalCopyright: © Microsoft Corporation. All rights reserved. 93fc0000 93fc9000 dump_atapi (deferred) Image path: \SystemRoot\System32\Drivers\dump_atapi.sys Image name: dump_atapi.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: A0BB65F5 (This is a reproducible build file hash, not a timestamp) CheckSum: 000102E3 ImageSize: 00009000 File version: 10.0.19041.3636 Product version: 10.0.19041.3636 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 Information from resource tables: CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: atapi.sys OriginalFilename: atapi.sys ProductVersion: 10.0.19041.3636 FileVersion: 10.0.19041.3636 (WinBuild.160101.0800) FileDescription: ATAPI IDE Miniport Driver LegalCopyright: © Microsoft Corporation. All rights reserved. 93ff0000 94007000 dump_dumpfve (deferred) Image path: \SystemRoot\System32\Drivers\dump_dumpfve.sys Image name: dump_dumpfve.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 7B1A5C05 (This is a reproducible build file hash, not a timestamp) CheckSum: 000134DA ImageSize: 00017000 File version: 10.0.19041.3636 Product version: 10.0.19041.3636 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0000.04b0 Information from resource tables: CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: dumpfve.sys OriginalFilename: dumpfve.sys ProductVersion: 10.0.19041.3636 FileVersion: 10.0.19041.3636 (WinBuild.160101.0800) FileDescription: Bitlocker Drive Encryption Crashdump Filter LegalCopyright: © Microsoft Corporation. All rights reserved. 94010000 9401e000 hidparse (deferred) Image path: \SystemRoot\System32\Drivers\hidparse.sys Image name: hidparse.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 4CC1C8BA (This is a reproducible build file hash, not a timestamp) CheckSum: 00016149 ImageSize: 0000E000 File version: 10.0.19041.3636 Product version: 10.0.19041.3636 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 Information from resource tables: CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: hidparse.sys OriginalFilename: hidparse.sys ProductVersion: 10.0.19041.3636 FileVersion: 10.0.19041.3636 (WinBuild.160101.0800) FileDescription: Hid Parsing Library LegalCopyright: © Microsoft Corporation. All rights reserved. 94020000 94036000 BTHUSB (deferred) Image path: \SystemRoot\System32\drivers\BTHUSB.sys Image name: BTHUSB.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: BCBC6782 (This is a reproducible build file hash, not a timestamp) CheckSum: 00014B20 ImageSize: 00016000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 94040000 94054000 wanarp (deferred) Image path: \SystemRoot\System32\DRIVERS\wanarp.sys Image name: wanarp.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: DF1C956B (This is a reproducible build file hash, not a timestamp) CheckSum: 00010083 ImageSize: 00014000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 94060000 94097000 klupd_K4W_21_15_mark (deferred) Image path: \SystemRoot\System32\Drivers\klupd_K4W-21-15_mark.sys Image name: klupd_K4W-21-15_mark.sys Browse all global symbols functions data Timestamp: Tue Sep 19 13:24:08 2023 (650968B8) CheckSum: 00036D97 ImageSize: 00037000 File version: 6.16.4.0 Product version: 6.16.4.0 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 Information from resource tables: CompanyName: AO Kaspersky Lab ProductName: Kaspersky Bases InternalName: mark OriginalFilename: mark.sys ProductVersion: 6.16.4.0 FileVersion: 6.16.4.0 FileDescription: Kaspersky Lab Anti-Rootkit Memory Driver LegalCopyright: © 2023 AO Kaspersky Lab. All Rights Reserved. LegalTrademarks: Registered trademarks and service marks are the property of their respective owners 940a0000 94101000 usbhub (deferred) Image path: \SystemRoot\System32\drivers\usbhub.sys Image name: usbhub.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 7E479828 (This is a reproducible build file hash, not a timestamp) CheckSum: 0006B832 ImageSize: 00061000 File version: 10.0.19041.3636 Product version: 10.0.19041.3636 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 Information from resource tables: CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: usbhub.sys OriginalFilename: usbhub.sys ProductVersion: 10.0.19041.3636 FileVersion: 10.0.19041.3636 (WinBuild.160101.0800) FileDescription: Default Hub Driver for USB LegalCopyright: © Microsoft Corporation. All rights reserved. 94110000 9411a000 USBD (deferred) Image path: \SystemRoot\System32\drivers\USBD.SYS Image name: USBD.SYS Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 0D1A5568 (This is a reproducible build file hash, not a timestamp) CheckSum: 000148BE ImageSize: 0000A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 94120000 941a9000 nwifi (deferred) Image path: \SystemRoot\system32\DRIVERS\nwifi.sys Image name: nwifi.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 64B0E858 (This is a reproducible build file hash, not a timestamp) CheckSum: 00087F2D ImageSize: 00089000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 941b0000 941c0000 ndisuio (deferred) Image path: \SystemRoot\system32\drivers\ndisuio.sys Image name: ndisuio.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 184E2870 (This is a reproducible build file hash, not a timestamp) CheckSum: 0000ECC7 ImageSize: 00010000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 941c0000 941ff000 msquic (deferred) Image path: \SystemRoot\system32\drivers\msquic.sys Image name: msquic.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: B3A30E13 (This is a reproducible build file hash, not a timestamp) CheckSum: 0003A5AF ImageSize: 0003F000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 96c00000 96e18000 win32kbase (deferred) Image path: \SystemRoot\System32\win32kbase.sys Image name: win32kbase.sys Browse all global symbols functions data Timestamp: ***** Invalid (C2AC38A3) CheckSum: 002106E9 ImageSize: 00218000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 96e70000 96ec7000 win32k (deferred) Image path: \SystemRoot\System32\win32k.sys Image name: win32k.sys Browse all global symbols functions data Timestamp: Mon Sep 18 05:30:58 2023 (6507A852) CheckSum: 0005CE56 ImageSize: 00057000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 98800000 9894a680 StkCMini (deferred) Image path: \SystemRoot\System32\Drivers\StkCMini.sys Image name: StkCMini.sys Browse all global symbols functions data Timestamp: Wed Feb 20 13:51:33 2008 (47BBF825) CheckSum: 001590C3 ImageSize: 0014A680 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 98950000 98978000 wcifs (deferred) Image path: \SystemRoot\system32\drivers\wcifs.sys Image name: wcifs.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 112BA42B (This is a reproducible build file hash, not a timestamp) CheckSum: 00033FB8 ImageSize: 00028000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 98980000 989e4000 cldflt (deferred) Image path: \SystemRoot\system32\drivers\cldflt.sys Image name: cldflt.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 9CBBA42F (This is a reproducible build file hash, not a timestamp) CheckSum: 0006315A ImageSize: 00064000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 989f0000 98a04000 storqosflt (deferred) Image path: \SystemRoot\system32\drivers\storqosflt.sys Image name: storqosflt.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 3CE07077 (This is a reproducible build file hash, not a timestamp) CheckSum: 0001D547 ImageSize: 00014000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 98a10000 98a2d000 bindflt (deferred) Image path: \SystemRoot\system32\drivers\bindflt.sys Image name: bindflt.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 35F47DF3 (This is a reproducible build file hash, not a timestamp) CheckSum: 000229A4 ImageSize: 0001D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 98a30000 98a40000 lltdio (deferred) Image path: \SystemRoot\system32\drivers\lltdio.sys Image name: lltdio.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: DE54150D (This is a reproducible build file hash, not a timestamp) CheckSum: 00017D09 ImageSize: 00010000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 98a40000 98a54000 mslldp (deferred) Image path: \SystemRoot\system32\drivers\mslldp.sys Image name: mslldp.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: C4110548 (This is a reproducible build file hash, not a timestamp) CheckSum: 000154E6 ImageSize: 00014000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 98a60000 98b86000 BTHport (deferred) Image path: \SystemRoot\System32\drivers\BTHport.sys Image name: BTHport.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: D3924F66 (This is a reproducible build file hash, not a timestamp) CheckSum: 0012DA15 ImageSize: 00126000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 98b90000 98b9c000 hidusb (deferred) Image path: \SystemRoot\System32\drivers\hidusb.sys Image name: hidusb.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 7DE439D5 (This is a reproducible build file hash, not a timestamp) CheckSum: 00013504 ImageSize: 0000C000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 98ba0000 98bcb000 HIDCLASS (deferred) Image path: \SystemRoot\System32\drivers\HIDCLASS.SYS Image name: HIDCLASS.SYS Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: CDD04AEA (This is a reproducible build file hash, not a timestamp) CheckSum: 00027658 ImageSize: 0002B000 File version: 10.0.19041.3636 Product version: 10.0.19041.3636 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 Information from resource tables: CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: hidclass.sys OriginalFilename: hidclass.sys ProductVersion: 10.0.19041.3636 FileVersion: 10.0.19041.3636 (WinBuild.160101.0800) FileDescription: Hid Class Library LegalCopyright: © Microsoft Corporation. All rights reserved. 98bd0000 98bda000 mouhid (deferred) Image path: \SystemRoot\System32\drivers\mouhid.sys Image name: mouhid.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 65D228B6 (This is a reproducible build file hash, not a timestamp) CheckSum: 00012213 ImageSize: 0000A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 98be0000 98bf4000 rspndr (deferred) Image path: \SystemRoot\system32\drivers\rspndr.sys Image name: rspndr.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: C02EF31A (This is a reproducible build file hash, not a timestamp) CheckSum: 00011BD9 ImageSize: 00014000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 99430000 996df000 win32kfull (deferred) Image path: \SystemRoot\System32\win32kfull.sys Image name: win32kfull.sys Browse all global symbols functions data Timestamp: Sun Feb 17 08:35:32 2036 (7C629614) CheckSum: 002A026C ImageSize: 002AF000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 996e0000 99717000 cdd (deferred) Image path: \SystemRoot\System32\cdd.dll Image name: cdd.dll Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 8CA5A4BC (This is a reproducible build file hash, not a timestamp) CheckSum: 000326B1 ImageSize: 00037000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 9b400000 9b4ab000 dxgmms2 (deferred) Image path: \SystemRoot\System32\drivers\dxgmms2.sys Image name: dxgmms2.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 8514F757 (This is a reproducible build file hash, not a timestamp) CheckSum: 000B2993 ImageSize: 000AB000 File version: 10.0.19041.3636 Product version: 10.0.19041.3636 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 Information from resource tables: CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: dxgmms2.sys OriginalFilename: dxgmms2.sys ProductVersion: 10.0.19041.3636 FileVersion: 10.0.19041.3636 (WinBuild.160101.0800) FileDescription: DirectX Graphics MMS LegalCopyright: © Microsoft Corporation. All rights reserved. 9b4b0000 9b4b8000 kmdfmemio (deferred) Image path: \SystemRoot\system32\DRIVERS\kmdfmemio.sys Image name: kmdfmemio.sys Browse all global symbols functions data Timestamp: Tue Nov 14 04:11:52 2006 (455909C8) CheckSum: 000110FB ImageSize: 00008000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 9b4c0000 9c115900 StkCPipe (deferred) Image path: \SystemRoot\System32\Drivers\StkCPipe.sys Image name: StkCPipe.sys Browse all global symbols functions data Timestamp: Thu Oct 4 20:44:14 2007 (4705185E) CheckSum: 00C67022 ImageSize: 00C55900 File version: 1.0.0.2 Product version: 1.0.0.2 File flags: 8 (Mask 3F) Private File OS: 40004 NT Win32 File type: 3.0 Driver File date: 00000000.00000000 Translations: 0409.04b0 Information from resource tables: CompanyName: Syntek America Inc. ProductName: Syntek USB 2.0 Video Pipeline Driver InternalName: StkCPipe.sys OriginalFilename: StkCPipe.sys ProductVersion: 1.0.0.2 FileVersion: 1.0.0.2 PrivateBuild: SpecialBuild: FileDescription: Syntek USB 2.0 Video Pipeline Driver LegalCopyright: Copyright (C) Syntek America Inc. 2003-2006 LegalTrademarks: StkCPipe is a registered trademark of Syntek America Inc. StkPipe (TM) is a trademark of Syntek America Inc. Comments: 9c120000 9c14ea00 StkCSF (deferred) Image path: \SystemRoot\System32\Drivers\StkCSF.sys Image name: StkCSF.sys Browse all global symbols functions data Timestamp: Wed Dec 12 17:02:46 2007 (475FDBF6) CheckSum: 0003F47A ImageSize: 0002EA00 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 9c150000 9c1ab000 dxgmms1 (deferred) Image path: \SystemRoot\System32\drivers\dxgmms1.sys Image name: dxgmms1.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: CCB01489 (This is a reproducible build file hash, not a timestamp) CheckSum: 000626F2 ImageSize: 0005B000 File version: 10.0.19041.3636 Product version: 10.0.19041.3636 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 Information from resource tables: CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: dxgmms1.sys OriginalFilename: dxgmms1.sys ProductVersion: 10.0.19041.3636 FileVersion: 10.0.19041.3636 (WinBuild.160101.0800) FileDescription: DirectX Graphics MMS LegalCopyright: © Microsoft Corporation. All rights reserved. 9c1b0000 9c1c6000 monitor (deferred) Image path: \SystemRoot\System32\drivers\monitor.sys Image name: monitor.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: DDF76954 (This is a reproducible build file hash, not a timestamp) CheckSum: 00020062 ImageSize: 00016000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 9c1d0000 9c1df000 mmcss (deferred) Image path: \SystemRoot\system32\drivers\mmcss.sys Image name: mmcss.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: AC5CF7AC (This is a reproducible build file hash, not a timestamp) CheckSum: 0000C7C5 ImageSize: 0000F000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: 9c1e0000 9c1fe000 luafv (deferred) Image path: \SystemRoot\system32\drivers\luafv.sys Image name: luafv.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 95CDC18F (This is a reproducible build file hash, not a timestamp) CheckSum: 0001F988 ImageSize: 0001E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: a5c00000 a5c3e000 srvnet (deferred) Image path: \SystemRoot\System32\DRIVERS\srvnet.sys Image name: srvnet.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: F602B169 (This is a reproducible build file hash, not a timestamp) CheckSum: 0003F50B ImageSize: 0003E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: a5c40000 a5c7f000 mrxsmb10 (deferred) Image path: \SystemRoot\system32\DRIVERS\mrxsmb10.sys Image name: mrxsmb10.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: BF4845DC (This is a reproducible build file hash, not a timestamp) CheckSum: 00044AF3 ImageSize: 0003F000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: a5c80000 a5c9e000 Ndu (deferred) Image path: \SystemRoot\system32\drivers\Ndu.sys Image name: Ndu.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 106AF0CA (This is a reproducible build file hash, not a timestamp) CheckSum: 00028013 ImageSize: 0001E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: a5ca0000 a5d49000 srv2 (deferred) Image path: \SystemRoot\System32\DRIVERS\srv2.sys Image name: srv2.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: CDD48435 (This is a reproducible build file hash, not a timestamp) CheckSum: 000A64E8 ImageSize: 000A9000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: a5d50000 a5d9a000 klupd_K4W_21_15_klark (deferred) Image path: \SystemRoot\System32\Drivers\klupd_K4W-21-15_klark.sys Image name: klupd_K4W-21-15_klark.sys Browse all global symbols functions data Timestamp: Tue Sep 19 14:50:12 2023 (65097CE4) CheckSum: 0004D5B8 ImageSize: 0004A000 File version: 4.18.3.0 Product version: 4.18.3.0 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 Information from resource tables: CompanyName: AO Kaspersky Lab ProductName: Kaspersky Bases InternalName: klark OriginalFilename: klark.sys ProductVersion: 4.18.3.0 FileVersion: 4.18.3.0 FileDescription: Kaspersky Lab Anti-Rootkit LegalCopyright: © 2023 AO Kaspersky Lab. All Rights Reserved. LegalTrademarks: Registered trademarks and service marks are the property of their respective owners a5da0000 a5ea9000 HTTP (deferred) Image path: \SystemRoot\system32\drivers\HTTP.sys Image name: HTTP.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: D6325F13 (This is a reproducible build file hash, not a timestamp) CheckSum: 001075BC ImageSize: 00109000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: a5eb0000 a5ec8000 bowser (deferred) Image path: \SystemRoot\system32\DRIVERS\bowser.sys Image name: bowser.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 4A19FEB9 (This is a reproducible build file hash, not a timestamp) CheckSum: 0001C41F ImageSize: 00018000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: a5ed0000 a5ee1000 mpsdrv (deferred) Image path: \SystemRoot\System32\drivers\mpsdrv.sys Image name: mpsdrv.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: B5575FD1 (This is a reproducible build file hash, not a timestamp) CheckSum: 00016D5A ImageSize: 00011000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: a5ef0000 a5f6b000 mrxsmb (deferred) Image path: \SystemRoot\system32\DRIVERS\mrxsmb.sys Image name: mrxsmb.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 04F886E3 (This is a reproducible build file hash, not a timestamp) CheckSum: 000834D6 ImageSize: 0007B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: a5f70000 a5fa6000 mrxsmb20 (deferred) Image path: \SystemRoot\system32\DRIVERS\mrxsmb20.sys Image name: mrxsmb20.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 184A9DE4 (This is a reproducible build file hash, not a timestamp) CheckSum: 0003863F ImageSize: 00036000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: a5fb0000 a5fc8000 parport (deferred) Image path: \SystemRoot\System32\drivers\parport.sys Image name: parport.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: D827F000 (This is a reproducible build file hash, not a timestamp) CheckSum: 0001C681 ImageSize: 00018000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: a5fd0000 a5ffc000 klids (deferred) Image path: \??\C:\ProgramData\Kaspersky Lab\AVP21.15\Bases\klids.sys Image name: klids.sys Browse all global symbols functions data Timestamp: Tue Mar 14 19:10:47 2023 (64108E77) CheckSum: 0003E589 ImageSize: 0002C000 File version: 10.3.0.202 Product version: 10.3.0.202 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 2.0 Dll File date: 00000000.00000000 Translations: 0409.04b0 Information from resource tables: CompanyName: AO Kaspersky Lab ProductName: Coretech Delivery InternalName: klids ProductVersion: 10.3.0.202-dcad735722 FileVersion: 10.3.0.202 FileDescription: Network Processor [fre_win10_x86] LegalCopyright: © 2023 AO Kaspersky Lab. All Rights Reserved. LegalTrademarks: Registered trademarks and service marks are the property of their respective owners a6e00000 a6e2d000 ndiswan (deferred) Image path: \SystemRoot\System32\drivers\ndiswan.sys Image name: ndiswan.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 6A9582A5 (This is a reproducible build file hash, not a timestamp) CheckSum: 000346DD ImageSize: 0002D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: a6e30000 a6e3a000 asyncmac (deferred) Image path: \SystemRoot\System32\drivers\asyncmac.sys Image name: asyncmac.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: C2607113 (This is a reproducible build file hash, not a timestamp) CheckSum: 000129D2 ImageSize: 0000A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: a6e40000 a6e4d000 condrv (deferred) Image path: \SystemRoot\System32\drivers\condrv.sys Image name: condrv.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 099124BC (This is a reproducible build file hash, not a timestamp) CheckSum: 0001857E ImageSize: 0000D000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: a6e50000 a6f07000 peauth (deferred) Image path: \SystemRoot\system32\drivers\peauth.sys Image name: peauth.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 9EDED029 (This is a reproducible build file hash, not a timestamp) CheckSum: 000B60F4 ImageSize: 000B7000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: a6f10000 a6f1e000 tcpipreg (deferred) Image path: \SystemRoot\System32\drivers\tcpipreg.sys Image name: tcpipreg.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 1C4C62E9 (This is a reproducible build file hash, not a timestamp) CheckSum: 0000C69D ImageSize: 0000E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: a6f20000 a6f34000 rassstp (deferred) Image path: \SystemRoot\System32\drivers\rassstp.sys Image name: rassstp.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: EE30D09D (This is a reproducible build file hash, not a timestamp) CheckSum: 00020346 ImageSize: 00014000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: a6f40000 a6f57000 NDProxy (deferred) Image path: \SystemRoot\System32\DRIVERS\NDProxy.sys Image name: NDProxy.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 412CDF83 (This is a reproducible build file hash, not a timestamp) CheckSum: 000191F7 ImageSize: 00017000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: a6f60000 a6f7e000 AgileVpn (deferred) Image path: \SystemRoot\System32\drivers\AgileVpn.sys Image name: AgileVpn.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 52863FDA (This is a reproducible build file hash, not a timestamp) CheckSum: 0001AB7D ImageSize: 0001E000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: a6f80000 a6f99000 rasl2tp (deferred) Image path: \SystemRoot\System32\drivers\rasl2tp.sys Image name: rasl2tp.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 9F4CDF72 (This is a reproducible build file hash, not a timestamp) CheckSum: 00023884 ImageSize: 00019000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: a6fa0000 a6fb8000 raspptp (deferred) Image path: \SystemRoot\System32\drivers\raspptp.sys Image name: raspptp.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 798C5F0F (This is a reproducible build file hash, not a timestamp) CheckSum: 000134C5 ImageSize: 00018000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: a6fc0000 a6fd6000 raspppoe (deferred) Image path: \SystemRoot\System32\DRIVERS\raspppoe.sys Image name: raspppoe.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: 6CC227FC (This is a reproducible build file hash, not a timestamp) CheckSum: 0001D775 ImageSize: 00016000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables: a6fe0000 a6feb000 ndistapi (deferred) Image path: \SystemRoot\System32\DRIVERS\ndistapi.sys Image name: ndistapi.sys Browse all global symbols functions data Image was built with /Brepro flag. Timestamp: FFD0E008 (This is a reproducible build file hash, not a timestamp) CheckSum: 0000823F ImageSize: 0000B000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables:
Unloaded modules: a6ff0000 a6ffe000 MSKSSRV.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 0000E000 919c0000 919ec000 klids.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 0002C000 93f80000 93f8e000 MSKSSRV.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 0000E000 a5fd0000 a5fd7000 parvdm.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 00007000 8fd40000 8fd4b000 dump_ataport.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 0000B000 8fd60000 8fd69000 dump_atapi.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 00009000 8fd90000 8fda7000 dump_dumpfve.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 00017000 90720000 90735000 dam.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 00015000 8717f000 87189000 klelam.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 0000A000 87d44000 87d51000 hwpolicy.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 0000D000
|
|
|
|
|
gid97
|
Заголовок сообщения: Re: Нет режима AHCI в биосе Samsung R410(R20) Добавлено: 10 янв 2024, 22:26 |
Интересующийся |
|
|
Зарегистрирован: 30 авг 2015, 13:35 Наличности на руках: 33.14
Сообщения: 45 Откуда: kzn
|
Norman_Beits писал(а): SSD не загнется из за отсутствия TRIM? Из личного опыта, возможно, но в ''эксперименте" участвовал ssd фирмы netac. Загнулся в течении 3-4-х месяцев
|
|
|
|
|
Norman_Beits
[ТС]
|
Заголовок сообщения: Samsung R410 (Unknow) Пропадает изображение после простоя Добавлено: 02 фев 2024, 21:02 |
Я тут случайно |
|
|
Зарегистрирован: 07 окт 2023, 16:09 Наличности на руках: 11.01
Сообщения: 4 Откуда: Астрахань
|
На старенький ноутбук Samsung R410 установил Windows 10. Драйвера на видеокарту ATI Radeon Xpress 1250 брал от Висты, встали без проблем(хотя он отображается в диспетчере устройств как Xpress 1200, восклицательных знаков нет). Изображение качественное, претензий нет. Также через реестр запретил обновлять драйвера видеокарты. Проблема: обычно сделано так, что при бездействии гаснет экран, а если пошевелишь мышкой-изображение появляется. У меня же после простоя не появляется изображение, хотя подсветка работает(эдакий темный экран с подсветкой). Хотя сам ноутбук работой, кулер молотит, и даже в сон переходит(подсветка гаснет, абсолютно черный экран), если нажать комбинацию гор.клавиш, и из сна выходит(подсветка включается), но также нет изображения. Подключал в этот момент через VGA порт внешний монитор, на нем также нет изображения. Если крышку ноутбука не трогать, выключить его с кнопки, то при следующем включении изображение появляется при загрузке Windows, т.е. дело не в шлейфе. SSD и ОЗУ проверял Викторией и МемТест соответственно через дос, ошибок нет.
|
|
|
|
|
igils
|
Заголовок сообщения: Re: Нет режима AHCI в биосе Samsung R410(R20) Добавлено: 02 фев 2024, 21:22 |
Зарегистрирован: 23 июл 2011, 14:13 Наличности на руках: 14,589.36
Сообщения: 11550 Откуда: Ульяновск
|
Зачем плодить темы про один ноутбук? 1 аппарат - 1 тема, хоть с кучей вопросов. А по теме - поставить XP со своими драйверами и посмотреть, будет иметь место проблема или нет. От этого и плясать дальше. Ибо не для W10 этот ноутбук.
|
|
|
|
|
REM
|
Заголовок сообщения: Re: Нет режима AHCI в биосе Samsung R410(R20) Добавлено: 02 фев 2024, 21:33 |
Продвинутый форумчанин |
|
|
Зарегистрирован: 09 июн 2011, 00:04 Наличности на руках: 1,809.16
Сообщения: 1715 Откуда: Краснодар
|
Цитата: Radeon Xpress 1250 Цитата: R410 (Unknow) точнее - XI’AN AMD RS600ME & SB600 ... и чего вы от этого старья хотите то... 2008-й год....какая на вин10 молитесь что оно не сдохло ещё (хотя должно было лет 8 назад ещё ласты склеять) какой на ссд.... слова тогда такого ещё даже не знали там sata 1....
_________________ Компонентный ремонт ноутбуков в Краснодаре. +7 961 5O8-57-55 ( не посредник )
|
|
|
|
|
Norman_Beits
[ТС]
|
Заголовок сообщения: Re: Нет режима AHCI в биосе Samsung R410(R20) Добавлено: 03 фев 2024, 01:33 |
Я тут случайно |
|
|
Зарегистрирован: 07 окт 2023, 16:09 Наличности на руках: 11.01
Сообщения: 4 Откуда: Астрахань
|
igils писал(а): А по теме - поставить XP со своими драйверами Под XP работал отлично, не было никаких ошибок....Я чего решил на 10 перейти, на XP нету больше обновлений яндекс браузера , и многие сайты не открывает, пишет, что не поддерживаемый протокол или что-то в этом роде, т.е. сайты переходят уже на новые технологии, а браузер у меня старый. Считай без инета, зачем такой ноут, только как печатающая машинка. REM писал(а): ... и чего вы от этого старья хотите то... 2008-й год....какая на вин10 Я это все понимаю, просто пока нет возможности другой ноут приобрести. Вроде он работает на вин 10, только надо разобраться в ошибках. Там еще у меня синие экраны выходят. Сейчас приложу минидампы, гляньте, пожалуйста. P.S. мне без разницы, будет ли он на SSD, либо HDD, главное, чтобы работал на Win10. Так мой ноут должен дружить с SSD, ведь скорость для меня не критична? Я понимаю, самое простое выкинуть ноут, но мы же не так воспитаны, раз железо еще живое, надо выжить из него максимально полезное, и чтобы он еще послужил-так меня воспитали!(так то он почищен, термопаста заменена)
У вас нет доступа для просмотра вложений: 1. Пожалуйста авторизуйтесь или зарегистрируйтесь. 2. Вы должны иметь 15 (ПЯТНАДЦАТЬ) или более сообщений. 3. У нас можно купить доступ к файлам.
|
|
|
|
|
Norman_Beits
[ТС]
|
Заголовок сообщения: Re: Нет режима AHCI в биосе Samsung R410(R20) Добавлено: 03 фев 2024, 12:57 |
Я тут случайно |
|
|
Зарегистрирован: 07 окт 2023, 16:09 Наличности на руках: 11.01
Сообщения: 4 Откуда: Астрахань
|
REM писал(а): у меня синклер есть..... Синклер и подобное-это уже раритет, но на нем можно Дос или Бейсик осваивать , при этом не шумит, не греется особо, кулеров то нет, экономичный. Вы там у друзей/знакомых своих поспрашивайте, или мб по работе у ваших клиентов, не приходилось ли им/вам устанавливать на Samsung R410(R20) Windows 10, и насколько стабильно он работал? Как говорится, самый верный способ -выяснить через статистику - у народа как вообще работает на таких ноутах десятка?
|
|
|
|
|
Norman_Beits
[ТС]
|
Заголовок сообщения: Re: Нет режима AHCI в биосе Samsung R410(R20) Добавлено: 04 фев 2024, 21:23 |
Я тут случайно |
|
|
Зарегистрирован: 07 окт 2023, 16:09 Наличности на руках: 11.01
Сообщения: 4 Откуда: Астрахань
|
REM писал(а): в Астрахани надеюсь не все такие....... дибилы Ты чего себе позволяешь? Ты сам дебил! RsM писал(а): Вы почитайте системные требования, и не минимальные, а нормальные. и ПЕРЕСТАНЬТЕ заниматься фигней. Ладно Например, Вконтакт не хочет открываться на старых браузерах, и дело тут не столько в сертификате, как я понял, а в устаревшем браузере
|
|
|
|
|
BMA
|
Заголовок сообщения: Re: Нет режима AHCI в биосе Samsung R410(R20) Добавлено: 04 фев 2024, 23:26 |
Продвинутый форумчанин |
|
|
Зарегистрирован: 08 окт 2013, 00:56 Наличности на руках: 698.76
Сообщения: 1235 Откуда: Kohma
|
Norman_Beits писал(а): на Samsung R410(R20) Windows 10, и насколько стабильно он работал? Там WIN 7 x86 ещё работает , как то . Celeron + 512Mb . У меня знакомый извращенец пытался 11ую поставить . Сейчас сидит на этом железе с LINUX , вроде Runtu 14 с чем то и не жужжит . Версии выше - тормозят . Были проблемы с радиковскими дровами - нашлись , хвала Вселенной . Norman_BeitsНельзя сделать из Лады калины ( не к ночи будет вспомнено , чур меня ) - Порш . Суть перехода на новое железо - в новые процессоры инструкции встроены на аппаратном уровне , а из ОС и дровов и программ эмуляторы этих инструкций удалены - по тому и не работает . Есть куча хороших линуксов - на год , два продлит работу изделия .
_________________ "Анархия -мать порядка " - вольная трактовка "Теории хаоса "
|
|
|
|
|
Norman_Beits
[ТС]
|
Заголовок сообщения: Re: Нет режима AHCI в биосе Samsung R410(R20) Добавлено: 05 фев 2024, 00:30 |
Я тут случайно |
|
|
Зарегистрирован: 07 окт 2023, 16:09 Наличности на руках: 11.01
Сообщения: 4 Откуда: Астрахань
|
BMA писал(а): Суть перехода на новое железо - в новые процессоры инструкции встроены на аппаратном уровне , а из ОС и дровов и программ эмуляторы этих инструкций удалены - по тому и не работает . Ну понятно, как я и предполагал, больше не буду терять время. Спасибо.
|
|
|
|
|
|
|
|
|
|
|
Страница 1 из 1 [ Сообщений: 20 ] |
|
|
Вы не можете начинать темы Вы не можете отвечать на сообщения Вы не можете редактировать свои сообщения Вы не можете удалять свои сообщения Вы не можете добавлять вложения
|
|